Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“It is generated and held by Persona until we inform them that the biometric identifier is no longer needed for the purposes described in this paragraph and must be destroyed.”
“By providing us with personal information, you acknowledge and agree that your personal information may be transferred to other jurisdictions for processing and storage, including in servers located across Canada and in the United States, where laws regarding the protection of personal information may be less stringent...”
“EU, UK and Swiss individuals may, under certain circumstances, invoke binding arbitration with respect to complaints about our collection and use of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.”
“We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union...”
“We do not use, disclose or retain your biometric information for any other commercial purpose.”
“We may also share personal information with advertising networks or permit these partners to collect information from you directly on our Sites to facilitate online advertising, such as search engines and social network advertising providers to serve targeted ads...”
This document explains what personal information GOAT collects, how it uses and shares that information, and what rights you have over it. GOAT may share your information with advertising networks for targeted ads and with shipping partners for delivery communications, and your biometric data is held by a third-party service until GOAT tells that service to delete it. You have the right to tell GOAT not to sell your personal information or share it for cross-context behavioral advertising.
This privacy policy establishes GOAT's data collection, usage, sharing, retention, and user rights framework. GOAT may share personal information with advertising networks—either directly or by permitting those networks to collect it from GOAT's sites—and shares contact information such as phone numbers with shipping and delivery partners. Biometric identifiers are held by a third-party processor (Persona) and persist until GOAT actively instructs Persona to destroy them; biometric information is restricted to the described purposes and not used for any other commercial purpose. Users retain the right to direct GOAT not to sell or share their personal information for cross-context behavioral advertising, and not to apply automated decision-making or profiling for certain purposes. GOAT has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles for personal data received from the European Union, and the policy treats the act of providing personal information as acknowledgment of and agreement to potential transfer to Canada or the United States.
As a GOAT user, your personal information may be shared with advertising networks—including by allowing those networks to collect it directly from GOAT's sites—and your phone number is shared with shipping and delivery partners who may contact you about deliveries. If you are located in the EU, UK, or Switzerland, you may invoke binding arbitration over complaints about GOAT's collection and use of your personal data under the applicable Data Privacy Frameworks. Your biometric identifier is retained by a third-party processor until GOAT instructs that processor to destroy it. You can direct GOAT not to sell your personal information or share it for cross-context behavioral advertising, and you can direct GOAT not to apply automated decision-making or profiling for certain purposes.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“It is generated and held by Persona until we inform them that the biometric identifier is no longer needed for the purposes described in this paragraph and must be destroyed.”
“By providing us with personal information, you acknowledge and agree that your personal information may be transferred to other jurisdictions for processing and storage, including in servers located across Canada and in the United States, where laws regarding the protection …”
“EU, UK and Swiss individuals may, under certain circumstances, invoke binding arbitration with respect to complaints about our collection and use of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the …”
“We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union...”
“We do not use, disclose or retain your biometric information for any other commercial purpose.”
“We may also share personal information with advertising networks or permit these partners to collect information from you directly on our Sites to facilitate online advertising, such as search engines and social network advertising providers to serve targeted ads...”
“Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 16 (or 18 for individuals located in China)...”
“We do not share SMS consent and the related phone numbers with third parties, except (i) with our shipping and logistics partners as necessary to send you delivery-related text messages, and (ii) as otherwise disclosed in this Privacy Policy.”
“The Right to Control over Automated Decision-Making/Profiling. The right to direct us not to use automated decision-making or profiling for certain purposes.”
“The Right to Opt-Out of Sales or Sharing for Targeted Advertising. The right to direct us not to "sell" personal information we have collected about you to third parties for monetary or other valuable consideration, or "share" your personal information …”
“We will usually store the personal information we collect about you for no longer than necessary to fulfill the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law.”
“sharing certain contact information, such as your phone number, with our shipping and delivery partners so that they may contact you via SMS text message or other means regarding your delivery”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Biometric identifier held by Persona until destruction instructed and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.