GOAT Privacy Policy

This document is GOAT's Privacy Policy, governing the collection, use, and sharing of personal information across GOAT's global platform for sneakers, apparel, and accessories, with stated applicability to users in the US, EU, UK, Canada, Australia, and other jurisdictions. The policy states that GOAT collects a broad range of personal data including identifiers, commercial transaction data, device and usage information, geolocation data, payment information, and inferences drawn from user behavior, and the terms authorize use of this data for purposes including marketing, advertising, analytics, and sharing with third-party business partners and service providers. The policy's authorization to share data with 'business partners' for their own marketing purposes, and to derive behavioral inferences from user activity, represents a scope of secondary data use that consumers may not anticipate from a retail platform, though applicable law in various jurisdictions may constrain how broadly these authorizations can be exercised in practice. The policy engages GDPR and UK GDPR for EU and UK residents, the California Consumer Privacy Act and California Privacy Rights Act for California residents, and general FTC Act consumer protection standards; rights afforded vary materially by jurisdiction, with EU and California users receiving more substantive access, deletion, and opt-out entitlements than users in other regions. Compliance teams should note the policy's simultaneous operation across multiple regulatory regimes, the inclusion of targeted advertising opt-out mechanisms, and the broad framing of 'business partners' as data recipients, each of which warrants careful mapping against applicable legal obligations.