Privacy policy

Last updated: October 20, 2026

Welcome to The Goth Society. We respect your privacy and are committed to being transparent about how we collect, use, disclose, and protect your personal information.

The Goth Society is operated by Herivana LLC, a company registered in New Mexico, United States ("The Goth Society," "we," "us," or "our").

This Privacy Policy applies to the United States storefront of www.thegothsociety.com, including our website, online store, related services, and communications (collectively, the "Services"). Other regional storefronts may provide additional privacy notices reflecting applicable local laws.

Our store is powered by Shopify. This Privacy Policy explains how we handle personal information when you browse our website, place an order, interact with advertisements, subscribe to marketing communications, or contact customer support.

Where applicable, this Privacy Policy also explains your rights under United States federal and state privacy laws.

1. Personal Information We Collect

Depending on how you interact with our Services, we may collect the following categories of personal information:

Contact information: name, email address, telephone number, billing address, and shipping address.
Order and transaction information: products purchased, order history, payment status, shipping information, returns, refunds, and related transaction details.
Payment information: payment method, payment confirmation, transaction identifiers, and limited payment-related details made available by our payment providers. Complete payment card information is generally processed by our payment providers rather than stored directly by us.
Account information: account identifiers, login-related information, preferences, and account settings where applicable.
Customer service information: messages, support requests, photographs, correspondence, and information you provide when contacting us.
Device and technical information: IP address, browser type, device identifiers, operating system, approximate location derived from IP address, and website interaction data.
Shopping and browsing information: pages visited, products viewed, search activity, shopping cart activity, purchases, and interactions with our advertisements.
Marketing preferences: newsletter subscriptions, consent preferences, email engagement, and advertising opt-out choices.
Inferences: interests or shopping preferences derived from your interactions with our store, where permitted by applicable law.

We do not intentionally request sensitive personal information unless reasonably necessary for a specific legitimate purpose. Please do not send sensitive personal or financial information through ordinary customer support messages.

2. How We Collect Personal Information

We collect personal information from several sources:

Directly from you: when you place an order, create an account, subscribe to marketing communications, submit a form, or contact us.
Automatically: through cookies, pixels, tags, server-side integrations, and similar technologies when you interact with our website.
From service providers: including Shopify, payment processors, shipping providers, and customer support platforms.
From advertising and analytics partners: where permitted by law, including information about interactions with advertisements and marketing campaigns.
From other sources: where you authorize the disclosure or where otherwise permitted by applicable law.

3. How We Use Personal Information

We may use personal information for the following purposes:

Order processing: accepting payments, fulfilling purchases, arranging deliveries, processing refunds, and managing order-related communications.
Customer support: responding to enquiries, investigating problems, resolving complaints, and providing assistance.
Store operations: maintaining customer accounts, remembering shopping preferences, improving navigation, and providing relevant product recommendations.
Analytics: understanding website traffic, customer behavior, conversion performance, and opportunities to improve our Services.
Marketing: sending promotional communications where permitted, measuring campaign performance, and delivering relevant advertisements.
Security: detecting fraud, preventing unauthorized transactions, protecting customer accounts, and maintaining website security.
Legal compliance: meeting applicable legal, accounting, tax, recordkeeping, and regulatory obligations.
Business administration: managing our operations, enforcing our policies, and handling legitimate business transactions.

We use personal information only for purposes permitted by applicable law and take reasonable steps to limit processing to what is necessary for those purposes.

4. Shopify and E-Commerce Services

Our online store is hosted by Shopify, which provides the technology necessary to operate our website, shopping cart, checkout, and related commerce services.

Shopify collects and processes personal information to provide and improve its services, including information about your interactions with our store.

We may use Shopify features that support fraud prevention, analytics, personalization, and advertising. Certain enhanced Shopify services may use information about interactions with our store and other merchants or Shopify services, as described in Shopify's applicable privacy notices.

In circumstances where Shopify independently determines the purposes and means of processing personal information, Shopify may be responsible for responding to privacy requests relating to that processing.

For additional information, please review:

5. Advertising, Analytics, and Marketing Partners

We use third-party services to understand website performance, communicate with customers, and advertise our products.

These services may collect or receive information through cookies, tracking pixels, conversion tags, server-side integrations, and other technologies, subject to applicable law and privacy preferences.

Google Ads and Google Analytics 4 (GA4)

We use Google services to measure website traffic, analyze shopping behavior, evaluate advertising performance, and support relevant advertising campaigns.

Information processed may include website interactions, device information, advertising identifiers, conversion events, and transaction-related information, depending on our configuration.

Meta Pixel and Meta advertising services

We use Meta advertising technologies to measure advertising effectiveness, understand interactions with our website, and support relevant advertising on Meta platforms, such as Facebook and Instagram.

Depending on the integration, information may be collected through browser-based technologies or transmitted through server-side connections.

Klaviyo

We use Klaviyo to manage email marketing, customer communications, audience segmentation, and certain shopping-related marketing workflows.

Depending on your preferences and applicable law, this may include promotional emails, product recommendations, and reminders relating to shopping cart activity.

Reamaze

We use Reamaze to manage customer support enquiries and related communications. This may include processing your contact details, order information, support messages, and information necessary to resolve your request.

Our advertising and technology partners may process personal information in accordance with their own privacy policies and applicable agreements with us.

We do not authorize these providers to use information on our behalf for purposes unrelated to the services they provide, except where they act independently under their own applicable terms and privacy notices.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to support essential store functions, understand website usage, improve performance, and support advertising.

These technologies may include:

Essential cookies: required for shopping cart functionality, checkout, security, authentication, and other necessary website operations.
Analytics cookies: used to understand website traffic, visitor interactions, and store performance.
Advertising cookies and pixels: used to measure advertising campaigns, understand conversions, and support relevant advertisements.
Preference technologies: used to remember certain settings and choices.

Some information may also be collected or transmitted through server-side tracking technologies that do not depend exclusively on browser cookies.

You can manage certain cookies through your browser settings and, where available, through the privacy preference controls provided on our website.

Blocking essential cookies may affect the functionality of our Services.

Where applicable law requires consent or provides an opt-out right, we will respect those requirements through our available privacy controls and relevant technical integrations.

7. Email Marketing and Communications

We may send promotional emails, newsletters, product announcements, special offers, and other marketing communications where permitted by applicable law.

You may unsubscribe from promotional emails at any time using the unsubscribe link included in those messages or by contacting us at info@thegothsociety.com.

Unsubscribing from promotional communications does not prevent us from sending necessary transactional or service-related messages, such as order confirmations, shipping notifications, and responses to customer support enquiries.

We do not treat a purchase alone as unlimited permission to send marketing communications.

8. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary:

Commerce and hosting providers: including Shopify and related technology providers.
Payment processors: to authorize and complete transactions, manage refunds, and prevent fraud.
Fulfillment and shipping partners: to prepare, ship, track, and deliver orders.
Customer support providers: including Reamaze and other authorized support tools.
Marketing and analytics providers: including Google, Meta, and Klaviyo, as applicable.
Professional advisers: including legal, accounting, and compliance providers where necessary.
Government authorities: when disclosure is required by applicable law or valid legal process.
Business successors: in connection with a merger, acquisition, restructuring, or sale of business assets, subject to applicable law.

We may also disclose information when you direct or authorize us to do so.

We do not sell customer contact lists to data brokers for their independent direct marketing purposes.

However, certain disclosures to advertising and technology partners may be classified as a "sale," "sharing," or "targeted advertising" under some United States state privacy laws, even when no money is exchanged for personal information.

Where applicable, we provide mechanisms to opt out of these activities.

9. Your Privacy Choices and Advertising Opt-Out

Depending on your state of residence and applicable law, you may have the right to opt out of the sale or sharing of personal information, or the use of personal information for targeted advertising.

You can access our privacy choice mechanism here:

Your Privacy Choices

You may also contact info@thegothsociety.com for assistance with an applicable privacy request.

Where required by applicable law, we recognize supported opt-out preference signals, including Global Privacy Control (GPC), as a request to opt out of covered activities for the relevant browser or device and, where reasonably identifiable and legally required, associated information.

Learn more about Global Privacy Control at globalprivacycontrol.org.

Opting out of targeted advertising does not necessarily mean you will stop seeing advertisements. You may continue to see advertisements that are contextual or otherwise not based on covered cross-site tracking.

Privacy choices may apply differently across browsers, devices, and services, depending on applicable law and the available technical controls.

10. United States State Privacy Rights

Residents of certain United States states may have additional rights regarding their personal information, depending on the applicable law and whether that law applies to our business.

These rights may include:

Right to know or access: request information about personal information we collect, use, and disclose.
Right to delete: request deletion of eligible personal information, subject to lawful exceptions.
Right to correct: request correction of inaccurate personal information.
Right to data portability: request a copy of certain personal information in a portable format, where applicable.
Right to opt out: opt out of certain sales, sharing, or targeted advertising activities.
Right to limit certain sensitive information uses: where such a right applies to information we process.
Right to appeal: appeal certain decisions concerning privacy requests, where provided by applicable law.
Right to non-discrimination: exercise applicable privacy rights without unlawful discriminatory treatment.

To submit a request, contact info@thegothsociety.com or use the privacy controls available on our website.

We may need to verify your identity or authority before processing certain requests. We may also retain information where permitted or required by law, including for fraud prevention, accounting, tax obligations, and transaction records.

Where permitted, an authorized agent may submit a request on your behalf. We may request reasonable evidence of authorization and verification as allowed by law.

We will respond within the time limits required by applicable law and provide information about available appeal rights where required.

11. California Privacy Disclosures

This section provides additional information for California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to our business and processing activities.

Within the preceding 12 months, depending on your interactions with our Services, we may have collected the following categories of personal information:

Identifiers, such as names, email addresses, IP addresses, and account identifiers.
Customer records and commercial information, such as contact details, purchases, and transaction history.
Internet or other electronic network activity, such as browsing behavior and interactions with our website.
Approximate geolocation information derived from IP addresses.
Inferences relating to shopping preferences or interests.
Customer support content and other information voluntarily provided to us.

We collect and use these categories for the business and commercial purposes described in this policy.

We may disclose these categories to service providers, contractors, payment and fulfillment partners, analytics providers, and advertising partners, as described in Section 8.

Some disclosures of identifiers, device information, browsing activity, or related inferences to advertising partners may constitute "sharing" or "selling" under California law.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

California residents may exercise applicable rights through our Your Privacy Choices page or by contacting us.

We do not use sensitive personal information for purposes that would require a separate right to limit its use unless we provide the legally required notice and controls.

Our retention practices are described in Section 13.

12. Children's Privacy

Our Services are intended for a general adult audience and are not directed to children under 13.

We do not knowingly collect personal information directly from children under 13 without legally required parental authorization.

If we become aware that we have collected such information in violation of applicable law, we will take appropriate steps to delete it.

If you are a parent or guardian and believe a child has provided us with personal information, please contact us.

We do not knowingly sell or share personal information of individuals under 16 years of age for purposes covered by applicable state privacy laws.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

Retention periods depend on the nature of the information and the purpose for which it was collected.

Order and transaction records: retained as needed for fulfillment, accounting, tax, legal compliance, fraud prevention, and dispute resolution.
Customer support records: retained as reasonably necessary to resolve enquiries, maintain service history, address complaints, and manage legal obligations.
Marketing information: retained while relevant to our marketing relationship or until an applicable opt-out, deletion request, or retention limit requires otherwise.
Website analytics and advertising data: retained according to our configured settings, applicable provider retention periods, and legal requirements.
Account information: retained while an account remains active and for a reasonable period afterward where necessary for legitimate operational or legal purposes.

When personal information is no longer reasonably required, we will delete, anonymize, or otherwise handle it in accordance with applicable law and our operational capabilities.

We may retain limited information necessary to honor opt-out requests and prevent future unwanted communications.

14. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include secure commerce infrastructure, restricted access to customer information, access controls, and security features provided by Shopify and our service providers.

No website, transmission method, or storage system can be guaranteed to be completely secure.

We encourage customers to protect their account credentials and avoid sending sensitive financial information through unsecured communication channels.

15. International Data Processing

We operate an online business supported by service providers and fulfillment partners that may process personal information in different countries.

Your personal information may be transferred to, stored in, or accessed from countries outside your state or country of residence, including the United States and other locations where our service providers operate.

Where required by applicable law, we use appropriate contractual, organizational, or other safeguards for international transfers.

For customers purchasing through other regional storefronts, additional international transfer disclosures may apply.

16. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, payment services, or other external services.

These third parties may have their own privacy policies and data practices.

We encourage you to review their privacy notices before providing personal information to them.

We are not responsible for the privacy practices of websites or services that we do not control.

17. Privacy Complaints and Appeals

If you have questions or concerns about how we handle your personal information, please contact us using the information below.

We will review your concern and respond in accordance with applicable law.

If a relevant state privacy law gives you the right to appeal a decision regarding your privacy request, you may submit an appeal by emailing us with the subject line "Privacy Rights Appeal".

Where applicable, we will also provide information about your ability to contact the relevant regulatory authority.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our operations, technology, service providers, legal obligations, or privacy practices.

When we make changes, we will update the "Last updated" date at the top of this page.

Where required by applicable law, we will provide additional notice of material changes.

19. Contact Information

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need assistance with your personal information, please contact:

The Goth Society
Operated by Herivana LLC
Email: info@thegothsociety.com
Phone: +1 256 770 0001

Registered business address:
1012 Marquez Pl, Suite 201 B
Santa Fe, NM 87505
United States

For privacy-related requests, please include "Privacy Request" in the subject line of your email so that our team can direct your enquiry appropriately.