Last updated: July 29, 2026
SWAG by BaliGoat ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at swag.baligoat.com and purchase our products.
We operate from Bali, Indonesia, and sell premium batik surfboard covers worldwide. By using our website, you agree to the collection and use of information in accordance with this policy.
Contact: If you have any questions about this Privacy Policy, please contact us at [email protected] or through our parent company BaliGoat.
1. Information We Collect
1.1 Personal Information You Provide
When you make a purchase or interact with our site, we may collect:
- Contact details: Full name, email address, phone number, and shipping address
- Payment information: Payment card details are collected and processed by Stripe. We do not store full credit card numbers on our servers
- Order details: Product selections, size preferences, order history, and shipping preferences
- Communications: Messages you send us via email or contact forms
1.2 Information Collected Automatically
When you visit our website, certain information is automatically collected:
- Device and browser information: IP address, browser type, operating system, device type
- Usage data: Pages visited, time spent on pages, referral source, click patterns
- Cookies and similar technologies: We use cookies and tracking technologies as described in Section 5
2. How We Use Your Information
We use the collected information for the following purposes:
- Order processing and fulfillment: To process your purchases, arrange shipping, and provide order confirmations and tracking updates
- Customer support: To respond to your inquiries, resolve issues, and provide assistance with your orders
- Communication: To send you order-related updates, shipping notifications, and, with your consent, promotional materials about new designs and collections
- Website improvement: To analyze usage patterns, improve our website experience, and optimize product offerings
- Legal compliance: To comply with applicable laws, regulations, and legal processes
- Fraud prevention: To detect and prevent fraudulent transactions and unauthorized activity
3. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), our processing of your personal data is based on the following legal grounds:
- Contractual necessity: Processing is necessary to fulfill your order and deliver products you have purchased (Art. 6(1)(b) GDPR)
- Legitimate interests: Processing for website analytics, fraud prevention, and improving our services (Art. 6(1)(f) GDPR)
- Consent: Processing for marketing and promotional communications where you have given explicit consent (Art. 6(1)(a) GDPR)
- Legal obligation: Processing required to comply with legal obligations such as tax and accounting records (Art. 6(1)(c) GDPR)
4. Third-Party Services
We share your data only with trusted third-party service providers who help us operate our business:
- Stripe — Payment processing. Stripe collects and processes your payment information securely. See Stripe's Privacy Policy for details
- Google Analytics — Website analytics. Google collects anonymized usage data to help us understand how visitors interact with our site. See Google's Privacy Policy
- Shipping carriers — We share your name, address, and phone number with our shipping partners for delivery purposes
- Email services — We may use email service providers to send order confirmations and, with consent, marketing communications
We do not sell your personal information to third parties for their own marketing purposes.
5. Cookies Policy
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts.
Types of Cookies We Use
- Essential cookies: Necessary for the website to function properly, including shopping cart functionality and session management. These cannot be disabled
- Analytics cookies: Help us understand how visitors interact with our website through Google Analytics. This data is anonymized and aggregated
- Functional cookies: Remember your preferences and settings for a better browsing experience
- Stripe cookies: Used by our payment processor to facilitate secure transactions and prevent fraud
Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of our website.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy:
- Order information: Retained for the duration required by applicable tax and accounting laws (typically 5-7 years)
- Contact information: Retained as long as your account is active or as needed to provide services
- Marketing data: Retained until you withdraw consent or opt out of marketing communications
- Analytics data: Retained in anonymized or aggregated form indefinitely
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal data, including:
- SSL/TLS encryption for all data transmitted between your browser and our servers
- Payment data is processed entirely by Stripe using PCI DSS compliant infrastructure
- Access controls and authentication for internal data access
- Regular security reviews and updates
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet is 100% secure.
8. Your Rights (GDPR & Privacy Rights)
If you are in the EEA, UK, or other jurisdictions with data protection laws, you have the following rights:
- Right to access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data where applicable
- Right to restrict processing: Request limited processing of your data
- Right to data portability: Request transfer of your data to another service provider
- Right to object: Object to processing based on legitimate interests or direct marketing
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
9. International Data Transfers
As we are based in Bali, Indonesia, your personal data may be transferred to and processed in Indonesia and other countries where our service providers operate. When transferring data outside the EEA, we ensure appropriate safeguards are in place through Standard Contractual Clauses or equivalent mechanisms.
10. Children's Privacy
Our website and products are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
- Email: [email protected]
- Parent company: BaliGoat
- Location: Bali, Indonesia
- Website: swag.baligoat.com