Trust Center

Effective Date: July 31, 2026

Last Updated: July 31, 2026

CrownThrive LLC, a Virginia limited liability company operating Good Shit Only™ (“Good Shit Only,” “GSO,” “CrownThrive,” “we,” “us,” or “our”), respects your privacy and is committed to handling personal information responsibly, transparently, and in accordance with applicable law.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or use GoodShitOnly.com, create an account, purchase or sell products or services, enroll in a membership plan, participate in the affiliate program, communicate through the marketplace, submit a support request, receive a payout, or otherwise interact with the Good Shit Only platform.

This Privacy Policy applies to the Good Shit Only website, marketplace, buyer and vendor dashboards, Help Center, Knowledge Base, support systems, membership features, affiliate features, communications, and other services that link to this Policy, collectively referred to as the “Platform.”

By accessing or using the Platform, you acknowledge the privacy practices described in this Policy. Where applicable law requires consent for a particular activity, we will request that consent separately.

This Privacy Policy is incorporated into the Good Shit Only Terms & Conditions. Terms not defined in this Policy have the meanings assigned to them in the Terms & Conditions.

Scope and Privacy Roles
Information We Collect
Sources of Personal Information
How We Use Personal Information
Lawful Bases for Processing
How We Disclose Personal Information
Information Shared Between Buyers and Sellers
Payments and PayPal Payout Information
Cookies and Tracking Technologies
Advertising, Sale, Sharing, and Targeted Advertising
Automated Systems and Profiling
Data Retention
Data Security
Your Privacy Rights
Submitting and Appealing Privacy Requests
United States Privacy Disclosures
International Users
Children’s Privacy
Communication Choices
Third-Party Services and Links
Aggregated and De-Identified Data
Changes to This Privacy Policy
Contacting Us

1. Scope and Privacy Roles

1.1 Privacy Controller

CrownThrive LLC is the business or data controller responsible for personal information processed through Good Shit Only when we determine why and how that information is used.

1.2 Marketplace Relationships

Good Shit Only operates a marketplace connecting buyers with independent sellers, creators, service providers, businesses, and affiliates.

When GSO processes personal information to administer accounts, facilitate transactions, operate the Platform, manage payments and payouts, provide support, prevent fraud, or comply with law, CrownThrive LLC acts as the applicable business or controller.

Independent sellers may separately determine how they use buyer information after receiving it to fulfill an order, deliver a service, manage legally permitted customer communications, comply with tax or recordkeeping obligations, or operate their independent businesses. In those circumstances, the seller may act as a separate business or controller and is independently responsible for complying with applicable privacy laws and GSO policies.

1.3 Supplemental Notices

We may provide additional privacy notices at the point where information is collected. Those notices supplement this Policy and may describe a specific program, feature, transaction, promotion, verification process, or category of information.

1.4 Information Outside This Policy

This Policy does not govern information processed entirely by an independent seller, payment provider, shipping carrier, social network, embedded service, external website, or other third party under that party’s own privacy practices.

2. Information We Collect

The information we collect depends on how you interact with the Platform, whether you are a visitor, buyer, seller, affiliate, member, service provider, or other user, and which features you use.

2.1 Account and Identity Information

We may collect:

Full name;
Username or display name;
Email address;
Telephone number;
Billing, residential, business, return, or shipping address;
Password and account authentication information;
Profile photograph, logo, biography, and other profile details;
Age or confirmation that you meet applicable eligibility requirements;
Account role, permissions, status, and membership level;
Communication and language preferences.

2.2 Seller and Business Information

For sellers, service providers, affiliates, and businesses, we may collect:

Legal name and business name;
Business structure and jurisdiction of organization;
Business address and contact details;
Taxpayer identification or tax-classification information;
Government-issued identification where verification is required;
Beneficial ownership or controlling-person information where required;
Business licenses, permits, certifications, insurance information, or professional credentials;
Store name, profile, policies, branding, and product information;
Supplier records, invoices, ownership evidence, authorization documents, and product-source information;
Verification status and compliance history;
PayPal account information and payout preferences;
Sales volume and information required for marketplace-seller verification or legally required disclosures.

2.3 Order and Transaction Information

We may collect information concerning:

Products, digital goods, licenses, memberships, or services viewed, purchased, sold, saved, or reviewed;
Order number, transaction date, amount, currency, discounts, fees, commissions, and taxes;
Shipping method, tracking information, delivery status, and return information;
Customization selections, service requirements, appointment details, and buyer instructions;
Refunds, cancellations, chargebacks, payment disputes, and order claims;
Affiliate attribution, referral source, referral code, and commission information;
Membership purchase, start date, expiration date, plan limits, and benefit usage;
Consultation scheduling and benefit-redemption information;
Communications associated with orders and transactions.

2.4 Payment Information

Payment information may include payment method type, payment status, billing address, transaction identifiers, authorization status, partial payment-card information, fraud-screening results, and other payment records.

Full payment-card numbers, bank credentials, or similar financial credentials may be collected directly by a third-party payment provider rather than stored by GSO. We receive information necessary to confirm, administer, reconcile, refund, or dispute the transaction.

2.5 PayPal Payout Information

For seller and affiliate payouts, we may collect:

PayPal email address or account identifier;
Payout eligibility and verification status;
Payout amounts, dates, references, and processing status;
Failed, rejected, returned, unclaimed, or reversed payout records;
Reserves, holds, adjustments, refunds, and negative balances;
Tax and identity information associated with payout eligibility.

2.6 Listings and User Content

We collect content users provide to the Platform, including:

Product and service descriptions;
Photographs, videos, audio, artwork, files, previews, and digital products;
Prices, inventory, variations, dimensions, materials, and fulfillment information;
Seller policies and store information;
Ratings, reviews, comments, questions, reports, and responses;
Community content and public profile information;
Intellectual-property notices, counter-notices, and supporting evidence.

Content published in a public listing, profile, review, discussion, or storefront may be visible to other users, search engines, social networks, affiliates, and the general public.

2.7 Communications and Support Information

We may collect:

Buyer and seller messages;
Emails, support tickets, Help Center submissions, and complaint records;
Consultation notes and appointment records;
Call, chat, or meeting details where those services are offered;
Files, screenshots, photographs, receipts, and other supporting documentation;
Feedback, survey responses, and customer-service history.

Where a call, meeting, or consultation is recorded, we will provide notice or obtain consent where required by applicable law.

2.8 Device, Internet, and Usage Information

We and our service providers may automatically collect:

Internet Protocol address;
Browser type and version;
Device type, operating system, and language;
Device identifiers and cookie identifiers;
Pages viewed, links selected, searches, clicks, and navigation activity;
Referral pages, campaign information, and affiliate attribution;
Session dates, times, duration, and approximate location derived from an IP address;
Login events, account activity, error logs, and security events;
Shopping-cart, wishlist, purchase, and marketplace-interaction data;
Performance, diagnostic, and technical information.

2.9 Location Information

We may infer an approximate location from your Internet Protocol address or use location information you provide for shipping, tax calculation, marketplace searches, fraud prevention, and legal compliance.

We do not collect precise geolocation information unless it is required for a feature, you authorize its collection, or applicable law otherwise permits it. We do not sell precise geolocation data.

2.10 Sensitive Personal Information

Depending on your use of the Platform, we may process sensitive information such as:

Account login credentials;
Government identification information;
Taxpayer identification information;
Financial, payment, or payout account information;
Precise geolocation if a specific feature requires and authorizes it;
Information contained in private marketplace communications;
Information necessary to prevent fraud, verify identity, or satisfy legal obligations.

We process sensitive personal information only for purposes reasonably necessary to provide the Platform, verify users, process transactions and payouts, secure accounts, prevent fraud, comply with law, or perform other legally permitted activities. We do not use sensitive personal information to infer characteristics about users for unrelated purposes.

3. Sources of Personal Information

We may collect personal information from:

You: when you create an account, complete a profile, submit a listing, purchase or sell an offering, communicate, join a program, or contact support.
Other users: when a buyer, seller, affiliate, or service provider provides information connected to a transaction, message, report, review, dispute, or referral.
Payment and payout providers: including payment processors and PayPal.
Shipping and fulfillment providers: including carriers, tracking providers, and delivery services.
Identity, fraud, and compliance providers: where verification, screening, or risk review is required.
Analytics, hosting, security, and technology providers: that support Platform operations.
Affiliate and advertising sources: including referral links, campaign parameters, promotional partners, and advertising platforms.
Social networks or connected accounts: when you choose to connect, sign in through, or interact with those services.
Public and commercial sources: including business registries, professional-license databases, sanctions lists, product-recall databases, public websites, and other lawful sources.
CrownThrive affiliates and programs: when permitted by law and reasonably related to your interaction with the CrownThrive ecosystem.

4. How We Use Personal Information

We may use personal information to:

4.1 Operate the Platform

Create, maintain, authenticate, and administer accounts;
Display profiles, storefronts, listings, products, services, reviews, and marketplace content;
Provide vendor dashboards, sales statistics, membership features, affiliate tools, and support resources;
Maintain shopping carts, wishlists, search functions, and marketplace preferences;
Personalize marketplace navigation and recommendations.

4.2 Facilitate Transactions

Process purchases, orders, payments, fees, commissions, refunds, and taxes;
Provide sellers with information needed to fulfill orders;
Coordinate shipping, delivery, digital access, services, and appointments;
Administer returns, cancellations, refunds, disputes, and chargebacks;
Send order confirmations, receipts, status notices, and transaction communications.

4.3 Administer Seller and Affiliate Payouts

Calculate seller proceeds and affiliate commissions;
Deduct marketplace fees, refunds, chargebacks, reserves, taxes, or other authorized amounts;
Send payments through PayPal or another approved method;
Investigate failed, unclaimed, returned, or disputed payouts;
Maintain payout and reconciliation records.

4.4 Verify Users and Businesses

Confirm identity, age, business status, ownership, licenses, tax information, and payout eligibility;
Satisfy marketplace-seller verification and disclosure obligations;
Evaluate seller qualifications, product sources, authorizations, and business records;
Detect duplicate, restricted, or previously terminated accounts.

4.5 Provide Support and Membership Benefits

Respond to Help Center requests and support tickets;
Schedule and deliver business consultations;
Administer CrownThrive Perks and eligible partner discounts;
Manage priority support queues and response levels;
Provide Knowledge Base, community, and educational resources.

4.6 Protect the Platform and Its Users

Prevent, identify, and investigate fraud, abuse, money laundering, identity theft, spam, malware, and unauthorized access;
Review suspicious transactions, listings, communications, reviews, and payout activity;
Protect product safety, intellectual property, privacy, security, and marketplace integrity;
Enforce the Terms & Conditions and Trust Center policies;
Maintain evidence and records associated with investigations or disputes.

4.7 Improve and Develop Services

Analyze Platform use and performance;
Troubleshoot errors and improve security;
Develop new features, services, categories, and support resources;
Conduct research, testing, measurement, and quality review;
Generate aggregated marketplace statistics and business insights.

4.8 Communicate With You

Send account, transaction, security, policy, tax, and service notices;
Respond to questions, reports, and complaints;
Send newsletters, promotions, seller opportunities, and marketplace announcements where permitted;
Request feedback and conduct surveys;
Notify you about material policy or feature changes.

4.9 Comply With Law

Meet tax, accounting, marketplace, payment, consumer-protection, privacy, product-safety, sanctions, and regulatory requirements;
Respond to lawful court orders, subpoenas, warrants, regulatory requests, and government inquiries;
Establish, exercise, or defend legal claims;
Protect the rights, safety, property, and lawful interests of CrownThrive, users, and the public.

5. Lawful Bases for Processing

Where applicable law requires us to identify a lawful basis, we process personal information based on one or more of the following:

Contract: processing necessary to provide the Platform, administer an account, complete a transaction, deliver membership benefits, or perform our contractual obligations.
Legal obligation: processing necessary to comply with tax, marketplace, payment, accounting, sanctions, consumer-protection, privacy, product-safety, or other legal requirements.
Legitimate interests: processing necessary to operate, protect, secure, improve, and promote the Platform, prevent fraud, resolve disputes, support users, and conduct reasonable business operations, where those interests are not overridden by applicable individual rights.
Consent: processing based on permission you provide, including certain marketing, cookie, precise-location, sensitive-data, or optional-feature activities where consent is required.
Protection of vital interests: processing reasonably necessary to address a serious threat to life, health, safety, or security.
Other lawful bases: any additional basis authorized by applicable law.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for the purposes described in this Policy:

6.1 Buyers and Sellers

We disclose information between buyers and sellers as reasonably necessary to complete orders, provide services, communicate about transactions, handle returns, resolve disputes, and meet legal disclosure requirements.

6.2 Payment and Payout Providers

We disclose transaction, identity, contact, tax, payment, fraud, and payout information to payment processors, card networks, financial institutions, PayPal, and other providers involved in processing or administering payments and payouts.

6.3 Shipping and Fulfillment Providers

We may disclose names, addresses, telephone numbers, order information, and delivery instructions to shipping carriers, fulfillment providers, customs services, tracking providers, and related vendors.

6.4 Technology and Service Providers

We may use service providers for:

Website hosting and cloud infrastructure;
Database storage and content delivery;
Email, messaging, and customer support;
Security, fraud prevention, and identity verification;
Analytics, performance measurement, and error monitoring;
Tax calculation, accounting, and reporting;
Scheduling, document management, and business operations;
Marketing, affiliate attribution, and advertising where permitted.

Service providers may process information only for authorized purposes and subject to applicable contractual and legal obligations.

6.5 CrownThrive Affiliates and Programs

We may disclose information within the CrownThrive ecosystem when reasonably necessary to provide requested benefits, administer connected services, prevent fraud, provide support, maintain consistent account records, or operate a program you have joined.

6.6 Professional Advisers

We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisers subject to appropriate confidentiality obligations.

6.7 Government and Legal Recipients

We may disclose information to courts, regulators, tax authorities, law enforcement, government agencies, intellectual-property rights holders, or other legally authorized recipients when required or reasonably necessary to comply with law, protect safety, prevent fraud, or defend legal rights.

6.8 Business Transactions

Information may be disclosed in connection with an actual or proposed merger, financing, acquisition, investment, restructuring, reorganization, sale of assets, bankruptcy, transfer, or similar business transaction. A recipient will remain subject to applicable privacy obligations.

6.9 At Your Direction

We may disclose information when you request, authorize, or intentionally direct us to do so.

6.10 Public Information

Information you publish in listings, profiles, reviews, public community areas, or storefronts may be publicly available and may be indexed, copied, shared, or displayed by other users and search engines.

7.1 Information Sellers May Receive

A seller may receive a buyer’s name, shipping address, contact information, order details, customization instructions, appointment details, transaction communications, and other information reasonably necessary to fulfill the transaction.

7.2 Information Buyers May Receive

A buyer may receive a seller’s store name, business name, seller profile, general location, contact method, return information, fulfillment details, verification indicators, and any disclosures required by marketplace or consumer-protection law.

7.3 Seller Restrictions

Sellers may use buyer information only to:

Fulfill and support the applicable transaction;
Provide legally required notices, recalls, warranties, or safety communications;
Prevent fraud and protect legal rights;
Maintain legally required business, tax, and transaction records;
Conduct marketing only when the buyer has provided legally sufficient consent or another lawful basis exists.

Sellers may not:

Sell or rent buyer information;
Add buyers to unrelated marketing lists without lawful permission;
Use buyer information for harassment, discrimination, retaliation, or surveillance;
Disclose buyer information publicly or to an unauthorized person;
Use information obtained through GSO to circumvent marketplace protections or fees;
Retain sensitive information longer than reasonably necessary.

7.4 Independent Seller Practices

A seller that processes buyer information outside GSO may be independently responsible for providing its own privacy notices, honoring applicable privacy rights, securing the information, and responding to privacy incidents.

8. Payments and PayPal Payout Information

8.1 Payment Processing

Payments may be processed through third-party payment providers. Those providers may collect payment-card, bank, identity, billing, device, transaction, and fraud-prevention information under their own privacy notices.

GSO generally receives transaction confirmations, payment status, partial payment details, processor references, dispute information, and records necessary to administer the order.

8.2 PayPal Payouts

Seller and affiliate payouts are currently made through PayPal unless another method is approved. We disclose information to PayPal as necessary to initiate, verify, trace, reconcile, cancel, or investigate a payout.

PayPal independently controls how it collects and processes information within its systems. Users receiving PayPal payouts are also subject to PayPal’s privacy practices and account requirements.

8.3 Verification and Fraud Prevention

Payment providers and PayPal may independently verify identity, impose limitations, screen transactions, or request additional documentation. We may receive verification results, risk indicators, account status information, or transaction outcomes.

8.4 No Storage Guarantee

We do not represent that GSO directly stores complete payment-card or bank-account credentials. Where those details are entered into a provider-hosted payment form, the provider receives and processes them directly.

9. Cookies and Tracking Technologies

We and our service providers may use cookies, pixels, tags, scripts, local storage, software development kits, session tools, affiliate identifiers, and similar technologies to:

Keep users signed in;
Maintain carts and preferences;
Protect accounts and prevent fraud;
Remember language, location, and display settings;
Measure traffic and Platform performance;
Understand marketplace navigation and conversion;
Attribute affiliate referrals and promotional campaigns;
Deliver or measure advertising where permitted;
Identify errors, misuse, and security threats.

Some technologies are necessary for the Platform to function. Other technologies may be optional and subject to consent or opt-out rights depending on your location.

Additional information about these technologies, their duration, their providers, and available controls will be provided in the Good Shit Only Cookie Policy and any cookie-preference tool made available through the Platform.

10. Advertising, Sale, Sharing, and Targeted Advertising

10.1 No Monetary Sale of Personal Information

Good Shit Only does not sell personal information to third parties in exchange for money.

10.2 Advertising and Analytics Disclosures

We may use analytics, affiliate, advertising, or promotional technologies to understand Platform use, measure campaigns, promote marketplace offerings, and show relevant content.

Certain disclosures to advertising or analytics providers may be defined as a “sale,” “sharing,” or processing for “targeted advertising” under some privacy laws even when no money is exchanged for the information.

10.3 Opt-Out Rights

Where applicable law provides an opt-out right, you may request that we stop processing your personal information for:

Targeted advertising;
Sale or sharing as those terms are defined by applicable law;
Profiling used to make decisions producing legal or similarly significant effects.

You may exercise an applicable opt-out through the cookie or privacy-preference controls provided on the Platform, by submitting a Privacy Request through the Help Center, or through a legally recognized browser-based opt-out signal.

10.4 Global Privacy Control

Where required by applicable law, GSO will treat a valid Global Privacy Control or comparable legally recognized opt-out preference signal as a request to opt out of covered sale, sharing, or targeted-advertising processing for the browser or device sending the signal.

10.5 Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes that require a separate right to limit unless we provide the required notice and method for exercising that right.

10.6 Financial Incentives

We do not currently provide financial incentives solely in exchange for personal information. Marketplace discounts, memberships, affiliate commissions, CrownThrive Perks, and promotional benefits are provided in connection with participation, purchases, services, referrals, or membership terms rather than the sale of personal information.

If we introduce a program that qualifies as a financial incentive or price difference under applicable privacy law, we will provide a separate notice describing its material terms before enrollment.

11. Automated Systems and Profiling

We may use automated systems, rules, algorithms, or machine-learning tools to:

Detect fraud, suspicious activity, account abuse, and payment risk;
Identify prohibited, unsafe, counterfeit, or potentially infringing listings;
Rank search results and recommend products or content;
Measure marketplace performance and promotional attribution;
Moderate content and prioritize support requests;
Identify technical errors, security threats, and unusual account behavior.

Automated indicators may lead to additional review, verification, temporary restrictions, or requests for documentation. We may use human review where appropriate or legally required.

Where applicable law provides a right to opt out of profiling used to make decisions producing legal or similarly significant effects, you may exercise that right through the privacy-request process described below.

12. Data Retention

We retain personal information for as long as reasonably necessary to:

Provide the Platform and maintain your account;
Complete and document transactions and payouts;
Maintain financial, tax, accounting, and business records;
Provide support and resolve disputes;
Prevent fraud, abuse, and unauthorized access;
Comply with legal, regulatory, insurance, and contractual requirements;
Establish, exercise, or defend legal claims;
Enforce our agreements and policies.

Retention periods vary based on the type of information, purpose of processing, account status, transaction history, legal requirements, dispute risk, safety concerns, and technical considerations.

For example:

Account information may be retained while an account remains active and for a reasonable period afterward.
Transaction, payout, tax, and accounting records may be retained for the periods required by financial, tax, marketplace, and recordkeeping laws.
Support, complaint, intellectual-property, fraud, and enforcement records may be retained while relevant to disputes, repeat violations, legal obligations, or Platform safety.
Security and technical logs may be retained for periods reasonably necessary to investigate incidents and protect the Platform.
Backup copies may remain for a limited period before being overwritten or securely deleted.

We may retain information longer where required by law, court order, litigation hold, regulatory request, unresolved dispute, chargeback, negative balance, or fraud investigation.

When information is no longer reasonably necessary, we may delete, destroy, anonymize, or de-identify it.

13. Data Security

We use reasonable administrative, technical, contractual, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Safeguards may include:

Account authentication and access controls;
Encryption in transit where supported;
Role-based access and authorization procedures;
Logging, monitoring, and fraud detection;
Security reviews and software updates;
Vendor and service-provider controls;
Incident response and account-recovery procedures;
Data minimization and retention controls.

No website, database, transmission method, or storage system can be guaranteed completely secure. You are responsible for using a strong and unique password, protecting account credentials, securing your devices, and promptly reporting suspected unauthorized access.

If we identify a security incident affecting personal information, we will investigate and provide notices to affected individuals, regulators, or other parties when required by applicable law.

14. Your Privacy Rights

Depending on where you live and whether an applicable legal threshold is met, you may have some or all of the following rights:

14.1 Right to Know or Confirm

You may request confirmation of whether we process your personal information and information about the categories, sources, purposes, recipients, or specific information involved.

14.2 Right of Access

You may request access to personal information associated with you.

14.3 Right to Correction

You may request correction of inaccurate or incomplete personal information.

14.4 Right to Deletion

You may request deletion of personal information, subject to legal exceptions and necessary retention.

14.5 Right to Data Portability

You may request a portable copy of eligible personal information in a technically feasible and readily usable format.

14.6 Right to Opt Out

You may have the right to opt out of processing for:

Targeted advertising;
Sale or sharing of personal information;
Certain profiling or automated decision-making activities.

14.7 Right to Limit Sensitive Information

Where applicable, you may request that use or disclosure of sensitive personal information be limited to legally permitted purposes.

14.8 Right to Object or Restrict Processing

You may have the right to object to or request restriction of certain processing, including direct marketing or processing based on particular legitimate interests.

14.9 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent.

14.10 Right to Appeal

You may appeal our refusal to act on an eligible privacy request.

14.11 Right to Non-Discrimination

We will not unlawfully discriminate against you for exercising an applicable privacy right. Exercising a right may affect a service only when the requested information is necessary to provide that service.

14.12 Right to Complain

You may have the right to submit a complaint to an applicable privacy regulator, supervisory authority, attorney general, or government agency.

15. Submitting and Appealing Privacy Requests

15.1 How to Submit a Request

Submit a privacy request through the Good Shit Only Help Center or support-ticket system using the subject:

Privacy Request

Your request should identify:

Your full name;
The email address connected to your account or interaction;
Your relationship to GSO, such as buyer, seller, affiliate, member, or visitor;
The privacy right you wish to exercise;
The state or country in which you reside;
Any information reasonably necessary to locate the relevant records.

You do not need to create a new account to submit a privacy request. We may require use of an existing account when reasonably necessary to authenticate the request securely.

15.2 Identity Verification

We may verify your identity before completing a request. Verification may involve confirming access to an email address or account, requesting transaction details, reviewing identity documentation, or using another method reasonably matched to the sensitivity of the requested information.

We will use verification information only for authentication, security, fraud prevention, legal compliance, and processing the request.

15.3 Authorized Agents

Where permitted by law, you may authorize another person to submit a request for you. We may require proof of the agent’s authority and may contact you directly to verify your identity or confirm the authorization.

15.4 Responses

We will respond within the period required by applicable law. We may extend the response period where legally permitted because of complexity or request volume and will provide notice of the extension where required.

15.5 Request Limitations

We may deny or limit a request when:

We cannot reasonably verify identity or authority;
The request is fraudulent, abusive, excessive, or technically infeasible;
The information is subject to a legal exception;
Retention is necessary to complete a transaction or provide a requested service;
Retention is necessary for security, fraud prevention, accounting, tax, safety, dispute, legal, or compliance purposes;
Disclosure would adversely affect another person’s rights;
Applicable law does not require the requested action.

When required, we will explain why a request was denied and provide instructions for appealing the decision.

15.6 Appeals

To appeal a denied privacy request, submit another Help Center ticket with the subject:

Privacy Request Appeal

The appeal should identify the original request, the decision being appealed, and the reason you believe the decision should be reconsidered.

We will review and respond to an eligible appeal within the period required by applicable law. If an appeal is denied, we will provide information about contacting the applicable attorney general, privacy regulator, or supervisory authority where required.

16. United States Privacy Disclosures

The following disclosures supplement the remainder of this Privacy Policy for residents of jurisdictions with comprehensive privacy laws.

16.1 Categories of Personal Information

During the preceding twelve months, depending on user activity, GSO may have collected or processed the following categories:

Category	Examples	Primary Purposes
Identifiers	Name, username, email, address, telephone number, IP address, account identifiers	Accounts, transactions, support, verification, security, legal compliance
Customer and business records	Contact information, business details, tax classification, billing and shipping records	Marketplace operations, seller verification, payments, payouts, tax and accounting
Commercial information	Purchases, sales, listings, carts, refunds, memberships, affiliate activity	Transactions, recommendations, analytics, support, fraud prevention
Financial and payout information	Payment status, processor references, PayPal account information, payout records	Payments, seller proceeds, affiliate commissions, reconciliation, fraud prevention
Internet and electronic activity	Browsing activity, clicks, searches, device data, cookie identifiers, login history	Platform functionality, security, analytics, attribution, personalization
Approximate geolocation	General location derived from IP address or transaction address	Tax, shipping, search, localization, security, fraud prevention
Audio, visual, and electronic content	Listing media, profile images, submitted files, support evidence, consultation content	Listings, support, disputes, services, moderation, safety
Professional and business information	Business affiliation, credentials, licenses, experience, professional profile	Seller profiles, verification, services, marketplace trust
Inferences	Likely preferences, interests, fraud indicators, product recommendations	Personalization, recommendations, fraud prevention, marketplace improvement
Sensitive personal information	Login credentials, tax identifiers, government identification, financial or payout information	Authentication, seller verification, payments, payouts, security, legal compliance

16.2 Categories of Sources

Sources include users, buyers, sellers, service providers, payment and payout providers, shipping providers, affiliates, social networks, CrownThrive programs, identity and fraud services, public records, and automatically collected device and usage information.

16.3 Business and Commercial Purposes

Purposes include operating the Platform, facilitating transactions, processing payments and payouts, providing support, administering memberships and affiliates, verifying users, preventing fraud, improving services, communicating, marketing where permitted, and complying with law.

16.4 Categories of Recipients

Recipients may include buyers, sellers, payment processors, PayPal, shipping providers, service providers, CrownThrive affiliates, professional advisers, advertising or analytics providers where permitted, business-transaction recipients, regulators, courts, and law enforcement.

16.5 Sale and Sharing

We do not sell personal information for monetary compensation. Certain online advertising or analytics disclosures may be treated as sale, sharing, or targeted advertising under some state laws. Eligible users may opt out as described in this Policy.

16.6 Sensitive Information

Sensitive information is used only for authentication, verification, transaction administration, payouts, security, fraud prevention, legal compliance, and other permitted purposes. We do not sell precise geolocation data.

16.7 California Privacy Rights

California residents may have rights to know, access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service when exercising those rights.

Where applicable, valid Global Privacy Control signals will be honored as requests to opt out of covered sale or sharing.

16.8 Virginia Privacy Rights

Virginia residents covered by applicable law may have rights to confirm processing, access, correct, delete, obtain portable data, opt out of targeted advertising, opt out of sale, opt out of certain profiling, and appeal a denied request.

16.9 Other State Rights

Residents of other states may exercise applicable rights through the same Privacy Request process. We will apply the rights and exceptions required by the law governing the request.

17. International Users

Good Shit Only is operated from the United States. If you access the Platform from another country, personal information may be transferred to, processed in, and stored in the United States or other countries where our service providers operate.

Those countries may have privacy laws different from the laws where you live. Where legally required, we will use an approved transfer mechanism, contractual protection, consent, adequacy decision, or other lawful safeguard.

Users protected by the European Economic Area, United Kingdom, or comparable privacy frameworks may have rights including access, correction, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority.

We may request additional information to identify the law applicable to an international privacy request.

18. Children’s Privacy

Good Shit Only is a general-audience marketplace and is not directed to children under thirteen years of age.

Users must be at least eighteen years old and have reached the applicable age of majority to independently create a marketplace account, sell products, receive payouts, enroll in a paid membership, join the affiliate program, or enter into binding transactions.

We do not knowingly collect personal information directly from a child under thirteen without legally required parental notice and verifiable parental consent.

If we learn that personal information was collected from a child under thirteen in a manner not permitted by law, we will take reasonable steps to delete or otherwise appropriately handle the information.

A parent or legal guardian who believes a child has provided personal information to GSO should submit a Help Center ticket with the subject:

Child Privacy Request

We may request information reasonably necessary to verify the requester’s identity, parental status, or legal authority.

19. Communication Choices

19.1 Marketing Communications

You may unsubscribe from promotional emails by using the unsubscribe method provided in the communication or by updating available account preferences.

19.2 Transactional Communications

Even after opting out of marketing, we may continue sending communications necessary for account administration, transactions, payments, payouts, security, support, policy updates, legal compliance, and other non-promotional purposes.

19.3 Cookies and Advertising

You may use available cookie settings, browser controls, device settings, privacy-preference signals, and Platform privacy controls to manage certain tracking or advertising activities.

19.4 Seller Marketing

Independent sellers are responsible for honoring applicable marketing preferences and laws when communicating outside the GSO transaction process.

20. Third-Party Services and Links

The Platform may contain links, integrations, embeds, sign-in services, payment forms, shipping tools, social-media features, or other services operated by third parties.

A third party may independently collect personal information when you use its service. Its collection and use are governed by its own privacy policy and terms rather than this Privacy Policy.

We encourage users to review the privacy practices of PayPal, payment processors, shipping providers, social networks, connected services, and external websites before providing information.

GSO is not responsible for the independent privacy practices of a third party except to the extent applicable law provides otherwise.

21. Aggregated and De-Identified Data

We may create aggregated, statistical, or de-identified information that cannot reasonably be linked to an identifiable individual.

We may use and disclose this information for analytics, research, marketplace insights, security, service development, reporting, and other lawful purposes.

When information is maintained as de-identified data, we will take reasonable measures to prevent association with an identifiable person and will not attempt to re-identify it except where permitted by law to test, validate, or protect the de-identification process.

Where required, recipients of de-identified information will be contractually required to maintain its de-identified status.

22. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, Platform features, marketplace operations, technology, service providers, privacy practices, or business requirements.

The revised Policy will display an updated “Last Updated” date. When required by law or when a change materially affects how personal information is used, we may provide additional notice through email, an account notification, the Platform, or another reasonable method.

Where legally required, we will obtain consent before applying a materially different use to previously collected information.

We encourage users to review this Policy periodically.

23. Contacting Us

Good Shit Only™ is operated by:

CrownThrive LLC
Virginia, United States

Privacy questions, requests, appeals, and concerns should be submitted through the Good Shit Only Help Center or support-ticket system using the appropriate subject:

Privacy Request
Privacy Request Appeal
Child Privacy Request
Privacy or Security Concern

Please do not submit complete payment-card numbers, account passwords, Social Security numbers, or unnecessary sensitive documentation through a general support message. We will provide secure instructions when additional verification material is required.

Additional legal contact information and policy resources may be published in the Good Shit Only Trust Center and Legal Notices.

By using Good Shit Only™, you acknowledge that you have reviewed this Privacy Policy and understand the privacy practices described above.

Privacy Policy

Table of Contents