Privacy Policy

Go Shop is an online marketplace where independent Sellers, and Go Shop itself, offer products to Customers. The website is operated by Aras LTD, Yerevan, Hrant Vardanyan Street, 7/5Ա, Armenia (the "Company", "we", "us"), which decides how and why your personal data is processed.

Terms such as "Platform", "Customer" and "Seller" have the same meaning as in our Terms & Conditions.

• Account data: your phone number (used to sign in with a one-time code), first and last name, and optionally your email address and profile picture.
• Order and delivery data: delivery addresses (including a map location if you choose one), the contact name and phone number for delivery, the products you order, order history and delivery preferences.
• Payment data: the payment method you choose, the order amount and status, and a transaction reference and approval code returned by the payment provider. Card numbers are handled only by the payment provider and are never stored by us.
• Communication data: messages you send through the contact form, reviews and ratings you post, and the text messages (SMS) we send you about your account and orders.
• Technical data: IP address, browser and device type, language, pages visited, and cookies needed to keep you signed in and remember your cart and language.
• Seller data: for Sellers, business registration details, contact persons, bank details for payouts, and the content of their Listings.

Most data comes directly from you, when you register, place an order, save an address, contact us or post a review. Some is generated automatically as you use the Platform, for example technical data and cookies. If you are a Seller, some data may also come from public registers used to verify your business.

• To create and secure your account and verify your phone number, based on your consent and to perform our agreement with you.
• To process, confirm, prepare, deliver, cancel, return and refund your orders, based on performance of the contract.
• To send service messages such as one-time codes, order confirmations, delivery updates and order-tracking links, based on performance of the contract.
• To provide customer support and handle complaints and disputes, based on the contract and our legitimate interest in resolving issues.
• To prevent fraud, abuse and security incidents and to keep the Platform reliable, based on our legitimate interests and legal obligations.
• To comply with accounting, tax, consumer-protection and other legal obligations, based on the law.
• To improve the Platform and show relevant products, offers and rewards, based on our legitimate interest or, where the law requires, your consent.
• To send marketing messages only if you have agreed to receive them. You can withdraw that consent at any time.

We never sell your personal data. We share it only as needed to run the marketplace, and only with:

• Sellers: the name, phone number, delivery address and order details needed to prepare and hand over your Order. Sellers may not use this data for anything other than fulfilling your Order and meeting their legal duties.
• Delivery and courier partners: the details needed to deliver your Order to you.
• Payment provider: when you pay by card, you are redirected to our licensed payment provider (ARCA), which processes the payment under its own privacy rules.
• Service providers acting on our behalf: SMS delivery, hosting and infrastructure, and map and address-search services (OpenStreetMap) used when you pick a delivery location. They receive only what they need and are bound to protect it.
• Analytics: Google Analytics (Google) receives your IP address, device and browsing data on the Platform in order to give us aggregated usage statistics.
• Authorities: courts, law-enforcement or supervisory bodies, where we are required by law or to protect legal rights.
• A successor business, if the Company is merged, sold or restructured, subject to this Policy continuing to apply.

When you buy from a Seller, that Seller receives your order data and becomes responsible for handling it lawfully for that purpose. Each Seller is required to keep Customer data confidential, to use it only to fulfil the Order, and not to contact you to move a sale off the Platform.

We use a small number of cookies. Essential cookies keep you signed in, protect forms against forgery, keep your cart and remember your chosen language; the Platform cannot work without them. We also use Google Analytics, a web analytics service provided by Google, which sets cookies to gather statistics about how the Platform is used (pages visited, device type, approximate location). This data is aggregated and is not used to identify you personally. We do not use advertising or cross-site tracking cookies.

You can block or delete cookies in your browser settings, but parts of the Platform, such as the cart and sign-in, may then stop working.

We send SMS messages that are necessary for your account and orders, such as sign-in codes, order confirmations and tracking links. These are service messages, not marketing. Standard operator charges, if any, are set by your mobile provider.

Some of our service providers may process data outside Armenia. Where personal data is transferred abroad, we make sure it is done in line with the Law on the Protection of Personal Data, including to countries or under safeguards that provide adequate protection.

• Account data is kept while your account is active. If you ask us to delete your account, we erase or anonymise it, except what we must keep by law.
• Order, payment and invoice records are kept for the period required by Armenian accounting, tax and consumer-protection rules.
• Contact messages and reviews are kept for as long as needed to handle your request or publish your review.
• Technical logs are kept for a limited time for security and troubleshooting.

We use organisational and technical measures suited to the risk, including encrypted connections (HTTPS), access controls limited to staff who need the data, one-time-code sign-in instead of passwords, and secure hosting. No system is completely secure, so please keep your phone and access codes safe and tell us at once if you suspect unauthorised use of your account.

Under the Law of the Republic of Armenia on the Protection of Personal Data you have the right, in the cases and manner provided by law, to:

• know whether we process your data and receive a copy of it, together with information about the purposes, recipients and sources;
• have inaccurate or incomplete data corrected or updated;
• ask us to stop processing, block or delete your data when it is no longer needed, was collected unlawfully, or you withdraw your consent;
• withdraw a consent you gave, at any time, without affecting processing done before;
• object to processing based on our legitimate interests, and to marketing messages;
• lodge a complaint with the Personal Data Protection Agency of the Republic of Armenia or go to court if you believe your rights were violated.

Contact us using the details at the end of this page and, so that we can protect you from impersonation, tell us the phone number registered on your account. We will reply without undue delay and within the time required by law. If we cannot fully meet a request, for example because we must keep an invoice by law, we will explain why.

The Platform is intended for people aged 18 or over, or for younger people acting with a parent or guardian. We do not knowingly collect data from children without parental involvement. If you think a child has given us personal data, contact us and we will delete it.

The Platform may link to websites we do not control, for example a payment page or a map. Their privacy practices are their own, so please read their policies.

We may update this Policy when our services or the law change. The current version is always on this page with its "last updated" date, and we will notify you of material changes in a suitable way, for example on the Platform.

Aras LTD, Yerevan, Hrant Vardanyan Street, 7/5Ա, Armenia.

Phone: +374 95 443044 - Email: [email protected]