Privacy Policy
Effective and last updated: July 31, 2026
At G2LooT, we respect customer privacy. We use personal data only to provide our services, manage orders, support customers, protect the website, and improve the user experience.
Information We May Collect
- Your name, email address, phone or WhatsApp number, and profile image when provided.
- Order details, cart contents, support tickets, support messages, and order status.
- We may temporarily store cart contents so they can be restored. We do not send abandoned-cart reminders by email unless the customer explicitly chooses this option and has a verified email address.
- Payment proof uploaded by the customer, such as a transfer receipt or payment screenshot.
- Social sign-in data, such as your name, email address, and profile image, when you use Google, Facebook, or TikTok login.
- Basic technical information, such as browser type, general pages and actions, referral or campaign source, and referral code when available.
- Approximate country and region. We do not store the raw IP address in the activity-tracking record. A network location service may be used to convert it into an approximate location, with the result cached temporarily.
How We Use Information
- To create accounts and enable sign-in.
- To process orders and communicate about them.
- To respond to support messages and tickets.
- To review payment proof and add account balance when requested.
- To protect the website against unauthorized or fraudulent activity.
- To analyze general website usage, including the current page, viewed products, purchase flow, visit source, device type, and approximate country or region when available. We do not record passwords, payment credentials, or private message content for analytics.
Sharing of Information
We do not sell customer data. We may use service providers that are necessary to operate the website, such as hosting providers, payment services, and social-login providers.
Data Deletion
You may request deletion of your data at any time through our data-deletion instructions page or by email.
Data Controller and Contact
G2LooT is the controller responsible for the personal data described in this policy. Privacy questions and complaints may be sent to support@g2loot.com.
TikTok Login Data
When you choose TikTok Login, we may receive your TikTok User ID or Open ID, display name, and profile image. We receive an email address only when TikTok makes that permission available and you expressly approve it. We use these details to create or link your G2LooT account, authenticate you, show your profile, prevent duplicate or fraudulent accounts, and provide orders and support. We do not receive or request your TikTok password.
Purposes and Legal Bases
- Account, contact, order, and delivery data: to perform our contract and deliver the requested service.
- Social-login identifiers and permitted profile details: with your consent and to provide the sign-in feature you requested.
- Payment records and transaction evidence: to perform the order, prevent fraud, and comply with legal or accounting obligations.
- Support messages: to respond to your request and pursue our legitimate interest in resolving complaints.
- Cookies, analytics, device, referral, and security logs: with consent where required, and otherwise for our legitimate interests in security, performance, and understanding general website use.
Service Providers and International Transfers
Data may be processed only as needed by TikTok, Google, Meta, our hosting and email providers, payment providers, and technical or security providers. These providers may process data outside your country. Where required, we use contractual or other legally recognized safeguards. Each social-login and payment provider also processes data under its own privacy policy.
Retention
- Account and social-login profile data: while the account is active, then deleted or anonymized within 30 days of an approved deletion request, except required records and temporary backups.
- Orders, invoices, payment records, and payment proof: up to 5 years, or longer only when required by applicable tax, accounting, fraud-prevention, or dispute laws.
- Support tickets and complaint records: up to 2 years after closure.
- Abandoned cart data: up to 30 days.
- Analytics and referral records: up to 12 months; security and access logs: up to 90 days, unless an investigation requires longer retention.
Your Rights, Account Deletion, and TikTok Unlinking
Subject to applicable law, you may request access, correction, deletion, restriction, objection, or a copy of your data, and may withdraw consent at any time without affecting earlier lawful processing. Use the Data Deletion Instructions or email support@g2loot.com from your registered email. To unlink TikTok, revoke G2LooT access from TikTok's connected-app settings and contact us if you also want the linked G2LooT data deleted. Unlinking does not automatically delete completed-order records that we must legally retain.
Cookies, Tracking, and Security
We use essential cookies or browser storage for login, language, theme, cart, security, and session features. Optional analytics or campaign technologies are used only as permitted by applicable law. We apply access controls, encryption in transit, restricted administrative access, and reasonable monitoring; however, no internet service can guarantee absolute security.
Children
The service is not intended for children under 13. Users below the age of legal majority in their country must use the service only with permission and supervision of a parent or legal guardian. If we learn that a child supplied personal data without valid permission, we will take reasonable steps to delete it.
Policy Updates
We may update this policy when our services, providers, or legal duties change. The effective date above will be updated, and material changes may be announced on the website.
Contact Us
For questions about privacy or your personal data, contact us at support@g2loot.com.