Lucky Scoops (“we”, “us”, “our”) operates the global online store aitror.com. We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, why we collect it, how we use, share, and protect it, and the rights you have, in plain language and in line with major global privacy laws including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and Canada’s PIPEDA. By using our website, you agree to the practices described in this policy. We serve customers worldwide, and we apply additional safeguards where required by the law of your country or region.
1. Information We Collect
Information You Provide to Us:
- Order & Account Information: When you place an order, create an account, or make a purchase, we collect your name, email address, billing and shipping address, phone number, and order history.
- Payment Information: Payment details (such as card number and billing data) are collected and processed directly by our PCI-DSS compliant payment providers (PayPal and Stripe). We never store full card numbers or CVV codes on our servers.
- Communications: When you contact us through our contact form or by email, we collect your message content, your email address, and our replies, so we can provide customer support.
- Packing Video Service: If you purchase our optional “Video of packing your order” add-on, we may record a video of your order being packed. These videos may be shared on our official social media accounts (e.g., TikTok). The video may show your first name and order number, but we never reveal your full address, email, or other sensitive personal information. You can always contact us to request removal.
Information We Collect Automatically (Usage Data): When you visit our website, we automatically collect technical information such as your browser type, device type, operating system, IP address, pages visited, time spent on pages, referring URLs, and similar analytics data. This helps us operate, improve, and secure the website.
Marketing Communications & Newsletter Subscription
When you place an order on our website, we will add the email address you used for your order to our subscriber list so that we can send you marketing communications, including promotional offers, new product launches, exclusive deals, and news about Lucky Scoops, unless you choose to opt out. This is a “soft opt-in”: because you are already our customer, we may contact you about products and services similar to your purchase. You can opt out at any time, free of charge, using the “unsubscribe” link at the bottom of any marketing email or by contacting us at [email protected].
If you subscribe through the newsletter form on our website, we collect your email address (and, if you provide it, your name) and add it to the same subscriber list for the purposes described above. You may unsubscribe at any time using the same methods.
We never sell your email address or subscriber data to third parties. Subscriber data is stored securely on our servers and retained only until you unsubscribe or request its deletion. When you unsubscribe, we remove you from active marketing lists promptly.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Process, fulfill, and deliver your orders;
- Communicate with you about order status, shipping updates, and customer service;
- Process payments and prevent fraud, abuse, and security incidents;
- Improve our website, products, and customer experience;
- Send promotional communications only if you have opted in (you can unsubscribe at any time);
- Comply with legal and tax obligations and resolve disputes.
3. Legal Bases for Processing (GDPR/UK GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the following legal bases to process your personal information under the GDPR:
- Performance of a contract: to process and deliver your orders and provide our services;
- Legitimate interests: to improve our website, prevent fraud, and secure our systems (we balance these interests against your rights);
- Consent: where we ask for your consent (for example, for marketing emails or optional cookies), you may withdraw consent at any time;
- Legal obligation: where we must process data to comply with applicable law, such as tax and accounting rules.
4. Payment Security
All payments are processed through trusted, PCI-DSS compliant providers: PayPal (including PayPal Checkout and card payments) and Stripe (including credit/debit cards, Apple Pay, Google Pay, and Link). We do not store or have access to your full card numbers or CVV codes. Please review the privacy policies of PayPal and Stripe for details on how they handle payment data.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to make the site work, remember your cart, and analyze traffic. We categorize them as follows:
- Essential cookies: required for the website to function (e.g., keeping items in your cart, login sessions);
- Functional cookies: remember your preferences such as language and region;
- Analytics cookies: help us understand how visitors use the site (e.g., Google Analytics);
- Marketing cookies: used to measure the effectiveness of advertising campaigns (e.g., Meta Pixel, TikTok Pixel).
You can manage cookies through your browser settings or through our cookie consent banner when available. Disabling cookies may affect certain website features, such as the shopping cart. Where required by law (e.g., in the EU/UK), we obtain your consent before setting non-essential cookies.
6. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We only share information with service providers that are necessary to fulfill your order and operate our business, including:
- Payment processors (PayPal, Stripe) to process payments;
- Shipping and logistics carriers to deliver your package;
- Analytics providers to understand website usage;
- Advertising platforms (e.g., Meta, TikTok, Google) where you have opted in or where permitted by law;
- Email and customer-support providers to send transactional emails and manage support.
These providers are bound by appropriate data-processing agreements and may only use your data on our behalf. We may also disclose information when required by law, to protect our legal rights, or to prevent fraud and abuse.
7. International Data Transfers
Because we are a global store, your personal information may be processed in countries other than your own, including the United States where our servers and service providers are located. When we transfer data from the EEA, the UK, or Switzerland to countries not recognized as providing an adequate level of data protection, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) adopted by the European Commission, to protect your information. By using our website, you acknowledge this international processing.
8. Data Retention
We keep your personal information only for as long as necessary to fulfill the purposes described in this policy, to comply with legal and tax obligations, and to resolve disputes. Specifically:
- Order records: retained for the period required by applicable tax and accounting law (typically up to 7 years);
- Account data: retained while your account is active, and for a reasonable period after;
- Support communications: retained for up to 3 years to provide ongoing support;
- Analytics data: retained in aggregated, de-identified form where possible.
When data is no longer needed, we delete or anonymize it.
9. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate or incomplete information;
- Delete your personal information (right to be forgotten);
- Object to or restrict certain processing, including direct marketing;
- Data portability โ receive your data in a structured, machine-readable format;
- Withdraw consent at any time where processing is based on consent;
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within the timeframe required by law (usually within 30 days).
10. European Residents (GDPR / UK GDPR)
If you are in the EEA, the UK, or Switzerland, in addition to the rights above, you have the right to:
- Request access to and a copy of the personal data we process about you;
- Request rectification of inaccurate data and completion of incomplete data;
- Request erasure of your data where there is no legitimate ground for continued processing;
- Request restriction of processing in certain circumstances;
- Object to processing based on legitimate interests or for direct marketing;
- Request data portability; and
- Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with your national data protection authority. We process your data as a data controller for the purposes described in this policy.
11. California Residents (CCPA / CPRA)
If you are a California resident, the CCPA and CPRA provide you with specific rights:
- Right to Know: request disclosure of the categories and specific pieces of personal information we have collected about you;
- Right to Delete: request deletion of personal information we have collected;
- Right to Correct: request correction of inaccurate personal information;
- Right to Opt-Out of Sale/Sharing: we do not sell your personal information and do not share it for cross-context behavioral advertising without your consent;
- Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information for purposes beyond those permitted by law;
- Right to Non-Discrimination: we will not discriminate against you for exercising any of your rights.
Under California’s “Shine the Light” law (Civil Code Section 1798.83), California residents may also request information about our disclosure of personal information to third parties for their direct marketing purposes; we do not engage in such disclosures. To exercise your California rights, email [email protected]. We will verify your identity and respond within 45 days. You may also designate an authorized agent to make a request on your behalf.
12. Other Regional Rights (Canada, Australia, and Others)
Canada (PIPEDA): If you are a Canadian resident, you have the right to access and correct your personal information held by us, and to challenge our compliance with applicable privacy laws. You may request access or correction by contacting us.
Australia & New Zealand: Under the Australian Privacy Act and the New Zealand Privacy Act, you have the right to access and correct your personal information, and to make a complaint about how we handle it.
Other jurisdictions: Where other local laws apply to you, we will honor the rights they provide to the extent required by law.
13. Children’s Privacy
Our website and products are intended for users who are at least 18 years old (or the age of majority in their jurisdiction). We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK where applicable). If you believe a child has provided us with personal information, please contact us immediately and we will delete it promptly.
14. Security Measures
We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (SSL/TLS), secure payment processing through certified providers, access controls, and regular security monitoring. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Changes will be posted on this page with an updated revision date. For material changes, we will take reasonable steps to notify you. We encourage you to review this page periodically.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Email: [email protected]
Website: https://aitror.com/contact/
If you are in the EEA or UK and prefer to raise a concern with a supervisory authority, you may contact the data protection authority in your country of residence.
Last updated: September 2, 2026