Privacy Policy

Last updated: July 17, 2026

Privacy Policy

This Privacy Policy explains how The General Co. Store collects, uses, discloses, retains and protects personal information when you visit https://thegeneralcostore.com/, create an account, place an order, contact customer support or otherwise interact with our services.

By using our website, you acknowledge that your personal information will be handled as described in this Privacy Policy. Where consent is required by applicable law, we will request it before carrying out the relevant processing.

Who We Are

The General Co. Store is operated by Wombat Unity Ltda., a company registered in Brazil.

For the purposes of applicable data protection law, Wombat Unity Ltda. is the controller of personal information collected directly through The General Co. Store, except where another organization independently determines how it processes your information.

Personal Information We Collect

The personal information we collect depends on how you interact with our website and may include the following categories:

Information You Provide

  • Identity information: name, username and account identifiers.
  • Contact information: email address, telephone number, billing address and shipping address.
  • Order information: products purchased, order value, currency, discounts, delivery method, tracking information, returns and refund history.
  • Account information: account preferences, saved addresses and account activity.
  • Customer service information: support requests, messages, attachments, photographs and other information you provide when contacting us.
  • Marketing preferences: newsletter subscriptions and communication preferences.
  • Reviews and submissions: product reviews, ratings, comments and other content you choose to submit.

Information Collected Automatically

  • Internet Protocol address and approximate geographic location.
  • Browser type, device type, operating system and language settings.
  • Pages viewed, links selected, referring pages and visit timestamps.
  • Shopping cart, session, authentication and checkout activity.
  • Cookie identifiers, advertising identifiers and similar technologies.
  • Information used to detect fraud, abuse, security incidents and technical errors.

Payment Information

Payments are processed by third-party payment providers. Depending on your location and the methods available at checkout, these providers may include Stripe, PayPal or other payment services displayed before payment.

We may receive limited payment-related information, such as the payment status, transaction identifier, payment method, billing details and the last digits of a payment card. Complete card numbers and security codes are processed by the payment provider and are not stored by us.

How We Use Personal Information

We may use personal information to:

  • Provide, operate, maintain and secure the website.
  • Create and administer customer accounts.
  • Process payments, orders, deliveries, returns, exchanges and refunds.
  • Provide order confirmations, tracking information and service notices.
  • Respond to customer service requests and resolve disputes.
  • Prevent fraud, unauthorized transactions, abuse and security incidents.
  • Comply with tax, accounting, consumer protection and other legal obligations.
  • Analyze website performance and improve our products, services and customer experience.
  • Send marketing communications where you have consented or where otherwise permitted by law.
  • Measure advertising performance and display relevant advertising where permitted by your choices and applicable law.
  • Establish, exercise or defend legal claims.

Legal Bases for Processing

Where the General Data Protection Regulation, United Kingdom GDPR or a similar law applies, we rely on one or more of the following legal bases:

  • Contract: processing necessary to complete your purchase, deliver your order, administer returns and provide requested services.
  • Legal obligation: processing necessary to comply with tax, accounting, consumer protection, fraud prevention and regulatory requirements.
  • Legitimate interests: operating and securing our business, preventing fraud, improving our services and responding to customer requests, provided those interests are not overridden by your rights.
  • Consent: processing based on permission you have given, including certain marketing, analytics and advertising activities. You may withdraw consent at any time.

Cookies and Similar Technologies

We use cookies, pixels, tags, local storage and similar technologies to operate the website, remember preferences, maintain shopping carts, secure accounts, process checkout, understand website usage and measure marketing performance.

These technologies may include:

  • Strictly necessary technologies: required for security, account access, shopping cart functions, checkout and other essential services.
  • Preference technologies: remember selections such as language, currency and display preferences.
  • Analytics technologies: help us understand website traffic, usage and performance.
  • Advertising technologies: help measure campaigns, limit repeated advertising and, where permitted, provide advertising based on interactions with our website.

Where required by law, non-essential cookies will be used only after you provide consent. You may accept, reject or adjust non-essential cookies through the cookie controls available on our website. You may also manage cookies through your browser settings. Disabling essential cookies may prevent parts of the website from functioning correctly.

Analytics and Advertising Services

We may use services provided by Google and Meta to understand website usage, measure advertising performance and support our marketing activities. These providers may receive information such as cookie identifiers, IP addresses, device information, pages visited and actions taken on the website.

The use of non-essential analytics and advertising technologies is subject to your consent where required. For more information about how these providers process information, please review their respective privacy documentation:

How We Share Personal Information

We may disclose personal information only as reasonably necessary to operate our business, fulfill orders or comply with legal obligations. Recipients may include:

  • Payment processors and fraud prevention providers.
  • Warehouses, suppliers, fulfillment partners and logistics providers.
  • Postal services, couriers and tracking providers.
  • Website hosting, cloud infrastructure, security and technical support providers.
  • Email, customer service and support ticket providers.
  • Analytics and advertising providers, subject to applicable consent requirements.
  • Accountants, legal advisers, insurers and other professional advisers.
  • Government authorities, regulators, courts or law enforcement where disclosure is required or legally permitted.
  • A purchaser, successor or adviser in connection with a merger, acquisition, restructuring, financing or sale of all or part of our business.

Service providers are authorized to process personal information only for the services they provide to us or as otherwise permitted by law.

International Data Transfers

We operate internationally and may use service providers located in countries other than the country where you live. As a result, personal information may be transferred to and processed in Brazil, the United States and other countries where our service providers operate.

Where required, we use appropriate safeguards for international transfers, which may include adequacy decisions, contractual protections or other mechanisms recognized by applicable data protection law.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining transaction records, resolving disputes, preventing fraud and complying with legal, tax and accounting obligations.

The applicable retention period depends on the type of information, the nature of our relationship, legal requirements and whether the information is required to establish, exercise or defend legal claims. When information is no longer required, we will delete, anonymize or securely isolate it, subject to technical and legal limitations.

Data Security

We use reasonable administrative, technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss or misuse. These measures include encrypted connections, access controls, account security measures, monitoring and the use of reputable payment providers.

No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should contact us if you believe your account has been compromised.

Marketing Communications

You may unsubscribe from promotional emails at any time by selecting the unsubscribe link in the message or contacting us. Even after unsubscribing from marketing, you may continue to receive non-promotional communications relating to orders, accounts, security or customer service.

Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • Request access to personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of personal information.
  • Request restriction of or object to certain processing.
  • Request a portable copy of eligible information.
  • Withdraw consent where processing is based on consent.
  • Opt out of certain targeted advertising, sharing or sales of personal information where those concepts apply under local law.
  • Appeal a decision concerning a privacy request where local law provides that right.
  • Lodge a complaint with the data protection authority responsible for your location.

We will not discriminate against you for exercising an applicable privacy right.

European Economic Area and United Kingdom

If you are located in the European Economic Area or United Kingdom, you may have rights under the GDPR or UK GDPR, including access, rectification, erasure, restriction, objection and data portability. You may also withdraw consent and lodge a complaint with your local supervisory authority.

We generally respond to valid requests within one month, subject to any lawful extension. We may request information reasonably necessary to verify your identity.

United States Privacy Rights

Residents of certain United States jurisdictions may have rights to know, access, correct or delete personal information and to opt out of certain sales, sharing or targeted advertising, subject to applicable thresholds and exceptions.

We do not sell personal information in exchange for money. Some uses of analytics or advertising technologies may be considered a “sale,” “sharing” or “targeted advertising” under certain state privacy laws. Where applicable, you may exercise an opt-out through our cookie controls or by contacting us.

We generally respond to verified United States privacy requests within the period required by applicable law. We may request information necessary to confirm your identity and authority to make the request.

Account and Data Deletion

You may request deletion of your account and eligible personal information by contacting contact@thegeneralcostore.com or opening a support ticket at https://thegeneralcostore.com/my-account/tickets/.

We may retain information that is reasonably necessary to complete pending transactions, process returns, detect fraud, maintain security, comply with tax or accounting obligations, resolve disputes or establish and defend legal claims.

Children’s Privacy

Our website and products are intended for a general adult audience and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to us without appropriate authorization, contact us so that we can investigate and take appropriate action.

Third-Party Websites

Our website may contain links to websites or services operated by third parties. We are not responsible for the privacy practices, security or content of those third-party services. We recommend reviewing their privacy policies before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, legal obligations or business practices. The updated version will be published on this page with a revised “Last updated” date. Where required by law, we will provide additional notice or request renewed consent.

Contact Us

To ask a privacy question or exercise an applicable privacy right, contact us: