PRIVACY POLICY

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products, participate in activities on the Services, or otherwise contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products you use. This may include:

• Names and contact information
• Phone numbers and mobile numbers
• Email addresses
• Mailing and shipping addresses
• Usernames and account credentials
• Passwords (securely hashed)
• Billing addresses
• Debit/credit card payment details (tokenized via certified processors)

Sensitive Information. We do not process sensitive personal information.

Payment Data. We collect data necessary to process your payments if you make purchases, such as your payment instrument number and security code. All payment data is encrypted and handled directly by PCI-DSS compliant payment processors (such as Stripe and PayPal). We do not store raw card numbers on our servers.

All personal information you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage data (such as IP address, browser type, operating system, language preferences, referring URLs, device name, country, and timestamps). This information is primarily needed to maintain the security and operation of our Services, and for internal analytics.

• Log and Usage Data: Service-related, diagnostic, usage, and performance logs recorded automatically when you access or use our Services.
• Device Data: Information about your computer, phone, tablet, or other device used to access the Services (including IP address, browser type, ISP, operating system, and hardware configuration).
• Location Data: Imprecise or precise location data based on your IP address or device GPS settings. You can opt out by disabling location access in your browser or device settings.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, including:

• To facilitate account creation and authentication: Managing user profiles and keeping accounts in working order.
• To deliver and facilitate delivery of services: Providing products, managing orders, and dispatching deliveries.
• To respond to inquiries and provide customer support: Solving potential issues with requested services or products.
• To send administrative information: Providing details on product updates, terms revisions, and operational announcements.
• To fulfill and manage your orders: Handling orders, payments, returns, and exchanges made through the Services.
• To protect vital interests: Preventing fraud, unauthorized access, or harm to individuals.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when we have a valid legal basis to do so under applicable law.

If you are located in the EU or UK: We rely on valid legal bases under the GDPR / UK GDPR, including:

• Consent: Where you have given explicit permission to process data for a specific purpose.
• Performance of a Contract: When processing is necessary to fulfill our contractual obligations to you (such as shipping your order).
• Legal Obligations: Compliance with statutory, tax, or legal requirements.
• Vital Interests: Protecting the vital safety interests of you or third parties.

If you are located in Canada: We process your data based on express or implied consent, or as permitted under applicable Canadian privacy legislation.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations with trusted third-party service providers.

We may share your data with third-party vendors, service providers, contractors, or agents who perform services on our behalf and require access to such information, including:

• Payment Processors: Certified gateways (Stripe, PayPal) to handle secure payment tokenization.
• Data Analytics Services: Google Analytics to understand traffic and optimize storefront performance.
• Logistics & Courier Carriers: USPS, UPS, FedEx, DHL to fulfill and deliver physical packages.
• Sales & Marketing Tools: Transactional email providers to send order confirmations and tracking updates.
• Business Transfers: In connection with any merger, sale of assets, or acquisition.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We use cookies, web beacons, and pixels to secure our Services, remember user preferences (such as your shopping cart or theme setting), and gather analytics.

Google Analytics: We may share information with Google Analytics to analyze usage of the Services. You can opt out of being tracked by Google Analytics by visiting https://tools.google.com/dlpage/gaoptout or through Google Ads Settings.

6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers and third-party service providers operate globally. If you access our Services from outside the United States, your information may be transferred across international borders. We implement standard contractual clauses and robust safeguards to protect your personal data in accordance with applicable laws.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We retain personal information for the duration of your active account with us or as required for statutory, tax, accounting, and anti-fraud purposes. When we have no ongoing legitimate business need to process your data, we will delete or anonymize it securely.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We protect your personal information through a system of organizational and technical security measures.

We have implemented organizational, technical, and physical security measures (including 256-bit SSL encryption, CSRF protection, and restricted data access) to protect your personal data. However, no internet transmission is 100% immune to risk; you should only access the Services within a secure environment.

9. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

By using the Services, you represent that you are at least 18 years of age. If we learn that personal information from users under 18 has been collected without parental consent, we will deactivate the account and promptly delete such data. If you become aware of any data collected from minors, please contact us at privacy@activejointgear.com.

10. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you hold rights that allow greater access to and control over your personal information.

Under applicable data protection laws (such as GDPR, UK GDPR, and CCPA), you may have the right to:

• Request access to and receive a copy of your personal information.
• Request correction or deletion of your personal data.
• Restrict or object to the processing of your data.
• Request data portability to another service provider.
• Withdraw consent at any time without affecting prior lawful processing.

UK Residents: If you are located in the UK and are unhappy with how we handle your personal information, you can contact the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or via helpline: 0303 123 1113.

EEA / Switzerland Residents: You may lodge complaints with your local Member State Data Protection Authority or the Swiss Federal Data Protection and Information Commissioner (FDPIC).

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers include a Do-Not-Track (DNT) feature. Because no uniform industry or legal standard for recognizing DNT signals has been finalized, our website does not currently respond to automated DNT browser signals.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia hold specific state privacy rights.

Categories of Personal Information We Collect

California “Shine The Light” Law: California Civil Code Section 1798.83 permits California residents to request details regarding disclosure of personal information to third parties for direct marketing purposes. To submit a request, contact us at privacy@activejointgear.com.

13. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice periodically. The updated version will be indicated by the “Last updated” date at the top of this page. We encourage you to review this Privacy Notice frequently to stay informed about how we safeguard your data.

14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact us by email or post:

Active Joint Gear
Logistics & Privacy Compliance Desk
Email: privacy@activejointgear.com

15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence, you have the right to request access to the personal information we collect from you, rectify inaccuracies, or delete your personal information. To submit a data subject access request, please email our privacy team directly at privacy@activejointgear.com.