Privacy policy
Gearcozy operates this store and website, including all related information, content, features, tools, products, and services (collectively, the “Services”), in order to provide our customers with an online shopping experience.
Gearcozy is operated by PA Ecommerce LLC and is powered by Shopify, which provides the ecommerce platform that enables us to offer the Services to you.
This Privacy Policy explains how we collect, use, disclose, store, and otherwise process your personal information when you visit or use the Services, make a purchase or other transaction, create an account, communicate with us, or otherwise interact with Gearcozy.
For purposes of applicable data protection laws, PA Ecommerce LLC is the controller of your personal information, except where another party, such as Shopify or a payment provider, acts as an independent controller for its own processing activities.
If there is a conflict between our Terms of Service and this Privacy Policy with respect to the collection, use, processing, or disclosure of personal information, this Privacy Policy will control.
Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood this Privacy Policy.
1. Personal Information We Collect or Process
“Personal information” or “personal data” means information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable individual. It does not generally include information that has been anonymized or de-identified so that it can no longer reasonably identify you.
Depending on how you interact with the Services, where you live, and the features or services you use, we may collect or process different categories of personal information.
Contact Information
Contact information may include your name, email address, telephone number, billing address, shipping address, and other contact information you provide to us.
Order and Transaction Information
Order and transaction information may include products you view, purchase, return, exchange, or cancel, shopping cart contents, wishlist or saved items, order history, order number, transaction status, shipping and delivery information, and refund or return information.
Payment Information
Payments may be processed by Shopify and/or third-party payment service providers.
Payment-related information may include your payment method, billing information, payment confirmation, transaction identifiers, and limited payment card information made available to us by payment processors.
We generally do not directly store complete payment card numbers or payment authentication credentials where those details are processed securely by Shopify or other payment service providers.
Account Information
If account functionality is available, we may process information such as your account name, email address, login-related information, account preferences, saved addresses, order history, and account settings.
Authentication credentials may be processed through Shopify or other authentication providers depending on the account functionality you use.
Communications With Us
We collect information you provide when you communicate with us, including when you contact customer support, submit a question or complaint, request a return or refund, respond to surveys, or communicate with us by email or through other support channels.
Device and Technical Information
When you use the Services, we and our service providers may automatically collect information such as your IP address, browser type, device type, operating system, device identifiers, network information, approximate location derived from your IP address, referring URLs, and technical logs.
Usage and Browsing Information
We may collect information regarding pages and products viewed, search activity, shopping cart activity, links clicked, dates and times of visits, interactions with advertisements, referral information, and other browsing or website interaction data.
Preferences and Inferences
We may create or receive information about your likely interests or preferences based on your activity, such as products you have viewed, purchased, or added to your cart.
This information may be used to personalize your experience and, where permitted by law, provide more relevant marketing or advertising.
2. Sources of Personal Information
We may collect personal information directly from you when you place an order, create or use an account, contact customer support, sign up for marketing communications, or otherwise submit information through the Services.
We may also collect information automatically through cookies, pixels, tags, local storage, log files, and similar tracking or storage technologies.
We may receive information from Shopify and service providers that assist with payment processing, hosting, customer accounts, fraud prevention, analytics, email and marketing, customer support, order fulfillment, shipping and delivery, and cloud infrastructure.
Where permitted by applicable law, we may also receive information from advertising, analytics, marketing, social media, or other business partners.
3. How We Use Personal Information
We use personal information to provide and fulfill the Services, including processing and fulfilling orders, processing payments, arranging shipping and delivery, providing order confirmations and updates, handling returns, refunds and exchanges, maintaining customer accounts, remembering customer preferences, providing customer support, and delivering requested products and services.
We may use information to personalize and improve the Services by understanding how customers use our website, improving website functionality, improving our products and services, recommending relevant products, personalizing the shopping experience, measuring website and product performance, and troubleshooting technical issues.
Where permitted by applicable law, we may use personal information for marketing and advertising purposes, including sending promotional communications, measuring advertising performance, understanding customer interests, displaying relevant advertisements, conducting marketing campaigns, and building advertising audiences.
Where consent is legally required, we will seek appropriate consent before using non-essential tracking technologies or sending certain marketing communications.
We may also process information to authenticate users, detect fraudulent transactions, prevent unauthorized activity, protect customer accounts, investigate suspicious behavior, maintain website and payment security, and protect Gearcozy, our customers, and others from malicious, fraudulent, illegal, or unsafe activity.
We may use personal information to respond to questions, handle support requests, provide order-related information, resolve complaints, communicate regarding returns or refunds, and provide important service or policy notices.
We may also process personal information where reasonably necessary to comply with applicable laws, meet tax, accounting, or recordkeeping obligations, respond to lawful government or law-enforcement requests, respond to subpoenas or court orders, establish or defend legal claims, enforce our Terms of Service or other policies, and investigate potential policy violations.
4. Legal Bases for Processing – EEA and UK
If you are located in the European Economic Area (“EEA”) or United Kingdom (“UK”), we process personal data only when we have an appropriate legal basis under applicable data protection law.
Performance of a Contract
We may process personal data when necessary to perform our contract with you or to take steps at your request before entering into a contract. This may include processing your order or payment, arranging shipping, providing customer support relating to your order, handling returns, refunds or exchanges, and managing your account.
Legitimate Interests
We may process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
Our legitimate interests may include operating and improving our business, understanding how customers use the Services, preventing fraud, protecting the security of our systems, providing customer support, improving products and services, protecting our legal rights, and conducting marketing where permitted by law.
Consent
We rely on consent where applicable, including for certain non-essential cookies, advertising technologies, analytics technologies, personalized advertising, and electronic marketing communications.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
Legal Obligations
We may process personal data where necessary to comply with tax obligations, accounting requirements, consumer protection requirements, legal proceedings, and lawful requests from authorities.
5. Cookies and Similar Technologies
Gearcozy, Shopify, and certain service providers may use cookies and similar technologies when you visit or interact with the Services. These technologies may include cookies, pixels, tags, scripts, local storage, and similar browser or device technologies.
Strictly necessary technologies may be used to provide essential website functionality such as shopping cart functionality, checkout, security, fraud prevention, account authentication, and network management.
Functional technologies may be used to remember your choices and preferences and provide enhanced website functionality.
Subject to applicable legal requirements, analytics technologies may help us understand website traffic, visitor behavior, website performance, product engagement, and conversion activity.
Subject to your choices and applicable law, advertising and personalization technologies may be used to measure advertisements, personalize advertisements, understand advertising effectiveness, create advertising audiences, and deliver advertising based on your browsing or shopping activity.
Where applicable law requires consent before non-essential technologies are used, we will use a consent mechanism or cookie banner to obtain and manage your choices.
You can review or change applicable cookie choices through the cookie banner or Cookie Preferences option available through the Services, where provided.
Your browser may also allow you to block, delete, or disable cookies. Disabling certain cookies may affect website functionality.
Third-party applications, advertising platforms, or pixels may also use cookies or similar technologies and may process information under their own privacy policies.
6. Personalized Advertising, Sale, Sharing, and Targeted Advertising
We do not sell your personal information for money in the ordinary meaning of the word “sell.”
However, certain privacy laws define “sale” or “sharing” more broadly. In some jurisdictions, disclosure of information to advertising or marketing partners for cross-context behavioral advertising, personalized advertising, or targeted advertising may legally be considered a “sale,” “sharing,” or use for “targeted advertising.”
Information involved in these activities may include identifiers, device information, internet or electronic network activity, commercial or purchase information, product interests and preferences, and inferences regarding interests.
Where applicable, you can opt out of these activities through our Data Sharing Opt-Out page:
https://gearcozy.com/pages/data-sharing-opt-out
We also recognize the Global Privacy Control (“GPC”) where required by applicable law.
If we receive a valid GPC signal from your browser or device in a jurisdiction where we are legally required to honor it, we will treat that signal as a request to opt out of applicable sale, sharing, or targeted advertising for that browser or device.
Where Shopify is able to associate the browser or device with a Shopify account, Shopify may apply that choice to the associated account in accordance with its own systems and policies.
Other browser “Do Not Track” signals may not be recognized unless required by applicable law.
7. How We Disclose Personal Information
We may disclose personal information to Shopify in order to host, operate, protect, personalize, and improve the Services.
We may also disclose information to service providers that assist us with payment processing, website hosting, data analytics, customer support, email communications, marketing services, fraud prevention, cloud storage, order fulfillment, shipping, and delivery.
Subject to applicable law and your privacy choices, we may disclose certain information to advertising, analytics, social media, and marketing partners to measure advertising performance, provide targeted or personalized advertisements, conduct marketing campaigns, and understand customer engagement.
We may disclose information when you request, direct, or consent to the disclosure, including when you request delivery of an order or use a social media, login, or third-party service integration.
Information may also be disclosed in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar corporate transaction.
We may disclose information when reasonably necessary to comply with applicable law, respond to legal process or lawful government requests, protect our legal rights or other individuals, investigate fraud or illegal activity, or enforce our agreements and policies.
8. Our Relationship With Shopify
Our store is hosted and powered by Shopify.
Shopify processes personal information relating to your access to and use of the Services in order to provide its platform and related services.
Information submitted through Gearcozy may therefore be transmitted to and processed by Shopify and other service providers, including providers located outside your country of residence.
We may use Shopify features that help protect, personalize, grow, analyze, or improve our business. Certain Shopify features may use information from your interactions with Gearcozy together with information from your interactions with Shopify or other merchants, subject to Shopify's applicable terms, privacy practices, and your privacy choices.
For certain processing activities, Shopify may act as an independent controller and may be responsible for responding directly to requests regarding its processing of personal information.
You can learn more about Shopify's handling of consumer personal information by reviewing the Shopify Consumer Privacy Policy and Shopify's available privacy controls.
9. Third-Party Websites and Services
The Services may contain links to websites, applications, social networks, payment providers, or other services operated by third parties.
We do not control the privacy, security, accuracy, availability, or practices of third-party services.
If you visit a third-party website or provide information through a third-party service, that party's privacy policy and terms will apply.
Our inclusion of a third-party link does not necessarily constitute an endorsement of that third party.
Information you publicly post on third-party social networks or other public or semi-public services may be visible to others and may be collected or used by third parties.
10. Children's Privacy
The Services are not intended for children.
We do not knowingly collect personal information from children under the age at which they may legally provide consent in their jurisdiction.
If you are a parent or legal guardian and believe that a child has provided us with personal information, please contact us so that we can review the request and delete the information where required by applicable law.
We do not knowingly sell or share, as those terms are defined under applicable privacy law, personal information of individuals under 16 years of age.
11. Security
We use reasonable administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, loss, misuse, alteration, destruction, and unauthorized disclosure.
However, no website, network, transmission method, or electronic storage system can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.
You should avoid sending sensitive or confidential information through unsecured communication channels.
If you have an account, you are responsible for maintaining the confidentiality of your login credentials and for notifying us if you believe your account has been compromised.
12. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as otherwise permitted or required by law.
The appropriate retention period depends on factors such as the nature of the information, the purpose for which it was collected, whether you maintain an account with us, the duration of our relationship with you, order fulfillment requirements, customer support requirements, fraud prevention and security needs, tax and accounting obligations, legal limitation periods, and disputes or potential legal claims.
Transaction and order records may need to be retained after an order is completed to satisfy legal, tax, accounting, fraud-prevention, dispute-resolution, or recordkeeping requirements.
Marketing information may be retained until you unsubscribe, withdraw consent where applicable, or the information is no longer reasonably necessary for the relevant marketing purpose, subject to limited records we may retain to honor your opt-out request.
When personal information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it in accordance with applicable law.
13. International Data Transfers
Gearcozy, Shopify, and our service providers may process or store personal information in countries other than the country where you live.
Those countries may have different privacy or data protection laws.
Where applicable law requires safeguards for international transfers, we rely on legally recognized transfer mechanisms.
For transfers of personal data from the EEA, these mechanisms may include European Commission adequacy decisions, Standard Contractual Clauses, and other legally recognized safeguards.
For transfers from the UK, these mechanisms may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the European Commission Standard Contractual Clauses, and other legally recognized safeguards.
You may contact us for additional information about safeguards applicable to transfers of your personal data where required by law.
14. Your Privacy Rights and Choices
Depending on where you live, applicable law may provide you with certain rights regarding your personal information. These rights are not absolute and may be subject to exceptions.
You may have the right to request access to or information about personal information we maintain about you and how we process it.
You may have the right to request correction of inaccurate personal information.
You may have the right to request deletion of personal information, subject to applicable exceptions.
You may have the right to receive certain personal information in a portable and usable format.
In certain jurisdictions, you may have the right to request restriction of our processing of your personal information.
Where applicable, you may have the right to object to certain processing, including processing based on legitimate interests or processing for direct marketing.
Where we rely on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect processing that was lawful before your withdrawal.
Where applicable, you may opt out of the sale of personal information, sharing of personal information for cross-context behavioral advertising, or use of personal information for targeted advertising.
You may exercise applicable opt-out rights at:
https://gearcozy.com/pages/data-sharing-opt-out
Residents of certain U.S. states may also have a right to opt out of certain forms of profiling used in furtherance of decisions that produce legal or similarly significant effects.
Applicable privacy laws may provide additional rights regarding certain sensitive personal information.
Residents of certain U.S. states may have the right to appeal our refusal to act on a privacy request. Where applicable, you may submit an appeal by emailing support@gearcozy.com and including “Privacy Appeal” in the subject line.
15. Additional Rights for EEA and UK Residents
If you reside in the EEA or UK, subject to applicable exceptions, you may have the right to access your personal data, correct inaccurate personal data, request deletion, restrict processing, object to processing, receive certain data in a portable format, withdraw consent, object to direct marketing, and lodge a complaint with an appropriate data protection supervisory authority.
If processing is based on legitimate interests, you may object to that processing based on circumstances relating to your particular situation.
If we engage in automated decision-making that produces legal or similarly significant effects and applicable law gives you rights regarding that activity, we will provide the notices and rights required by law.
You may exercise your rights by contacting us using the information provided in the Contact Us section below.
16. Additional Information for U.S. Residents
Residents of certain U.S. states, including California and Colorado where applicable, may have additional privacy rights.
Depending on the law that applies, these rights may include the right to know or access personal information, obtain information about categories and sources of personal information, understand how personal information is used and disclosed, correct inaccurate information, delete information, obtain data portability, opt out of sale or targeted advertising, opt out of certain profiling, limit certain uses or disclosures of sensitive personal information where applicable, and exercise privacy rights without unlawful discrimination.
We may need to verify your identity before completing certain requests.
Where permitted by law, you may use an authorized agent to submit certain privacy requests on your behalf. We may require evidence that the agent is authorized to act for you and may require you to verify your identity directly.
17. California Privacy Notice
If the California Consumer Privacy Act, as amended (“CCPA”), applies to Gearcozy's processing of your personal information, California residents may have specific rights under that law.
The categories of personal information we may collect include identifiers and contact information, customer records, commercial and transaction information, internet or electronic network activity, approximate geolocation derived from technical data, inferences regarding preferences or interests, account information, and communications or customer service records.
We collect this information for the business and commercial purposes described in this Privacy Policy.
We may disclose these categories to service providers, contractors, Shopify, payment processors, shipping and fulfillment providers, analytics providers, marketing partners, advertising partners, and other parties described in this Privacy Policy.
Certain disclosures involving identifiers, commercial information, internet activity, or inferences for advertising purposes may be considered “selling” or “sharing” under the CCPA even though no money is exchanged for the information.
California residents may use our Data Sharing Opt-Out page or a valid Global Privacy Control signal to exercise applicable opt-out rights.
Where applicable, California residents may also have rights to know, access, delete, correct, opt out of sale or sharing, limit certain uses or disclosures of sensitive personal information, and receive equal service and pricing when exercising privacy rights.
18. Marketing Communications
You may unsubscribe from promotional emails at any time by using the unsubscribe link included in our marketing emails.
After unsubscribing, you may still receive non-promotional communications such as order confirmations, shipping notices, account notices, customer support responses, security notices, and legal or policy notices.
If you previously consented to other forms of marketing, you may withdraw that consent using the method provided in the relevant communication or by contacting us.
19. Global Privacy Control and Other Preference Signals
Where required by applicable law, we recognize valid Global Privacy Control (“GPC”) signals as requests to opt out of applicable sale, sharing, or targeted advertising.
The request generally applies to the browser or device transmitting the signal unless applicable technology and law allow the choice to be associated with your account.
Except where otherwise required by law, we may not respond to other automated browser-based “Do Not Track” mechanisms.
20. Exercising Your Privacy Rights
To submit a privacy request, please contact us at:
You may also use privacy controls made available through the Services, including our Data Sharing Opt-Out page where applicable.
We may request information necessary to reasonably verify your identity and protect your information from fraudulent requests.
The verification process may vary depending on the type of request, sensitivity of the information, risk of unauthorized access or deletion, and applicable legal requirements.
We will respond within the period required by applicable law.
If we cannot fulfill all or part of your request, we will provide an explanation where required by law.
21. Complaints
If you have concerns or complaints about how we handle your personal information, please contact us at:
We will review your concern and respond as appropriate.
Depending on where you live, you may also have the right to appeal our response to a privacy request, submit a complaint to a state attorney general or privacy regulator, or lodge a complaint with your local data protection supervisory authority.
For individuals in the EEA or UK, you may lodge a complaint with the competent data protection authority in the country where you live, work, or believe a violation occurred.
22. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technologies, service providers, privacy laws, or other legal, regulatory, security, or operational requirements.
When we update this Privacy Policy, we will post the revised version on the Services and update the “Last updated” date.
Where required by applicable law, we may provide additional notice of material changes.
23. Contact Us
If you have questions about this Privacy Policy, our privacy practices, or would like to exercise a privacy right, please contact us:
Gearcozy / PA Ecommerce LLC
Email: support@gearcozy.com
Mailing Address:
PA Ecommerce LLC
1942 Broadway STE314c
Boulder, CO 80302
United States
For purposes of applicable data protection laws, PA Ecommerce LLC is the data controller of personal information processed by Gearcozy, except where another party acts as an independent controller for its own processing activities.