PageContent

Privacy Policy

PRIVACY POLICY
LAST UPDATED: OCTOBER 2025

WHAT DO WE DO WITH YOUR INFORMATION
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address, and email address.
When you browse our store, we also automatically receive your computer’s Internet Protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
Email marketing (if applicable): With your permission, we may send you emails about our store, new products, and other updates.
Text marketing (if applicable): With your permission, we may send text messages about our store, new products, and other updates. Updates may include checkout reminders. Webhooks may be used to trigger the checkout reminder system.

CONSENT
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery, or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your express consent or provide you with an opportunity to say no.
If after you opt in you change your mind, you may withdraw your consent at any time by emailing support@macattackgear.com or by mail at:
MacAttack Gear, 8 Daniel R Drive, Milford, MA 01757

DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

SHOPIFY
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall.

PAYMENT
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the PCI-DSS (Payment Card Industry Data Security Standard). Your purchase transaction data is stored only as long as necessary to complete your transaction, then deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council.

THIRD-PARTY SERVICES
In general, the third-party providers used by us will collect, use, and disclose your information only to the extent necessary to perform the services they provide to us.
Certain third-party service providers, such as payment processors, shipping carriers, or analytics tools, have their own privacy policies.
Once you leave our store’s website or are redirected to a third-party site or app, you are no longer governed by this Privacy Policy or our Terms of Service.

SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to ensure it is not lost, misused, accessed, disclosed, altered, or destroyed.
If you provide us with credit card information, the data is encrypted using SSL (Secure Socket Layer) technology and stored with AES-256 encryption.

COOKIES
Here is a list of cookies that we use so you can choose whether to opt out of cookies:

_session_id – Allows Shopify to store session information (referrer, landing page, etc.)
_shopify_visit – Persistent for 30 minutes from last visit (internal stats)
_shopify_uniq – Counts the number of visits to a store by a single customer
cart – Stores information about the contents of your cart (2-week duration)
storefront_digest – Used to determine if current visitor has access to password-protected store

AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence.


U.S. STATE PRIVACY RIGHTS

To comply with current U.S. privacy laws, including the California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act (CPA), Connecticut (CTDPA), Delaware (DPPA), Oregon (OCPA), Texas (TDPSA), Utah (UCPA), and Virginia (VCDPA), MacAttack Gear extends the following rights to all customers:

  • Right to access the personal data we maintain about you

  • Right to request correction of inaccurate personal data

  • Right to request deletion of your personal data, with limited exceptions

  • Right to know what categories of data we collect and why

  • Right to opt out of the sale or sharing of personal data or targeted advertising

  • Right to receive a portable copy of your personal data

  • Right to appeal a denied request (where applicable)

HOW TO EXERCISE YOUR RIGHTS
You may submit a request by emailing support@macattackgear.com.
We will respond within 45 days as required by law.

NON-DISCRIMINATION
We will not deny products, charge different prices, or provide lower quality service because a customer exercises privacy rights.

AUTHORIZED AGENTS (CALIFORNIA + OTHER STATES)
To use an agent to submit a request, the agent must email us proof of authorization (such as a signed permission form or power of attorney).

APPEAL PROCESS (CO, CT, VA)
If we deny your request, you may appeal by replying to our response email with the subject line “Privacy Appeal.”

GLOBAL PRIVACY CONTROL (GPC) / DO NOT TRACK
MacAttack Gear honors recognized browser-based opt-out signals when legally required.


QUESTIONS AND CONTACT INFORMATION
To access, correct, amend, or delete any personal information we have about you, or for privacy-related questions:

support@macattackgear.com
MacAttack Gear – Privacy Compliance Officer
8 Daniel R Drive, Milford, MA 01757