Privacy Policy

Withitgear.com Privacy Policy

Effective and Last Updated: September 10, 2026

Applicability: United States store customers and visitors

Please Read This Policy Together with Our Store Terms

This Store Privacy Policy is a transparency notice describing how WITHit ("WITHit," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information on our Shopify online store at withitgear.com and related store checkout, account, and marketing pages (the "Store"). It is not a standalone contract and does not, by itself, create an agreement to arbitrate, a warranty, or a license of intellectual property rights. This Policy does not create rights or remedies except as required by applicable law. Failure to restate a statutory exception in this Policy does not waive that exception.

The binding contract that governs purchases and use of the Store is the WITHit Store Terms of Use (or Terms of Service) posted on the Store, which control dispute resolution, limitation of liability, and related commercial terms. If you do not agree with this Policy or those Terms, do not use the Store.

This Policy is provided in English. If we make a translation available, the English version controls to the extent permitted by law. If you need this Policy in an alternative format because of a disability, contact us using Section 16.

1. Scope --- Store Only

This Policy covers personal information collected through the Store: browsing, search, cart, checkout, store accounts, order tracking, product reviews if offered, customer-service messages about orders, and email or SMS programs you join from the Store.

This Policy does not cover the WITHit companion mobile application, paired Devices, cloud fitness accounts, heart-rate or sleep metrics, workout GPS, or other Device sensor data. Those practices are described in the WITHit Privacy Policy (Devices and App) and the WITHit Consumer Health Data Notice, available in the WITHit App and with our legal notices. Buying a Device on the Store does not create an App account and does not authorize us to collect heart-rate, sleep, location, or other Consumer Health Data from that Device. That collection happens only if you later install the App and enable those features under the App Policy.

The Store is intended for customers in the United States. We do not offer the Store as a service directed to the EEA, United Kingdom, or Switzerland. If you visit or order from outside the United States, you do so on your own initiative.

2. Relationship with Shopify

The Store is hosted on Shopify Inc. and its affiliates ("Shopify"). Shopify provides the e-commerce platform that allows us to display products, process carts and checkout, store storefront data, and operate store accounts. Information you submit on the Store is transmitted to Shopify and stored in Shopify's systems, which may be located in the United States or other countries where Shopify operates.

Shopify processes certain Store data on our instructions as a service provider / processor (for example, hosting product pages and checkout that we configure). Shopify also processes some information as an independent controller to operate and secure the Shopify platform. Shopify's practices are described in the Shopify Consumer Privacy Policy at https://privacy.shopify.com and Shopify's platform policies. We are not responsible for Shopify's independent platform processing.

3. Information We Collect on the Store

3.1 Information you provide

  • Order and account details: name, email address, phone number, shipping and billing address, store password, order notes, and communication preferences.
  • Purchase details: products ordered, amounts, discount codes, gift-card redemptions, returns, exchanges, and warranty or replacement requests related to a Store order.
  • Payment details: payment method selection. Full payment card numbers are collected and processed by Shopify and/or the payment processor (for example Shopify Payments, Shop Pay, PayPal, or Apple Pay). We do not store full payment card numbers.
  • Support content: emails, chat messages, call notes, photos of damaged goods you send, and similar communications about a Store order.
  • Marketing sign-up data: email address and, if you separately opt in, mobile number for SMS.
  • Reviews or UGC, if you choose to submit them.

3.2 Information collected automatically

  • Device and log data: IP address, browser type, operating system, device type, referring URL, pages viewed, dates and times of visits, and approximate location derived from IP.
  • Store interaction data: products viewed, cart events, checkout steps, and campaign or coupon parameters.
  • Cookies, pixels, local storage, and similar technologies, as described in Section 6.

3.3 Information from service providers

Shopify, payment processors, shipping carriers, fraud-prevention tools, and email or SMS vendors may provide status information back to us (for example, payment success, shipment tracking, bounce or STOP events).

3.4 Information we do not collect on the Store

The Store does not collect fingerprints, face scans, genetic data, neural data, Social Security numbers, or Device sensor telemetry (heart rate, sleep staging, workout GPS, step logs from a paired Device). Do not email government IDs, full card numbers, or Device data exports to us.

4. California / CPRA Notice at Collection (Store)

The table below is our notice at collection for the Store for the last 12 months and going forward. A short version of this notice is also provided at or before checkout and account creation. We do not collect Store personal information to infer health diagnoses, reproductive status, or other unrelated sensitive characteristics.


CPRA Store Examples Sources Disclosed for Retention / Category a Business Criteria Purpose To


Identifiers Name, email, phone, You; Shopify; Shopify; Store account life shipping/billing browsers and payment plus up to 7 years address, store devices processors; for order/tax account ID, IP shipping records; marketing address, cookie IDs carriers; contacts until you email/SMS opt out plus a short vendors; suppression record. customer
support; fraud
tools

Customer Account profile, You; Shopify; Fulfillment, Commerce records up Records order history, fulfillment payment, to 7 years; support returns, warranty partners support, and threads up to 3 claims, support accounting years unless a legal messages providers hold applies.

Commercial Products viewed or You; Store; Shopify; Order-related Information purchased, cart Shopify fulfillment; commercial records contents, gift-card analytics up to 7 years; use, discount codes processors browsing events typically 12--24 months.

Internet / Pages viewed, Your browser; Shopify; Typically up to 24 Network referring URL, Shopify; analytics months, unless Activity device/browser analytics or processors; needed longer for type, session logs, advertising advertising security, fraud, or cookie and pixel tools enabled partners if legal holds. events on the Store pixels are
enabled

Approximate Coarse location Your Shopify; Tied to the session Location derived from IP connection; payment and or order; address for tax, Shopify fraud providers order-related shipping, and fraud location kept with commerce records.

Inferences Purchase-interest Derived from Email/SMS Until you opt out of or engagement store vendors acting marketing or the segments used to activity as processors segment is no longer send relevant store used. emails if you
subscribe

Sensitive Store account You; payment Shopify and the Credentials stored Personal password; payment processor payment as hashes or tokens Information credentials handled processor only, by (limited) by the processor to complete Shopify/processor; (we do not store checkout and not used to infer full PAN) prevent fraud characteristics.

If advertising or social-media pixels are enabled on the Store, some internet-activity identifiers may be "sold" or "shared" under CPRA as described in Section 7. Otherwise we disclose Store information only for the business purposes in the table.

5. How We Use Store Information

We use Store personal information only for these purposes:

  • To display the Store, maintain your cart and session, and operate a store account you create.
  • To process, fulfill, ship, and provide status on orders, returns, exchanges, and warranty replacements purchased on the Store.
  • To process payments and prevent fraud, chargebacks, and abuse.
  • To provide customer service about Store orders.
  • To send transactional messages (order confirmation, shipping, return instructions, security notices).
  • To send marketing email only if you subscribe or as otherwise permitted by law, with an unsubscribe link in each marketing email.
  • To send marketing SMS only if you give separate prior express written consent, as described in Section 8.
  • To measure Store performance using Shopify analytics and bound processors.
  • To operate advertising or social-media pixels if those tools are enabled on the Store, as described in Section 7.
  • To keep tax, accounting, and consumer-protection records.
  • To establish, exercise, or defend legal claims and to comply with law.

We do not use Store information for automated decisions that produce legal or similarly significant effects concerning credit, insurance, housing, or employment.

6. Cookies and Similar Technologies

The Store uses cookies and similar technologies as follows:

  • Strictly necessary: session, cart, checkout, account authentication, load balancing, and fraud prevention. The Store cannot function reliably if you block these.
  • Shopify platform and analytics: Shopify sets cookies and collects Store usage data to host the Store and provide merchant analytics.
  • Preferences: language or similar settings if offered.
  • Advertising and measurement pixels: if enabled in our Shopify admin or via a Store app (for example Google, Meta, TikTok, Pinterest, or similar), those partners may set cookies or read identifiers to measure ads or build audiences. Those tools are a "sale" or "share" under some state laws when used for cross-context behavioral advertising. See Section 7.

You can block or delete cookies in your browser. Blocking necessary cookies will break cart and checkout. Browser controls do not stop all server-side Store logs (for example an IP address recorded with an order).

We honor Global Privacy Control (GPC) and similar universal opt-out preference signals on the Store as an opt-out of sale/share and targeted advertising for that browser, to the extent the signal is valid and we can reasonably apply it to Store technologies we control.

7. Sale, Sharing, and Targeted Advertising

WITHit does not sell Store customer lists for money and does not sell Store personal information in the everyday sense of renting or trading mailing lists.

Some state laws define "sell" and "share" more broadly to include making identifiers available to advertising or social-media companies through pixels and similar tools for cross-context behavioral advertising. Whether the Store engages in that activity depends on which apps and pixels are enabled.

If such pixels or apps are enabled, we disclose internet-activity identifiers and device identifiers to those advertising partners for advertising and measurement, and you have the right to opt out. To opt out:

  • Enable GPC in your browser; we treat a valid GPC signal as an opt-out for that browser;
  • Use any "Your Privacy Choices," "Do Not Sell or Share My Personal Information," or cookie-preference control posted in the Store footer when those tools are active; or
  • Email support@withitgear.com with the subject line "Do Not Sell or Share" from the address associated with your Store order or account.

If no advertising pixels or sale/share technologies are enabled, these opt-out methods simply confirm our default practice that we do not sell or share Store personal information for cross-context behavioral advertising.

We do not have actual knowledge of selling or sharing personal information of consumers under 16 years of age. We do not use sensitive personal information collected on the Store to infer characteristics about you. Store account passwords and payment tokens are used only to provide checkout and secure the Store.

Shopify's own platform advertising or shopper features, if you use Shop Pay or other Shopify shopper services, are governed by Shopify's policies, not this Policy.

8. Email and SMS

8.1 Email

Transactional email (receipts, shipping, security) may be sent to the address you use at checkout. Marketing email is sent only if you subscribe through a Store form, checkout opt-in, or other lawful mechanism. Every marketing email includes an unsubscribe link. Unsubscribing from marketing does not stop transactional order messages.

8.2 Marketing SMS

We do not send marketing text messages unless you give separate, affirmative prior express written consent (for example a dedicated unchecked SMS opt-in). Creating a Store account or completing a purchase is not, by itself, consent to marketing SMS. Consent is not a condition of purchase.

If you opt in, message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. You may also opt out by sending STOP to +1 (866) 925-2822. Opting out of marketing SMS does not opt you out of one-time transactional texts about an order you placed (for example a shipping notice to the number you gave at checkout), except where the carrier or law requires otherwise.

Our marketing SMS program is directed to United States customers. If you are in Canada or another jurisdiction with separate anti-spam rules, do not opt in unless we have presented a consent flow that meets those rules.

9. How We Disclose Store Information

9.1 Service providers and processors

We disclose Store information to vendors that host the Store, process payments, fulfill and ship orders, send email or SMS, provide customer support tools, and perform fraud prevention or accounting. They may use the information only to provide those services to us, except to the extent a provider (including Shopify or a payment network) acts as an independent controller under its own policy.

9.2 Shopify and payments

Checkout data is disclosed to Shopify and the payment processor you select to authorize the charge and complete the order. We do not receive or store full payment card numbers.

9.3 Shipping and fulfillment

Name, address, phone number, and order contents are disclosed to warehouses and carriers (for example USPS, UPS, FedEx, or similar) to deliver the order.

9.4 Advertising partners

If advertising pixels are enabled, we disclose the limited identifiers described in Section 7 to those partners.

9.5 Corporate transactions

If we sell, merge, or reorganize the business, Store customer information may transfer to the successor. We will require the successor to handle it consistent with this Policy and will provide any notice required by law. This Store Policy does not authorize a transfer of Device Consumer Health Data; that data is governed by the App Policy and Consumer Health Data Notice.

9.6 Legal and safety

We disclose information if we believe in good faith it is required by a valid legal process, to enforce our Store Terms, or to protect WITHit, our customers, or the public from fraud, security threats, or illegal activity.

9.7 At your direction

We disclose information when you direct us to (for example a gift-ship address or a review you post publicly).

9.8 What we do not do

We do not disclose Store personal information to unaffiliated "businesses and individuals" for their independent marketing except as described in Section 7 (advertising pixels, if enabled) or with your direction. We do not share Store personal information with third parties for those third parties' own direct-mail marketing lists.

10. Retention

We keep Store personal information only as long as needed for the purposes in this Policy, including:

  • Active store-account data for the life of the account;
  • Order, tax, warranty, and accounting records for up to 7 years or longer if the law requires;
  • Support records for up to 3 years;
  • Security and fraud logs for up to 12--24 months, or longer to resolve an incident;
  • Marketing contact data until you opt out, plus a minimal suppression record so we can honor the opt-out;
  • Backup copies, which are overwritten on the ordinary backup cycle.

When we no longer need the information, we delete or de-identify it. Legal holds pause deletion until released. Deleting a Store account does not delete records we must keep for tax or warranty, and does not delete an App/Device account (use the App deletion tools described in the App Policy).

11. Security

The Store is hosted by Shopify on infrastructure that uses industry-standard encryption in transit (HTTPS/TLS). Payment card data is handled by the payment processor, not stored as full PAN on systems we control. We use administrative access controls for the Shopify admin. No website or transmission is completely secure. You are responsible for keeping store-account credentials confidential and for signing out on shared computers.

12. Your Choices

  • Decline to provide optional fields; checkout still requires information needed to ship and tax the order.
  • Update name, address, and email in your Store account if you created one, or by contacting support.
  • Unsubscribe from marketing email via the link in the message.
  • Opt out of marketing SMS via STOP or +1 (866) 925-2822.
  • Control cookies in your browser and send GPC.
  • Opt out of sale/share as described in Section 7.
  • Request access, correction, or deletion as described in Section 13.

13. U.S. State Privacy Rights

Residents of states that have enacted comprehensive consumer privacy statutes---including, without limitation, California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island, and any other state law that applies to us---may have some or all of the following rights, subject to that statute's scope, exceptions, and verification rules:

  • Access and portability: confirm processing and obtain a copy of Store personal data.
  • Correction of inaccurate Store personal data.
  • Deletion, subject to tax, fraud, and other legal exceptions.
  • Opt out of sale, sharing, and targeted advertising, including via GPC.
  • Limit use of sensitive personal information (we use Store SPI only for checkout, account security, and fraud prevention).
  • A list of specific third parties to which we have disclosed your data or, if we do not keep consumer-specific recipient logs, a list of specific third parties to which we have disclosed any consumer's Store data (Minnesota and similar laws).
  • Non-discrimination for exercising a privacy right.

To submit a request, email support@withitgear.com with the subject line "Privacy Rights Request" or call (800) 701-9484. We will verify by matching email and order or account details and may use a confirmation loop. We will not ask for a government ID for a routine Store request. We may deny a request we cannot verify, that is manifestly unfounded or excessive, or that seeks records we are not required to keep. We will respond within 45 days, with one 45-day extension if reasonably necessary and with notice.

Authorized agents may submit a request where the statute allows, with signed permission from you or a valid power of attorney. We may still need to verify you directly.

If we deny a request, you may email support@withitgear.com with the subject line "Privacy Appeal" within 45 days. We will decide the appeal within 45 days. You may also contact your state attorney general or, in California, the CPPA.

California Shine the Light (Civil Code § 1798.83): we do not disclose Store personal information to third parties for those third parties' direct-mail marketing purposes.

We do not operate financial-incentive or "pay-for-privacy" programs on the Store.

14. Children

The Store is not directed to children under 13. We do not knowingly collect personal information from children under 13 on the Store. If you believe we have, contact support@withitgear.com and we will delete the Store data as required.

A purchaser should be 18 or the age of majority, or a parent or guardian buying for a household. We do not sell or share personal information of consumers we know are under 16.

15. Changes

We may update this Policy. The "Effective and Last Updated" date will change. Material changes will be posted on this page and, where required, announced by email to the address on your Store account or last order. Changes apply going forward. If a law requires consent before a new use of information we already have, we will obtain it. We will not apply a new advertising-pixel "sale" or "share" to historical Store data without the notice or opt-out the law requires.

16. Contact

  • Legal entity: Sol-Light, LLC dba WITHit
  • Email: support@withitgear.com
  • Telephone: (800) 701-9484
  • Mailing address: 10161 West Park Run Drive, Las Vegas, Nevada 89145 USA
  • SMS help / opt-out: HELP or STOP to +1 (866) 925-2822

Do not email unencrypted government identification, full payment card numbers, medical records, or Device data exports.

17. Related Notices

  • This Store Privacy Policy --- withitgear.com storefront only.
  • WITHit Privacy Policy (Devices and App) --- companion App, Devices, and cloud fitness accounts.
  • WITHit Consumer Health Data Notice --- Washington, Nevada, and similar health-data laws for Device/App data.
  • Store Terms of Use --- contract for purchases and site use.
  • Shopify Consumer Privacy Policy --- https://privacy.shopify.com

18. Non-Waivable Rights and Precedence

Nothing in this Policy waives a non-waivable consumer privacy right. If this Policy and the Store Terms conflict on how Store personal information is handled, this Policy controls. If this Policy and the WITHit Privacy Policy (Devices and App) or the Consumer Health Data Notice conflict on Device or App data, those documents control. For intellectual property, warranties, limitation of liability, and dispute resolution arising from a Store purchase or site use, the Store Terms control.