PRIVACY POLICY

Last updated: September 10, 2026

Whoostrap (“Whoostrap,” “we,” “us,” or “our”) operates this online store and website, including the related information, content, features, tools, products, and services offered to customers (collectively, the “Services”).

Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, process, disclose, and otherwise handle your personal information when you visit or use our Services, make a purchase or other transaction, communicate with us, or otherwise interact with Whoostrap.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing, use, or disclosure of personal information, this Privacy Policy will apply to those matters.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood the practices described in this Privacy Policy.

1. PERSONAL INFORMATION WE COLLECT

For purposes of this Privacy Policy, “personal information” means information that identifies you, relates to you, describes you, or can reasonably be linked to you, directly or indirectly, as defined under applicable law.

It does not generally include information that has been anonymized, aggregated, or de-identified so that it cannot reasonably be associated with an identifiable individual.

Depending on how you interact with Whoostrap, your location, the features you use, and applicable law, we may collect or process the following categories of information:

Contact information, including your name, billing address, shipping address, telephone number, and email address.

Order and transaction information, including products viewed, added to your cart, purchased, returned, exchanged, or cancelled, as well as order history and transaction details.

Payment information, including information necessary to process your payment. Payment information may be collected and processed directly by Shopify, payment processors, banks, card networks, or other payment service providers. Whoostrap does not necessarily receive or store your complete payment card information.

Account information, where account functionality is available, including login information, preferences, settings, and account-related information.

Communications, including information you provide when contacting customer support, submitting a request, making a complaint, requesting a return or refund, or otherwise communicating with us.

Device and technical information, including your IP address, browser type, device information, operating system, network information, cookie identifiers, and similar technical identifiers.

Usage information, including information about how you access, browse, and interact with our website and Services.

Marketing and advertising information, including information concerning your interactions with our advertisements, marketing communications, and promotional campaigns.

We only collect and process personal information to the extent reasonably necessary for our business purposes or as otherwise permitted or required by applicable law.

2. SOURCES OF PERSONAL INFORMATION

We may collect personal information:

• directly from you when you place an order, create an account, contact us, request customer support, or otherwise provide information to us;
• automatically when you access or use our Services, including through cookies, pixels, analytics technologies, and similar tools;
• from Shopify and service providers acting on our behalf;
• from payment processors, fulfillment providers, shipping carriers, analytics providers, advertising platforms, and other service providers;
• from business, advertising, and marketing partners; and
• from other third parties where permitted by applicable law.

3. HOW WE USE YOUR PERSONAL INFORMATION

We may use personal information for the following purposes:

Providing and Improving Our Services

We may use personal information to:

• process and fulfill orders;
• process payments;
• arrange shipping and delivery;
• manage returns, refunds, and other transactions;
• provide customer support;
• maintain customer accounts;
• remember customer preferences;
• personalize the shopping experience;
• recommend relevant products;
• operate, maintain, troubleshoot, analyze, and improve our website and Services; and
• otherwise perform our contractual obligations to customers.

Marketing and Advertising

Where permitted by applicable law, we may use personal information to provide marketing, advertising, promotional communications, product recommendations, or personalized content.

This may include communications by email, SMS, or other permitted channels, as well as advertising displayed through Whoostrap, Shopify, social media platforms, search engines, or other websites and services.

Where applicable law requires consent for certain marketing or advertising activities, we will rely on such consent or another lawful basis as required.

You may opt out of promotional emails at any time by using the unsubscribe link provided in those communications.

Security and Fraud Prevention

We may use personal information to:

• authenticate users and transactions;
• protect accounts and payment processes;
• detect and prevent fraud, abuse, unauthorized transactions, or other unlawful activity;
• investigate suspicious activity;
• protect our customers, business, website, systems, and service providers; and
• enforce our Terms of Service and other policies.

Customer Communications

We may use your information to respond to questions, provide customer service, communicate about orders, shipping, returns or refunds, send important service notifications, and otherwise maintain our relationship with you.

Legal and Regulatory Purposes

We may process and disclose personal information where reasonably necessary to:

• comply with applicable laws and regulations;
• respond to valid legal processes or governmental requests;
• cooperate with law enforcement where legally required;
• establish, exercise, or defend legal claims;
• investigate disputes, chargebacks, fraud, or violations of our policies;
• enforce our agreements and policies; or
• protect our rights, property, customers, users, or others.

4. COOKIES AND SIMILAR TECHNOLOGIES

Whoostrap, Shopify, and certain service providers may use cookies, pixels, tags, local storage, and similar technologies to operate and secure the Services, remember preferences, understand website usage, measure performance, provide analytics, prevent fraud, and support advertising and marketing activities.

Certain cookies may be necessary for the operation of the website, while others may be used for analytics, personalization, or advertising.

Your ability to control non-essential cookies depends on your location, browser settings, and the privacy controls made available through our website or Shopify.

Disabling certain cookies may affect the availability or functionality of portions of the Services.

5. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information where reasonably necessary to operate Whoostrap and provide the Services, including:

Shopify, which hosts and powers our online store and provides technology necessary to operate the Services.

Payment providers, banks, payment processors, and card networks for processing and securing transactions.

Fulfillment and logistics providers, including warehouses, fulfillment centers, shipping carriers, postal operators, couriers, and logistics partners necessary to prepare, ship, track, and deliver orders.

Because Whoostrap serves customers worldwide and may use multiple fulfillment locations, information necessary to fulfill an order may be transmitted to logistics providers located in a country or region different from your own.

Technology and service providers, including hosting, cloud storage, customer support, analytics, cybersecurity, fraud prevention, and other operational providers.

Marketing and advertising partners, where permitted by applicable law, for advertising, analytics, attribution, and marketing purposes.

Professional advisers, such as legal, accounting, insurance, compliance, or other professional advisers where reasonably necessary.

Governmental or legal authorities where disclosure is required or permitted by applicable law.

We may also disclose information:

• when you direct or authorize us to do so;
• in connection with a merger, acquisition, restructuring, financing, sale of assets, insolvency, bankruptcy, or other business transaction;
• to protect or defend Whoostrap, our Services, customers, users, or third parties; or
• where otherwise permitted or required by applicable law.

We do not disclose personal information except as described in this Privacy Policy or as otherwise permitted by applicable law.

6. SHOPIFY

Our Services are hosted and powered by Shopify.

Shopify collects and processes personal information concerning your access to and use of our Services in order to provide, secure, personalize, and improve Shopify’s services.

Information you submit through our store may be transmitted to Shopify and other service providers, including providers located in countries other than your country of residence.

Shopify may also process information obtained from your interactions with our store, other merchants, and Shopify in accordance with its own privacy practices and applicable law.

For information about how Shopify processes consumer personal information and the privacy rights available through Shopify, please consult Shopify’s Consumer Privacy Policy and privacy portal.

7. INTERNATIONAL FULFILLMENT AND DATA TRANSFERS

Whoostrap is a United States-based online store serving customers worldwide.

We may use fulfillment centers, warehouses, logistics providers, technology providers, and other service providers located in different countries and regions.

As a result, your personal information may be transferred, stored, or processed outside your country of residence where reasonably necessary to provide our Services, fulfill orders, process payments, prevent fraud, provide customer support, or operate our business.

Where applicable law requires specific safeguards for international transfers of personal information, we will rely on appropriate mechanisms recognized under applicable law.

For transfers from the European Economic Area or United Kingdom, these may include adequacy decisions, Standard Contractual Clauses, the UK International Data Transfer Addendum or other legally recognized mechanisms, as applicable.

8. THIRD-PARTY WEBSITES AND SERVICES

Our Services may contain links to websites, social media platforms, applications, or other online services operated by third parties.

Whoostrap does not control these third-party services.

To the fullest extent permitted by applicable law, we are not responsible for the privacy, security, accuracy, availability, or practices of websites or services operated by third parties.

We encourage you to review the privacy policies and terms applicable to any third-party service before providing personal information to it.

The inclusion of a third-party link does not, by itself, constitute an endorsement of that third party or its practices.

9. CHILDREN’S PRIVACY

Our Services are intended for a general audience and are not directed toward children.

We do not knowingly collect personal information from children in violation of applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us inappropriately, please contact us at contact@whoostrap.com.

Where appropriate and legally required, we will take reasonable steps to delete the relevant information.

10. DATA SECURITY

We and our service providers use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no method of transmission over the Internet, electronic storage system, or security measure is completely secure.

Accordingly, to the fullest extent permitted by applicable law, we cannot guarantee the absolute security of personal information.

Customers should avoid transmitting highly sensitive or confidential information through unsecured communication channels.

You are responsible for maintaining the confidentiality of any account credentials and for notifying us if you reasonably believe that your account or information has been compromised.

11. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

• provide and maintain the Services;
• fulfill orders;
• maintain business and transaction records;
• comply with tax, accounting, regulatory, and other legal obligations;
• prevent fraud and abuse;
• resolve disputes;
• respond to chargebacks or claims; and
• establish, exercise, or defend legal rights.

Retention periods vary depending on the type of information, the nature of our relationship with you, our legitimate business needs, and applicable legal requirements.

When information is no longer reasonably required, we may delete, anonymize, or otherwise dispose of it in accordance with applicable law.

12. YOUR PRIVACY RIGHTS

Depending on where you live and subject to applicable law, you may have certain rights concerning your personal information.

These may include the right to:

• request access to personal information we hold about you;
• request correction of inaccurate personal information;
• request deletion of certain personal information;
• request a copy or portability of certain personal information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• opt out of certain marketing communications; and
• exercise other privacy rights provided by applicable law.

These rights are not absolute. They may be subject to legal exceptions, verification requirements, retention obligations, fraud prevention requirements, or other limitations permitted by applicable law.

For example, we may be required or permitted to retain certain transaction information even after receiving a deletion request where necessary for tax, accounting, fraud prevention, dispute resolution, or other legal purposes.

We may take reasonable steps to verify your identity before processing a privacy request.

Where permitted by law, an authorized agent may submit a request on your behalf, subject to reasonable verification of the agent’s authority and your identity.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

13. EEA AND UNITED KINGDOM USERS

If you are located in the European Economic Area or United Kingdom, applicable data protection law may provide additional rights concerning your personal information.

Depending on the circumstances, you may have rights to access, correct, erase, restrict, or object to certain processing of your personal information and, where applicable, receive your information in a portable format.

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Where required, our processing will rely on an appropriate legal basis, which may include performance of a contract, compliance with a legal obligation, legitimate interests, or consent.

You may also have the right to lodge a complaint with the competent data protection authority in your country.

14. UNITED STATES PRIVACY RIGHTS

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on your state of residence and subject to applicable exceptions, these may include rights to access, correct, or delete personal information and rights relating to certain forms of targeted advertising, sharing, or sale of personal information as those terms are defined by applicable law.

Where these rights apply to Whoostrap, requests may be submitted using the contact information below or through privacy controls made available through our Services.

We may verify requests and deny or limit requests where permitted by applicable law.

15. MARKETING COMMUNICATIONS

You may unsubscribe from promotional emails by using the unsubscribe link contained in the relevant communication.

Even if you opt out of promotional communications, we may continue to send non-promotional communications where necessary, including communications concerning your orders, payments, shipping, returns, account, security, or customer service requests.

16. FRAUD, CHARGEBACKS AND DISPUTES

Where reasonably necessary, we may retain, use, and disclose relevant personal information to investigate or respond to suspected fraud, unauthorized transactions, payment disputes, chargebacks, return abuse, or other disputes.

This may include providing relevant order information, transaction records, shipping information, tracking data, delivery confirmation, customer communications, and other appropriate evidence to Shopify, payment processors, financial institutions, card networks, carriers, insurers, legal advisers, or other parties involved in resolving the matter.

Any such processing will be carried out subject to applicable law.

17. PRIVACY COMPLAINTS

If you have concerns regarding our handling of personal information, please contact us using the information provided below.

We will review legitimate privacy concerns and respond as required by applicable law.

Depending on your place of residence, you may also have the right to complain to an applicable privacy or data protection authority.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, technologies, business operations, or legal and regulatory requirements.

When we update this Policy, we will publish the revised version and update the “Last updated” date.

Where applicable law requires additional notice or consent for a material change, we will provide it as required.

19. CONTACT US

For questions regarding this Privacy Policy, our privacy practices, or to submit a privacy request, please contact:

Whoostrap
United States
Email: contact@whoostrap.com

We aim to respond to customer and privacy inquiries within 24 business hours, although additional time may be required for complex requests, identity verification, weekends, public holidays, or where applicable law permits or requires a different response period.

For purposes of applicable privacy laws, Whoostrap is the controller or business responsible for personal information processed through our Services, except where another party, such as Shopify or a payment provider, acts independently as a controller or business with respect to its own processing activities.