Privacy policy

PRIVACY STATEMENT

LAST UPDATED: January, 4, 2024

THIS PRIVACY POLICY DESCRIBES HOW YOUR PERSONAL INFORMATION IS COLLECTED, USED, AND SHARED WHEN YOU VISIT OR MAKE A PURCHASE FROM ATHSPORT.CO (the "Site").

This privacy notice ("Privacy Notice") is intended to provide you with specific details about how ATH SPORT, LLC ("ATH," "we," and "us") collects and processes your personal and personally identifiable information through your use of its website and associated services (collectively, the "Website").

You understand and agree that ATH may store and process your personal information on computers located outside of your jurisdiction, including, but not limited to, in the United States. By using the Website, you agree to the collection and processing of your personal or personally identifiable information outside of your jurisdiction.

Before using the Website or providing information to us, please carefully review this Privacy Notice. By using or accessing the Website, you agree that we may collect and use your personal and personally identifiable information in accordance with this Privacy Notice, as revised from time to time. ATH may modify, amend, replace, or suspend this Privacy Notice at any time. If you have any questions or suggestions regarding our Privacy Notice, or if your personal information is not accurate or complete, please contact us at:

ATH SPORT LLC
221 W 9th St
Wilmington, DE 19801
support@athsport.co

By providing ATH with your personal or personally identifiable data and using the website, you warrant that you are over the age of eighteen (18) or otherwise above the age of majority within your jurisdiction. If you are younger than eighteen (18) or the age of majority within your jurisdiction, please do not use the ATH website and please do not provide personal information to us.

----

SECTION 1 - WHAT INFORMATION DO WE COLLECT AND WHAT DO WE DO WITH IT?

When you use the website, we may collect personal or personally identifiable information from you ("PII"). PII may include any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual. It does not include anonymized data.

We may collect and process the following categories of PII about you:

Communication Data
Communication data includes any communication that you may send to us through the website, email, or social media. We process this data to communicate with you by email or other means, to provide you with customer support, to record logs of our communication, and to store information to respond to legal claims. ATH' lawful ground for collecting and processing this PII is to respond to communications sent by you to us, to keep records of our communication, and to pursue or defend against legal claims.
User Data
User data includes data about how you use the website and any data that you post to or authorize through the website, such as your name, address, country, phone number, and email address. This includes data stored in persistent cookies when you login to the website and analytics data that is collected when you use the website. We collect and process this data to operate the website, to authenticate you as a user of the website, to ensure that timely and relevant content is provided to you, to secure the website, to ensure that the website operates in a fast and efficient manner, and to maintain backups of the website. ATH' lawful ground for processing this user data is its legitimate business interests in administering and offering the website and to fulfill your orders for products through the website.
Technical Data
Technical data includes data about your use of the website, such as your IP address, your login data, your phone number, your mobile device model, your operating system, your geolocation, and your time zone. We may collect this data from your use of the website and from advertising IDs. ATH processes this data to analyze your use of the website, to route website traffic, to administer and secure the website, to provide location-relevant content, and to troubleshoot problems with the website. ATH' lawful ground for collecting and processing this technical data is its legitimate interests in administering and offering the website and to grow its business and marketing strategy.
Marketing Data
Marketing data includes data about your preferences in receiving and interacting with ATH' advertisements or content on the website or on third party websites. We collect this data from your use of the website andfrom third party advertising IDs created through advertising programs, such as Google Advertising IDs, Facebook Advertising IDs, and TikTok Advertising IDs. ATH does not connect advertising identifiers to persistent device identifiers, suchas MAC addresses or mobile device IDs. ATH' lawful ground for collecting and processing this marketing data is its legitimate interests in administering and offering the website and to grow its business and marketing strategy by providing advertisements, including remarketing advertisements, to you.
Personally Sensitive Data
Personally sensitive data includes data about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, union membership, or information about your health. ATH does not collect personally sensitive data.

ATH will only use your PII for the purpose for which it was collected. If ATH needs to use your PII for an unrelated new purpose, ATH will provide you with notice of this new use and will explain the lawful ground for such processing. ATH may process your PII without your knowledge or consent where required or permitted by law.

ATH does not use your PII to automatically make any decisions or to create an automated profile about you.

MARKETING COMMUNICATIONS

As stated above, ATH' lawful ground for sending you marketing communications is either consent or its legitimate business interests, such as to grow its business by advertising products to you. ATH may send you marketing communications if you have asked for information concerning its goods or services or if you have agreed to, and have not opted out from, receiving marketing communications. You may ask ATH to stop sending you marketing messages at any time by logging into the website to adjust your marketing preferences within your user account or by following the opt-out link in any marketing message sent to you. If you opt out of receiving marketing communications, your opt-out does not extend to PII provided for other purposes.

SECTION 2 - CONSENT

How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at support@athsport.co or mailing us at:

ATH SPORT LLC
221 W 9th St
Wilmington, DE 19801

SECTION 3 - DISCLOSURE OF PERSONAL INFORMATION

ATH may share your PII with the following parties:

Service providers that provide ATH with information technology, software as a service, cloud storage, or other administrative services; Service providers, such as distributors, warehouses, or wholesalers, that provide ATH with products for sale to you in order to fulfill your product orders; ATH's accountants, auditors, insurers, or attorneys; Law enforcement agencies upon the receipt of a subpoena or court order or where necessary to protect ATH's personnel or property; and Government bodies that require ATH to report its processing activities.

ATH may also transfer PII to third parties when it sells, transfers, or merges any part of its business or assets.

ATH requires all third parties that receive a transfer of PII from ATH to maintain the same level of respect for the protection of PII as ATH and ATH only allows third parties to process your personal data for the specific purposes listed in this Privacy Notice.

SECTION 4 - SHOPIFY 

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.

Payment:
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Shopify’s Terms of Service here or Privacy Statement here.

SECTION 5 - COLLECTION OF DATA FROM THIRD-PARTIES

ATH may collect data about you through cookies and other technologies. This helps ATH understand how you use the website and to understand any patterns that may be associated with your use of the website. This aids ATH in developing or improving its website and marketing communications in response to your needs or wants.

ATH may use session or persistent cookies. Session cookies are only stored on your computer or mobile device during your use of the website and are automatically deleted when you close your web browser. Session cookies may be used to direct internet traffic to a server that is closer to you or to allow us to identify you as you move between pages of the website. Persistent cookies are stored as a file on your computer or mobile device that remains on your computer or mobile device even after you close your web browser. Persistent cookies can be read by the website that created the cookie when you revisit it again. ATH may use persistent cookies to authenticate you when you return to the website so that you do not have to login again or when it utilizes Google Analytics or other analytics providers, which is intended to track the origin and behavior of traffic to the website. ATH may use the following analytics providers, and you are directed to review their cookie policies:

Facebook Pixel
Facebook Signal
Google Global Site Tag
Google Analytics
Google Analytics 4
Google Optimize 360
Google Conversion Linker
Google Tag Manager
Klaviyo
Postscript
Shopify
Mouseflow

ATH may also receive data from third parties including analytics providers or advertising networks such as Google, Facebook, TikTok, or Apple. These third parties may be based outside of your jurisdiction.

THIRD PARTY LINKS

ATH' website may include links to third party websites and applications. By clicking on third party links, you may allow third parties to collect or share data about you. ATH does not control these third-party links and you are advised to review their respective privacy policies.

SECTION 6 - SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

RETENTION OF DATA

We will only retain your PII for so long as necessary to fulfill the purposes for which it is collected under this Privacy Notice or for the purposes of satisfying any legal, accounting, or reporting requirements. With respect to location data, technical data, usage and interaction data, and marketing data, we may retain this data for so long as it is relevant to the uses disclosed in this Privacy Notice. We may retain account data, public data, and communications data for so long as you maintain a user account with ATH, and we may retain this data for longer periods where there is a need to retain this data to comply with ATH' legal obligations, such as the preservation of electronic evidence or compliance with a preservation order.

SECTION 7 - COOKIES

Cookies are small files that a site or its service provider transfers to your computers hard drive through your web browser (if you allow) that enables the sites or service providers systems to recognize your browser and capture and remember certain information.

We use cookies to help us remember and process the items in your shopping cart, understand and save your preferences for future visits, and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.
_session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional
storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
PREF, persistent for a very short period, Set by Google and tracks who visits the store and from where

SECTION 8 - AGE OF CONSENT & CHILDREN'S PRIVACY

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site. We do not direct the Website to anyone under the age of 13 and we do not knowingly collect PII from anyone under the age of 13. If you are a parent or guardian of an individual under the age of 13 and believe that we may have collected PII from your child, please contact us at support@athsport.co.

SECTION 9 - RIGHT OF ACCESS, RECTIFICATION, CORRECTION, ERASURE, TRANSFER, AND WITHDRAWAL

Under the law, you may have a right to request access to your PII for rectification, correction, erasure, transfer, or restriction, or to object to its processing or withdraw your consent. If you wish to exercise any of these rights, please contact ATH' Data Protection Officer as disclosed in this Privacy Notice.

You do not need to pay a fee to access your PII or to exercise your rights. However, ATH may charge a reasonable fee if your request is unreasonable or excessive.

To confirm your request, ATH may need to request specific information from you as a security measure to ensure that PII is not disclosed to an unauthorized third party. ATH will attempt to respond to all legitimate requests within thirty (30) days.

CALIFORNIA PRIVACY RIGHTS

The following rules apply solely to visitors, users, and others who are residents of the State of California. California residents have the right to be notified which categories of PII are being collected and the purposes for which the PII is being used. In particular, we collected the following categories of PII (A, B, D, E, and F) as defined in the California Consumer Privacy Act within the last twelve months. Our uses of this PII are detailed above in this Privacy Notice:

 CATEGORY EXAMPLES COLLECTED
A. Identifiers Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. YES
B. Personal information categories listed in the California Consumer Records statute (Cal. Civ. Code § 1798.80(e)) Name, signature, address, telephone number, bank account number, credit card number, debit card number, or any other financial information. YES
D. Commercial Records of products purchased. YES
F. Internet or other similar network activity Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. YES
G. Geolocation data Physical location or movements. YES

We obtain these categories of PII directly from California residents when they complete forms through our website or provide it to us as a part of a transaction or inquiry concerning our products. We also obtain these categories of PII indirectly from California residents while observing their actions on our website and from third parties or service providers that they have authorized to receive and share PII.

California residents have a right to request that we disclose what PII we collect from you and whether, and how, we disclose or sell that PII. California residents may also request that we delete any personal information collected or maintained by us from you.

ATH does not sell your PII. Despite this, California residents may also have the right to opt out of the sale of their personal information by contacting us or, where available, by clicking a link or icon associated with an advertisement. Specifically, this link or icon may state "Do Not Sell My Personal Information" or "Do Not Sell My Info." By selecting this link or icon, you "Opt Out," which means that you have opted out of the sale of your personal information as set forth in the California Consumer Privacy Act. However, even though you may have opted out, you may still see interest-based advertisements. To learn more about interest-based advertising across websites and additional opt-out choices, you can visit http://optout.aboutads.info. If you opt-out of the sale of your personal information but do not opt out of interest-based advertising more generally, you may still receive ads tailored to your interests based on PII that was not sold by us, personal information that was sold to downstream participants at least 90 days before you opted out, or personal information that was sold by other sources from which you have not opted out.

To submit a request for a list of the categories of personal information collected from you or to request that ATH delete your personal information, please email us at support@athsport.co or send a letter to us at the following address:

ATH SPORT LLC
221 W 9th St
Wilmington, DE 19801
support@athsport.co

To verify your request, we may request certain information from you to confirm that you are a ATH user, such as your phone number, username, email address, city, state, or geographic location. You may also designate an authorized agent to make a request to ATH to disclose or delete your personal information. To do so, you must provide ATH with proof that the individual or business has been appointed as your agent, such as by providing a signed power of attorney form and provide accurate responses to any information requested by ATH that may be necessary to confirm that you are a ATH user, such as your phone number, username, email address, city, state, or geographic location. California residents have a right not to receive discriminatory treatment by ATH for their exercise of these rights conferred under California law.

RESPONDING TO DO NOT TRACK SIGNALS

You can generally opt-out of receiving personalized ads from third party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) or who follow the Digital Advertising Alliance's Self-Regulatory Principles for Online Behavioral Advertising by visiting the opt-out pages on the NAI website and DAA website. Our website is not currently set up to respond to browser do-not-track signals because there is no consensus within the advertising industry as to what "do not track" means in this context, but you can configure your browser settings to reject all cookies or prompt you before a cookie is set.

NEVADA RESIDENTS

If you are a resident of Nevada, you may provide notice to us to limit the sale of your PII to third parties for resale or licensing purposes. However, we do not sell your PII for such use. To notify us that you wish to limit the sale of your PII to third parties for resale or licensing purposes, you may send us an email to support@athsport.co with the subject line, "Nevada Do Not Sell Request," along with your name, address, and user account information.

VIRGINIA RESIDENTS

ATH does not control or process the personal data of at least 100,000 Virginia residents or control or process the personal data of at least 25,000 Virginia residents and derive more than 50% of its gross revenue from the sale of personal data. For these reasons, the Virginia Consumer Data Protection Act (VCDPA) does not apply to ATH's collection and use of PII.

QUESTIONS AND CONTACT INFORMATION

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at support@athsport.co or by mail at

ATH SPORT LLC
221 W 9th St
Wilmington, DE 19801


----