Terms of Use

Attaquer Policies

Privacy Policy

Your privacy is extremely important to us and we are committed to fair practices that protect your information. This Privacy Policy is provided to explain our information practices and the choices you can make about the way your information is collected and used. To make this notice easy to find, we make our policies and procedures available on every page of this website. In all instances we are committed to transparency with our customers, employees and protecting your data privacy.

Scope of this Privacy Policy

Please be aware that this Privacy Policy does not govern all the information Attaquer may process. Our commitment to customers and service providers is governed by a separate Data Processing Amendment, available via the link on this page. In all instances we are committed to transparency with our customers and protecting your data privacy.

An overview of the sources of personal data Attaquer obtains information about individuals in these main ways:

when you visit this website or contact us directly about becoming a customer or obtaining other information,
when you become an Attaquer customer,
when you sign up for our mailing list, either at the time of purchase or through forms on this website,
when you are a service provider to Attaquer.

This Privacy Policy governs how we collect and process information obtained from your visits to our website, when you contact us directly (or interact with us via other media outlets and social media) about becoming a customer or to obtain other information, and when you engage with us as part of the employment process.

Some definitions

This Privacy Policy relates to information collected by Attaquer Pty Ltd. (referred to in this Privacy Policy as “Attaquer” “we” or “us” or “our”) through your use of the Attaquer website, its features, the services we provide (outside of our paid-for services), and information available through the Attaquer website. “You” or “your” refers to the individual who uses this website, features, and services, or accesses available information, or engages with us directly by email or telephone.

As used in this Privacy Policy, the terms “using” and “processing” information include using cookies on a computer, subjecting the information to statistical or other analysis and using or handling information in any way, including, but not limited to collecting, storing, evaluating, modifying, deleting, using, combining, disclosing and transferring information within our organisation.

Whose information does Attaquer collect?

Customers are individuals and businesses who have placed an order or signed up for an Attaquer account.
End users are individuals that use goods and services provided by Attaquer. We process “End User Data,” which includes but is not limited to first name, last name, phone number and email address.
Personnel are the people who work, and apply to work, for Attaquer.

What types of information do we collect?

Personal Information identifies you or can be used with other information to identify you (e.g., name, company, job title, address, email, phone, billing/credit-card details, age, gender, profession, post/zip code, IP address, current location).
Non-Personal Information cannot be used to identify you (e.g., browser types, domain names, statistical data about website usage).

Outside Contractors and Third-Party Processors

We may employ independent contractors, vendors and suppliers (collectively, “Outside Contractors”) to provide specific services and products related to the Attaquer website and our services, such as hosting, credit card processing and fraud screening, and mailing list hosting. In the course of providing products or services to us, these Outside Contractors may have access to information collected through the Attaquer website or help desk services, including your personal information. We require that these Outside Contractors agree to (1) protect the privacy of your personal information consistent with this Privacy Policy, or the Data Protection Amendment and (2) not use or disclose your personal information for any purpose other than providing us with the products or services for which we contracted or as required by law.

Sub-processors

Details about our current sub-processors are available via the Sub-Processors link on this page.

Cookie Policy

For more information about cookies, what they do, and how to disable non-necessary cookies, please refer to our full Cookie Policy.

Third-party information sources

End Users: We collect End User Data necessary to provide Attaquer goods and services to our customers. End users may voluntarily provide us with information made available on social media websites. You can control how much of your information social media websites make public by visiting those websites and changing your privacy settings.

Customers: We may occasionally collect information that is made publicly available on social media websites. You can control how much of your information social media websites make public by changing your privacy settings.

Where and when is information collected?

Attaquer will collect personal information that you submit to us. We may also receive personal information about you from third parties as described above.

Registering / Using Services: Customers may be required to establish an account to use certain features. If you establish an account, you will provide information (including personal and non-personal information). We may also obtain your personal information if you identify yourself to us by sending us an email with questions or comments.

What do we do with customer information?

We use the information collected to provide a great overall experience, to understand who uses our offerings, for internal operations such as operating and improving the Attaquer website and our products and services, to contact you for customer service and billing purposes, and to facilitate delivery of Attaquer advertising in some cases, including using your email to send information about our products and services.

Laws and Legal Rights

We may disclose your information (including personal information) if we believe in good faith that we are required to do so in order to comply with an applicable statute, regulation, rule or law, a subpoena, a search warrant, a court or regulatory order, or other valid legal process. We may disclose personal information in special circumstances when we have reason to believe that disclosure is necessary to identify, contact or bring legal action against someone who may be violating the Attaquer Terms of Service, to detect fraud, or to protect the safety and/or security of our users, the Attaquer website, or the general public. We also may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.

Sale of Business

We reserve the right to transfer information to a third party in the event of a sale, merger or other transfer of all or substantially all of the assets of Attaquer, or in the event that we discontinue our business or enter bankruptcy, reorganisation or similar proceedings, provided that the third party agrees to adhere to the terms of this Privacy Policy.

Links to other websites or services

The Attaquer website or our services may provide access to other websites and services. We are not responsible for the privacy practices of any websites or services other than those provided by Attaquer. We encourage you to read the privacy policies or statements of each and every such website and service. This Privacy Policy applies solely to information collected by us.

Disclosure to other third parties

Except as set forth in this Privacy Policy, the Cookie Policy or the Attaquer Data Processing Amendment or as specifically authorised by an Attaquer customer, we will not disclose any information to third parties.

Security

We take precautions to protect the security of your information with physical, electronic, and managerial procedures. However, no security system is foolproof. While we use reasonable efforts to protect your personal information, we cannot guarantee its absolute security. Attaquer, via its sub-processor, Shopify, maintains ongoing Level 1 PCI compliance for storing, processing and transmitting credit card information online.

International transfers

Attaquer is registered in Australia. Information collected via our website, through direct interactions with you, or from use of our help desk services may be transferred to our offices, personnel, or third parties worldwide and may be viewed and hosted anywhere in the world, including countries that may not have general data-protection laws. By using our services, you consent to such transfers and hosting to the fullest extent allowed by applicable law.

Do Not Track

We take no action in response to Do Not Track requests.

Updating or correcting your information

Your rights depend on your relationship with Attaquer. Personnel may update or correct their information as detailed in internal policies. Customers may request restriction of certain uses and disclosures of personally identifiable information, and may contact us to: (1) update or correct personally identifiable information, (2) change communication preferences, or (3) delete personally identifiable information by requesting cancellation of an account (via email). Such changes will not affect other information we maintain or information provided to third parties prior to the change.

We may take reasonable steps to verify your identity before granting access or making corrections. You are responsible for maintaining the secrecy of your password and account information. Backups may retain non-erasable copies. After your request, actively used databases and readily searchable media will be updated as soon as reasonably and technically practicable. End users seeking updates/deletions should contact the organization of which they are a customer.

Communications

We use your information to send you a welcome email after account creation or order placement, order information, newsletters (with opt-out), responses to inquiries, and announcements/updates regarding changes to our Terms of Service or Privacy Policy (you cannot unsubscribe from these). We may perform statistical analyses to evaluate and improve our products and services and may link certain information to personal information for internal purposes with your consent.

End User data usage

We use End User Data to identify you and to provide you with customer service.

Third parties generally

Third parties may independently collect personal and non-personal information without permission from Attaquer, and may include potential or actual advertisers, providers of advertising products or services (including vendors and website tracking services), merchants, affiliates and other commercial partners, sponsors, licensees, researchers and similar parties.

Changes to this Privacy Policy

We may revise this Privacy Policy from time to time. We will not make changes that result in significant additional uses or disclosures of your personal information without notifying you via email. We may make non-significant changes without email notice; please check this page periodically. If any non-significant changes are unacceptable to you, contact us and stop using the Attaquer website and any services we provide until the issue is resolved. Continued use following posting of non-significant changes constitutes acceptance.

Contact

If you have questions or comments about this Privacy Policy, contact our Privacy Agent:

Email: info@attaquercycling.com
Postal mail: Attn: Attaquer, PO Box 408, Alexandria, NSW, 1435

Applicable Law

This Privacy Policy is governed by the laws of NSW, Australia, without regard to conflict-of-laws provisions. You consent to the exclusive jurisdiction of the courts in connection with any action or dispute arising under or in connection with this Privacy Policy, except for those individuals who may have rights to make claims under Safe Harbor, Privacy Shield, or the Swiss-US framework.

Acceptance

By using the Attaquer website or contacting us directly, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, do not engage with our website or use our services. Continued use of the website, direct engagement with us, or following the posting of changes that do not significantly affect the use or disclosure of your personal information means you accept those changes.

Terms of Use

1. Acceptance of terms of use and amendments

Each time you use or cause access to this web site, you agree to be bound by these Terms of use, as amended from time to time with or without notice to you. In addition, if you are using a particular service on this web site or accessed via this web site, you will be subject to any rules or guidelines applicable to those services, and they will be incorporated by reference within these Terms of use. Please read the site’s Privacy policy, which is incorporated within these Terms of use by reference.

2. The site editor’s service

This web site and the services provided to you on and via this web site are provided on an “AS IS” basis. You agree that the site editor reserves the right to modify or discontinue provision of this web site and its services, and to remove the data you provide, either temporarily or permanently, at any time, without notice and without any liability towards you. The site editor will not be held responsible or liable for timeliness, removal of information, failure to store information, inaccuracy of information, or improper delivery of information.

3. Your responsibilities and registration obligations

In order to use this web site or certain parts of it, you may be required to register for a user account on this web site; in this case, you agree to provide truthful information when requested, and — if a minimum age is required for eligibility for a user account — you undertake that you are at least the required age. By registering for a user account, you explicitly agree to this site’s Terms of Use, including any amendments made by the site editor that are published herein.

4. Privacy policy

Registration data and other personally identifiable information that the site may collect is subject to the terms of our Privacy Policy.

5. Registration and password

You are responsible for maintaining the confidentiality of your password, and you will be responsible for all usage of your user account and/or user name, whether authorized or not authorized by you. You agree to immediately notify the site editor of any unauthorized use of your user account, user name or password.

6. Your conduct

You agree that all information or data of any kind, whether text, software, code, music or sound, photographs or graphics, video or other materials (“content”), made available publicly or privately, will be under the sole responsibility of the person providing the said content, or of the person whose user account is used. The site editor will not be responsible to you in any way for content displayed on this web site, nor for any error or omission.

By using this web site or any service provided, you explicitly agree that:

(a) you will not provide any content or conduct yourself in any way that may be construed as: unlawful; illegal; threatening; harmful; abusive; harassing; stalking; tortious; defamatory; libelous; vulgar; obscene; offensive; objectionable; pornographic; designed to interfere with or disrupt the operation of this web site or any service provided; infected with a virus or other destructive or deleterious programming routine; giving rise to civil or criminal liability; or in violation of an applicable local, national or international law;
(b) you will not impersonate or misrepresent your association with any person or entity; you will not forge or otherwise seek to conceal or misrepresent the origin of any content provided by you;
(c) you will not collect or harvest any information about other users;
(d) you will not provide, and you will not use this web site to provide, any content or service in any commercial manner, or in any manner that would involve junk mail, spam, chain letters, pyramid schemes, or any other form of unauthorized advertising or commerce; you will not use this web site to promote or operate any service or content without the site editor’s prior written consent;
(e) you will not provide any content that may give rise to the site editor being held civilly or criminally liable, or that may be considered a violation of any local, national or international law, including — but not limited to — laws relating to copyrights, trademarks, patents, or trade secrets.

7. Submission of content on this web site

By providing any content to this web site:

(a) you agree to grant the site editor a worldwide, royalty-free, perpetual, non-exclusive right and license (including any moral rights or other necessary rights) to use, display, reproduce, modify, adapt, publish, distribute, perform, promote, archive, translate, and to create derivative works and compilations, in whole or in part. Such license will apply with respect to any form, media, technology already known at the time of provision or developed subsequently;
(b) you warrant and represent that you have all legal, moral, and other rights that may be necessary to grant the site editor the license specified in this section 7;
(c) you acknowledge and agree that the site editor will have the right (but not obligation), at the site editor’s entire discretion, to refuse to publish, or to remove, or to block access to any content you provide, at any time and for any reason, with or without notice.

8. Third-party services

Goods and services of third parties may be advertised and/or may be made available on or through this web site. Representations made regarding products and services provided by third parties will be governed by the policies and representations made by these third parties. The site editor will not in any manner be liable for or responsible for any of your dealings or interaction with third parties.

9. Indemnification

You agree to indemnify and hold harmless the site editor and the site editor’s representatives, subsidiaries, affiliates, related parties, officers, directors, employees, agents, independent contractors, advertisers, partners, and co-branders, from any claim or demand, including reasonable legal fees, that may be filed by any third party, arising out of your conduct or connection with this web site or service, your provision of content, your violation of these Terms of use, or any other violation by you of the rights of another person or party.

10. DISCLAIMER OF WARRANTIES

YOU UNDERSTAND AND AGREE THAT YOUR USE OF THIS WEB SITE AND OF ANY SERVICES OR CONTENT PROVIDED (THE “SERVICE”) IS AT YOUR OWN RISK. SERVICES AND CONTENT ARE PROVIDED TO YOU “AS IS”, AND THE SITE EDITOR EXPRESSLY DISCLAIMS ALL WARRANTIES OF ANY KIND, EITHER IMPLIED OR EXPRESS, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. THE SITE EDITOR MAKES NO WARRANTY, EITHER IMPLIED OR EXPRESS, THAT ANY PART OF THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, VIRUSFREE, TIMELY, SECURE, ACCURATE, RELIABLE, OR OF ANY QUALITY, NOR IS IT WARRANTED EITHER IMPLICITLY OR EXPRESSLY THAT ANY CONTENT IS SAFE IN ANY MANNER FOR DOWNLOAD. YOU UNDERSTAND AND AGREE THAT NEITHER THE SITE EDITOR NOR ANY PARTICIPANT IN THE SERVICE PROVIDES PROFESSIONAL ADVICE OF ANY KIND AND THAT ANY ADVICE OR ANY OTHER INFORMATION OBTAINED VIA THIS WEB SITE MAY BE USED SOLELY AT YOUR OWN RISK, AND THAT THE SITE EDITOR WILL NOT BE HELD LIABLE IN ANY WAY. Some jurisdictions may not allow disclaimers of implied warranties, and certain statements in the above disclaimer may not apply to you as regards implied warranties; the other terms and conditions remain enforceable notwithstanding.

11. LIMITATION OF LIABILITY

YOU EXPRESSLY UNDERSTAND AND AGREE THAT THE SITE EDTIOR WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL OR EXEMPLARY DAMAGES; THIS INCLUDES, BUT IS NOT LIMITED TO, DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, DATA OR OTHER INTANGIBLE LOSSES (EVEN IF THE SITE EDITOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES), RESULTING FROM (I) THE USE OF SERVICES OR THE INABILITY TO USE SERVICES, (II) THE COST OF OBTAINING SUBSTITUTE GOODS AND/OR SERVICES RESULTING FROM ANY TRANSACTION ENTERED INTO ON THROUGH SERVICES, (III) UNAUTHORIZED ACCESS TO OR ALTERATION OF YOUR DATA TRANSMISSIONS, (IV) STATEMENTS BY ANY THIRD PARTY OR CONDUCT OF ANY THIRD PARTY USING SERVICES, OR (V) ANY OTHER MATTER RELATING TO SERVICES. In some jurisdictions, it is not permitted to limit liability and, therefore, such limitations may not apply to you.

12. Reservation of rights

The site editor reserves all of the site editor’s rights, including but not limited to any and all copyrights, trademarks, patents, trade secrets, and any other proprietary right that the site editor may have in respect of this web site, its content, and goods and services that may be provided. The use of the site editor’s rights. and property requires the site editor’s prior written consent. By making services available to you, the site editor is not providing you with any implied or express licenses or rights, and you will have no rights to make any commercial use of this web site or provided services without the site editor’s prior written consent.

13. Notification of copyright infringement

If you believe that your property has been used in any way that could be considered a copyright infringement or a violation of your intellectual property rights, the site editor’s copyright agent may be contacted via: Email: info@attaquercycling.com

14. Applicable law

You agree that these Terms of use and any dispute arising out of your use of this web site or products or services provided will be governed by and construed in accordance with local laws applicable at the site editor’s domicile, notwithstanding any differences between the said applicable legislation and legislation in force at your location. By registering for a user account on this web site, or by using this web site and the services it provides, you accept that jurisdiction is granted to the courts having jurisdiction over the site editor’s domicile, and that any disputes will be heard by the said courts.

15. Miscellaneous information

(i) In the event that any provision of these Terms of use is deemed to conflict with legislation by a court with jurisdiction over the parties, the said provision will be interpreted to reflect the original intentions of the parties in accordance with applicable law, and the remainder of these Terms of use will remain valid and applicable; (ii) The failure of either party to assert any right under these Terms of use will not be considered to be a waiver of that party’s right, and the said right will remain in full force and effect; (iii) You agree that any claim or cause in respect of this web site or its services must be filed within one (1) year after such claim or cause arose, or the said claim or cause will be forever barred, without regard to any contrary legislation; (iv) The site editor may assign the site editor’s rights and obligations under these Terms of use; in this event, the site editor will be relieved of any further obligation.

Description of goods and services

Attaquer Pty Ltd sells and distributes high-quality cycling clothing and accessories.

Shipping practices and delivery policy

We want you to enjoy your Attaquer goods as soon as possible after placing your order. Please visit here to view information related to shipping.

Returns policy

Please visit here to view our returns policy.

Introduction to this Amendment

Processing personal data in a secure, fair, and transparent way is extremely important to us at Attaquer. As part of this effort, we process personal data in accordance with the EU’s General Data Protection Regulation (“GDPR”), the EU/US Privacy Shield principles (“Privacy Shield”), the laws of Australia governing the handling of various types of personal data, and industry standards, such as PCI.

To better protect individuals’ personal data, we are providing these terms to govern Attaquer’s and your handling of personal data (the “Data Processing Amendment” or “DPA”). This DPA amends and supplements your Terms of Use (“ToU”) and requires no further action on your part. If you do not agree to this DPA, you may discontinue the use of Attaquer’s services and cancel your account (if you have created one).

Definitions

It is important that all parties understand what data and whose data is protected under this DPA. Each party has respective obligations to protect personal data; the following definitions explain the scope of this DPA and the mutual commitments to protect personal data.

“Attaquer”, “we”, “us”, or “our”: The provider of the Attaquer website, products and services.
“You” or “Customer”: The individual, company or organisation that uses the Attaquer website, orders Attaquer products, signs up for an account on the Attaquer website or to our mailing lists.
“Party”: Refers to Attaquer and/or the customer depending on the context.
“Personnel”: Individuals employed by or under contract to perform a service on behalf of one of the parties. Personnel may have rights in their personal data (including business contact information) if they reside in the EU.
“Data Subjects”: Individuals residing in the EU who are consumers or users of Attaquer’s goods or services, as well as any personnel who reside in the EU.
“Personal Data”: As in the GDPR: any data relating directly or indirectly to an identifiable data subject. Excludes anonymised, aggregated, de-identified and/or generic data that does not identify an individual.
“Processing”: As in the GDPR: including collecting, recording, using, storing, amending, adapting, disclosing, transferring or transmitting, structuring, combining, deleting or destroying personal data (“Process”/“Processed”).
“Controller”: The party that determines the purposes and means of processing personal data — the customer is the controller with respect to consumer personal data. Each party may be the controller of personal data it processes about the other’s personnel.
“Processor”: The party that processes personal data on behalf of the controller — Attaquer is the processor of the personal data we process about you.
“Sub-processor”: Third-party independent contractors, vendors and suppliers who provide specific services related to the Attaquer website and our services (e.g., hosting, credit card processing, fraud screening, mailing list hosting).
“Incident”: (a) A complaint or request with respect to the exercise of an individual’s rights under the GDPR; (b) an investigation into or seizure of personal data by government officials, or a specific indication that such an investigation or seizure is imminent; or (c) any breach of the security and/or confidentiality set out in this DPA leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, or any indication of such breach having taken place or being about to take place.

For readability, we do not use initial capitalisation of defined terms in this DPA. Defined terms are defined terms, irrespective of their format.

1. Undertakings regarding personal data

Each party agrees that personal data shall be treated as confidential information under this DPA and shall at all times comply with applicable data-protection laws in the relevant jurisdiction. Personal Data shall remain the property of the disclosing party. Attaquer acknowledges that it is the controller and maintains control over data subjects’ personal data.

Attaquer will process customer personal data only to the extent strictly necessary for providing the services in accordance with the ToS and any further written instructions from the customer that are mutually agreed upon in writing. Attaquer agrees that:

It will implement and maintain a reasonable and appropriate security program comprising adequate technical and organisational measures to protect against unauthorised, unlawful or accidental processing, use, erasure, loss or destruction of, or damage to, customer personal data.
It will not modify, alter, delete, publish or disclose any customer personal data to any third party, nor allow any third party to process such personal data on Attaquer’s behalf unless the third party is bound to similar confidentiality and data-handling provisions.
Only personnel who “need-to-know” will be given access to customer personal data to the extent necessary to perform obligations under the ToS; Attaquer shall provide adequate training and ensure compliance with this DPA.
It will process customer personal data only as necessary to perform obligations under the ToS, upon written instructions of the customer (as mutually agreed), and in accordance with applicable laws.

Upon termination of your account Attaquer will delete, destroy, or anonymise the personal data in accordance with our standard backup and retention policy per the ToS, normally no later than 60 days, unless retention is required by Australian State or Federal laws.

The parties acknowledge that customer may from time to time possess personal data relating to Attaquer’s personnel. Attaquer warrants it has provided all necessary notifications and obtained all necessary consents, authorisations, approvals and/or agreements required by applicable law to enable (i) the disclosure of Attaquer’s personal data to customer; and (ii) further processing of such personal data by customer.

2. Customer undertakings and Attaquer’s assistance

Customer warrants it has all necessary rights to provide to Attaquer the personal data for processing in connection with the provision of Attaquer’s services. Attaquer shall assist the customer by implementing appropriate technical and organisational measures, insofar as reasonably and commercially possible (in Attaquer’s sole determination), in fulfilling customer’s obligations to respond to individuals’ requests to exercise rights under the GDPR.

As stated in our Privacy Policy, the customer consents to Attaquer engaging sub-processors to process customer personal data for the permitted purpose of providing contracted products and services, provided that:

Attaquer will maintain an up-to-date list of its sub-processors and update it with any change at least 10 days prior to such change; and
Attaquer will impose data-protection terms on any sub-processor as required to protect customer personal data to the standard required by the GDPR.

Customer may object to Attaquer’s appointment or replacement of a sub-processor on reasonable data-protection grounds. In such event, Attaquer will either not appoint/replace the sub-processor, or if not possible, customer may suspend or terminate the service. Upon written request, Attaquer shall make available information reasonably necessary to demonstrate compliance with this DPA.

3. Incident Management

When either party becomes aware of an incident that impacts the processing of personal data, it shall promptly notify the other and reasonably cooperate to enable a thorough investigation, formulate a response, and take suitable further steps. Both parties shall maintain written procedures enabling prompt responses.

Where an incident is reasonably likely to require a data-breach notification under applicable laws, the party responsible shall notify the other without undue delay after becoming aware of the incident.

Notifications shall be made to info@attaquercycling.com (to Attaquer) and to our point of contact with you (to the customer), and shall include: (i) a description of the nature of the incident, including, where possible, the categories and approximate number of individuals and records concerned; (ii) contact details for more information; (iii) a description of likely consequences; and (iv) measures taken or proposed to address the incident, including mitigation steps.

4. Liability and Indemnity

Each party indemnifies the other and holds them harmless against all claims, actions, third-party claims, losses, damages and expenses incurred by the indemnified party and arising directly or indirectly out of or in connection with a breach of this DPA.

5. Duration and Termination

This DPA came into effect on May 25, 2018 and continues until changed or terminated in accordance with the ToU. Termination or expiration of this DPA shall not discharge the parties from the confidentiality obligations herein.

Sub-processors used by Attaquer (controller)
Name	Purpose / data handled
Shopify Inc.	E-commerce platform & hosting; checkout; order/customer accounts; encryption.
Stripe, Inc.	Card payment processing for orders (PII + payment tokens).
Klaviyo, Inc.	Email/SMS marketing & onsite tracking (contact info, events, preferences).
LoyaltyLion Ltd	Loyalty & rewards (customer identifiers, points, activity).
Okendo	Product reviews/UGC (name, email, review content, media).
Loop Returns, Inc.	Returns & exchanges portal (order, contact, address details).
Cin7 Core	Inventory/ERP (order & customer records as needed for fulfilment).
Mintsoft	Warehouse/3PL integrations (shipping addresses, order info).
Elevar	Conversion tracking & server-side tagging (event data tied to users).
Global-e	Cross-border checkout, duties/taxes, localisation (order & customer data).
Matrixify (ITissible)	Bulk import/export/migration (may handle customer exports—restrict access).
Kiwi Sizing / SmartSize	Size charts & fit recommendations (may collect sizing preferences & email if used).
Union Works “Happy Birthday”	Birthday capture & automations (name, email, date of birth).