Privacy policy

  • Last Updated: May 22, 2026

    Introduction

    This Privacy Policy describes how Curlspike ("we," "us," "our," or the "Company") collects, uses, stores, and shares your personal information when you visit or make a purchase from curlspike.com (the "Site"). We are committed to protecting your privacy and handling your personal data with transparency and care.

    By visiting our Site and/or purchasing from us, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Site.

    1. Information We Collect

    We collect information in the following ways:

    a) Information You Provide Directly

    When you place an order, create an account, contact us, or subscribe to our newsletter, we may collect:

    • Full name
    • Email address
    • Phone number
    • Billing address
    • Shipping / delivery address
    • Payment information (processed securely by our payment providers — we never store full card details)
    • Order history and preferences
    • Messages and communications you send us

    b) Information Collected Automatically

    When you browse our Site, we automatically collect:

    • IP address and approximate location
    • Browser type and version
    • Device type and operating system
    • Pages viewed, links clicked, and time spent on Site
    • Referring URLs (how you found us)
    • Cookie and tracking data

    c) Information from Third Parties

    We may receive information about you from:

    • Payment processors (Stripe, PayPal)
    • Advertising platforms (Google Ads, Facebook/Meta)
    • Analytics providers (Google Analytics)
    • Shopify (our eCommerce platform)

    2. How We Use Your Information

    We use your personal information for the following purposes:

    • Order Fulfilment — to process, pack, and deliver your orders
    • Customer Support — to respond to your questions, complaints, and enquiries
    • Account Management — to manage your customer account if created
    • Payment Processing — to securely charge you for purchases
    • Fraud Prevention — to screen orders and protect against fraudulent transactions
    • Marketing Communications — to send promotional emails, offers, and newsletters (only where you have opted in or we have a legitimate interest)
    • Website Improvement — to analyze how customers use our Site and improve performance
    • Legal Compliance — to meet our legal and regulatory obligations
    • Shipping & Delivery — to share your address with our logistics and fulfilment partners

    3. Sharing Your Information

    We do not sell your personal data. We share your information only with trusted third parties necessary to operate our business:

    Third Party Purpose
    Shopify eCommerce platform powering our store
    Stripe / PayPal Secure payment processing (PCI-DSS compliant)
    Shipping Carriers Delivery of your orders (USPS, FedEx, DHL, etc.)
    Google Analytics Website traffic and behavior analysis
    Facebook / Meta Advertising, retargeting, and campaign tracking
    Google Ads Search and display advertising
    Email Marketing Klaviyo / Mailchimp for newsletters (where applicable)
    Legal Authorities If required by law, court order, or to protect our rights

    All third-party providers are required to handle your data securely and in accordance with applicable privacy laws.

    4. Cookies & Tracking Technologies

    We use cookies and similar tracking technologies to enhance your experience on our Site. Cookies we use include:

    • Essential Cookies — Required for the Site to function (shopping cart, checkout, login)
    • Performance Cookies — Help us understand how visitors use our Site (Google Analytics)
    • Functional Cookies — Remember your preferences and settings
    • Advertising Cookies — Used by Google and Facebook to show relevant ads

    You can control cookies through your browser settings. Disabling certain cookies may affect Site functionality. For more information, visit www.allaboutcookies.org.

    5. Data Retention

    We retain your personal data for as long as necessary to:

    • Fulfil your orders and provide after-sales service
    • Comply with our legal and tax obligations (typically 7 years for financial records under US law)
    • Resolve disputes and enforce our agreements

    You may request deletion of your personal data at any time by contacting us.

    6. Your Privacy Rights

    United States Residents (CCPA — California Consumer Privacy Act)

    If you are a California resident, you have the right to:

    • Know what personal data we collect about you
    • Request deletion of your personal data
    • Opt out of the sale of your personal data (we do not sell data)
    • Non-discrimination for exercising your privacy rights

    To exercise these rights, contact us at support@curlspike.com.

    European / UK Residents (GDPR / UK GDPR)

    If you are located in the EU or UK, you have the right to:

    • Access your personal data
    • Rectification of inaccurate data
    • Erasure ("right to be forgotten")
    • Restrict or object to processing
    • Data portability
    • Withdraw consent at any time

    We will respond to all GDPR requests within 30 days.

    Australian Residents (Privacy Act 1988)

    You have the right to access and correct information we hold about you under the Australian Privacy Act.

    7. Data Security

    We implement appropriate technical and organizational security measures to protect your personal data, including:

    • SSL / HTTPS encryption on all pages
    • PCI-DSS Level 1 compliant payment processing
    • Secure, access-controlled internal systems
    • Regular security assessments

    However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

    8. Children's Privacy

    Our Site is not intended for children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

    9. Third-Party Links

    Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

    10. International Data Transfers

    Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for all international data transfers in compliance with applicable law.

    11. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. Your continued use of our Site after any changes constitutes acceptance of the revised policy.

    Contact Us

    For any questions regarding these Terms of Service, please contact us:

Support Hours: Monday – Friday: 9:00 AM – 6:00 PM (MST).

We aim to respond to all return enquiries within 2 business days.