Privacy Policy

Scope and Who We Are

UNIT 365 ("UNIT 365," "we," "us," or "our") operates unit365studio.com and the UNIT 365 online store. This Policy applies to information we process through our website, Shopify checkout, customer support, marketing programs, advertising, and related online services. It does not govern a third party's independent privacy practices. For privacy questions or requests, email unit365studio@gmail.com.

Categories of Personal Information We Collect

• Identifiers and contact information: name, email address, phone number, postal address, shipping address, billing address, IP address, online identifiers, and account or customer identifiers.
• Customer records: contact details, order details, payment status, delivery information, customer-service history, and other information associated with a commercial transaction.
• Commercial information: products viewed, considered, added to cart, or purchased; size and color selections; cart and checkout activity; order value; discount use; purchase, return, exchange, fulfillment, and shipping history; and product preferences.
• Payment information: Shopify and supported payment processors collect and process payment credentials. UNIT 365 does not intentionally receive or store full payment card numbers through this website.
• Internet and device activity: browser and device type, operating system, page views, clicks, referral and exit pages, dates and times, cookie or pixel identifiers, product interactions, cart events, checkout events, and interactions with emails, texts, or advertisements.
• Approximate geolocation: general location inferred from an IP address or supplied in a shipping or billing address. We do not intentionally collect precise GPS location through the public website.
• Communications and user content: contact-form messages, emails, support requests, feedback, reviews, photographs, social-media tags, and other content you choose to send or make available to us.
• Marketing and consent information: email and SMS signup details, phone number, consent language and status, signup source, date and time, unsubscribe or suppression status, preferences, message engagement, and browse, cart, checkout, or purchase activity associated with a marketing profile.
• Advertising information and inferences: pixel events, ad interactions, hashed contact information where available, audience membership, campaign attribution, and inferences about products or offers that may interest you.
• Security and fraud information: request metadata, fraud indicators, rate-limit records, form timing, bot or spam signals, checkout risk information, and records used to investigate misuse or protect our services.

Some information may be considered "personal information," "personal data," or "sensitive personal information" under applicable law. We do not intentionally collect government identification numbers, health data, biometric identifiers, precise geolocation, or full payment-card credentials through our public forms. Please do not submit sensitive information through the contact form.

Sources of Personal Information

We collect information directly from you; automatically from your browser or device; from Shopify and its checkout, commerce, fraud, and payment tools; from Klaviyo; from Meta; from Vercel, Resend, carriers, payment providers, shipping and fulfillment providers, and security providers; from social platforms when you interact with us; and from information lawfully supplied by service providers or business partners.

How and Why We Use Personal Information

• Provide the store, maintain carts, process checkout and payment, accept or reject orders, deliver products, and administer returns, exchanges, refunds, and support.
• Communicate about orders, security, policy changes, customer-service requests, and other transactional matters.
• Send marketing emails and, only with the required SMS consent, marketing texts such as launch updates, discount codes, restock alerts, browse reminders, cart reminders, checkout reminders, and post-purchase messages.
• Personalize the store and marketing, build or suppress advertising audiences, measure advertising and campaign performance, attribute conversions, and understand product interest.
• Operate, debug, secure, and improve our website, forms, APIs, products, customer experience, fulfillment, and marketing.
• Detect and prevent fraud, abuse, spam, bots, unauthorized access, chargebacks, security incidents, and violations of our Terms.
• Maintain records, enforce agreements, resolve disputes, protect rights and safety, and comply with legal, tax, accounting, regulatory, and law-enforcement obligations.

Where laws require a legal basis, we rely as appropriate on performance of a contract, legitimate interests, compliance with legal obligations, and consent. You may withdraw consent at any time, but withdrawal does not affect processing already lawfully completed.

Shopify, Checkout, and Payment Providers

Our storefront uses Shopify commerce services, and checkout is completed through Shopify and supported payment providers. These providers may process identifiers, contact details, order information, payment information, device and network data, fraud indicators, and delivery information to provide checkout, payment, Shop Pay or other wallet features, installment options, fraud prevention, tax, fulfillment, and customer support. Their independent processing is governed by their own privacy notices.

Klaviyo Email and SMS Marketing

We use Klaviyo to create customer and subscriber profiles, maintain consent and suppression records, measure engagement, send campaigns, and operate welcome, browse-abandonment, cart-abandonment, checkout-abandonment, post-purchase, restock, and launch flows. Klaviyo may process your identifiers, email address, phone number, consent status, signup source, IP and device data, viewed products, cart and checkout activity, purchase history, and message engagement on our behalf.

Marketing email consent and SMS consent are separate. Providing a phone number is optional, and we send marketing texts only when the required SMS consent has been provided. You may unsubscribe from email through the link in a marketing email. For SMS, reply STOP, QUIT, END, CANCEL, UNSUBSCRIBE, or another clearly stated revocation request where supported; reply HELP for help. Consent is not a condition of purchase. Message frequency varies, and message and data rates may apply.

We use cookies and similar technologies to identify products placed in a cart and determine whether a browse session, cart, or checkout was abandoned. That information may be used to send a reminder by email or, if you expressly opted into applicable SMS reminders, by text. SMS opt-in data and consent status are not sold or shared with unaffiliated third parties for purposes unrelated to providing the messaging program. We may disclose them to Klaviyo, telecommunications providers, carriers, and vendors that help operate and deliver the program.

Cookies, Pixels, and Similar Technologies

We and our providers use cookies, pixels, tags, local storage, server logs, and similar technologies to operate the store, maintain carts, support checkout, remember preferences, secure forms, measure traffic, understand product interest, personalize marketing, and conduct advertising. Some technologies are necessary for the service; others support analytics, personalization, or advertising. Blocking cookies may affect cart, checkout, payment, and personalization features.

Meta Pixel, Conversions API, and Maximum Data Sharing

We use Meta Pixel and Meta business tools for PageView, product-view, product-selection, AddToCart, checkout, registration, contact, and related advertising events. We also use Shopify's Maximum customer data-sharing setting, which uses Meta Pixel, Facebook Conversions API, and Meta's current advertising technology. Information may therefore be sent from your browser and, for eligible Shopify events, from Shopify's servers to Meta.

Depending on the interaction and information available, Meta may receive page and product activity, cart and checkout activity, purchase and order information, campaign and referral data, browser and device information, IP address, cookies or online identifiers, and contact information such as name, email address, phone number, and location. Contact information may be hashed before transmission for matching. Meta may use the information to match users, measure and attribute conversions, create or suppress audiences, retarget advertising, detect fraud, and personalize advertisements in accordance with Meta's own terms and privacy practices.

AI-Assisted Tools and Automated Processing

We may use artificial-intelligence-assisted or automated tools to support limited business functions such as drafting or editing content, image cleanup, product presentation, customer-service assistance, spam and fraud detection, analytics, and operational troubleshooting. We do not represent AI-generated output as a substitute for final product details, checkout terms, or human customer support. We do not intentionally provide full payment-card credentials or information we know is highly sensitive to public generative-AI tools.

Automated systems may help identify fraud, spam, abusive traffic, or checkout risk and may temporarily block a form, payment, or order. Payment providers and Shopify may make their own risk decisions under their policies. UNIT 365 does not use AI on this website to make solely automated decisions that produce legal or similarly significant effects about customers.

How We Disclose Personal Information

We may disclose the categories described above to Shopify and payment providers; Klaviyo and messaging providers; Meta and advertising partners; Vercel and hosting or content-delivery providers; Resend and email-delivery providers; shipping, fulfillment, and carrier partners; fraud, security, and technology providers; professional advisers; government authorities when legally required; and parties involved in a merger, financing, reorganization, bankruptcy, or sale of all or part of the business. We disclose only the information reasonably needed for the applicable purpose or as directed or permitted by law.

U.S. State Privacy Disclosures for the Preceding 12 Months

In the preceding 12 months, we may have collected the following statutory categories: identifiers; customer-record information; commercial information; internet or electronic-network activity; approximate geolocation; audio, electronic, visual, or similar information supplied by a customer; inferences; and limited sensitive personal information handled by checkout or payment providers. The sources, purposes, and recipients are described in this Policy.

We may have disclosed each of those categories for business purposes to service providers and contractors that operate commerce, payment, hosting, security, fulfillment, communications, analytics, and support functions. We do not knowingly disclose government identifiers, precise geolocation, health information, biometric information, or full payment-card credentials because we do not intentionally collect those items through our public website.

We do not sell personal information for money. Because certain privacy laws define "sale," "sharing," or "targeted advertising" broadly, our disclosure of identifiers, commercial information, internet activity, approximate geolocation, and inferences to Meta or other advertising partners may be considered a sale, sharing, or targeted advertising even when no money changes hands. We do not knowingly sell or share personal information of consumers under 16.

We do not disclose personal information to third parties for those third parties' own direct-marketing purposes as contemplated by California's Shine the Light law. California customers may contact us with questions about this disclosure.

Notice of Financial Incentive: First-Order Discount

UNIT 365 offers a voluntary 10% first-order discount to customers who provide an email address and opt into marketing email. SMS enrollment is optional and requires separate consent. The personal information involved may include your email address, optional phone number, consent record, signup source, and marketing engagement. We use this information to deliver the discount, operate marketing, personalize communications, and measure program performance.

You opt in by completing a signup form and taking the affirmative signup action shown with the marketing disclosure. The homepage form uses a required email-consent checkbox, while product-page forms use a clearly labeled "Join and Unlock" submission button next to the disclosure. We keep a record of the signup source, consent method, consent version, and time. You may withdraw at any time by using the unsubscribe link in an email, replying STOP to SMS if separately enrolled, or emailing us. Withdrawal will not invalidate a discount already redeemed, and we may retain limited suppression information so we do not send unwanted messages.

The benefit is 10% of the eligible merchandise subtotal for the first qualifying order, subject to the offer terms shown at signup or checkout. We estimate the value of the data to be reasonably related to the value of the discount, anticipated customer engagement and purchases attributable to the program, and the cost of providing and administering the offer. The precise value varies by customer because purchase and engagement activity varies. Participation is optional.

Retention

We retain personal information only for as long as reasonably necessary and proportionate for the purposes described above. Order, payment-status, shipping, tax, and transaction records are generally kept for the periods required by tax, accounting, chargeback, warranty, fraud, and other legal obligations. Customer-service and contact records are kept while a request is active and for a reasonable period afterward. Marketing profiles are kept while you remain subscribed or active; limited suppression and consent records may be retained after opt-out to honor your choice and prove compliance. Advertising, cookie, analytics, and security data are retained according to our configuration and provider retention periods or longer when needed to investigate abuse or a legal claim. We delete, aggregate, or de-identify information when it is no longer reasonably needed, unless law permits or requires continued retention.

Your Privacy Choices and Rights

• Email: use the unsubscribe link in any marketing email.
• SMS: reply STOP or another clearly stated revocation request to opt out where supported. You may also email us.
• Cookies and advertising: use browser settings to block or delete cookies and use Meta, browser, and device advertising controls where available.
• Access, know, correction, deletion, and portability: request access to, correction or deletion of, or a portable copy of qualifying personal information.
• Sale, sharing, and targeted advertising: where applicable, request to opt out of sale, sharing, or targeted advertising.
• Sensitive information and profiling: where applicable, request to limit certain uses of sensitive information or opt out of qualifying profiling. We do not use sensitive information to infer characteristics or conduct qualifying profiling through this website.
• Non-discrimination and appeals: you may exercise applicable privacy rights without unlawful discrimination and may appeal a denied request where state law provides that right.

This browser choice prevents our custom storefront from initializing browser-side Meta Pixel and Klaviyo onsite tracking on future page loads. It does not disable strictly necessary commerce, security, or checkout functions. You may also use Meta's ad preferences and the Digital Advertising Alliance opt-out tool. Shopify checkout and server-side services use separate controls described below.

Submitting a Privacy Request

Email unit365studio@gmail.com with the subject "Privacy Request" and state the right you want to exercise. For an advertising opt-out, use the subject "Privacy Opt-Out." For an appeal, use "Privacy Appeal." We may ask for information reasonably necessary to verify your identity and match our records. We will use verification information only for the request and respond within the period required by applicable law. If we cannot verify or fulfill a request, we will explain the reason where required.

An authorized agent may submit a request where permitted by law. We may require proof of authorization and may ask you to verify your identity directly. Certain information may be exempt from a request, including information needed to complete a transaction, prevent fraud, comply with law, preserve legal claims, or maintain an opt-out suppression record.

Global Privacy Control and Do Not Track

Some browsers provide Global Privacy Control (GPC) or other opt-out preference signals. Our custom storefront checks for an active GPC signal or the saved browser choice above and does not initialize its browser-side Meta Pixel or Klaviyo onsite tracking for that browser session. Where applicable law requires, we treat a valid GPC signal as an opt-out of applicable sale, sharing, or targeted advertising for that browser or device. Shopify checkout and server-side services use separate privacy controls, so you may also submit an email request to associate your choice with information we can reasonably identify. Other "Do Not Track" signals are not consistently standardized, and the website may not respond to them.

Children's Privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not knowingly sell or share the personal information of anyone under 16. You must be at least 18 or have authorization from a parent or legal guardian and be the account holder or authorized user of the phone number to enroll in SMS marketing. If you believe a child provided personal information, contact us so we can review and take appropriate action.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encrypted transport, input validation, rate limiting, spam detection, and restricted server-side credentials where appropriate. No website, checkout, email, SMS, or internet transmission is completely secure, and we cannot guarantee absolute security.

International Processing

UNIT 365 is operated from the United States and is intended primarily for U.S. customers. Information may be processed in the United States and other countries where our providers operate. Those locations may have different privacy protections. Where European Economic Area, United Kingdom, or similar law applies, you may have rights to access, correct, delete, restrict, object, or port personal data, withdraw consent, and complain to your local supervisory authority. International transfers are handled through provider contractual and legal mechanisms where required.

Third-Party Links and Independent Services

Our website may link to or integrate with Shopify, payment providers, Shop Pay, PayPal, Klarna, Apple Pay, Meta, Instagram, Klaviyo, shipping carriers, and other independent services. When you interact directly with those services, they may process information under their own privacy policies and terms. We encourage you to review them.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the current version. If we make material changes, we may provide notice as required by law.

Contact

For privacy requests, appeals, advertising opt-outs, or questions, contact unit365studio@gmail.com. Please include a clear subject line and enough information for us to understand and verify the request.