Privacy policy

Effective Date: October 14, 2022

Last Updated: July 23, 2026

This Privacy Policy explains how Long Tine LLC d.b.a. SHEFIT, SHEFIT Operating Company LLC, and their affiliated entities (collectively, “SHEFIT,” “we,” “us,” or “our”) collect, use, disclose, retain, and protect Personal Data when you visit or interact with SHEFIT.com and related websites, applications, customer-service channels, promotions, events, products, and services that link to this Privacy Policy (collectively, the “Services”).

To exercise a privacy right, opt out of the sale or sharing of Personal Data, or manage other available privacy choices, visit Your Privacy Choices . Your use of the Services is also subject to our Terms of Service .

“Personal Data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. Personal Data may also be called “personal information” under applicable law. It does not include information that has been lawfully made public, aggregated, or deidentified so that it cannot reasonably be linked to an individual or household.

This Policy applies to Personal Data we collect online and offline in connection with the Services. It does not apply to information handled solely by third parties under their own privacy notices or to workforce and job-applicant information covered by a separate notice, where applicable.

Scope and Responsibility
Personal Data We Collect
Sources of Personal Data
How We Use Personal Data
Legal Bases for Processing
How We Disclose Personal Data
Sale, Sharing, and Targeted Advertising
Cookies and Similar Technologies
Data Retention
Data Security
Your Choices and Privacy Rights
Additional U.S. State Privacy Rights
Privacy Notice for California Residents
EEA, United Kingdom, and Switzerland
Canada
Children’s Privacy
International Transfers
Automated Processing and Profiling
Third-Party Services and Public Content
Contact Us
Changes to This Policy

1. Scope and Responsibility

Long Tine LLC d.b.a. SHEFIT, SHEFIT Operating Company LLC, and their affiliated entities are responsible for the Personal Data processing described in this Policy as applicable to the relevant Service, transaction, or interaction. You may contact the SHEFIT Privacy Office using the details in the Contact Us section.

This Policy is a notice of our privacy practices. It does not create blanket consent to every use of Personal Data. When applicable law requires consent, we will request it separately. Our collection, use, retention, and disclosure of Personal Data are intended to be reasonably necessary and proportionate to the purposes described in this Policy or another notice presented when Personal Data is collected.

2. Personal Data We Collect

The Personal Data we collect depends on how you interact with SHEFIT, the features you use, the purchases or requests you make, and the choices you make.

Information you provide directly

Contact and account information: name, email address, telephone number, billing and shipping address, account username, account preferences, and information used to authenticate or secure an account.
Order and transaction information: products viewed, selected, purchased, returned, or exchanged; order number; purchase amount; payment method type; billing and delivery details; and transaction history. Payment-card information is generally collected and processed by Shopify and payment processors rather than stored directly by SHEFIT.
Fit, sizing, and product-preference information: measurements or sizing details, fit preferences, product interests, activity preferences, quiz responses, and related information you choose to provide for product or fit recommendations.
Communications: information contained in customer-service requests, emails, chats, telephone calls, text messages, social-media messages, reviews, survey responses, and other communications with us. Calls may be recorded or monitored when notice is provided and permitted by law.
Marketing and messaging information: email address, mobile telephone number, communication preferences, messaging history, and records of consent, unsubscribe, or opt-out choices.
Promotion, event, and loyalty information: information submitted for sweepstakes, contests, surveys, rewards programs, events, discounts, or other promotions, including information needed to confirm eligibility or deliver a benefit.
User-generated content: reviews, photographs, comments, social-media interactions, and other content you choose to submit or make available to us.
Privacy-request information: information submitted to exercise a privacy right, verify identity, authorize an agent, or communicate about a privacy request.

Information collected automatically

When you use the Services, we and our service providers may automatically collect:

IP address, browser type, operating system, device type, device identifiers, language, and general location inferred from an IP address;
pages viewed, links clicked, searches, products viewed, cart activity, referring and exit pages, session duration, timestamps, and interactions with advertisements, emails, or site features;
cookie identifiers, pixel identifiers, advertising identifiers, and information collected through tags, local storage, software development kits, server logs, and similar technologies;
diagnostic, performance, fraud-prevention, and security information; and
information about whether an email or text message was delivered, opened, clicked, or otherwise interacted with, where permitted.

We generally do not collect precise geolocation through the website unless a feature clearly requests it and you choose to provide permission. You may control location permissions through your browser or device settings.

Information from other sources

We may receive Personal Data from Shopify, payment processors, delivery carriers, customer-service providers, fraud-prevention services, analytics providers, advertising and marketing partners, social-media platforms, promotion partners, publicly available sources, and other parties that support the Services. We may combine information from these sources with information we collect directly or automatically.

Sensitive Personal Data

SHEFIT does not intentionally collect Sensitive Personal Data for the purpose of inferring characteristics about you. Our ecommerce platform and service providers may process limited information that may be treated as sensitive under certain laws, such as account-login credentials or payment-related information, to authenticate accounts, complete transactions, prevent fraud, and provide requested Services.

Fit and sizing information is collected to provide fit and product recommendations and is not intended to collect medical or other special-category information. Please do not include unnecessary sensitive information in free-form customer-service messages, reviews, surveys, or other submissions. If you voluntarily provide sensitive information, we will use it only as reasonably necessary for the purpose for which you provided it, as otherwise disclosed to you, or as permitted or required by law.

3. Sources of Personal Data

We collect Personal Data from the following categories of sources:

Directly from you, such as when you make a purchase, create an account, contact us, submit a review, complete a survey or quiz, join a promotion, or subscribe to communications.
Automatically from your browser or device, through cookies, pixels, tags, server logs, and similar technologies.
From service providers and business partners, including ecommerce, payment, shipping, customer-service, analytics, fraud-prevention, advertising, social-media, and promotion providers.
From public and commercially available sources, where permitted by law.

4. How We Use Personal Data

We may use Personal Data for the following purposes:

Provide products and Services: process orders and payments, arrange shipping and delivery, manage returns and exchanges, administer accounts, provide fit or product recommendations, and fulfill other requests.
Customer support: respond to questions, troubleshoot issues, communicate about orders, and maintain records of support interactions.
Operate and improve the Services: maintain functionality, understand usage, conduct analytics, test features, improve products and customer experiences, and develop new offerings.
Personalization: remember preferences and present products, content, recommendations, and experiences that may be relevant to you.
Marketing and advertising: send promotional communications where permitted, measure campaigns, create audiences, deliver or assess interest-based advertising, and understand how customers interact with SHEFIT and our advertising.
Abandoned-cart communications: send reminders regarding items left in a cart when you have provided any consent required for the communication channel.
Promotions and loyalty programs: administer sweepstakes, surveys, events, discounts, rewards, and similar programs and provide any required program notices.
Security and fraud prevention: authenticate users, protect accounts and transactions, detect fraud or abuse, investigate security incidents, and protect SHEFIT, our customers, and others.
Legal and compliance purposes: comply with laws, regulations, legal process, and enforceable governmental requests; enforce agreements; establish or defend legal claims; and maintain required records.
Business operations: perform accounting, auditing, forecasting, reporting, supply-chain management, corporate governance, and other internal business functions.
Business transactions: evaluate or complete a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction.
With your direction or consent: use information for another purpose that we explain when the information is collected.

5. Legal Bases for Processing

Where the GDPR, UK GDPR, or another law requiring a legal basis applies, we rely on one or more of the following legal bases:

Processing purchases, payments, deliveries, returns, exchanges, accounts, and requested Services

Typical legal basis: Performance of a contract or steps taken at your request before entering a contract

Tax, accounting, consumer-protection, recordkeeping, and regulatory compliance

Typical legal basis: Compliance with legal obligations

Fraud prevention, security, service improvement, customer support, and ordinary business administration

Typical legal basis: Our legitimate interests, where those interests are not overridden by your rights, and legal obligations where applicable

Nonessential cookies, behavioral advertising, and certain analytics or personalization activities

Typical legal basis: Consent where required; otherwise legitimate interests where permitted

Email, text, and other direct marketing

Typical legal basis: Consent where required or legitimate interests where permitted, subject to your right to opt out

Legal claims, investigations, emergencies, and protection of people or property

Typical legal basis: Legal obligations, legitimate interests, or vital interests, as applicable

When we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal. When we rely on legitimate interests, you may have the right to object as described below.

6. How We Disclose Personal Data

We may disclose Personal Data to the following categories of recipients:

Service providers and contractors

We use providers that support ecommerce hosting, payment processing, fraud prevention, order fulfillment, shipping, returns, customer service, email and text messaging, analytics, website functionality, reviews, fit tools, security, professional services, and other business operations. These providers may process Personal Data to perform services for us or as otherwise permitted by their contracts and applicable law.

Advertising, analytics, and marketing partners

We may disclose identifiers, device and online-activity information, commercial information, approximate location, and inferences or preferences to advertising networks, social-media platforms, analytics and measurement providers, marketing-technology providers, and similar partners. These parties may use cookies and similar technologies to measure activity, create audiences, personalize advertising, or show SHEFIT advertisements on other services.

Affiliates

We may disclose Personal Data among SHEFIT-affiliated entities for the purposes described in this Policy, subject to applicable law.

Promotion and event partners

If a promotion, event, survey, or program is offered with another party, we may disclose information to that party as described in the applicable rules, entry form, or notice.

Legal, safety, and compliance recipients

We may disclose Personal Data when we reasonably believe disclosure is necessary to comply with law or legal process, respond to lawful government requests, prevent fraud or security incidents, protect rights or safety, enforce agreements, or investigate potential violations.

Business-transfer recipients

Personal Data may be disclosed or transferred as part of an actual or proposed merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction, subject to applicable law.

At your direction

We may disclose Personal Data to other parties when you direct us to do so or provide any consent required by law.

Text-message information

Mobile opt-in data and consent associated with our text-messaging program will not be sold or shared with third parties for their own marketing purposes. We may disclose this information to messaging providers and other service providers as necessary to operate the program, comply with law, and provide requested communications.

7. Sale, Sharing, and Targeted Advertising

SHEFIT does not sell Personal Data in exchange for money. However, certain disclosures to advertising, analytics, social-media, and marketing partners may be considered a “sale,” “sharing,” or use for “targeted advertising” under some privacy laws, even when no money is exchanged.

These activities may involve identifiers, commercial information, internet or electronic-network activity, approximate geolocation, and inferences or preferences. They may support cross-context behavioral advertising, audience creation, campaign measurement, attribution, and related marketing activities.

Where applicable, you may opt out through Your Privacy Choices or through a legally recognized browser-based opt-out preference signal, such as Global Privacy Control. An opt-out generally applies to the browser, device, or profile associated with the request, subject to applicable law and our ability to associate the request with you.

Open Your Privacy Choices Manage Your Privacy Choices

8. Cookies and Similar Technologies

We and third parties use cookies, pixels, tags, local storage, software development kits, server-side tools, and similar technologies to operate the Services, remember preferences, maintain carts, prevent fraud, understand site performance, measure campaigns, and support advertising.

Some technologies are necessary for the Services to function. Others support analytics, personalization, or advertising. Where applicable law requires consent, we request consent before using nonessential technologies. Continuing to browse the Services does not by itself constitute consent where affirmative consent is legally required.

You may review or change available cookie choices through the Cookie Preferences control in the website footer or through Your Privacy Choices . Disabling certain technologies may affect website functionality, rewards, reviews, fit tools, personalization, or other features that depend on those technologies.

Some browsers offer a “Do Not Track” setting. Because there is not a universally accepted standard for ordinary Do Not Track signals, the Services may not respond to them. This is different from legally recognized opt-out preference signals, such as Global Privacy Control. Where required, we process a qualifying opt-out preference signal as a request to opt out of sale or sharing for the browser or device that sends the signal.

9. Data Retention

We retain Personal Data for as long as reasonably necessary and proportionate for the purposes described in this Policy, including to complete transactions, provide customer service, maintain accounts, honor privacy choices, prevent fraud, comply with tax, accounting, legal, and regulatory obligations, resolve disputes, and enforce agreements.

Contact and account information

Retention criteria: For the duration of the account or customer relationship and afterward as necessary for customer service, security, legal obligations, disputes, and enforcement

Order, payment, return, and transaction records

Retention criteria: As needed to complete the transaction and satisfy tax, accounting, warranty, fraud-prevention, chargeback, legal, and recordkeeping obligations

Customer-service communications

Retention criteria: For as long as needed to resolve the matter, maintain service records, improve support, establish or defend claims, and comply with law

Marketing preferences and consent records

Retention criteria: Until you opt out or the information is no longer needed, while retaining suppression and consent records as needed to honor choices and demonstrate compliance

Online activity, cookies, analytics, and advertising identifiers

Retention criteria: For periods configured for the relevant technology or provider and no longer than reasonably necessary for security, functionality, measurement, attribution, analytics, or advertising purposes

Fit, quiz, product-preference, loyalty, review, and user-generated content

Retention criteria: For as long as needed to provide the feature, maintain the program or published content, honor your choices, and comply with legal obligations

Security, fraud-prevention, and diagnostic records

Retention criteria: For as long as reasonably necessary to detect, investigate, prevent, and document security incidents, fraud, abuse, or technical problems

Privacy requests and verification records

Retention criteria: For the period required or permitted to process the request, prevent fraud, document compliance, and honor continuing privacy choices

When Personal Data is no longer reasonably needed, we may delete, deidentify, or aggregate it, subject to applicable law and backup or archival practices. Retention periods may be extended when necessary for litigation holds, investigations, security matters, or other legal requirements.

10. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect Personal Data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption where appropriate, security monitoring, vendor controls, and employee confidentiality obligations.

No security system or method of transmitting information over the Internet is completely secure. We therefore cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us if you believe your account or information has been compromised.

11. Your Choices and Privacy Rights

Account information

You may be able to review or update certain account information by signing in to your account. You may also contact us to request assistance.

Email, text, and other marketing communications

You may unsubscribe from promotional emails by using the unsubscribe link in an email.
You may opt out of promotional text messages by replying STOP. Other recognized commands may include END, CANCEL, UNSUBSCRIBE, or QUIT.
Consent to receive automated marketing text messages is not a condition of purchase.
You may control browser, application, or device notifications through the relevant settings.

Even after you opt out of marketing, we may send nonpromotional communications concerning transactions, accounts, security, policy updates, or customer-service matters.

Cookie and advertising choices

Use the Cookie Preferences control in the website footer or visit Your Privacy Choices to manage available analytics, advertising, sale, sharing, and targeted-advertising choices.

Submitting a privacy request

Depending on where you live and subject to legal exceptions, you may have rights to access, download, correct, delete, restrict, object to, or obtain portability of Personal Data; receive information about processing and disclosures; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of Sensitive Personal Data; and appeal a denied request.

Submit a request through Your Privacy Choices or contact us using the methods below. We may need to verify your identity before completing certain requests. We may request information reasonably necessary to match you to records, protect against fraudulent requests, and comply with law.

Privacy rights are not absolute. We may deny or limit a request when an exception applies, the request cannot be verified, the requested action would adversely affect the rights of another person, or the request conflicts with law. If we deny a request, we will provide an explanation and information about any available appeal or complaint process as required.

We will not unlawfully discriminate against you for exercising a privacy right. Authorized agents may submit requests where permitted by law, subject to proof of authorization and appropriate verification.

12. Additional U.S. State Privacy Rights

Residents of certain U.S. states may have rights to confirm whether we process Personal Data; access, correct, delete, or obtain a portable copy of Personal Data; obtain information about categories of Personal Data and recipients; opt out of sale, sharing, targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects; limit certain uses of Sensitive Personal Data; and appeal a decision regarding a request.

To exercise an applicable right, visit Your Privacy Choices . You may also contact us by email or phone. If your state provides a right to appeal and we deny your request, follow the appeal instructions in our response or submit an appeal through the same privacy-request page and identify it as an appeal.

Where required, we honor qualifying browser- or device-based opt-out preference signals. The scope of a signal may be limited to the browser or device sending it unless we can reasonably associate it with a customer account or profile.

13. Privacy Notice for California Residents

California Notice Effective Date: October 11, 2022

Last Updated: July 23, 2026

This Privacy Notice for California Residents supplements the remainder of this Privacy Policy and applies to California residents. It explains how SHEFIT collects, uses, discloses, sells, or shares personal information and describes rights available under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”). Terms defined by the CCPA have the same meanings when used in this notice.

Your privacy controls are available on the Your Privacy Choices page.

Use Your Privacy Choices to opt out of sale or sharing, manage applicable cookie and advertising choices, limit certain uses of sensitive personal information where the right applies, or submit another privacy request.

California personal information practices

The following table describes categories of personal information SHEFIT may have collected during the preceding 12 months, representative examples, and whether those categories may have been disclosed for a business purpose or sold or shared for cross-context behavioral advertising. An example listed for a category does not mean that SHEFIT collects every type of information included in that example.

A. Identifiers

Representative examples SHEFIT may collect: Name, postal and email address, telephone number, account identifiers, IP address, device identifiers, cookie identifiers, and other online identifiers
Collected: Yes
Disclosed for a business purpose: Yes
Sold or shared: Yes, including certain online identifiers used for advertising and measurement

B. California customer-record information

Representative examples SHEFIT may collect: Name, address, telephone number, account information, payment and transaction information, and other information described in California Civil Code section 1798.80(e)
Collected: Yes
Disclosed for a business purpose: Yes
Sold or shared: Limited contact or account identifiers may be shared for advertising audiences or measurement

C. Protected characteristics

Representative examples SHEFIT may collect: Age or other demographic information that a consumer voluntarily provides or that is otherwise collected as permitted by law
Collected: Limited
Disclosed for a business purpose: As needed to provide Services or comply with law
Sold or shared: Not knowingly sold or shared for cross-context behavioral advertising

D. Commercial information

Representative examples SHEFIT may collect: Products viewed, considered, purchased, returned, exchanged, placed in a cart, or otherwise associated with a transaction; purchasing preferences and history
Collected: Yes
Disclosed for a business purpose: Yes
Sold or shared: Yes, for advertising and measurement

E. Biometric information

Representative examples SHEFIT may collect: Biometric identifiers used to establish identity, such as faceprints, fingerprints, iris scans, or voiceprints
Collected: No
Disclosed for a business purpose: No
Sold or shared: No

F. Internet or electronic-network activity

Representative examples SHEFIT may collect: Browsing and search activity, interactions with our website, emails, advertisements, products, and cart; referring pages; browser and device information; and timestamps
Collected: Yes
Disclosed for a business purpose: Yes
Sold or shared: Yes, for advertising and measurement

G. Geolocation data

Representative examples SHEFIT may collect: Approximate location derived from an IP address and, where enabled and permitted, more precise device-based location information
Collected: Yes, primarily approximate location
Disclosed for a business purpose: Yes
Sold or shared: Approximate location may be shared for advertising or measurement

H. Sensory information

Representative examples SHEFIT may collect: Audio, electronic, visual, or similar information, such as customer-service communications, if collected
Collected: Limited, if applicable
Disclosed for a business purpose: As needed to provide support, maintain quality, or protect the business
Sold or shared: No

I. Professional or employment-related information

Representative examples SHEFIT may collect: Employment or professional information submitted in a consumer interaction; workforce information may be covered by a separate notice
Collected: Limited, if voluntarily provided
Disclosed for a business purpose: As needed for the stated purpose
Sold or shared: No

J. Non-public education information

Representative examples SHEFIT may collect: Education records directly related to a student and maintained by an educational institution or a party acting for it
Collected: No
Disclosed for a business purpose: No
Sold or shared: No

K. Inferences

Representative examples SHEFIT may collect: Inferences about preferences, interests, likely purchasing behavior, product affinities, fit preferences, and interactions with SHEFIT
Collected: Yes
Disclosed for a business purpose: Yes
Sold or shared: Yes, for advertising and measurement

L. Sensitive personal information

Representative examples SHEFIT may collect: Account-login credentials; payment-related information handled in connection with transactions; precise geolocation if enabled; and personal information of a known consumer under 16, where applicable
Collected: Limited
Disclosed for a business purpose: Only as necessary for permitted business purposes
Sold or shared: Not knowingly sold or shared for cross-context behavioral advertising

Sources and purposes

We obtain California personal information from the sources described in Section 3 and use it for the business and commercial purposes described in Section 4. We retain it using the criteria described in Section 9.

Categories disclosed for business purposes

During the preceding 12 months, we may have disclosed the categories identified above as collected to service providers, contractors, or other recipients for business purposes, including ecommerce hosting, payment processing, fraud prevention, order fulfillment, shipping, returns, customer service, communications, analytics, website functionality, reviews, fit tools, security, auditing, legal compliance, and professional services.

Categories sold or shared and recipient categories

During the preceding 12 months, we may have sold or shared, as those terms are defined by the CCPA, identifiers, limited customer-record information, commercial information, internet or electronic-network activity, approximate geolocation, and inferences. These categories may have been sold or shared with advertising networks, social-media platforms, analytics and measurement providers, marketing-technology providers, operating systems or platforms, and similar partners for cross-context behavioral advertising, audience creation, attribution, and campaign measurement.

We do not sell personal information for money. We do not knowingly sell or share the personal information of consumers under 16 without the affirmative authorization required by law.

Global Privacy Control and other opt-out preference signals

Where required by law, SHEFIT processes qualifying browser- or device-based opt-out preference signals, including Global Privacy Control (“GPC”), as requests to opt out of the sale or sharing of personal information for the browser or device sending the signal and, when we can reasonably associate the signal with a known customer profile, for that profile. A GPC signal may not apply to another browser or device that does not send the signal unless the request can be associated with your account or profile.

You may review your current selection through the Cookie Preferences panel or Your Privacy Choices . A traditional browser “Do Not Track” signal is different from GPC.

Sensitive personal information

SHEFIT generally uses sensitive personal information only as reasonably necessary to provide requested products or Services, process transactions, maintain account security, prevent fraud, comply with law, and perform other purposes permitted without offering a right to limit. To the extent we use or disclose sensitive personal information in a manner subject to a right to limit, California residents may exercise that right through Your Privacy Choices .

Your California privacy rights

Right to know and access

You may request that we disclose:

The categories of personal information we collected about you.
The categories of sources from which we collected personal information.
The business or commercial purposes for collecting, selling, or sharing personal information.
The categories of third parties to whom we disclosed, sold, or shared personal information.
The categories of personal information sold or shared and the recipient categories for each category.
The categories of personal information disclosed for a business purpose and recipient categories.
The specific pieces of personal information we collected about you, subject to legal and security limitations.

A standard response covers the 12 months preceding receipt of a verified request. You may also request access to personal information collected beyond that period, going back as far as January 1, 2022, unless providing it would be impossible, would involve disproportionate effort, or another legal exception applies.

Right to delete

You may request deletion of personal information we collected from or about you, subject to exceptions. We may retain information when reasonably necessary to complete a transaction, provide a requested product or Service, maintain security and prevent fraud, debug or repair systems, exercise or protect legal rights, comply with law, retain records of privacy requests, or perform another purpose permitted by the CCPA.

Right to correct

You may request correction of inaccurate personal information that we maintain about you. We will consider the nature of the information and the purposes for which it is processed and will use commercially reasonable efforts to correct verified inaccuracies.

Right to opt out of sale or sharing

You may direct us not to sell or share your personal information through Your Privacy Choices or through a qualifying opt-out preference signal such as GPC. We will not ask you to opt back in for at least 12 months after an opt-out request unless otherwise permitted by law.

Right to limit certain uses of sensitive personal information

Where applicable, you may direct us to limit the use and disclosure of sensitive personal information to purposes permitted by California law. This right does not apply when sensitive personal information is used only for legally permitted purposes.

Right to non-discrimination

We will not unlawfully discriminate against you because you exercised a CCPA right. For example, we will not deny goods or Services, charge a different price, provide a different level or quality of Service, or retaliate against you solely because you exercised a privacy right, except as permitted by law.

How to exercise California rights

Online: Your Privacy Choices
Phone: 1-866-768-4872
Email: support@shefit.com with “California Privacy Request” in the subject line

You do not need to create an account to submit a request. For requests to know, access, delete, or correct, we may ask for information reasonably necessary to verify your identity and match you to records in our systems. We will use information provided for verification only to verify and process the request, prevent fraud, maintain required records, and comply with legal obligations. An opt-out request submitted through cookie or browser controls does not require email verification.

Authorized agents

You may designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of signed permission and may contact you directly to verify your identity and confirm that you authorized the request. These additional verification requirements generally do not apply when an agent has a valid power of attorney under California law.

Response timing and format

For requests to know, access, delete, or correct, we will confirm receipt within 10 business days and generally respond within 45 calendar days after receipt. When reasonably necessary, we may extend the response period by up to an additional 45 calendar days and will provide notice and an explanation of the extension.

Requests to opt out of sale or sharing and requests to limit applicable uses of sensitive personal information will be processed as soon as feasibly possible and no later than the period required by law. We generally do not charge a fee. We may charge a reasonable fee or decline to act when a request is manifestly unfounded, excessive, or repetitive, to the extent permitted by law.

Financial incentives

SHEFIT may offer loyalty programs, discounts, promotions, sweepstakes, or other benefits that may qualify as a financial incentive or price or service difference under California law. When required, we will provide a separate notice describing the material terms, the categories of personal information involved, how the value of the information is reasonably related to the benefit, and how to opt in or withdraw. Participation is voluntary.

California “Shine the Light”

California Civil Code section 1798.83 permits California residents with an established business relationship with us to request certain information about the disclosure of personal information to third parties for their own direct-marketing purposes. Submit a request by emailing support@shefit.com with “California Shine the Light Request” in the subject line.

California minors’ content-removal rights

California residents under 18 who are registered users of an online service may request removal of content or information they publicly posted where California law applies. Contact us with a detailed description of the content and where it appears. Removal may not ensure complete deletion and may be subject to legal exceptions.

14. EEA, United Kingdom, and Switzerland

If applicable data-protection law applies to our processing, you may have rights to receive information about processing; request access, correction, deletion, restriction, or portability; object to processing, including direct marketing and certain profiling; withdraw consent; and lodge a complaint with a supervisory authority. Withdrawing consent does not affect processing that occurred before withdrawal.

We generally respond to applicable rights requests without undue delay and within one month, subject to permitted extensions. We may request information reasonably necessary to confirm identity. Rights are subject to legal exceptions and may not apply in every circumstance.

You may submit a request through Your Privacy Choices . You may also complain to the data-protection authority where you live, work, or believe an infringement occurred.

15. Canada

Residents of Canada may have rights to request access to Personal Data, challenge its accuracy and completeness, request correction, withdraw consent subject to legal or contractual restrictions, and challenge our compliance with applicable privacy law. Withdrawal of consent does not affect processing already completed and may affect our ability to provide certain Services.

Submit a request through Your Privacy Choices or contact the SHEFIT Privacy Office. If you are not satisfied with our response, you may have the right to complain to the Office of the Privacy Commissioner of Canada or an applicable provincial privacy regulator.

16. Children’s Privacy

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect Personal Data online from children under 13 through the Services. If you believe a child under 13 has provided Personal Data to us, please contact us so that we can investigate and take appropriate action.

We do not knowingly sell or share the Personal Data of consumers under 16 without any affirmative authorization required by applicable law.

17. International Transfers

SHEFIT is based in the United States. Personal Data may be transferred to, stored in, or processed in the United States and other countries where we or our service providers operate. Those countries may have data-protection laws that differ from the laws where you live.

Where required, we use appropriate transfer mechanisms and safeguards, which may include approved Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or other lawful mechanisms. You may contact us for additional information about applicable transfer safeguards.

18. Automated Processing and Profiling

We may use automated tools to support product recommendations, fit suggestions, fraud detection, security, personalization, audience creation, advertising, and analytics. These tools may evaluate information such as product interests, transactions, online activity, device information, or fit preferences.

SHEFIT does not intend to use solely automated processing to make decisions that produce legal or similarly significant effects concerning consumers unless the activity is disclosed and conducted in accordance with applicable law. Where applicable law provides a right to opt out of certain profiling or automated decision-making, you may submit a request through Your Privacy Choices .

19. Third-Party Services and Public Content

The Services may link to or integrate with third-party websites, payment methods, social-media platforms, applications, tools, or services. Those third parties control their own privacy practices, and this Policy does not apply to information they process independently. We encourage you to review their privacy notices before providing information or using their services.

Content you publish publicly, such as a product review or social-media post, may be viewed, collected, or used by others. Do not post information you want to keep private.

20. Contact Us

For questions about this Privacy Policy or to submit a privacy request, contact:

SHEFIT Privacy Office
4400 Central Parkway
Hudsonville, MI 49426
United States

Email: support@shefit.com
Phone: 1-866-768-4872
Online request: Your Privacy Choices

Please describe your request clearly and provide information reasonably necessary for us to identify the relevant records and verify the request.

21. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, Services, or legal obligations. The “Last Updated” date above identifies the most recent revision. If changes are material, we may provide additional notice as required by law.

Our text-messaging program is also subject to the applicable Messaging Terms and Messaging Privacy Policy .

Your Privacy Choices

Use the privacy choices page to opt out of sale or sharing, manage privacy preferences, or submit a request to access, correct, download, or delete Personal Data.

Open Your Privacy Choices