WOLFBOX Brands
WOLFBOX Brands
WOLFBOX TECH, Inc. ("WOLFBOX," "we," "us," or "our") provides the WOLFBOX online store at wolfbox.com and related shopping, order processing, delivery, warranty, returns, and customer support services (the "Services"). This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information in connection with the Services, including support for earlier WOLFBOX Gear purchases.
This Policy does not mean every product collects data or every feature is available for every product. Mobile applications, community platforms, and connected-device features with separate privacy notices are governed by those notices for the processing they describe. This Policy covers information you submit to our store or customer support about those products. Purchasing a vehicle product does not, by itself, mean we receive its recordings, live location, or driving history.
Personal information means information that identifies, relates to, or can reasonably be linked to an individual or household under applicable law. It excludes information anonymised or de-identified in accordance with applicable law. If this Policy conflicts with our Terms of Service on personal-information handling, this Policy governs that handling. Nothing here limits your statutory rights.
Contact and account information: your name, email, telephone number, billing and delivery addresses, account identifiers, authentication information, preferences, and settings when you provide them or use relevant features.
Orders and payments: products viewed, placed in a cart or wishlist, purchased, returned, exchanged, or cancelled; order history, payment status, transaction references, and limited payment details provided to us by payment providers. Payment providers process payment credentials submitted through their checkout services under their applicable notices.
Product and support information: product model, serial number, purchase and warranty information, fault descriptions, and installation details, photos, videos, diagnostic files, or logs you choose to submit for support. Such materials may contain images, voices, location information, or other people's information. Provide only what is necessary and what you are entitled to share. This is distinct from automatic collection of data by a connected product, which is subject to the relevant product notice.
Communications and public content: enquiries, feedback, reviews, and other content you submit. Reviews you choose to publish may be visible to others; avoid including private information in public submissions.
Website and usage information: IP address, browser and device type, operating system, identifiers, approximate location inferred from IP address, referral information, pages and products viewed, and interactions with the Services. We collect this through website logs, cookies, pixels, and similar technologies, subject to applicable consent and opt-out requirements. A website-access device identifier is not necessarily a WOLFBOX product identifier.
Sources: we receive information directly from you; automatically through use of the Services; from Shopify and providers supporting payments, delivery, fraud prevention, and customer support; and from partners or other third parties where permitted by law. We may infer preferences or product interests from your interactions with the Services.
California category mapping (CCPA/CPRA): for the 12 months preceding the date of this Policy, the information described above maps to the following statutory categories — identifiers; customer records containing personal information (Cal. Civ. Code §1798.80(e)); commercial information; internet or other electronic network activity information; geolocation (approximate, inferred from IP address); audio, electronic, visual or similar information (support photos, videos and recordings you choose to submit); inferences drawn from the information above; and sensitive personal information, but only to the extent described in this Policy. This mapping does not narrow or replace the description in Section 2; it exists so that California requests can be answered against the statutory categories.
We use information for the purposes below. Where EU GDPR or UK GDPR applies, we rely on the legal basis relevant to the particular activity, rather than treating all bases as interchangeable.
Orders, accounts, and support: managing accounts, processing payments, delivering orders, arranging returns, and providing requested installation, warranty, and other support. Legal basis: steps requested before entering a contract or contract performance; legal obligations for statutory warranty or consumer-law requirements where applicable.
Security and fraud prevention: authenticating access, preventing misuse and fraud, investigating incidents, and protecting the Services and legal rights. Legal basis: legitimate interests in secure operations and fraud prevention, subject to balancing your rights, or applicable legal obligations.
Operation and improvement: resolving faults, understanding service performance, remembering choices, and improving product information and shopping experiences. Legal basis: legitimate interests in operating and improving our business where permitted; consent for cookies and related processing where required.
Marketing and advertising: sending permitted promotional communications, measuring campaigns, and displaying or personalising advertisements on our Services or other websites. Legal basis: consent where required, or legitimate interests where the law permits the relevant activity. Applicable cookie-consent and advertising opt-out choices take precedence. Unsubscribing from promotions does not stop necessary order or service messages.
Legal compliance and disputes: maintaining required records, meeting tax and consumer-protection obligations, responding to valid legal requests, and establishing, exercising, or defending claims. Legal basis: applicable legal obligations or legitimate interests in protecting legal rights.
We do not ask for sensitive information unrelated to your shopping or support needs. If a requested service involves sensitive information, we apply the additional conditions and notices required by law. Legitimate interests alone do not authorise processing GDPR special-category data. Not providing information necessary for an order or requested service may prevent us from fulfilling that request; optional marketing choices do not determine whether you can buy products.
Service providers: we disclose relevant information to Shopify and providers supporting hosting, payments, IT, security, analytics, customer support, fulfilment, shipping, returns, and warranty, as needed for their functions and subject to applicable contractual and legal requirements.
Marketing and advertising partners: we may disclose online-activity information and identifiers for the marketing and advertising described here, subject to applicable consent and opt-out requirements. Partners may process information under their own notices. Some advertising disclosures may constitute a "sale," "sharing," or "targeted advertising" under applicable US privacy laws even without a monetary payment for personal information. Section 7 explains the relevant choices.
At your direction: we disclose information when you request or authorise us to do so, for example to arrange delivery or requested installation assistance. Independent providers may have their own privacy notices.
Legal and business matters: we may disclose necessary information to comply with law or valid legal process, protect people and legal rights, investigate misuse, or in connection with a proposed or completed business transfer, subject to applicable safeguards and notice requirements.
Public submissions: reviews and other content you intentionally make public may be available to others. Your use of the Services does not authorise unrestricted use of private information.
Recipient categories by data category: the table below sets out, for each category of personal information we collect, the categories of recipients to whom we disclose it and whether that disclosure may amount to a sale or sharing under applicable US privacy laws. This table forms part of the California disclosures in Section 7.
| Personal information category | Categories of recipients | Sale or sharing |
|---|---|---|
| Identifiers (contact, account, device, cookie and online identifiers) | Shopify and hosting, payment, delivery, returns, warranty and customer-support providers acting as service providers; analytics and advertising partners; legal and professional advisers where required | Advertising disclosures may constitute "sharing" or targeted advertising; no monetary sale of personal information |
| Customer records containing personal information (Cal. Civ. Code §1798.80(e)) | Payment, fulfilment, delivery, warranty and returns providers; customer-support tooling | No sale or sharing |
| Commercial information (orders, purchases, returns, preferences) | Shopify, payment and fulfilment providers; warranty and returns service providers | No sale or sharing |
| Internet or other electronic network activity information | Analytics and advertising partners; security and fraud-prevention providers | May constitute "sharing" or targeted advertising; Global Privacy Control honoured |
| Geolocation (approximate, inferred from IP address) | Analytics and advertising partners; fraud-prevention providers | May constitute sharing for advertising |
| Audio, electronic, visual or similar information you submit (support photos, videos and recordings) | Customer-support providers, product engineers and warranty service providers | No sale or sharing |
| Inferences drawn from the information above (preferences, product interests) | Analytics and measurement partners; advertising partners | May constitute "sharing" or targeted advertising |
| Sensitive personal information (only where you choose to provide it) | Providers strictly necessary for the requested service | No sale or sharing; not used for advertising |
Our store is hosted by Shopify. Information about access, shopping, checkout, and transactions is shared with Shopify and relevant providers to operate and improve the Services. When Shopify processes information on our behalf to provide merchant services, WOLFBOX remains responsible for its own obligations regarding that processing.
Shopify may also process information for its own consumer services and, where enabled, Enhanced Services or Shopify Network Intelligence, which may combine interactions with our store, other merchants, and Shopify. Shopify's role and responsibilities for those activities are explained in its privacy notices. Applicable consent and opt-out requirements still apply.
For Shopify's own processing and applicable choices, see the Shopify Consumer Privacy Policy and Shopify Privacy Portal. Contact us about WOLFBOX processing; using Shopify does not remove our responsibility to address requests for which we are responsible.
Depending on the features used and applicable choices, we use cookies and similar technologies for carts, checkout, authentication, security, preferences, analytics, and advertising. Where prior consent is required, non-essential technologies are used only with that consent. You may withdraw consent through the cookie controls made available on the website or manage cookies through your browser. Blocking necessary cookies may affect shopping or account functions. Browser settings may not control every advertising technology.
Unsubscribe from promotional emails using the link in the message. Where SMS marketing is offered, follow the message's opt-out instructions. We may still send necessary transactional or service messages. Advertising choices and Global Privacy Control are addressed in Section 7.
Depending on location, legal applicability, and lawful exceptions, you may request access to or knowledge of your information, correction, deletion, a portable copy, restriction of processing, or objection to certain processing. Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing. You may object at any time to direct marketing, including related profiling.
US privacy rights: where applicable, you may opt out of sale, sharing for cross-context behavioural advertising, or processing for targeted advertising; request limits on certain uses or disclosures of sensitive personal information; and opt out of profiling used for decisions producing legal or similarly significant effects where the law provides that right. We will not unlawfully discriminate or retaliate against you for exercising rights. You may use an authorised agent as permitted by law.
California rights: Sections 2–5, together with the recipient table in Section 4, describe the categories and specific pieces of personal information we collected in the past 12 months, the sources, the business or commercial purposes, and the categories of third parties to whom we disclosed, sold or shared it. You may request the categories and specific pieces of information collected about you and information about disclosures, sales, or sharing as provided by the CCPA. Sensitive-information rights depend on the information and how it is used.
Global Privacy Control (GPC): where required by law, we treat a recognised GPC signal as a request to opt out of sale or sharing, including applicable targeted advertising, for the browser or device sending it. Where we can associate it with your account, we apply it to that account as required by law. One browser's signal may not identify your other browsers or devices. We do not recognise other browser Do Not Track signals as equivalent opt-out requests. Learn more at Global Privacy Control.
To exercise rights, including advertising opt-outs, email privacy@wolfbox.com or use our Contact Us page. You may also use relevant privacy controls provided on the Services. Tell us your request and relevant country or state; do not send passwords or full payment credentials. For requests requiring verification, we may request proportionate identity information. We will not require identity verification for opt-outs where prohibited by law. For agents, we may request proof of authority and permitted identity confirmation.
We respond within applicable statutory deadlines and explain any permitted extension or refusal. EU/UK GDPR requests are generally addressed within one month, extendable by up to two further months where necessary with notice. CCPA access, deletion, and correction requests are generally addressed within 45 days, extendable by up to 45 additional days with notice. Opt-outs follow their own applicable deadlines, not these extended request periods.
If you disagree with our response, contact privacy@wolfbox.com to appeal where available. You may also complain to a competent privacy regulator, including your local data-protection supervisory authority where applicable, without first completing our internal complaint process. Rights regarding solely automated decisions with legal or similarly significant effects apply where the law and processing meet the relevant conditions.
WOLFBOX, Shopify, and other providers may process information in the United States and other countries outside your residence, where protections may differ. We apply transfer safeguards required by the law applicable to the processing.
For transfers restricted under EU GDPR, we rely on an applicable adequacy decision or appropriate safeguards, such as European Commission Standard Contractual Clauses, with supplementary measures where required. For restricted UK transfers, we use applicable UK mechanisms, such as the UK Addendum or International Data Transfer Agreement, where required. Other transfers use applicable safeguards or lawful exceptions. Contact us about relevant safeguards and obtaining information or a copy, subject to lawful redactions. Consent to this Policy is not a blanket waiver of transfer protections.
We retain information only as long as reasonably necessary for the stated purposes, considering legal obligations and permitted exceptions. Account information is kept as needed to operate the account; order and payment records for fulfilment, tax, accounting, fraud prevention, and disputes; product and support materials for the enquiry, installation, warranty, or claim; and marketing or cookie data according to relevant consent, preferences, and technology lifecycles.
We consider the nature and sensitivity of information, service relationships, warranty and dispute periods, legal requirements, and whether less information can achieve the purpose. Information no longer needed is deleted or anonymised. Where immediate backup deletion is not feasible, it is isolated from routine use until deleted under the applicable backup cycle, except where retention is legally required. Minimal suppression records may be kept to honour unsubscribe or opt-out requests. Contact us about retention applicable to your data.
We use reasonable technical and organisational safeguards appropriate to processing risks, including access restrictions and measures protecting information in transmission and storage. No system is completely secure. Do not send passwords, full payment credentials, or unnecessary sensitive information in support messages. If a breach triggers notification obligations, we notify affected individuals and competent authorities as required by law.
The Services are intended for adults and not directed to children under 13. We do not knowingly collect information from children under 13 through these Services. If you believe a child provided information, contact us so we can investigate and take appropriate deletion or other action required by law. Where local law requires a higher age or parental authorisation for a particular activity, we apply that requirement. We do not knowingly sell or share information of consumers under 16 without authorisation required by applicable law.
Links, payment services, social-media features, and independent installation or other services may be operated by third parties under their own privacy notices. Review those notices when using them. A link does not mean we control all of the third party's processing and does not limit our obligations for information disclosed to it.
We may update this Policy to reflect changes in Services, data practices, or law. We post the updated version, revise its update date, and provide additional notice or obtain consent where required.
Each version carries a version number and an effective date, we keep a log of material changes, and copies of earlier versions are available on request from privacy@wolfbox.com. Where a change is material — new purposes, new categories of recipients, or a new sale or sharing — we give prominent notice before it takes effect and, where the law requires it (including for EU/UK data subjects and for new purposes under the CCPA), obtain fresh consent or offer a new opt-out before the change applies. Continued use does not replace legally required consent, and changes do not remove statutory rights.
WOLFBOX TECH, Inc. — privacy enquiries and rights requests: privacy@wolfbox.com.
Contact form: https://www.wolfbox.com/pages/contact-us.
Telephone: +1 888 296 8399.
Identify your request and relevant country or state to help us route it.
Product and order support: service@wolfbox.com.
Registered address: 854 Homestead Dr, Highlands Ranch, CO 80126, United States.
