Privacy Policy
Privacy Policy
Last Updated: September 8, 2026
1. Overview
Trendyazz ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website trendyazz.com (the "Site") and purchase our cycling apparel products.
We are a US-based company serving customers primarily in the United States. This policy complies with applicable US federal and state privacy laws, including the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and Utah Consumer Privacy Act (UCPA).
By using our Site, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Site.
2. Information We Collect
We collect several categories of personal information as defined by applicable privacy laws:
2.1 Information You Provide Directly
| Category | Examples |
|---|---|
| Identifiers | Name, email address, phone number, billing/shipping addresses |
| Commercial Information | Order history, products purchased, purchase frequency, preferences |
| Payment Information | Credit card details (processed by Shopify Payments/PayPal), billing address |
| Customer Support Communications | Emails, chat logs, support tickets, feedback, reviews |
| Account Information | Username, password (hashed), account preferences, wish lists |
| Marketing Preferences | Email/SMS subscription status, communication preferences |
2.2 Information Collected Automatically
| Category | Examples |
|---|---|
| Device & Network Information | IP address, device type, browser type, operating system, ISP |
| Geolocation Data | Approximate location (city, state, country) derived from IP |
| Usage & Analytics Data | Pages viewed, time on site, click paths, referral source, search terms |
| Cookies & Similar Technologies | Session IDs, persistent cookies, local storage, web beacons (see Section 5) |
2.3 Information from Third Parties
- Shopify: Order, customer, and transaction data processed through our e-commerce platform
- Payment Processors: Shopify Payments, PayPal, Apple Pay, Google Pay — transaction confirmation data only
- Shipping Carriers: USPS, UPS, FedEx — tracking and delivery confirmation
- Marketing & Analytics: Google Analytics, Meta Pixel, Klaviyo — aggregated usage and campaign data
- Review Platforms: Customer reviews submitted via third-party widgets
2.4 Sensitive Personal Information
We do not knowingly collect sensitive personal information as defined by CCPA/CPRA (such as Social Security numbers, driver's license numbers, precise geolocation, racial/ethnic origin, religious beliefs, health data, or biometric data). Payment details are handled exclusively by our PCI-DSS compliant payment processors and never stored on our servers.
3. How We Use Your Information
We use your personal information for the following business and commercial purposes:
| Purpose | Description | Legal Basis |
|---|---|---|
| Order Fulfillment | Process, pack, ship, and deliver your orders; provide tracking and delivery updates | Contract performance |
| Payment Processing | Verify payment, prevent fraud, issue refunds (via PCI-compliant processors) | Contract performance |
| Customer Support | Respond to inquiries, resolve issues, process returns/exchanges, manage warranties | Legitimate interest |
| Account Management | Create/maintain your account, authenticate login, store preferences | Contract performance |
| Marketing Communications | Send promotional emails/SMS about new products, sales, cycling tips (with consent) | Consent / Legitimate interest |
| Personalization | Recommend products, customize site experience, remember cart/preferences | Legitimate interest |
| Analytics & Improvement | Analyze trends, improve site functionality, optimize product offerings | Legitimate interest |
| Fraud Prevention & Security | Detect/prevent fraud, protect against unauthorized access, enforce policies | Legitimate interest / Legal obligation |
| Legal Compliance | Comply with laws, respond to legal requests, maintain required records | Legal obligation |
We do not sell your personal information. We do not share personal information with third parties for their independent marketing purposes (which would constitute a "sale" under CCPA/CPRA).
6. Data Security
We implement appropriate technical, administrative, and physical safeguards to protect your personal information:
- Encryption in Transit: All data transmitted via TLS 1.2+ (HTTPS across the entire Site)
- Encryption at Rest: Shopify's infrastructure encrypts stored data (AES-256)
- Payment Security: PCI-DSS Level 1 compliance via Shopify Payments; we never store full card numbers
- Access Controls: Role-based access, principle of least privilege, MFA for admin access
- Monitoring: Intrusion detection, vulnerability scanning, security incident response procedures
- Vendor Management: All processors bound by Data Processing Addendums (DPAs) with security requirements
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
7. Your Rights (US State Privacy Laws)
Depending on your state of residence, you may have the following rights regarding your personal information:
| Right | Description | Applicable Laws |
|---|---|---|
| Right to Know / Access | Request details about what personal information we collect, use, share, and why | CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA |
| Right to Delete | Request deletion of your personal information (subject to exceptions) | CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA |
| Right to Correct | Request correction of inaccurate personal information | CPRA, VCDPA, CPA, CTDPA |
| Right to Opt-Out of Sale/Sharing | Opt out of "sale" or "sharing" for targeted advertising (we don't sell, but honor for sharing) | CCPA/CPRA, VCDPA, CPA, CTDPA |
| Right to Limit Use of Sensitive Data | Limit use/disclosure of sensitive personal information (N/A — we don't collect) | CPRA |
| Right to Data Portability | Receive your data in a portable, readily usable format | CCPA/CPRA, VCDPA, CPA, CTDPA |
| Right to Non-Discrimination | No denial of goods/services, different pricing, or quality for exercising rights | CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA |
| Right to Appeal | Appeal a denied rights request | VCDPA, CPA, CTDPA |
7.1 How to Exercise Your Rights
To submit a request, email support@trendyazz.com with:
- Subject line: "Privacy Rights Request — [Your State]"
- Your full name, email, and shipping address on file
- The specific right(s) you wish to exercise
- If submitting via authorized agent: written authorization + agent's identity verification
We will verify your identity (may request additional information) and respond within 45 days (extendable by 45 days with notice). There is no fee for reasonable requests.
8. California Privacy Rights (CCPA/CPRA)
This section applies to California residents and supplements the rights in Section 7.
8.1 Categories of Personal Information Collected (Last 12 Months)
We have collected the following categories: Identifiers (A), Commercial Information (B), Internet/Network Activity (B), Geolocation Data (B), Inferences (B). Categories per Cal. Civ. Code § 1798.140.
8.2 Categories of Sources
Directly from you, automatically via Site, from service providers (Shopify, payment processors, carriers, analytics).
8.3 Business/Commercial Purposes for Collection
As detailed in Section 3.
8.4 Categories of Third Parties with Whom We Share
Service providers (Shopify, Klaviyo, Google, Meta, carriers, Printful) — all under written contracts. We do not sell or share for cross-context behavioral advertising.
8.5 No Sale of Personal Information
We have not sold personal information in the preceding 12 months. We have no actual knowledge of selling minors' (under 16) information.
8.6 No Sharing for Cross-Context Behavioral Advertising
We do not share personal information for cross-context behavioral advertising. If you opt out via GPC or our opt-out form, we cease any sharing that could be construed as such.
8.7 Sensitive Personal Information
We do not collect sensitive personal information as defined by CPRA (§ 1798.140(ae)).
8.8 Retention Periods
See Section 10. We retain order data for at least 7 years for tax/legal compliance.
8.9 Authorized Agent
You may designate an authorized agent to submit requests on your behalf. The agent must provide written permission signed by you and verify their own identity.
8.10 Financial Incentives
We do not currently offer financial incentives for data collection. If we do, we will notify you and obtain opt-in consent as required.
8.11 Shine the Light Law (Cal. Civ. Code § 1798.83)
California residents may request a list of third parties to whom we disclosed personal information for direct marketing in the prior year. We do not share with third parties for their direct marketing.
9. Other US State Privacy Rights
If you reside in the following states, you have substantially similar rights as described in Section 7 and Section 8:
- Virginia (VCDPA): Effective Jan 1, 2023 — access, delete, correct, portability, opt-out of sale/targeted ads/profiling, appeal
- Colorado (CPA): Effective July 1, 2023 — similar rights + universal opt-out mechanism (GPC)
- Connecticut (CTDPA): Effective July 1, 2023 — similar rights + data protection assessments
- Utah (UCPA): Effective Dec 31, 2023 — access, delete, portability, opt-out of sale/targeted ads
- Other States: We extend comparable rights to all US customers regardless of state.
10. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy, or as required by law:
| Data Category | Retention Period | Basis |
|---|---|---|
| Order & Transaction Records | 7 years after order date | Tax, accounting, legal compliance |
| Account & Profile Data | Duration of account + 2 years after closure | Contract, legitimate interest |
| Marketing Communications Logs | 3 years after last interaction | Consent, legitimate interest, CAN-SPAM |
| Customer Support Records | 3 years after resolution | Quality assurance, dispute resolution |
| Analytics & Usage Data (Aggregated) | Up to 26 months (GA4 default) | Legitimate interest, analytics |
| Cookie / Device Identifiers | Per cookie duration (see Section 5) | Consent / Legitimate interest |
| Fraud Prevention Records | Up to 7 years | Legal obligation, legitimate interest |
After retention periods expire, we securely delete or anonymize the data. Anonymized data may be retained indefinitely for analytics.
11. Children's Privacy
Our Site is not directed to children under 13 (COPPA) or under 16 (CCPA/CPRA). We do not knowingly collect personal information from children. If you are a parent/guardian and believe your child has provided us information, contact us at support@trendyazz.com and we will delete it promptly.
We do not target advertising to children. Our cycling apparel is designed for teens (13+) and adults.
12. Third-Party Links
Our Site may contain links to third-party websites (social media, reviews, partners). We are not responsible for their privacy practices. This policy applies only to information collected by Trendyazz. We encourage you to review the privacy policies of any third-party sites you visit.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top indicates the most recent revision.
For material changes, we will:
- Post the updated policy on this page with a new effective date
- Display a prominent banner on our Site for at least 30 days
- Email registered customers (if the change expands data use or reduces rights)
Your continued use of the Site after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:
Email: support@trendyazz.com (general)
Mailing Address: Trendyazz Privacy Team, 3827 S Carson St 505-25, Carson City, NV 89701, United States
Response Time: We acknowledge requests within 10 business days and respond substantively within 45 days (or as required by applicable law).
Data Protection Officer / Privacy Lead
Trendyazz has designated a Privacy Lead responsible for overseeing compliance with this policy and applicable laws. Contact via support@trendyazz.com.
- Choosing a selection results in a full page refresh.