Privacy Policy

Overview

This Privacy Policy explains how Struxa, Inc. ("Struxa," "we," "us," or "our") collects, uses, and shares information when you visit struxasplints.com and our related sites, including studio.struxasplints.com (Struxa Studio), shop.struxasplints.com, and account.struxasplints.com (together, the "Site"), contact us, or purchase our products. By using the Site, you agree to the practices described here.

We are a US-based e-commerce business. We keep the information we collect to what we need to run our store, respond to your messages, and fulfill your orders.

Information we collect

Information you provide to us

• Contact form. When you use our contact form, we collect the information you submit, typically your name, email address, the reason you select, and the message you send. Our contact form is delivered by Web3Forms, a third-party form-processing service (see "Third-party processors" below).
• Clinic, bulk, and sample requests. If you use the request form on our For clinics page, we collect your name, work email, organization, and optional role, along with the products you're interested in, an approximate quantity, what the request is for, and anything you add in the optional message box, which may include a shipping address. This form is also delivered by Web3Forms. Please include only what we need to send samples or a quote, and no health or diagnostic details.
• Struxa Studio design submissions. If you submit a colorway from Struxa Studio, we collect your email address, the color values you chose, a link that reproduces the design, anything you write in the optional notes box, and whether you asked us to follow up when the feature is finished. This form is also delivered by Web3Forms. Please write about the design only, and do not include medical or diagnostic details. Submitting a design is not an order and nothing is charged.
• Direct communications. If you email or call us, we keep the contents of that correspondence and any details you choose to share, such as your order number.
• Beta and early-access signup. If you sign up for our beta or early-access program, we collect the details you submit, such as your name, email address, organization, role, region, and product interests.
• Your Struxa Fit. If you use the optional "Your Struxa Fit" tool, we store the fit preferences you enter: fit type, an optional finger measurement, dominant hand, preferred color, and any notes. This is stored in your browser (see "Cookies and local storage"), and if you sign in to a Struxa account it is also saved to your customer account, which is handled by Shopify (see "Third-party processors"). Please enter fit preferences only. Do not include medical or diagnostic details. You can clear it in the tool or ask us to delete it at hello@struxasplints.com.

Order and commerce information

Our online store and checkout are powered by Shopify. When you place an order, Shopify collects and processes the information needed to complete your purchase, such as your name, billing and shipping address, email, and order details. Payment card details are handled directly by Shopify and its payment providers; Struxa does not collect or store your full payment card numbers.

Account information

You can create an optional Struxa account to sign in, view your orders, and save your preferences. Accounts are provided and secured by Shopify through its customer accounts service. When you sign in, we and Shopify process your email address, sign-in status, and the account details you choose to save (such as your saved "Your Struxa Fit" preferences). Sign-in is handled by Shopify; we do not receive or store your account password.

Information collected automatically

• Usage and device data. Like most websites, our hosting and commerce providers (such as Cloudflare and Shopify) automatically receive standard technical information (for example your IP address, browser and device type, and referring pages) as a normal part of delivering and securing the Site and running the store.
• Analytics and advertising data. With your consent where required, we and our analytics and advertising partners use cookies and similar technologies (including Google Analytics and an advertising pixel/tag) to understand how the Site is used and to measure and deliver advertising. This may include your IP address, device and browser information, pages viewed, and interactions. See "Analytics and advertising" below.
• Cookies and local storage. See the section below for details.

Cookies and local storage

We use a small amount of browser storage to make the Site and store work:

• Shopify commerce storage. When you shop or add items to your cart, Shopify stores a cart or checkout identifier in your browser's localStorage and sets its own cookies. These are used to remember your cart, run the checkout, keep the store secure, and support commerce features.
• Account sign-in. If you sign in to a Struxa account, secure sign-in tokens are stored in your browser so you stay signed in. Signing out or clearing your browser storage removes them.
• Your Struxa Fit. If you use the "Your Struxa Fit" tool, your fit preferences are stored in your browser's localStorage so they're ready when you reorder. If you sign in, they are also saved to your Shopify customer account. You can clear them at any time with the tool's "Clear" button or your browser settings.
• Essential site function. Some storage is necessary for the Site to display and operate correctly.
• Analytics and advertising. We use analytics cookies (Google Analytics) to measure Site usage, and advertising cookies/pixels to measure and deliver ads and understand campaign performance. You can opt out on our Your Privacy Choices page, or as described in "Analytics and advertising" below.

You can control or clear cookies and local storage through your browser settings. Blocking or deleting them may affect cart, checkout, and other store features.

Analytics and advertising

We use Google Analytics, a web-analytics service provided by Google, to understand how visitors find and use the Site so we can improve it. Google Analytics uses cookies and similar technologies to collect information such as your IP address (which may be truncated or anonymized), device and browser type, the pages you view, and how you interact with the Site, and it generates aggregate reports for us. You can opt out of Google Analytics across websites using Google's opt-out browser add-on.

We also use one or more advertising pixels or tags (for example, the Meta (Facebook) pixel) to measure the performance of our marketing, understand which visits lead to purchases, and show you relevant Struxa ads on other sites and apps, sometimes called "interest-based," "targeted," or "cross-context behavioral" advertising. These technologies may share online identifiers (such as cookie or device IDs, or a hashed email address) with the advertising platform.

You can manage these technologies in several ways: adjust your browser or device settings; use industry opt-out tools such as the Digital Advertising Alliance and Network Advertising Initiative opt-outs; and use the ad and privacy settings offered by the relevant advertising platforms. We honor the Global Privacy Control (GPC) and other recognized opt-out preference signals as an opt-out of targeted advertising and the "sharing" of personal information where required by law. Apart from the Global Privacy Control and similar recognized opt-out signals, the Site does not respond to browser "Do Not Track" signals, for which no common industry standard has been adopted.

How we use your information

• To respond to your messages, questions, and support requests.
• To process, fulfill, and provide updates about your orders, returns, and exchanges.
• To operate, maintain, secure, and improve the Site and our store.
• To detect, prevent, and address fraud, abuse, or technical issues.
• To comply with our legal obligations and enforce our terms.

Marketing and communications

If you place an order or contact us, we will send you messages needed to run your order and answer you, for example, order confirmations, shipping updates, and replies to your questions. These are not marketing messages, and you cannot opt out of them while you have an active order.

If you choose to sign up for our email updates, we will send occasional news about products and offers. You can unsubscribe at any time using the link in any marketing email or by emailing hello@struxasplints.com. Our email is handled through Shopify (see "Third-party processors"). We do not currently send marketing text messages; if we introduce an SMS program in the future, we will obtain your consent first and give you a way to opt out.

Third-party processors

We rely on a small number of trusted third-party service providers to run our business. These providers process information on our behalf and under their own privacy terms:

• Web3Forms. Delivers submissions from our contact form, our newsletter and beta-program signup forms, the clinic, bulk, and sample request form on our For clinics page, and design submissions from Struxa Studio (the name, email, and the other details you enter, including anything you add in an optional message box) so they reach our team.
• Shopify. Powers our online store, cart, checkout, and payment processing, and handles the order and payment information needed to complete your purchase, as well as customer account data (including your saved "Your Struxa Fit" preferences) for any Struxa account you create.
• Judge.me. Powers the customer reviews shown on our product pages. When a review section loads, Judge.me receives standard technical information such as your IP address and request data. If you choose to write a review, Judge.me processes the name, email, rating, and review content you submit. Please write about the product only and do not include medical or diagnostic details.
• Cloudflare. We use Cloudflare to host and deliver the Site and to keep it secure and available. As part of serving pages and content, Cloudflare processes standard technical information such as your IP address and request data.
• Microsoft Bookings. Our clinics page embeds Microsoft Bookings so you can schedule a conversation with us. If you book a time, Microsoft processes the details you enter (such as your name, email, and chosen time) along with standard technical data to create the booking.
• Google Fonts. The Site's own typefaces are served from our servers, but the embedded Shopify buy button requests one typeface from Google Fonts. When your browser makes that request, Google receives your IP address and standard request information.
• Google Analytics. Provides website-analytics reporting so we can measure and improve how the Site is used. Google processes the technical and usage data described in "Analytics and advertising."
• Advertising platforms. We use advertising pixels or tags from advertising and social-media platforms to measure our marketing and deliver relevant ads. These platforms may receive online identifiers and activity data as described in "Analytics and advertising."

We encourage you to review the privacy policies of Web3Forms, Shopify, Google, Cloudflare, Microsoft, and our advertising partners to understand how they handle information. We may also use standard, reputable providers for related functions such as email delivery.

How we share information

We do not sell your personal information for money. However, our use of analytics and advertising cookies and pixels (see "Analytics and advertising") may be considered a "sale" or "sharing" of personal information for "targeted" or "cross-context behavioral" advertising under some US state privacy laws. You can opt out at any time on our Your Privacy Choices page. See "Your state privacy rights" and "Analytics and advertising," including our support for the Global Privacy Control. Apart from that, we share information only as needed to run our business, including:

• With the service providers described above who help us operate the Site, store, and communications.
• With analytics and advertising partners, through cookies and pixels, to measure and improve our Site and marketing and to deliver relevant advertising, as described in "Analytics and advertising."
• With shipping and fulfillment partners to deliver your order.
• When required by law, legal process, or to protect the rights, property, or safety of Struxa, our customers, or others.
• In connection with a business transfer, such as a merger, acquisition, or sale of assets, consistent with this Policy.

Data retention

We keep personal information only as long as we need it for the purposes described in this Policy, for example, to answer your inquiry, complete and support your order, meet legal, tax, and accounting requirements, and resolve disputes. When we no longer need it, we take reasonable steps to delete or de-identify it. Information held by Web3Forms and Shopify is retained according to their policies.

Your state privacy rights

Depending on where you live, you may have rights over your personal information under laws such as the California Consumer Privacy Act (CCPA/CPRA), the Colorado Privacy Act (CPA), and similar laws in other US states. Where those laws apply to you, you may have the right to:

• Know / access what personal information we collect, use, and disclose about you, and receive a copy of it.
• Delete personal information we have collected, subject to certain legal exceptions.
• Correct inaccurate personal information.
• Opt out of the "sale" or "sharing" of personal information and of "targeted advertising." While we do not sell your personal information for money, our use of advertising cookies and pixels may qualify as "sharing" or "targeted advertising" under some state laws; you can opt out using the tools in "Analytics and advertising," and we honor the Global Privacy Control as an opt-out signal.
• Non-discrimination for exercising any of these rights.

Colorado residents (CPA). In addition to the rights above, if we decline your request you have the right to appeal our decision. To appeal, reply to our response or email us at hello@struxasplints.com with "Privacy appeal" in the subject line. If your appeal is denied, you may contact the Colorado Attorney General.

To make a request, or if you have any privacy question, email us at hello@struxasplints.com. We will verify your identity and respond as required by applicable law, and you may use an authorized agent where the law permits. We do not knowingly process sensitive personal information for these purposes; please do not include health, diagnostic, or other sensitive details in your requests.

International visitors and data transfers

Struxa is based in the United States, and the Site is operated from the US. If you access the Site or place an order from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States (and in other countries where our service providers operate), where data-protection laws may differ from those in your country. Where we ship internationally, we and our providers process the information needed to fulfill and deliver your order and to meet customs and tax requirements.

EEA, UK, and Switzerland (GDPR / UK GDPR). If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following applies to the extent these laws cover our processing of your personal data:

• Controller. Struxa, Inc. is the controller of your personal data and can be reached at hello@struxasplints.com.
• Lawful bases. We process your personal data to perform our contract with you (for example, to fulfill an order); with your consent (for example, for non-essential analytics and advertising cookies and for marketing email, which you may withdraw at any time); to comply with our legal obligations; and for our legitimate interests in operating, securing, and improving our Site and business, balanced against your rights.
• Your rights. Subject to applicable law, you may request access to, correction, deletion, restriction, or portability of your personal data, object to certain processing, and withdraw consent. To exercise these rights, email us at hello@struxasplints.com. You also have the right to lodge a complaint with your local data-protection authority.
• International transfers. When we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards where required, such as the European Commission's Standard Contractual Clauses (with the UK Addendum where applicable) or another lawful transfer mechanism.
• Retention. We keep personal data only as long as needed for the purposes described in this Policy or as required by law.

Children's privacy

The Site and our products are intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will take appropriate steps to delete it.

Data security

We use reasonable administrative, technical, and organizational measures, and rely on providers such as Shopify that maintain their own safeguards, to help protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Site after changes take effect means you accept the updated Policy.

Contact us

If you have questions about this Policy or want to exercise your privacy rights, contact us at:

Struxa, Inc.
7717 W 6th Ave, Suite F, Lakewood, CO 80214
hello@struxasplints.com