YOUR DATA

Privacy Policy

The short version

We collect only what we need to take your order and deliver it. We do not sell your personal information and we do not share it for advertising. We never see or store your full card number. You can ask us to see, correct or delete your information at any time, and you can unsubscribe from our emails with one click. The full policy is below.

Last updated: October 27, 2026

This Privacy Policy explains how SneekUp Retail (“SneekUp”, “we”, “us”) collects, uses and shares personal information when you visit sneekup.com, place an order, create an account, join our email list or contact us. By using the site you agree to this policy.

1. Information we collect

Information you give us:

Your name, email address, phone number, and billing and shipping addresses when you place an order or create an account.
What you ordered, your order history, and any messages you send us (for example a question or a return request).
Your email address if you join our email list, for example to claim a welcome offer.
Your account login. Passwords are stored in scrambled (hashed) form.

Payment information. You enter your card or other payment details directly into a secure form run by our payment processor, Stripe. We never see or store your full card number. We receive limited details back, such as the card brand, the last four digits, the billing ZIP code and whether the payment succeeded.

Information collected automatically:

Device and browser type, IP address (which gives us an approximate location such as your city or state), the pages you view, and the date and time of your visit.
Cookies and similar technologies that keep your cart and login working and help protect the site from fraud and abuse (see “Cookies” below).

We do not knowingly collect Social Security numbers, health information or other sensitive categories of data, and you should not send them to us.

2. Categories of personal information (California notice at collection)

In the last 12 months we have collected the following categories of personal information, as listed in the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Category	Examples	Why we use it	Who receives it
Identifiers	Name, email, phone, shipping and billing address, IP address, account login	Process and deliver orders, run your account, answer questions, prevent fraud	Payment processor, fulfilment partners and carriers (name, address, phone), hosting and email providers
Customer records and commercial information	Items ordered, order totals, order history, return requests	Fulfil orders, handle returns and refunds, keep tax and accounting records	Payment processor, fulfilment partners, accountants and advisers
Internet or network activity	Pages viewed, browser and device type, cookie identifiers	Keep the site working and secure, remember your cart	Hosting provider and security tools
Approximate location	City or state derived from your IP address	Security and fraud prevention, tax where required	Hosting provider and payment processor
Sensitive personal information	Account login (username and password); payment card details entered into Stripe’s form	Sign you in; take payment. We use it only for these purposes	Stripe (card details); we do not store card numbers

We keep each category only as long as described in “How long we keep information” below. We have not sold or shared personal information (as those terms are defined in the CCPA) in the last 12 months.

3. How we use information

To process payments, ship orders, send order and shipping confirmations, and let you track your parcel.
To provide customer support and handle returns, refunds and warranty questions.
To run your account and keep the site secure, including detecting and preventing fraud, abuse and unauthorized access.
To send you promotional emails about our products and offers, if you signed up for them. You can opt out at any time.
To meet legal obligations such as tax, accounting and consumer-protection laws, and to establish or defend legal claims.
To improve the site, for example by fixing errors we see in server logs.

We do not make decisions about you using automated profiling that has legal or similarly significant effects.

4. Who we share information with

We share personal information only with companies that help us run the store, and only as needed for the job they do:

Payment processing: Stripe, Inc. processes your payment and checks it for fraud. If you choose a buy-now-pay-later option such as Klarna or Affirm, that provider also receives the details it needs to offer you credit and is governed by its own privacy policy.
Order fulfilment and shipping: our fulfilment partner CJ Dropshipping and the warehouses and carriers it uses receive your name, shipping address and phone number (and email where a carrier requires it) so they can pick, pack and deliver your order. Some of these companies operate outside the United States.
Technology providers: web hosting and infrastructure (Oracle Cloud Infrastructure), email delivery, and security services.
Professional advisers: accountants, lawyers and insurers, when needed.
Legal and safety: authorities, courts or other parties when the law requires it, or to protect our rights, our customers or others.
Business changes: a buyer or successor if SneekUp is sold or merged, with the same protections for your information.

These companies may use your information only to provide services to us, not for their own marketing.

5. We do not sell or share your information for advertising

We do not sell your personal information for money, and we do not share it with third parties for cross-context behavioral (targeted) advertising. We do not currently use advertising pixels or third-party advertising cookies on the site. If that ever changes, we will update this policy first and give you a way to opt out.

6. Cookies

Cookies are small files stored by your browser. We use them to:

keep items in your cart, keep you signed in and complete checkout (strictly necessary);
remember simple choices such as your language or country (preferences);
help us and Stripe detect fraud and keep the site secure.

You can block or delete cookies in your browser settings, but the cart, checkout and sign-in will not work without them. We honor the Global Privacy Control (GPC) browser signal as a request to opt out of the sale or sharing of personal information. Because we do not sell or share it, there is nothing further to switch off, but we treat the signal as your request. Websites have no common standard for “Do Not Track” signals, so we do not respond to them separately.

7. Your privacy rights

Depending on where you live, you may have some or all of these rights:

Know and access: ask what personal information we hold about you and get a copy (in a portable format where required).
Correct: ask us to fix inaccurate information.
Delete: ask us to delete your personal information. We may keep what we must by law, such as order and tax records.
Opt out: of the sale or sharing of your personal information, targeted advertising and certain profiling. We do none of these today.
Limit use of sensitive information: we use sensitive information only to sign you in and take payment, so no further limit is needed.
Non-discrimination: we will not treat you worse or charge you different prices because you use these rights.

California. California residents have the rights above under the CCPA/CPRA. Under California’s “Shine the Light” law (Civil Code Section 1798.83) you may also ask which personal information we disclosed to third parties for their direct marketing; we do not make such disclosures.

Other states. Residents of other states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, have similar rights, and we extend them to you as the law requires. Nevada residents may ask us not to sell their information; we do not sell it.

How to make a request. Email us at privacy@sneekup.com with “Privacy request” in the subject, tell us what you would like, and include the name and email you used with us. To protect your account we will ask you to confirm your identity, for example by replying from the email address on the order or answering a question about a recent order. We confirm that we received your request within 10 business days and respond within 45 days. If we need more time we may extend that once by up to 45 more days and will tell you why.

Authorized agents. You may use an authorized agent to make a request for you. We may ask for your written permission and verify your identity directly.

Appeals. If we deny your request and your state gives you the right to appeal, reply to our response with “Appeal” in the subject. We will answer in writing within the time your state’s law requires (generally 45 to 60 days) and explain the reasons for our decision. If you are still unhappy you can contact your state attorney general.

8. Marketing emails and text messages

If you join our email list (for example to claim a welcome offer) we will send you promotional emails. Every one includes an unsubscribe link, and we process unsubscribes promptly and always within 10 business days, as the CAN-SPAM Act requires. Order and shipping emails are not marketing and you will still receive them. We do not send marketing text messages. If we ever do, we will first ask for your separate written consent, as the Telephone Consumer Protection Act requires.

9. How long we keep information

Order records (including contact and address details tied to an order): as long as needed for tax, accounting, warranty and legal purposes, which is commonly up to seven years.
Account information: until you ask us to delete your account, unless we must keep some of it by law.
Email list: until you unsubscribe.
Server logs and security data: a limited time, typically up to a few months.

When we no longer need information, we delete it or remove what identifies you.

10. Security

We protect the site with encrypted connections (HTTPS), restrict access to personal information to the people and providers who need it, and leave payment card handling to Stripe, which is certified to the PCI DSS standard. No website or system is completely secure, so we cannot guarantee absolute security. If a breach affects your information we will tell you and the authorities as the law requires.

11. Children

The site is for adults and is not directed to children under 13, and we do not knowingly collect personal information from children under 16. We do not sell the personal information of anyone under 16. If you believe a child has given us personal information, email us and we will delete it.

12. Processing outside the United States

Because our fulfilment partners and some of their warehouses are outside the United States, your name, shipping address and phone number may be processed in other countries so your order can be shipped. We require our partners to use it only to fulfil your order.

13. Links to other sites

The site may link to other websites, such as a carrier’s tracking page. Their privacy practices are their own, so please read their policies.

14. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. If we make a material change, we will post a notice on the site or email you before the change takes effect where the law requires it.

15. Contact us

SneekUp Retail
Privacy requests: privacy@sneekup.com
General questions: hello@sneekup.com