Privacy Policy
At GearOrb, protecting your personal data and upholding absolute transparency regarding how your information is gathered, secured, and processed is fundamental to our engineering ethics.
Effective Date: September 20261. Information We Collect
When you interact with GearOrb, we collect only the minimal necessary data required to fulfill your physical gear deliveries and manage commercial B2B relationships:
- Direct Fulfillment Data: Full name, shipping address, billing address, contact phone number, and personal or commercial email address.
- Transaction Identifiers: Payment confirmation tokens, order reference numbers, and delivery receipt logs. We never store or process raw credit card numbers or CVV codes on our servers.
- Technical & Session Identifiers: IP address, device specifications, browser type, and cookie identifiers used exclusively for fraud detection and maintaining active shopping cart sessions.
2. How We Utilize Your Data
Your information is processed strictly within lawful commercial parameters:
- Routing order tracking, dispatch notices, and airway bill updates through international postal carriers.
- Verifying payments, screening against chargeback fraud, and generating invoices.
- Providing personal 1-on-1 customer service and processing warranty or RMA claims.
- Executing mutual non-disclosure and commercial agreements for enterprise wholesale and OEM/ODM clients.
3. Third-Party Disclosures & Global Logistics Partners
We do not sell, rent, lease, or monetize your personal information to third-party marketing brokers. Data is shared solely with verified service partners essential for business fulfillment:
- Global Logistics Couriers: Air express partners and regional postal services (USPS, FedEx, DHL, Royal Mail) solely to complete physical handovers.
- Secure Payment Processors: Compliant financial gateways (Stripe, PayPal, Shopify Payments) that handle encrypted PCI-DSS transactions.
- Regulatory Authorities: Only when compelled by formal legal subpoenas, customs declarations, or statutory law enforcement mandates.
4. Your Rights Under GDPR (EU/EEA & UK)
European Resident Protections
Under the General Data Protection Regulation (GDPR), European and UK residents maintain enforceable rights regarding their personal records:
- Right to Access: You may request an export of all personal data held concerning your identity and order records.
- Right to Rectification: You may correct inaccurate or incomplete delivery information at any time.
- Right to Erasure ("Right to Be Forgotten"): You may request the permanent deletion of your customer profile, provided all statutory tax retention and active delivery mandates are fulfilled.
5. California Consumer Privacy Rights (CCPA / CPRA)
For residents of California:
- Notice of Non-Sale: GearOrb has not sold, nor will it ever sell or share, your personal information for cross-context behavioral advertising.
- Non-Discrimination: Exercising your privacy rights will never result in price discrimination, degraded service levels, or denial of product warranty.
6. Data Retention & Cryptographic Security
We implement industry-standard 256-bit SSL encryption across all browsing sessions and checkout flows. Data is retained only for as long as necessary to provide warranty service, comply with international tax auditing records, or until you formally submit a data removal request.
Exercise Your Privacy Rights
To request data deletion, review your stored order records, or file a privacy inquiry, contact our Data Protection Officer directly at yang@gearorb.com.