PRIVACY POLICY

Effective date: 09/16/2026 Last updated: 09/16/2026

This Privacy Policy describes how ProSpec Gloves LLC ("ProSpec," "we," "us," or "our") collects, uses, and discloses your personal information when you visit www.prospecgloves.com, use our glove customizer at customize.prospecgloves.com, make a purchase, or otherwise communicate with us (together, the "Services"). By using the Services, you agree to the practices described here.

THE SHORT VERSION

• We collect what we need to build your glove and run our store: your contact and order details, the design you create, anything you upload, and usage data.
• We never see or store your payment card number. Checkout and payment are processed by Shopify and its payment partners.
• We use Meta (Facebook and Instagram) and Google advertising and analytics tools. This means some pseudonymous identifiers and, if you give us your email, a hashed (scrambled) version of it are shared with Meta to measure our ads and show you relevant ones. Under California law this may count as "sharing." You can opt out at any time — see "Your choices about advertising."
• We do not sell your personal information to data brokers or anyone else.
• Custom designs and uploaded logos are used to manufacture your product — that's why we collect them.
• You can ask us to access, correct, or delete your information, or to opt out of sharing, at support@prospecgloves.com.

INFORMATION WE COLLECT

Information you give us:

• Contact details — name, email address, phone number, and shipping/billing address, collected when you place an order, create an account, or contact us.
• Order information — the products you buy, order totals, discount codes, and payment confirmation (not your card number — see "Payments" below).
• Design and customization data — when you use our glove customizer: your glove configuration (model, leather, colors, web, stitching, sizing, age group), personalization text you enter (such as a player's name, jersey number, or message), font and placement choices, and preview images of your design. If you save a design, we also store optional contact details you choose to provide with it.
• Uploaded content — logo or artwork files you upload for embroidery or decoration. Your uploads are governed by our Embroidery & Custom Design Policy.
• Communications — messages you send us by email, chat, contact forms, or social media.
• Marketing signup — your email address, if you subscribe to our newsletter on the store or opt in to marketing email when saving a design in the customizer.

Information collected automatically:

• Store usage data — our store runs on Shopify, which uses cookies and similar technologies to operate the site, keep your cart, and measure store performance. See "Cookies and similar technologies" below.
• Customizer usage events — inside the glove customizer we collect first-party usage events (steps completed, selections changed, designs saved, items added to cart) together with a random visitor ID, a random session ID, your device type, screen size, browser user-agent, and referring page. We do not store your IP address with these events — it is one-way hashed with a salt that changes daily, so it cannot be used to identify you across days.
• Visit source and attribution data — when you arrive at our store or customizer, we record where the visit came from: the referring site, the landing page, campaign parameters in the link (for example utm_ tags), advertising click identifiers (for example Meta's fbclid or Google's gclid), team or partner link codes, and the Meta and Google cookie identifiers described under "Cookies." This is stored with your visitor ID so we can understand which ads, partners, and channels lead to designs and orders.
• Advertising and analytics signals — the Meta Pixel and Google Analytics tags on our store and customizer record page views, products and designs viewed, items added to cart, checkouts started, and purchases, with pseudonymous identifiers. See "Advertising partners" below.
• Security — our forms are protected by hCaptcha, which may process device information to distinguish humans from bots.

Information from third parties:

We receive information from Shopify (our commerce platform) and its payment processors — for example, order and payment confirmations — from Meta and Google in the form of aggregated advertising and analytics reports, and from service providers that support our store.

HOW WE USE YOUR INFORMATION

• To make and deliver your products — including transmitting your design specifications, personalization text, and uploaded artwork to our manufacturing partner, and your delivery details to shipping carriers.
• To run your account and orders — confirmations, production and shipping updates, receipts, warranty claims, and customer support.
• To operate and improve the Services — analytics on how the store and customizer are used, where visitors drop off, and which products and designs are popular.
• To measure and improve our advertising — understanding which ads, campaigns, partners, and team links lead to designs, carts, and orders, and reporting on that in aggregate.
• To show you relevant ads — for example, reminding you on Facebook or Instagram about a glove you designed but did not order. See "Advertising partners" and "Your choices about advertising."
• Marketing email — if you subscribe or opt in, we send email about products and offers; you can unsubscribe at any time using the link in any marketing email.
• Security and fraud prevention, and to comply with legal obligations.

DESIGN SAVING AND SHARE LINKS

If you save a design, it is stored with a design code (for example, PS-XXXXXXXX). Anyone who has a design's link or code can view that design and create their own copy of it. Don't include information in a design (personalization text, title, description) that you wouldn't want visible to someone you share the link with. Designs you attach to an order are kept as part of the order record so we can manufacture, support, and honor warranty claims on your glove.

If you choose to enter your email when saving a design and agree to receive marketing email, we store your email with your consent record. We may also share a hashed version of it with Meta so that Meta can match it to your Meta account for ad measurement and targeting. Meta cannot read the original address from the hash. We do not offer email signup on designs for youth age groups.

PAYMENTS

All payments are processed by Shopify Payments and the payment methods we display at checkout (including Visa, Mastercard, American Express, Discover, Diners Club, Apple Pay, Google Pay, PayPal, and Shop Pay). Your full card number, expiration date, and security code are collected directly by these payment processors and never touch our servers. We receive only payment confirmation, order totals, and (for some methods) the card brand and last four digits.

ADVERTISING PARTNERS

We advertise on Meta platforms (Facebook and Instagram) and use Meta's Business Tools — the Meta Pixel and the Conversions API — on our store and customizer. Through these tools, Meta receives:

• pseudonymous identifiers: Meta's own browser cookie identifiers (_fbp and _fbc), the click identifier from a Meta ad, and a hashed version of our random visitor ID;
• event data: page views, products and designs viewed (including the design code and glove model), items added to cart, checkouts started, and purchases, with the order value;
• a hashed version of your email address, if you have given it to us with marketing consent or at checkout, so Meta can match events to your Meta account;
• technical data such as your IP address and browser user-agent, when events are sent from our servers.

Meta uses this data to measure the results of our ads, to build audiences (for example, people who designed a glove but did not order), and to show you ads for our products on its platforms. Meta processes this data under its own terms and privacy policy, and Meta may also use it for its own purposes as described there. Learn more at https://www.facebook.com/privacy/policy and manage your ad preferences at https://www.facebook.com/adpreferences.

We also use Google Analytics (via Shopify's pixel manager) to understand site traffic and shopping behavior. If we run Google advertising, Google receives similar event data for measurement.

ARTIFICIAL INTELLIGENCE

We do not currently use artificial intelligence or automated decision-making to process your personal information, evaluate your uploaded designs, or make decisions that affect you. Design reviews (for example, checking uploaded logos against our content policy) are performed by people. If we introduce AI-assisted features — such as design assistance or automated artwork screening — we will update this policy to describe them before they apply to your data.

HOW WE SHARE PERSONAL INFORMATION

We share personal information only as described here:

• Shopify (our commerce platform) receives account, cart, order, and payment-confirmation data to provide store hosting, checkout, and order management.
• Payment processors and wallets collect your payment details directly to process your payment.
• Our manufacturing partners receive design specifications, personalization text, uploaded artwork, and order identifiers to build your glove. Production documents sent to manufacturers do not include your contact details.
• Shipping carriers receive your name, shipping address, and phone number for delivery.
• Cloudflare provides secure cloud storage and delivery of uploaded artwork and design and order files.
• Email providers (Resend, with Google as a fallback) transmit our transactional emails, which include your email address and order details.
• Meta (Facebook and Instagram) receives the advertising and measurement data described under "Advertising partners."
• Google receives pseudonymous site-usage data for analytics, and advertising measurement data if we run Google ads.
• hCaptcha receives device and interaction signals for bot and abuse protection.
• Team and partner programs — if you reach us through a team's or partner's link, we record that code so we can credit the team or partner for resulting orders. We share with them aggregate results and order-level commission information, not your contact details, unless you have separately agreed.
• Professional advisers and authorities, as required for legal compliance, protecting rights, or business transfers.

We do not sell your personal information for money, and we do not share it with data brokers. Our disclosures to Meta and Google for advertising may be considered "sharing" for cross-context behavioral advertising under California law; you can opt out as described below.

YOUR CHOICES ABOUT ADVERTISING

• Global Privacy Control: our store and customizer recognize the GPC browser signal. If your browser sends GPC, we treat it as a valid opt-out of sharing and targeted advertising for that browser or device, and our advertising tags do not load.
• Opt-out request: email support@prospecgloves.com with the subject "Do Not Share" and we will stop sharing your information for targeted advertising.
• Meta settings: you can control how Meta uses data from businesses like us in your Facebook or Instagram settings under Ad preferences and Your activity off Meta technologies.
• Marketing email: unsubscribe using the link in any marketing email.

Opting out of sharing does not stop us from processing your order or from using first-party analytics to run the Services.

COOKIES AND SIMILAR TECHNOLOGIES

Our store uses cookies operated by Shopify to power core functions (cart, login, checkout), measure performance, and support the features above. For details on Shopify's cookies, see https://www.shopify.com/legal/cookies.

We also set or read:

• a first-party visitor identifier (ps_vid) on prospecgloves.com and its subdomains, kept for up to 365 days, which lets us recognize the same browser across the store and the customizer;
• a first-party session identifier (ps_sid) in the customizer, kept for 30 minutes of inactivity;
• Meta Pixel cookies (_fbp and _fbc), set by Meta's tag on our domain, which Meta uses for ad measurement and attribution;
• Google Analytics cookies (_ga and related), set by Google's tag, for analytics;
• browser local storage in the customizer, so your in-progress design and saved designs stay associated with your browser.

You can clear or block cookies in your browser settings. Blocking cookies may affect cart, login, and design-saving features.

DATA RETENTION

• Orders and order documents: retained as commercial records for as long as needed for warranty service, accounting, and legal obligations.
• Saved designs: until you delete them or ask us to; designs tied to orders are kept with the order.
• Uploaded artwork: for as long as needed to manufacture and support your order and to honor reorders.
• Customizer raw usage events: 90 days, then automatically deleted (aggregates retained).
• Visit source and attribution data: 13 months from the visit, then deleted (aggregates retained).
• Marketing consent records: for as long as you remain subscribed, plus the period we are required to keep proof of consent.
• Support communications: as long as needed to resolve your matter and for our records.

YOUR RIGHTS

Depending on where you live, you may have rights to access/know, delete, correct, and port your personal information, to opt out of the sale or sharing of your personal information, to restrict or object to processing, to withdraw consent, and to appeal a refusal. We do not discriminate against you for exercising your rights. To exercise any right, email support@prospecgloves.com with the subject "Privacy Request." We may need to verify your identity (normally by email verification). Authorized agents may submit requests with proof of authorization.

CALIFORNIA RESIDENTS (CCPA/CPRA)

In the last 12 months we collected these categories of personal information: identifiers (name, email, phone, address, online identifiers and cookie IDs); commercial information (orders, designs); internet or other network activity (usage, attribution, and advertising data as described above); geolocation inferred from IP address (coarse, city level, through our advertising partners); and audio, visual, or similar content you upload (artwork). We collect them for the purposes described in "How we use your information," and disclose them to the service providers listed in "How we share personal information."

We do not sell personal information. We share identifiers and internet activity information with Meta, and may share them with Google, for cross-context behavioral advertising. You have the right to opt out of that sharing; see "Your choices about advertising." We honor Global Privacy Control as an opt-out. We do not use or disclose sensitive personal information for purposes requiring a right to limit. We do not knowingly share the personal information of consumers under 16. California residents may exercise the rights above, including through an authorized agent, and will not be discriminated against for doing so.

EUROPEAN ECONOMIC AREA / UNITED KINGDOM (GDPR)

Our legal bases are: contract (making and delivering your order, operating your account), legitimate interests (site security, first-party analytics, improving the Services, measuring our advertising), consent (marketing emails, and advertising cookies and tags where consent is required), and legal obligation (tax and commercial records). We are located in the United States and process data there; where we transfer personal data out of the EEA or UK we rely on recognized safeguards such as the European Commission's Standard Contractual Clauses. You may lodge a complaint with your local data protection authority.

VIRGINIA AND OTHER U.S. STATE LAWS

Residents of Virginia, Colorado, Connecticut, and other states with consumer privacy laws may have similar rights of access, correction, deletion, portability, opting out of targeted advertising, and appeal — use the contact above. Global Privacy Control is honored as an opt-out of targeted advertising in every state that recognizes it.

CHILDREN

Our products include youth gloves, but the Services are intended for adults. We do not knowingly collect personal information from children under 13, purchases must be made by an adult, and we do not offer marketing email signup on designs for youth age groups. If you believe a child has provided us personal information, contact us and we will delete it. We do not knowingly sell or share the personal information of anyone under 16.

SECURITY

We use administrative, technical, and physical safeguards appropriate to the data we hold — including encrypted connections (HTTPS), one-way hashing of IP addresses in analytics, hashing of email addresses before they are shared with advertising partners, encrypted storage of marketing consent records, encrypted database backups, and access controls. No system is perfectly secure; please use strong passwords and contact us immediately at support@prospecgloves.com if you suspect a problem with your account.

DELETING YOUR DATA / SHOPIFY

When we receive a verified deletion request (directly or through Shopify's privacy tools), we redact your identity from order records, designs, consent records, and attribution data, subject to records we must keep by law. Shopify processes your information as described in its own privacy policy when you use Shopify-operated features (checkout, Shop app, Shop Pay).

CHANGES TO THIS POLICY

We may update this policy from time to time. We will post the revised version here and update the "Last updated" date; material changes will be highlighted on this page.

CONTACT

ProSpec Gloves LLC 1242 Reston Ave, Herndon, VA 20170, United States support@prospecgloves.com (703) 231-6314