The Future of EMF Protection Clothing
With the continuous rise of electronic and mobile devices in daily life, it is crucial not to overlook the potential harm they can pose to your health. Ignoring the risk is not an option.
Privacy policy
# Privacy Policy
**Last updated:** April 22, 2026
This Privacy Policy describes how Proteck'd EMF Apparel ("Proteck'd," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit https://proteckd.com, shop our store on third-party marketplaces such as Amazon, subscribe to our marketing, contact our customer support, or otherwise interact with us (collectively, the "Services").
Proteck'd EMF Apparel is operated by the sole proprietor of Proteck'd, based in Chicago, Illinois, United States. Our storefront is hosted by Shopify Inc. ("Shopify"). Our application infrastructure is hosted by Railway Corp. ("Railway") and Amazon Web Services, Inc. ("AWS").
By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services.
---
## 1. Personal Information We Collect
The personal information we collect depends on how you interact with us. We collect the categories below.
**Identity and contact information.** Your first and last name, billing address, shipping address, email address, and phone number. For orders placed on third-party marketplaces, we receive a subset of this information from the marketplace rather than directly from you.
**Account credentials.** Your Shopify customer account username, hashed password (we never store plaintext passwords), security questions, saved preferences, and loyalty or rewards balances.
**Order and transaction information.** The products you view, add to your cart, add to your wishlist, purchase, return, exchange, cancel, or review; order identifiers; shipping method and tracking numbers; discount codes applied; and associated totals, taxes, and refunds.
**Payment information.** Payment card or bank account information is collected and processed directly by our payment processor (Shopify Payments and, where applicable, PayPal, Shop Pay, Apple Pay, Google Pay, or Amazon Pay). We do not receive or store full payment card numbers. We receive only the payment result, the last four digits of the card, and the card brand for reconciliation and fraud prevention.
**Marketing communications information.** Email address, phone number, first name, last name, and, if you choose to provide it, your birthday, when you subscribe to our marketing list through our popup, footer, or checkout. We record your consent choices and the date and time of your subscription.
**Customer support and communication information.** The content of your messages to us, including chat transcripts with the Proteck'd AI Assistant on our website, phone call recordings or transcripts when you call our support line, text messages, and emails.
**Device and network information.** Your IP address, browser type, browser language, operating system, device identifiers, referring page, pages viewed, actions taken, and time stamps. This information is collected automatically when you visit our website or open our emails.
**Location information.** Country and state, inferred from your IP address or provided in your shipping address.
**Inferences.** Inferences we draw from the above, such as product category preferences or likelihood of interest in specific collections, used solely to improve your shopping experience.
We do not knowingly collect sensitive personal information such as government-issued identifiers (other than shipping addresses), precise geolocation, biometric data, or health information. If you volunteer such information to us (for example, mentioning a health reason in a support message), we use it only to respond to your specific inquiry.
---
## 2. Sources of Personal Information
We collect personal information from:
1. **You directly**, when you create an account, place an order, subscribe to marketing, contact us, leave a review, apply to our affiliate, wholesale, or professional discount programs, or interact with our AI Assistant.
2. **Automatically**, through cookies, pixels, tags, and similar technologies on our website and in our marketing emails.
3. **Service providers acting on our behalf**, such as Shopify (platform analytics), AWS (transactional email delivery), Railway (application hosting), Twilio Inc. (voice and SMS support), GoAffPro (affiliate program), and our contracted shipping carriers.
4. **Third-party marketplaces**, including Amazon.com, when you purchase a Proteck'd product listed on that marketplace. Section 7 of this Privacy Policy describes Amazon order data specifically.
5. **Advertising and analytics partners**, including Google LLC (Google Ads and Google Analytics), for measurement and attribution of our advertising campaigns.
---
## 3. How We Use Your Personal Information
We use your personal information for the purposes below. Where applicable law requires us to identify a legal basis, we rely on one or more of the following: performance of a contract, your consent, our legitimate interests in operating and improving our business, and compliance with legal obligations.
**Providing and fulfilling the Services.** Processing orders, arranging shipping, generating tracking, processing returns and exchanges, maintaining your account, saving your preferences, and providing customer support.
**Marketing and personalization.** Sending you promotional emails and, where you have opted in, promotional text messages about new products, restocks, sales, and educational content about electromagnetic field (EMF) shielding. Serving personalized advertisements on third-party platforms such as Google Search. Recommending products based on your browsing and purchase history.
**Analytics and improvement.** Measuring how visitors use our website, which products perform well, and how our advertising campaigns convert, so that we can improve the Services and our product line.
**Security, fraud prevention, and abuse detection.** Authenticating your account, identifying and blocking fraudulent transactions, detecting abuse of promotional codes, and investigating suspicious account activity.
**Legal and regulatory compliance.** Complying with United States federal and state tax recordkeeping, responding to valid legal process, enforcing our Terms of Service, and protecting the legal rights of Proteck'd, our customers, and the public.
---
## 4. How We Disclose Personal Information
We share personal information only as described below. We do not sell personal information for monetary payment. Certain data sharing for targeted advertising may constitute a "sale" or "share" under some United States state privacy laws; see Section 12 for your opt-out rights.
**Service providers.** We share personal information with service providers who act on our behalf under written data processing agreements. These include:
- **Shopify** for e-commerce platform, checkout, and analytics.
- **Shopify Payments, PayPal, Shop Pay, Apple Pay, Google Pay, and Amazon Pay** for payment processing.
- **Shopify Shipping, USPS, UPS, and FedEx** for shipping label generation and package delivery.
- **Amazon Web Services** for transactional and marketing email delivery via Amazon Simple Email Service, and for encrypted backup storage, encryption key management, and security logging.
- **Railway** for application hosting of our internal tools.
- **Twilio** for voice and text message customer support.
- **Google** for advertising and analytics.
- **GoAffPro** for affiliate program administration.
- **Our AI Assistant provider** for powering the Proteck'd AI chat on our website; chat transcripts are used solely to respond to your question and to improve the assistant's answers.
**Marketplaces.** When you place an order on Amazon.com for a Proteck'd product, we exchange order and fulfillment information with Amazon as described in Section 7.
**Shipping carriers.** We share your shipping address, name, phone number, and order contents with the contracted carrier solely to deliver your package.
**With your consent.** When you direct us to share information with a third party (for example, connecting a social login or accepting a referral).
**Business transfers.** In connection with a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar event, we may transfer personal information to the successor entity, which will be bound by this Privacy Policy until updated.
**Legal obligations.** We may disclose personal information to comply with a subpoena, search warrant, court order, or other lawful request, or to enforce our Terms of Service or protect our legal rights.
**Affiliates.** We may share personal information within our corporate group, which is currently limited to the sole-proprietor Proteck'd entity only.
---
## 5. Cookies and Similar Technologies
We use cookies, pixels, local storage, and similar technologies on our website. These fall into four categories:
1. **Strictly necessary** for the website to function (for example, cart persistence, checkout, login).
2. **Functional**, to remember your preferences such as currency and region.
3. **Analytics**, to understand how visitors use the website (Shopify Analytics, Google Analytics).
4. **Advertising**, to measure and personalize advertising campaigns (Google Ads).
You can manage cookies through your browser settings. Some browsers and devices support a Global Privacy Control (GPC) signal; we honor GPC as a request to opt out of sharing for targeted advertising. See Section 12.
---
## 6. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information. Specific controls include:
- **Encryption in transit.** All customer-facing connections use TLS 1.2 or higher.
- **Encryption at rest.** Customer data stored in our application databases is encrypted at rest with AES-256 by our infrastructure providers. Credentials and encrypted backups are held in AWS, with encryption keys managed in AWS Key Management Service with automatic annual rotation.
- **Access controls.** Access to production systems is limited to the sole proprietor, gated by multi-factor authentication on every account (AWS, Railway, GitHub, Shopify, and Amazon seller and developer consoles).
- **Payment data.** We do not store full payment card numbers; card data is handled by our PCI-DSS-compliant payment processors.
- **Monitoring.** Application logs and infrastructure events are shipped to AWS CloudWatch Logs and AWS CloudTrail with automated alerts on suspicious activity.
- **Vulnerability management.** Our code repositories use GitHub Dependabot, CodeQL static analysis, and secret scanning with push protection. Critical vulnerabilities are remediated within 72 hours of disclosure.
No system is perfectly secure, and we cannot guarantee absolute security of your personal information. If we become aware of a security incident affecting your personal information, we will notify you consistent with applicable law.
---
## 7. Amazon Marketplace Orders
Proteck'd sells certain products on Amazon.com. When you place an order for a Proteck'd product on Amazon, we receive order information from Amazon through Amazon's Selling Partner API ("Amazon Order Data") so that we can fulfill your order. We handle Amazon Order Data in accordance with Amazon's Acceptable Use Policy and Data Protection Policy.
**Collection.** From Amazon we receive your name, shipping address, order contents, order identifiers, and, where Amazon provides it, your buyer-provided phone number and your buyer-anonymized email address. We do not receive your payment card or bank details from Amazon; Amazon processes payment directly.
**Processing.** We process Amazon Order Data solely to fulfill the order you placed on Amazon. This includes creating a fulfillment record in our internal systems, generating shipping labels through our contracted carriers, returning fulfillment and tracking information to Amazon, and responding to customer support inquiries related to the specific order.
**Storage.** Amazon Order Data is stored in encrypted databases operated on our behalf by Railway (operational data) and AWS (credentials and encrypted backups). All storage is encrypted at rest using AES-256. Encryption keys are managed in AWS Key Management Service with automatic annual rotation. Encrypted backups are replicated to a geographically separated AWS region.
**Use.** Amazon Order Data is used only for order fulfillment, shipping label generation, return and refund processing, customer support for the specific order, and tax recordkeeping. We do not use Amazon Order Data for marketing, advertising, profiling, lookalike audiences, or any purpose other than fulfilling and supporting the order you placed on Amazon.
**Sharing.** We share Amazon Order Data only with: (a) the contracted shipping carrier (such as USPS, UPS, or FedEx, including via Shopify Shipping) for the specific shipment; (b) Amazon, when we return fulfillment and tracking information through the Selling Partner API; and (c) Railway and AWS strictly for the purpose of hosting, encrypting, and backing up the data. We do not sell Amazon Order Data. We do not share Amazon Order Data with marketing partners, advertising partners, data brokers, or any third party other than the ones listed in this paragraph.
**Disposal.** Personally identifiable fields of Amazon Order Data (name, shipping address, phone number, email) are automatically redacted from our operational database 30 days after the final shipment date of the order. The non-identifying financial skeleton of the order (order identifier, SKUs, quantities, price, tax, marketplace) is retained for 7 years to meet United States tax recordkeeping requirements. Encrypted backups containing Amazon Order Data are retained for 30 days and are then automatically deleted under a scheduled lifecycle policy. You may request earlier deletion by contacting us at the address in Section 15.
---
## 8. Data Retention
We retain personal information only as long as necessary for the purposes described in this Privacy Policy, after which it is deleted or anonymized. Specific retention periods:
- **Order records (direct Shopify orders).** Seven years from order date, for tax and accounting purposes. Shipping-address and buyer-contact fields are retained in full for 90 days after the order ships and then redacted to the minimum required by applicable tax law.
- **Amazon Order Data.** See Section 7.
- **Customer accounts.** For as long as your account is active. If your account is inactive for 36 consecutive months, we may delete or anonymize it after giving you notice.
- **Marketing subscribers.** Until you unsubscribe, plus up to 18 months after your last engagement (open, click, or purchase) for reactivation campaigns, after which you are automatically removed from the list.
- **Customer support records.** 24 months from the date of the last interaction.
- **Website analytics.** Aggregated analytics are retained indefinitely; individual session data is retained up to 14 months (Google Analytics default) or per Shopify's default analytics retention.
- **Advertising cookies and identifiers.** Per the expiry set in the cookie itself, typically 30 days to 24 months.
- **Backups.** Encrypted database backups are retained for 30 days under a scheduled lifecycle policy.
- **Legal hold.** If a legal proceeding requires retention longer than the periods above, we retain the relevant data until the hold is lifted.
---
## 9. International Data Transfers
Proteck'd is based in the United States. Our service providers may process your personal information in the United States, the European Union, the United Kingdom, Canada, or elsewhere. Where we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland, we rely on European Commission Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent lawful transfer mechanisms, unless the destination country has received an adequacy decision.
---
## 10. Children's Privacy
The Services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. As of the last-updated date of this Privacy Policy, we have no actual knowledge of selling or sharing the personal information of individuals under 16. If you believe a child has provided us with personal information, please contact us at the address in Section 15 so that we can delete it.
---
## 11. Third-Party Websites
The Services may contain links to websites and online platforms operated by third parties, including our social media pages on Instagram, Facebook, YouTube, X, Pinterest, TikTok, Tumblr, and LinkedIn. We are not responsible for the privacy or security practices of those third parties. Please review their privacy policies before providing personal information.
---
## 12. Your Rights and Choices
Depending on where you live, you have some or all of the following rights with respect to your personal information. These rights are not absolute and may be subject to exceptions under applicable law.
**Right to know and access.** You may request confirmation of whether we process personal information about you, a copy of that information, and information about how we use and share it.
**Right to delete.** You may request that we delete personal information we maintain about you, subject to legal exceptions (for example, tax recordkeeping).
**Right to correct.** You may request that we correct inaccurate personal information.
**Right to portability.** You may request a copy of your personal information in a portable, machine-readable format, where technically feasible.
**Right to opt out of sale, sharing, and targeted advertising.** You may opt out of the sale or sharing of your personal information and of processing for targeted advertising. You can do this by:
- Using the "Do not sell or share my personal information" link in our website footer.
- Enabling the Global Privacy Control signal in your browser, which we honor as an opt-out request.
- Contacting us at the address in Section 15.
**Right to limit use of sensitive personal information.** We do not use sensitive personal information beyond what is necessary to provide the Services.
**Right to non-discrimination.** We will not discriminate against you for exercising any of these rights.
**For UK and European Economic Area residents.** In addition to the rights above, you have the right to object to processing, to restrict processing, to withdraw consent (without affecting the lawfulness of processing before withdrawal), and to lodge a complaint with your local data protection supervisory authority. For the European Economic Area, a list of authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en. For the United Kingdom, the Information Commissioner's Office at https://ico.org.uk.
**How to exercise your rights.** Contact us at the address in Section 15. We will verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf; we will require written proof of authorization. We will respond within the timeframe required by applicable law (typically 45 days in the United States and 30 days in the United Kingdom and European Economic Area).
**Appeals.** If we decline your request, you may appeal by replying to our decision email or contacting us at the address in Section 15. You may also lodge a complaint with your state attorney general or data protection authority.
---
## 13. Marketing Communications
**Email.** You may unsubscribe at any time using the unsubscribe link in any of our marketing emails. Transactional emails (order confirmations, shipping notifications, account notices) are not promotional and will continue to be sent as long as you have an active account or order.
**Text messages.** You may opt out of promotional text messages by replying STOP to any message. Message and data rates may apply. You may resubscribe by replying START.
**Advertising.** You may opt out of personalized advertising as described in Section 12.
---
## 14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, our service providers, or applicable law. We will post the revised policy on this page and update the "Last updated" date at the top. For material changes, we will provide additional notice (for example, a banner on our website or an email to subscribers) as required by applicable law.
---
## 15. Contact Us
For privacy questions, rights requests, or complaints:
**Proteck'd EMF Apparel**
Checkout our live chat bot
or
Email: support@proteckd.com
For the purposes of applicable data protection law (including the EU and UK General Data Protection Regulations and United States state privacy laws), Proteck'd EMF Apparel is the data controller of personal information collected through the Services, except where Shopify acts as an independent controller under its own Consumer Privacy Policy (https://www.shopify.com/legal/privacy/app-users).
---
## 16. Relationship with Shopify
Our Services are hosted by Shopify. Information you submit through the Services is transmitted to Shopify to enable the platform to operate. Shopify may also use certain information about your interactions with our store, along with information from other Shopify-powered stores, to provide enhanced platform features. In those cases Shopify acts as an independent controller of your personal information and is responsible for responding to requests related to its own processing. To learn more, see the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/app-users and the Shopify Privacy Portal at https://privacy.shopify.com.
