Privacy Policy
Effective Date: 5 June 2025 | Last Updated: 20 June 2025
Applies to: Visitors and customers of loptok.com located in, or shipping to, the United States
We do not offer sales or shipping outside the United States.
1. Who We Are
Legal Name | Loptok LLC |
Business Address | 2721 Ulric St, San Diego, CA 92111, USA |
Phone | +1 (601) 258-3898 |
Email (General) | [email protected] |
Email (Privacy) | [email protected] |
Support Hours | Mon–Fri 9 AM–6 PM |
2. Scope
This Privacy Policy explains how we collect, use, share, and safeguard personal information when you browse or purchase clothing and accessories on loptok.com.
We sell and ship only within the United States; therefore, U.S. federal and state privacy laws (e.g., CCPA, Nevada SB-220) primarily govern our practices.
Users outside the U.S. may browse the site, but purchasing is disabled and only minimal analytics data is collected.
3. Information We Collect
Category | Details & Examples | Source |
---|---|---|
Identifiers | Full name, postal address, email, phone, IP address | Provided by you / collected automatically |
Commercial Data | Products viewed, items in cart, purchase history, size & style preferences | Your activity |
Payment Data | Card brand & last 4 digits (processed via Stripe/PayPal – we never store full numbers) | Payment processor |
Device & Usage | Browser type, device OS, referral URL, session length, cookies | Automatic |
Communications | Emails, chat transcripts, support tickets, product reviews | Provided by you |
Marketing Metrics | Email open & click-through rates, ad interactions, birthday month | Provided by you / analytics |
We do not collect: Social Security numbers, driver’s-license numbers, precise geolocation, biometric data, or sensitive health information.
4. How We Use Your Information
Purpose | Legal / Business Basis |
---|---|
Order processing & delivery | Contractual necessity |
Customer support & returns | Contractual necessity |
Fraud detection & security | Legitimate interest / legal obligation |
Personalised product recommendations | Legitimate interest; you may opt-out via cookies |
Email, SMS, and in-app marketing | Consent (you control preferences) |
Analytics & site optimisation | Legitimate interest |
Legal compliance & bookkeeping | Legal obligation |
5. How We Share Information
Recipient Type | Data Shared | Reason |
---|---|---|
Shipping carriers (USPS, UPS, FedEx) | Name, address, phone, item weight | Deliver your order |
Payment processors (Stripe, PayPal) | Name, billing address, payment token | Authorise payment & detect fraud |
Email service (Mailchimp) | Name, email, purchase tags | Send newsletters & offers |
Customer-support platform (Zendesk) | Contact details, order ID, messages | Resolve enquiries |
Analytics (Google Analytics) | Aggregated cookie & device data | Improve site performance |
We never sell personal information for money. We only disclose when (a) required by law, (b) necessary to defend our rights, or (c) you direct us to do so.
6. Notice of Financial Incentive (California Civil Code §1798.125)
Occasionally we offer 10 %-off birthday codes or early-access sales in exchange for joining our marketing list.
Categories of data involved: email address, birth month, purchase history.
How we calculate the value: approximate discount cost compared with typical acquisition expense.
Opt-out: unsubscribe anytime; incentives end immediately without affecting service.
7. Your Privacy Choices & Rights
7.1 United States (All Customers)
Right | How to Exercise |
---|---|
Access / Download | Log in → My Account › Privacy Dashboard or email [email protected] |
Correct / Update | Edit profile online or contact support |
Delete Account | Request via dashboard or email; permanent after 30 days |
Marketing Opt-Out | Unsubscribe link in emails, reply STOP to SMS |
Cookie Control | “Cookie Settings” link in site footer |
7.2 California Residents (CCPA)
Additional Right | Details |
---|---|
Right to Know | Request categories/specific pieces of personal info we collected in past 12 months |
Right to Delete | We erase data unless retention required (tax, fraud, returns) |
Right to Opt-Out of Sale/Share | We do not sell/share, but a “Do Not Sell or Share My Info” link is present in footer |
No Discrimination | Price or service unaffected by exercising rights |
Authorized Agent: Email a notarised power-of-attorney + your verified ID to [email protected].
7.3 Nevada Residents (SB-220)
Email [email protected] with subject “Nevada Opt-Out” to prevent any potential sale of covered information (we currently do not sell).
7.4 “Shine-the-Light” (CA §1798.83)
California customers may request a list of third parties to whom we disclosed personal information for their direct-marketing purposes (none at present).
8. Cookies & Tracking Technologies
We use Essential, Analytics, Marketing, and Personalisation cookies. Manage preferences any time via the “Cookie Settings” footer link.
Type | Examples | Opt-Out |
---|---|---|
Essential | Cart, checkout, security | Not switchable |
Analytics | Google Analytics (_ga) | Toggle in banner |
Marketing | Facebook Pixel (_fbp), Google Ads (_gcl) | Toggle |
Personalisation | Recently viewed, size preferences | Toggle |
Disabling non-essential cookies may limit shopping features.
9. Data Security
Transport: Full-site SSL (TLS 1.3)
Storage: AES-256 encryption at rest; PCI-DSS compliant payment vaults
Access: Role-based, MFA for admin dashboards
Monitoring: 24/7 intrusion detection & annual penetration tests
Cyber-Insurance: Active policy covering data breaches
Breach Notification
In the unlikely event of a breach affecting your personal data, we will notify you within 72 hours (or within the timeline required by applicable state law) via email and a prominent site banner.
10. Data Retention
Data Category | Retention Period |
---|---|
Active customer accounts | While account remains active |
Inactive accounts | Deleted after 3 years of inactivity |
Order & tax records | 7 years (IRS compliance) |
Marketing lists | Removed immediately upon unsubscribe |
Support tickets | 2 years for quality assurance |
11. Children’s Privacy
We do not knowingly collect data from children under 13.
Buyers must be 18 + or have parental consent.
If we discover under-13 data, we delete it and cancel associated orders.
12. International Users
We do not ship internationally. Visitors outside the U.S. receive only anonymised analytics cookies; GDPR Art. 3(2) does not apply because no goods or services are offered to EU residents.
13. Changes to This Policy
Minor updates: posted without notice (version number changes).
Material changes: 30-day advance email + banner notice.
Version history: available on request.
Continued use of our site after the effective date constitutes acceptance.
14. Contact Us
Privacy Officer | Loptok LLC – Privacy Department |
2721 Ulric St, San Diego, CA 92111, USA | |
[email protected] | |
Phone | +1 (601) 258-3898 |
Request Type | Response Time |
---|---|
General enquiries | 24–48 hours |
Data access / portability | ≤ 30 days |
Account deletion | ≤ 10 business days |
CCPA requests | ≤ 45 days (may extend 45 more if necessary) |
Version 1.1 | Next scheduled review: 5 December 2025
Loptok is committed to transparency, security, choice, compliance, and respect for your privacy.