Privacy policy

Effective: 27 August 2026

We collect what we need to get your order to your door and to keep the store running. Nothing more. This page sets out exactly what that means, who else touches your information, and how to make us stop.

1. Who we are

This site is operated by ATF Commerce LLC, a limited liability company trading under the brand name LYNK, registered at 3440 Estes Park Ln, McKinney, TX 75070, United States. In this policy, "we", "us" and "LYNK" mean that company. "You" means anyone who visits lynkgear.com, buys from us, or contacts us.

We decide how and why your personal information is used, which makes us the data controller under the GDPR and the business responsible for it under US state privacy laws.

Our store runs on Shopify, which hosts the site and processes your data on our instructions. Payments are handled by our payment providers — we never see or store your full card number.

2. What we collect

Information you give us:

• Name, email address, phone number, shipping address and billing address
• Order contents, order history and delivery preferences
• Account login details if you create an account, stored as an encrypted password we can't read
• Messages, photos and attachments you send to our support team
• Product reviews, ratings and anything you post publicly on the site
• Marketing preferences — whether you opted in to email or SMS, and when

Information collected automatically:

• Device and browser type, operating system, screen size and language
• IP address and the approximate region it points to
• Pages viewed, products clicked, time on page, and the site or ad that sent you here
• Cart activity, including items added but not purchased
• Cookie identifiers and similar identifiers set by us and our partners

What we don't collect. We don't ask for and don't want your government ID number, your date of birth, your health information, or anything about your race, religion, politics, sexual orientation or union membership. If you send us any of this unprompted, we delete it.

3. Where it comes from

Most of what we hold comes straight from you at checkout or in a support email. The rest reaches us from services working on our behalf:

• Payment providers: confirmation of payment, the last four digits of your card, the card brand, and fraud-risk signals — never the full number.
• Shipping carriers: tracking status, delivery confirmation, failed-delivery notices and address corrections.
• Advertising platforms: aggregated campaign performance, and confirmation that a click became an order.
• Apps installed on our store: data generated by the feature they provide, such as review submissions or subscription status.

4. Why we use it

Every use below has a lawful basis behind it. Where the basis is consent, you can withdraw it at any time without affecting anything we did beforehand.

• Take payment, pack your order, ship it and handle returns — performance of our contract with you
• Send order confirmations, shipping updates and return instructions — performance of our contract with you
• Answer your questions and resolve complaints — performance of our contract, or our legitimate interest in running a support desk
• Detect fraud, chargebacks and abuse of promotions — our legitimate interest in protecting the business
• Understand which pages and products work, using aggregated analytics — consent where required, otherwise legitimate interest
• Show you ads on social platforms and measure whether they worked — consent
• Send marketing emails or texts — consent, or our legitimate interest in contacting existing customers about similar products
• Keep invoices and tax records — compliance with a legal obligation

We don't use your information to make automated decisions that produce legal effects for you. Fraud-screening tools may flag an order for manual review, but a person makes the final call.

5. Cookies and tracking

Cookies are small files stored in your browser. We use them in three ways, and only the first is unavoidable:

• Strictly necessary: keeping you logged in, remembering your cart, applying discount codes, and blocking fraudulent checkouts. Turning these off breaks the store.
• Analytics: counting visits and measuring which pages lead to orders, so we know what to fix.
• Advertising: recognising you across sites so we can show relevant ads and stop paying to advertise a product you already bought.

You can accept or reject the second and third categories through our cookie banner, and change your mind later using the "Cookie settings" link in our footer. Your browser settings can also block or delete cookies entirely.

Where your browser sends a Global Privacy Control signal, we treat it as a valid request to opt out of targeted advertising and the sharing of your information.

6. Advertising partners

We advertise on social platforms. To do that, our site sends those platforms a record of what you did here — pages viewed, items added to cart, purchases completed — usually tied to a hashed version of your email address so they can match it to an account.

Under California and several other US state laws this counts as "sharing" or a "sale" of personal information, even though no money changes hands. We're telling you plainly because the law calls it that, and because you have the right to stop it.

How to stop it: reject advertising cookies in our banner, or email privacy@lynkgear.com with the subject line "Do Not Sell or Share". You can also turn off ad personalisation inside your account settings on each platform. None of this affects your order, your price, or the support you get from us.

The platforms we currently work with are Meta (Facebook and Instagram), TikTok, Google and Pinterest. Each acts as an independent controller of the data it receives and handles it under its own privacy policy.

7. Who we share with

We share personal information only where it's needed to run the store, and only under a written contract that limits what the recipient may do with it.

• Shopify — hosts the store, processes orders and stores customer records
• Payment providers — authorise and settle payments, screen for fraud
• Shipping carriers and fulfilment partners — receive the name, address and phone number needed to deliver
• Email and SMS platforms — send order notifications and, if you opted in, marketing
• Analytics and advertising platforms — as described in sections 5 and 6
• Apps installed on our store — for reviews, support and similar features
• Professional advisers — accountants and lawyers, where required

We also disclose information where the law requires it, in response to a valid legal request, or to establish and defend legal claims. If the business is ever sold or merged, customer records transfer with it and we'll tell you before that happens.

We do not sell your personal information for money to anyone, and we never have.

8. International transfers

Our service providers operate in several countries, including the United States. If you're in the European Economic Area or the United Kingdom, that means your information may be transferred outside your region.

When it is, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision covering the destination country. You can ask us for a copy of the safeguards that apply to your data.

9. How long we keep it

• Order and invoice records: 7 years from the order date, to satisfy tax and accounting law
• Customer account: until you delete it, or after 3 years of inactivity
• Support emails: 3 years from the last message in the thread
• Marketing consent records: until you unsubscribe, plus 2 years as proof of consent
• Analytics and advertising identifiers: up to 26 months, or less where the platform's own limit is shorter

When a period ends we delete the record or anonymise it so it can no longer be linked back to you.

10. How we protect it

The site runs over encrypted HTTPS connections. Payment data is handled inside our providers' PCI-DSS compliant systems, not ours. Access to customer records is limited to staff who need it, protected by two-factor authentication, and reviewed regularly.

No system is perfectly secure. If a breach affects your personal information and creates a real risk to you, we'll notify you and the relevant regulator within the deadlines the law sets.

11. Your privacy rights

Depending on where you live, you have some or all of the following rights:

• Access — get a copy of the personal information we hold about you
• Correction — fix anything inaccurate or incomplete
• Deletion — have your information erased, subject to records we must keep by law
• Portability — receive your data in a machine-readable format, or have it sent elsewhere
• Objection — object to processing based on legitimate interests, including profiling
• Restriction — ask us to pause processing while a dispute is resolved
• Withdraw consent — at any time, for anything based on consent
• Opt out of marketing — unsubscribe from any email, reply STOP to any text

How to exercise them. Email privacy@lynkgear.com from the address on your order, and tell us which right you want to use. We reply within 30 days and may extend once by a further 30 days for complex requests, which we'd tell you about first.

We may need to confirm your identity before acting. We won't charge you, and we won't treat you differently for asking. An authorised agent may make a request on your behalf with written proof of authority.

12. US state rights

If you live in California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon or another state with a comprehensive privacy law, you additionally have the right to know the categories of personal information we collect, the purposes we collect them for, and the categories of third parties we disclose them to — all set out above in sections 2, 4 and 7.

You also have the right to opt out of targeted advertising and of the sale or sharing of your personal information. Use the "Do Not Sell or Share" instruction in section 6.

If we deny your request, you may appeal by replying to our decision email with the word "Appeal". We'll respond within 45 days with our reasoning, and tell you how to contact your state attorney general if you're still not satisfied.

13. Children

Our store is intended for adults. We don't knowingly collect personal information from anyone under 16. If you believe a child has given us their information, email privacy@lynkgear.com and we'll delete it.

14. Changes to this policy

We update this policy when our practices change or the law does. The effective date at the top always reflects the current version.

If a change materially affects how we handle your information, we'll tell you by email or with a notice on the site before it takes effect.

15. Contact us

• Privacy questions, rights requests and opt-outs: privacy@lynkgear.com
• Postal address: ATF Commerce LLC (LYNK), 3440 Estes Park Ln, McKinney, TX 75070 — Attn: Privacy
• Complaints: customers in the EEA and UK may complain to their local data protection authority at any time.