California Consumer Privacy Act (CCPA / CPRA) Policy

Last Updated: July 18, 2026

This California Privacy Policy applies to California residents and supplements the information contained in the PHYSIOATHLETX Privacy Policy.

It explains the privacy rights available under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and how eligible California residents may exercise those rights when interacting with PHYSIOATHLETX, operated by FUTUREWAVE SOLUTIONS LIMITED.

The rights described below apply to the extent that PHYSIOATHLETX is subject to the applicable provisions of California privacy law and that no statutory exception applies.

Your Rights Under the CCPA and CPRA

Eligible California residents may have the following rights regarding their personal information.

Right to Know

You may request information about our collection, use, disclosure, sale, or sharing of personal information.

Depending on the circumstances, you may request details concerning:

The categories of personal information collected

The categories of sources from which the information was obtained

The business or commercial purposes for collecting, using, selling, or sharing the information

The categories of third parties to whom information was disclosed, sold, or shared

The specific pieces of personal information maintained about you

Right to Access

You may request access to eligible personal information we maintain about you.

Where required, we may provide the information in a portable and reasonably usable format that allows it to be transmitted to another entity without unreasonable difficulty.

Right to Delete

You may request the deletion of personal information collected from you, subject to applicable exceptions.

We may retain information where reasonably necessary to:

Complete a transaction or provide requested products and services

Process orders, returns, refunds, disputes, or chargebacks

Detect security incidents or prevent fraud

Comply with legal, tax, accounting, or regulatory obligations

Exercise or defend legal claims

Maintain internal uses permitted under applicable law

Right to Correct

You may request that we correct inaccurate personal information maintained about you.

When reviewing a correction request, we may consider the nature of the information, the purpose for which it is used, and the evidence provided with the request.

Right to Opt Out of Sale or Sharing

You may request that we do not sell or share your personal information as those terms are defined under California privacy law.

PHYSIOATHLETX does not sell personal information in exchange for monetary compensation.

However, certain disclosures involving advertising, analytics, cookies, pixels, or similar technologies may be treated as a sale or sharing under California law, even when no money is exchanged.

Eligible residents may submit an opt-out request as explained in this policy or through our Do Not Sell or Share My Personal Information page.

Right to Limit the Use and Disclosure of Sensitive Personal Information

Where applicable, you may have the right to request that a business limit certain uses or disclosures of sensitive personal information.

PHYSIOATHLETX does not use or disclose sensitive personal information for the purpose of inferring characteristics about customers or for unrelated advertising purposes.

Any sensitive information we process is used only where reasonably necessary to provide requested Services, process payments, prevent fraud, maintain security, or comply with applicable law.

Right to Non-Discrimination

We will not unlawfully discriminate against you because you exercised an applicable privacy right.

We will not unlawfully:

Deny products or Services

Charge different prices solely because a privacy right was exercised

Provide a lower level or quality of service

Retaliate against you for submitting a valid privacy request

Differences reasonably related to the value of personal information or otherwise permitted by law may still apply where properly disclosed.

Categories of Personal Information Collected

Depending on how you interact with our Services, we may collect the following categories of personal information.

Identifiers

Examples include:

Name

Email address

Telephone number

Billing address

Shipping address

IP address

Account or customer identifiers

Customer Records Information

This may include:

Contact details

Billing information

Shipping information

Account information

Customer-service records

Commercial Information

This may include:

Products viewed

Products added to a cart

Order and purchase history

Returns and refunds

Transaction information

Product preferences

Internet or Electronic Network Activity

This may include:

Browsing activity

Website interactions

Pages and products viewed

Referral sources

Cookie identifiers

Advertising interactions

Session and usage information

Geolocation Information

We may collect an approximate location derived from an IP address or device information.

We do not ordinarily collect precise location information through our store unless it is knowingly enabled through a specific service or feature.

Audio, Electronic, or Communications Information

This may include:

Emails

Contact-form submissions

Customer-support messages

Reviews or feedback

Telephone communications where legally recorded and properly disclosed

Inferences

We may generate limited inferences regarding customer interests or preferences based on browsing or purchase activity, primarily to improve website functionality or provide relevant marketing where permitted.

Sensitive Personal Information

Payment providers may process account credentials, payment-card information, or other data classified as sensitive under California law.

PHYSIOATHLETX does not directly store complete payment-card numbers or card security codes.

Sources of Personal Information

We may collect personal information from:

You directly, including when you place an order, create an account, contact support, request a return, or subscribe to communications

Your browser or device, through cookies, pixels, log files, and similar technologies

Shopify, which hosts and supports our store

Shopify Payments, PayPal, and other payment providers

Fulfillment, shipping, and logistics partners

Analytics, advertising, fraud-prevention, and technical service providers

Publicly available or legally permitted third-party sources

How Personal Information Is Used

We may use personal information to:

Process, confirm, fulfill, and deliver orders

Provide tracking and delivery updates

Manage returns, refunds, replacements, and cancellations

Respond to customer inquiries

Operate and improve the website

Maintain customer accounts and preferences

Process and verify payments

Detect, investigate, and prevent fraud or unauthorized activity

Protect website and account security

Measure website performance and advertising effectiveness

Send marketing communications where permitted

Maintain tax, accounting, legal, and transaction records

Establish, exercise, or defend legal rights

Comply with legal and regulatory requirements

How Personal Information Is Disclosed

We may disclose personal information to service providers, contractors, or third parties where reasonably necessary to operate our Services.

These recipients may include:

Shopify

Shopify Payments, PayPal, banks, and payment processors

Fulfillment and returns facilities

Shipping carriers and logistics providers

Website hosting and technical service providers

Customer-support and communication providers

Analytics and advertising providers

Fraud-prevention and cybersecurity providers

Professional advisers, including accountants, auditors, insurers, and legal counsel

Government agencies, regulators, courts, or law-enforcement authorities where required

We may also disclose information in connection with a merger, acquisition, restructuring, financing, or transfer of business assets.

Sale or Sharing of Personal Information

PHYSIOATHLETX does not sell personal information for money.

Certain advertising or analytics technologies may involve disclosures that California law defines as selling or sharing, including disclosures for cross-context behavioral advertising.

The categories potentially involved may include:

Identifiers such as cookie or device identifiers

IP address

Internet or electronic network activity

Advertising and campaign interaction data

Approximate location derived from technical information

These categories may be disclosed to analytics, advertising, and marketing providers where permitted.

You may opt out using our Do Not Sell or Share My Personal Information process.

Personal Information of Minors

We do not knowingly sell or share the personal information of consumers under 16 years of age without the affirmative authorization required by applicable law.

Our Services are not directed toward children under the age of 13.

If you believe that a child has provided personal information through our Services, please contact us so that we can review the matter.

How to Exercise Your Rights

To submit a California privacy request, contact us at:

Email: support@physioathletx.com

Use an appropriate subject line, such as:

California Privacy Request

or

Do Not Sell or Share My Personal Information

Please include:

Your full name

The email address associated with your account, order, or website interaction

A clear description of the right you wish to exercise

Your order number, where relevant

Do not send complete payment-card numbers, passwords, security codes, or other highly sensitive financial credentials.

Verification of Requests

Before completing certain requests, we may need to verify your identity.

Verification may involve confirming information associated with:

Your account

An order

Your email address

Your shipping or billing information

Previous communications with our support team

We will request only the information reasonably necessary to verify the request.

The level of verification may vary depending on the sensitivity of the requested information and the risk of unauthorized access or deletion.

Authorized Agents

You may appoint an authorized agent to submit a request on your behalf where permitted by California law.

We may require:

Written authorization signed by you

Proof that the agent is properly authorized

Verification of your identity

Direct confirmation that you authorized the request

We may deny a request submitted by an agent if sufficient authorization or verification is not provided.

Response Time

We will confirm receipt and respond to verified requests within the periods required by applicable law.

Businesses generally must respond to eligible requests to know, delete, or correct within 45 calendar days. Where reasonably necessary, the response period may be extended by an additional 45 days, provided the consumer is notified of the extension.

We may decline or limit a request where:

We cannot reasonably verify the requester’s identity

A legal or statutory exception applies

The request is fraudulent, abusive, excessive, or technically infeasible

The information must be retained for security, transaction, legal, or compliance purposes

Where required, we will explain the basis for denying or limiting a request.

Opt-Out Preference Signals

Where required by law and supported by our systems, we may recognize valid browser-based opt-out preference signals, including the Global Privacy Control.

A browser-based signal may apply only to the browser or device from which it is submitted unless it can be associated with a verified customer account.

You may need to apply the preference separately on each browser or device.

Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or as required by law.

Retention periods may depend on:

Order fulfillment and customer-service needs

Returns, refunds, disputes, and chargebacks

Fraud-prevention and security requirements

Tax, financial, and accounting obligations

Applicable statutes of limitation

Legal and regulatory requirements

The duration of the customer relationship

When information is no longer required, it may be deleted, anonymized, or retained in a restricted form where legally necessary.

Changes to This Policy

We may update this policy periodically to reflect changes in:

California privacy law

Our business operations

Categories of information processed

Website technologies

Service providers

Advertising or analytics practices

The revised policy will be published on this page with an updated Last Updated date.

Contact Information

For California privacy requests or questions regarding this policy, contact us using the information below:

Store Name: PHYSIOATHLETX

Company Name: FUTUREWAVE SOLUTIONS LIMITED

Company Number: 77242548

Company Address: Unit 2A, 17/F, Glenealy Tower, No. 1 Glenealy, Central, 999077, Hong Kong

Email: support@physioathletx.com

Phone Number: +1 702 760 3160

Contact Form: Click Here

Customer Service Hours: Monday to Friday, 9:00 AM – 6:00 PM (Eastern Time – EST/EDT)
Saturday and Sunday: Closed

Response Time: Our customer support team typically responds within 24–48 hours on business days.