Privacy Policy

GAT Sport — Global Privacy Policy (2025)

Effective Date: November 13, 2025 | Last Updated: November 13, 2025

Summary of Your Rights by Region

Region	Primary Law(s)	Key Rights	Opt-Out / Request Channel
California (U.S.)	CPRA	Access / Delete / Correct / Opt-Out Sale-or-Share / Limit Sensitive Data	webmaster@teamgat.com or (203) 880-5800
EU / UK	GDPR, UK GDPR	Access / Erase / Rectify / Portability / Object / Restrict	webmaster@teamgat.com (+ local rep)
Canada	PIPEDA	Access / Correction / Withdraw Consent	webmaster@teamgat.com
Other U.S. States	CTDPA, CPA, VCDPA, UCPA, NY SHIELD, etc.	Access / Delete / Opt-Out Targeted Ads / Correction / Portability / Appeal	webmaster@teamgat.com

1. Transparency Overview

GAT Sport values transparency, data minimization, and user control.
We collect and use personal data only to process orders, support accounts, personalize your experience, and improve our products.
We safeguard your information with encryption in transit and at rest, access controls, vendor due-diligence, and regular security audits.
You can manage marketing preferences, cookie settings, and Global Privacy Control (GPC) opt-outs at any time.

2. Notice at Collection (CPRA)

We collect identifiers, contact data, commercial records, device information, and limited geolocation data for order fulfillment, support, analytics, and marketing as permitted by law.
We do not sell personal data.
Where limited “sharing” occurs for cross-context advertising, you may opt out via the “Do Not Sell or Share My Information” link or a valid GPC signal.

3. Who We Are

World Health Products, LLC d/b/a GAT Sport and its affiliates (“GAT Sport,” “our,” “us,” or “we”) gathers and processes your personal information in accordance with this Global Privacy Policy. This Policy provides you with the necessary information regarding your rights and obligations, and explains how, why, and when we collect, process, and use your personal information.

This Privacy Policy is part of GAT Sport’s Terms and Conditions and applies to your use of GAT Sport websites, products, and , mobile, TV, or tablet apps, (collectively, “the Sites”), GAT Sport products, affiliates worldwide, or services from us (collectively, the “Service). This Privacy Policy does not apply to the data collection practices of any other websites that are not owned and operated by GAT Sport.

Please note that this Privacy Policy does not govern the practices of third parties, including our partners, third party service providers, marketing providers, and/or advertisers, even when those services are branded as or provided on behalf of GAT Sport.

By using our services and/or making the choices you made when registering with us, you acknowledge that you have read and accepted the terms of this Privacy Policy and our Terms and Conditions, and you are consenting to our collection, protection, use, retention, and disclosure, subject to the terms and conditions set-forth below in this Policy, of your personal information. If you elect to not provide the information we require, we may not be able to provide all of our services to you.

If you do not agree to the terms of this Privacy Policy, please do not use our Sites or our other Services. We may make changes to this Privacy Policy from time to time. Your continued use of our Sites and other Services following the posting of any changes to this Privacy Policy will indicate your acceptance to these changes. We will post any Privacy Policy changes on this page. Please check back frequently to see any changes.

World Health Products, LLC d/b/a GAT Sport
578 Pepper Street, Monroe, Connecticut 06468 USA
Email: webmaster@teamgat.com Phone: (203) 880-5800

4. Information We Collect

We collect your information in several ways, including:

- Information we collect from you;

- Information we collect from when you use our Services; and

- Information we collect from third parties.

When you use our Services (e.g., browse our sites, use our apps, complete a survey, purchase a subscription or other products etc.), we may request and you may provide your personal information to GAT Sport.

GAT Sport collects, uses and processes your personal information to provide our Sites and Services to you, and to meet our legal, statutory and contractual obligations. The specific information we collect depends upon your use of the Sites and our other Services, as described below.

“Personal information” is information that identifies you as an individual or relates to or is reasonably capable of being associated with an identifiable individual, and includes the data sets referred to below.

Identifiers: name, email, address, phone number
Payment Data: processed by Shopify Payments, Stripe, or PayPal (PCI-compliant)
Commercial Data: orders, subscriptions, affiliate records
Device & Usage Data: IP address, browser type, operating system, pages visited
Geolocation (approx.): city / region
User Content: reviews or photos you submit
Sensitive Data (if provided): fitness or wellness goals — used only with your consent

5. Data Categories, Sources, Purposes & Sharing Matrix

Category	Examples	Source	Purpose	Shared With	Sold/Shared	Retention
Identifiers	Name, Email, Address	You	Order fulfillment & support	Vendors, affiliates	No sale; shared for ads (opt-out)	2 yrs post-account
Payment	Card token	You via checkout	Payment & fraud prevention	Shopify, Stripe, PayPal	No	7 yrs
Commercial	Orders, Cart history	You	Personalization & offers	Klaviyo, Analytics	Shared (opt-out)	3 yrs
Device/Usage	IP, Device ID, Pages	Automatic	Analytics, Security	Google Analytics, Meta Ads	Shared (opt-out)	2 yrs
Geolocation	City/State	Automatic	Localization	Shopify	No	2 yrs
UGC	Reviews, Photos	You	Display & marketing (with consent)	Public	No	Until removed
Inferences	Preferences	Derived	Recommendations	Internal	Shared (opt-out)	2 yrs

6. Cookies & Tracking Technologies

We and our third-party partners (including service providers and advertising partners) may use cookies, web beacons (“pixels”), mobile ad identifiers, and other similar technologies to facilitate our relevant services to you, and to provide you with a customized online experience. Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies are also used such as beacons, tags and scripts to collect and track information and to analyze and improve our Service. We use third-party partners to help manage and optimize our service performance and online advertising.

Please be advised that if you choose to reject all cookies, then certain areas of the Site might not function properly.

Examples of cookies we use:

• First Party Cookies. We use first party cookies, including session cookies and preference cookies, to remember your selections, choices, and preferences for when you interact with our Sites. Session cookies are temporary and are automatically deleted once you close your Internet browser. Preference cookies are first party cookies that remain on your device until you delete them or they are otherwise removed upon expiration.

• Third Party Cookies. We permit certain third-party service providers, advertisers, and other companies to use cookies or other similar technologies on our Sites. These companies may collect your information, track your behavior on our Sites, and gather information about your use of our Sites and other online services over time and across different services. Additionally, some companies may use information collected to deliver targeted ads on behalf of us or other companies, including on other websites or online services. We are not responsible for the functioning of cookies and other technologies used and placed by third parties on your device. The third-party partners we use who may utilize cookies or other tracking technologies are listed in the graph of this section.

Other Technologies: We collect many different types of information from other technologies to improve the quality of our Site and the services we provide. For example, we may collect usage data and other information about the device you use to access our Site, your operating system and/or mobile device type, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone where your device is located. We may record the IP address of the device you use to connect to the Internet.

• These technologies include web beacons and scripts: Web beacons are pieces of code embedded in a website or e-mail to monitor your activity on the website or your opening of the e-mail, and which can pass along information such as the IP address of the computer or device you use to view the website or open the e-mail, the URL page on which the web beacon is located, the type of web browser that was used to access the website, and previously set cookie values. Web beacons are sometimes used to collect advertising data, such as counting page views, promotion views or advertising responses. Disabling your computer’s, device’s or web browser’s cookies may prevent some web beacons from tracking or recording certain information about your activities. Please be advised that if you disable all such cookies, then certain areas of the Site might not function properly. Scripts are pieces of code embedded in a website to define how the website behaves in response to certain key or click requests sent by the user. Scripts are sometimes used to collect information about the user’s interactions with the website, such as the links the user clicks on. Scripts are often temporarily downloaded to the user’s computer or device from the website server, active only while the user is connected to the Site and deactivated or deleted when the user disconnects from the website. Please be advised that if you disable any scripts through your web browser or other means, then certain areas of the Site might not function properly. This Privacy Policy applies to any personal information collected through our used Cookies and similar technologies. Personal information collected through the third-party partners’ Cookies and similar technologies is subject to the privacy policy of the third-party partners respectively, and not to our privacy policy.

• Software Development Kits (“SDKs”): We may use SDKs on our mobile app to collect analytics regarding the use and functionality of our mobile app. Additionally, we may collect mobile ad identifiers on our mobile app for interest-based or cross-application advertising and analytics. To opt-out of the collection of mobile data for cross-application advertising, please contact us utilizing the information in the “Contact Us” Section below. Additionally, if you access our mobile app utilizing an iPhone, you may turn off cross-application tracking in the Privacy section of your phone settings.

Your Cookie Choices

When it comes to how you want to use or allow cookies to be used on your devices, you are in control. Most internet browsers are initially set to accept cookies. You can set your browser to block or otherwise control what cookies your browser or mobile device accepts via your browser or mobile device settings. Additionally, you can choose to modify your settings and delete cookies that are otherwise stored on your device. Please consult the instructions provided by your browser or your mobile device’s manufacturer to determine how you can limit the placement of and/or remove cookies or other technologies. Please note, however, that limiting or disabling essential cookies and other technologies may impact or adversely affect some portion or functions of our Sites.

Controlling Cookies and Opt-Out Choices

You can visit the following sites for comprehensive information on how to manage cookies and how to opt out of cookies used for advertising and marketing purposes:

For individuals in the United States:

• The Digital Advertising Alliance’s Consumer Choice tool at https://www.aboutads.info/choices

• The Digital Advertising Alliance’s AppChoices program at https://www.aboutads.info/appchoices

• The Network Advertising Initiative’s opt-out program at https://www.optout.networkadvertising.org/

For EU/EEA-based individuals:

• The EDAA opt-out program at https://www.youronlinechoices.eu

You can adjust cookie settings through your browser or our Cookie Preferences link.
We honor GPC and Do Not Track signals.

Type	Purpose	Examples	Duration	Provider
Essential	Login, cart, checkout	Session ID	Session–1 yr	Shopify
Analytics	Measure site usage	_ga, _gid	1–2 yrs	Google Analytics
Advertising	Remarketing & cross-device ads	Meta Pixel, TikTok	≤ 2 yrs	Meta / TikTok Ads
Functional	Preferences & store settings	Locale	≤ 1 yr	First-party
Social	Embedding / login widgets	Instagram Widget	Varies	Meta

7. How We Use Information

We use your information to:

Process and ship orders
Provide customer service and support
Personalize your shopping experience
Improve our website and product offerings
Communicate promotions or updates (with your consent)
Detect, prevent, or investigate fraud and security issues
Comply with legal, tax, and accounting obligations

We do not use your information for purposes materially different from those stated here without notice.

8. Profiling, Targeting & Automated Decisions

We may analyze your activity and preferences to recommend products or offers that may interest you.
This limited “profiling” does not result in automated decisions that produce legal or similarly significant effects.
You may opt out of personalized advertising at any time through your cookie preferences, by submitting a privacy request, or by enabling Global Privacy Control (GPC) in your browser.

9. Disclosure of Information & Vendors

We share information only with trusted third parties who process it on our behalf under written contracts that restrict use to our purposes.
Our key service providers include:

Shopify – ecommerce hosting, checkout, order processing
Stripe & PayPal – payment processing (PCI-compliant)
Klaviyo – email marketing and transactional communications
Google Analytics – analytics and performance metrics
Meta Ads & TikTok Ads – advertising and remarketing
ShipStation, UPS, USPS – shipping, order tracking, and fulfillment

We may also share limited information with auditors, legal advisors, and regulators if required by law.
We do not authorize vendors to sell or use your data for their independent marketing.

10. Third-Party Links & Social Integrations

Our website and emails may contain links to third-party websites or social media platforms (e.g., Instagram, YouTube, TikTok).
These sites are not controlled by GAT Sport, and their privacy practices may differ.
We encourage you to review their privacy policies before interacting or providing information.

11. International Data Transfers & Global Privacy

Because GAT Sport operates globally, your information may be transferred to the United States and other jurisdictions.
We rely on appropriate legal mechanisms such as Standard Contractual Clauses and the EU–U.S. Data Privacy Framework (DPF).
We also comply with the UK GDPR and Canada’s PIPEDA.
Lawful bases for processing include contract performance, consent, legitimate interest, and legal obligations.
You may withdraw consent at any time or file complaints with your local regulator.

12. U.S. State Privacy Comparison Table

Right	CA	CT	CO	VA	UT	NY
Access / Portability	✔	✔	✔	✔	◐	Disclosure
Correction	✔	✔	✔	✔	◐	—
Deletion	✔	✔	✔	✔	◐	—
Opt-Out Sale/Share	✔	✔	✔	✔	Sale only	—
Opt-Out Targeted Ads	✔	✔	✔	✔	✔	—
Appeal Denials	✔	✔	✔	✔	—	—

Legend: ✔ = Right available ◐ = Partial / limited — = Not expressly provided

13. Security & Incident Response

We employ technical and organizational measures including encryption, firewalls, intrusion detection, and access controls.
All systems are monitored for unauthorized access, and employees receive data-protection training.
If a data breach occurs, we will investigate promptly and notify affected individuals and authorities as required under applicable law (e.g., Cal. Civ. Code § 1798.82).
You may report suspected security issues to webmaster@teamgat.com.

14. Data Retention Schedule

We retain information only as long as necessary for legitimate business or legal reasons, after which we securely delete or anonymize it.

Data Type	Retention	Purpose
Orders & Billing	7 years	Tax / Accounting compliance
Account Data	Account life + 2 yrs	Fraud prevention & customer service
Marketing Logs	3 yrs	Compliance & opt-out tracking
Analytics / Cookies	≤ 2 yrs	Performance insights
User Content	Until removed	Community display or testimonials

15. Children’s Privacy

Our products and services are intended for adults 18 years of age and older.
We do not knowingly collect or solicit personal data from anyone under 13.
If you are a parent or guardian and believe your child provided information to us, please contact us at webmaster@teamgat.com so we can delete it.

16. Accessibility & Alternate Formats

GAT Sport is committed to providing an accessible experience for all users and adheres to WCAG 2.1 AA standards where feasible.
If you need this policy in another format (e.g., large print, Braille, or audio), please email webmaster@teamgat.com or call (203) 880-5800.

17. Your Rights under the EU General Data Protection Regulation (“GDPR”) and United Kingdom General Data Protection Regulation (“UK GPDR”)

For residents from the United Kingdom (UK), or the European Economic Area (EEA) and Switzerland, this section allows you to exercise your rights under the European Union’s (EU) General Data Protection Regulation (GDPR) and the UK’s version of the GDPR (UK GDPR), as applicable. Although applicable data protection legislation in relevant jurisdictions may afford similar rights, there may be circumstances where some of these rights do not apply under or are modified by, local law. GAT Sport takes reasonable steps to allow you to correct, amend, delete or limit the use of your personal information, and exercise other rights available under applicable law. GAT Sport therefore informs you that, where applicable under relevant law, you are entitled to the following:

• Right to Access / Disclosure: The right to have access to your personal data upon simple request – that is, you may receive a copy of such data upon receipt of a verifiable request, along with other information related to the processing.

• Right to Correction/Rectification: The right to correct your personal data if you find it is inaccurate, incomplete or obsolete.

• Right to Erasure / “Right to be Forgotten”: The right to obtain the deletion of your personal data in the situations set forth by applicable data protection law.

• Withdrawal of Consent to Processing: The right to withdraw your consent to the data processing without affecting the lawfulness of processing, where your personal data has been collected and processed based on your consent and not any other basis.

• Right to Object: The right to object to the processing of your personal data under certain circumstances, in which case we may ask you to justify your request by explaining to us your particular situation.

• Right to Restrict Processing: The right to request limits to the processing of your data, when allowed by and in circumstances set forth under applicable law, as well as to object to any direct marketing from us.

• Right to Restrict Automated Individual Decision-Making (Profiling): The right to not be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you.

• Right to Data Portability: The right to have your personal data directly transferred by us to a third-party processor of your choice (where technically feasible; may be limited to situations when processing is based on your consent).

To exercise any of these rights, please contact us at the contact information listed in the “Exercising your Privacy Rights” section below. Note that we may ask you to verify your identity before responding to such requests.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the relevant request; this is to ensure that your data is protected and kept secure.

Please bear in mind that if you exercise such rights, this may affect our ability to provide our products and services.

18. Your Rights Under Canada’s Personal Information Protection and Electronic Documents Act

We intend to allow Canadian residents to exercise their rights under the Personal Information Protection and Electronic Documents Act (“PIPEDA”), Alberta’s Personal Information Protection Act (Alberta PIPA), British Columbia’s Personal Information Protection Act (BC PIPA), and Québec’s Act respecting personal information in the private sector (Quebec Act) as applicable. Although applicable data protection legislation in relevant jurisdictions may afford similar rights, there may be circumstances where some of these rights do not apply under or are modified by, local law. GAT Sport takes reasonable steps to allow you to correct, amend, and delete your personal information, and exercise other rights available under applicable law. We therefore inform you that, where applicable under relevant law, you may be entitled to the following:

• Right to Correction/Rectification: The right to correct your personal data if you find it is inaccurate, incomplete or obsolete.

19. Your Rights under various United Sates state data privacy laws such as the Nebraska Data Privacy Act and the Texas Data Privacy and Security Act.

—For residents from the state of Connecticut, Colorado, Virginia, Nebraska, Utah, or Texas this section allows you to exercise your rights under the applicable state law.

• Right to Data Portability: the right to obtain, move, copy, or transfer data as defined by applicable law.

• Right to Correction/Rectification: The right to correct your personal data if you find it is inaccurate, incomplete or obsolete.

• Right to Deletion: The right to obtain the deletion of your personal data in the situations set forth by applicable data protection law.

• Right to Opt-Out: The right to opt out of the processing of your personal data for targeted advertising, as defined by applicable law as well as the right to opt out of the processing of sensitive data as defined by applicable law.

• Right to Appeal: You may also have the right to appeal the denial of any of these rights by submitting a form that will be provided to you if we deny a data request.

20. California Residents — Your Privacy Rights (CPRA Addendum)

This section supplements the main Policy and applies only to California residents.

Right	Description	How to Exercise
Right to Know	Request the categories or specific pieces of personal information we collected.	Email webmaster@teamgat.com or call (203) 880-5800
Right to Delete	Request deletion of your personal data (subject to exceptions).	Same as above
Right to Correct	Request correction of inaccurate data.	Same as above
Right to Opt-Out of Sale/Share	Stop the sale or sharing of your personal information for targeted advertising.	Use the “Do Not Sell or Share My Information” link or send a GPC signal
Right to Limit Use of Sensitive Data	Limit use of sensitive personal information.	Email webmaster@teamgat.com
Right to Non-Discrimination	You will not be treated differently for exercising privacy rights.	Automatically applied

If your request is denied, you may appeal within 45 days by replying to our written decision or contacting webmaster@teamgat.com.

21. How to Exercise Your Privacy Rights:

Email webmaster@teamgat.com or call (203) 880-5800

22. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or in applicable laws.
When we do, we will post the revised version here with a new “Effective Date.”
Significant updates will also be communicated through website banners or email notices where legally required.

23. Contact Us

If you have questions about this Privacy Policy, your personal data, or our data-handling practices, please contact:

World Health Products, LLC d/b/a GAT Sport
578 Pepper Street, Monroe, Connecticut 06468 USA
Email: webmaster@teamgat.com Phone: (203) 880-5800