Privacy policy

Privacy Policy

Last Updated: August 26, 2026

This Privacy Policy describes how Ecom Marketing Limited, operating wearstepz.com (“wearstepz,” “we,” “us,” or “our”), collects, uses, discloses, stores, and otherwise processes personal information when you visit or use our website, purchase products from us, create an account, communicate with us, or otherwise interact with our services.

Please read this Privacy Policy carefully. By using our website or services, you acknowledge that you have read and understood the practices described in this Privacy Policy.

1. Who We Are

The controller or business responsible for the processing of personal information through this website is:

Ecom Marketing Limited
Rm 517 New City Centre
2 Lei Yue Mun Street
Kwun Tong
KL
Hong Kong

Website: wearstepz.com
Email: support@wearstepz.com
Phone: +852 6133 4367

For purposes of the General Data Protection Regulation (“GDPR”), the UK GDPR, and other applicable data protection laws, Ecom Marketing Limited is the data controller unless otherwise stated.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information that we collect or process when you:

  • visit or browse wearstepz.com;

  • purchase or attempt to purchase a product;

  • create or use a customer account;

  • sign up for marketing communications;

  • contact our customer service team;

  • participate in promotions, surveys, or other features;

  • interact with our advertisements; or

  • otherwise communicate or interact with us.

This Privacy Policy does not govern third-party websites, platforms, or services that we do not control.

3. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information.

3.1 Contact Information

We may collect information such as:

  • first and last name;

  • email address;

  • telephone number;

  • billing address;

  • shipping address; and

  • other contact information you provide.

3.2 Order and Transaction Information

When you place or attempt to place an order, we may collect:

  • products ordered;

  • order value;

  • billing and shipping information;

  • order history;

  • returns and refund information;

  • payment status;

  • transaction identifiers; and

  • information necessary to process and fulfill your order.

Payment card information is generally processed directly by our payment processors. We do not necessarily receive or store your complete payment card details.

3.3 Account Information

If you create a customer account, we may collect:

  • account login information;

  • account preferences;

  • order history;

  • saved contact information; and

  • other information associated with your account.

You are responsible for maintaining the confidentiality of your login credentials.

3.4 Device and Usage Information

When you use our website, we and our service providers may automatically collect information such as:

  • IP address;

  • browser type and version;

  • device type;

  • operating system;

  • language settings;

  • time zone;

  • referring website or URL;

  • pages viewed;

  • links clicked;

  • dates and times of access;

  • interactions with our website;

  • session information; and

  • cookie and similar technology identifiers.

3.5 Communications

If you contact us, we may collect and retain information contained in your communications, including:

  • your name;

  • email address;

  • telephone number;

  • message content;

  • customer service history; and

  • any information or attachments you choose to provide.

3.6 Marketing Information

If you subscribe to marketing communications or interact with our advertising, we may process information regarding:

  • marketing preferences;

  • email subscriptions;

  • advertisement interactions;

  • email opens and clicks, where permitted;

  • campaign attribution; and

  • consent or opt-out records.

3.7 Information From Third Parties

We may receive personal information from third parties, including:

  • Shopify;

  • payment processors;

  • shipping and fulfillment providers;

  • fraud prevention providers;

  • analytics providers;

  • advertising and marketing partners;

  • social media platforms; and

  • other service providers that assist us in operating our business.

The information received depends on your interaction with those third parties and their respective privacy practices.

4. How We Use Personal Information

We may use personal information for the following purposes.

4.1 Providing Products and Services

We process personal information to:

  • process and fulfill orders;

  • accept and verify payments;

  • arrange shipping and delivery;

  • provide order confirmations and updates;

  • process returns, refunds, and exchanges;

  • maintain customer accounts; and

  • provide requested products and services.

4.2 Customer Support

We may use personal information to:

  • respond to questions;

  • address complaints;

  • resolve order or delivery issues;

  • communicate regarding returns and refunds; and

  • otherwise provide customer support.

4.3 Security and Fraud Prevention

We may process personal information to:

  • detect, investigate, and prevent fraudulent transactions;

  • protect our website and systems;

  • prevent unauthorized access;

  • enforce our Terms and Conditions;

  • detect malicious or unlawful activity; and

  • protect our customers, business, and third parties.

4.4 Website Operation and Improvement

We may use information to:

  • operate and maintain our website;

  • troubleshoot technical issues;

  • analyze website performance;

  • understand how customers use our website;

  • improve our products and services; and

  • develop new functionality.

4.5 Marketing and Advertising

Where permitted by applicable law, we may use personal information to:

  • send promotional emails or other marketing communications;

  • personalize advertising;

  • measure advertising performance;

  • understand the effectiveness of campaigns;

  • create audiences for advertising purposes; and

  • show advertisements that may be more relevant to you.

Where consent is legally required, we will conduct such processing only after obtaining the required consent.

You may unsubscribe from marketing emails at any time by using the unsubscribe link contained in the email or by contacting us.

4.6 Legal and Compliance Purposes

We may process personal information where necessary to:

  • comply with applicable laws and regulations;

  • maintain required business and tax records;

  • respond to lawful requests from authorities;

  • establish, exercise, or defend legal claims;

  • enforce contractual rights; or

  • comply with court orders and legal processes.

5. Legal Bases for Processing for EEA and UK Users

If the GDPR or UK GDPR applies to our processing of your personal information, we rely on one or more of the following legal bases.

Performance of a Contract

Under Article 6(1)(b) GDPR, we process personal information where necessary to:

  • process your order;

  • collect payment;

  • deliver products;

  • administer returns and refunds;

  • maintain your account; or

  • take steps at your request before entering into a contract.

Legitimate Interests

Under Article 6(1)(f) GDPR, we may process personal information where necessary for our legitimate interests or those of a third party, provided that those interests are not overridden by your rights and freedoms.

Such interests may include:

  • operating and improving our website;

  • protecting our systems;

  • preventing fraud;

  • providing customer service;

  • securing transactions;

  • understanding business performance; and

  • establishing or defending legal claims.

Consent

Under Article 6(1)(a) GDPR, we may rely on your consent for certain activities, including certain:

  • marketing communications;

  • non-essential cookies;

  • analytics technologies; and

  • advertising technologies.

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Legal Obligation

Under Article 6(1)(c) GDPR, we may process personal information where necessary to comply with a legal obligation, including tax, accounting, consumer protection, or regulatory requirements.

6. Shopify

Our online store is hosted and operated using the Shopify e-commerce platform.

Shopify processes certain personal information in connection with providing hosting, checkout, commerce, payment-related, security, analytics, and other platform services.

Depending on your location, personal information may be processed by Shopify entities and subprocessors in different countries.

For individuals located in the European Economic Area, United Kingdom, or Switzerland, personal information may initially be processed by Shopify International Limited in Ireland and subsequently transferred to Shopify affiliates and service providers in other jurisdictions, including Canada and the United States.

Shopify uses legally recognized safeguards for international transfers where required, which may include adequacy decisions, contractual safeguards such as Standard Contractual Clauses, and other applicable transfer mechanisms.

Shopify may also process certain information as an independent controller in connection with services that it provides directly to consumers.

For more information about Shopify's privacy practices, please review Shopify's applicable privacy notices at shopify.com/legal/privacy.

7. Payment Processing

Payments made through our store may be processed by Shopify Payments or other payment service providers made available at checkout.

Payment processors may collect and process information such as:

  • your name;

  • billing address;

  • payment card information;

  • bank or payment account information;

  • transaction details;

  • IP address;

  • fraud prevention information; and

  • other information required to authorize or complete a transaction.

Payment processors process information in accordance with their own terms and privacy policies where they act independently.

We recommend reviewing the applicable payment provider's privacy policy when choosing a payment method.

8. Shipping, Fulfillment, and Logistics

To fulfill and deliver orders, we may share relevant personal information with shipping carriers, warehouses, fulfillment partners, logistics providers, suppliers, and other parties involved in delivering your order.

Information shared may include:

  • your name;

  • shipping address;

  • telephone number;

  • email address;

  • order information; and

  • other information necessary for delivery or customs clearance.

Where goods are shipped internationally, information may also be provided to customs authorities, postal operators, freight providers, or other parties where necessary to complete delivery and comply with applicable law.

9. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, tags, scripts, software development kits, and similar technologies.

Cookies are small files or pieces of information stored on or associated with your browser or device.

We may use these technologies for purposes including:

  • operating essential website functions;

  • keeping items in your shopping cart;

  • maintaining login sessions;

  • remembering preferences;

  • preventing fraud;

  • securing checkout;

  • measuring website performance;

  • understanding website usage;

  • conducting analytics;

  • measuring advertising effectiveness; and

  • providing personalized marketing or advertising where permitted.

Essential Cookies

Certain cookies are necessary for our website and checkout to function properly. These cookies generally cannot be disabled through our consent management tools.

Analytics Cookies

Where permitted and, where required, with your consent, analytics technologies may be used to understand how visitors interact with our website.

Advertising Cookies

Where permitted and, where required, with your consent, advertising technologies may be used to measure campaigns, personalize advertisements, or understand customer interactions across websites or services.

Managing Cookies

Depending on your location, you may be provided with a cookie banner or privacy preference tool that allows you to accept, reject, or manage certain categories of cookies.

You may also adjust your browser settings to reject or delete cookies. Disabling cookies may affect the functionality of certain parts of our website.

Where legally required, non-essential cookies and similar technologies will not be activated until the required consent has been obtained.

10. Marketing Communications

If you provide your email address or telephone number for marketing purposes, we may send promotional communications where permitted by applicable law.

Where consent is required, we will request consent before sending such communications.

You can unsubscribe from marketing emails at any time by:

  • clicking the unsubscribe link included in our marketing emails; or

  • contacting us at support@wearstepz.com.

Unsubscribing from marketing communications will not prevent us from sending non-marketing communications that are necessary for your orders, account, transactions, security, or customer service requests.

11. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients where necessary for the purposes described in this Privacy Policy.

Service Providers

We may disclose information to companies that perform services on our behalf, including:

  • website hosting providers;

  • e-commerce platforms;

  • payment processors;

  • shipping and fulfillment providers;

  • customer support providers;

  • IT and security providers;

  • fraud prevention providers;

  • cloud storage providers;

  • analytics providers; and

  • marketing service providers.

Advertising and Marketing Partners

Where permitted by law and depending on the technologies used on our website, we may disclose certain online identifiers, browsing information, or interaction information to advertising and marketing partners.

Under certain US state privacy laws, some forms of advertising-related disclosure may be considered “sharing,” “sale,” or “targeted advertising,” even if no money is exchanged.

Where applicable, you may have the right to opt out of such processing.

Professional Advisers

We may disclose personal information to attorneys, accountants, auditors, insurers, financial advisers, and other professional advisers where reasonably necessary.

Legal Authorities

We may disclose personal information where we believe disclosure is necessary to:

  • comply with applicable law;

  • respond to lawful government requests;

  • comply with subpoenas or court orders;

  • investigate fraud or illegal activity;

  • protect our rights or property; or

  • protect the safety and rights of others.

Business Transactions

If all or part of our business is sold, reorganized, merged, financed, acquired, or transferred, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

12. Sale and Sharing of Personal Information

We do not sell personal information in the traditional sense of exchanging customer information for money.

However, certain privacy laws in the United States define “sale,” “sharing,” or “targeted advertising” broadly. Depending on the advertising, analytics, and tracking technologies used on our website, certain disclosures of identifiers or online activity information to advertising partners may fall within those definitions.

Where applicable law provides you with a right to opt out of such processing, you may exercise that right through any privacy preference or cookie controls made available on our website or by contacting us at:

support@wearstepz.com

Where applicable, we will also process legally recognized browser-based opt-out preference signals, such as Global Privacy Control, as required by law.

13. International Transfers of Personal Information

We operate internationally and use service providers located in multiple countries.

As a result, personal information may be transferred to, stored in, or processed in countries outside the country in which you reside, including Hong Kong, Canada, the United States, countries within the European Economic Area, and other jurisdictions in which our service providers operate.

These countries may have privacy laws that differ from those in your jurisdiction.

Where the GDPR, UK GDPR, or similar laws apply and an international transfer requires appropriate safeguards, we or our service providers may rely on mechanisms such as:

  • adequacy decisions;

  • Standard Contractual Clauses;

  • approved binding corporate rules, where applicable;

  • contractual data protection safeguards; or

  • other legally recognized transfer mechanisms.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

  • fulfill orders;

  • maintain customer accounts;

  • provide customer support;

  • comply with legal and accounting obligations;

  • resolve disputes;

  • prevent fraud;

  • enforce agreements; and

  • establish or defend legal claims.

Retention periods vary depending on the nature of the information and applicable legal requirements.

When personal information is no longer required, we may delete, anonymize, or otherwise securely dispose of it, subject to applicable law.

15. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Our website uses SSL/TLS encryption to protect information transmitted between your browser and our website.

You can generally identify an encrypted connection by the “https” prefix displayed in your browser.

However, no method of transmission over the internet or method of electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.

16. Your Privacy Rights – EEA and UK

If you are located in the European Economic Area or United Kingdom and applicable law provides these rights, you may have the right to:

  • request access to your personal information;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal information;

  • request restriction of processing;

  • object to certain processing;

  • receive certain personal information in a structured, commonly used, machine-readable format;

  • request transmission of eligible information to another controller where technically feasible;

  • withdraw consent at any time where processing is based on consent; and

  • lodge a complaint with a competent data protection authority.

Right to Object

Where we process personal information on the basis of legitimate interests, you may have the right to object to such processing based on your particular situation.

Where personal information is processed for direct marketing purposes, you have the right to object to such processing at any time.

Withdrawal of Consent

Where we rely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your withdrawal.

To exercise your rights, contact:

support@wearstepz.com

We may need to verify your identity before completing your request.

17. United States Privacy Rights

Residents of certain US states may have specific privacy rights under applicable state privacy laws.

Depending on your state of residence and whether the relevant law applies to us, these rights may include the right to:

  • confirm whether we process your personal information;

  • access personal information we maintain about you;

  • obtain a copy of certain personal information;

  • correct inaccurate personal information;

  • request deletion of personal information;

  • opt out of the sale of personal information;

  • opt out of the sharing of personal information for cross-context behavioral advertising;

  • opt out of targeted advertising;

  • limit certain uses or disclosures of sensitive personal information;

  • opt out of certain profiling or automated decision-making activities where applicable; and

  • appeal our decision regarding a privacy request where applicable.

We will not unlawfully discriminate against you because you exercised a privacy right.

California Residents

If the California Consumer Privacy Act, as amended (“CCPA”), applies to us and to your personal information, California residents may have rights including:

  • the right to know the categories and specific pieces of personal information collected;

  • the right to know the categories of sources from which information is collected;

  • the right to know the purposes for which information is collected, used, sold, or shared;

  • the right to know the categories of third parties to whom information is disclosed;

  • the right to request deletion;

  • the right to request correction;

  • the right to opt out of the sale or sharing of personal information;

  • the right to limit certain uses and disclosures of sensitive personal information, where applicable; and

  • the right to non-discrimination for exercising CCPA rights.

The categories of personal information we may collect are described in Section 3 of this Privacy Policy.

The purposes for which we use that information are described in Section 4.

The categories of recipients to whom we may disclose information are described in Section 11.

Exercising US Privacy Rights

Where applicable, you may submit a privacy request by contacting:

Email: support@wearstepz.com

We may take reasonable steps to verify your identity before processing a request.

Depending on applicable law, you may also be permitted to designate an authorized agent to submit a request on your behalf. We may require proof that the agent is authorized to act for you and may independently verify your identity.

If applicable law gives you a right to appeal our decision concerning a privacy request, you may submit an appeal by contacting us at the email address above and stating that your request is a privacy appeal.

18. Global Privacy Control

Some browsers or extensions allow users to transmit an opt-out preference signal, including Global Privacy Control (“GPC”).

Where applicable law requires us to recognize such a signal as a valid request to opt out of sale, sharing, or targeted advertising, we will process supported signals in accordance with applicable law.

19. Children’s Privacy

Our website and products are not directed to children under the age of 13.

We do not knowingly collect personal information from children under 13 through our website.

If you believe that a child has provided us with personal information in violation of applicable law, please contact us at support@wearstepz.com so that we can investigate and, where appropriate, delete the information.

Where a higher minimum age for consent applies under local law, we will comply with applicable requirements.

20. Third-Party Websites and Services

Our website may contain links to websites, applications, payment services, social networks, or other services operated by third parties.

We do not control the privacy practices of those third parties and are not responsible for their privacy policies, content, or security practices.

We encourage you to review the privacy policies of any third-party service you use.

21. Automated Fraud Prevention

We and our service providers may use automated tools to identify suspicious transactions, prevent fraud, protect customer accounts, and secure our website.

These tools may evaluate information such as:

  • transaction details;

  • IP address;

  • device information;

  • order history;

  • billing and shipping information; and

  • patterns associated with potentially fraudulent activity.

Where applicable law provides rights relating to solely automated decisions that produce legal or similarly significant effects, we will honor those rights as required by law.

22. Do Not Track

Some web browsers provide a “Do Not Track” setting.

Because there is currently no universally accepted technical standard governing how websites should respond to traditional Do Not Track signals, our website may not respond to all such signals.

This does not affect our obligations to recognize other legally required opt-out preference signals, such as Global Privacy Control, where applicable.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our business;

  • changes to our services or technology;

  • changes to our data practices; or

  • changes to applicable legal or regulatory requirements.

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

Where required by law, we will provide additional notice of material changes or obtain consent.

24. Contact Us

If you have questions about this Privacy Policy, wish to exercise a privacy right, or have concerns about our processing of your personal information, please contact us:

Ecom Marketing Limited
Rm 517 New City Centre
2 Lei Yue Mun Street
Kwun Tong
KL
Hong Kong

Email: support@wearstepz.com
Phone: +852 6133 4367

If you are located in the EEA or UK and believe that your data protection rights have been violated, you may also have the right to lodge a complaint with the competent data protection supervisory authority in your country of residence, place of work, or place of the alleged infringement.

Last Updated: August 26, 2026