Privacy policy

Effective Date: September 21, 2026
Last Updated: September 21, 2026

WIND ATHLTX ("Company," "we," "us," or "our") respects your privacy.

This Privacy Policy explains how we collect, use, disclose, retain, protect, and otherwise process personal information through our website, online store, accounts, marketing programs, social-media integrations, customer service channels, and related services.

This Policy is intended to address applicable privacy requirements, including, where applicable, the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), GDPR, UK GDPR, PIPEDA, and applicable U.S. state privacy laws.

Because privacy laws vary by jurisdiction, certain rights described below may apply only to residents of particular jurisdictions.

1. Age Restriction

The Site is intended for individuals 14 years of age and older. We do not knowingly permit children under 14 to use the Site or submit personal information with an adult supervising. If we learn that an individual under 14 has submitted personal information, we will take reasonable steps to delete the information, subject to legal obligations and applicable exceptions. Individuals between 14 and 17 may be subject to additional protections under applicable law. Where applicable law requires parental authorization for processing personal information based on consent, we will obtain or require such authorization.

2. Categories of Personal Information We Collect

Depending upon how you interact with us, we may collect:

Identifiers

  • name; 

  • email address; 

  • postal address; 

  • shipping address; 

  • billing address; 

  • telephone number; 

  • account credentials; 

  • IP address; 

  • online identifiers. 

Commercial Information

  • products purchased; 

  • products viewed; 

  • cart activity; 

  • transaction history; 

  • return information; 

  • preferences; 

  • reviews. 

Internet or Electronic Activity

  • browsing history; 

  • search history; 

  • interactions with the Site; 

  • device information; 

  • browser information; 

  • operating system; 

  • referring URLs; 

  • pages visited; 

  • approximate location derived from IP address. 

Geolocation Information

We may collect approximate geolocation information associated with an IP address or other technical information. We will not intentionally collect precise geolocation information unless separately disclosed and permitted by applicable law.

Payment Information

Payment information may be collected by third-party payment processors. Company generally does not receive or store complete payment-card numbers.

User Content

We may collect photographs, videos, reviews, comments, testimonials, social-media content, usernames, and other information voluntarily submitted by users.

Communications

We may retain communications submitted through customer service, email, text messages, forms, surveys, or other channels.

Marketing Information

We may collect your communication preferences and information about interactions with our marketing messages.

3. Sources of Personal Information

We may obtain personal information:

  • directly from you; 

  • automatically through your device; 

  • through cookies and similar technologies; 

  • from payment processors; 

  • from shipping providers; 

  • from marketing platforms; 

  • from advertising partners; 

  • from social-media platforms; 

  • from analytics providers; 

  • from affiliates; 

  • from publicly available sources; and 

  • from other third parties where legally permitted. 

4. Purposes for Processing

We may use personal information to:

  • process orders; 

  • process payments; 

  • ship products; 

  • process returns; 

  • provide customer service; 

  • create and manage accounts; 

  • authenticate users; 

  • prevent fraud; 

  • detect security incidents; 

  • maintain Site functionality; 

  • personalize content; 

  • understand consumer preferences; 

  • conduct analytics; 

  • advertise products; 

  • send marketing communications; 

  • send transactional communications; 

  • administer promotions; 

  • manage reviews; 

  • operate loyalty or rewards programs; 

  • comply with law; 

  • enforce agreements; 

  • exercise legal rights; and 

  • protect Company, users, and third parties. 

5. Legal Bases for GDPR Processing

Where GDPR applies, Company may process personal information based upon:

  • performance of a contract; 

  • taking steps at your request before entering a contract; 

  • compliance with legal obligations; 

  • legitimate interests; 

  • consent; 

  • protection of vital interests; or 

  • another lawful basis permitted by applicable law. 

Where processing is based upon consent, you may withdraw consent at any time. Withdrawal does not affect processing lawfully conducted before withdrawal.

6. Cookies and Tracking Technologies

We may use:

  • essential cookies; 

  • functional cookies; 

  • analytics technologies; 

  • advertising cookies; 

  • pixels; 

  • tags; 

  • SDKs; 

  • similar technologies. 

Cookies may be used to remember preferences, maintain shopping carts, authenticate accounts, understand Site usage, and deliver or measure advertising. Where required by law, we will obtain consent before placing non-essential cookies. Your browser may permit you to block or delete cookies. Certain jurisdictions may provide additional cookie or targeted-advertising controls.

7. Disclosure of Personal Information

We may disclose personal information to:

  • payment processors; 

  • fulfillment providers; 

  • shipping companies; 

  • website hosting providers; 

  • analytics companies; 

  • advertising providers; 

  • marketing platforms; 

  • customer-service providers; 

  • fraud-prevention providers; 

  • IT and cybersecurity vendors; 

  • professional advisers; 

  • insurers; 

  • legal authorities; 

  • affiliates; 

  • business purchasers; and 

  • other service providers necessary to operate the business. 

We require service providers to process information consistent with applicable agreements and law.

8. Sale, Sharing, Targeted Advertising

Certain privacy laws define "sale," "sharing," or "targeted advertising" broadly enough that ordinary advertising or analytics activities may fall within those definitions. Where applicable law provides you with a right to opt out, you may exercise that right through the applicable "Do Not Sell or Share My Personal Information" mechanism, privacy controls, or by contacting us. Where recognized by applicable law, we will honor a valid Global Privacy Control (GPC) signal. California residents may have the right to opt out of sale or sharing of personal information, including certain forms of targeted advertising. 

9. California Privacy Rights

If you are a California resident, you may have rights under the CCPA/CPRA, including:

  • right to know/access; 

  • right to correct; 

  • right to delete; 

  • right to data portability; 

  • right to opt out of sale; 

  • right to opt out of sharing; 

  • right to opt out of certain targeted advertising; 

  • right to limit certain uses of sensitive personal information; 

  • right to non-discrimination; and 

  • right to appeal certain decisions concerning your privacy request. 

9.1 California Sensitive Personal Information

We do not use sensitive personal information for purposes beyond those permitted by applicable law without providing required disclosures or obtaining required consent.

10. Other U.S. State Privacy Rights

Residents of states with applicable comprehensive privacy laws may have rights including, depending upon the applicable statute:

  • access; 

  • correction; 

  • deletion; 

  • portability; 

  • objection; 

  • restriction; 

  • consent withdrawal; 

  • opt-out of sale; 

  • opt-out of targeted advertising; 

  • opt-out of certain profiling; 

  • appeal of denied requests; and 

  • protection against discrimination for exercising privacy rights. 

The precise scope of these rights varies by jurisdiction.

11. Canadian Privacy — PIPEDA

Where PIPEDA applies, Company will process personal information consistent with applicable Canadian privacy requirements, including principles concerning:

  • accountability; 

  • identifying purposes; 

  • consent; 

  • limiting collection; 

  • limiting use, disclosure, and retention; 

  • accuracy; 

  • safeguards; 

  • openness; 

  • access; and 

  • challenging compliance. 

PIPEDA generally requires knowledge and consent for collection, use, or disclosure except where legally permitted otherwise. 

12. European Privacy — GDPR

Where GDPR or applicable European data-protection law applies, you may have rights including:

  • access; 

  • rectification; 

  • erasure; 

  • restriction; 

  • objection; 

  • data portability; 

  • withdrawal of consent; 

  • objection to direct marketing; 

  • rights relating to automated decision-making; and 

  • the right to lodge a complaint with a supervisory authority. 

13. Children's Privacy Under GDPR

Although Company restricts Site access to individuals 14 and older, Company recognizes that GDPR Article 8 may require parental authorization for certain processing involving users under the applicable age established by the relevant EU Member State. The GDPR permits Member States to establish a lower age between 13 and 16 for certain consent-based information-society services. Accordingly, where required by applicable law, Company will seek parental or guardian authorization before relying on consent to process personal information of an individual who is below the legally applicable age.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including:

  • providing services; 

  • completing transactions; 

  • maintaining business records; 

  • complying with legal obligations; 

  • resolving disputes; 

  • enforcing agreements; 

  • preventing fraud; and 

  • protecting legitimate business interests. 

Retention periods vary according to the nature of the information and applicable law.

15. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration, disclosure, or misuse. No electronic transmission or storage system is completely secure.

16. International Data Transfers

Your personal information may be processed in the United States or other countries where Company or its service providers operate. Where required by law, Company will implement appropriate safeguards for international transfers, including applicable standard contractual clauses or other recognized transfer mechanisms.

17. Marketing Emails

You may opt out of promotional email communications by clicking the unsubscribe link contained in the applicable marketing email or by contacting us. Transactional communications, such as order confirmations, shipping notices, account-security messages, and legally required notices, may continue after marketing opt-out. Our marketing practices are designed to comply with CAN-SPAM, including clear opt-out mechanisms. CAN-SPAM requires commercial emails to provide an effective mechanism for opting out and requires opt-outs to be honored within the statutory period. 

18. Marketing Text Messages

Where you separately consent to receive marketing text messages, Company may send recurring promotional text messages using automated technology where permitted by law.

Message and data rates may apply. Message frequency varies.

You may withdraw consent at any time by replying: STOP to the applicable message.

You may also reply: HELP for assistance.

You may opt out of marketing texts without affecting your ability to purchase products. Consent to marketing texts is not a condition of purchasing goods or services. Where required by applicable law, Company will obtain appropriate prior express written consent before sending marketing text messages.

19. Do Not Track

The Site may not respond to all browser "Do Not Track" signals. Where applicable law requires recognition of a recognized universal opt-out mechanism, Company will honor the mechanism in accordance with applicable law.

20. Your Privacy Requests

To exercise a privacy right, contact: info@windathltx.com 

Depending upon the jurisdiction and request, we may need to verify your identity. We will not discriminate against you for exercising a privacy right. Where applicable law provides an appeal right, our response will explain how to submit an appeal.

21. Authorized Agents

Where permitted by law, you may designate an authorized agent to submit a privacy request on your behalf. Company may require proof of authorization and identity verification.

22. Children's Data

Company does not knowingly sell, share, or otherwise commercially exploit personal information of children in violation of applicable law. Company does not knowingly permit children under 14 to use the Site.

23. Changes to Privacy Policy

We may update this Privacy Policy periodically. The revised Policy will be posted with an updated effective date. Where legally required, we will provide additional notice or obtain consent.

24. Contact

Jones Legal Advisors PLLC
77 W. Wacker Drive Suite 4500

Chicago, Illinois 60601

info@joneslegaladvisors.com
877-243-7111