RWDY Holdings Privacy Policy and Consumer Data Notice
Effective date: July 18, 2026
RWDY Holdings and its brands, including RWDY Sports (“RWDY,” “we,” “us,” or “our”), respect your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you interact with our websites, online stores, social-media pages, marketplace accounts, messages, customer-service channels, promotions, and other online or offline business activities (collectively, the “Services”).
This Policy applies to information that RWDY receives or controls through our website, Shopify storefront, Facebook, Instagram, Messenger, Whatnot, eBay and other marketplaces, email, customer-service communications, manual sales, and related business operations. The platforms themselves may independently collect and process information under their own privacy policies.
1. Scope and relationship with platforms
RWDY may act as the business or controller responsible for personal information that we collect directly, such as information submitted through our website, messages, customer-service channels, manual orders, or forms that we control.
Shopify, Meta (Facebook, Instagram, and Messenger), Whatnot, eBay, payment processors, shipping carriers, and other providers may separately act as independent businesses, controllers, processors, or service providers. Their collection and use of information is also governed by their own privacy policies, terms, settings, and consent tools. This Policy does not replace those third-party policies.
2. Information we collect
Information you provide
- Contact information: name, email address, telephone number, mailing address, billing address, social-media username, and preferred contact method.
- Account and profile information: username, account identifier, profile details, saved preferences, and information associated with a marketplace or social-media account.
- Transaction information: products viewed or purchased, order number, purchase date, price, discounts, taxes, shipping method, tracking information, returns, refunds, disputes, and customer-service history.
- Collectibles information: card or memorabilia descriptions, photographs, certification numbers, serial numbers, grading information, condition observations, want lists, collection preferences, trade or purchase inquiries, and offer information.
- Communications: emails, contact-form submissions, Facebook or Instagram comments and messages, Messenger conversations, Whatnot messages, reviews, feedback, and other correspondence.
- Marketing preferences: newsletter subscription status, consent records, campaign engagement, and opt-out choices.
- Promotion information: entries, eligibility information, social-media handles, and prize-delivery information when we operate a giveaway or promotion.
Information collected automatically
- Internet Protocol address, browser type, device type, operating system, device identifiers, language, and approximate location derived from an IP address.
- Pages viewed, links clicked, referring pages, search terms, cart activity, checkout activity, purchase events, and time spent on pages.
- Cookie identifiers, advertising identifiers, pixel events, conversion events, and consent or opt-out signals.
- Fraud, security, account-integrity, and technical diagnostic information.
Information we generally do not request
Please do not send Social Security numbers, passwords, authentication codes, complete payment-card numbers, bank-account credentials, medical information, or other highly sensitive information through social-media messages, email, or ordinary contact forms. Marketplaces and payment processors may collect identity or payment information directly under their own policies.
3. Sources of information
We may collect information from:
- You, including through orders, messages, forms, promotions, returns, and customer-service requests.
- Shopify and Shopify services used by our store.
- Meta services, including Facebook, Instagram, Messenger, business insights, lead forms, pixels, and conversion tools when enabled.
- Whatnot, eBay, and other marketplaces through which you interact with us or complete a transaction.
- Payment processors, fraud-prevention providers, shipping carriers, and fulfillment providers.
- Analytics, advertising, email, hosting, security, and technical-service providers.
- Public sources, such as public social-media posts, public marketplace profiles, and publicly available card-certification information.
4. How we use information
We may use personal information to:
- Provide, operate, maintain, and improve the Services.
- Process orders, payments, shipping, returns, refunds, and customer-service requests.
- Confirm product identity, certification, serial numbering, authenticity information, inventory status, and transaction records.
- Communicate about orders, account activity, offers, inquiries, disputes, security, or changes to our Services.
- Personalize content, remember preferences, and recommend products or content.
- Measure traffic, campaign performance, conversions, and customer engagement.
- Send marketing communications when permitted and honor unsubscribe or opt-out requests.
- Detect, investigate, prevent, and respond to fraud, abuse, unauthorized transactions, security incidents, or violations of platform rules.
- Maintain accounting, tax, legal, inventory, shipping, and business records.
- Establish, exercise, or defend legal claims and comply with applicable law, legal process, and government requests.
- Carry out a promotion or giveaway under separate official rules.
5. How we disclose information
We may disclose personal information to:
- Commerce and marketplace providers, including Shopify, Whatnot, eBay, Meta, and related services used to operate stores, listings, messages, checkout, analytics, or advertising.
- Payment providers, which process payment and fraud information under their own terms and privacy notices.
- Shipping and fulfillment providers, which receive information needed to deliver, insure, track, return, or investigate a shipment.
- Technology and business-service providers, including hosting, cloud storage, analytics, email, customer support, security, accounting, and professional advisers.
- Authorities and other parties when legally required, including to comply with law, court orders, lawful requests, protect rights and safety, prevent fraud, or enforce agreements.
- A successor organization, in connection with a merger, financing, reorganization, sale, transfer, bankruptcy, or acquisition involving all or part of the business.
We do not sell personal information for money. However, some disclosures involving cookies, pixels, analytics, advertising technology, or cross-context behavioral advertising may be treated as a “sale,” “sharing,” or “targeted advertising” under certain privacy laws. Where required, we provide an opt-out method.
6. Platform-specific information
Shopify
Our online store may be hosted by Shopify. Shopify may process account, device, checkout, payment, order, fraud, analytics, and customer-service information to provide its services. Depending on our configuration, Shopify tools may include Shop Pay, Shopify analytics, Shopify Network Intelligence, customer accounts, pixels, cookie-consent features, and data-sharing opt-out tools.
Facebook, Instagram, and Messenger
When you visit or interact with our Facebook Page, Instagram account, advertisements, lead forms, comments, shops, or Messenger conversations, Meta may collect and use information under Meta’s own privacy policy. RWDY may receive information you submit, engagement information, business insights, lead-form responses, messages, and transaction-related information. If configured, Meta pixels or the Conversions API may receive website or purchase events for analytics, measurement, security, and advertising.
Whatnot
When you interact with RWDY through Whatnot, Whatnot may collect and process account, identity-verification, payment, purchase, shipping, device, message, and marketplace information under Whatnot’s privacy policy. RWDY receives the information that Whatnot makes available to sellers and other information you choose to provide directly to us.
Other marketplaces
The same general approach applies when you interact with us through eBay or another marketplace: the marketplace processes information under its own privacy policy, and RWDY receives information needed to communicate, complete the transaction, ship the item, maintain records, prevent fraud, and provide support.
8. Marketing communications
You may unsubscribe from marketing emails by using the unsubscribe link in the message or by contacting us. We may still send non-marketing communications related to orders, security, transactions, account activity, legal notices, or customer-service requests.
When text-message marketing is offered, separate consent and opt-out instructions will be provided. Replying “STOP” to an eligible marketing program will stop future marketing texts from that program, subject to confirmation and legally permitted transactional messages.
Marketing messages will identify the sender and include required opt-out and contact information. We do not use an opt-out request for unrelated marketing.
9. Payments and transaction security
Payments are generally processed by Shopify Payments, Shop Pay, PayPal, Whatnot, eBay, Stripe, or another payment provider. RWDY generally does not receive or store complete payment-card numbers. Payment providers may use information for payment processing, identity verification, fraud prevention, disputes, compliance, and their own legally permitted purposes.
10. Retention
We retain personal information for as long as reasonably necessary to provide the Services and fulfill the purposes described in this Policy. Retention depends on the type of record, the relationship, legal requirements, fraud and security needs, accounting and tax requirements, warranty or return periods, dispute resolution, and platform requirements.
We may retain transaction, accounting, shipping, inventory, tax, consent, dispute, and legal records after a transaction ends. When information is no longer reasonably needed, we may delete, de-identify, or securely dispose of it, subject to legal and technical limitations.
11. Security and breach response
We use reasonable administrative, technical, and physical measures designed to protect personal information. These measures may include access controls, multi-factor authentication, encrypted services, security monitoring, backups, vendor controls, and limiting access to people who need information for a business purpose.
No method of transmission or storage is completely secure. If a security incident requires notice under applicable law, we will provide legally required notices and cooperate with relevant platforms, providers, insurers, authorities, and affected individuals as appropriate.
12. Privacy rights and choices
Depending on where you live and whether a law applies to RWDY, you may have the right to:
- Confirm whether we process your personal information and request access to it.
- Request correction of inaccurate personal information.
- Request deletion of certain personal information.
- Request a portable copy of certain personal information.
- Opt out of certain sales, sharing, targeted advertising, or profiling.
- Limit certain uses of sensitive personal information where applicable.
- Withdraw consent when processing is based on consent.
- Appeal a decision concerning a privacy request where applicable.
- Exercise privacy rights without unlawful discrimination.
To submit a privacy request, email privacy@rwdy.pro with the subject “Privacy Request.” Describe the request and the account, email address, order, or platform involved. We may request information reasonably necessary to verify your identity and protect against fraudulent requests.
An authorized agent may submit a request where permitted by law. We may require proof of authorization and may verify the request directly with you. We may deny or limit a request when permitted by law, including where records must be retained for fraud prevention, security, taxes, accounting, legal claims, or completion of a transaction.
13. California and other U.S. state disclosures
This section supplements the rest of the Policy for residents of states with applicable comprehensive privacy laws.
Categories collected
| Category | Examples | Business purposes | Typical recipients |
|---|---|---|---|
| Identifiers | Name, email, phone, address, username, IP address, account or order ID | Orders, support, accounts, shipping, security, marketing | Commerce platforms, payment providers, carriers, service providers |
| Customer and transaction records | Billing and shipping details, purchases, returns, offers, disputes | Complete transactions, accounting, support, fraud prevention | Platforms, payment providers, carriers, advisers |
| Commercial information | Products viewed, purchased, saved, collected, or discussed | Inventory, service, personalization, analytics, marketing | Platforms, analytics and marketing providers |
| Internet or device activity | Device data, browser data, page views, clicks, cart and checkout events | Security, site operation, analytics, advertising measurement | Shopify, Meta, analytics, advertising and security providers |
| Approximate geolocation | General location inferred from IP address | Security, localization, analytics, fraud prevention | Platforms, analytics and security providers |
| Audio, visual, or electronic information | Card photographs, messages, reviews, and content you submit | Identification, support, inventory, listings, promotions | Platforms and service providers involved in the request |
| Inferences and preferences | Likely product interests, favorite sports, players, teams, or sets | Recommendations, service improvement, marketing where permitted | Commerce, analytics, and marketing providers |
| Sensitive personal information | Account credentials processed by platforms; payment details processed by payment providers; precise information only when necessary and voluntarily provided | Account access, payment, security, fraud prevention, legal compliance | Relevant platform, payment, security, or legal provider |
Sale, sharing, and targeted advertising
We do not sell personal information for money. Advertising and analytics technologies may involve disclosures that some laws define as sale, sharing, or targeted advertising. Eligible residents may opt out through the cookie banner, a “Your Privacy Choices” or data-sharing opt-out page, a recognized opt-out preference signal, or by emailing privacy@rwdy.pro.
Minors
We do not knowingly sell or share the personal information of individuals under 16 for cross-context behavioral advertising. Our Services are not directed to children under 13.
Notice at collection
At or before collection, we may provide a shorter notice that links to this Policy and identifies the categories collected and the purposes of collection. We do not collect additional categories or use information for materially unrelated purposes without providing notice when required.
14. International visitors
RWDY is based in the United States. If you access the Services from another country, information may be transferred to and processed in the United States and other locations where our platforms and service providers operate.
Where European Economic Area, United Kingdom, Swiss, or similar privacy law applies, we may rely on the following legal bases:
- Contract: to process orders, deliver products, provide support, and administer accounts.
- Legitimate interests: to operate and improve the business, prevent fraud, secure systems, maintain records, and market similar products where permitted.
- Consent: for non-essential cookies, certain advertising, and marketing when consent is required.
- Legal obligation: for tax, accounting, consumer-protection, sanctions, fraud, legal-process, and regulatory requirements.
Where applicable, you may object to or restrict processing, withdraw consent, request erasure or portability, and lodge a complaint with your local supervisory authority. Contractual and other lawful transfer mechanisms may be used by our providers for international transfers.
15. Children and minors
Our Services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child has submitted personal information to us, contact us so we can review and delete it when appropriate.
Some marketplaces have their own minimum-age requirements. Whatnot requires an account holder to be at least 18. A person under the age of legal majority should use our Services only with the involvement and permission of a parent or legal guardian.
16. Changes to this Policy
We may update this Policy to reflect changes in law, our business, platforms, technology, or data practices. The revised version will display a new effective date. When required, we will provide additional notice of material changes.
17. Contact us
RWDY Holdings
Including the RWDY Sports brand
United States
Privacy questions and requests: privacy@rwdy.pro
Please use the subject line “Privacy Request.” Do not send passwords, complete payment-card numbers, authentication codes, or Social Security numbers.