Privacy Policy

Effective Date: October 24, 2026

COMPANY NAME: Hangzhou Xidun Technology Co., Ltd.

COMPANY ADDRESS: A0022, Building 1, No. 298 Yunxi Road, Cangqian Street, Yuhang District, Hangzhou City, Zhejiang Province, China

Postal Code: 311121

Email: service@heyhuckle.com

Contact Phone Number: +1 (803) 331-9122

Customer Support: Monday through Friday, 9:00 AM–6:00 PM Pacific Time

Heyhuckle is owned and operated by Hangzhou Xidun Technology Co., Ltd.

This Privacy Policy describes how Hangzhou Xidun Technology Co., Ltd., operating under the Heyhuckle brand, collects, uses, shares, stores, and protects personal information when customers visit our website, explore American football accessories, make purchases, request support, or otherwise interact with our online store.

In this policy, "Heyhuckle," "we," "us," and "our" refer to Hangzhou Xidun Technology Co., Ltd.

We recognize the importance of handling customer information responsibly. Our goal is to explain our data practices clearly while providing the information needed to understand and exercise applicable privacy rights.

This Privacy Policy should be read alongside our other applicable store policies, including:

• Terms of Service

• Terms of Purchase

• Shipping Policy

• Return and Refund Policy

• Your Privacy Choices

The handling of personal information may vary depending on the features used, the services enabled on our website, and applicable privacy laws.

1. Personal Information We Collect

The information we collect or process depends on how customers interact with our online store.

Information You Provide Directly

We may collect personal information that you provide when you:

• Browse or purchase Heyhuckle products

• Create or use a customer account, where available

• Place or attempt to place an order

• Contact our customer support team

• Ask about football equipment specifications or sizing

• Request an order change or cancellation

• Submit a return, refund, or product-related inquiry

• Subscribe to promotional communications, where offered

• Submit product feedback or reviews, where supported

• Participate in promotions, where available

• Submit a privacy-related request

• Otherwise communicate with us

Depending on the interaction, this information may include:

• Full name

• Email address

• Telephone number

• Billing address

• Shipping address

• Order number

• Purchase and transaction history

• Products viewed or purchased

• Selected product sizes, colors, or variations

• Equipment preferences voluntarily provided

• Customer support messages

• Return and refund details

• Marketing preferences, where applicable

• Other information you choose to provide

For example, customers seeking help with football receiver gloves, protective mouthguards, knee pads, or equipment bags may voluntarily provide sizing or compatibility information.

We use such details to understand the inquiry and provide relevant product assistance.

Payment and Transaction Information

When you make a purchase, payment information may be processed through Shopify and the authorized payment providers available at checkout.

Relevant transaction information may include:

• Payment method

• Billing information

• Transaction date and amount

• Payment confirmation or status

• Transaction authorization details

• Refund information

• Fraud-prevention indicators

• Limited or tokenized payment information

Payment service providers handle the information necessary for their services according to their applicable policies and legal requirements.

Please do not send full payment card numbers, card security codes, passwords, or other unnecessary sensitive financial information through email.

Information Collected Automatically

When you visit our website, Shopify and other service providers supporting our store may collect certain technical or usage information, depending on the technologies enabled and applicable privacy settings.

This information may include:

• IP address

• Browser type and version

• Operating system

• Device type

• Browser or device identifiers

• Approximate geographic location

• Referring website or traffic source

• Pages visited

• Products viewed

• Website search activity

• Links clicked

• Shopping cart interactions

• Checkout activity

• Session dates and times

• Cookies or similar identifiers

• Website performance information

• Technical errors and diagnostic data

The actual information collected depends on the website configuration, technologies in use, browser settings, and applicable privacy choices.

Information From Service Providers and Other Sources

Where relevant to our operations, we may receive information from:

• Shopify and ecommerce technology providers

• Payment service providers

• Fraud-prevention services

• Shipping carriers

• Fulfillment and logistics partners

• Customer support providers

• Email or marketing providers, where used

• Analytics or advertising providers, where enabled

• Other authorized service providers

This information may include order updates, payment status, shipment tracking, delivery confirmations, customer service records, or information needed to investigate a transaction.

We seek to process information reasonably related to operating our store and providing requested services.

2. How We Collect Personal Information

We may obtain personal information through several channels, depending on your interactions with Heyhuckle.

These channels include:

• Information submitted directly by customers

• Website browsing and checkout interactions

• Customer support communications

• Account features, where available

• Cookies and similar technologies, where enabled

• Shopify and other ecommerce services

• Payment processing providers

• Shipping and fulfillment partners

• Authorized business and technology services

• Other sources permitted under applicable law

For example, placing an order may involve collecting contact, payment, and delivery information.

Asking about the compatibility of a helmet carry bag or the sizing of football gloves may involve information voluntarily included in your inquiry.

The information involved depends on the particular service or interaction.

3. How We Use Personal Information

We may use personal information for legitimate business operations and other purposes permitted under applicable law.

Processing and Fulfilling Orders

We may process relevant information to:

• Receive and confirm purchases

• Process payments

• Prepare orders for fulfillment

• Communicate order confirmations

• Arrange product shipments

• Provide tracking information

• Handle delivery inquiries

• Review cancellation or modification requests

• Process authorized returns and refunds

• Investigate order discrepancies

• Maintain transaction records

Providing Product Information and Customer Support

Heyhuckle focuses on American football accessories, protective equipment, storage solutions, and training essentials.

We may use information provided by customers to respond to inquiries concerning:

• Receiver glove sizing and construction

• Football grip towels

• Wrist coach playbooks and play-card compatibility

• Protective mouthguard specifications

• Padded forearm sleeves

• Football knee pads

• Equipment duffel bags

• Helmet carry bags

• Cleat and shoe organizers

• Agility training ladders

• Football training cone sets

• Adjustable kicking tees

• Product dimensions and materials

• Product care instructions

• Equipment compatibility

• Package contents

• Order-related concerns

Such information allows us to address the customer's specific inquiry and provide relevant product details where available.

Operating and Improving Our Website

Depending on the features and services enabled, we may process information to:

• Maintain website functionality

• Support shopping cart and checkout features

• Detect and resolve website errors

• Improve navigation and accessibility

• Review website performance

• Understand product-page engagement

• Improve product information

• Evaluate customer support processes

• Remember applicable preferences

• Maintain the reliability of our ecommerce services

Analytics and measurement activities depend on the technologies actually enabled and any applicable consent requirements.

Communicating With Customers

We may use contact information to:

• Answer product questions

• Confirm orders

• Provide payment notifications

• Send shipping and delivery updates

• Respond to customer support requests

• Communicate return or refund information

• Provide important service notices

• Send policy-related notifications

• Send promotional communications where offered and legally permitted

Customers may unsubscribe from eligible marketing communications using the available opt-out instructions or by contacting us.

Unsubscribing from marketing messages does not prevent necessary transactional or service communications.

Security and Fraud Prevention

We and relevant service providers may process information when reasonably necessary to:

• Verify transactions

• Identify suspicious activity

• Prevent unauthorized payments

• Investigate potential fraud

• Protect customer accounts

• Maintain website security

• Prevent misuse of our services

• Address security incidents

• Protect our legal rights and those of others

Legal and Compliance Purposes

We may process information to:

• Maintain required business records

• Comply with applicable tax and accounting obligations

• Respond to lawful requests

• Address consumer protection requirements

• Investigate disputes

• Establish, exercise, or defend legal claims

• Meet other applicable legal obligations

4. How We Disclose Personal Information

We may disclose relevant personal information to authorized parties when reasonably necessary to operate our store, complete transactions, provide requested services, maintain security, or comply with applicable law.

Shopify and Ecommerce Service Providers

Shopify and other ecommerce technology providers may process information required to support website hosting, shopping cart functions, checkout, order management, account features, data storage, and related services.

The information processed depends on the relevant technology and enabled functionality.

Payment Processing Providers

Authorized payment providers may process information necessary to:

• Complete payments

• Verify transactions

• Detect payment fraud

• Process refunds

• Resolve payment disputes

• Meet applicable regulatory requirements

These providers may have their own privacy notices and legal obligations.

Shipping and Fulfillment Partners

To arrange delivery, relevant information may be provided to shipping carriers, warehouses, fulfillment partners, and logistics service providers.

This may include:

• Recipient name

• Shipping address

• Contact telephone number

• Email address where needed

• Purchased items

• Shipment details

• Tracking information

• Delivery instructions

Information should be limited to what is reasonably necessary for the relevant service.

Technology and Business Service Providers

Depending on our store configuration, service providers may assist with:

• Website maintenance

• Data hosting and storage

• Customer communications

• Email delivery

• Customer support

• Fraud prevention

• Cybersecurity

• Website analytics

• Advertising measurement

• Business administration

• Accounting and legal compliance

The involvement of any particular service provider depends on the services actually used.

Legal and Safety Disclosures

We may disclose personal information when reasonably necessary to comply with applicable laws, respond to lawful requests, investigate security concerns, protect rights or safety, or establish, exercise, or defend legal claims.

Business Changes

If Hangzhou Xidun Technology Co., Ltd. becomes involved in a merger, acquisition, restructuring, financing transaction, asset transfer, or similar business arrangement, relevant personal information may be transferred or disclosed where permitted by applicable law.

5. Cookies and Similar Technologies

Heyhuckle and the service providers supporting our online store may use cookies, pixels, tags, local storage, and similar technologies, depending on the website's actual configuration.

These technologies may support essential website functions, including shopping-cart operations, checkout, security, and preference storage. Depending on the services enabled, they may also be used for website analytics, performance measurement, marketing measurement, or advertising.

The specific cookies and tracking technologies used by Heyhuckle depend on the website's configuration, installed applications, integrations, and service providers. The inclusion of a technology or purpose in this policy does not mean that it is currently enabled.

Where applicable law requires consent before certain non-essential cookies or similar technologies are used, the relevant technologies must be handled in accordance with applicable consent requirements.

You may be able to review, delete, block, or restrict cookies through your browser settings. Available controls vary by browser and device. Restricting certain cookies may affect shopping-cart functionality, checkout, or other website features.

The availability of a cookie consent banner, preference-management interface, or automated consent tool depends on the functionality actually configured on our website. This policy does not represent that any particular tool or control is currently available unless it has been implemented.

Where a cookie preference-management tool is available, the options and controls it provides will depend on its actual functionality and applicable legal requirements.

For privacy-related questions or requests, please contact us at service@heyhuckle.com with the subject line "Privacy Rights Request". We will review and respond to applicable requests in accordance with relevant privacy laws.

6. Analytics, Advertising, and Tracking Technologies

Online stores may use analytics or advertising technologies to understand website activity, measure marketing performance, or support advertising services.

Whether Heyhuckle uses particular analytics or advertising services depends on the pixels, apps, integrations, and other technologies actually enabled.

If such services are used, relevant information may include website interactions, page visits, product views, transaction events, browser or device identifiers, or other data made available to the service.

The processing of this information depends on the provider, the technology's configuration, applicable consent requirements, and your privacy choices.

We do not identify any particular analytics provider, advertising platform, or tracking pixel as active in this policy unless its use has been verified.

Where required by applicable law, relevant consent and opt-out mechanisms must be provided and respected.

7. Personal Information Sales, Sharing, and Targeted Advertising

Certain privacy laws define "sale," "sharing," or targeted advertising broadly. Depending on the circumstances, these terms may apply to certain disclosures of personal information to advertising or analytics partners, even when no money is exchanged.

Whether Heyhuckle's actual activities fall within these definitions depends on the services enabled, the information disclosed, the purposes of processing, and applicable law.

We do not make a blanket representation in this policy that Heyhuckle either sells or shares personal information, or that it never does so, without verifying the relevant data flows and technologies.

Where applicable privacy laws provide rights to opt out of certain sales, sharing, or targeted advertising, those rights will be addressed through the mechanisms required by law.

If an applicable opt-out mechanism is provided, its scope and operation must match the actual processing activities. A policy statement alone does not activate or implement an opt-out.

8. Global Privacy Control and Browser Privacy Signals

Some browsers and browser extensions provide privacy signals, including Global Privacy Control (GPC), that may communicate a user's privacy preferences.

Whether Heyhuckle's website detects and honors a particular signal depends on the technical configuration, Shopify features, installed applications, and applicable legal requirements.

We do not represent that GPC or any other browser privacy signal is currently detected or honored unless that functionality has been verified.

Where applicable law requires a business to recognize a qualifying privacy signal, the relevant mechanism must be implemented and handled in accordance with that law.

9. Marketing Communications

Heyhuckle may offer promotional communications when the relevant subscription or marketing features are enabled.

If you choose to subscribe, information processed may include:

• Email address

• Telephone number, where applicable

• Subscription status

• Communication preferences

• Relevant marketing consent records

Promotional messages may relate to football accessories, training products, product announcements, or store offers.

The availability of email marketing, SMS marketing, and other promotional features depends on our actual website and service configuration.

We will handle marketing communications in accordance with applicable consent and communication laws.

Where promotional emails are sent, you may use the unsubscribe mechanism included in the message, where available.

You may also contact service@heyhuckle.com regarding applicable marketing preferences.

If SMS marketing is offered, relevant opt-out instructions will be provided through the applicable messaging service.

Opting out of promotional communications does not prevent necessary messages concerning purchases, payments, shipments, returns, refunds, or customer support.

10. Legal Bases for Processing Where Applicable

Depending on the jurisdiction and applicable law, personal information may be processed on one or more legally recognized bases.

These may include:

• Performing a contract with a customer

• Taking steps requested before entering into a contract

• Complying with legal obligations

• Pursuing legitimate interests where permitted

• Obtaining consent where required

• Establishing, exercising, or defending legal claims

• Other lawful grounds available under applicable law

The appropriate legal basis depends on the information involved, the purpose of processing, and the applicable legal requirements.

Where processing is based on consent, individuals may have the right to withdraw that consent.

Withdrawal does not affect processing that was lawful before the withdrawal.

11. Your Privacy Rights and Requests

Depending on your location and applicable law, you may have rights relating to your personal information.

These rights may include:

• Requesting access to personal information

• Requesting a copy of certain information

• Requesting correction of inaccurate information

• Requesting deletion of personal information

• Requesting information about how personal information is processed

• Opting out of certain sales or sharing activities

• Opting out of certain targeted advertising

• Withdrawing consent where applicable

• Appealing certain privacy-request decisions where required by law

• Exercising other rights provided by applicable privacy laws

These rights may be subject to legal conditions, exceptions, identity-verification requirements, or limitations.

Not every right applies in every jurisdiction or circumstance.

How to Submit a Privacy Request

To submit a request, please contact us by email.

Email: service@heyhuckle.com

Subject: Privacy Rights Request

Please explain the nature of your request and provide information reasonably necessary for us to identify the relevant records.

Where appropriate, we may request additional information to verify your identity or your authority to act on behalf of another person.

We will seek to limit verification information to what is reasonably necessary.

Requests will be reviewed and answered according to applicable legal requirements.

Our designated contact method for privacy requests is email. We do not represent that an online privacy-request form or automatic preference-management function is available through this email process.

Authorized Agents and Appeals

Where applicable law permits an authorized agent to submit a privacy request, we may require appropriate evidence of authorization.

We may also need to verify the relevant individual's identity where legally permitted or required.

If applicable law provides a right to appeal a privacy-request decision, we will provide appropriate instructions through our response or the legally required process.

For further information about available privacy rights and how to exercise them, please refer to our Your Privacy Choices page.

12. Data Retention

We retain personal information for as long as reasonably necessary to support the purposes described in this Privacy Policy, subject to applicable legal requirements.

Retention periods may depend on:

• Order processing and fulfillment

• Customer service requirements

• Return and refund inquiries

• Payment disputes

• Tax and accounting obligations

• Recordkeeping requirements

• Security and fraud prevention

• Legal claims or investigations

• The purpose for which information was collected

Different types of records may be subject to different retention requirements.

For example, transaction information may need to be retained for legally required accounting purposes, while certain customer support information may be retained only as long as reasonably necessary to address a request.

Where information is no longer required for a lawful purpose, it should be deleted, anonymized, or otherwise handled in accordance with applicable requirements and lawful retention exceptions.

We do not state a single retention period for all personal information because the appropriate period may vary by information category and legal obligation.

13. Data Security

We seek to apply reasonable safeguards appropriate to the nature of our business and the services used to protect personal information against unauthorized access, misuse, alteration, loss, or disclosure.

These safeguards may include:

• Security functions provided by ecommerce service providers

• Appropriate account and access controls

• Secure transaction-processing arrangements

• Internal procedures for handling customer information

• Technical and operational protections appropriate to the relevant services

The safeguards available depend on the systems and providers used.

No website, electronic communication, or data-storage system can be guaranteed to be completely secure.

Customers should avoid emailing passwords, complete payment card numbers, payment security codes, or other unnecessary sensitive information.

If you believe information associated with your Heyhuckle account or order has been compromised, please contact:

Email: service@heyhuckle.com

14. International Data Transfers

Heyhuckle is owned and operated by Hangzhou Xidun Technology Co., Ltd., whose company address is located in Zhejiang Province, China.

Our ecommerce operations may involve service providers that process or access personal information in different countries.

Depending on the services used, information may be processed outside the country or region in which a customer resides.

For example, ecommerce hosting providers, payment processors, shipping partners, and other authorized service providers may operate across multiple jurisdictions.

The specific locations involved depend on the services and processing arrangements actually used.

Where applicable law requires safeguards, disclosures, or other conditions for international transfers, the relevant processing must comply with those requirements.

15. Children's Privacy

Heyhuckle offers American football accessories, training tools, and related equipment.

Some products may be suitable for youth athletes depending on their specifications, sizing, and intended use. However, our online store is intended for customers who are legally permitted to make purchases or who act with appropriate parental or guardian involvement.

We do not intend to knowingly collect personal information directly from children in circumstances that require parental consent or other legal protections without meeting the applicable requirements.

If you believe a child has provided personal information to our store in a manner that violates applicable law, please contact us.

Email: service@heyhuckle.com

We will review the concern and take appropriate action as required by applicable law.

16. Third-Party Websites and Services

Our website may contain links to independent third-party websites, payment services, shipping services, social platforms, or other external resources.

These parties may maintain their own privacy notices, data-processing practices, and security procedures.

Heyhuckle does not control the independent privacy practices of third parties.

We encourage customers to review the relevant privacy information before submitting personal information directly to external websites or service providers.

A link to an external service does not necessarily mean that Heyhuckle endorses all of that service's practices or representations.

17. Changes to This Privacy Policy

We may revise this Privacy Policy when necessary to reflect changes in:

• Business operations

• Website functionality

• Ecommerce services

• Payment or fulfillment arrangements

• Technology integrations

• Data-processing practices

• Applicable legal requirements

• Customer privacy rights

When changes are made, we will update the Effective Date displayed at the beginning of this policy.

Where applicable law requires additional notice or consent for material changes, we will provide the required notice or obtain consent as appropriate.

We encourage customers to review this page periodically for current information about our privacy practices.

18. Contact Us

If you have questions about this Privacy Policy, the handling of personal information, or the privacy rights available to you, please contact us using the details below.

Brand: Heyhuckle

Operating Company: Hangzhou Xidun Technology Co., Ltd.

COMPANY ADDRESS: A0022, Building 1, No. 298 Yunxi Road, Cangqian Street, Yuhang District, Hangzhou City, Zhejiang Province, China

Postal Code: 311121

Country/Region: China

Email: service@heyhuckle.com

Contact Phone Number: +1 (803) 331-9122

Customer Support: Monday through Friday, 9:00 AM–6:00 PM Pacific Time

Heyhuckle is owned and operated by Hangzhou Xidun Technology Co., Ltd.

For privacy-related requests, please email:

service@heyhuckle.com

Suggested Subject: Privacy Rights Request

We will review applicable requests and respond according to relevant privacy laws.