Privacy policy

Last updated: September 1, 2026

1. Who we are and how to reach us

Noserider Surf Club ("Noserider Surf Club", "we", "us", "our") operates the online store at noseridersurf.com. This policy explains what we collect when you use our site, why we collect it, who we share it with, how long we keep it, and the choices you have about it.

Postal address: 3916 N. Potsdam Ave., Sioux Falls, SD 57104, United States
Email: [email protected]

2. What we collect

You give us:

Name, email address, phone number, shipping and billing address
Order details and order history
Payment details, which go directly to our payment processor - we never see or store your full card number
Size, fit and preference information you share with us when you ask for advice
Messages you send us by email, contact form, WhatsApp or social media
Product reviews, testimonials and photos you submit
Your email address and preferences when you subscribe to our newsletter

We collect automatically when you visit:

IP address, browser type, device type, operating system and language
Pages viewed, time on site, referring and exit pages, and search terms used on our site
Cookie identifiers and similar identifiers (see Section 7)
Session activity, including recordings of mouse movement, scrolling and clicks on our pages, collected through an analytics tool so we can see where our site confuses people

We receive from others:

Order, fulfillment and delivery status from our shipping partners
Fraud and risk signals from our payment and platform providers
Aggregated campaign performance from advertising platforms

Please do not send us sensitive personal information - health information, government identifiers, financial account details - by email or through our forms. If you do, we will delete it once the matter you contacted us about is resolved.

3. How we use it

To take, process, pack and ship your order, and to handle returns and exchanges
To send order confirmations, shipping and tracking notices
To answer your questions about orders, sizing and fit
To keep accounting, tax and customs records the law requires
To detect and prevent fraud and abuse
To understand how our site is used and improve it
To send you marketing email and SMS, where you have signed up for them
To run our advertising on other platforms
To publish reviews and testimonials you submitted for that purpose

4. Who we share it with

We do not sell your personal data for money, and we do not rent or trade our mailing list. We do share limited event and identifier data with advertising platforms as described below, which some privacy laws treat as a "sale" or "share" of personal information - Section 7 explains how to opt out. Beyond that, we share data with the partners a store needs to run, limited to what each needs to do its job:

E-commerce platform and hosting. Shopify Inc. hosts our store and processes orders, payments and store analytics on our behalf.
Payment processing. Our payment providers handle card and wallet transactions. They receive your payment and billing details directly.
Shipping and fulfillment. Our couriers and warehouse partners receive your name, address, phone number and order contents so they can deliver to you. Cross-border shipments require us to give customs authorities the information they demand.
Email and SMS marketing. Klaviyo sends our newsletter and order-related messaging.
Site analytics and session analytics. Microsoft Clarity records site usage and session activity, including session replays, so we can find and fix problems in the store.
Store apps. A small number of Shopify apps add store functions such as product bundling and merchandising, and see order and browsing data in the course of doing so.
Business tools. Google Workspace (email, documents and spreadsheets) is where our team handles customer service, returns and order questions, so messages you send us and order details connected to them are processed there.
Advertising platforms. We advertise on platforms such as Meta, and use tools they provide (such as pixels and audience matching) that involve sharing event and identifier data with them. Section 7 covers your controls; their own privacy policies cover what they do.
Professional advisers. Our accountants and, if needed, our lawyers.
Authorities. Where we are legally compelled, or where we need to establish, exercise or defend a legal claim.

5. How long we keep it

Order and transaction records: as long as tax, accounting and customs law requires us to keep them.
Customer service correspondence: for as long as we reasonably need it to handle the matter and any follow-up, so we have the history if you contact us again.
Marketing subscriber records: until you unsubscribe, plus a short suppression record so we do not email you again by mistake.
Analytics and session data: each tool applies its own retention period, and we do not keep this data longer than the tool does.
Reviews and testimonials you published: until you ask us to take them down.

When we no longer need data, we delete or anonymize it.

6. Where it goes

Our store platform and most of our service providers operate in the United States and Canada, our customer service and part of our fulfillment operate from Indonesia (our Bali store and team), and our products ship worldwide - so your data may be processed outside your own country. Where the law of your country restricts international transfers, we rely on the contractual data-protection commitments our providers make, including standard contractual clauses where they offer them, and on the transfer being necessary to fulfill the order or request you made.

7. Cookies, tracking and your controls

A cookie is a small text file a website asks your browser to store. We use cookies and similar technologies to:

keep your cart and your session working (strictly necessary - the store breaks without them)
remember your preferences, such as language and currency
measure how the store is used, so we can improve it
measure and target our advertising

Your controls: your browser lets you refuse or delete cookies; where the law of your country requires consent before we set analytics or advertising cookies, we ask first and you can change your answer at any time; and the advertising platforms we use offer their own opt-outs for interest-based advertising.

Our site does not currently respond to browser "Do Not Track" signals, because there is no agreed standard for what a site should do when it receives one.

8. Your rights and choices

Wherever you live, you can email [email protected] to:

Access the personal data we hold about you and get a copy
Correct data that is wrong or out of date
Delete your data, except what we are legally required to keep (an invoice, for example)
Unsubscribe from marketing at any time - every marketing email carries a working one-click unsubscribe link
Object to a use of your data, and we will tell you what we can do

We honor these requests regardless of whether a statute obliges us to in your particular state or country. We will verify your identity first so we do not hand your data to somebody else, we will respond within the time your local law requires or 45 days, whichever is shorter, and we will tell you why if we cannot do what you asked. Exercising these rights is free and we will not treat you worse for it.

If you live in a US state with a consumer privacy law, in the European Union or the United Kingdom, in Australia, or anywhere else with mandatory privacy protections, those laws give you rights that no policy of ours can take away - including, in the EU and UK, the right to complain to your data protection authority.

9. Children

Our store is not directed at children, and we do not knowingly collect personal information from children under 13. If you believe a child has given us their data, email us and we will delete it.

10. Security, and what happens if something goes wrong

We use HTTPS across the store, we rely on providers that maintain their own security programmes, and we limit access to personal data to the people who need it to do their jobs. Payment card data is encrypted in transit and never reaches our inbox.

Email is not a secure medium. Please do not send us card numbers, passwords or identity documents by email. If you do, you do so at your own risk.

No system is perfect, and we will not pretend otherwise. If a data breach affects your personal information, we will notify you and the relevant authorities as applicable law requires, and we will tell you what was exposed, what it means for you, and what we are doing about it.

11. Marketing email

We send marketing email only to people who signed up for it. In compliance with the CAN-SPAM Act and the equivalent rules elsewhere, every message we send identifies us clearly, includes our postal address, tells you how to reach us, and carries a working unsubscribe link. Unsubscribing takes one click and we act on it promptly.

12. Reviews and testimonials

In line with FTC guidance on endorsements and testimonials: reviews on our site are real submissions from real people, published with their consent and reproduced as written, except that we may fix a typo or shorten something long. Where a review comes from someone who received the product from us as a gift, or who has another material connection to us, we disclose that alongside the review. Reviews describe individual experiences and are not a promise that you will have the same one. Opinions in a review belong to the person who wrote it, not to us. We may remove a submission that is unlawful, abusive or off-topic.

13. Links to other sites

Our site links to other websites, including our social media profiles. Once you follow a link out, you are on somebody else's site under somebody else's privacy policy. A link is not an endorsement. Please read their policy before you give them anything.

14. Governing law

This Privacy Policy is governed by the laws of the State of South Dakota, United States. That choice does not take away privacy rights your own state's or country's law gives you and does not allow to be waived - where your local law gives you a stronger protection than this policy does, your local law wins.

15. Changes to this policy

We may update this policy. When we do, we change the "Last updated" date at the top. If a change materially reduces your rights or materially widens how we use your data, we will post the new version at least 14 days before it takes effect and, where we hold your email address, tell you by email. We will not use personal data you already gave us in a way that is materially inconsistent with the policy you gave it under, without asking you first.

16. Contact

Questions about this policy, or a request under Section 8:

Noserider Surf Club
3916 N. Potsdam Ave.
Sioux Falls, SD 57104
United States
[email protected]

Shop All