Privacy policy

Privacy Policy

Last updated: November 9, 2025

Steel Monkey Superfoods operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Steel Monkey Superfoods is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

How We Collect and Use Your Personal Information

When we use the term “personal information,” we are referring to information that identifies, relates to, describes, or can be associated with you. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

  • Contact details: name, address, billing address, shipping address, phone number, and email address.

  • Financial information: credit/debit card and financial account numbers, payment card information, transaction details, form of payment, payment confirmation, and other payment details.

  • Account information: username, password, security questions, preferences, settings, and other information used for account security purposes.

  • Transaction information: items you view, put in your cart, add to your wishlist, purchase, return, exchange, or cancel, loyalty points, product reviews, referrals, or gift cards saved or submitted by you.

  • Communications with us: information you choose to include in communications with us (e.g., customer support inquiries).

  • SMS opt-in data: if you opt in to receive SMS messages, we collect your phone number and related consent metadata (time/date, source, consent language) to send you transactional and promotional messages (e.g., order/status updates, abandoned-cart reminders, and marketing offers).

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

Information We Collect about Your Usage

We may automatically collect certain information about your interaction with the Services (“Usage Data”). To do this, we may use cookies, pixels, and similar technologies (“Cookies”). Usage Data may include:

  • Device and browser information: device type, operating system, browser type/version, and other unique identifiers.

  • Network information: IP address and information about your network connection.

  • Interaction data: how you access and use our Site and your account, including pages visited, items viewed, and time spent on the Site.

  • Abandoned-cart data (SMS): Steel Monkey Superfoods’s website uses cookies and/or plugins to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages via SMS.

Information We Obtain from Third Parties

We may obtain information about you from third parties, including from vendors and service providers who collect information on our behalf, such as:

  • Service providers: companies who support our Site and Services (e.g., Shopify).

  • Payment processors: who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment to fulfill your orders and provide requested products or services.

  • Analytics and advertising partners: when you visit our Site, open or click on emails or SMS messages we send you, or interact with our Services or advertisements, we or third parties may automatically collect certain information using online tracking technologies such as pixels, web beacons, SDKs, third-party libraries, and cookies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy.

How We Use Your Personal Information

  • Provide, tailor, and improve the Services: to process payments; fulfill orders; remember preferences and items of interest; send notifications related to your account, purchases, returns, exchanges, or other transactions; create, maintain, and manage your account; arrange for shipping; facilitate returns/exchanges; enable reviews; and create a customized shopping experience.

  • Marketing and advertising: to send marketing, advertising, and promotional communications by email, text message, or postal mail, and to show you online advertisements for products or services on the Services or other websites (including based on your activity on the Services). If you are an EEA resident, the legal basis is our legitimate interests (Art. 6(1)(f) GDPR) or your consent for SMS marketing (Art. 6(1)(a) GDPR).

  • Security and fraud prevention: to authenticate accounts; provide a secure payment/shopping experience; detect, investigate, or act regarding possible fraudulent, illegal, unsafe, or malicious activity; protect public safety; and secure our Services (Art. 6(1)(f) GDPR for EEA residents).

  • Communicating with you: to provide customer support, respond to you, provide effective services, and maintain our relationship (Art. 6(1)(f) GDPR for EEA residents).

  • Legal reasons: to comply with applicable law or respond to valid legal process, and to enforce or investigate potential violations of our terms or policies.

SMS Marketing Program (How We Handle Phone Numbers and Consent)

We offer an optional SMS program that may include order updates, customer support messages, abandoned-cart reminders, and promotional offers. When you provide your phone number and consent to receive SMS messages:

  • What we collect: your phone number, consent details (including timestamp, source, and consent language), associated customer/account and interaction data (e.g., whether you clicked a link in an SMS), and abandoned-cart indicators captured via cookies/plugins as described above.

  • How we use it: to operate the SMS program (e.g., send messages you opted into, personalize content, cap frequency, measure performance), to maintain suppression lists (e.g., honoring STOP requests), and to prevent fraud/abuse.

  • Who we share it with: we do not sell or share SMS opt-in data or consent with non-affiliated third parties. We may disclose your SMS data only to our processors/service providers who help us deliver the SMS program (e.g., Shopify and SMS platforms) under contractual confidentiality obligations and solely to provide these services.

  • Your choices: you may opt out at any time by replying “STOP”; for help, reply “HELP.” Message frequency varies. Message and data rates may apply. Your consent is not a condition of purchase. After you opt out, we retain your number on a suppression list to ensure we honor future opt-out requests.

  • Data retention: we keep SMS opt-in data for as long as necessary to operate the program and comply with law, and we maintain suppression records after you opt out.

Cookies

Like many websites, we use Cookies on our Site. For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics, and to better understand user interaction (in our legitimate interests to administer, improve, and optimize the Services). We may also permit third parties and service providers to use Cookies on our Site to better tailor services, products, and advertising on our Site and other websites.

Most browsers automatically accept Cookies by default, but you can set your browser to remove or reject Cookies. Removing or blocking Cookies can negatively impact your user experience and may cause some of the Services to work incorrectly. Blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners.

Please note that while your browser may allow you to transmit a “do not track” signal, like many websites, our Site is not designed to respond to such signals. To learn more about “do not track” signals, visit http://www.allaboutdnt.com/.

Location Data and Location-Based Services

If you permit or enable location-related features, we may collect and process location information to support the Services.

  • What we collect: (i) Approximate location derived from your IP address or general network information when you browse our Site; and (ii) precise device location if you grant permission in your browser or device settings.

  • How we use it: to display local currency and content; estimate taxes, shipping methods, and delivery times; detect and prevent fraud; comply with regional requirements; and, where permitted, provide localized promotions or availability notices.

  • Your choices: you can deny or revoke precise location permissions in your browser/device settings and you can block/clear Cookies (which may affect IP-based inferences). If you disable location permissions, some features may not function as intended.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for contract fulfillment purposes, legitimate purposes, and other reasons subject to this Privacy Policy. Such circumstances may include:

  • With Shopify, vendors, or other processors who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).

  • With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices.

    • Important: The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

  • When you direct, request, or otherwise consent to our disclosure of certain information (e.g., shipping a gift to a recipient; social media widgets; login integrations).

  • With our affiliates or within our corporate group in our legitimate interests to run a successful business.

  • In connection with a business transaction (e.g., merger or bankruptcy), to comply with legal obligations (including subpoenas, search warrants, and similar requests), to enforce terms/policies, and to protect or defend the Services, our rights, and the rights of users or others.

We have in the past 12 months disclosed the following categories of personal information and sensitive personal information for the purposes set out above in “How We Collect and Use Your Personal Information” and “How We Disclose Personal Information”:

  • Identifiers: basic contact details and certain order/account information.

  • Personal information categories in the California Customer Records statute: basic contact details and certain order/account information.

  • Commercial information: order information, shopping information, and customer support information.

  • Internet or similar network activity: Usage Data.

  • Geolocation data: locations determined by IP address or other technical measures, and—if you granted permissions—device location.

  • Inferences: drawn from the above to create a customized shopping experience.

Categories of recipients: Shopify, vendors, and service providers (e.g., internet service providers, payment processors, fulfillment partners, customer-support partners, and data-analytics providers); business and marketing partners (excluding SMS opt-in data and consent); and affiliates.

We do not use or disclose sensitive personal information without your consent or for the purpose of inferring characteristics about you.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information at the Shopify Privacy Portal.

Third-Party Websites and Links

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children’s Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies. For SMS, we retain opt-in data while you participate in the program and maintain a suppression record after you opt out to ensure compliance with your preferences.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances, and, in certain cases, we may decline your request as permitted by law.

  • Right to Access / Know

  • Right to Delete

  • Right to Correct

  • Right of Portability

  • Right to Opt Out of Sale/Sharing or Targeted Advertising (including honoring Global Privacy Control signals where applicable)

  • Objection/Restriction (UK/EEA)

  • Withdrawal of Consent (including by replying “STOP” to any SMS message; for help, reply “HELP”)

  • Appeal of certain decisions

  • Managing communication preferences (unsubscribe links in email, “STOP” for SMS)

You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity (e.g., email address or account information) before providing a substantive response. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf, subject to verification.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response, depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.

International Transfers

We may transfer, store, and process your personal information outside the country you live in. Your personal information may also be processed by staff and third-party service providers and partners in these countries. If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission’s Standard Contractual Clauses, or equivalent UK mechanisms, unless the destination country has been determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date, and provide notice as required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us at mike@steelmonkey.co or contact us at 5723 2nd Ave, Sunset Park CrossFit, Brooklyn, NY, 11220, US.

For the purpose of applicable data protection laws and unless explicitly stated otherwise, we are the data controller of your personal information.