Your data
Privacy policy
We collect the minimum needed to ship your order, support you and improve the store. We do not sell your personal information.
Last updated August 2026
What we collect
Order data: name, shipping and billing address, email, phone number and the contents of your order. Payment card details are entered directly with our payment processors and never stored on our systems.
Account and subscription data: your plan, renewal dates and order history.
Usage data: pages viewed, device and browser type, and approximate location derived from your IP address.
Why we use it
To take payment, ship orders, manage subscriptions and answer support requests. To detect fraud and keep the store secure. To measure which pages and campaigns work, and — where you have opted in — to send marketing email.
Who we share it with
Service providers who work on our behalf: payment processors, our ecommerce platform, fulfillment and shipping carriers, email and analytics tools, and customer support software. Each is bound to use the data only to provide their service.
We also disclose data when required by law, and as part of any merger or sale of the business. We never sell your data to third-party advertisers.
Cookies and tracking
Essential cookies keep your cart and session working. Analytics and advertising cookies are optional and can be declined in the cookie banner or disabled in your browser. Declining them does not affect your ability to order.
We honor Global Privacy Control and Do Not Track signals where your browser sends them.
How long we keep it
Order and tax records are retained for seven years as required by US financial regulation. Marketing contact data is kept until you unsubscribe. Analytics data is retained in aggregated form for twenty-six months.
Your rights
Depending on where you live, you can request a copy of your data, correct it, delete it, or opt out of marketing and targeted advertising. Email privacy@stillstrong.com and we will respond within thirty days.
California residents have rights under the CCPA/CPRA, and UK and EU residents under the UK GDPR and GDPR, including the right to complain to a supervisory authority.
Security and children
Data is transmitted over TLS and access is limited to staff who need it. No system is perfectly secure, so please use a strong, unique password.
The store is not directed at anyone under eighteen and we do not knowingly collect data from children.
