WestBridge — Privacy Policy

Last updated: October 2026

WestBridge operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). WestBridge is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or has been de-identified so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details, including your name, address, billing address, shipping address, phone number, and email address.

• Financial information, including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details.

• Account information, including your username, password, security questions, preferences, and settings.

• Transaction information, including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange, or cancel, as well as your past transactions.

• Communications with us, including information you provide when contacting customer support.

• Device information, including information about your device, browser, or network connection, your IP address, and other unique identifiers.

• Usage information, including information regarding your interaction with the Services and how and when you navigate our website.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide personal information.

• Automatically through the Services, including from your device when you use our services or visit our website, and through cookies and similar technologies.

• From our service providers, including providers that enable technology and process personal information on our behalf.

• From our partners or other third parties, where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us and which Services you use, we may use personal information for the following purposes:

• Provide, Tailor, and Improve the Services. We use your personal information to provide our Services, perform our contract with you, process payments, fulfil orders, remember preferences and items of interest, send account notifications, process purchases, returns, exchanges, and cancellations, manage accounts, arrange shipping, facilitate returns and exchanges, enable product reviews, recommend relevant products, and improve your shopping experience.

• Marketing and Advertising. We may use personal information for marketing and promotional purposes, including sending promotional communications by email or text message and displaying advertisements for products or services on our website or other websites. Where permitted by law, advertising may be based on items you previously purchased, added to your cart, or viewed. Where required, we will obtain your consent.

• Security and Fraud Prevention. We use personal information to authenticate accounts, maintain secure payments and shopping experiences, detect and investigate suspected fraudulent, illegal, unsafe, or malicious activity, protect public safety, and secure our Services. If you register an account, you are responsible for keeping your account credentials secure.

• Communicating with You. We use personal information to provide customer support, respond to enquiries, deliver effective services, and maintain our business relationship with you.

• Legal Reasons. We may process personal information to comply with applicable laws, respond to valid legal requests from authorities, investigate or participate in legal proceedings, and enforce our terms and policies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes, subject to this Privacy Policy and applicable law. These circumstances may include:

• Service providers. We may share personal information with Shopify, vendors, and other service providers that perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and shipping.

• Business and marketing partners. We may share information with business and advertising partners to provide marketing services and show advertisements. These partners may use information in accordance with their own privacy notices. Depending on where you live, you may have the right to opt out of certain sharing or processing for targeted advertising. You can exercise any applicable rights using our privacy preferences or the relevant opt-out mechanism provided on our website.

• At your direction or with your consent. We may disclose information when you request or authorise us to do so, such as when arranging product delivery or using social media integrations.

• Within our corporate group. We may share information with our affiliates or other entities within our corporate group, where applicable.

• Business transactions and legal obligations. We may disclose information in connection with a merger, acquisition, bankruptcy, or other business transaction, or to comply with legal obligations, respond to lawful requests, enforce our policies, and protect our rights and the rights of our customers.

Relationship with Shopify

Our Services are hosted by Shopify, which collects and processes personal information about your access to and use of our store in order to provide and improve the Services.

Information you submit through our store may be transmitted to and shared with Shopify and third parties that may be located in countries other than your country of residence.

Shopify may also use information obtained from your interactions with our store, other merchants, and Shopify to provide enhanced features and services. Where Shopify processes personal information for its own purposes, Shopify is responsible for that processing, including responding to applicable requests concerning your privacy rights.

To learn more about how Shopify uses personal information, please review the Shopify Consumer Privacy Policy. Depending on where you live, you may also exercise certain rights through the Shopify Privacy Portal.

Third-Party Websites and Links

Our Services may contain links to websites or online platforms operated by third parties. If you visit websites that are not affiliated with or controlled by us, you should review their privacy, security, and other policies.

We are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites and services, except where applicable law provides otherwise.

Information you provide on public or semi-public platforms, including social networking platforms, may be visible to other users and may be used by third parties according to their own policies.

The inclusion of third-party links does not, by itself, imply our endorsement of those websites or their operators.

Children's Data

Our Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction where prohibited by applicable law.

If you are a parent or guardian and believe that a child has provided us with personal information, you may contact us using the contact details below to request that we review the matter and take appropriate action.

Where applicable law requires parental consent or imposes additional obligations regarding children's personal information, we will comply with those requirements.

Security and Retention of Your Information

We take reasonable measures designed to protect personal information. However, no security measures are perfect or impenetrable, and we cannot guarantee absolute security. Information transmitted over the internet may not always be secure while in transit.

We recommend that you avoid sending sensitive or confidential information through unsecured communication channels.

How long we retain personal information depends on several factors, including whether the information is necessary to maintain your account, provide our Services, fulfil orders, comply with legal obligations, resolve disputes, or enforce contracts and policies.

When personal information is no longer required, we will delete it or anonymise it where appropriate and as required by applicable law.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights may be subject to exceptions and limitations under applicable law.

• Right to Access / Know. You may have the right to request access to the personal information we hold about you.

• Right to Delete. You may have the right to request deletion of personal information we maintain about you.

• Right to Correct. You may have the right to request correction of inaccurate personal information.

• Right to Data Portability. In certain circumstances, you may have the right to receive a copy of your personal information and request its transfer to another organisation.

• Right to Opt Out of Sale, Sharing, or Targeted Advertising. Depending on applicable privacy laws, you may have the right to opt out of certain disclosures of personal information or processing for targeted advertising.

• Managing Communication Preferences. You may unsubscribe from promotional emails using the unsubscribe link included in those communications. Even if you unsubscribe from marketing, we may continue sending non-promotional messages relating to your orders, account, or other transactions.

You may exercise your rights using the privacy controls available on our website, where provided, or by contacting us using the details listed below.

We may need to verify your identity before processing a request, as permitted or required by law. You may also be able to appoint an authorised agent to submit a request on your behalf, subject to applicable verification requirements.

We will respond to valid requests within the timeframes required by applicable law. We will not unlawfully discriminate against you for exercising your privacy rights.

UK and European Economic Area Residents

If you reside in the United Kingdom or the European Economic Area, you may have additional rights under applicable data protection laws, subject to relevant exceptions and limitations.

These rights may include:

• Right to Object to Processing. You may have the right to object to certain processing of your personal information.

• Right to Restrict Processing. You may have the right to request that we restrict processing in certain circumstances.

• Right to Withdraw Consent. Where we rely on your consent to process personal information, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

• Right to Lodge a Complaint. You may have the right to lodge a complaint with the relevant data protection supervisory authority.

To learn more about Shopify's processing of personal information and your rights concerning that processing, visit the Shopify Privacy Portal.

Complaints

If you have concerns or complaints about how we process your personal information, please contact us using the contact details below.

Depending on where you live, you may also have the right to appeal our decision or lodge a complaint with your local data protection authority.

For residents of the European Economic Area, a list of national data protection supervisory authorities is available from the European Data Protection Board.

International Transfers

Your personal information may be transferred to, stored in, or processed in countries outside your country of residence.

Where personal information is transferred outside the European Economic Area or the United Kingdom, we will use an appropriate transfer mechanism where required by applicable law. This may include the European Commission's Standard Contractual Clauses, the UK's applicable international data transfer agreement or addendum, or another recognised mechanism.

Where required, we will take appropriate steps to ensure that international transfers provide the level of protection required by applicable data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, operational requirements, or legal and regulatory obligations.

When we make changes, we will publish the updated version on this website, revise the "Last updated" date, and provide any additional notice required by applicable law.

Contact

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, please contact us:

• Store name: WestBridge

• Operating company: [INSERT LEGAL COMPANY NAME]

• Email: hello@westbridgewear.com

• Business address: [INSERT REGISTERED BUSINESS ADDRESS]

For the purposes of applicable data protection laws, the relevant legal entity responsible for determining how and why your personal information is processed acts as the data controller, where applicable.