Privacy Policy

Who we are

Hecktech Inc. is a privately held Arizona corporation headquartered in Phoenix. Our products are sold through authorized distributors and integrators, directly to business customers, and through our online store. This Privacy Policy applies to Hecktech Inc. and all of its registered trade names, including “Heckler” and “Heckler Design.”

What we collect

Information you provide

When you create an account, place an order, request a quote, contact support, subscribe to our mailing list, apply to become a dealer, or otherwise interact with the Services, we collect the information you give us. This typically includes:

• Identifiers: name, email address, phone number, mailing and shipping address, company name, job title, username.
• Account credentials: password (stored as a one-way cryptographic hash; we do not retain plain-text passwords).
• Order information: items purchased, quantities, quote references, order history.
• Communications: the content of messages, emails, and support requests you send us.
• Dealer and distributor applications: business information, reseller certifications, and tax identifiers where required.

Payment information

We do not collect or store full payment card numbers. Payments on our Website are processed by Stripe and Shopify Payments, which collect card and billing information directly from you under their own privacy practices. We receive only transaction confirmations and limited data such as the last four digits of the card and card brand.

Information collected automatically

When you visit the Website, we (and third-party services acting on our behalf) collect technical information automatically:

• Device and browser data: IP address, user agent, operating system, screen size, and referring URL.
• Usage data: pages visited, links clicked, time on page, session timestamps, and similar interaction data.
• Approximate location: derived from IP address (country, state, or city level — not precise GPS).
• Cookie and similar identifiers: see “Cookies and tracking” below.

Sensitive information

We do not knowingly collect “sensitive personal information” as defined by the California Privacy Rights Act — such as Social Security number, driver’s license or government ID, precise geolocation, biometric or genetic data, racial or ethnic origin, religious or philosophical beliefs, union membership, the contents of private communications, health information, or information about sex life or sexual orientation. Full payment card numbers are collected directly by our payment processors, not by us.

How we use it

• Provide the Services. Create and maintain accounts, authenticate users, process and ship orders, handle returns, and provide customer support.
• Communicate with you. Respond to inquiries, send transactional notices (order confirmations, shipping updates, warranty information), and provide security and service notifications.
• Improve our Website and products. Analyze Website usage, diagnose technical issues, and conduct product research and development.
• Marketing. Send newsletters, product announcements, and dealer communications. You can unsubscribe at any time using the link in any marketing email.
• Advertising. Deliver and measure advertising on third-party platforms, including retargeting (see “How we share” and “Cookies and tracking”).
• Protect our Services and business. Detect and prevent fraud, enforce our terms, and protect the rights, property, or safety of Heckler, our customers, and others.
• Comply with law. Meet tax, accounting, and regulatory obligations, and respond to lawful requests.

Legal bases (EEA, UK, and Switzerland)

• Contract. Processing necessary to perform an order, provide support, or maintain your account.
• Legitimate interests. Improving our Services, preventing fraud, securing our systems, and limited marketing to existing customers — balanced against your rights.
• Consent. Marketing emails where consent is required, non-essential cookies and trackers, and any other opt-in activities.
• Legal obligation. Tax, accounting, and regulatory compliance, and response to lawful requests.

You may withdraw consent at any time; withdrawal does not affect processing already performed.

How we share

• Service providers. Payment processors (Stripe and Shopify Payments), shipping carriers, email and marketing platforms, CRM and customer-support tools, analytics providers, cloud hosting, and professional advisors (accountants, attorneys). Each is bound by contract to process personal information only on our instructions.
• Authorized dealers and distributors. If you identify or request a specific dealer, we may route your inquiry or order information to that partner to respond.
• Advertising partners. We may share identifiers and usage data with advertising networks (such as Meta, Google Ads, and LinkedIn) to deliver and measure targeted advertising. Under California law, this may constitute “sharing.” You may opt out at any time — see “Your privacy rights.”
• Corporate transactions. In connection with a merger, acquisition, financing, sale of assets, reorganization, or bankruptcy, personal information may be transferred to the successor entity.
• Legal requests and safety. We may disclose information to comply with law, respond to valid legal process, protect our rights or the safety of others, or investigate fraud or violations of our terms.

Sale and sharing. We do not sell personal information for money. We do engage in “sharing” as defined by the California Privacy Rights Act (cross-context behavioral advertising). You may opt out as described below.

Cookies and tracking

Types of cookies we use

• Strictly necessary. Required for the Website to function (session, security, load-balancing). Cannot be disabled.
• Functional. Remember your preferences, such as recently viewed products.
• Analytics. Measure Website traffic and usage (for example, Google Analytics). We configure analytics to use aggregated or pseudonymized data where possible.
• Advertising. Support retargeting and measurement across third-party platforms (for example, Meta Pixel, Google Ads, LinkedIn Insight Tag).

How to control cookies

• Cookie banner. On your first visit, and any time via the “Cookie settings” link, you can accept, reject, or customize non-essential cookies.
• Browser controls. Most browsers allow you to block or delete cookies through their settings.
• Industry opt-outs. Digital Advertising Alliance, Network Advertising Initiative, and Your Online Choices (EU).
• Platform controls. Google Ads Settings, Meta Ad Preferences.

Global Privacy Control

We honor the Global Privacy Control (GPC) signal as a request to opt out of the sale and sharing of personal information under the California Privacy Rights Act and similar state laws. Learn more at globalprivacycontrol.org.

Do Not Track

The W3C Do Not Track standard was not finalized and has been deprecated by most browsers. We do not respond to DNT signals. We do honor GPC (above).

International transfers

For transfers of personal information from the European Economic Area, United Kingdom, or Switzerland to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, the UK International Data Transfer Addendum. We implement additional safeguards — including encryption in transit and access controls — to protect transferred data.

Retention

• Account information: for the life of your account, plus 3 years after closure.
• Order and transaction records: 7 years, to satisfy tax, accounting, and audit obligations.
• Customer-support communications: 3 years after the matter is resolved.
• Marketing list: until you unsubscribe, plus 24 months to honor your suppression-list preference.
• Website analytics: up to 26 months.
• Security and fraud-prevention logs: 12 months.
• Records required by law: for the period specified by the applicable statute.

When no purpose remains, we delete or anonymize personal information. Some data may persist in secure backups for a limited period before deletion.

Security

We protect personal information with measures including encryption in transit (TLS), encrypted storage for sensitive data, access controls, vendor due-diligence, and staff training. No method of transmission or storage over the Internet is guaranteed to be 100% secure. Please access the Website through a secure connection and use a strong, unique password.

Minors

We do not knowingly collect personal information from children under 13 years of age, in compliance with the Children’s Online Privacy Protection Act (COPPA). Our Services are intended for business and adult consumer use and are not directed to anyone under 18. If we learn we have inadvertently collected personal information from a child under 13, we will delete it promptly. California residents under 18 who are registered users may request removal of publicly posted content under California Business and Professions Code § 22581 by contacting us.

Your privacy rights

For everyone

• Review and update your account information through your account settings.
• Unsubscribe from marketing email via the link in any message we send, or by emailing service@hecklerdesign.com.
• Manage cookies and advertising through your browser, our cookie banner, and the industry opt-outs listed above.
• Enable Global Privacy Control (GPC) in your browser to signal opt-out of the sale and sharing of personal information.

How to submit a request

Email service@hecklerdesign.com with a description of your request and enough detail to verify your identity (typically the email associated with your account). We will confirm receipt within 10 business days and respond within the time required by applicable law (generally 45 calendar days, extendable once by 45 days with notice). You may designate an authorized agent to act on your behalf where your state law permits.

Appeals

If we decline your request, you may appeal in writing to the same email. If you are unsatisfied with the outcome, you may complain to your state Attorney General (U.S. residents) or your data protection supervisory authority (EEA, UK, or Swiss residents).

California residents

Your CPRA rights

• Right to know. Request the categories and specific pieces of personal information we collect, use, disclose, and share.
• Right to delete. Request deletion of your personal information, subject to legal exceptions.
• Right to correct. Request correction of inaccurate personal information.
• Right to opt out of sale or sharing. We do not sell personal information for money; we do engage in “sharing” for cross-context behavioral advertising. Opt out by emailing us or by enabling GPC in your browser.
• Right to limit use of sensitive personal information. We do not collect sensitive personal information within the meaning of the CPRA.
• Right to non-discrimination. We will not discriminate against you for exercising your rights.

Categories of personal information we collect (past 12 months)

Collected

• A. Identifiers. Real name, alias, postal address, telephone number, unique personal identifier, online identifier, IP address, email address, and account name.
• B. California Customer Records statute categories. Name, contact information, employment information, and financial information related to orders.
• D. Commercial information. Transaction information, purchase history, and records of products or services considered.

Not collected

• C. Protected classification characteristics under California or federal law.
• E. Biometric information.
• F. Sensitive personal information as defined by the CPRA.
• G. Precise geolocation data.
• H. Audio, electronic, visual, thermal, olfactory, or similar information (call or video recordings).
• I. Professional or employment-related information beyond business contact details.
• J. Education information (non-public student records).
• K. Inferences drawn from the above to create a profile reflecting preferences or characteristics.

Shine the Light

California Civil Code § 1798.83 (“Shine the Light”) permits California residents to request, once per year and free of charge, information about our disclosure of personal information to third parties for their direct-marketing purposes in the prior calendar year. Email us at service@hecklerdesign.com to make a request.

U.S. state privacy rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, Maryland, Minnesota, New Hampshire, New Jersey, Tennessee, Iowa, or Indiana, you may have rights that include: access, correction, deletion, data portability, opt-out of targeted advertising, opt-out of the sale of personal data, and opt-out of certain profiling that produces legal or similarly significant effects.

To exercise these rights, email service@hecklerdesign.com. We will respond within the window required by your state’s law (typically 45 calendar days, extendable once by 45 days with notice). Where your state law permits, you may designate an authorized agent to act on your behalf.

Nevada. Nevada residents may submit a verified request to opt out of the sale of personal information under NRS 603A.340 by emailing us.

Mobile message service terms

The mobile message service (the “Service”) is operated by Heckler. By opting in, you agree to receive recurring automated marketing messages — including cart reminders, product updates, and promotions — at the mobile number you provide. Consent is not a condition of any purchase.

• Message frequency: varies.
• Message and data rates: may apply, depending on your mobile carrier plan.
• To cancel: text STOP to 1-855-610-0460. You will receive a single opt-out confirmation. If you are subscribed to other Heckler programs, opt out of each separately.
• For help: text HELP to 1-855-610-0460 or email service@hecklerdesign.com.

We may modify or discontinue the Service at any time. We may change a short code or telephone number and will notify you of material changes. Wireless carriers are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number and to keep your information current. We are not liable for failed, delayed, or misdirected delivery of messages, for errors in messages, or for any action you take or do not take in reliance on the Service.

Updates to this notice

We will revise the “Last updated” date above when we make changes. For material changes, we will provide additional notice (by email, by a prominent Website banner, or by other reasonable means). Your continued use of the Services after an update takes effect means you accept the revised notice.

How to contact us

For privacy questions or to exercise any of the rights described above, email service@hecklerdesign.com or write to us at: