legal

Last Updated: July 29, 2024

We recognize the importance of protecting the privacy of your personal data, and we appreciate the trust you place in us. We have implemented policies and security measures designed to protect the information you provide us, and this Privacy Policy (this “Policy”) describes how GST, Inc. (“GST”) (“we,” “us” or, “our” in this Privacy Policy) collect, process, and disclose personal information about you, including personally identifiable information or personal data, in connection with your interaction with our website, or when you contact us via phone, email, or mail.

This Policy also describes any rights you may have regarding personal information about you and the way to contact us to exercise those rights. It also describes the extent to which we may disclose that information to affiliates and non-affiliated third parties.

This Policy and the policies described herein are subject to change at any time. Accordingly, we recommend that you check for updates to the Privacy Policy on an ongoing basis. If we make changes to this Policy, we will update the date it was last changed.

Data Controller Contact Details 

GST is the data controller in relation to your personal data. We are located at:

322 Culver Blvd Suite 150 Playa Del Rey, CA 90293

Our contact details for all data privacy inquiries and questions are provided at the end of this Policy.

Collection of Information

Depending on your relationship with us, we may collect and process the following kinds of personal data subject to the following lawful bases (as required under the UK GDPR): 

• On the basis of the necessity of fulfilling a contract, legitimate interest (which is not outweighed by the privacy impacts) and/or your consent: personal identifiers and contact information, such as your name, postal address, e-mail address, telephone number, or other similar information that is defined as personal information, personal data or personally identifiable information under an applicable law (“personal data”); 

• On the basis of the necessity of fulfilling a contract: payment card information; and/or

• On the basis of consent: information about your Internet connection, the equipment you use to access our Site, and usage details, as well as your name and email address if you enter one of our sweepstakes.

We may collect this information:

• Directly from you when you provide it to us;

• Automatically as you navigate through the Site. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies. Please see more information on "Cookies" below; and/or

• From our affiliates or non-affiliated partners such as our marketing and advertising partners or service providers.
  

Retention of Information

Your personal data will be retained only for as long as the information is needed to fulfill the purposes for which it is collected and processed or where you withdraw your consent (where applicable). GST reserves the right to retain and use personal data for as long as necessary to comply with our legal and regulatory obligations and business requirements and/or to resolve any ongoing disputes and enforce our agreements. For the avoidance of doubt, data will not be destroyed before any regulatory retention period expires, or during a pending investigation, whether legal or regulatory.

     We consider the following criteria when determining how long a particular record will be retained, including any personal data contained in that record:

• How long the record is needed to provide you with the products and services you request

• How long the record is needed to support and enhance our operational processes

• How long the record is needed to protect our rights and legal interests

• How long the record must be retained to comply with applicable laws and regulations

The same personal data about you may be included in more than one record and used for more than one purpose, each of which may be subject to different retention periods based on the factors listed above.

International Transfers

Our website is controlled and operated by us from the United States of America.  Any information you provide to us through use of the site may be stored in, processed in, transferred between, and accessed from the United States and other countries which may not guarantee the same level of protection of personal information as the one in which you reside.  Any such transfers will take place in accordance with applicable data privacy laws.

As an organization with operations located in multiple countries, personal information we collect may be transferred or be accessible internationally by and between us, our affiliates and service providers to us and our affiliates.  Any such transfers will take place in accordance with applicable data privacy laws.

Disclosure of Information to Third Parties 

We may disclose personal data to third parties under one or more of the following circumstances: 

• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them (for example, to assist us with social media marketing).
• To our marketing and advertising partners.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of GST assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by GST about our Site users is among the assets transferred.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including a response for a government or regulatory request.
• To enforce or apply our terms of use and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our customers, or others. (This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.)

Protection of Information

We maintain physical, electronic, and procedural safeguards designed to protect your personal data.  We use reasonable best efforts to require that any person or institution to which we disclose personal data will protect the confidentiality of that information and use the information only for the purposes for which we disclose the information to them. In addition, we restrict access to personal data to those employees who need to know that information in the course of their job responsibilities.  

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our Site. Any transmission of personal data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.

Collection of Information for Residents of California and Certain other US States

The personal data we collect about you includes data within the categories below. These categories are defined by California law and represent the categories of personal data that we have collected about you. Where we collect this data, the purposes for which we process it, and how we have disclosed personal data to third parties in the past 12 months are consistent with how we treat other data under this Policy as described above. We do not necessarily collect all data listed in a particular category, nor do we collect all categories of data for all individuals.

We have also disclosed data in each of the following categories with our affiliates and service providers for our business purposes within the last 12 months. We may receive requests for data from regulatory authorities, our auditors and/or our legal advisors. If requested from such parties, we would disclose your personal data as appropriate.

We do not sell your personal data or share your personal data for cross-contextual behavioral advertising, as those terms are defined under California law.

When you purchase our products we use a service provider like Shopify to process your payment and for related business services. As part of providing these services, Shopify processes your payment information on our behalf as well as identifying information about the devices that connect to its services. You can learn more about Shopify and read its privacy policy at https://www.shopify.com/legal/privacy/app-users.  We do not control third-party websites and are not responsible for their privacy statements.  If you submit personal information to any third-party websites or service providers, your information is governed by their privacy policies.

Data Subject Rights 

• Depending on your state of residency, particularly California, you may be entitled to the following rights with respect to personal information about you.  We may choose to provide rights even where not required to by law.Right to access/know.  You have the right to know and request information about the categories and specific pieces of personal information we have collected about you within the last 12 months, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the categories of third parties, or specific third parties, depending on your jurisdiction, with whom we share such information.  You also have the right to know if we have sold or disclosed your personal information.
• Right to correct.  You have the right to request correction of any inaccurate information we hold about you.  We may not be able to accommodate your request if we believe it would violate any law, any legal requirements, or cause the information to be incorrect. Information solely retained for data backup purposes is generally excluded.
• Right to delete.  You have the right to request the deletion of your personal information, subject to certain exceptions.
• Right to limit use and disclosure of sensitive personal information.  Depending on your jurisdiction, to the extent we process or disclose your sensitive personal information, you may have the right to limit our use of this information.
• Right to opt-in to processing of sensitive personal information. Depending on your jurisdiction, to the extent we process your sensitive personal information, or the personal information of a known child, we may have to obtain your consent, or the consent of the child’s parent or lawful guardian, before processing it. 
• Right to opt-out of the sale or sharing of personal information or profiling/automated decision making. Depending on your jurisdiction, to the extent we share personal information with for purposes of targeted advertising or cross contextual behavior advertising, you have the right to opt-out. Depending on your jurisdiction, to the extent we engage in profiling or automated decision making, you have the right to opt-out.  
• Right to portable data.  You have the right to obtain personal information about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another entity without hindrance.
• Right to non-discrimination.  You have the right to not be discriminated against for exercising any of the above-listed rights.
• Right to know and question profiling decision. Depending on your jurisdiction, and whether your personal data is profiled in furtherance of decisions that produce legal or similarly significant effects concerning you, you may have the right to question the result of said profiling, the right to be informed of the reason that the profiling resulted in the decision, and, if feasible, the right to be informed of what actions you might have taken to secure a different decision and that you might take to secure a different decision in the future. You also have the right to review the personal data used in the profiling decision. 
• Right to correct data and reevaluate decision related to profiling decision. Depending on your jurisdiction, if a profiling decision was based upon inaccurate personal information, taking into account the nature of the personal data and purpose of processing, you may have the right to have the data corrected and the profiling decision reevaluated based upon the corrected data. 

We do not discriminate against you if you choose to exercise any of these rights.

Data solely retained for data backup purposes is principally excluded from these rights until it is restored to an active system or next accessed or used for a sale, disclosure, or commercial purpose. These rights also do not apply to pseudonymous data if the information necessary to identify the individual is kept separately and is subject to controls that prevent access to the information. Pseudonymous data is personal data that can no longer be attributed to a specific individual without the use of additional information, if the additional information is kept separately and is subject measures to ensure that personal data is not attributed to the specific individual. 

Further, California law permits California residents to request – from a business with whom the California resident has an established business relationship – certain information about the types of personal information the business has shared with third parties for those third parties’ direct marketing purposes, and the names and addresses of the third parties with whom the business has shared such information during the immediately preceding calendar year. 

Exercising Your Rights 

If you would like to exercise any of the privacy rights outlined above, please call us at +1-760-434-9361, visit our website https://www.grandslamtack.com, or use one of the other methods listed in the “Contact Us” section of this privacy policy.

You also may designate an authorized agent to make a request on your behalf.  If you are submitting a request through an authorized agent, the authorized agent must provide us with your signed written permission stating that the agent is authorized to make the request on your behalf.  Alternatively, your authorized agent may provide evidence of having power of attorney or acting as a conservator for you. We may also request that any authorized agents verify their identity and may reach out to you directly to confirm that you have provided the agent with your permission to submit the request on your behalf.

When you exercise these rights and submit a request to us, we will verify your identity by asking you for any or all of the following pieces of information: [your relationship with us, first and last name, email address, telephone number, postal address, or account information].

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will use the personal information you provide to us when submitting a consumer request only to verify the requestor’s identity or authority to make the request.

Depending on your jurisdiction, we have between 45 and 90 days to respond to your request. 

There may be circumstances where we will not be able to honor your request, in which case, we will notify you.  For example, if you request deletion, we may need to retain certain personal information to comply with our legal obligations or other permitted purposes. Depending on your jurisdiction, you may have the right to appeal this decision or to contact your Attorney General if you have concerns about the results of the appeal.

Please note that depending on your jurisdiction, we are only obligated to respond, free of cost, to personal information requests from the same consumer up to two times in a 12-month period. Depending on your jurisdiction, after you have exceeded the applicable number of requests, we have the right to charge a reasonable fee for fulfilling the request. In addition, under the applicable state privacy law, and for the protection of your personal information, we may be limited in what personal information we can disclose.

Depending on your jurisdiction, we may maintain your rights requests for at least 2 years. This information will not be used for any other purpose except to review compliance processes; it will not be shared except as necessary to comply with a legal obligation. 

Cookies

Please read below for a description of the cookies we use and how you can accept or reject them below.  You can always manage your cookie preferences through the footer of website at https://www.grandslamtrack.com.  

We collect information about how you use our website by using cookies. A cookie is a small text file, generated by a website that is stored in the website user’s internet browser or computer or mobile device hard drive, on a temporary or permanent basis. Cookies allow a website to identify a user’s device whenever that user returns to the website. This provides the user with a more stable and enriching experience and allows a website owner to gather usage information. You can find more detailed information about cookies and how they work at https://www.aboutcookies.org/

You can configure your internet browser preferences to limit the acceptance and storage of cookies, but blocking all cookies may limit your browsing experience on our and other websites.

The cookies we use vary. Some of the cookies we use are necessary to allow users to navigate our website. We also use functional cookies to gather information about user choices such as language, region, or other settings. Information gleaned from these functional cookies is usually anonymized and not used for non-functional purposes.

[With your consent,] we use analytical services to determine the effectiveness of our content, what interests our users, and the functionality of our services. We also use web beacons, tracking pixels, and similar technologies to understand more about website visitors and count visitor numbers.

[With your consent,] we use performance cookies to track how many individual users visit our website and how often they do so. 

[With your consent,] we may also use targeted advertising cookies to provide you with products or services and to track the success of those advertising campaigns. We may use web beacons to decipher which users arrived at our website after viewing an advertisement on such a third-party website. Web beacons may also work in concert with cookies on your device to monitor activity. You cannot block web beacons, and because they are not installed on your device, you cannot remove them.

We may also use web beacons and similar tracking technologies to gather information about your interactions with our website. A web beacon is a one-pixel usually-transparent electronic image inserted in web content or email messages. It passes information about pages and content viewed by our website users.

Do Not Track Signals

We recognize your use of a universal opt-out mechanism for the purpose of targeted advertising or sale of your personal data. If there is a conflict between the opt-out request received via a universal opt-out mechanism and your existing privacy setting, we will comply with your opt-out preference and notify you of the conflict. The notification will provide you with the option to confirm either the privacy setting or participation in the program.

Children

Our website is not intended for use by children.  We do not knowingly collect personal information from anyone under the age of 16, without verifiable parental consent.  If we become aware that we have inadvertently collected personal information from a child under the age of 16, we will delete such information from our records.  If a parent, guardian, or anyone else becomes aware that we have collected personal information from an individual under the age of 16, please contact us.

Third-Party Links

Our website may include links to third-party websites plug-ins, and applications.  Clicking on those links or enabling those connections may allow third parties to collect or share data about you.  We do not control third-party websites and are not responsible for their privacy statements.  If you submit personal information to any third-party websites or service providers, your information is governed by their privacy policies.  When you leave our website, we encourage you to read the privacy policy on every website you visit.

Complaints

For any complaints under the UK GDPR, please contact:

United Kingdom Information Commissioner’s Office (ICO)

0303 123 1113

https://ico.org.uk/make-a-complaint

Contact Us

If you have any questions about this privacy policy, please contact us through our website or via one of the following methods:

Grand Slam Track

+1 805-267-9063⁩

[email protected]

322 culver boulevard, Suite #150, Playa Del Rey CA 90293, United States