Privacy policy

Last updated: July 29, 2026

1. Scope and Who We Are

This Privacy Policy describes how Gordura Commerce L.L.C., doing business as Thunder Grip (collectively, “Thunder Grip,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes personal information when you visit shopthundergrip.com, make a purchase, create or use an account, communicate with us, subscribe to marketing, submit a review, or otherwise use our website and related services (collectively, the “Services”).

Thunder Grip sells rubber stair treads and related stair-safety and home-improvement products. Our online store is hosted by Shopify, which enables us to provide the Services.

This Privacy Policy does not apply to websites, services, or applications operated independently by third parties, even when they are linked from the Services. Please review those third parties’ privacy notices before providing personal information to them.

2. Personal Information We Collect

The personal information we collect depends on how you interact with the Services.

Information you provide directly

  • Contact and delivery information, including your name, email address, telephone number, billing address, and shipping address.
  • Order and commercial information, including products viewed or purchased, cart contents, order number, purchase date, discounts, delivery status, returns, exchanges, refunds, warranty claims, and customer preferences.
  • Account information, including login credentials, saved addresses, account settings, and order history, if customer accounts are enabled.
  • Payment-related information needed to complete a transaction. Payment card details are generally collected and processed directly by Shopify or another payment processor rather than stored in full by us.
  • Customer-support information, including messages, call or chat details, product questions, installation information, and photographs or videos you choose to submit in connection with support, returns, claims, or reviews.
  • Marketing and promotion information, including your email address, communication preferences, survey responses, contest or promotion entries, and information you provide when requesting offers or updates.
  • Reviews and user-generated content, including ratings, testimonials, comments, photographs, videos, and other content you choose to publish or provide.

Information collected automatically

  • Device and network information, such as IP address, browser type, operating system, device identifiers, cookie identifiers, language, and approximate location derived from your IP address.
  • Usage information, such as pages and products viewed, search terms, referring and exit pages, links clicked, cart activity, session information, dates and times of visits, and interactions with emails or advertisements.
  • Security and fraud-prevention information, such as login activity, transaction signals, and technical information used to protect the Services, customers, and our business.

Information we receive from other sources

We may receive personal information from Shopify; payment processors; fulfilment, shipping, and delivery providers; analytics and advertising partners; email and customer-communication providers; review platforms; fraud-prevention providers; social-media platforms; referral partners; and other service providers. The information received depends on the services you use and the permissions or settings you select.

Sensitive personal information

Certain laws may classify account login credentials and payment-related information as sensitive personal information. We use this information only as reasonably necessary to provide the Services, process transactions, maintain account security, prevent fraud, and comply with law. We do not use sensitive personal information to infer characteristics about you.

3. How We Use Personal Information

We may use personal information to:

  • Provide, operate, maintain, and personalize the Services.
  • Process payments, fulfil and deliver orders, provide order updates, and administer returns, refunds, exchanges, warranties, discounts, and promotions.
  • Create and manage customer accounts and remember customer preferences.
  • Respond to questions, provide customer support, and communicate about products, orders, safety, recalls, or service changes.
  • Send marketing communications, product news, promotions, and abandoned-cart reminders where permitted by law and consistent with your choices.
  • Measure and understand use of the Services, improve our website and products, conduct research and analytics, and troubleshoot technical issues.
  • Personalize content and advertising and measure the effectiveness of marketing campaigns, where permitted by law.
  • Detect, investigate, and prevent fraud, misuse, security incidents, illegal activity, and violations of our terms or policies.
  • Protect our rights, property, customers, personnel, and business operations.
  • Comply with tax, accounting, consumer-protection, product-safety, recordkeeping, legal, and regulatory obligations; respond to lawful requests; and establish, exercise, or defend legal claims.
  • Complete or evaluate a merger, financing, acquisition, restructuring, sale of assets, bankruptcy, or other corporate transaction.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you, except where permitted by applicable law and with any required safeguards.

4. Legal Bases for Processing

If European Economic Area, United Kingdom, or Swiss data-protection law applies to our processing, we rely on one or more of the following legal bases:

  • Performance of a contract or steps taken at your request before entering into a contract, including processing and delivering orders and handling returns or support.
  • Our legitimate interests or those of another party, including operating and improving the Services, communicating with customers, preventing fraud, securing our systems, understanding business performance, and marketing our products, provided those interests are not overridden by your rights and interests.
  • Your consent, including for certain marketing communications, optional cookies, analytics, or targeted advertising where consent is required.
  • Compliance with legal obligations, including tax, accounting, consumer-protection, product-safety, and lawful disclosure requirements.
  • Protection of vital interests, in rare circumstances involving the safety of an individual.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Cookies and Similar Technologies

We and our partners, including Shopify, use cookies, pixels, tags, software development kits, local storage, and similar technologies to operate the Services, remember preferences, keep accounts and checkout secure, understand website performance, measure engagement, prevent fraud, and support marketing and advertising.

These technologies may include:

  • Necessary technologies required for core website, checkout, security, fraud-prevention, and account functions.
  • Functional technologies that remember settings and improve convenience.
  • Analytics technologies that help us understand traffic, usage, and performance.
  • Advertising technologies that help us measure campaigns, limit repeated ads, and, where permitted, provide more relevant advertising.

Where applicable law requires consent, we will not use non-essential cookies or similar technologies until you make a choice. You may manage available choices through the cookie-preferences link or banner on the Services and through your browser settings. Blocking certain technologies may affect website functionality.

Some browsers offer a Global Privacy Control (“GPC”) signal. Where required by applicable law and supported by our systems, we treat a recognized GPC signal as a request to opt out of the sale or sharing of personal information or its use for targeted advertising for the browser or device sending the signal.

Because there is no universally accepted standard for other “Do Not Track” signals, the Services may not respond to other browser-based tracking signals unless required by law.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for the purposes described in this Privacy Policy:

  • Shopify and related Shopify services that host and operate our storefront, checkout, customer accounts, analytics, fraud-prevention, and other commerce functions.
  • Payment processors and financial institutions that authorize and process transactions.
  • Warehouses, fulfilment providers, carriers, delivery companies, return processors, and other logistics providers.
  • Cloud hosting, information-technology, cybersecurity, fraud-prevention, customer-support, communications, email-marketing, review, and website-service providers.
  • Analytics, advertising, and social-media partners that help us measure activity, understand audiences, and market products, subject to applicable consent and opt-out requirements.
  • Professional advisers, including accountants, auditors, lawyers, insurers, lenders, and consultants.
  • Government authorities, regulators, courts, law-enforcement agencies, or other parties when disclosure is required or permitted by law or reasonably necessary to protect rights, safety, and security.
  • Parties involved in an actual or proposed corporate transaction, such as a merger, financing, reorganization, acquisition, bankruptcy, or sale of all or part of our business or assets.
  • Other parties at your direction or with your consent.

We do not sell personal information for money. However, our use of certain advertising, analytics, or cross-context behavioral advertising technologies may be considered a “sale,” “sharing,” or processing for “targeted advertising” under some U.S. state privacy laws. Where those laws apply, you may opt out as described in Section 11.

7. Shopify Processing

The Services are powered by Shopify. Shopify collects and processes personal information to provide and improve commerce services, protect merchants and customers, process transactions, provide reporting and analytics, and support personalization and advertising features.

Depending on the Shopify features and settings enabled for our store, information about your activity may be shared with Shopify and certain third parties, including parties located in other countries, to provide these services. Shopify may also process certain information for its own purposes as described in the Shopify Consumer Privacy Policy.

You can learn more through the Shopify Consumer Privacy Policy and manage certain Shopify-specific choices through the Shopify Privacy Controls portal.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business and transaction records, administer warranties and returns, comply with tax, accounting, product-safety, and other legal obligations, resolve disputes, enforce agreements, and prevent fraud or abuse.

Retention periods vary depending on the type of information, the context in which it was collected, legal requirements, limitation periods, the sensitivity of the information, and our operational needs. When information is no longer required, we take reasonable steps to delete, de-identify, or securely isolate it, subject to backup and legal-retention requirements.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. These measures may include access controls, encryption in transit, secure service providers, account-security controls, monitoring, and procedures intended to prevent unauthorized access, alteration, disclosure, or destruction.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a unique password, protect your account credentials, and contact us promptly if you believe your account or personal information has been compromised.

10. International Data Transfers

We are based in the United States, and our service providers may process personal information in the United States and other countries. These countries may have data-protection laws that differ from those where you live.

Where applicable law requires safeguards for an international transfer, we rely on recognized legal mechanisms, contractual protections, or other permitted safeguards. You may contact us for additional information about applicable transfer safeguards.

11. Your Privacy Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • Confirm whether we process your personal information and request access to or a copy of it.
  • Request correction of inaccurate personal information.
  • Request deletion of personal information.
  • Receive certain information in a portable format.
  • Object to or request restriction of certain processing.
  • Opt out of the sale or sharing of personal information, cross-context behavioral advertising, or targeted advertising.
  • Limit certain uses or disclosures of sensitive personal information.
  • Withdraw consent where processing is based on consent.
  • Appeal our decision regarding a privacy request, where applicable.
  • Complain to a data-protection or privacy regulator in your jurisdiction.

How to exercise your rights

To submit a privacy request, email contact@shopthundergrip.com with the subject line “Privacy Request” or write to us at the address in Section 16. To opt out of data sharing or targeted advertising, use the “Your Privacy Choices” or data-sharing opt-out link in the website footer, when available. You may also adjust cookie preferences through the cookie-preferences link or banner.

We may need to verify your identity and request before responding, for example by confirming information associated with your account or order. We will use information provided for verification only to process the request. If an authorized agent submits a request for you, we may require proof of authorization and may also verify your identity directly, as permitted by law.

We will not discriminate against you for exercising applicable privacy rights. If we deny a request and applicable law provides a right to appeal, you may appeal by replying to our decision or emailing us with the subject line “Privacy Appeal.”

Marketing communications

You may unsubscribe from promotional emails at any time by using the unsubscribe link in the message. Even after opting out of marketing, we may send non-promotional communications about orders, transactions, accounts, product safety, or customer-service matters.

Shopify-specific choices

Certain personal information is also processed directly by Shopify. You may exercise Shopify-specific privacy choices through the Shopify Privacy Controls portal.

12. Additional Notice for U.S. State Residents

This section supplements the rest of this Privacy Policy for residents of U.S. states with comprehensive consumer privacy laws, to the extent those laws apply to us.

Categories of personal information

The categories of personal information we collect may include:

  • Identifiers, such as name, postal address, email address, telephone number, IP address, account name, and online identifiers.
  • Customer-record and transaction information, such as billing and shipping information, payment-related information, and customer-service records.
  • Commercial information, such as products considered or purchased, order history, returns, warranties, and purchasing preferences.
  • Internet or other electronic-network activity, such as browsing, search, interaction, cookie, device, and advertisement data.
  • Approximate geolocation derived from an IP address.
  • Electronic, visual, or similar information, such as communications, customer-submitted photographs or videos, and support records.
  • Inferences drawn from activity and commercial information, such as likely product interests or marketing segments.
  • Sensitive personal information, such as account login credentials and payment-related information, used only for permitted operational, security, and transaction purposes.

We collect these categories from you, your devices, Shopify, service providers, business partners, and other sources described in Section 2. We use them for the business and commercial purposes described in Section 3.

Disclosure, sale, sharing, and targeted advertising

We may disclose identifiers, customer-record information, commercial information, internet activity, approximate geolocation, customer communications or submitted content, and inferences to the categories of recipients described in Section 6 for business purposes.

We do not sell personal information for monetary payment. Certain disclosures of identifiers, commercial information, internet activity, approximate geolocation, or inferences to advertising and analytics partners may be considered sale, sharing, cross-context behavioral advertising, or targeted advertising under applicable law. You may opt out using the methods described in Section 11.

We do not knowingly sell or share for cross-context behavioral advertising the personal information of individuals under 16 years of age.

Financial incentives

We do not currently offer a financial-incentive or price-difference program in exchange for personal information. Ordinary discounts, coupons, promotions, and loyalty benefits, if offered, are not intended as payment for personal information unless we provide a separate notice explaining otherwise.

13. Children’s Privacy

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it.

14. Third-Party Links and Services

The Services may contain links to third-party websites, applications, social-media pages, or services. We do not control and are not responsible for their privacy, security, or content. Your interactions with those third parties are governed by their own terms and privacy notices.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will post the updated version on the Services and revise the “Last updated” date. Where required by law, we will provide additional notice or obtain consent.

16. Contact Us

For questions, concerns, or privacy requests, contact:

Gordura Commerce L.L.C. d/b/a Thunder Grip
30 N Gould St, Ste R
Sheridan, WY 82801, United States
Email: contact@shopthundergrip.com
Website: shopthundergrip.com