This Privacy Policy describes how Black Strap Performance ("we", "us", or "our") collects, uses, and shares information about you when you visit our website or interact with our services.
1. Information We Collect
We may collect the following types of information:
- Contact Information such as your name and email address when you submit an order request.
- Usage Data such as pages visited and interactions to help us improve the site.
- Device/Technical Data such as browser type, operating system, and IP address.
2. How We Use Your Information
We use information to:
- Respond to your inquiries and process order requests.
- Operate, maintain, and improve our website and services.
- Communicate with you about updates, offers, and product information (with your consent where required).
- Detect, prevent, and address technical or security issues.
3. Cookies and Similar Technologies
We use cookies and similar technologies for two main purposes:
- Strictly necessary cookies used by our payment provider (CityPay) to enable secure checkout. These are essential for the service and do not require consent.
- Analytics via Google Analytics 4 (GA4) to help us understand site usage and improve performance. Analytics runs only after you give consent. We use Google’s Consent Mode v2 with analytics storage set to “denied” by default until you accept.
- Advertising via the Meta (Facebook and Instagram) pixel, so we can measure whether our advertising works and show relevant products to people who have visited us. Advertising runs only after you give consent. Nothing is loaded, stored or sent until you accept — Google’s advertising signals (
ad_storage,ad_user_data,ad_personalization) and the Meta pixel are all denied by default.
When analytics is enabled, we send measurement events such as page_view, view_section, and link interactions. After a successful payment, we record a purchase event server‑side using the exact totals confirmed by our payment provider. We do not send personal identifiers (like your name or email) to Google Analytics.
When advertising is enabled, the Meta pixel records page views and shopping events — viewing a product, adding to your basket, starting checkout and completing an order — with the product, the amount and the currency. After a successful payment we also send Meta a copy of the purchase from our own server, so that a single order is counted once rather than twice. That server‑to‑server copy includes your email address and, where we have it, your phone number, both hashed (converted to an irreversible fingerprint) before they leave us, along with your IP address and browser user agent. Meta uses these to match the purchase to an advertisement; we never send them in a readable form.
Where you came from. When you arrive from an advertisement, an email or a link that carries
campaign information (utm_source, utm_medium, utm_campaign,
utm_content, utm_term) or a click identifier (fbclid, gclid,
msclkid), we record it in your browser’s local storage together with the page you landed on and the
time. We keep the first such visit and the most recent one, and if you place an order we store them against that
order so we know which advertising produced the sale. This is stored only if you accept advertising cookies, and it
is deleted from your browser if you decline.
Your controls: You can accept or reject analytics and advertising cookies together using the banner on our site. You can also manage browser cookie settings at any time. If you wish to withdraw your choice on this device, use the button below to reset it; the banner will appear again the next time you visit the site, and any campaign information stored in this browser is deleted.
4. Legal Bases for Processing
Where applicable (e.g., in the EEA/UK), we process personal data on the basis of consent, contract performance, legitimate interests (such as site improvement and security), and compliance with legal obligations.
5. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
Advertising and campaign data. The campaign information stored in your browser lapses after 90 days, and is deleted immediately if you withdraw consent. Where an order was placed, the campaign that produced it is kept with the order record for as long as we keep the order, because it forms part of how that sale came about. Your IP address and browser user agent are held only for the duration of the checkout and are deleted with the checkout record; they are not stored on the order.
6. How We Share Information
We do not sell your personal information. We may share information with service providers who assist us in operating the website and sending communications, subject to appropriate safeguards and as required by law.
7. Your Rights
Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, and to object to processing or request data portability. To exercise your rights, contact us using the details below.
8. Children’s Privacy
Our site is not directed to children under 13 (or under 16 in certain jurisdictions), and we do not knowingly collect personal information from children.
9. International Transfers
If you access our site from outside the country where our servers are located, your information may be transferred across borders. We implement safeguards to protect your information where required.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and adjust the "Last updated" date above.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact: