Privacy policy
Pine 9 Holsters
Privacy Policy
Effective Date: February 27, 2026 | Last Updated: March 26, 2026 | Version 14.0
Prior versions available upon request: legal@pine9holsters.com
1. Introduction and Scope
Pine 9 Solutions LLC, a New Hampshire limited liability company doing business as Pine 9 Holsters ("Company," "we," "us," or "our"), respects your privacy and is committed to protecting personal information in accordance with applicable United States privacy laws, including where applicable the California Consumer Privacy Act, as amended by the California Privacy Rights Act, the Colorado Privacy Act, the Virginia Consumer Data Protection Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, the Texas Data Privacy and Security Act, the Oregon Consumer Privacy Act, the Montana Consumer Data Privacy Act, and the Florida Digital Bill of Rights, and other applicable state laws as enacted and effective (collectively, "Data Privacy Laws").
This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal information when you visit our website, purchase products, interact with our advertising, subscribe to marketing communications, engage with embedded content (including video), communicate via live chat or support tools, purchase through our Amazon storefront, or otherwise engage with us. Your use of our website and services is subject to this Privacy Policy.
This Policy does not limit any rights you may have under applicable law. As additional state privacy laws take effect, we will update this Policy accordingly. We are a U.S.-based business and this Policy addresses U.S. state privacy frameworks. We do not intentionally target customers in the European Union or other international jurisdictions.
2. Company Information
Pine 9 Solutions LLC d/b/a Pine 9 Holsters
20 Trafalgar Square, Suite 455
Nashua, NH 03063
United States
For questions about this Privacy Policy or your personal information, contact us through either of the following methods:
• Email: legal@pine9holsters.com
• Privacy Request Web Form: www.pine9holsters.com/pages/data-sharing-opt-out
If you have difficulty accessing either method, contact us and we will accommodate your request through an alternative means. We aim to acknowledge all privacy inquiries within five (5) business days. Our mailing address is subject to change; the most current information will be available on our website.
3. Minors
We do not knowingly collect or process personal information from individuals who are considered minors under applicable law. If we become aware that we have collected personal information from a minor, we will take appropriate steps to delete such information. Parents or guardians who believe we have inadvertently collected information from a minor should contact us at legal@pine9holsters.com. Our product category and all marketing are targeted exclusively to adults 18 years of age or older.
4. United States-Only Storefront
This website is operated from the United States and is intended for customers located within the United States only. Pine 9 Holsters does not actively market, advertise, or direct its products or services to individuals outside of the United States. We currently sell and ship exclusively within the United States and do not offer international shipping or checkout for customers located in other countries or regions.
Visitors from outside the United States may access the website for informational purposes only unless access is restricted by our security, fraud prevention, or storefront access control measures. By using this website, you acknowledge that our products, services, policies, and legal terms are designed to comply with United States laws and regulations.
5. Categories of Personal Information We Collect
The categories of personal information we collect depend on how you interact with our services. Not all categories apply to every user.
5.1 Identifiers
We may collect identifiers such as your name, email address, billing address, shipping address, telephone number, IP address, and online identifiers.
5.2 Commercial Information
We may collect commercial information such as products purchased, order history, transaction details, refund history, and purchase preferences.
5.3 Internet or Other Electronic Network Activity Information
We may collect information such as browser type, device type, operating system, pages viewed, referring URLs, time spent on pages, cart activity, session behavior, and interactions with our website, advertisements, or embedded content. This may include navigation patterns, scrolling behavior, clicks, interaction timing, and general engagement with site content.
5.4 Marketing and Engagement Data
We may collect information related to your engagement with our marketing, including email opens, clicks, SMS engagement, ad engagement, audience membership, and campaign responses.
5.5 Customer Support Data
We may collect support-related data including chat messages, support tickets, order-related communications, and communication history.
5.6 Fraud Prevention, Security, and Access Control Information
We may collect fraud prevention and security-related information, such as device signals, IP-based geolocation, VPN or proxy indicators, bot detection signals, and transaction risk indicators. We also collect access control signals — including IP address, VPN or proxy usage indicators, bot detection signals, and referrer data — processed by our storefront access control tools as described in Section 10.5. Some technologies may evaluate browser characteristics, device attributes, and network signals to detect fraud, bots, or abusive traffic, and to enforce storefront access controls.
5.7 Inferences
We may derive inferences about your preferences, likely purchasing behavior, and product interests based on your interactions with our website, communications, and purchases. These inferences may be used to personalize marketing, product recommendations, and advertising experiences.
5.8 Sensitive Personal Information
We do not collect or process sensitive personal information for the purpose of inferring characteristics about consumers.
5.9 Information We Do Not Collect
We do not collect: firearm serial numbers, background check information, government-issued identification numbers (such as Social Security numbers), biometric identifiers, GPS-level or device-level precise geolocation data, health or medical information, or sensitive financial account numbers. We receive only limited payment confirmation data as described in Section 8.
6. Sources of Personal Information
We collect personal information from the following sources:
6.1 Information You Provide Directly
We collect information directly from you when you place an order, sign up for email or SMS communications, fill out forms, submit support requests, use live chat, or otherwise contact us.
6.2 Information Collected Automatically
We collect information automatically through cookies, pixels, tags, embedded content, server logs, and similar tracking technologies.
6.3 Information from Service Providers and Platforms
We may receive information from service providers and platforms such as Shopify, payment processors, shipping carriers, fraud prevention providers, analytics providers, customer support tools, and advertising or marketing platforms.
6.4 Information from Advertising and Marketing Platforms
We may receive information from Google, YouTube, Meta, TikTok, Pinterest, Klaviyo, and similar partners regarding ad interactions, attributed conversions, audience activity, and campaign performance.
6.5 Blockify / Omega
We receive access control and security signals from Blockify, developed by Omega, our storefront access control tool, as described in Section 10.5.
6.6 Pirate Ship
We may receive order, customer, and fulfillment-related information from Pirate Ship, our shipping rate and label management platform, as described in Section 10.8.
6.7 American Warehouse, Inc. and Extensiv We transmit order and customer information to American Warehouse, Inc., our third-party fulfillment provider, and Extensiv, our order management platform, as necessary to fulfill and ship your orders. See Section 10.8.
6.8 Information from Third-Party Marketplaces or Partner Interfaces
If you purchase through our Amazon storefront or other third-party interfaces integrated with our store, we may receive limited order-related information necessary to fulfill, support, and administer those transactions.
7. How We Use Personal Information
We may use personal information to:
• process, fulfill, and manage orders;
• provide customer support and respond to inquiries;
• send marketing communications where permitted by law and consistent with your preferences;
• operate, maintain, improve, and personalize our website and services;
• personalize content, offers, and marketing based on your interactions and inferred preferences;
• restrict storefront access, detect and block bots, VPNs, proxies, and unauthorized traffic, and enforce geographic access controls;
• measure advertising performance and campaign effectiveness;
• prevent fraud, abuse, unauthorized access, and other harmful activity;
• maintain the safety, security, and integrity of our website, systems, and services;
• comply with legal, regulatory, tax, accounting, and reporting obligations; and
• establish, exercise, or defend legal claims.
Certain transactions may be subject to automated risk assessment systems designed to prevent fraud and unauthorized activity. Such systems may influence decisions about whether to process or hold an order. Affected orders are subject to human review, and you may contact us to request reconsideration of any such decision.
These automated systems are used solely for fraud prevention, security, and operational purposes and do not produce legal or similarly significant effects without human review.
8. Shopify and Payment Processing
8.1 Shopify
Our store is hosted by Shopify Inc. Shopify is not merely a passive infrastructure provider — Shopify independently processes customer data for its own platform-level purposes, including operating its Shop app, Shop Pay installments network, Shopify Audiences advertising product, and cross-merchant fraud detection systems. By shopping with us, your data may be processed by Shopify for these purposes in accordance with Shopify's Privacy Policy (www.shopify.com/legal/privacy), which is separate from and in addition to this Policy. We cannot control or limit Shopify's independent data processing activities.
Shopify and related storefront functionality set cookies necessary for cart functionality, checkout, fraud prevention, and platform performance. These include cookies such as _shopify_y, _shopify_s, and _secure_session_id, which are strictly necessary and may fire prior to consent interaction. Shopify advises merchants to review and verify their customer privacy settings and policy content because automated settings are not a substitute for legal review.
If you create an account with us, you are responsible for maintaining the confidentiality of your login credentials. Notify us immediately if you believe your account has been compromised.
8.2 Payment Processors
Payments may be processed through third-party providers such as Shopify Payments, Shop Pay, PayPal, Apple Pay, Google Pay, and buy-now-pay-later services. We do not store full payment card numbers.
8.3 PCI and Payment Security
Payment information is handled by our payment processing providers using industry-standard security measures. Our payment processors are PCI DSS compliant, and raw payment card data is handled entirely within their secure infrastructure. We do not directly handle raw card data.
9. Amazon Marketplace
For purchases made through Amazon, Amazon independently controls its marketplace platform and related data processing. We receive limited order-related information from Amazon solely for fulfillment and customer support purposes. We do not combine Amazon customer data with data collected through our independent website for profiling or advertising purposes, except as permitted by Amazon's policies and applicable law. Amazon's privacy practices are governed by Amazon's Privacy Notice at www.amazon.com/privacy.
10. Advertising, Analytics, and Third-Party Marketing Platforms
We use the following third-party platforms to operate our advertising, analytics, email and SMS marketing, customer support, and storefront security functions. Each platform may collect personal information as described below and is subject to its own privacy policy.
We use cookies, pixels, embedded content, tags, scripts, local storage objects, and similar technologies to collect information about interactions with our website and advertising. We use Shopify's built-in cookie consent tool to provide users with choices regarding non-essential tracking technologies. Depending on your location, browser settings, consent selections, and applicable law, some non-essential technologies may be activated only after consent is provided. However, certain technologies related to site operation, security, fraud prevention, platform functionality, embedded content, or marketing platform initialization may be present prior to or independent of consent due to the architecture of our e-commerce platform and third-party integrations. Where technically feasible, we configure marketing and advertising technologies to limit data collection, activation, or downstream use until consent is provided. Where required by applicable law, marketing-related data processing is limited until consent is provided. Users may withdraw consent or opt out of marketing communications at any time using the controls described in this Policy.
Third-party platforms may independently determine how data is processed once transmitted to them. We do not control how third-party advertising, analytics, or marketing platforms use data once received, and such processing is governed by the respective platform's own privacy policies.
We may use IP-based geolocation for analytics, fraud prevention, bot detection, and storefront access control purposes. This geolocation is approximate and derived from IP address only. We do not collect GPS-level or device-level precise geolocation data.
10.1 Meta (Facebook and Instagram)
We use the Meta Pixel and related technologies for advertising, retargeting, and conversion tracking on Facebook and Instagram. Meta may collect browsing behavior, purchase events, purchase amounts, device identifiers, and IP addresses. We may upload hashed customer email addresses or phone numbers to Meta as custom audiences for ad targeting and lookalike audience creation. Meta may link your activity across devices and platforms using cookies, pixels, and matched identifiers. These disclosures may constitute sharing of personal information under applicable Data Privacy Laws.
Meta's data practices: www.facebook.com/privacy/policy
10.2 Google (Analytics, Ads, and YouTube)
We use Google Analytics and Google Ads for website analytics and advertising. These services may collect page views, interaction data, conversion events, device identifiers, and IP addresses. If our website includes embedded YouTube video content, YouTube may collect data about your viewing behavior and engagement — including when you interact with or play embedded videos — even if you do not have a Google account. Embedded YouTube content may initialize when a page loads, and data collection by YouTube may occur prior to or independent of cookie consent due to the nature of embedded media. Google may link your activity across devices and services.
Google's data practices: policies.google.com/privacy
10.3 TikTok
We use the TikTok Pixel for advertising and retargeting on TikTok's platform. TikTok may collect device data, interaction behavior, IP addresses, and conversion events. TikTok may link your activity across devices.
TikTok's data practices: www.tiktok.com/legal/privacy-policy
10.4 Pinterest
We use the Pinterest Tag for advertising, content distribution, and analytics on Pinterest. Pinterest may collect engagement signals, browsing behavior, outbound click data, and device identifiers. Pinterest may use this data to build interest profiles and serve retargeted advertisements.
Pinterest's data practices: policy.pinterest.com/en/privacy-policy
10.5 Blockify / Omega (Storefront Access Control and Bot Blocking)
We use Blockify, developed by Omega, to restrict and manage access to our storefront based on visitor location, IP address, VPN or proxy usage, and automated bot detection signals. This service may process visitor IP addresses, approximate geolocation derived from IP address (including country and general regional location), device and browser characteristics, and referrer information in order to evaluate and enforce access controls.
Visitors determined to be outside the United States, or accessing the site through VPNs, proxies, or automated traffic, may be restricted from accessing some or all portions of the storefront. This processing is performed for fraud prevention, site security, operational integrity, and regulatory compliance purposes.
Access control and security-related data processed by this service may be retained for a limited period, generally up to 90 days, in accordance with Omega's data retention practices.
Omega's data practices are governed by its Privacy Policy available at: https://omegacommerce.io/privacy-policy
10.6 Klaviyo
We use Klaviyo for email and SMS marketing, segmentation, and automation. Klaviyo may process information such as your name, email address, phone number, purchase history, browsing behavior, and engagement with communications. Klaviyo tracks interactions associated with your profile, including email opens, link clicks, and website behavior when you arrive via a Klaviyo-tracked link. Klaviyo may use this data to build behavioral segments and support personalized marketing.
Klaviyo technologies may load when the website initializes or when certain pages are accessed. Depending on platform configuration, some Klaviyo-related technologies may be present prior to consent interaction due to the architecture of our e-commerce platform. Where technically feasible, marketing-related tracking and data processing through Klaviyo are limited until consent is provided. Klaviyo may also use cookies, pixels, or similar technologies to associate website activity with user profiles for marketing and analytics purposes. Users may withdraw consent or opt out of marketing communications at any time using the controls described in this Policy.
Klaviyo's data practices: www.klaviyo.com/legal/privacy
10.7 Gorgias
We use Gorgias as our customer support and live chat platform. Gorgias may collect and store the content of your support communications, chat interactions, IP address, device data, and related order or browsing context to facilitate support. Communications submitted through Gorgias are retained for customer service and dispute resolution purposes.
Gorgias's data practices: www.gorgias.com/privacy-policy
10.8 American Warehouse, Inc. and Extensiv (Fulfillment and Order Management)
We use American Warehouse, Inc. as our third-party logistics provider for order fulfillment, warehousing, and returns processing. We use Extensiv as an order management and integration platform that connects our Shopify storefront with our fulfillment operations. In connection with fulfilling your order, customer information including name, shipping address, order details, and related fulfillment data is transmitted to American Warehouse, Inc. and Extensiv. This information is used solely for the purpose of fulfilling, shipping, and managing your order. Neither American Warehouse, Inc. nor Extensiv use your personal information for their own advertising or marketing purposes.
American Warehouse, Inc.'s privacy practices: ameraware.net
Extensiv's privacy practices: extensiv.com/privacy-policy
10.9 Pirate Ship
We use Pirate Ship, developed by Pirate Ship LLC, to access discounted shipping rates and manage shipping label generation and order fulfillment. In connection with providing these services, Pirate Ship may access customer data including name, shipping address, order details, and related fulfillment information. Data shared with Pirate Ship may also be transmitted to carriers such as USPS and UPS as necessary to fulfill shipments and comply with carrier regulatory requirements. Pirate Ship does not use merchant customer data for its own advertising purposes.
Pirate Ship's data practices are governed by their Privacy Policy available at: www.pirateship.com/privacy
10.10 Cross-Device Tracking and Identity Matching
Advertising and marketing partners may associate your activity across browsers, devices, sessions, or accounts using cookies, pixels, and similar technologies in accordance with their own privacy practices. Advertising partners may also use identifiers, including hashed contact information such as email addresses, to match users across platforms and devices for advertising and measurement purposes.
10.11 Retargeting
We use retargeting technologies to display advertisements to you based on your prior interactions with our website or content. After visiting our website, you may see Pine 9 Holsters advertisements on other websites, apps, and platforms. Retargeting is carried out through the platforms described in this section and is subject to your consent preferences.
10.12 Server-Side Tracking
We may use server-side tracking technologies or APIs — such as Meta Conversions API or Google Enhanced Conversions — to share event data directly with advertising platforms for measurement and optimization purposes. This may include hashed identifiers such as email addresses, phone numbers, or order information transmitted for conversion measurement and attribution purposes. Hashing is applied before transmission as a privacy-protective measure; however, advertising platforms may use these hashed identifiers to match and associate data with user profiles on their platforms. Server-side tracking operates independently of browser-based cookies and may be used in conjunction with pixel-based tracking.
10.13 Google Tag Manager
We use Google Tag Manager ("GTM") to manage and deploy marketing, analytics, and tracking tags on our website. GTM itself does not collect or store personal information. However, it enables the activation of other tracking technologies — such as Meta Pixel, Google Analytics, TikTok Pixel, and Pinterest Tag — that may process data for advertising and performance measurement purposes as described in this section. GTM operates under strict data protection and confidentiality requirements and acts as a data processor on our behalf.
Google's data practices: policies.google.com/privacy
10.14 Opt-Out of Targeted Advertising
We do not sell personal information for monetary compensation. We do disclose certain personal information — including identifiers, device data, and purchase event data — to advertising partners through pixels, custom audience uploads, conversion tracking, and server-side integrations. These disclosures may qualify as "sharing" or "sale" under certain state privacy laws, including cross-context behavioral advertising definitions under the CCPA/CPRA and similar state frameworks.
You may opt out of targeted advertising and data sharing by:
• Using our cookie consent tool to withdraw consent for advertising cookies.
• Clicking the "Do Not Sell or Share My Personal Information" link in the footer of our website.
• Enabling Global Privacy Control (GPC) in a supported browser. We recognize and honor GPC signals as an opt-out of targeted advertising and data sharing. GPC is distinct from standard browser Do Not Track (DNT) signals, which we do not honor.
• Meta Ad Preferences: facebook.com/ads/preferences
• Google Ad Settings: adssettings.google.com
• TikTok Ad Settings: tiktok.com/privacy/ads-and-your-data
• Pinterest Ad Settings: pinterest.com/settings/privacy
We retain records of consent preferences as required by applicable law.
11. Embedded Third-Party Content
Our website may include embedded content from third-party services such as YouTube videos. When you interact with embedded content, those third-party services may collect data about your interaction, including video views, playback behavior, engagement duration, device identifiers, and IP address, regardless of whether you are logged into their service. Embedded content such as YouTube videos may begin collecting data when the page loads, prior to or independent of cookie consent interaction, due to how embedded media is integrated into our website. This data collection is governed by the third party's own privacy policy.
12. Email and SMS Marketing
12.1 Email Marketing
We may send promotional emails to customers who have opted in or as otherwise permitted by applicable law, including CAN-SPAM. All marketing emails will identify Pine 9 Solutions LLC d/b/a Pine 9 Holsters as the sender, include our physical mailing address, and provide a clear and conspicuous unsubscribe mechanism. We will process unsubscribe requests within 10 business days as required by CAN-SPAM. To unsubscribe, click the unsubscribe link in any marketing email or contact legal@pine9holsters.com.
Transactional emails (order confirmations, shipping updates, receipts) are necessary for order fulfillment and are not subject to marketing opt-out.
12.2 SMS / Text Message Marketing
If you opt in to receive SMS marketing, you provide express written consent to receive recurring automated marketing text messages. Consent is not a condition of purchase, message and data rates may apply, message frequency may vary, and you may opt out at any time by replying STOP to any SMS message or by contacting legal@pine9holsters.com. We maintain records of consent where required by law.
We will only send SMS messages with your express written consent as required by the TCPA. This Policy will be updated and all required consents obtained before any new SMS program launches.
13. Abandoned Cart Communications
If you begin checkout but do not complete your purchase and have provided your email address, we or our service providers (such as Klaviyo or Shopify) may send a follow-up email reminding you of items in your cart. These communications are based on your browsing behavior tied to your identity as established through the checkout process or your account. You may opt out by clicking the unsubscribe link in any such email or by contacting us at legal@pine9holsters.com.
14. Disclosure of Personal Information
We disclose personal information to the following categories of recipients for the business purposes described in this Policy:
• Payment processors and financial service providers.
• Shipping carriers, third-party logistics providers including American Warehouse, Inc., order management providers including Extensiv, and shipping rate and label management providers including Pirate Ship.
• Advertising and marketing partners, including Meta, Google, TikTok, and Pinterest (Section 10).
• Email and marketing automation providers, including Klaviyo.
• Customer support platforms, including Gorgias.
• Storefront access control and security providers, including Blockify by Omega (Section 10.5).
• Analytics providers.
• Shopify and its affiliated services (Section 8).
• Third-party Shopify applications that provide functionality to our store.
• IT, security, and fraud prevention providers.
• Legal, tax, and accounting advisors.
• Law enforcement and government authorities (Section 15).
• In connection with a merger, acquisition, restructuring, financing, or sale of assets. We will notify affected users as required by law.
We require service providers to process personal information solely for authorized business purposes pursuant to written agreements. We do not authorize service providers to retain, use, or disclose personal information for their own independent purposes, except as required by law.
We may use aggregated or de-identified information for analytics, reporting, and business development. Such information does not identify individual users. We maintain aggregated or de-identified information in de-identified form and do not attempt to re-identify individuals from such data.
15. Law Enforcement and Legal Requests
Given the nature of our products, we may receive requests from law enforcement agencies for customer data. We do not voluntarily disclose customer personal information to law enforcement without a valid legal process — including a warrant, court order, subpoena, or other legally binding demand — except in cases of emergency involving imminent risk of death or serious bodily harm.
Where legally permitted, we will notify affected customers of law enforcement requests prior to disclosure. We will evaluate each request to ensure it is legally sufficient before responding. We may object to or challenge requests that we believe are overly broad, invalid, or inconsistent with applicable law.
16. Your Privacy Rights
Depending on your state of residence, you may have the following rights:
• Right to know: the categories and specific pieces of personal information we have collected about you, and the categories of sources, purposes, and third parties involved.
• Right to access: a copy of the personal information we hold about you.
• Right to correct: inaccurate personal information we hold about you.
• Right to delete: your personal information, subject to certain exceptions (for example, we may retain data needed to complete a transaction, comply with a legal obligation, or defend a legal claim).
• Right to a copy of your data: a copy of personal information we have collected about you in a portable format where technically feasible.
• Right to opt out of targeted advertising and data sharing: as described in Section 10.14.
• Right to limit use of sensitive personal information: to the extent we collect any sensitive personal information as defined under applicable law, you may request that we limit its use to necessary purposes.
• Right to non-discrimination: we will not unlawfully discriminate against you for exercising your privacy rights, except as permitted by applicable law. Note that if you request deletion of personal information necessary to fulfill an order or provide a service, we may be unable to complete that transaction.
Certain rights may be subject to statutory exceptions or limitations under applicable law.
16.1 How to Submit a Request
To exercise your privacy rights, contact us through either of the following methods:
• Email: legal@pine9holsters.com
• Privacy Request Web Form: www.pine9holsters.com/pages/data-sharing-opt-out
Your request must include sufficient information to allow us to verify your identity and understand the scope of your request.
16.2 Response Timeframes
We will respond to verifiable consumer privacy requests within the timeframe required by applicable law. For residents of California, we will respond to requests within forty-five (45) calendar days of receipt, as required by the California Consumer Privacy Act. If additional time is required, we may extend the response period by an additional forty-five (45) days where permitted by law, and we will notify you of the extension and the reason for the delay within the initial 45-day period.
Where no specific timeframe is required by law, we aim to acknowledge requests within approximately ten (10) business days and provide a substantive response as soon as reasonably practicable.
16.3 Authorized Agents
California residents may submit privacy rights requests through an authorized agent. You must provide the agent with written permission to act on your behalf. We may require you to verify your identity directly with us before processing a request submitted by an agent. We may deny requests from agents who cannot demonstrate valid written authorization.
16.4 Appeals
If we decline to take action on your request, we will notify you with the reasons. You may appeal by contacting legal@pine9holsters.com within 30 days of receiving our denial, with "Privacy Appeal" in the subject line. We will respond to appeals within 60 days as required under applicable state laws. If your appeal is denied, you may submit a complaint to your state attorney general or applicable regulatory authority.
16.5 Financial Incentives
If we offer any discount, loyalty benefit, or other incentive in exchange for the collection or use of your personal information, we will provide a separate financial incentive notice at the point of collection explaining the material terms and your right to withdraw. Participation in such programs is voluntary and you may withdraw at any time.
17. Notice at Point of Collection
Where required by law, we provide notice at or before the point of collection through checkout pages, signup forms, account registration interfaces, email and SMS subscription forms, cookie consent interfaces, and other relevant collection points. These notices disclose the categories of personal information collected and the purposes for which it will be used, and may link to this Privacy Policy. If you do not see a Notice at Collection on a particular form, please contact us at legal@pine9holsters.com.
18. Data Retention
We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy. Our retention periods by data category are:
• Order, transaction, and tax records: seven (7) years from the date of transaction.
• Marketing and email engagement data: until you unsubscribe, or after twenty-four (24) consecutive months of inactivity (no opens, clicks, or purchases), whichever occurs first.
• Fraud prevention, access control, and dispute records: seven (7) years from the relevant transaction or incident.
• Customer support communications: three (3) years from the date of the interaction.
• Cookie consent records: three (3) years from the date of consent, or as otherwise required by applicable law.
• Account data: for the duration of your active account, plus three (3) years following account closure.
• SMS consent records: retained as required by applicable law and TCPA compliance obligations.
We may retain personal information beyond these periods where necessary to comply with a legal obligation, resolve an active dispute, enforce our agreements, or protect our legitimate legal interests. When retention is no longer necessary, we will delete or anonymize your personal information.
19. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect personal information, including:
• Encryption of data in transit using TLS/SSL protocols.
• Access controls limiting access to personal information to personnel with a business need to know.
• Contractual security requirements imposed on service providers handling personal information on our behalf.
• Reliance on PCI DSS-compliant payment processors for all payment card data handling.
• Storefront access controls including country-level blocking, VPN and proxy detection, and bot mitigation to reduce exposure to fraudulent and malicious traffic.
While we implement these safeguards, no method of Internet transmission or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials. Notify us immediately at legal@pine9holsters.com if you suspect unauthorized access to your account.
In the event of a data breach involving personal information, we will investigate promptly and provide notice to affected individuals and regulatory authorities as required by applicable state breach notification laws.
20. International Data Transfers
We are a U.S.-based company that operates a U.S.-only storefront. We process personal information in the United States. Some service providers may process personal information in other countries. We implement technical controls to restrict storefront access to U.S.-based visitors. Where required, we implement appropriate legal safeguards for international data transfers by our service providers.
Our products may be subject to U.S. export control laws and regulations, including ITAR and EAR. We do not export products to restricted destinations or parties. Our country-level access controls support compliance with these obligations.
21. Governing Law and Dispute Resolution
This Privacy Policy is governed by the laws of the State of New Hampshire, without regard to its conflict of law provisions, except where a specific state's privacy law applies to a resident of that state. Any dispute arising under or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the state and federal courts located in Hillsborough County, New Hampshire, unless otherwise required by applicable law.
Nothing in this section limits your rights under applicable state privacy laws, including your right to submit complaints to your state attorney general.
22. Changes to This Policy
We may update this Policy periodically. Updates will be reflected by a revised "Last Updated" date and version number at the top of this Policy. For material changes — such as new categories of data collection, new sharing practices, or significant changes to your rights — we will provide prominent notice on our website and, where feasible, email notice to existing customers prior to the change taking effect. Your continued use of our website after the effective date of a material change constitutes acceptance of the revised Policy.
Prior versions of this Policy are available upon request by contacting legal@pine9holsters.com.
23. Accessibility
If you have difficulty accessing this Privacy Policy or require it in an alternative format, please contact us at legal@pine9holsters.com and we will accommodate your request.
24. Contact Us
For questions, concerns, or requests relating to this Privacy Policy:
Pine 9 Solutions LLC d/b/a Pine 9 Holsters
Attn: Privacy
20 Trafalgar Square, Suite 455
Nashua, NH 03063
Email: legal@pine9holsters.com
Privacy Request Form: www.pine9holsters.com/pages/data-sharing-opt-out
Pine 9 Holsters
Cookie Policy
Effective Date: February 27, 2026 | Last Updated: March 26, 2026 | Version 14.0
1. Scope
This Cookie Policy explains how Pine 9 Solutions LLC, doing business as Pine 9 Holsters, uses cookies, pixels, tags, embedded content, local storage objects, scripts, and similar technologies on www.pine9holsters.com and related pages, storefront experiences, and communications. This Cookie Policy should be read together with our Privacy Policy.
2. What Cookies and Similar Technologies Are
Cookies are small text files placed on your browser or device when you visit a website. Similar technologies may include pixels, tags, SDKs, scripts, local storage, session storage, and server-side tracking mechanisms that collect or transmit information about your browsing activity, device, or interactions.
3. Types of Cookies and Similar Technologies We Use
3.1 Strictly Necessary Technologies
These technologies are used for core site functionality and security. They may be used to:
• operate the storefront and shopping cart;
• enable checkout and payment flows;
• remember privacy choices;
• maintain session integrity;
• detect fraud, abuse, or malicious traffic;
• support security and access controls; and
• provide network and platform functionality through Shopify and related systems.
Because these technologies are necessary for the site to function or for security purposes, they may operate without prior consent where permitted by law.
3.2 Analytics and Performance Technologies
These technologies help us understand how visitors use our website, which pages are visited, how long users stay, where traffic comes from, and how users interact with our content. They help us evaluate and improve website performance, marketing, and user experience. Only set with your consent where required by applicable law.
3.3 Advertising and Targeting Technologies
These technologies help us measure ad performance, understand conversion activity, build audiences, retarget prior visitors, and deliver ads that may be more relevant to users based on previous interactions with our website and content. Advertising cookies may be placed by partners including Meta, Google, TikTok, and Pinterest. Only set with your consent where required by applicable law.
Examples: Meta Pixel (_fbp, _fbc), Google Ads conversion cookies, TikTok Pixel, Pinterest Tag.
3.4 Functional Technologies
These technologies may support enhanced site features, content display, embedded media, chat tools, and user experience functions. Only set with your consent where required by applicable law.
3.5 Session Replay and Behavioral Analytics
We may use session replay or behavioral analytics tools for analytics and optimization purposes. If deployed, these tools may record mouse movements, scrolling behavior, clicks, navigation patterns, and form interactions on our website. Only set with your consent. We will update this Cookie Policy to reflect the specific behavioral analytics tools deployed on our website.
4. Information Collected by Cookies and Similar Technologies
Depending on the technology used, cookies and similar tools may collect or process:
• IP address;
• browser type and version;
• operating system;
• device type and identifiers;
• pages visited and navigation behavior;
• referring URL and campaign parameters;
• cart activity and purchase behavior;
• approximate geolocation derived from IP address;
• interaction with ads, embedded content, or communications;
• session data;
• bot, VPN, proxy, or fraud detection signals; and
• browser characteristics, device attributes, and network signals used for fraud detection, bot mitigation, and access control purposes.
5. Specific Technologies and Providers We May Use
5.1 Shopify
Shopify and related services use cookies and similar technologies to support storefront operation, security, checkout, Shop Pay, Shop App functionality, analytics, and platform services. Shopify sets strictly necessary cookies including _shopify_y, _shopify_s, and _secure_session_id, which are required for cart and checkout functionality and may fire prior to consent interaction. Shopify provides merchant privacy tools and settings but makes clear that merchants remain responsible for ensuring policy accuracy and compliance.
5.2 Google and YouTube
We may use Google Analytics, Google Ads, YouTube embeds, and related tools to analyze traffic, measure performance, and evaluate ad results. When you interact with embedded YouTube content, Google or YouTube may collect information about your device and activity regardless of whether you are logged in. Embedded YouTube content may initialize when a page loads and may collect data prior to or independent of cookie consent interaction.
Google Analytics examples: _ga, _gid, _gat.
5.3 Meta
We may use Meta Pixel and related technologies to measure advertising effectiveness, build audiences, track conversions, and support retargeting. Meta may associate your on-site activity with your Meta account.
5.4 TikTok and Pinterest
We may use TikTok Pixel, Pinterest Tag, and similar tools to measure campaign performance, track conversion activity, and support targeted advertising.
5.5 Klaviyo
We may use Klaviyo technologies to support email and SMS marketing, campaign measurement, segmentation, and automation. Klaviyo technologies may load when the website initializes and may be present prior to consent interaction due to the architecture of our e-commerce platform. Where technically feasible, marketing-related data processing through Klaviyo is limited until consent is provided where required by applicable law.
5.6 Gorgias
We may use Gorgias technologies to support live chat, support workflows, and customer service functions.
5.7 Google Tag Manager
We use Google Tag Manager ("GTM") to manage and deploy marketing, analytics, and tracking tags. GTM itself does not collect or store personal information but enables the activation of other tracking technologies described in this policy.
5.8 Blockify / Omega
We may use Blockify, developed by Omega, to evaluate IP address, approximate IP-based geolocation, device and browser characteristics, VPN or proxy usage, bot detection signals, and referrer information in order to manage storefront access, detect abuse, and enforce security or geographic access controls. Access control and security-related data processed by this service may be retained for a limited period, generally up to 90 days, in accordance with Omega's data retention practices.
Omega's Privacy Policy is available at: https://omegacommerce.io/privacy-policy
6. Why We Use Cookies and Similar Technologies
We use these technologies to:
• operate and secure our website;
• process transactions and maintain sessions;
• remember preferences and privacy choices;
• analyze site traffic and performance;
• understand user behavior and engagement;
• improve functionality, content, and user experience;
• measure advertising effectiveness;
• personalize marketing and content;
• detect, prevent, and investigate fraud, bots, scraping, and abuse; and
• enforce storefront access restrictions.
7. Consent and Control
Depending on your location and applicable law, non-essential cookies and similar technologies may be enabled only after consent. Strictly necessary and security-related technologies may still operate without consent where permitted by law.
We use Shopify's built-in cookie consent tool to manage consent for non-essential tracking technologies. When you first visit our website, you will be presented with a cookie consent banner. Your consent choices are recorded and applied to your current and future browsing sessions. Our consent banner is configured to suppress advertising pixels — including those from Meta, Google Ads, TikTok, and Pinterest — until and unless you provide consent.
Please note that certain platform-level technologies, embedded content (such as YouTube videos), and marketing platform initialization scripts (such as Klaviyo) may be present prior to or independent of consent interaction due to the architecture of our e-commerce platform and third-party integrations. Where technically feasible, we configure marketing and advertising technologies to limit data collection, activation, or downstream use until consent is provided. Where required by applicable law, marketing and advertising functionality associated with these technologies is limited until consent is provided. Users may withdraw consent or opt out at any time using the controls described below.
You may manage your choices through:
• our cookie consent banner or preference settings on our website;
• the "Do Not Sell or Share My Personal Information" link where available;
• supported browser-based Global Privacy Control settings; and
• your browser settings.
8. Browser Controls
Most browsers allow you to block, delete, or manage cookies through browser settings. Blocking some cookies may affect website functionality, including cart, checkout, login-related features, saved preferences, and site performance.
9. Global Privacy Control
We honor Global Privacy Control signals where required by applicable law. GPC is distinct from standard browser Do Not Track (DNT) signals, which we do not honor.
10. Additional Opt-Out Tools
• Meta Ad Preferences: facebook.com/ads/preferences
• Google Ad Settings: adssettings.google.com
• TikTok Ad Settings: tiktok.com/privacy/ads-and-your-data
• Pinterest Ad Settings: pinterest.com/settings/privacy
• Network Advertising Initiative opt-out: networkadvertising.org/choices
• Digital Advertising Alliance opt-out: optout.aboutads.info
11. Retention
Data collected through cookies and similar technologies may be retained for varying periods depending on the technology, purpose, legal requirements, fraud prevention needs, provider settings, and operational necessity. Some cookies expire when you close your browser, while others may remain for longer unless deleted.
12. Third-Party Controls and Policies
Third-party providers may process data collected through their own technologies in accordance with their own privacy policies and terms. We do not control how third-party platforms use data once received, and such processing is governed by the respective platform's own privacy policies. We encourage users to review the privacy policies of those providers for more information about their data practices and available choices.
13. Changes to This Cookie Policy
We may update this Cookie Policy from time to time. Material changes will be reflected by updating the "Last Updated" date and, where appropriate, by providing notice through our website or other means. Prior versions are available upon request by contacting legal@pine9holsters.com.
14. Contact Information
If you have questions regarding this Cookie Policy or our privacy practices, contact:
Email: legal@pine9holsters.com
Privacy Request Form: www.pine9holsters.com/pages/data-sharing-opt-out
This Privacy Policy and Cookie Policy were last updated March 26, 2026 and supersede all prior versions.