Privacy policy

Privacy policy

Last updated: October 2026

Stepz Club is a brand operated by MRCS SERVICES LLC, a limited liability company organized in the State of New Mexico, United States, with its registered address at 150 Washington Avenue, Suite 201, Santa Fe, NM 87501, United States. Customer support: support@stepzclub.com. This document applies to all orders placed on stepzclub.store.

Who is responsible for your data

The data controller for the personal data collected through stepzclub.store is MRCS SERVICES LLC, 150 Washington Avenue, Suite 201, Santa Fe, NM 87501, United States. You can contact us about this policy at support@stepzclub.com. We sell to customers in the United States and in Europe, including the United Kingdom.

What we collect

  • Order and account information: name, email address, phone number, billing and delivery address, the products you buy and your order history.
  • Payment information: payments are processed by our payment providers. We receive confirmation of payment and the last digits and brand of your card; we never store your full card number.
  • Communications: the emails and messages you send us, including photos you attach to a refund request.
  • Device and usage information: IP address, browser and device type, approximate location, the pages you visit and the links you click, collected through cookies and similar technologies described below.
  • Marketing preferences: whether you subscribed to our emails and how you interact with them.

Why we use it and on what legal basis

  • To process and deliver your order, send order and shipping confirmations and handle refunds. Legal basis: performance of a contract.
  • To provide customer support and answer your messages. Legal basis: performance of a contract and our legitimate interest in serving our customers.
  • To prevent fraud and protect the store, including screening orders for fraud risk. Legal basis: our legitimate interests and, where applicable, legal obligation.
  • To comply with the law, including tax, accounting and consumer protection obligations. Legal basis: legal obligation.
  • To measure and improve the store and our advertising through the tools listed in the cookies section. Legal basis: your consent, which you can withdraw at any time.
  • To send marketing emails if you subscribed. Legal basis: your consent; you can unsubscribe at any time.

Who we share it with

We share personal data only as needed to run the store:

  • Shopify Inc., which hosts the store and the checkout.
  • Payment providers (Shopify Payments and PayPal, where offered), which process your payment.
  • Our fulfillment partner in China and the carriers, which receive your name, delivery address, phone number and the content of your order to ship it. Customs authorities in the destination country may receive the information required by law.
  • The advertising, analytics and email providers listed in the cookies section.
  • Professional advisers and authorities where required by law or to protect our rights.

We do not sell your personal data for money. Some of the advertising tools below may be considered a "sale" or "sharing" of personal information under California law; you can opt out as described in the California section.

International transfers

MRCS SERVICES LLC is located in the United States, and the providers above process data in the United States, in China (fulfillment partner) and in other countries. If you are in the European Economic Area, the United Kingdom or Switzerland, your data is transferred under appropriate safeguards, such as the European Commission's standard contractual clauses and the UK International Data Transfer Addendum, or to providers certified under the EU-US, UK-US or Swiss-US Data Privacy Framework. You can ask us for a copy of the safeguards at support@stepzclub.com.

How long we keep it

Order, payment and support records are kept for as long as needed to fulfil the order, handle refunds and disputes, and meet our tax and accounting obligations, generally up to 7 years from the order date. Marketing data is kept until you unsubscribe. Analytics and advertising data is kept for the periods set by each provider, generally no more than 26 months.

Cookies and tracking tools

The store uses cookies and similar technologies. Essential cookies set by Shopify are necessary for the store to work (cart, checkout, security, language and currency) and cannot be switched off. The following optional tools are only activated with your consent, which you give or refuse in the cookie banner shown on your first visit and can change at any time through the cookie settings link in the footer.

Tool and provider Purpose How to refuse
Meta Pixel
Meta Platforms, Inc. (Facebook and Instagram)		 Measures the results of our advertising on Facebook and Instagram and allows us to show our ads to people who visited the store (retargeting). Decline advertising cookies in the cookie banner, use the "Do not sell or share my personal information" link, or adjust your ad preferences in your Facebook or Instagram account settings.
Google Analytics 4
Google LLC		 Produces anonymous statistics about how visitors use the store (pages viewed, time on site, device, approximate location) so that we can improve it. Decline analytics cookies in the cookie banner or install the Google Analytics opt-out browser add-on.
TikTok Pixel
TikTok Technology Limited / TikTok Inc.		 Measures the results of our advertising on TikTok and allows us to show our ads to people who visited the store. Decline advertising cookies in the cookie banner, use the "Do not sell or share my personal information" link, or adjust your ad preferences in your TikTok account settings.
Klaviyo
Klaviyo, Inc.		 Sends our order emails and, if you subscribed, our marketing emails, and records which emails and store pages you open so that we can send you relevant messages. Use the unsubscribe link in any marketing email, decline marketing cookies in the cookie banner, or email us to be removed.

You can also block or delete cookies in your browser settings, and we honor the Global Privacy Control signal sent by your browser as an opt-out from targeted advertising. Refusing optional cookies does not affect your ability to buy from the store.

Your rights under the GDPR (European Union and European Economic Area)

You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time without affecting the lawfulness of processing before the withdrawal. You also have the right to lodge a complaint with the data protection supervisory authority of your country of residence. To exercise your rights, email support@stepzclub.com; we answer within one month.

Your rights under the UK GDPR (United Kingdom)

If you are in the United Kingdom, you have the same rights as described above under the UK GDPR and the Data Protection Act 2018, and you may complain to the Information Commissioner's Office (ico.org.uk). We have not appointed a UK representative; you can reach us at support@stepzclub.com.

Your rights under the CCPA and CPRA (California)

If you are a California resident, you have the right to know what personal information we collect, use, disclose, sell or share, and to access it; the right to delete it; the right to correct inaccurate information; the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising; the right to limit the use of sensitive personal information (we do not use sensitive personal information for purposes that require this right); and the right not to be discriminated against for exercising your rights. In the last 12 months we collected the categories listed above and disclosed them to the providers listed above for business purposes. The advertising tools listed in the cookies section may constitute sharing under the CPRA. To opt out, use the Do not sell or share my personal information page, decline advertising cookies in the cookie banner, or enable the Global Privacy Control signal in your browser. To exercise your other rights, email support@stepzclub.com with the subject "California privacy request"; we verify requests by matching the information you provide with our records, and you may use an authorized agent.

Children

The store is not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

Security

We use Shopify's secure infrastructure, encrypted connections (HTTPS) and PCI-compliant payment providers. Access to personal data is limited to the people who need it to run the store.

Changes to this policy

We may update this policy from time to time. The date of the last update is shown at the top. If a change is material, we will post a notice in the store.

Contact

MRCS SERVICES LLC, 150 Washington Avenue, Suite 201, Santa Fe, NM 87501, United States. Email: support@stepzclub.com. Corporate website: mrcsllc.com.