Effective September 9, 2026
This policy covers whatsuppwithlucas.com and the Whatsuppwithlucas online store. It explains what we collect, why, who receives it, and what you can ask us to do about it. Plain English, no filler.
Who we are
Whatsuppwithlucas ("we," "us," "the Site") is a supplement and fitness review site with a small merch shop, operated by Lucas Kaelin in Texas, United States. For anything privacy-related, email inquires@getbig973.com.
What we collect
- Order information. When you buy merch, checkout collects your name, email address, shipping and billing address, a phone number if you give one, and what you ordered. Card details are entered directly into Shopify's checkout and handled by Shopify and the card networks. We never see or store your full card number — only the last four digits, the card brand, and whether the payment went through.
- Account information. If you use a customer account, we store your saved addresses and order history.
- Quiz information. The pre-workout finder quiz collects your first name, your email address, and the answers you choose. A separate checkbox asks whether you also want marketing email. The quiz gives you a result either way.
- Form information. The contact form and the product-submission form collect whatever you type — usually a name, an email address, a phone number or brand details if you add them, and your message.
- Email signups. Your email address and the fact that you opted in.
- Site usage. Your IP address, browser and device type, the page that referred you, the pages you viewed, and what you click or add to cart. This comes from cookies and similar technologies.
Why we use it
- To process, ship, and support your order, and to send order and shipping email.
- To answer your messages and review product submissions.
- To send marketing email, only if you opted in, and only until you unsubscribe.
- To show you your quiz result and, if you asked for it, related email.
- To understand which pages and products people actually use, so the site gets better.
- To block spam, fraud, and abuse.
- To meet our tax, accounting, and legal obligations.
If you are in the EEA or UK, our lawful bases are: contract for orders and support, consent for marketing email and for non-essential cookies, legitimate interests for security, fraud prevention, and basic measurement, and legal obligation for tax and accounting records.
Who we share it with
- Shopify hosts the storefront, runs checkout and customer accounts, sends order email, and provides its own analytics cookies. Shopify processes this information on our behalf.
- Klaviyo runs our marketing email and also places an onsite web pixel that records what you browse and buy, so the email you get is relevant rather than random.
- Spam protection. Shopify's built-in protection on our forms (Google reCAPTCHA or hCaptcha) loads Google scripts to tell people apart from bots.
- Embedded content. Instagram posts and reels, and in some places YouTube videos, load from those platforms and can set their own cookies. Their privacy policies govern that.
- Shipping carriers receive your name and delivery address so your order can arrive.
- Advisers and authorities, where the law requires it or to protect our legal rights.
We do not sell your personal information for money, and we do not rent or trade our email list.
Selling and sharing, honestly
Under California law, "sale" and "sharing" cover more than money changing hands. "Sharing" includes handing information to a partner for cross-context behavioral advertising. The Klaviyo web pixel falls inside that definition, so we treat it as sharing for targeted advertising rather than hide behind a technicality. Nothing else on this site does. You can opt out at any time on our Do Not Sell or Share page or by email. Other states call this targeted advertising; the opt-out is the same one.
What we do not run
As of the effective date above, this site does not run Google Analytics, the Meta pixel, or the TikTok pixel. We do not buy personal information from data brokers.
Cookies and the consent banner
- Essential — cart, checkout, accounts, security, and the spam check. The store cannot work without these.
- Analytics and performance — Shopify's own analytics, which show which pages and products get used.
- Marketing — the Klaviyo pixel, plus cookies set by embedded Instagram or YouTube content.
If you are in the EEA, the UK, Switzerland, or Canada, Shopify's cookie banner appears and non-essential cookies wait for your answer. You can change your mind later on our Do Not Sell or Share page, or by clearing cookies in your browser. Blocking essential cookies will break checkout.
If your browser sends a Global Privacy Control signal, we treat it as a valid opt-out of sale and sharing for that browser.
Affiliate links
Many outbound links and discount codes on this site earn us a commission. Once you click through you are on that brand's site, under that brand's privacy policy, and they may set their own cookies to credit the referral. See our Compensation Disclosure.
How long we keep it
Order records are kept as long as tax and accounting rules require, currently seven years. Marketing contacts and quiz signups are kept until you unsubscribe or ask us to delete them. Messages from our forms are kept up to two years. Analytics data is retained on a rolling basis, not indefinitely.
Your rights
Wherever you live, you can ask us to tell you what we hold, give you a copy, correct it, delete it, stop marketing to you, or stop sharing it for advertising.
California (CCPA/CPRA). You can know, access, correct, delete, get a portable copy, and opt out of the sale or sharing of your personal information. We do not use sensitive personal information to infer characteristics about you, so there is nothing extra to limit. You may use an authorized agent; we will ask for proof you authorized them. We will never discriminate against you for exercising these rights. Same prices, same service.
Texas (Data Privacy and Security Act). You can access, correct, and delete your information, get a portable copy, and opt out of targeted advertising, sale, and profiling. If we refuse a request, you may appeal by replying to our decision, and you can complain to the Texas Attorney General.
Other US states with comparable privacy laws: we extend the same rights to you.
EEA and UK (GDPR). You can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting what came before, and you can complain to your local supervisory authority or the UK Information Commissioner's Office.
How to exercise them
Email inquires@getbig973.com with the subject line "Privacy Request", ideally from the address you use with us. To opt out of sale or sharing, use the Do Not Sell or Share page or turn on Global Privacy Control — no email needed. To stop marketing email, use the unsubscribe link at the bottom of any message.
We may need to verify who you are, usually by asking you to confirm details of a recent order. We respond within 45 days and will tell you if we need longer. Opt-out requests are actioned within 15 business days.
Children
This site covers sports nutrition and is intended for adults. It is not directed to anyone under 18, we do not knowingly collect personal information from children, and we do not knowingly collect anything from a child under 13 as defined by COPPA. If you believe a minor has given us information, email us and we will delete it.
Security
The store and checkout run over encrypted connections on Shopify's infrastructure, and access to order and email data is limited to the operator of this site. No system is perfect, but we do not hold card numbers ourselves, which removes the most sensitive piece from the equation.
International visitors
We are based in the United States, and your information is stored and processed here by us and by our providers. Where a transfer from the EEA or UK needs a safeguard, we rely on the standard contractual clauses our providers use, or on your own request when you order from abroad.
Changes
If we change this policy we will update the effective date and post the new version here. If a change materially affects your rights, we will say so plainly rather than quietly editing the page.
Contact
Questions, requests, or complaints: inquires@getbig973.com.