Privacy Policy

Last updated: August 26, 2025

This Privacy Policy explains how Whoop Adapter — a service by BeyondSky OÜ (“we”, “us”, “our”) collects, uses, shares, and protects your personal data when you visit whoopadapter.com, purchase a product, or contact us.

We do not sell your personal data.

1) Data Controller & Contact

Controller:
BeyondSky OÜ (private limited company)
Registered office: Narva mnt 5, 10117 Tallinn, Estonia
Operating/returns address (logistics): 199 rue des Cévennes, 34970 Lattes, France
Phone: +33 6 32 52 05 43
Email: contact@whoopadapter.com.

Data protection contact: Use contact@whoopadapter.com for any privacy request (access, deletion, etc.).

EU representative / DPO: Not applicable; we operate from the EU and have not appointed a Data Protection Officer.

2) What Data We Collect

a) Data you provide

  • Order & account data: name, billing/shipping address, email, phone, order contents, instructions, invoice details.

  • Payment data: we receive payment confirmations and limited identifiers from our payment processor (e.g., transaction ID, last 4 digits, card brand). We do not store full card numbers; card data is handled by Stripe.

  • Support & communications: messages you send via email or forms (contact details, order ID, attachments/photos for returns or warranty).

  • Newsletter sign-up: email address and consent preferences.

b) Data we collect automatically

  • Device & usage data: IP address, device/browser information, pages viewed, timestamps, referral/UTM parameters.

  • Cookies & similar tech: described in Section 8.

3) Purposes & Legal Bases (GDPR Art. 6)

We process personal data only for the purposes below and under the corresponding legal bases. We apply the shortest retention necessary to meet these purposes and our legal obligations (see Section 6).

Fulfilling your order.
We use your data to process payments, prepare and ship products, provide order confirmations/updates, and handle warranty.
Legal basis: performance of a contract or steps prior to entering into a contract (Art. 6(1)(b)).

Customer support and returns.
We respond to inquiries, troubleshoot issues, and manage returns or exchanges (including verifying eligibility and arranging logistics).
Legal basis: performance of a contract (Art. 6(1)(b)) and, where appropriate, our legitimate interests in providing and improving support (Art. 6(1)(f)).

Fraud prevention and security.
We monitor for suspicious activity, protect transactions, and secure our services and users.
Legal basis: our legitimate interests in preventing fraud and ensuring security (Art. 6(1)(f)).

Compliance and bookkeeping.
We keep records for tax/VAT, accounting, and regulatory reporting, and we may process data to establish, exercise, or defend legal claims.
Legal basis: compliance with legal obligations (Art. 6(1)(c)) and, where applicable, legitimate interests (Art. 6(1)(f)).

Marketing communications (newsletter).
If you opt in, we send news and updates about our products. You can unsubscribe at any time.
Legal basis: your consent (Art. 6(1)(a)).

Analytics and performance improvements (cookies/measurement).
If enabled, we use non-essential cookies or similar technologies to understand site performance and improve the user experience. These are activated only with your consent and can be withdrawn at any time via cookie settings.
Legal basis: your consent (Art. 6(1)(a)).

Optional functional features.
Where features remember preferences (e.g., language or saved details) beyond what’s strictly necessary, we process data to deliver those conveniences.
Legal basis: your consent (Art. 6(1)(a)) or our legitimate interests in enhancing usability (Art. 6(1)(f)), depending on the feature and your settings.

* We apply the shortest period that meets business needs and legal obligations.

4) Processors & Service Providers

We use third parties to operate our website and process payments. They act as processors and process your data only under our instructions:

  • Squarespace – website hosting/CMS, forms, order management, site performance. Privacy: squarespace.com/privacy.

  • Stripe – secure payment processing (incl. 3-D Secure, fraud screening). Privacy: stripe.com/privacy.

We may also use additional service providers (e.g., email delivery, customer support tools, shipping carriers). Where required, we put in place Data Processing Agreements (DPAs) and appropriate safeguards.

5) Sharing Your Data

We share personal data only as needed:

  • Payment providers (Stripe): to process your payment and prevent fraud.

  • Logistics/shipping partners: to deliver your order (name, address, contact).

  • Professional advisors & authorities: for accounting, tax, legal compliance, or to defend legal claims.

  • Business transfers: in the event of a merger, acquisition, or asset sale, in accordance with data protection laws.

We do not sell your personal data.

6) Retention

  • Orders, invoices, and accounting records: kept for the period required by applicable law. For Estonian companies, accounting source documents must be preserved 7 years after the end of the financial year in which they were recorded.

  • Support communications: retained while your request is active and for a reasonable period thereafter to improve service and prevent repeat issues.

  • Marketing (newsletter): until you unsubscribe or we delete inactive subscribers.

  • Analytics cookies and logs: see Section 8.

We regularly review data and delete or anonymize it when no longer needed.

7) Your Rights (GDPR)

You can exercise these rights at contact@whoopadapter.com:

  • Access your data and obtain a copy.

  • Rectify inaccurate or incomplete data.

  • Erase data (“right to be forgotten”) where applicable.

  • Restrict processing in certain cases.

  • Portability of data you provided to us, in a structured, commonly used, machine-readable format.

  • Object to processing based on legitimate interests and to direct marketing at any time.

  • Withdraw consent at any time (e.g., for marketing or non-essential cookies), without affecting prior lawful processing.

You also have the right to lodge a complaint with a supervisory authority. You can contact your local authority in the EEA; for our home jurisdiction this is the Estonian Data Protection Inspectorate (AKI).

8) Cookies & Analytics

a) What are cookies?

Cookies are small text files placed on your device that help run the site and remember preferences.

b) Types we use

  • Strictly necessary cookies (essential): required for the site, cart, checkout, and security. These are always active.

  • Performance/analytics cookies (optional): help us understand traffic and improve the site. Set only with your consent.

  • Functional cookies (optional): remember choices (e.g., language).

  • Marketing cookies (optional): if we run campaigns or retargeting, they are set only with your consent.

c) Managing cookies

  • Use the cookie banner or Cookie Preferences link (where available) to grant or withdraw consent for non-essential cookies.

  • You can also configure your browser to block or delete cookies.

  • Withdrawing consent will not affect strictly necessary cookies.

If we enable analytics, we will do so on a consent basis and, where possible, apply IP truncation and similar safeguards.

9) International Transfers

Some providers (e.g., Squarespace, Stripe) may process data outside the EEA. When this happens, we rely on adequate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs) and additional measures as needed. You can request more information via contact@whoopadapter.com.

10) Security

We implement technical and organizational measures appropriate to the risk, including HTTPS/TLS encryption in transit, access controls, and data minimization. No method of transmission or storage is perfectly secure, but we work to protect your data continuously.

11) Children

Our website and products are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us to remove it.

12) Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date and, where appropriate, by additional notice.

13) How to Contact Us

Whoop Adapter — a service by BeyondSky OÜ
Registered office: Narva mnt 5, 10117 Tallinn, Estonia
Operating/returns address (logistics): 199 rue des Cévennes, 34970 Lattes, France
Phone: +33 6 32 52 05 43
Email: contact@whoopadapter.com