LockerStack Privacy Policy

Last Updated: 5 July 2026

This privacy policy (this "Privacy Policy") describes the practices of LockerStack ("LockerStack," "we," "our," and "us") with respect to the personal information we collect from or about you when you use our website or services (collectively, the "Services").

LockerStack is operated by SponsorStack Ltd, a company registered in Scotland (company number SC883405).

1. What information do we collect?

Personal information you provide

We collect certain personal information you provide to us through:

• Your access or use of the Services;
• Your electronic communications with us, such as when you contact us about an order, a product, or a club partnership;
• Your subscription to our newsletters or updates; and
• Your offline communications with us, such as in-person or over the phone.

This may include:

• Account Information: if you create an account, we collect your name, contact information, and account credentials.
• Purchase Information: when you make or attempt to make a purchase, we collect your name, email address, shipping address, and phone number.
• Financial Information: payment is processed by our payment providers (including PayPal and Fourthwall's payment processing partners). We do not store your full card details ourselves — our payment providers collect this directly, along with any information required for fraud prevention.
• Transaction Information: the products purchased, order value, and date of purchase.
• Communications: your name, contact details, and the content of any messages you send us.

You are not required to provide any information to us, but some features of the Services may not be available to you unless you do.

Personal information collected automatically

We and our vendors may collect the following when you use the Services:

• Log Data: your IP address, browser type and settings, and the date and time of your visit.
• Usage Data: how you use the Services, including pages viewed and actions taken.
• Device Information: the type of device and operating system you use.
• Location Information: general location inferred from your IP address.
• Cookies and Tracking Technologies: we and our vendors use cookies and similar technologies to understand how the Services are used, remember your preferences, and measure the effectiveness of our marketing. You can manage your cookie preferences through your browser settings; disabling cookies may affect how the Services function.

Personal information from third parties

We may receive personal information from the vendors who help us run LockerStack, including Fourthwall, Inc. (our e-commerce and fulfilment platform) and payment providers such as PayPal. We may combine this with information you've given us directly.

2. How do we use personal information?

We use personal information to:

• Provide, maintain, and improve the Services;
• Process and fulfil your orders, including passing your order and shipping details to our production and fulfilment partners;
• Communicate with you about your order, respond to questions, and provide customer support;
• Understand how the Services are used and develop new products and features;
• Detect and prevent fraud;
• Send you marketing communications, where you have agreed to receive these;
• Comply with our legal and tax obligations; and
• Protect the safety and security of our users and the Services.

3. Who do we share personal information with?

We may disclose personal information to:

• Fourthwall, Inc., the vendor that provides our website, e-commerce, payment processing, and order fulfilment services, and which acts as Merchant of Record for orders placed through the Services;
• PayPal and other payment processors, to complete your transaction;
• Production and fulfilment partners engaged by Fourthwall to manufacture and ship your order;
• Service providers who support us with things like analytics, customer service, and security;
• Legal and regulatory authorities, where we believe in good faith this is required or appropriate, such as in response to a court order or legal process;
• A buyer or successor, in the event of a sale, merger, or reorganisation of our business; and
• Any other party, where you have given us your consent to do so.

We do not sell your personal information for money. Where we use cookies or similar technologies for advertising or analytics purposes, this may be considered "sharing" under certain data protection laws (see Section 6 below).

4. Cookies and tailored advertising

We and our vendors may use cookies, pixels, and similar technologies to:

• Understand how you use the Services;
• Remember your preferences;
• Measure the performance of our marketing; and
• Show you relevant advertising on other websites, based on your visits to ours.

You can control cookies through your browser settings. If you disable cookies, some features of the Services may not work properly. You can opt out of tailored advertising from participating companies via the Network Advertising Initiative, the Digital Advertising Alliance, or (for EU/UK users) the European Interactive Digital Advertising Alliance. Opting out means you'll still see ads — just not ones tailored to your browsing.

5. Your rights

If you're based in the UK or the European Economic Area, UK GDPR and/or the EU GDPR give you the right to:

• Access the personal information we hold about you;
• Have inaccurate information corrected;
• Request deletion of your personal information;
• Object to or restrict how we use your information;
• Receive a copy of your information in a portable format; and
• Withdraw consent, where our use of your information is based on consent.

To exercise any of these rights, contact us at hello@lockerstack.co.uk. We may need to verify your identity before responding.

If you're not satisfied with how we've handled your request, you have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO) — ico.org.uk.

Our legal basis for processing (UK/EEA residents)

• Contractual necessity — to fulfil your order and honour our agreement with you;
• Consent — for marketing communications, which you can withdraw at any time;
• Legitimate interests — for things like fraud prevention, customer support, and improving the Services; and
• Legal obligation — for example, to meet our tax and accounting duties.

6. California residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended, gives you additional rights, including the right to:

• Know what personal information we collect, use, and disclose about you;
• Access and receive a copy of that information;
• Request deletion of your personal information;
• Correct inaccurate personal information; and
• Opt out of the "sale" or "sharing" of your personal information, and not be discriminated against for exercising these rights.

We disclose the following categories of personal information for the purposes described in Section 2, to the categories of third parties described in Section 3: identifiers, commercial information, internet/device activity data, financial information, and communications.

We may share identifiers, commercial information, and internet/device activity data with advertising and analytics partners in a way that may be considered a "sale" or "sharing" under the CCPA. To opt out, email us at hello@lockerstack.co.uk, or use the Global Privacy Control.

We do not knowingly sell or share the personal information of children under 16.

To exercise your CCPA rights, email hello@lockerstack.co.uk. You may designate an authorised agent to act on your behalf with your signed written permission; we'll still need to verify your identity directly.

7. Children's privacy

LockerStack is not directed at children, and we do not knowingly collect personal information from children under 13 (or under 16, where applicable local law sets that threshold). If you believe a child has provided us with personal information, please contact us at hello@lockerstack.co.uk and we will delete it.

8. Data retention

We keep personal information for as long as necessary for the purposes described in this policy, including to fulfil legal, accounting, or reporting obligations. When it's no longer needed, we delete or anonymise it.

9. International transfers

LockerStack works with vendors, including Fourthwall, Inc., who may process and store personal information in the United States and other countries outside the UK/EEA. Where we transfer personal information internationally, we take steps required by UK data protection law to ensure it remains protected, such as relying on our vendors' standard contractual clauses or other approved safeguards.

10. Security

We use reasonable physical and electronic safeguards to protect your personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Do Not Track

Our Services do not currently respond to browser "Do Not Track" signals. We do respond to the Global Privacy Control, where applicable — see Section 6.

12. Third-party links

Our Services may link to third-party websites or services we don't control, including our fulfilment and payment partners' own sites. This Privacy Policy doesn't apply to those third parties — please review their own privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the law or in how we operate. We'll update the "Last Updated" date at the top when we do. Continuing to use the Services after an update means you accept the revised policy.

14. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, contact us at:

Email: hello@lockerstack.co.uk Post: SponsorStack Ltd, trading as LockerStack (Company No. SC883405)