Privacy policy
PRIVACY POLICY
Last updated: 4 August 2026
This Privacy Policy explains how APEXWEAVE S.L., trading as Apex Weave (“Apex Weave”, “we”, “us” or “our”), collects, uses, discloses and protects personal information when you visit our website, use our online store, place an order, create or use a customer account, contact us, request support, submit a fitment inquiry, subscribe to marketing communications or otherwise interact with us.
Our online store is hosted and powered by Shopify.
For the purposes of applicable data protection law, APEXWEAVE S.L. is the controller responsible for the personal information described in this Privacy Policy, except where another organisation processes information as an independent controller under its own privacy policy.
1. DATA CONTROLLER
The data controller is:
APEXWEAVE S.L.
NIF: B23970577
Email: apexweave.carbon@gmail.com
Full company identification, registered office and commercial registration information are available in our Legal Notice.
2. PERSONAL INFORMATION WE COLLECT
The personal information we collect depends on how you interact with our website and services.
We may collect the following categories of personal information:
Contact information:
- name;
- email address;
- telephone number;
- billing address;
- shipping address;
- country or region.
Order and transaction information:
- products viewed, added to cart or purchased;
- order number and order history;
- payment and refund status;
- billing information;
- delivery and tracking information;
- cancellation, return, replacement and refund requests;
- communications concerning an order.
Payment information:
- selected payment method;
- payment confirmation;
- billing details;
- transaction identifiers;
- fraud or payment verification results.
We do not normally receive or store full payment card numbers. Full card information is processed by Shopify, Shopify Payments or other authorised payment providers according to their own security and privacy practices.
Customer account information:
- customer profile;
- saved addresses;
- order history;
- account preferences;
- authentication and login-related information where applicable.
Communications and support information:
- messages sent through contact forms;
- emails and customer support messages;
- complaints;
- cancellation, return and refund requests;
- photographs, videos or documents provided in connection with a product, order, defect or fitment issue.
Motorcycle and fitment information:
- motorcycle manufacturer;
- model;
- production year;
- market version;
- original part shape;
- product reference;
- photographs or other information provided to confirm compatibility.
Device and usage information:
- IP address;
- browser and device type;
- operating system;
- pages viewed;
- date and time of access;
- referring website;
- website interactions;
- cart and checkout activity;
- cookies and similar identifiers;
- security and fraud-prevention information.
Marketing and preference information:
- newsletter subscription status;
- communication preferences;
- marketing consent records;
- cookie preferences;
- interaction with marketing emails or advertisements;
- advertising identifiers where permitted and enabled.
3. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information:
Directly from you:
- when you place or attempt to place an order;
- when you create or use a customer account;
- when you contact us;
- when you submit a fitment or product inquiry;
- when you request a cancellation, return, replacement or refund;
- when you subscribe to marketing communications;
- when you provide photographs, videos or other information.
Automatically through the website:
- when you browse the website;
- when you use the cart, checkout or customer account;
- through cookies and similar technologies;
- through security, analytics and performance tools.
From service providers and business partners:
- Shopify;
- payment providers;
- shipping and delivery providers;
- suppliers and fulfilment partners;
- fraud-prevention and security providers;
- analytics providers;
- advertising platforms where enabled;
- email and customer-support providers.
4. HOW WE USE PERSONAL INFORMATION
We may use personal information for the following purposes:
Operating the online store:
- operating the website, cart and checkout;
- creating and managing customer accounts;
- maintaining website security and functionality.
Processing and fulfilling orders:
- confirming product and fitment information;
- processing payments;
- arranging production and fulfilment;
- arranging shipping and delivery;
- sending order and tracking updates;
- providing invoices and transaction records.
Customer service:
- responding to questions;
- providing fitment support;
- handling complaints;
- managing cancellations, returns, replacements and refunds;
- resolving delivery, payment or product issues.
Legal and regulatory compliance:
- maintaining tax and accounting records;
- complying with consumer-protection obligations;
- complying with product-safety obligations;
- responding to valid legal or regulatory requests;
- establishing, exercising or defending legal claims.
Security and fraud prevention:
- detecting and preventing fraudulent transactions;
- protecting customer accounts;
- preventing misuse of the website;
- protecting our customers, rights, property and business;
- investigating security incidents.
Business improvement:
- understanding website and store performance;
- improving products, navigation and customer experience;
- diagnosing technical problems;
- planning products and business operations.
Marketing and advertising:
- sending marketing emails where permitted;
- providing product announcements, offers or store updates;
- measuring marketing performance;
- showing or measuring relevant advertising where enabled and legally permitted.
5. LEGAL BASES FOR PROCESSING
Where applicable data protection law requires a legal basis, we rely on one or more of the following:
Performance of a contract or steps taken before entering into a contract:
- processing orders and payments;
- confirming fitment;
- arranging production and delivery;
- managing customer accounts;
- providing order-related support;
- processing cancellations, returns, replacements and refunds.
Legal obligation:
- tax and accounting records;
- consumer-protection requirements;
- product-safety requirements;
- responding to legally binding requests;
- maintaining legally required business records.
Legitimate interests:
- operating and improving our business;
- responding to customer inquiries;
- preventing fraud, misuse and security risks;
- protecting our customers and business;
- maintaining internal business records;
- establishing, exercising or defending legal claims.
Consent:
- non-essential cookies;
- certain analytics or advertising technologies;
- marketing communications where consent is required;
- other processing for which consent is specifically requested.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.
6. COOKIES AND SIMILAR TECHNOLOGIES
We use cookies and similar technologies to operate the website, maintain the shopping cart, support checkout, remember preferences, protect the website, prevent fraud and, where enabled, analyse website use or support advertising.
Cookies may include:
Strictly necessary cookies:
These cookies are required for essential website functions, including security, customer accounts, cart and checkout.
Preference cookies:
These cookies remember choices such as language, country, region or website preferences.
Analytics and performance cookies:
These cookies help us understand how visitors use the website and identify technical or performance improvements.
Marketing and advertising cookies:
These cookies may be used to measure campaigns, create advertising audiences or show relevant advertising.
Where legally required, non-essential cookies will not be activated until you provide consent.
You may accept, reject or manage non-essential cookies through the cookie banner or privacy settings available on the website.
You may change or withdraw your cookie choices at any time through the cookie-preferences link available on the website.
You may also manage cookies through your browser settings. Blocking certain cookies may prevent the cart, checkout, login or other website functions from operating correctly.
For additional information, please see our Cookie Policy.
7. EMAIL MARKETING
Where permitted by law, we may send marketing emails concerning products, store updates, availability, offers or related information.
Where consent is required, we will only send marketing emails after receiving valid consent.
You may unsubscribe at any time by:
- using the unsubscribe link included in a marketing email; or
- contacting apexweave.carbon@gmail.com.
Unsubscribing from marketing does not prevent us from sending non-marketing communications relating to:
- orders;
- payments;
- production;
- delivery;
- customer accounts;
- fitment confirmation;
- cancellations;
- returns;
- refunds;
- product safety;
- legally required notices.
We do not send marketing SMS messages unless an SMS service is specifically enabled and the required legal basis or consent has been obtained.
8. HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.
Recipients may include:
Shopify:
Shopify hosts and operates important parts of our online store, including website infrastructure, checkout, customer accounts, order management, security and related ecommerce services.
Payment providers:
Payment providers process payments, refunds, fraud checks and payment confirmations.
Suppliers and fulfilment partners:
Where a product is manufactured, prepared or dispatched by a supplier or fulfilment partner, we may provide the information reasonably necessary to identify, manufacture, package and fulfil the order.
Shipping and logistics providers:
We may provide customer contact details, delivery address, order reference and necessary customs or delivery information to carriers, customs intermediaries and logistics providers.
Technology and service providers:
These may include security, hosting, analytics, email, cloud-storage, customer-support, accounting and fraud-prevention providers.
Advertising and analytics partners:
Where enabled and legally permitted, limited personal information or device identifiers may be disclosed to measure campaigns, provide analytics or support advertising.
Professional advisers:
We may disclose information to accountants, tax advisers, lawyers, insurers or other professional advisers where reasonably necessary.
Authorities and legal recipients:
We may disclose information where required by law, court order, tax obligation, regulatory request or legal process, or where necessary to establish, exercise or defend legal claims.
Business transactions:
Personal information may be disclosed in connection with a merger, acquisition, restructuring, financing or sale of all or part of the business, subject to applicable law.
9. SHOPIFY
Our online store is powered by Shopify.
Shopify and its service providers may process personal information to provide:
- website hosting;
- checkout;
- payment-related services;
- customer accounts;
- order management;
- security;
- fraud detection;
- analytics;
- platform services and improvements.
Depending on the service involved, Shopify may act as our processor, service provider or as an independent controller for certain processing carried out for its own purposes.
Shopify’s processing is also governed by its own privacy materials.
Customers may access Shopify’s privacy information and available privacy tools through:
https://privacy.shopify.com/
10. INTERNATIONAL DATA TRANSFERS
Apex Weave is established in Spain and operates internationally.
Personal information may be processed outside the customer’s country of residence because Shopify, payment providers, carriers, suppliers and technology providers operate internationally.
Where personal information protected by the GDPR is transferred outside the European Economic Area, we rely on an appropriate lawful transfer mechanism where required, which may include:
- an adequacy decision;
- Standard Contractual Clauses approved by the European Commission;
- binding corporate rules;
- another legally recognised safeguard or exception.
You may request further information about applicable safeguards by contacting apexweave.carbon@gmail.com, subject to legal and confidentiality limitations.
11. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted by law.
Retention periods may depend on:
- whether you have a customer account;
- whether you placed an order;
- the duration of our contractual relationship;
- tax, accounting and commercial-record obligations;
- consumer-protection and product-safety obligations;
- applicable conformity or warranty periods;
- fraud-prevention and security requirements;
- actual or potential disputes;
- limitation periods for legal claims;
- marketing preferences.
Order, invoice and transaction records may be retained for the period required by applicable tax, accounting and commercial law.
Support, fitment, return and complaint information may be retained for as long as reasonably necessary to handle the request, demonstrate compliance and manage possible disputes.
Marketing information may be retained until you withdraw consent or object to marketing. We may retain limited suppression records after an opt-out to ensure that your preference continues to be respected.
When information is no longer required, it will be deleted, anonymised or securely disposed of, subject to legal and technical limitations.
12. SECURITY
We apply reasonable technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, misuse, unlawful disclosure, alteration or destruction.
However, no website, internet transmission, payment system or storage method can be guaranteed to be completely secure.
Customers are responsible for protecting account login links, passwords, verification codes and devices used to access the store.
Please contact us promptly if you believe your account or personal information has been compromised.
13. CHILDREN
Our website and products are intended for adults purchasing motorcycle parts and are not directed at children.
We do not knowingly collect personal information from children for marketing purposes.
If you believe that a child has provided us with personal information without appropriate authorisation, contact apexweave.carbon@gmail.com so that we can review and, where appropriate, delete the information.
14. YOUR DATA PROTECTION RIGHTS
Depending on your location and applicable law, you may have the right to:
- request confirmation of whether we process your personal information;
- request access to your personal information;
- request correction of inaccurate or incomplete information;
- request deletion of personal information;
- request restriction of processing;
- object to certain processing;
- object to direct marketing;
- withdraw consent;
- request data portability;
- request information about international-transfer safeguards;
- lodge a complaint with a competent data-protection authority;
- request human review of certain automated decisions where applicable.
These rights are subject to applicable legal conditions, limitations and exceptions.
We may request information reasonably necessary to verify your identity and protect personal information against unauthorised disclosure.
To exercise a privacy right, contact:
apexweave.carbon@gmail.com
Please provide:
- your name;
- the email address associated with the order or account;
- the order number where relevant;
- the right you wish to exercise;
- any information reasonably necessary to identify the relevant records.
We will respond within the period required by applicable law.
15. EUROPEAN DATA PROTECTION RIGHTS
Customers located in the European Union or European Economic Area may exercise the rights provided by the GDPR and applicable national data-protection law.
You may lodge a complaint with the supervisory authority in your country of habitual residence, place of work or place of the alleged infringement.
The supervisory authority in Spain is the Agencia Española de Protección de Datos (AEPD).
16. UNITED KINGDOM RIGHTS
Customers located in the United Kingdom may have rights under the UK GDPR and the Data Protection Act 2018, including rights of access, correction, deletion, restriction, objection and portability.
UK customers may also lodge a complaint with the UK Information Commissioner’s Office where applicable.
17. UNITED STATES PRIVACY RIGHTS
Residents of certain United States states may have additional privacy rights where the relevant laws and business thresholds apply.
These rights may include:
- access to personal information;
- correction of inaccurate information;
- deletion;
- data portability;
- opting out of the sale or sharing of personal information;
- opting out of targeted advertising;
- limiting certain uses of sensitive personal information;
- protection against unlawful discrimination for exercising privacy rights.
Apex Weave does not sell personal information in exchange for money.
However, certain advertising, analytics or Shopify services may be legally treated in some jurisdictions as “sale”, “sharing” or targeted advertising even where no money is exchanged.
Where required and applicable, customers may submit an opt-out request through the privacy controls available on the website or by contacting:
apexweave.carbon@gmail.com
18. AUTOMATED FRAUD PREVENTION
Shopify, payment providers or fraud-prevention providers may use automated systems to identify potentially fraudulent, unauthorised or high-risk transactions.
These systems may consider:
- transaction information;
- IP address;
- device information;
- customer account activity;
- billing and shipping details;
- fraud and security indicators.
An order may be delayed, reviewed, cancelled or require additional verification where a potential fraud or security risk is identified.
Where applicable law grants a right concerning a decision based solely on automated processing that produces legal or similarly significant effects, you may contact us to request information or human review.
19. THIRD-PARTY WEBSITES
Our website may contain links to third-party websites, social-media platforms or services that we do not operate.
Those third parties process information according to their own privacy policies.
Apex Weave is not responsible for the privacy, security or content practices of independent third-party websites or services.
20. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes to our website, business operations, Shopify services, providers, legal requirements or privacy practices.
The latest version will be published on this page and identified by the “Last updated” date.
Where required by law, we will provide additional notice or request new consent before a material change takes effect.
21. CONTACT AND COMPLAINTS
For questions, complaints or requests concerning personal information, contact:
APEXWEAVE S.L.
NIF: B23970577
Email: apexweave.carbon@gmail.com
Full company identification and registered office information are available in our Legal Notice.
You also retain the right to lodge a complaint with the competent data-protection supervisory authority.