Privacy Policy

Last updated: November 5, 2026

This Privacy Policy explains how Flyup collects, uses, discloses and protects personal information when you visit flyupofficial.com, purchase our products or interact with our customer service and marketing.

Flyup serves customers in the United States and is operated by the Israeli sole proprietor identified in Section 12. That business is responsible for the processing described here and acts as the controller or business where applicable privacy laws use those terms.

For privacy questions or requests, email getflyup@gmail.com.

This policy does not waive your rights or, by itself, constitute consent to optional tracking or marketing.

1. Information We Collect

We receive information directly from you, automatically through website technologies, and from providers involved in payments, delivery, customer communication and advertising.

Information	Examples	Main purposes
Contact and customer details	Name, email, telephone number, billing and delivery addresses, customer identifiers	Orders, delivery, customer service and account administration where available
Purchase and transaction details	Products, amounts paid, order history, shipment status, refunds and warranty requests	Fulfillment, accounting, claims and fraud prevention
Limited payment details	Payment status, transaction references and payment-method details made available by the provider	Payment confirmation, refunds and disputes
Device and browsing information	IP address, browser information, cookie identifiers, pages viewed, referral sources, cart activity and purchase events	Website operation, security, analytics and permitted advertising
Communications and submissions	Emails, social messages, reviews and photographs or videos you provide	Customer assistance, resolving issues and publishing submissions intended for publication
Preferences and related records	Consent choices, subscriptions, privacy requests and interests inferred from shopping activity	Honoring choices, compliance and permitted personalization

The information involved depends on your interactions and the features and settings in use. Not every category is collected from every visitor.

Payment credentials entered at checkout are handled by the relevant payment providers. Do not send full card numbers, security codes, passwords or unnecessary sensitive information through support email, social messages or reviews.

Providing information is generally voluntary. Without information reasonably necessary for a purchase, delivery or verification, we may be unable to complete that transaction or request.

2. How We Use Information

We use personal information to:

• Operate the website, shopping cart and checkout.
• Process payments, fulfill orders and provide order updates.
• Handle customer inquiries, returns, refunds and warranty claims.
• Detect fraud, protect systems and investigate unauthorized transactions.
• Understand performance and improve our website, products and services.
• Send permitted marketing and measure advertising effectiveness.
• Maintain legal and accounting records and resolve disputes.

We obtain consent where required. Visiting the website, accepting our Terms of Service or providing contact details for delivery does not constitute blanket consent to optional marketing or tracking.

3. Information Disclosures and Service Providers

We disclose information reasonably necessary for the relevant purpose, subject to applicable law and privacy choices. Recipients include:

• Shopify: Store hosting, checkout, order administration, security and related commerce services.
• Payment providers: Payments, refunds and transaction disputes.
• Fulfillment, shipping and return partners: Relevant contact, address, product and order information needed to prepare, deliver or receive goods.
• Klaviyo: Email communications, subscription preferences, permitted marketing automation and associated engagement or shopping information.
• Loox: Review invitations, collection and display, including relevant purchase details and submitted reviews or media.
• ManyChat: Connected social messaging and automation, including relevant profile identifiers, messages and contact details you provide.
• Meta and TikTok: Advertising measurement, audience matching and permitted personalized advertising, as described below.
• Authorized operational providers and advisers: Customer support, website administration, marketing assistance, accounting, legal advice and security.

Providers acting on our behalf are subject to applicable instructions, confidentiality and data protection requirements. Some providers also process information independently for their own services under their privacy notices.

We may disclose information to comply with valid legal requirements, investigate fraud, protect safety or establish, exercise or defend legal claims.

Information may also be disclosed as reasonably necessary during a business transfer, subject to appropriate confidentiality and applicable privacy requirements. A transfer does not automatically authorize materially incompatible new uses.

4. Cookies, Pixels and Advertising

We use cookies and similar technologies for essential shopping functions, preferences, analytics and advertising.

Essential technologies support functions such as checkout, security and recording privacy choices. Other technologies help us understand website activity, measure campaigns and personalize content or advertisements.

When active, Meta and TikTok advertising integrations may receive identifiers and events such as an IP address, cookie identifier, product view, cart action or purchase. Depending on configuration, information may be transmitted from your browser or through our commerce platform.

Where identifier matching is enabled, contact identifiers may be converted into hashed values for matching. Hashing does not necessarily make information anonymous.

Advertising platforms may associate these events with information they already hold, subject to their privacy notices and applicable choices.

These disclosures may constitute “sale,” “sharing” or processing for “targeted advertising” under applicable state privacy laws, even without a cash payment.

Optional technologies are subject to applicable consent requirements and opt-out rights. Cookie lifetimes vary: some expire with a browser session, while others remain for a defined period unless deleted earlier.

5. Your Advertising and Cookie Choices

To request an opt-out of targeted advertising or applicable sale or sharing, email getflyup@gmail.com with the subject “Privacy Opt-Out.”

You may also use any cookie or privacy controls displayed on the website. Browser settings can block or delete cookies, although blocking essential cookies may affect shopping functions.

Where applicable law recognizes a signal such as Global Privacy Control (GPC), that signal constitutes an opt-out request for the browser or device sending it. Its application to other devices or an identifiable customer profile depends on applicable requirements and the information available to associate them.

Legacy Do Not Track (DNT) signals are not treated as a separate instruction to change tracking settings. This is distinct from legally recognized opt-out preference signals such as GPC.

Advertising providers may collect information about activity over time and across different websites when their technologies are active. An opt-out restricts the relevant processing; it does not necessarily stop all advertisements.

Browser-based preferences may need to be expressed again after changing devices or clearing cookies.

6. Shopify Services

Our store is hosted on Shopify, which processes information to provide commerce services.

Depending on the features you use and our store settings, Shopify may also process information independently, including through Shop or Shop Pay.

Where Shopify Network Intelligence is enabled, Shopify may use interactions with our store together with interactions involving other merchants and Shopify to provide enhanced services, including analytics, personalization, fraud protection and advertising-related features. Applicable privacy requirements and choices continue to apply.

Learn more through the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

You may contact us about Flyup’s processing even where a request also concerns Shopify.

7. Marketing, Messaging and Public Reviews

You can unsubscribe from marketing emails using the link in the message or by emailing getflyup@gmail.com.

Email services may use tracking pixels or tracked links to measure opens, clicks and engagement, subject to applicable requirements. Contact us about marketing tracking preferences.

Unsubscribing does not stop necessary communications concerning an order, refund, warranty, security issue or privacy request. An email unsubscribe and an advertising-data opt-out address different activities; you may request either or both.

Social platforms and ManyChat may process messages and associated identifiers when you communicate through connected channels. Some responses may be automated; contact our support email if you need further assistance.

Reviews or media submitted for publication may be publicly visible with the display name and details you choose to provide. Permission to publish a review is separate from any permission required to use identifiable customer media in paid advertising.

8. Your Privacy Rights and Requests

Depending on where you live and whether the relevant law applies to our business and processing, you may have rights to access information, obtain details about its collection and disclosure, correct inaccuracies, request deletion, receive a portable copy, or opt out of specified processing.

Applicable rights may also concern sensitive information, certain profiling decisions, appeals and protection against unlawful discrimination.

Where Israeli privacy law applies, you may request access and correction of information that is inaccurate, incomplete, unclear or outdated, and deletion or removal from direct-marketing databases where provided by law.

To submit a request, email getflyup@gmail.com. No account is required.

We may reasonably verify identity for access, correction or deletion using information associated with your order or communications. We request no more information than reasonably necessary. Authorized agents may act where permitted, subject to lawful verification of authority.

We do not require identity verification for an advertising sale or sharing opt-out where the law prohibits it.

We generally respond to access, correction and deletion requests within 45 calendar days, or a shorter period where required. Any permitted extension will be explained. Requests subject to shorter deadlines, including applicable advertising opt-outs, are handled within those periods.

If a request is denied, we will explain the reason where required. To appeal, email us with the subject “Privacy Appeal.” You may also contact the appropriate state attorney general or privacy regulator.

Rights are subject to lawful exceptions. For example, deletion may not require removal of records needed for tax compliance, requested transactions, warranty obligations, security or legal claims.

9. International Processing, Retention and Security

Flyup is operated from Israel. Information may be processed in the United States, Israel and other countries where relevant providers operate.

Return handling may involve our designated facility in China. Relevant order, contact and return information may be disclosed as necessary to identify, receive and assess a return.

International processing remains subject to applicable transfer requirements and contractual safeguards where required. Using the website does not waive those protections.

We retain information for periods reasonably necessary for its purpose, considering transaction and recordkeeping requirements, customer support, warranty obligations, fraud prevention, legal claims and your choices.

Marketing records are retained while reasonably needed for permitted activity. Limited suppression records may remain to prevent unwanted marketing from restarting. Online identifiers and activity records follow their operational purpose, settings and relevant retention arrangements.

When information is no longer needed, we delete or de-identify it as appropriate. Backup copies remain protected and are removed through the applicable backup cycle unless lawful preservation is necessary.

We maintain reasonable safeguards appropriate to the information and processing involved. No system guarantees absolute security; this does not waive our security obligations or your remedies.

10. Children’s Privacy

Our store is intended for adult shoppers and is not directed to children under 13.

We do not knowingly collect personal information from children under 13 without any authorization legally required, or knowingly use minors’ information for targeted advertising or sale or sharing contrary to applicable law.

Contact us if you believe a child has provided information inappropriately. We will investigate and take the steps required, including deletion where appropriate.

11. Policy Updates

We may update this policy to reflect changes in practices, services or legal requirements. The revision date appears above.

For material changes, we will provide additional notice and obtain any consent required before implementing the relevant change. Posting an update does not automatically authorize materially incompatible new uses of previously collected information.

We review this policy periodically and update it as required by applicable law.

12. Controller and Contact

Legal business name / controller: [FULL LEGAL NAME], an Israeli sole proprietor trading as Flyup
Business mailing address: [FULL BUSINESS ADDRESS, ISRAEL]
Privacy email: getflyup@gmail.com
Website: https://flyupofficial.com

Contact us for privacy questions, requests, appeals or a copy of this policy.