ZIP
ShopShopAboutAboutTeam OrdersTeam OrdersContactContactStoriesStories
ShopAboutTeam OrdersContactStories
© ZIP Rugby

Legal · Privacy

Privacy Policy

Last updated: May 26, 2026

This Privacy Policy describes how ZIP Rugby (“ZIP,” “we,” “us,” or “our”) collects, uses, and shares information about you when you visit ziprugby.com (the “Site”), purchase our products, sign up for our email list, apply for a team partnership, or otherwise interact with us. ZIP Rugby is an American performance rugby brand founded by Max McCusker, operating from Fredericksburg, Virginia.

By using the Site, you agree to the practices described in this Policy. If you do not agree, please do not use the Site.

This Policy is written for compliance with United States state and federal privacy laws, including the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), the federal Children’s Online Privacy Protection Act (“COPPA”), and the CAN-SPAM Act.

1. Information We Collect

A. Information You Provide

We collect the information you provide when you:

  • Subscribe to our newsletter (“The Dispatch”) or sign up for early access to a drop
  • Place an order (name, shipping address, billing address, contact email, payment information)
  • Apply for a team partnership, Summer 7s intake, or product giveaway
  • Contact us by email or through a form on the Site
  • Interact with us through linked social platforms

B. Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect:

  • IP address and approximate location
  • Browser type, operating system, device type
  • Pages viewed, time on page, click events, referring URL
  • Cookie and similar tracking identifiers

This information is collected through cookies and similar technologies only after you grant consent through our cookie banner. See Section 5 for details.

C. Information from Third Parties

We do not purchase or receive personal information about you from third-party data brokers. If you interact with us through a social platform, that platform may share limited public profile information with us in accordance with its own privacy policy.

2. How We Use Your Information

We use the information we collect to:

  • Process and fulfil orders, including shipping and customer support
  • Send transactional emails (order confirmations, shipping updates, refunds)
  • Send marketing emails about new drops, restocks, and brand news, only with your consent and with an unsubscribe link in every email
  • Operate, maintain, and improve the Site
  • Understand how visitors use the Site through analytics
  • Detect and prevent fraud, abuse, or security incidents
  • Comply with legal obligations

3. How We Share Your Information

A. Service Providers

We engage trusted third parties to perform services on our behalf, including:

  • Analytics: Google Analytics 4 (Google LLC), configured with Consent Mode v2, IP anonymisation enabled, and analytics storage gated by your cookie consent
  • Payment processing: a PCI-DSS compliant payment processor (such as Stripe or Shopify Payments). Card data is transmitted directly to the processor and is not stored on our systems
  • Shipping and fulfilment: carriers, warehousing, and kit production partners
  • Email service providers: for transactional and marketing email delivery
  • Managed hosting: Kasdena managed hosting

These service providers are contractually limited to using your information only as needed to provide their services.

B. Legal Compliance

We may disclose information when required by law, subpoena, or court order, or to protect our legal rights, property, or safety, or the rights, property, or safety of others.

C. Business Transfers

In the event of a merger, acquisition, financing, or sale of business assets, personal information may be transferred to the acquiring entity. We will notify you of such a transfer.

D. We Do Not Sell or Share Your Personal Information

We do not sell personal information for monetary or other valuable consideration. We do not share personal information for cross-context behavioural advertising. We have not done so in the preceding twelve (12) months.

4. Categories of Personal Information (CCPA Disclosure)

For California residents, we have collected the following categories of personal information in the preceding 12 months:

  • Identifiers (name, email, postal address, IP address)
  • Commercial information (order history, products purchased)
  • Internet or network activity (Site browsing data, cookie identifiers)
  • Geolocation data (approximate, derived from IP)
  • Inferences drawn from the above to understand product preferences

We have not collected sensitive personal information as defined by the CPRA (such as government identifiers, precise geolocation, racial or ethnic origin, health data, or contents of private communications) beyond what may be incidental to providing service.

5. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to:

  • Remember your cookie consent choice (functional, always on once you have decided)
  • Measure traffic and engagement through Google Analytics 4, only after you opt in

We do not use advertising cookies or marketing trackers. We do not engage in cross-context behavioural advertising.

Managing Cookies

You can accept or reject analytics cookies through the banner shown on your first visit. To change your choice later, clear site data for ziprugby.com in your browser, then reload the Site and the banner will reappear. You can also disable cookies entirely through your browser settings, although parts of the Site may not work as expected.

Do Not Track and Global Privacy Control

Our Site does not currently respond to Do Not Track browser signals. Where required by California law, we honour the Global Privacy Control (“GPC”) signal as a request to opt out of sale or sharing of personal information.

6. Your Privacy Rights

A. California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights:

  • Right to know what categories of personal information we collect, the sources, the purposes, and the categories of third parties with whom we share
  • Right to access the specific pieces of personal information we hold about you
  • Right to delete your personal information, subject to legal exceptions
  • Right to correct inaccurate personal information
  • Right to opt out of the sale or sharing of personal information (we do not sell or share, but you have this right regardless)
  • Right to limit use of sensitive personal information (we do not use sensitive personal information beyond what is necessary to provide service)
  • Right to non-discrimination for exercising any of these rights

To exercise these rights, email hello@ziprugby.com with the subject “California Privacy Request” and include the right you wish to exercise plus information sufficient for us to verify your identity. We will respond within 45 days. You may also designate an authorised agent to make a request on your behalf with written authorisation.

B. Virginia Residents (VCDPA)

If you are a Virginia resident, you have the right to:

  • Confirm whether we process your personal data and access that data
  • Correct inaccuracies
  • Delete personal data
  • Obtain a copy of your data in a portable, readily usable format
  • Opt out of targeted advertising, sale of personal data, or profiling that produces legal or significantly similar effects (we do not engage in any of these)

Email hello@ziprugby.com to exercise these rights. We will respond within 45 days. If we deny your request, you may appeal by replying to our response with “Appeal” in the subject line.

C. Colorado, Connecticut, Utah, and Other State Residents

Residents of Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive consumer privacy laws have rights similar to those described above. Email hello@ziprugby.com to exercise them.

7. Children’s Privacy

ZIP Rugby is intended for users 16 and older. We do not knowingly collect personal information from children under 13 (or under 16 where required by applicable state law). If we learn we have collected personal information from a child under 13, we will delete it. If you believe a child has provided us with personal information, contact hello@ziprugby.com.

8. Data Security

We use industry-standard technical and organisational measures to protect personal information, including encryption in transit (HTTPS), restricted access controls, and regular security review. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information only as long as necessary to fulfil the purposes for which it was collected and to meet legal, accounting, or reporting requirements:

  • Order records are retained for at least seven (7) years for tax purposes
  • Marketing email subscribers are retained until you unsubscribe
  • Cookie preferences are stored on your device for up to twelve (12) months, after which the banner will reappear
  • Analytics data is retained per Google’s default GA4 retention period (currently 2 months on user-level data)

10. International Users

ZIP Rugby operates from the United States. If you access the Site from outside the US, your information will be transferred to and processed in the US, which may have different data protection laws than your country. We do not currently sell or ship outside the United States.

11. Marketing Communications and CAN-SPAM

We send marketing emails only if you have opted in (for example, by signing up for the Dispatch). You can unsubscribe at any time using the link at the bottom of every marketing email, or by emailing hello@ziprugby.com. We honour unsubscribe requests within ten (10) business days as required by the CAN-SPAM Act. We will continue to send transactional emails relating to orders you have placed.

12. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date at the top will reflect when changes were made. For material changes that affect your rights, we will flag the update at the top of the Site for at least thirty (30) days and, where required by law, obtain renewed consent. Your continued use of the Site after a change is effective constitutes acceptance.

13. Contact Us

For privacy questions or to exercise any of the rights described above:

Email: hello@ziprugby.com
Subject line: Privacy Request
Mailing address: ZIP Rugby, Fredericksburg, Virginia, United States

This policy is provided for transparency about ZIP Rugby’s data practices. It is not legal advice. If you have questions about how this Policy applies to your circumstances, consult a qualified attorney.

ZIP

America's first performance rugby brand. Built in the United States.

Shop

  • Drop 00
  • Signature Black
  • Motion Blue
  • Checkout

ZIP

  • About
  • Stories
  • Watch List
  • Team Orders
  • Summer 7s

Support

  • Contact
  • Team enquiries
  • Giveaways
  • Privacy Policy
  • Admin

Connect

  • Instagram
  • LinkedIn
  • Newsletter
© 2026 ZIP RugbyPowered & Designed byKASDENA
Privacy policyContact