Privacy policy

Privacy Policy

Last Updated: August 13, 2026

This Privacy Policy describes how Shenzhen Coasta Technology Co., Limited (“COASTA,” “we,” “us,” or “our”) collects, uses, discloses, stores, and otherwise processes personal information when you visit coastaebike.com (the “Site”), purchase our products, contact us, or otherwise interact with our services (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree with this Privacy Policy, please discontinue use of the Services.

1. Who We Are

The Site is operated by:

Shenzhen Coasta Technology Co., Limited
深圳市棠盈達電子科技有限公司

Company Registration No.: 78105349

Registered Office:
Room 1003, 10/F, Wai Tat Commercial Building
1A–1L Tung Choi Street, Mong Kok
Hong Kong

U.S. Business Address:
16203 Arrow Highway
Irwindale, CA 91706
United States

Customer Support:
Email: support@coastaebike.com
Phone: +1 314 476 8742

2. Personal Information We Collect

The personal information we collect depends on how you interact with the Services.

2.1 Information You Provide Directly

When you make a purchase, create or use an account, contact customer support, submit a form, request warranty or after-sales assistance, subscribe to marketing communications, or otherwise interact with us, we may collect information such as:

  • Name
  • Email address
  • Telephone number
  • Billing address
  • Shipping address
  • Order and transaction information
  • Product and warranty information
  • Customer support communications
  • Product reviews, feedback, or other content you submit
  • Marketing and communication preferences

Payment information may be processed directly by our payment service providers. Depending on the payment method selected, those providers may include Shopify Payments, Shop Pay, PayPal, Klarna, or other payment providers made available at checkout. We generally do not store complete payment card numbers ourselves.

2.2 Device and Usage Information

When you visit or use the Site, certain information may be collected automatically, including:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Time zone
  • General location information derived from your IP address
  • Pages and products viewed
  • Referring and exit pages
  • Search activity
  • Shopping cart activity
  • Interactions with the Site
  • Cookie identifiers and similar technical information

We may collect this information through cookies, pixels, tags, log files, web beacons, analytics technologies, and similar tools.

2.3 Information From Third Parties

We may receive personal information from third parties that help us provide the Services, including:

  • Shopify
  • Payment and financing providers
  • Shipping and logistics providers
  • Fraud prevention and security providers
  • Analytics providers
  • Advertising and marketing platforms
  • Customer support providers
  • Social media platforms when you interact with us through those services

3. How We Use Personal Information

We may use personal information to:

  • Process and fulfill orders
  • Process payments and refunds
  • Arrange shipping and delivery
  • Provide order confirmations and tracking information
  • Provide customer service and after-sales support
  • Process warranty, return, refund, or repair requests
  • Maintain customer accounts
  • Communicate with you regarding purchases and Services
  • Detect and prevent fraud, unauthorized transactions, abuse, and security incidents
  • Operate, maintain, troubleshoot, and improve the Site
  • Analyze Site traffic, customer behavior, and product performance
  • Personalize your shopping experience
  • Send marketing communications where permitted
  • Measure and improve advertising and marketing campaigns
  • Comply with legal, tax, accounting, regulatory, and contractual obligations
  • Establish, exercise, or defend legal claims
  • Protect our customers, business, property, and legal rights

4. Shopify

Our online store is hosted and powered by Shopify.

Shopify processes certain personal information when you visit our store, create an account, place an order, use Shop Pay, or otherwise interact with Shopify-powered features.

Depending on the Shopify services and privacy settings enabled for our store, Shopify may also process information to provide fraud prevention, analytics, personalization, commerce, and other platform services.

Shopify provides tools allowing merchants to manage privacy policies, cookie consent, and data-sharing preferences, and merchants remain responsible for making sure their privacy disclosures accurately reflect their actual practices.

5. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to operate our business and provide the Services.

This may include disclosures to:

Shopify and technology providers.
We use Shopify and other technology providers to operate and maintain our online store.

Payment providers.
Payment, financing, and checkout providers process transactions and may independently collect information necessary to provide their services.

Shipping and fulfillment providers.
We may provide your name, contact information, shipping address, order information, and other necessary information to carriers, warehouses, fulfillment partners, and logistics providers.

Analytics and advertising providers.
We may use analytics and advertising services to understand Site usage, measure marketing performance, and deliver or measure advertising.

Professional advisers and service providers.
We may disclose information to accountants, lawyers, insurers, consultants, IT providers, customer service providers, security providers, and other vendors supporting our business.

Government authorities or legal parties.
We may disclose information if reasonably necessary to comply with applicable law, regulation, subpoena, court order, governmental request, legal process, or to protect our rights or the rights of others.

Business transactions.
If all or part of our business is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, personal information may be disclosed as part of that transaction subject to applicable law.

We do not authorize our service providers to use personal information for purposes unrelated to the services they provide to us, except where they independently act as permitted or required by law.

6. Analytics and Advertising

We may use analytics services, including Google Analytics, to understand how visitors use the Site and to improve our products, Services, and marketing.

We may also use advertising or marketing technologies that collect information about your visits, purchases, or interactions with our advertisements.

Depending on the laws applicable to you, certain advertising-related disclosures may be considered a “sale,” “sharing,” or processing for targeted advertising even when no money is exchanged for your personal information.

We do not sell personal information for monetary compensation.

Where required by applicable law, you may opt out of certain targeted advertising or data-sharing activities through our cookie banner, privacy preferences, or data-sharing opt-out mechanisms.

7. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Site and improve your experience.

These technologies may be used for purposes including:

  • Essential storefront and checkout functionality
  • Shopping cart functionality
  • Customer authentication
  • Remembering preferences
  • Fraud prevention and security
  • Site performance
  • Analytics
  • Marketing measurement
  • Advertising and personalization

Some cookies are required for the Site to function properly. Other cookies may be optional depending on your location and applicable law.

The specific cookies and technologies used by Shopify and other providers may change over time. For this reason, rather than relying on a permanently fixed cookie list, you should also refer to the privacy and cookie controls made available through the Site.

You can manage cookies through your browser settings and, where available, through our cookie banner or privacy preference tools.

Disabling certain cookies may affect the functionality or availability of parts of the Site.

8. Marketing Communications

If you have agreed to receive promotional emails, SMS messages, or other marketing communications, we may use your contact information to send information about products, promotions, special offers, or other COASTA news.

You can unsubscribe from marketing emails by using the unsubscribe link contained in those messages.

You may also contact us at support@coastaebike.com to request that we stop sending marketing communications.

Even if you opt out of promotional communications, we may continue to send non-marketing messages relating to your orders, payments, account, warranty, support requests, or other transactions.

9. Legal Bases for Processing

Where the General Data Protection Regulation (“GDPR”), United Kingdom data protection laws, or similar laws apply, we may process personal information based on one or more lawful bases, including:

  • Your consent
  • Performance of a contract with you
  • Compliance with legal obligations
  • Protection of vital interests
  • Our legitimate interests or those of another party, provided those interests do not override your applicable rights and freedoms

You may withdraw consent where consent is the legal basis for processing. Withdrawal does not affect processing that lawfully occurred before withdrawal.

EU data protection law provides rights including access, correction, deletion and other controls over personal data, subject to applicable conditions and exceptions.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Fulfill orders and provide Services
  • Maintain business and transaction records
  • Provide warranty and customer support
  • Comply with tax, accounting, legal, and regulatory obligations
  • Resolve disputes
  • Enforce agreements
  • Prevent fraud and abuse

Retention periods may vary depending on the type of information, the nature of our relationship with you, applicable legal requirements, and legitimate business needs.

When personal information is no longer reasonably required, we may delete, anonymize, or otherwise dispose of it in accordance with applicable requirements.

11. International Data Transfers

COASTA operates internationally and uses service providers located in different countries.

As a result, personal information may be transferred to, stored in, or processed in jurisdictions outside the country or region where you reside, including Hong Kong, the United States, Canada, or other locations where our service providers operate.

Where required by applicable data protection laws, we take reasonable steps to use appropriate safeguards for international transfers.

For transfers of personal data subject to the GDPR, applicable safeguards may include contractual or other legally recognized transfer mechanisms.

12. Security

We use reasonable administrative, organizational, and technical measures intended to protect personal information against unauthorized access, misuse, alteration, loss, destruction, or disclosure.

However, no method of transmission over the Internet, electronic storage system, or security measure can guarantee absolute security.

You are responsible for maintaining the confidentiality of passwords or credentials associated with your account.

If you believe your account or information has been compromised, please contact us promptly at support@coastaebike.com.

13. Automated Processing and Fraud Prevention

We and our service providers may use automated technologies to identify potentially fraudulent, suspicious, abusive, or unauthorized activity.

These technologies may consider information such as transaction patterns, device information, IP addresses, payment information, and previous interactions.

We do not intentionally use solely automated decision-making that produces legal or similarly significant effects on individuals except where permitted by applicable law and subject to any rights required by law.

14. Your Privacy Rights

Depending on where you live and subject to applicable law, you may have rights concerning your personal information, including the right to request:

  • Access to personal information
  • Information about how personal information is used or disclosed
  • Correction of inaccurate information
  • Deletion of certain information
  • Portability of certain information
  • Restriction of certain processing
  • Objection to certain processing
  • Withdrawal of consent
  • Opt-out of certain targeted advertising, sale, or sharing activities
  • Non-discriminatory treatment for exercising applicable privacy rights

We may need to verify your identity before processing certain requests.

You may also authorize another person to submit a request on your behalf where permitted by applicable law.

To exercise a privacy right, contact:

support@coastaebike.com

We will process verified requests in accordance with applicable law.

15. California Privacy Rights

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to our processing of your personal information, California residents may have rights including the right to know/access, correct, delete, opt out of the sale or sharing of personal information, limit certain uses of sensitive personal information where applicable, and receive non-discriminatory treatment for exercising their rights.

We do not sell personal information for monetary compensation.

However, certain advertising or analytics activities may constitute “sharing” or “sale” under California law depending on how those technologies are configured.

Where required, California residents may submit applicable opt-out requests through our privacy or data-sharing preference tools.

Where legally required, we also recognize qualifying browser-based opt-out preference signals, such as Global Privacy Control (GPC). California's Attorney General has specifically identified GPC as a mechanism that can communicate an opt-out request.

You may also contact us at:

support@coastaebike.com

16. EEA and United Kingdom Privacy Rights

Where the GDPR or applicable UK data protection law applies, you may have rights relating to:

  • Access
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability
  • Objection to processing
  • Withdrawal of consent
  • Certain automated decision-making
  • Lodging a complaint with an appropriate data protection authority

These rights are subject to applicable legal conditions and exceptions.

17. Hong Kong Privacy Rights

Shenzhen Coasta Technology Co., Limited is incorporated in Hong Kong.

The Personal Data (Privacy) Ordinance (Cap. 486) establishes requirements concerning the collection, accuracy, retention, use and security of personal data in Hong Kong.

Where applicable, you may request access to and correction of personal data held by us.

Requests may be submitted to:

support@coastaebike.com

18. Do Not Track and Privacy Signals

Some browsers provide a “Do Not Track” (“DNT”) setting.

Because there is not a single universally adopted technical standard for DNT signals, our response to traditional DNT signals may vary.

However, where applicable law requires recognition of legally valid opt-out preference signals, we will process such signals as required.

19. Third-Party Websites and Services

The Site may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, security, content, or policies of third-party websites or services.

We encourage you to review the privacy policies of third parties before providing information to them.

20. Payment and Financing Providers

If you use a third-party payment or financing service, that provider may separately collect and process personal information in accordance with its own privacy policy.

For example, if you select Klarna, Klarna will process information according to Klarna's applicable privacy terms.

The same principle applies to other payment options made available through checkout, including Shopify-powered payment services, Shop Pay, PayPal, or other payment providers.

21. Children's Privacy

The Services are intended for a general adult audience and are not directed toward children.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has provided personal information to us improperly, please contact support@coastaebike.com so that we can review the matter and take appropriate action.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • Our business practices
  • The Services
  • Technology
  • Service providers
  • Legal or regulatory requirements

When we make changes, we will update the “Last Updated” date shown at the top of this Privacy Policy.

Material changes may also be communicated through the Site or other appropriate means where required.

23. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise an applicable privacy right, please contact:

Shenzhen Coasta Technology Co., Limited
Email: support@coastaebike.com
Phone: +1 314 476 8742

U.S. Business Address:
16203 Arrow Highway
Irwindale, CA 91706
United States

Registered Office:
Room 1003, 10/F, Wai Tat Commercial Building
1A–1L Tung Choi Street, Mong Kok
Hong Kong