Privacy policy

Effective date: September 30, 2026  |  Last updated: September 30, 2026

PPE Innovations LLC, doing business as Safe Steps and Steppeys® ("Safe Steps," "we," "us," or "our"), respects your privacy. This Privacy Policy explains what personal information we collect, how we use and protect it, who we share it with, and the choices and rights you have. It applies to safestepsusa.com, our SMS/MMS and email programs, customer support, and orders we fulfill through our website and through marketplaces such as Amazon.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising in exchange for money.

1. Information We Collect

Information you give us: name, email address, phone number, billing and shipping addresses, order details, company or facility name (for wholesale and facility orders), and anything you send us through support tickets, forms, reviews, or email.

Payment information: payments are processed by Shopify and its PCI DSS–compliant payment processors. We do not see or store your full card number.

Information collected automatically: IP address, browser and device type, pages viewed, referring site, approximate location (from IP), and purchase activity, collected through cookies, pixels, and similar technologies.

Information from marketplaces: when you buy our products on Amazon, Amazon provides us with limited order information (such as your name and shipping address) so we can fulfill your order. See Section 5.

2. How We Use Your Information

  • To process, ship, and deliver orders, handle returns, and provide customer support
  • To send order confirmations, shipping updates, and other service messages
  • To send marketing emails or texts only if you have opted in (you can opt out at any time)
  • To operate, secure, and improve our website, and to prevent fraud and misuse
  • To calculate and remit taxes and meet legal, accounting, and regulatory obligations

3. How We Share Your Information

We share personal information only with service providers that help us run our business, and only as needed for the purposes above. These include:

  • E-commerce and payments: Shopify and its payment processors
  • Shipping and fulfillment: ShipStation and shipping carriers (e.g., USPS, UPS, FedEx)
  • Marketplaces: Amazon, for orders placed on Amazon
  • Email and SMS: Klaviyo and mobile carriers/messaging platforms
  • Customer support, analytics, and advertising tools that help us answer questions and understand site performance

Our service providers are required to protect your information and use it only to provide services to us. We may also disclose information when required by law, subpoena, or government request; to protect our rights, property, or safety or that of others; or as part of a merger, acquisition, or sale of assets, in which case this Policy will continue to apply to your information.

4. Cookies and Tracking

We use cookies and similar technologies to keep your cart working, remember preferences, measure site traffic, and (where permitted) show relevant ads. You can block or delete cookies through your browser settings and manage Shopify cookie preferences through the cookie banner where shown. Some site features may not work without cookies. We honor Global Privacy Control (GPC) signals as a request to opt out of targeted advertising and the "sale" or "sharing" of personal information. Because there is no common industry standard for "Do Not Track" browser signals, we treat GPC as the supported opt-out signal.

5. Data Received from Amazon

When we fulfill orders placed through Amazon, we receive limited customer information through Amazon's Selling Partner API. For this information we follow Amazon's Data Protection Policy and Acceptable Use Policy:

  • Limited use: used only to fulfill and ship orders, process returns, provide customer service for those orders, and calculate and remit taxes
  • No marketing: Amazon customer information is never added to our email or SMS lists or used for marketing, advertising, or profiling
  • No sale or unauthorized sharing: it is never sold and is shared only with shipping carriers and fulfillment providers as needed to deliver the order
  • Encryption: encrypted in transit (TLS 1.2 or higher) and at rest (AES-256 or equivalent)
  • Access control: access is limited to authorized personnel who need it, using unique accounts and multi-factor authentication
  • Retention and deletion: retained only as long as necessary to fulfill the order and meet tax and legal requirements, then securely deleted; deleted or returned within 72 hours if Amazon requests it
  • Incident reporting: any suspected security incident involving Amazon information is reported to Amazon within 24 hours of detection

6. How We Protect Your Information

We use administrative, technical, and physical safeguards designed to protect personal information, including:

  • HTTPS/TLS encryption across our website and encryption of stored personal information
  • PCI DSS–compliant checkout through Shopify; we never store full card numbers
  • Role-based, least-privilege access with multi-factor authentication for staff and admin accounts
  • Vetted service providers bound by confidentiality and data protection obligations
  • Security monitoring, prompt software updates, and a documented incident response process

No method of transmission or storage is 100% secure. If a data breach affects your personal information, we will notify you and the appropriate authorities as required by law. If you believe your information is not secure, contact us right away using the details in Section 13.

7. Data Retention

We keep personal information only as long as needed for the purposes in this Policy: generally for the life of your account or customer relationship, plus the period required for tax, accounting, and legal purposes (typically up to 7 years for transaction records). Marketing data is kept until you unsubscribe or ask us to delete it. When information is no longer needed, we securely delete or anonymize it.

8. Your Choices and Privacy Rights

Regardless of where you live in the United States, you may ask us to:

  • Access the personal information we hold about you and receive a portable copy
  • Correct inaccurate information
  • Delete your personal information (subject to legal exceptions, such as tax records)
  • Opt out of marketing, targeted advertising, and any "sale" or "sharing" of personal information

Residents of states with privacy laws (including California, Texas, Colorado, Virginia, and others) have these rights under those laws. To make a request, email info@safestepsusa.com with the subject line "Privacy Request" or call (469) 324-9072. We will verify your identity before responding and will respond within 45 days (or sooner if the law requires). You may use an authorized agent to make a request on your behalf. We will not discriminate against you for exercising your rights.

Appeals: if we decline your request, you may appeal by replying to our decision with the subject line "Privacy Appeal." We will respond to your appeal within 60 days. If you are not satisfied, you may contact your state Attorney General (for Texas residents, at texasattorneygeneral.gov).

Email marketing: click "unsubscribe" in any marketing email. Texts: reply STOP (see Section 9).

9. SMS/MMS Mobile Messaging Program

If you opt in to our SMS/MMS program, we will use your mobile number and the information you provide to send you recurring automated marketing and service messages. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help at any time.

We share program information only with messaging platform providers, mobile carriers, and vendors that help us deliver messages. We do not sell, rent, loan, trade, lease, or otherwise transfer mobile phone numbers or SMS opt-in data and consent to any third party or affiliate for their marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except as needed to deliver the messaging service. We may disclose information if required by law or to protect our rights or property.

When you provide information in connection with the program, you agree that it is accurate and that the phone number is yours or that you are authorized to use it. We may refuse or end program access if we believe information provided is false or the program is being misused.

10. Children's Privacy

Our website and products are not directed to children under 13 (or under 16 where state law applies), and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

11. California "Shine the Light"

California Civil Code Section 1798.83 allows California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing. To make a request, contact us using the details below.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date above. If changes are material, we will provide additional notice, such as a banner on our website or an email.

13. Contact Us

For privacy questions, requests, or security concerns:

PPE Innovations LLC (Safe Steps)
8700 Stonebrook Parkway, P.O. Box 2192
Frisco, TX 75034
United States
Email: info@safestepsusa.com
Phone: (469) 324-9072