Privacy policy

Privacy Policy – United States

Concept Global

Last updated and effective from: September 22, 2026

1. INTRODUCTION

Welcome to Concept Global. We are committed to protecting your privacy and processing your personal data responsibly, in accordance with applicable United States federal and state privacy laws. This Privacy Policy explains how we collect, use, share and safeguard your information when you visit our website conceptglobal.co (the “Website”) or make a purchase from us. Please read this policy carefully. This Privacy Policy applies to personal information we collect from individuals in the United States. It describes your rights under U.S. state privacy laws, including the California Consumer Privacy Act, as amended (“CCPA”), and comparable laws in other states such as Colorado, Connecticut, Texas, Utah, Virginia, and Washington, to the extent they apply to you.

2. WHO WE ARE

The business responsible for processing your personal information is:

Robust Goods LLC, a Wyoming limited liability company

Office/mailing address: 135 N. Pennsylvania St., Suite 2600, Indianapolis, IN 46204

E-mail: support@conceptglobal.co

Telephone: +1 323-645-2296

3. PERSONAL INFORMATION WE COLLECT

We collect information about you in the following ways.

(A) Information you provide to us

When you make a purchase or attempt to make a purchase through the Website, we collect the following information (“Order Information”):

• Full name

• Billing address

• Shipping address

• E-mail address

• Telephone number

• Payment information (Note: full payment card details are processed by our payment providers directly and are not stored on our systems)

(B) Information we collect automatically

When you visit the Website, we automatically collect certain information about your device and your use of the Website (“Usage Data”), including:

• Internet Protocol (IP) address

• Browser type and version

• Pages you visit and how you interact with them

• Date, time and duration of your visit

• Referring website or search terms that directed you to the Website

• Data collected through cookies, log files and similar tracking technologies

Further information about our use of cookies is set out in Section 8 below. 

Under U.S. state privacy laws (including the CCPA), the information we collect falls into the following statutory categories: 

• Identifiers: name, email address, telephone number, shipping/billing address, and IP address

• Customer Records and Commercial Information: purchase history, payment metadata, and order details

•  Internet and Electronic Network Activity: browsing history, interaction with Website, browser type, and cookie data

We do not knowingly collect government identifiers, financial account log-in credentials, precise geolocation, or other “sensitive personal information,” and we do not use personal information to infer characteristics about you.

If you choose to pay using third-party services (such as Shop Pay, PayPal, or Klarna), we may receive payment confirmation details, updated shipping addresses, or account contact information necessary to complete your order.

4. HOW WE USE YOUR INFORMATION

We use your personal data for the following purposes:

• To process and fulfill your order: including confirming your purchase, processing payment, arranging delivery, and sending order confirmations, invoices and shipping updates.

• To handle returns, refunds and warranty claims: including communicating with you about defective or non-conforming goods and processing any applicable remedy.

• To prevent and detect fraud and misuse: including screening orders for potential risk or fraud and monitoring for suspicious activity on the Website.

• To improve and optimize the Website: including generating analytics about how customers browse and interact with the Website and assessing the effectiveness of our content and marketing.

• To comply with legal obligations: including accounting, tax and financial record-keeping obligations applicable to us as a Finnish company.

• To send you marketing communications about our products and services: including information about new products, offers and updates. We may send such communications to existing customers in respect of our own similar products and services. You may object to or unsubscribe from such communications at any time.

• To respond to your inquiries and provide customer support. 

• To deliver personalized content and interest-based advertising: with your prior consent, we may use data about your browsing behavior on the Website to tailor the content and promotions you see on the Website and on third-party platforms. You may withdraw your consent at any time through our cookie settings.

• To send you marketing communications by text message: with your prior express written consent, we may send promotional messages to the telephone number you have provided. Consent to receive marketing text messages is not a condition of any purchase. Message and data rates may apply. You may withdraw your consent at any time by contacting us at support@conceptglobal.co or by following the opt-out instructions included in any such message.

• E-commerce platform provider: We use Shopify to power our online store. For customers located in the United States, your information is processed by Shopify Inc. You can read Shopify’s privacy policy at shopify.com/legal/privacy.

• Payment processors: We work with payment service providers to process payment transactions securely, including those facilitating payments via credit and debit cards, PayPal, Shop Pay and Klarna. We do not store your full payment card details on our systems.

• Delivery and logistics providers: We share your name and delivery address with our carriers and logistics partners to the extent necessary to fulfill and deliver your order.

• Analytics providers: We use Google Analytics to understand how visitors use the Website and to improve our services. Google's privacy policy is available at policies.google.com/privacy.

• Legal, accounting and financial advisers: Where necessary to comply with our legal, regulatory or financial obligations.

• Competent authorities: We may disclose your personal data where required to do so by applicable law, by a court order, or by a competent regulatory or law enforcement authority.

We do not sell your personal information for money. However, because we use cookies and similar technologies for analytics and interest-based advertising (see Sections 4 and 8), some of that activity may be treated as a “sale” or “sharing” of personal information under certain U.S. state privacy laws. You can opt out of any such “sale” or “sharing” as described in Section 9.

We disclose the categories of personal information described in Section 3 to the categories of recipients described above for the business purposes described in this Privacy Policy. In general, we disclose identifiers and internet activity information to our analytics and advertising providers; identifiers and commercial information to our platform, payment, and logistics providers; and any category where required to our legal, accounting and regulatory advisers or to competent authorities.

6. DATA TRANSFERS

Personal information collected from U.S. customers is initially collected and stored in the United States by Robust Goods LLC. Your personal information may be transferred to, stored in and processed by our parent company, Robust Goods Oy d/b/a Concept Global, in Finland, and elsewhere in the European Union, as well as in other countries where our service providers operate. These countries may have data protection laws that differ from those of your state of residence. Wherever your information is processed, we protect it consistent with this Privacy Policy and applicable law.

7. DATA RETENTION

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements. In particular:

• Identifiers (Name, Address, Email, IP): Retained for the duration of your active account or customer relationship, plus up to 7 years post-transaction for tax and legal compliance.

• Order Information, Customer Records and Commercial Information: retained for the duration of our contractual relationship with you and for up to 7 years following a purchase as required by applicable Finnish and U.S. laws, including accounting and tax legislation.

• Customer service correspondence: retained for up to 3 years from the date of our last interaction with you, unless a longer retention period is required by applicable law.

• Marketing communications: if you receive marketing communications from us, your contact details will be retained for this purpose until you unsubscribe or object.

• Internet and Network Activity and Usage Data: retained for up to 13 months, in accordance with our cookie settings and the data retention policies of our analytics providers. Please see Section 8 for further information.

Regardless of the retention periods described above, you may at any time request that we delete personal data we hold about you. We will fulfill any such request unless we are required or entitled to retain the data under applicable law, or where retention is necessary for the establishment, exercise or defense of legal claims.

8. COOKIES

Our Website uses cookies and similar tracking technologies to distinguish you from other users and to improve your experience. When you visit the Website, you will encounter a cookie consent banner that provides detailed information about the cookies we use, their purposes and their duration. The banner allows you to accept or decline the use of non-essential cookies according to your preferences.

Depending on your state of residence, we may place non-essential cookies subject to your right to opt out, rather than only with your prior consent. Where required by law, we honor opt-out preference signals, including the Global Privacy Control (GPC), that we receive from your browser. You may withdraw or update your cookie preferences at any time through the cookie settings available on the Website.

You may also manage certain tracking preferences through your browser settings. Please note, however, that our Website may not respond to all browser-level tracking signals, and adjusting browser settings alone may not disable all forms of data collection. We recommend using our cookie settings on the Website for the most effective management of your preferences.

9. YOUR PRIVACY RIGHTS

Depending on your state of residence, you may have some or all of the following rights under applicable U.S. state privacy laws. The specific rights available to you, and how they apply, depend on the law of your state.

• Access: request access to the personal data we hold about you and receive a copy of it.

• Correction: request that inaccurate or incomplete personal data be corrected.

Deletion: request that your personal data be deleted where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal obligations we may have to retain it.

Data portability: receive your personal data in a structured, commonly used and machine-readable format, and request that it be transferred to another controller, where the processing is based on consent or contract and is carried out by automated means.

• Withdraw consent: where we are relying on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

• Opt out of sale or sharing and targeted advertising: you may opt out of the “sale” or “sharing” of your personal information and of targeted (cross-context behavioral) advertising.

• Opt out of profiling: where applicable, you may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

• Limit the use of sensitive personal information: where we use sensitive personal information beyond the purposes permitted by law, you may direct us to limit that use.

• Non-discrimination: we will not discriminate against you for exercising any of these rights.

• Lodge a complaint: you have the right to lodge a complaint with the competent state attorney general (and, for California residents, the California Privacy Protection Agency) if you consider that our processing of your personal data does not comply with applicable data protection laws. Please see Section 14 below.

Oregon residents requesting access to their personal data have the right to receive, upon request, a list of the specific third-party entities (by legal or business name) to which we have disclosed personal data, rather than general categories alone.

How to exercise your rights: You, or an authorized agent acting on your behalf, may submit a request using the contact details in Section 13 or any request mechanism we make available on the Website. We will acknowledge receipt of your request within 10 business days and aim to fulfill verifiable consumer requests within 45 days of receipt. If we require additional time (up to an additional 45 days), we will inform you of the reason and extension period in writing. Upon receiving a request to access, correct, or delete personal information, we must verify your identity before fulfilling the request. We verify requests by matching at least two data points provided by you (such as your full name and order number or email address) with information already maintained in our records. If you submit a request via an authorized agent, we require signed written proof of authority or valid power of attorney, and may confirm identity directly with the consumer.

Right to appeal: If we decline to take action regarding your request, you may appeal by contacting us at support@conceptglobal.co. We will respond to your appeal within 45 days. If your appeal is denied, you may submit a complaint to the attorney general of your state.

“Do Not Sell or Share My Personal Information”: to opt out of the “sale” or “sharing” of your personal information and of targeted advertising, use the cookie settings on the Website, follow any “Do Not Sell or Share My Personal Information” link we provide, or turn on the Global Privacy Control (GPC) in your browser.

10. SECURITY

We have implemented appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. All payment transactions are encrypted during transmission. We do not store full payment card details on our systems.

While we take all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is entirely secure, and we cannot guarantee its absolute security.

11. YOUR RIGHTS UNDER APPLICABLE DATA PROTECTION LAWS

Nothing in this Privacy Policy shall limit, exclude or modify any rights you may have under applicable data protection laws. This Privacy Policy is intended to supplement and clarify those rights, not to restrict them. Where any provision of this Privacy Policy is inconsistent with your rights under applicable data protection laws, those rights shall prevail.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in applicable law, our data practices or our business operations. We will notify you of any changes by posting the updated Privacy Policy on the Website with an updated effective date. We encourage you to review this Privacy Policy periodically.

13. CONTACT US

If you have any questions or concerns about this Privacy Policy or our data practices, or if you wish to exercise any of your data protection rights, please contact us at:

Robust Goods LLC

135 N. Pennsylvania St., Suite 2600

Indianapolis, IN 46204

E-mail: support@conceptglobal.co Telephone: +1 323-645-2296 (Monday to Friday – 9:00 AM to 4:00 PM EST)

14. HOW TO SUBMIT A COMPLAINT

If you consider that our processing of your personal data does not comply with applicable data protection laws and you wish to lodge a complaint, you may contact the attorney general of your state. California residents may also contact the California Privacy Protection Agency. If you are located in the European Economic Area or the United Kingdom, you may instead contact your local data protection authority.

15. CHILDREN’S PRIVACY

The Website is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13, or under 16 where a higher age applies under your state's law. If you believe a child has provided us with personal information, please contact us using the details in Section 13 and we will take steps to delete it.

16. ADDITIONAL DISCLOSURES AND SUPPLEMENTAL NOTICES FOR SPECIFIC US STATES

This section supplements the Privacy Policy and applies solely to residents of California, Colorado, Connecticut, Oregon, Texas, Utah, Virginia, Washington, and other states with comprehensive privacy legislation. 

(A) CALIFORNIA RESIDENTS

Notice at Collection for California Residents: At or before the point of collection, California consumers have the right to receive notice of our privacy practices. We collect the following categories of personal information listed in Section 3: Identifiers, Customer Records/Commercial Information, and Internet/Network Activity. We use these categories for the operational and commercial purposes detailed in Section 4. We retain each category as outlined in Section 7. We do not sell personal information for monetary value, but we "share" identifiers and internet activity for cross-context behavioral advertising (analytics and targeted ads), which you may opt out of via our "Do Not Sell or Share My Personal Information" link or GPC signal.

California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for those third parties' own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing. To make a request, contact us using the details in Section 13.

“Sale” and “sharing”: as described in Section 5, our use of cookies and similar technologies for analytics and targeted advertising may be treated as a “sale” or “sharing” of identifiers and internet activity information under California law. We do not sell or share the personal information of consumers we know to be under 16 years of age. You may exercise your opt-out rights as described in Section 9.

In the preceding 12 months, we have collected, used, and disclosed for a business purpose the categories of personal information described in Section 3. We have "shared" identifiers and internet activity data with analytics and advertising networks for targeted advertising as described in Section 5. We have not sold personal information for monetary consideration.

(B) COLORADO AND VIRGINIA RESIDENTS 

Under the Colorado Privacy Act (CPA) and Virginia Consumer Data Protection Act (VCDPA), residents have specific rights regarding personal data, including: 

• Confirming whether we process your personal data and access such data. 

• Correcting inaccuracies in your personal data. 

• Deleting personal data provided by or obtained about you. 

• Obtaining a portable, readily usable copy of your personal data. 

• Opting out of processing for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. 

If we decline your request, you may submit an appeal to support@conceptglobal.co. If your appeal is denied, Virginia residents may contact the Office of the Attorney General of Virginia, and Colorado residents may contact the Office of the Colorado Attorney General. Colorado residents may also exercise opt-out rights via recognized Universal Opt-Out Mechanisms (UOOMs) like GPC. 

(C) Oregon and Connecticut Residents

We do not knowingly process or sell personal data for targeted advertising from consumers aged 13 to 15 without affirmative opt-in consent. 

Residents of Oregon may request a list naming the specific third parties to which we have disclosed personal information. 

(D) Texas, Utah and Washington Residents

We do not sell sensitive personal data or biometric personal data. If our practices change, we will provide explicit notices as required by the Texas Data Privacy and Security Act (TDPSA). 

Utah and Texas residents may exercise opt-out rights for targeted advertising or data sales via our "Your Privacy Choices" footer link, and requests will be addressed within standard 45-day statutory timelines.

We do not collect, process, or share “consumer health data” as defined under Washington’s My Health My Data Act (MHMDA) or similar state health privacy laws. We do not collect biometric data, precise geolocation inferring health status, bodily functions, or reproductive health information.