Privacy policy

Effective date: September 7, 2026

1. Scope & Who We Are

This Privacy Policy is issued by Knocking Inc. and its subsidiaries and affiliates (collectively, “Knocking,” “we,” “us,” or “our”). It applies to all webstores, websites, mobile applications, embedded experiences, and other digital platforms or services that we own or operate, now or in the future, on which this Privacy Policy is posted or linked — including webstores whose URLs or branding incorporate the names of our media partners (each, a “Webstore” and collectively, the “Services”).

“Personal information” means any information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with an identified or identifiable individual or household, as further defined under applicable law.

This Policy explains what personal information we collect, how we use and disclose it, the choices available to you, and how to exercise your privacy rights. Residents of U.S. states with comprehensive privacy laws should also review our U.S. State Privacy Notice, which supplements this Policy and is incorporated by reference.

2. Personal Information We Collect

The personal information we collect depends on how you interact with the Services. It includes the following categories, in each case including but not limited to the examples given:

  • Identifiers and contact information — such as your name, postal address, email address, telephone number, account credentials, and online identifiers (including IP address, device identifiers, cookie and session identifiers, and similar persistent identifiers).
  • Commercial and transaction information — such as products viewed, considered, or purchased, order details and history, cart contents, order value, discounts applied, returns, and shipping details.
  • Payment information — collected and processed by our e-commerce platform and payment processors on our behalf; we do not ourselves store full payment card numbers.
  • Internet and device activity — such as browser and operating system type, device characteristics, screen properties, language settings, referring URLs, pages viewed, links clicked, search terms, viewing of embedded media (including video), interaction and session data (such as clicks, scrolls, taps, and cursor or touch movements), crash and diagnostic data, and approximate location inferred from your IP address.
  • Communications and support data — such as messages, chat transcripts, survey responses, reviews, and records of correspondence with our customer-support providers.
  • Marketing preferences — such as your subscription status, message engagement, and the choices you have made under Section 6.
  • Inferences — preferences, characteristics, and predispositions we or our partners derive from any of the foregoing, for example to personalize offers.

Sources of personal information

We collect personal information (a) directly from you; (b) automatically from your device and your interactions with the Services, through cookies and similar technologies described in Section 4; (c) from our e-commerce platform, payment, fulfillment, fraud-prevention, support, and other service providers; (d) from the featured brands and product suppliers whose products we offer; (e) from our media partners and from advertising, analytics, and measurement partners; (f) from consumer data resellers and other commercial sources; and (g) from publicly available sources. We may combine information obtained from these sources.

3. How We Use Personal Information

We use personal information, alone or in combination, for the following business and commercial purposes and for other purposes disclosed to you at the time of collection or with your consent:

  • Providing the Services — operating the Webstores; processing, fulfilling, and shipping orders; processing payments and returns; maintaining accounts; and providing customer support.
  • Communications — sending transactional, service, and legally required messages, and, subject to your choices, marketing communications by email, SMS/MMS, push, or other channels from us and from the featured brands whose products you purchase.
  • Personalization — remembering your preferences and tailoring content, offers, and product recommendations.
  • Advertising and marketing — marketing our Services and our partners’ products, measuring campaign performance, building and sharing audiences, and delivering interest-based and cross-context behavioral advertising, in each case subject to the opt-out rights described in Section 6 and in the U.S. State Privacy Notice.
  • Analytics and improvement — understanding how the Services are used; testing, developing, and improving the Services and new products, features, and business models.
  • Security and fraud prevention — authenticating users and transactions, detecting and preventing fraudulent, malicious, deceptive, or illegal activity, and protecting the rights, property, and safety of Knocking, our users, and others, including through device-recognition techniques.
  • Legal and compliance — complying with applicable law, regulation, legal process, and enforceable governmental requests; enforcing our Terms of Use; and establishing, exercising, or defending legal claims.
  • Corporate transactions — evaluating or completing a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets.
  • Aggregated and de-identified data — creating and using aggregated or de-identified data, which we may use and disclose for any lawful purpose; where we maintain de-identified data, we commit to maintaining it in de-identified form and not attempting re-identification, except as permitted by law to test de-identification processes.

4. Cookies & Tracking Technologies

We and our service providers and partners use cookies, pixels, web beacons, software development kits, local storage, device recognition, and similar technologies, whether now existing or later developed (collectively, “Tracking Technologies”), to operate the Services and for the purposes described below. The specific providers we work with will change from time to time; the categories below describe the functions performed, with representative examples current as of the effective date. An up-to-date list of active providers is available on request via the contact details in Section 14.

Strictly necessary

  • Function: Core platform, session management, checkout, cart, load balancing, security, and fraud prevention. These cannot be switched off.
  • Representative providers: Shopify (platform and checkout); NoFraud (fraud prevention and device recognition)

Analytics & performance

  • Function: Measuring traffic, usage, and performance so we can improve the Services.
  • Representative providers: Google Analytics

Advertising & marketing

  • Function: Building audiences, delivering and measuring interest-based and cross-context behavioral advertising, and powering email/SMS marketing and abandoned-cart programs.
  • Representative providers: Google Ads; Klaviyo; Omnisend; Gobot

Functionality & engagement

  • Function: Enhanced features such as embedded shoppable video, on-site engagement tools, accessibility tools, and package-protection options.
  • Representative providers: Hovr; Onward; accessibility widget providers

Support

  • Function: Help center, chat, and customer-service tooling.
  • Representative providers: Gorgias

Session and engagement data collected through these technologies may include the interaction data described in Section 2 (such as pages viewed, clicks, and cursor movements). You can limit these technologies through the choices described in Section 6.

You can manage Tracking Technologies through your browser settings and the industry choice tools described in Section 6. Disabling some technologies may affect the functionality of the Services.

5. How We Disclose Personal Information

We disclose personal information to the following categories of recipients, for the purposes described in Section 3:

  • Service providers and contractors — entities that process personal information on our behalf, such as e-commerce platform and hosting providers, payment processors, fulfillment and shipping providers, fraud-prevention and security providers, analytics providers, marketing and communications platforms, customer-support providers, and professional advisors.
  • Featured brands and product suppliers — when you purchase a featured product, we may provide the respective brand with order information (such as confirmation number, items and quantities, and your contact details) to facilitate fulfillment, warranty service, and communications; and, where you have opted in, with your contact information for that brand’s own marketing. Once shared, the brand’s use of your information is governed by its own privacy policy.
  • Media partners — the media companies whose brands appear on our Webstores, for attribution, commission reporting, audience measurement, and their own marketing, subject to applicable law and your opt-out rights.
  • Advertising, analytics, and measurement partners — as described in Sections 3 and 4. Some of these disclosures may constitute a “sale” or “sharing” of personal information under U.S. state privacy laws; you may opt out as described in Section 6.
  • Affiliates — our corporate parents, subsidiaries, and affiliates, for purposes consistent with this Policy.
  • Legal, safety, and protection — where we believe disclosure is required by or advisable under applicable law, regulation, or legal process, or necessary to protect the rights, property, or safety of Knocking, our users, or others, to enforce our agreements, or to detect and prevent fraud or security issues.
  • Corporate transactions — in connection with any actual or contemplated merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, in which personal information may be transferred as a business asset, subject to the commitments of this Policy or notice of material changes.
  • With your direction or consent — to any other recipient at your direction or with your consent.

6. Your Choices & Opt-Outs

Marketing communications

You may opt out of marketing emails via the “unsubscribe” link in any marketing email, and of SMS/MMS messages by replying STOP. Consent to marketing is not a condition of purchase. Transactional and legally required messages continue regardless of marketing choices.

Sale, sharing, and targeted advertising

You may opt out of the “sale” or “sharing” of your personal information and of targeted advertising at any time by emailing privacy@knocking.com with the subject “Do Not Sell or Share,” calling us toll-free at +1 888-546-3297, or writing to the address in Section 14. We will honor opt-out requests within the time required by applicable law.

Industry choice programs

You can learn about interest-based advertising and exercise additional choices through the Network Advertising Initiative and the Digital Advertising Alliance opt-out pages. Some of our engagement providers also offer their own opt-outs (for example, Gobot’s opt-out site).

Withdrawing consent

Where processing is based on consent, you may withdraw it at any time with effect for the future by using the mechanisms above or contacting us under Section 14. Withdrawal does not affect information already shared with a brand before withdrawal, whose use is governed by that brand’s privacy policy.

7. U.S. State Privacy Rights

Depending on your state of residence, you may have rights to know/access, correct, delete, and port your personal information; to opt out of sales, sharing, targeted advertising, and certain profiling; to limit the use of sensitive personal information; and to non-discrimination for exercising these rights. These rights, our verification and appeals processes, and category-level detail required by state law are set out in our U.S. State Privacy Notice, which is part of this Policy. To exercise any right, use the methods described there — toll-free telephone, email, or mail.

8. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, considering: the nature of our relationship with you and the Services you use; the type and sensitivity of the information; our legal, tax, accounting, and audit obligations; the need to establish, exercise, or defend legal claims; fraud prevention and security; and legitimate business-record purposes. When retention is no longer necessary, we delete, de-identify, or securely archive the information as permitted by law.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, or access, appropriate to the nature of the information. Payment card data is handled by our platform and payment processors in accordance with PCI-DSS. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Services are intended for general audiences and are not directed to children. We do not knowingly collect personal information from anyone under 16 years of age, and we do not knowingly sell or share the personal information of consumers under 16. If you believe a child has provided us personal information, contact us under Section 14 and we will delete it as required by law.

11. Checkout, Payments & Shop Pay

Our Webstores are hosted on Shopify, which provides the e-commerce platform, data storage, and checkout. When you check out, your information is processed by Shopify as our service provider; if you use an express checkout or wallet (such as Shop Pay, PayPal, Google Pay, or Apple Pay), you may be directed to that provider’s experience, and its own terms and privacy policy govern the information it processes as an independent business. Direct payment gateways adhere to PCI-DSS standards. For more information, see Shopify’s privacy statement and the policies of the wallet provider you choose.

12. International Users

The Services are operated from and directed to the United States. If you access the Services from outside the United States, you understand that your personal information will be transferred to, stored, and processed in the United States and other jurisdictions whose data-protection laws may differ from those of your jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, partners, or legal requirements. The “Effective date” above shows when it was last revised. If we make material changes, we will provide notice as required by law — such as by posting a prominent notice on the Services or, where appropriate, contacting you directly — before the changes take effect. Your use of the Services after the effective date of an updated Policy constitutes acknowledgment of the updated Policy.

14. Contact Us

To ask questions about this Policy, exercise your rights, or register a complaint: