Privacy Policy
Last updated: August 25, 2026
Effective date: August 25, 2026
This Privacy Policy explains how Neapolitan Group Inc., doing business as Match Kicks ("Match Kicks", "we", "us", "our"), collects, uses, discloses and protects personal information when you visit matchkicks.com and our related subdomains, place an order, upload a photo to find a match, subscribe to email or text messages, apply to our affiliate program, or otherwise interact with us (together, the "Services").
We are the controller (or, under US state laws, the "business") responsible for your personal information.
| Legal entity | Neapolitan Group Inc. (d/b/a Match Kicks) |
|---|---|
| Postal address | 1712 Pioneer Ave, Ste 500, Cheyenne, WY 82001, United States |
| support@matchkicks.com | |
| Phone / text | (844) 234-5684 |
| Privacy requests | support@matchkicks.com (subject line: "Privacy Request") |
1. Summary — the things people usually want to know
- We do not sell your personal information for money. However, like most online retailers, we do share identifiers and browsing activity with advertising platforms (Meta, Google, Microsoft) so we can show you relevant ads and measure whether our ads work. Under California, Colorado, Connecticut and similar state laws, that counts as "sharing" for cross-context behavioral advertising and, in some states, as a "sale". You can opt out — see Section 10.
- We never see or store your full card number. Payments are handled entirely by Stripe and PayPal.
- We use AI to identify sneakers in photos you upload, to power search, and to create and enhance some of our product and lifestyle imagery. We explain exactly how in Section 6. We do not use facial recognition, and we do not make automated decisions that produce legal or similarly significant effects about you.
- You can ask us to access, correct, delete or export your data, or to stop marketing to you, at any time — see Section 10. We will not treat you differently for asking.
- We ship worldwide, so your information may be transferred to and processed in the United States and other countries — see Section 9.
2. Personal information we collect
The information we hold depends on how you use the Services. The table below lists every category we collect, using the categories defined in the California Consumer Privacy Act (CCPA/CPRA), together with where it comes from, why we hold it, who receives it, and how long we keep it.
| Category | Examples of what we collect | Where it comes from | Why we use it | Who we disclose it to | How long we keep it |
|---|---|---|---|---|---|
| Identifiers | Name, billing and shipping address, email address, phone number, account username, order number, our own internal customer and visitor IDs, IP address, device and browser identifiers, cookie IDs, advertising click IDs (Google gclid, Microsoft msclkid, Meta fbclid) | Directly from you; automatically from your device; from ad platforms when you click one of our ads | Fulfil and ship orders, service your account, customer support, fraud prevention, marketing and advertising measurement | Payment processors, print and fulfilment partners, shipping carriers, email/SMS providers, advertising and analytics platforms, hosting and CDN providers | Order and account records: 7 years (tax, accounting and dispute-resolution obligations). Marketing contact records: until you unsubscribe plus 24 months. Web analytics identifiers: up to 24 months. |
| Customer records / commercial information | Order history, items viewed, cart and wishlist contents, sizes and garment preferences, returns and exchanges, discount and gift codes used, reviews you submit, support and chat transcripts | Directly from you; generated by your use of the Services | Provide the Services, personalise recommendations, run our loyalty and referral programmes, resolve disputes, improve our catalogue | Fulfilment partners, customer support and messaging tools, review platform, analytics and advertising platforms (order value and product IDs only) | Orders: 7 years. Abandoned carts: 14 days. Completed-cart records: 90 days. Upsell and recommendation event logs: 90 days. Search job records: 24 hours. |
| Internet or other electronic network activity | Pages and products viewed, searches run, clicks, scroll and session activity, referring URL and landing page, UTM campaign tags, email opens and clicks, A/B test assignment | Automatically, via cookies, pixels, SDKs and server logs | Operate and secure the site, measure and improve performance, measure advertising, personalise content and offers | Analytics and advertising platforms, hosting, CDN and security providers | Up to 24 months, or shorter where the platform's own retention is shorter |
| Geolocation data (approximate only) | Country, region and city inferred from your IP address — used to show prices in your currency and to estimate shipping. We do not collect GPS or precise location. | Automatically, from your IP address and from our CDN | Currency and shipping estimates, fraud prevention, regional content | CDN, hosting and IP-geolocation providers | Not stored as a standalone record; present in server logs for up to 90 days |
| Audio, electronic, visual and similar information | Photos of sneakers you upload to find a match; return or claim photos; unboxing videos and review photos you choose to submit; live-chat attachments | Directly from you | Identify the sneaker and find matching apparel, process returns and claims, publish content you have agreed to let us publish | Cloud storage and CDN providers, our AI image-analysis providers (see Section 6), and — for content you submit for publication — the public | Match photos: retained while your match request and any resulting order are active, then up to 24 months. Published content: until you ask us to remove it. |
| Inferences | Predicted style and sneaker preferences, likelihood to purchase, product and colourway affinity, advertising audience segments | Derived by us from the categories above | Recommend products, tailor offers and advertising | Advertising platforms (as audience segments) | Up to 24 months |
| Sensitive personal information | Account log-in credentials (your password, stored only in hashed form) — and only if you create an account. Payment card details are entered directly into Stripe or PayPal and are never received or stored by us. | Directly from you | Solely to authenticate you and secure your account | Our authentication provider | For the life of your account |
| Professional / affiliate information | Brand or creator name, social media handles, PayPal payout username, referral performance — collected only if you apply to our affiliate programme | Directly from you | Assess your application, run the programme, pay commissions | Payment and email providers, our internal team | Duration of the relationship plus 7 years for tax and payment records |
We do not collect government identification numbers, biometric identifiers, precise geolocation, racial or ethnic origin, religious beliefs, health data, sexual orientation, union membership, or the contents of your private messages on other platforms. We do not use or disclose sensitive personal information to infer characteristics about you.
Where your information comes from
- From you — when you order, create an account, upload a photo, subscribe, review a product, contact support, enter a giveaway, or apply to the affiliate programme.
- Automatically — through cookies, pixels, SDKs, server logs and similar technologies described in our Cookie Policy.
- From third parties — payment processors (payment confirmation, billing address, fraud signals), shipping carriers (delivery status), advertising platforms (click identifiers and campaign data), our review platform, our live-chat and messaging providers, and, if you sign in with Google, the name, email address and profile picture on your Google account.
3. How we use your personal information
- To provide the Services — process orders and payments, create your custom apparel, arrange printing and shipping, handle returns, exchanges and claims, manage your account, and run our matching and search tools.
- To communicate with you — order confirmations, shipping and delivery notifications, receipts, service announcements, replies to your support messages, and, where you have asked for them or as permitted by law, marketing emails and text messages.
- To personalise the Services — recommend matching designs, garments and sizes, remember your preferences, and show you offers we think are relevant.
- To advertise and measure — build and target audiences, measure conversions and attribute sales to campaigns, suppress ads for products you already bought, and keep our product catalogue in sync with advertising platforms.
- To improve our products and site — analytics, A/B testing, performance monitoring, error and crash diagnostics, and understanding which designs and sneakers customers want.
- To keep everyone safe — detect and prevent fraud, abuse, bot traffic, payment chargebacks and security incidents.
- To meet our legal obligations — tax and accounting records, responding to lawful requests, enforcing our terms, and establishing or defending legal claims.
Legal bases (for visitors in the UK, EEA, Switzerland and other jurisdictions that require one)
| Purpose | Legal basis |
|---|---|
| Processing orders, payments, shipping and support | Performance of a contract with you (Art. 6(1)(b)) |
| Tax, accounting and record-keeping | Compliance with a legal obligation (Art. 6(1)(c)) |
| Fraud prevention, security, service improvement, essential analytics, defending legal claims | Our legitimate interests in running a secure and viable business (Art. 6(1)(f)) — balanced against your rights |
| Marketing emails and text messages, publishing your user-generated content | Your consent (Art. 6(1)(a)) — which you may withdraw at any time |
| Non-essential cookies, advertising and audience personalisation | Your consent where the law requires it (Art. 6(1)(a)); otherwise our legitimate interests in promoting our business (Art. 6(1)(f)). You may object or withdraw at any time — see Section 10. |
4. Marketing emails and text messages
Email. We send marketing emails where you have opted in or where permitted by law for existing customers. Every marketing email carries an unsubscribe link, and you can also unsubscribe at matchkicks.com/unsubscribe or by emailing us. We will still send you transactional messages about orders you have placed.
Text messages (SMS/MMS). If you give us your mobile number and agree to texts, you consent to receive recurring automated promotional and personalised marketing text messages from Match Kicks at that number, including cart reminders and match results. Consent is not a condition of any purchase. Message frequency varies. Message and data rates may apply.
- Reply STOP to any message to opt out, or HELP for help.
- You may also withdraw consent by any reasonable means — including replying with words such as "stop", "unsubscribe", "cancel", "quit", "end", "revoke" or "opt out", by emailing support@matchkicks.com, or by telling our support team. We will action it within 10 business days and normally far sooner.
- We may send one confirmation message after you opt out. It will not contain marketing content.
- Mobile carriers are not liable for delayed or undelivered messages.
- We do not sell, rent or share mobile phone numbers or SMS consent with third parties or affiliates for their own marketing. Numbers are shared only with the messaging providers that deliver our messages on our behalf.
5. Cookies, pixels and similar technologies
We and our partners use cookies, pixels, tags, SDKs, local storage and server-side event forwarding to run the site, remember your cart and preferences, measure traffic, and deliver and measure advertising.
Our Cookie Policy lists each cookie and tracking technology we use, what it does, who sets it, and how long it lasts, and explains how to control or refuse them — through your browser, through the industry opt-out tools listed there, or by contacting us directly.
6. How we use artificial intelligence
We use AI in a small number of clearly defined places. We think you should know exactly where, so here is the complete list.
| Where we use AI | What it does | Does it involve your personal information? |
|---|---|---|
| Sneaker photo matching | When you upload a photo to find a matching outfit, the image is processed by third-party computer-vision and language models to identify the shoe model and its colourway, so we can suggest matching apparel. | Yes. The image you upload is sent to our AI providers for analysis. We instruct these providers not to use our data to train their general models, and their access is governed by a data processing agreement. We ask you to upload photos of footwear only. |
| Search and recommendations | We convert product titles, designs and search queries into numerical representations ("embeddings") so that searching for "purple Jordan 1 tee" finds the right products, and so we can recommend visually similar designs. | Limited. Your typed search query is processed. We do not attach your name, email or address to it. |
| Product, lifestyle and advertising imagery | Some of the images on our site and in our advertising are generated or enhanced using AI from photographs of our real products — for example, placing a real garment and a real sneaker into a lifestyle scene, removing backgrounds, or generating colour variations. We also use AI tools to help draft design artwork and marketing copy. | No. No customer data is used to create these images. See the disclosure below. |
| Internal operations | Summarising support conversations, drafting marketing copy for our team to review, categorising products, and flagging anomalies in orders or advertising spend. | Sometimes. Support conversations may be processed. A human always makes the final decision. |
AI-generated and AI-enhanced imagery — transparency notice
Some images used on this site, in our advertising, and on our social channels are created or materially edited with generative AI. Where a scene, model, background or setting appears, it may be AI-generated and does not depict a real person, a real customer, or a real event. Any person appearing in such an image is a synthetic figure, not an actual customer or endorser, and any such image is not a testimonial.
The product itself is always real. Garment colours, print placement, design artwork and sneaker colourways shown in these images are derived from photographs and renders of the actual items we sell. Small variation between an image and the item you receive is possible, as it is with any printed apparel; our Perfect Match Guarantee covers you if the match is not right.
Genuine customer photos, unboxing videos and reviews are never AI-generated. They are submitted by real customers and are labelled as customer content.
Automated decision-making
We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you — for example, we do not use AI to decide whether to grant credit, employment, housing, insurance, healthcare or education. Automated processing is used only for product recommendations, search ranking, advertising personalisation and fraud/bot screening. Fraud screening may cause an order to be held for manual review; you can always contact us and a person will look at it.
7. When and with whom we share personal information
We disclose personal information for business purposes to the categories of recipients below. We require each of them by contract to protect your information and to use it only for the purposes we specify.
| What they do | Who they are | What they receive |
|---|---|---|
| Payments and fraud screening | Stripe, PayPal | Name, email, billing and shipping address, order value, payment details entered directly with them, device and fraud signals |
| Printing and fulfilment | Printful and our print partners | Name, shipping address, order contents, print files |
| Shipping and delivery tracking | EasyPost and the carriers it connects to (including USPS, UPS, FedEx, DHL and international partners) | Name, shipping address, phone, email, parcel details |
| Transactional and marketing email | Resend | Name, email address, order details, engagement events |
| Text messaging and live chat | Twilio, ManyChat | Name, mobile number, message content, order references |
| Reviews | Trustpilot | Name or display name, email address, order reference, review content |
| Advertising and measurement (see below) | Meta Platforms (Facebook/Instagram Pixel, Conversions API and catalogue), Google (Ads, Tag Manager, Merchant Center, Google Ads API conversion upload), Microsoft Advertising (UET and the UET Conversions API) | Hashed email and phone number, IP address, user agent, click identifiers, pages viewed, products viewed and purchased, order value and currency, our internal pseudonymous IDs |
| Hosting, storage, CDN and security | Vercel, Supabase, Cloudflare, Bunny.net (including Bunny Stream for video) | All data necessary to serve the site, plus server logs and IP addresses |
| AI processing | OpenAI, Google (Gemini / Google AI), Jina AI, Recraft, PhotoRoom | Uploaded product photos, search queries, product text — as described in Section 6 |
| Address autocomplete and currency | Google Maps Platform, IP-geolocation providers | Partial address input, IP address |
| Error monitoring and diagnostics | Sentry | Technical error data, which may incidentally include an IP address or URL |
| Professional advisers | Accountants, auditors, insurers and lawyers | Only what is necessary, and only when required |
We also disclose personal information: to comply with law, a subpoena, a court order or a lawful government request; to enforce our Terms of Service; to protect the rights, property or safety of Match Kicks, our customers or the public; and in connection with a merger, acquisition, financing, reorganisation or sale of assets, in which case we will require the recipient to honour this Privacy Policy or notify you of any change.
"Sale" and "sharing" of personal information — please read
We do not sell your personal information for money. We do not, and will not, trade customer lists.
However, we do disclose identifiers (including hashed email addresses and phone numbers, IP addresses, cookie IDs and click identifiers), commercial information (products viewed and purchased, order values) and internet activity to Meta, Google and Microsoft so that they can show you relevant advertising and tell us which of our ads led to a sale. Under the California Consumer Privacy Act — and under the Colorado, Connecticut, Virginia, Oregon, Texas, Montana and similar state laws — this is treated as "sharing" for cross-context behavioral advertising and may also be treated as a "sale", because those platforms receive value in the exchange even though no money changes hands.
We want to be straightforward about this rather than hide behind a bare "we don't sell your data". You can opt out at any time, free of charge, and we will not degrade your service or charge you a different price for doing so. See Section 10.
In the 12 months before the date of this policy, we shared the categories of personal information listed above for cross-context behavioral advertising. We have not sold or shared the personal information of consumers we know to be under 16 years of age, and we do not knowingly do so.
8. How long we keep your information
We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as the law requires. The specific periods are set out in the table in Section 2 above. In summary:
- Order and transaction records — 7 years from the order date, to meet tax, accounting, warranty and dispute-resolution obligations.
- Account records — for as long as your account is open, plus up to 12 months after you close it.
- Abandoned carts — deleted automatically after 14 days. Carts that converted into an order are deleted after 90 days.
- Uploaded match photos — kept while your match request and any resulting order are live, then up to 24 months.
- Marketing contact records — until you unsubscribe, plus up to 24 months so we can honour your opt-out and prove we did.
- Analytics, advertising and recommendation event logs — up to 24 months; several of our internal logs are pruned automatically after 90 days, and search job records after 24 hours.
- Server and security logs — up to 90 days.
- Support and chat transcripts — up to 3 years.
Where we no longer need information, we delete it or irreversibly anonymise it. We may keep information longer where we must do so to establish, exercise or defend a legal claim, or to comply with a legal hold.
9. International transfers
Match Kicks is based in the United States and we ship worldwide. Your personal information is stored and processed in the United States and may be processed by our service providers in other countries, which may not offer the same level of data protection as your own.
Where we transfer personal information out of the United Kingdom, the European Economic Area or Switzerland, we rely on an appropriate safeguard, which is normally the European Commission's Standard Contractual Clauses (together with the UK International Data Transfer Addendum where relevant), or the recipient's certification under the EU–US, UK Extension and Swiss–US Data Privacy Framework where they hold one. You can request a copy of the relevant safeguard by emailing support@matchkicks.com.
10. Your privacy rights and choices
Depending on where you live, you have some or all of the following rights. These rights are not absolute and some exceptions apply.
| Right | What it means |
|---|---|
| Know / access | Ask what personal information we hold about you, where we got it, why we use it and who we disclose it to, and receive a copy. |
| Delete | Ask us to delete personal information we hold about you. |
| Correct | Ask us to fix personal information that is inaccurate. |
| Portability | Receive a copy in a portable, machine-readable format, and ask us to send it to another company where technically feasible. |
| Opt out of targeted advertising, sale and sharing | Tell us to stop disclosing your information to advertising platforms for cross-context behavioral advertising. |
| Opt out of profiling | Object to profiling in furtherance of decisions that produce legal or similarly significant effects. (We do not carry out this kind of profiling — see Section 6.) |
| Limit use of sensitive personal information | The only sensitive personal information we hold is your hashed account password, and we already use it solely to log you in — which is a use the law permits without further limitation. |
| Withdraw consent | Withdraw consent at any time where we rely on it, including for marketing and non-essential cookies. This does not affect processing already carried out. |
| Object / restrict | Object to, or ask us to restrict, processing based on our legitimate interests. |
| Non-discrimination | We will not deny you goods or services, charge you a different price, or give you a lower quality of service because you exercised a privacy right. |
| Appeal | If we decline your request, you may appeal. See below. |
How to exercise your rights
Use any of these methods — all of them work, and all of them are free:
- Email support@matchkicks.com. Please tell us which right you want to exercise.
- Text or call (844) 234-5684.
- Live chat from any page of the site, or our Contact page.
- To stop marketing: click "unsubscribe" in any email, visit matchkicks.com/unsubscribe, or reply STOP to any text message.
Verification. To protect your information we need to be reasonably sure it is really you. We will normally ask you to confirm details we already hold, such as the email address on your account or a recent order number. We will not ask for more information than is necessary, and we will only use what you give us to verify the request.
Timing. We acknowledge requests within 10 business days and respond substantively within 45 calendar days. If we need more time we will tell you why, and may extend by a further 45 days.
Authorised agents. You may use an authorised agent. We will ask for written proof that you authorised them and may ask you to verify your identity with us directly.
Appeals. If we refuse your request, we will explain why. To appeal, reply to our decision or email support@matchkicks.com with "Privacy Appeal" in the subject line. We will respond within 45 days (60 days in some states). If we deny the appeal, we will tell you how to contact your state Attorney General or data protection authority.
Browser signals
An opt-out you send us through any of the methods above is applied to your customer record, so it covers every browser and device you use — not just the one you were using at the time. We do not respond to "Do Not Track" browser headers, because no common standard for them has been agreed.
11. Region-specific disclosures
California
This policy is our notice at collection and our full privacy policy for the purposes of the CCPA as amended by the CPRA. The categories of personal information we collect, our purposes, our retention periods, and the categories we sell or share are all set out above. California residents may exercise the rights in Section 10, including the right to opt out of the sale and sharing of personal information and the right to limit the use of sensitive personal information.
Shine the Light. California Civil Code § 1798.83 permits California residents to request information about disclosures of personal information to third parties for their own direct marketing purposes. We do not make such disclosures.
Notice of financial incentive. We offer programmes that may be considered "financial incentives" because they provide something of value in exchange for personal information:
- Email and SMS sign-up offers — a discount code or gift-code offer in exchange for your email address and, where you provide it, your mobile number.
- Our affiliate and referral programme and cash-back offers — commissions or credit in exchange for contact and payout details and referral tracking.
- Review and unboxing-video incentives — a discount code in exchange for content you submit.
You join these programmes voluntarily by opting in, and you may withdraw at any time by unsubscribing, replying STOP, or contacting us. We estimate the value of the personal information involved to be reasonably related to the value of the offer, calculated by reference to the cost of the discount or commission we provide and the incremental revenue we expect it to generate. We do not consider the difference to be unjust, unreasonable, coercive or usurious.
Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other US states
If you are a resident of a US state with a comprehensive consumer privacy law, you have the rights set out in Section 10 to the extent your state's law provides them, including the right to opt out of targeted advertising and of the sale of personal data. Use any of the contact methods in Section 10 to exercise them. Residents of Oregon may additionally request a list of the specific third parties to which we have disclosed personal data.
Texas and Florida notice: we may sell or share personal data as those terms are defined in Texas Business and Commerce Code § 541 and the Florida Digital Bill of Rights, in the manner described under "Sale and sharing" above. We do not sell sensitive personal data or biometric data.
Nevada: Nevada residents may direct us not to sell certain covered information by emailing support@matchkicks.com.
United Kingdom, European Economic Area and Switzerland
You have the rights described in Section 10 under the UK GDPR, the EU GDPR and the Swiss FADP, including the right to lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk); in the EEA it is the authority for your country of residence, work or the alleged infringement. We would appreciate the chance to address your concern first — please email support@matchkicks.com.
Other jurisdictions
We maintain separate notices describing how we meet the requirements of other regimes, including GDPR, PIPEDA (Canada), LGPD (Brazil), APPI (Japan), PDPA, POPIA (South Africa), the Australian Privacy Act and New Zealand Privacy Act, and US state privacy laws. Where those notices conflict with this policy, the more protective provision applies.
12. Children
The Services are intended for adults. We sell apparel in children's sizes, but those purchases are made by adults, and accounts, uploads, reviews and marketing sign-ups are for people aged 16 and over.
We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has given us personal information, email support@matchkicks.com and we will delete it promptly.
13. User-generated content
If you post a review, submit a photo, or upload an unboxing video for publication, that content — and any name or handle you attach to it — may be visible to the public and may be used by us in marketing across our site, emails, advertising and social channels. Please do not include anything you would not want to be public, and please do not upload images of other people without their permission. You can ask us to take your content down at any time by emailing support@matchkicks.com.
14. Security
We maintain administrative, technical and physical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest, hashed passwords, row-level access controls on our database, restricted internal access on a need-to-know basis, bot and abuse protection at the network edge, and PCI-DSS compliant payment processing carried out entirely by Stripe and PayPal — we never receive or store your full card number.
No system is perfectly secure, and we cannot guarantee absolute security. Please use a strong, unique password, do not share your log-in details, and avoid sending sensitive information to us over unsecured channels. If you believe your account has been compromised, contact us immediately. If a breach affects your personal information, we will notify you and the relevant regulators where the law requires it.
15. Third-party sites and services
Our Services link to sites we do not control, including social media platforms, our payment processors' pages, carrier tracking pages and our review platform. This policy does not apply to them. Please read their own privacy notices before giving them your information.
16. Changes to this policy
We may update this policy to reflect changes in our practices, technology or the law. We will post the updated version here and change the "Last updated" date. If the changes are material — for example, if we begin using your information for a materially different purpose — we will give you prominent notice and, where the law requires it, ask for your consent before the change takes effect. Previous versions are available on request.
17. Contact and complaints
For any question about this policy, our privacy practices, or to exercise a right:
- Email: support@matchkicks.com
- Text or call: (844) 234-5684
- Post: Neapolitan Group Inc. (d/b/a Match Kicks), Attn: Privacy, 1712 Pioneer Ave, Ste 500, Cheyenne, WY 82001, United States
If you are not satisfied with our response, you may appeal as described in Section 10, or complain to your state Attorney General, the California Privacy Protection Agency, or your local data protection authority.