Privacy Policy

Last Updated: May 29, 2026

Introduction

Fox Factory, Inc. ("Fox Factory, Inc.", "we", "us", or "our") and its affiliates and subsidiaries respect your privacy and is committed to protecting it through our compliance with this Privacy Policy.

This Privacy Policy describes how we collect, use and share information about you as well as your rights and choices about such collection, use and sharing. It applies when you access or use our websites and other products and services (collectively, the “Services”), contact our service team, engage with us on social media, or otherwise interact with us.

If you do not agree with our policies and practices, your choice is not to use the Services. By accessing or using the Services, whether or not you purchase any of our Services, you agree to this Privacy Policy.

Changes to This Privacy Policy

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the Privacy Policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access the Services or otherwise interact with us, as your continued use of any Services constitutes acceptance to the updated terms.

Information Collection

Information collected from you

Fox Factory offers a variety of products, apps, and services. We may collect personal information you provide to us when you purchase our products, automatically when you visit our website, or through third parties like our service providers and advertising platforms. The categories of information we may collect include:

Personal Identifiers, including name, email address, postal address, telephone number, and online Identifiers
Internet Activity
Commercial Information, including purchases and records of personal property
Financial Information, including credit or debit card number and bank or other financial account number
Location Information, including general location data
Physical and Audio Data, including photos
Protected Classifications and Other Personal Characteristics, including age and sex, gender, or gender identity
Consumer Communications, including direct communications with our consumers
Inferences from Other Data, including inferences created from other personal information collected

Information collected from other sources

We may collect personal information about you from third-party sources The sources and categories of information we may collect include:

Ad Networks

Personal Identifiers, including Name, Email address, Postal address, Telephone number, and Online Identifiers
Protected Classifications and Other Personal Characteristics, including Age and Sex, gender, or gender identity

Data Analytics Providers

Personal Identifiers, including Name, Email address, Postal address, Telephone number, and Online Identifiers
Internet Activity
Location Information, including General location data
Protected Classifications and Other Personal Characteristics, including Age and Sex, gender, or gender identity
Consumer Communications, including Direct communications with our consumers
Inferences from Other Data, including Inferences created from other personal information collected

Retail Partners

Personal Identifiers, including Name

Sales & Marketing Tools

Personal Identifiers, including Online Identifiers
Internet Activity

Social Networks

Personal Identifiers, including Name, Email address, Postal address, Telephone number, and Online Identifiers
Internet Activity
Commercial Information, including Purchases
Location Information, including General location data
Physical and Audio Data, including Photos
Protected Classifications and Other Personal Characteristics, including Age and Sex, gender, or gender identity
Consumer Communications, including Direct communications with our consumers
Inferences from Other Data, including Inferences created from other personal information collected

How long we keep your data

We do not retain data for any longer than is necessary for the purposes described in this Privacy Policy. We generally retain data according to the guidelines below.

Data Retention Periods
Type of Data	Retention Period
Cookies and online data we collect while you use our website, including Name, Email address, Online Identifiers, Internet Activity, General location data, Direct communications with our consumers, Inferences created from other personal information collected	We delete or anonymize data concerning your use of our website within 5 years of collecting it. Cookies and on-device data can be deleted at any time by you, the consumer.
Data we collect in order to process and ship orders you place with us, including Name, Email address, Postal address, Telephone number, Purchases, Credit or debit card number	We keep personal information related to products and services you purchase for as long as the personal data is required for us to fulfill our contract with you, and for 5 years from your last purchase with us. We may keep data beyond this period in anonymized form.
Data we collect when you contact us for customer support and other inquiries, including Name, Email address, Telephone number, Purchases, Records of personal property, Bank or other financial account number	We keep customer feedback and correspondence with our customer service for up to 5 years to help us respond to any questions or complaints. We may keep data beyond this period in anonymized form.
Data we collect when you sign up for promotional and marketing communications, including Name, Email address, Postal address, Telephone number, Online Identifiers, Internet Activity, Purchases, Photos, Age, Sex, gender, or gender identity, Direct communications with our consumers, Inferences created from other personal information collected	Where you have signed up to receive promotional and marketing communications from us, we will retain any data collected until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will further retain a record of any opt-outs in order to prevent sending you future communications.
Data we collect in connection with privacy requests, including Name, Email address, Online Identifiers	We retain records related to privacy requests as long as necessary to comply with our legal obligations, and for a minimum of 24 months.
Data we collect for security purposes, including Name, Email address, Online Identifiers	We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures.
To evaluate potential employment, including Name, Email address, Postal address, Telephone number, Bank or other financial account number, General location data, Age	We keep data used to evaluate potential employment opportunities for up to 5 years.

Why We Process Your Information

We use personal information for the following purposes:

Analyzing Data
Conducting Surveys
Creating Customer Profiles
Delivering Targeted Ads
Fulfilling Customer Orders
Improving Our Products & Services
Internal Business Operations
Managing Event & Guest Data
Marketing Our Products & Services
Meeting Compliance & Legal Requirements
Operating Our Website or Mobile Apps
Preventing Fraud
Processing Payments
Providing Customer Support
Providing Cybersecurity
Sending Promotional Communications
Storing and Managing Data
Tracking Purchases & Customer Data

How We Disclose Your Personal Information

We may disclose the following personal information about you to our services providers and vendors when you purchase our products or visit our website:

Personal Information Sharing Categories
Personal Information Category	Categories of Service Providers	Categories of Third Parties
Personal Identifiers	Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, Communications Tools, Data Analytics Providers, Engineering Contractors, Governance, Risk & Compliance Software, Human Resources Contractors, Payment Processors, Sales & Marketing Contractors, Sales & Marketing Tools, and Website Operations Tools	Ad Networks, Data Analytics Providers, Data Cooperative, Fraud Prevention Tools, Payment Processors, and Social Networks
Internet Activity	Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, Communications Tools, Consultant Contractors, Customer Support Tools, Cybersecurity Providers, IT Infrastructure Services, Payment Processors, Sales & Marketing Contractors, Sales & Marketing Tools, and Website Operations Tools	Ad Networks, Data Analytics Providers, Data Cooperative, Social Networks, and Website Operations Tools
Commercial Information	Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, Communications Tools, Consultant Contractors, Data Analytics Providers, IT Infrastructure Services, Payment Processors, Sales & Marketing Tools, and Website Operations Tools	Ad Networks, Data Cooperative, Payment Processors, and Social Networks
Financial Information	Commerce Software Tools and Payment Processors	Payment Processors
Location Information	Business Operations Tool	Data Analytics Providers
Physical and Audio Data	Commerce Software Tools and Sales & Marketing Tools	None
Protected Classifications and Other Personal Characteristics	Commerce Software Tools, IT Infrastructure Services, and Sales & Marketing Tools	None
Consumer Communications	Commerce Software Tools, Data Analytics Providers, Governance, Risk & Compliance Software, and Sales & Marketing Tools	None
Inferences from Other Data	Consultant Contractors, Data Analytics Providers, and Sales & Marketing Tools	Ad Networks

Your Rights and Choices

In addition to the other rights and choices described in this Policy, you have these rights and choices regarding your information depending on your jurisdiction. You may have the right to make certain requests regarding your “personal information” or “personal data” and (as such terms are defined under applicable law, and collectively referred to herein as “personal information”). Please navigate to your applicable state section on the left hand panel for further information.

Shopify Network Intelligence

Our online store is hosted by Shopify, and Shopify collects and processes personal data about store customers for purposes including but not limited to: providing product and store customization, analytics, and advertising services. Information submitted by customers will be shared with Shopify as well as third parties that may be located in other countries. To learn more about Shopify’s data practices, please review their privacy policy.

Depending on your jurisdiction, you may opt out or object to Shopify’s processing of your data for certain use cases on their Privacy Controls page.

Cookies & Similar Technologies

Cookies

This site uses first and third-party cookies and similar technologies to process personal information for the purposes described in this Policy. Cookies are small text files placed on your device to store data that can be recalled by a web server in the same domain that placed the cookie. The text in a cookie often consists of a string of numbers and letters that uniquely identifies your device, but it can contain other information as well.

Do Not Track

Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. This is available only in certain browsers. Because there is not a common understanding of how to interpret the DNT signal, our websites do not currently respond to browser DNT signals. However, you may still exercise your privacy rights as described elsewhere in this Policy. Please note that Do Not Track is a different privacy mechanism than the user “preference signal” referenced in the “Your Rights and Choices,” which is a browser-based control that indicates whether you would like to opt out of processing of your information for certain purposes, such as the “sale” of your information or the disclosure of your information for targeted advertising purposes, under applicable laws.

Third party analytics tools

This site uses Google Analytics to analyze your interactions and experiences with our Services. You can find out how Google Analytics uses data here and how to opt out of Google Analytics here. For more information on how Google uses data when you use our websites, click here.

California Shine the Light Disclosure

If you are a California resident and have an established business relationship with us, you can request a notice disclosing the categories of personal information we have shared with third parties, for the third parties' direct marketing purposes, during the preceding calendar year. To request a notice, please submit your request to privacy@ridefox.com. Please allow 30 days for a response.

To opt out of selling and sharing personal information, go to Your Privacy Choices.

Vendor Disclosures

Some vendors require their business customers to make specific disclosures in their privacy policies or terms and conditions in order to meet the vendors' own compliance requirements. Below is a list of vendors that have such requirements, and links to pages where you can find more information.

Shopify. Our online store is hosted by Shopify, and Shopify collects and processes personal data about store customers for purposes including but not limited to: providing product and store customization, analytics, and advertising services. Information submitted by customers will be shared with Shopify as well as third parties that may be located in other countries. To learn more about Shopify’s data practices, please review their privacy policy. Depending on your jurisdiction, you may opt out or object to Shopify’s processing of your data for certain use cases on their Privacy Controls page.
Klaviyo. We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.
Google Ads. We use data collected from visitors to our website or users of our applications to deliver and optimize online advertising, including through remarketing and similar audience features. Third-party vendors, including Google, may show our ads on websites and apps across the Internet. These third-party vendors, including Google, use cookies and/or device identifiers to serve ads based on a user’s past visits to our website or use of our applications. These technologies enable us to measure the effectiveness of our advertising and deliver more relevant content. Users may opt out of Google’s use of cookies or device identifiers by visiting here.
Google Analytics. This site uses Google Analytics to analyze your interactions and experiences with our Services. You can find out how Google Analytics uses data here and how to opt out of Google Analytics here. For more information on how Google uses data when you use our websites, click here.

If you have any questions about this Privacy Policy, please contact us by emailing privacy@ridefox.com.

EEA/UK/CH (GDPR)

This section provides additional information for people in the European Economic Area (EEA), United Kingdom (UK), or Switzerland (CH). The terms used in this section have the same meaning as in the General Data Protection Regulation, the UK Data Protection Act, and the Swiss Federal Act on Data Protection (collectively, “European Privacy Laws”). The term “personal information” as used in this notice has the same meaning as “personal data” in the European Privacy Laws.

Collection and Disclosure of Personal Data

The personal data we collect and how we share it is described above in our Privacy Policy.

We may disclose your personal information to the following third party controllers for business purposes: ID.me, Google Analytics, Sterling, Klaviyo, Google Ads, PayPal - Pay with PayPal, Venmo, Pay Later, Google Pay, Meta Ads, Shopify Network Intelligence, Ceros. To understand how these parties handle your data, please refer to their respective privacy policies.

Cookie Notice

We use cookies to improve your experience on our site and to allow us and third parties to personalize the marketing content you see on other websites and social media. Website visitors from European Privacy Law regions can control cookie settings. Manage your region specific consent settings here.

Essential Cookies

We use these cookies for things like security, logins, site errors, and processing payments. We can't turn these necessary cookies off, but you can control them in your browser.

Cookie Name	Provider	Duration
__Secure-ROLLOUT_TOKEN	Google Ads	5 Months 27 Days
_ks_scriptVersionChecked	kiwi size chart	1 Day
_shop_app_essential	Shopify	1 Year
_shopify_essential	Shopify	1 Year
cart_currency	Shopify	14 Days
cf_chl_rc_ni	Cloudflare	1 Hour
kiwi-sizing-token	kiwi size chart	1 Hour
localization	Shopify	1 Year
shopify_client_id	Shopify	1 Year

Analytics Cookies

These cookies tell us how you use our sites and apps, and provide information to help us improve your experience.

Cookie Name	Provider	Duration
_ga	Google Analytics	1 Year 1 Month 5 Days
_ga_8PWSXP43WW	Google Analytics	1 Year 1 Month 4 Days
_ga_MWNKS4E98X	Google Analytics	1 Year 1 Month 5 Days
_ga_S7VNYKMZP4	Google Analytics	1 Year 1 Month 5 Days
_shopify_analytics	Shopify	1 Year
_shopify_marketing	Shopify	1 Year
_shopify_s	Shopify	30 Mins
_shopify_y	Shopify	1 Year
ph_phc_g5632HMvs5bIrtvDiZJgK3Jz3vsmlN7RLJOHKliRmTG_posthog	PostHog, Inc.	1 Year
shopify_client_id	Shopify	1 Year

Personalization Cookies

We use these cookies to enhance functionality and personalize content for you. For example, they allow us to remember you when you return to our website or app. If you do not allow these cookies then some or all of these services may not function properly.

Cookie Name	Provider	Duration
__Secure-ROLLOUT_TOKEN	Google Ads	5 Months 27 Days
__Secure-YNID	Google Ads	5 Months 27 Days
kiwi-sizing-token	kiwi size chart	1 Hour
ph_phc_g5632HMvs5bIrtvDiZJgK3Jz3vsmlN7RLJOHKliRmTG_posthog	PostHog, Inc.	1 Year

Advertising Cookies

These cookies help us decide which products, services and offers may be relevant for you. We use this data to customize the marketing content you see on websites, apps and social media, and to measure your interactions with that content. We might use these cookies to advertise our products to you when you visit other websites.

Cookie Name	Provider	Duration
__kla_id	Klaviyo	1 Year 1 Month 5 Days
__Secure-YNID	Google Ads	5 Months 27 Days
_fbp	Meta Ads	2 Months 29 Days
_gcl_au	Google Ads	2 Months 29 Days
_shopify_marketing	Shopify	1 Year
VISITOR_INFO1_LIVE	Google Ads	5 Months 27 Days
VISITOR_PRIVACY_METADATA	Google Ads	5 Months 27 Days
YSC	Google Ads	Session

Lawful Bases and Legitimate Interests

We process personal data on the following lawful bases:

Complying with legal obligations
Fulfilling contracts
Consent
Legitimate interests

Where we process personal data on the basis of our legitimate interests, we pursue the following interests: Fulfilling Customer Orders, Conducting Surveys, Creating Customer Profiles, Delivering Targeted Ads, Improving Our Products & Services, Internal Business Operations, Managing Event & Guest Data, Marketing Our Products & Services, Meeting Compliance & Legal Requirements, Operating Our Website or Mobile Apps, Preventing Fraud, Processing Payments, Providing Customer Support, Providing Cybersecurity, Sending Promotional Communications, Storing and Managing Data, Tracking Purchases & Customer Data, and Analyzing Data.

International Data Transfers

We may send the personal data of individuals in the EEA/UK/CH to third countries, including the United States, where it may be stored or processed, for example on our service providers’ cloud servers. When we transfer personal data, we endeavor to do so on the basis of Adequacy Decisions as adopted by the European Commission (EC), the UK Information Commissioner's Office (ICO), or the Swiss Federal Data Protection and Information Commissioner (FDPIC), the EU-US Data Privacy Framework, UK-US Data Bridge, and Swiss-U.S. Data Privacy Framework agreements, Standard Contractual Clauses (SCCs) issued by the EC or the FDPIC, International Data Transfer Agreements (IDTAs) approved by the ICO, and as otherwise allowed by law. Data protection authorities have determined that the SCCs and IDTAs provide sufficient safeguards to protect personal data transferred outside the EEA/UK/CH. To request copies of our international data transfer safeguards, please contact us at privacy@ridefox.com. You may read more about international data transfer mechanisms at the following links:

Privacy Rights

Individuals in the EEA/UK/CH have the following rights regarding their personal data. Make a Privacy Request by clicking here. Once you submit a request, we will verify your identity and process your request in most cases within 30 days.

Right to access. You have the right to request a copy of the personal data we hold about you.

Right of portability. You have the right to ask us to transfer your data to another party.

Right to rectification. You have the right to request that we rectify any incorrect information we have about you.

Right of erasure. You have the right to request that we erase (delete) any personal information we hold about you.

Right to withdraw consent. You have the right to withdraw your consent at any time when we rely on your permission to process your personal data.

Right to object. You have the right to object to our use of data about you.

Right to restrict processing. In certain circumstances, you have the right to restrict our processing of your personal data to storage only, subject to some exceptions. This right applies when:

You have contested the accuracy of your personal data and we are still verifying its accuracy.
Your personal data has been unlawfully processed under the GDPR.
You need for us to keep your data in order to establish, exercise, or defend a legal claim.
You have previously objected to our processing of your personal data and the status of that review is still pending.

Right to lodge a complaint with a supervisory authority. You have a right to lodge a complaint with a supervisory authority. For more information, you can visit the Information Commissioner’s Office website at https://ico.org.uk/, the Federal Data Protection and Information Commissioner’s website at https://www.edoeb.admin.ch/, or see a list of EU Data Protection Authorities at https://www.gdprregister.eu/gdpr/dpa-gdpr/.

Inquiries

Controller contact information

Fox Factory, Inc.

privacy@ridefox.com

Data Protection Officer information

Director of Compliance

privacy@ridefox.com

Canada (PIPEDA)

This section provides additional information for people in Canada. The terms used in this section have the same meaning as in the Personal Information Protection and Electronic Documents Act (PIPEDA).

Collection and Disclosure of Personal Data

The personal information we collect and how we share it is described above in our Privacy Policy.

We may disclose your personal information to the following third parties for business purposes: Affirm, Cozy Country Redirect, Google, Google Analytics, Google Pay, ID.me, Meta Ads, PayPal - Pay with PayPal, Venmo, Pay Later, Shopify Network Intelligence, and Sterling.

Privacy Rights

Individuals in Canada have the following rights regarding their personal information. Make a Privacy Request by clicking here. Once you submit a request, we will verify your identity and process your request in most cases within 30 days.

Right to Access

You have the right to be informed of the existence, use, and disclosure of your personal information and to be given access to that information.

Right to Correct

You have the right to contest the accuracy and completeness of the personal information we have about you, and to have it amended as appropriate.

Right to Withdraw Consent

You have the right to withdraw your consent to the collection, use, and disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice.

Right to Delete

You may request that we delete personal information we have obtained about you. However, we may retain your personal information if it is necessary for certain purposes, as allowed by law.

Right to Opt-Out

You have the right to opt out of the use of your personal information for targeted advertising.

You may exercise your right to opt-out.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.

Cross-Border Transfers

Your personal information may be processed in foreign jurisdictions, including the United States, where it may be subject to access by foreign courts, law enforcement, and other government agencies, in accordance with the laws of those jurisdictions.

Contact

If you have any questions or concerns regarding how we handle your personal information, you may contact the following person at our organization:

Compliance Director
privacy@ridefox.com

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Office of the Privacy Commissioner.