Purple Ocean — Privacy Policy

Last updated: September 9, 2026

Purple Ocean is operated by Hookrate MB, Lithuania (“Purple Ocean,” “we,” “us,” or “our”).

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit trypurpleocean.com, purchase our products, create or use a customer account, manage a subscription, communicate with us, or otherwise interact with our website and related services (collectively, the “Services”).

Our store is powered by Shopify, which provides the ecommerce platform through which we offer our products and Services.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood how personal information is handled as described below.

1. Personal Information We Collect

Depending on how you interact with Purple Ocean, we may collect or process the following categories of personal information:

Contact information, such as your name, email address, phone number where provided, billing address, and shipping address.

Order and transaction information, such as products viewed, products added to your cart, purchases, subscription orders, returns, refunds, discounts used, payment status, and order history.

Payment information, such as payment method and transaction details. Payment card information may be collected and processed by Shopify and other payment providers rather than stored directly by Purple Ocean.

Customer account information, such as account identifiers, preferences, saved addresses, subscription settings, and other information associated with your customer account.

Communications, including information you provide when contacting customer support, submitting a refund or guarantee request, responding to surveys, or otherwise communicating with us.

Device and technical information, such as IP address, browser type, device type, network information, identifiers, cookie information, and similar technical data.

Usage information, such as pages viewed, links clicked, interactions with the Site, referring pages, shopping behavior, and other information about how you use the Services.

Marketing and advertising information, such as email engagement, advertising interactions, campaign attribution, and preferences regarding promotional communications.

We may also generate reasonable inferences from information described above for purposes such as fraud prevention, analytics, personalization, and advertising where permitted by law.

2. How We Collect Personal Information

We may collect personal information:

• Directly from you, including when you place an order, create or access an account, enroll in or manage a subscription, sign up for marketing, submit a form, or contact us.
• Automatically, through cookies, pixels, analytics technologies, device information, and similar technologies when you visit or interact with our Services.
• From service providers, including Shopify, payment providers, subscription-management providers, fulfillment and shipping providers, analytics services, and marketing platforms.
• From advertising and business partners, where permitted by applicable law.

3. How We Use Personal Information

We may use personal information to:

Provide and Fulfill the Services

This includes processing orders and payments, fulfilling and delivering purchases, operating customer accounts, managing subscriptions, processing returns and refunds, providing our 90-Day Money-Back Guarantee, and responding to customer-service requests.

Communicate With You

We may send order confirmations, shipping updates, subscription notifications, renewal reminders, payment notices, support communications, product-related notices, and other communications necessary to administer your relationship with Purple Ocean.

Marketing and Advertising

Where permitted by law, we may use personal information to send promotional emails, measure marketing performance, personalize communications, understand customer interests, and display or measure advertisements on our Site or other platforms.

We currently do not operate an SMS marketing program. If we introduce one in the future, we will update our practices and provide any consent disclosures required by applicable law.

Analytics and Improvement

We may analyze how visitors and customers interact with our Site and products in order to understand performance, improve the customer experience, develop or improve products and Services, and measure marketing effectiveness.

Security and Fraud Prevention

We may use information to authenticate users, detect suspicious transactions, prevent fraud or unauthorized resale, investigate policy abuse, protect our systems and customers, and maintain the security of the Services.

Legal and Compliance Purposes

We may process information where necessary to comply with legal, tax, accounting, regulatory, or law-enforcement requirements; establish or defend legal claims; respond to lawful requests; or enforce our Terms and policies.

4. Legal Bases for Processing

Where the European Economic Area, United Kingdom, or other applicable data-protection laws require a legal basis for processing personal information, we rely on one or more of the following bases:

Performance of a contract. We process information when necessary to process your order, deliver products, administer your subscription or customer account, handle returns or refunds, and otherwise provide Services you request.

Legitimate interests. We may process information where reasonably necessary for our legitimate business interests, including operating and improving our business, preventing fraud, securing our Services, understanding Site performance, supporting customers, and protecting our legal rights, provided those interests are not overridden by your applicable rights.

Consent. We rely on consent where required, including for certain marketing activities and non-essential cookies or tracking technologies. Where processing is based on consent, you may withdraw that consent at any time.

Legal obligations. We process information where necessary to comply with applicable legal, tax, accounting, regulatory, or other obligations.

5. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, and similar technologies to operate the Site, remember preferences, understand Site usage, measure performance, prevent fraud, and support advertising.

These technologies may include:

• strictly necessary technologies required for the Site and checkout to function;
• functionality and preference technologies;
• analytics and measurement technologies; and
• advertising or targeting technologies, where enabled and permitted.

Where required by applicable law, non-essential technologies are used based on your consent or privacy choices.

You can manage applicable cookie preferences through the privacy controls made available on the Site.

6. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to operate Purple Ocean, including to:

Shopify, which hosts and powers our ecommerce Services.

Payment providers, which process purchases and recurring subscription payments.

Subscription-management providers, which help administer subscriptions, recurring billing notices, skips, pauses, cancellations, and related functionality.

Email and marketing providers, which help us operate email marketing, transactional messaging, analytics, and customer communications.

Fulfillment, warehouse, and shipping providers, which process, pack, ship, track, and deliver orders.

Analytics and advertising partners, where enabled, to measure Site activity, marketing performance, and advertising or to deliver targeted advertising as permitted by applicable law.

Professional and technical service providers, such as hosting, IT, security, accounting, legal, fraud-prevention, customer-support, and cloud-service providers.

We may also disclose information:

• when you direct us or consent to the disclosure;
• in connection with a merger, acquisition, financing, restructuring, sale, or similar business transaction;
• where reasonably necessary to prevent fraud or protect the rights, property, security, or safety of Purple Ocean, our customers, or others; or
• where required by applicable law, regulation, court order, subpoena, or other valid legal process.

We do not disclose personal information to third parties merely for their unrelated purposes except as described in this Privacy Policy or with your consent.

7. Shopify

Our Services are hosted by Shopify.

Information you provide through the Site may be transmitted to and processed by Shopify and its service providers in order to provide ecommerce, checkout, customer-account, analytics, security, advertising, and related functionality.

Depending on our Shopify settings, Shopify may provide enhanced services that use information about interactions with our store together with interactions involving other Shopify merchants.

Shopify independently handles certain processing activities and provides information about those practices in its Consumer Privacy Policy and Privacy Portal.

8. Targeted Advertising, Sale, and Sharing Choices

Depending on where you live and how applicable privacy law defines terms such as “sale,” “sharing,” or “targeted advertising,” certain disclosures of information to advertising or marketing partners may fall within those definitions even though no money is exchanged for your personal information.

Where applicable, you may opt out of eligible sale, sharing, or targeted-advertising activities using our Data Sharing Opt-Out / Your Privacy Choices page.

We also recognize Global Privacy Control signals where required and supported.

California consumers may have rights relating to the sale or sharing of personal information and cross-context behavioral advertising under the CCPA, as amended.

9. Marketing Communications

If you choose to receive promotional emails from Purple Ocean, you can unsubscribe at any time using the unsubscribe link included in our marketing emails.

Unsubscribing from promotional communications does not prevent us from sending transactional or service communications regarding orders, shipping, subscriptions, account activity, refunds, or customer support.

10. Third-Party Websites and Services

Our Services may contain links or integrations involving third-party websites or services.

Those third parties may have their own privacy policies and practices. Purple Ocean does not control and is not responsible for the independent privacy or security practices of third-party services.

We encourage you to review their policies before providing personal information directly to them.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information.

However, no electronic transmission, storage system, or security measure is completely secure, and we cannot guarantee absolute security.

Please avoid sending highly sensitive or confidential information through unsecured communication channels.

12. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• maintain customer accounts and subscriptions;
• process transactions and provide customer service;
• maintain financial, tax, and accounting records;
• prevent fraud and abuse;
• resolve disputes;
• enforce agreements and policies; and
• comply with applicable legal obligations.

Retention periods may vary depending on the type of information, the reason it was collected, and applicable legal requirements.

When information is no longer reasonably required, we may delete or anonymize it in accordance with our data-retention practices.

13. International Transfers

Purple Ocean is operated by Hookrate MB in Lithuania, and some of our service providers operate in the United States and other countries.

As a result, personal information may be transferred to, stored in, or processed in a country other than the country in which you reside.

Where required for transfers of personal information from the European Economic Area or United Kingdom, we use or rely on legally recognized transfer mechanisms, such as adequacy decisions or approved contractual protections, including Standard Contractual Clauses where appropriate.

14. Children's Privacy

Purple Ocean's Services are intended for adults.

We do not knowingly collect personal information from individuals under 18 years of age for the purpose of purchasing Purple Ocean products.

If you believe a minor has provided personal information to us improperly, please contact us so that we can review and, where appropriate, delete the information.

We do not knowingly sell or share personal information of consumers under 16 in circumstances requiring affirmative authorization under applicable law.

15. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

• request access to or information about personal information we hold about you;
• request correction of inaccurate personal information;
• request deletion of personal information;
• receive certain personal information in a portable format;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• opt out of certain sale, sharing, or targeted advertising;
• appeal certain decisions concerning privacy-rights requests where provided by applicable law; and
• lodge a complaint with an applicable data-protection authority.

These rights are not absolute and may be subject to legal exceptions.

We may need to verify your identity before processing a request.

Where applicable, an authorized agent may submit a request on your behalf, subject to reasonable verification of the agent's authority and your identity.

We will not unlawfully discriminate against you for exercising applicable privacy rights.

16. California and Other U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state law.

Depending on the law and whether it applies to Purple Ocean, these may include rights to access, delete, correct, or obtain personal information and to opt out of certain targeted advertising, sale, sharing, or profiling activities.

You may submit applicable privacy requests using the privacy controls available on the Site or by contacting us at hello@trypurpleocean.com.

17. EEA and UK Privacy Rights

If applicable European or UK data-protection law applies to our processing of your personal information, you may have rights to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent where consent is the legal basis.

You may also have the right to lodge a complaint with your local supervisory authority.

Because Hookrate MB is established in Lithuania, you may also contact the applicable Lithuanian data-protection supervisory authority where appropriate.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, technology, providers, or legal obligations.

When we update it, we will revise the “Last updated” date.

We will provide additional notice where required by applicable law.

19. Contact and Data Controller

The controller responsible for Purple Ocean’s processing of personal information is:

Hookrate MB
Operating as Purple Ocean
Lithuania

Email: hello@trypurpleocean.com

U.S. Distribution & Mailing Address:
102 E Bailie St
Kentland, IN 47951
United States

Our U.S. address is used in connection with Purple Ocean’s distribution and fulfillment operations and does not change the location or identity of Hookrate MB as the data controller.

For privacy questions, requests, or complaints, please contact us at hello@trypurpleocean.com.