Privacy Policy

Last updated: January 2026

This Privacy Policy describes how REST Protocol, Inc. ("we," "us," or "our") collects, uses, and shares information when you visit restprotocol.co or buy our products. By using the Site, you agree to this Policy.

1. Information we collect

We collect information in three ways:

Information you give us — name, email, shipping address, billing address, payment method, phone (optional), and any messages you send to support.
Information collected automatically — IP address, browser type, device type, pages visited, time spent on pages, and referring URL. Collected through cookies, pixels, and similar technologies.
Information from third parties — payment processors confirm transactions, shipping carriers confirm delivery, and analytics providers help us understand traffic patterns.

2. How we use information

To process and fulfill your orders and subscriptions
To send order confirmations, shipping updates, and customer service responses
To send marketing emails about new products or promotions (you can unsubscribe at any time)
To improve our Site, products, and customer experience
To detect and prevent fraud or abuse
To comply with legal obligations

3. Cookies and tracking

We use cookies for essential site functionality (like keeping items in your cart), analytics (like understanding which pages perform best), and advertising (like showing you relevant ads on other sites). You can disable non-essential cookies in your browser settings or via our cookie banner.

4. Sharing information

We share information only with:

Service providers — payment processors, shipping carriers, email platforms, and analytics providers who help operate the business
Legal authorities — when required by subpoena, court order, or applicable law
Business transfers — if REST is acquired, merged, or sells assets, customer information may transfer as part of that transaction

We do not sell your personal information.

5. Your rights

Depending on your location, you may have rights to:

Access the information we hold about you
Correct inaccurate information
Delete your information (subject to legal retention requirements)
Opt out of marketing communications
Opt out of targeted advertising

To exercise these rights, email privacy@restprotocol.co. We'll respond within 30 days.

6. Data retention

We retain order and account information for at least 7 years for tax, accounting, and legal purposes. Marketing data is retained until you unsubscribe.

7. Security

We use industry-standard security measures — encryption in transit, secure payment processing through PCI-compliant providers, and limited internal access — to protect your information. No system is 100% secure, but we take this seriously.

8. Children

Our Site and products are not directed at children under 16. We do not knowingly collect information from anyone under 16.

9. International transfers

If you're outside the United States, your information may be transferred to and processed in the US, where our servers and team are located. By using the Site, you consent to this transfer.

10. Changes to this Policy

We may update this Policy periodically. We'll update the "Last updated" date at the top, and for material changes we'll send you an email if we have one on file.

11. Contact

Questions or requests about your privacy? Email privacy@restprotocol.co.