Last reviewed August 2026.
This is the readable edition, written for a person rather than for a court. It covers sunayla.com, and every action you take on it — looking, ordering, writing in. A denser legal version sits at our full privacy notice; should the two ever disagree, that one binds. Nothing below is meant to contradict it.
What do you actually know about me?
Two piles, and they reach us by different routes.
The pile you hand over. At checkout we receive your name, the address a box travels to, the address a card is registered at, an email, a phone number if you offer one, and the payment details needed to take the money. Write to support and we also have whatever you put in that message.
The pile your browser leaves behind. Any shop online records a trail: which browser and which device you arrived on, roughly where in the world your connection sits, which pages you opened and for how long, and which site or search phrase sent you here. Cookies do most of that recording.
Why do you need it?
- To build and send the pair you ordered, and to email you a confirmation and a tracking number.
- To answer you when you write, and to find your order while answering.
- To catch fraud — a card in the wrong hands, an order behaving oddly.
- To work out which pages confuse people, so that we can fix them.
- To put our boots in front of you elsewhere online, unless you have switched that off. More on that in a moment.
Who else gets to see it?
The companies that have to touch it for an order to happen, and no wider circle than that:
- Shopify, whose software runs this shop and holds the data behind it. Their own consumer privacy notice explains their side.
- The payment processor that clears your card. The card number itself is handled on their side of the wall.
- The workshop and the carrier who make the boots and move the box. They receive a name and a delivery address, because a parcel cannot travel without either.
- Advertising and analytics platforms, in the limited way described just below.
Beyond those, information leaves us when the law obliges it to — a warrant, a subpoena, a lawful demand from an authority — or where we must defend ourselves in a dispute. We do not pass your details to unrelated businesses for them to use as they please.
Am I being followed around the internet?
Partly, and you deserve a straight answer rather than a shrug. Cookies and pixels on this site let advertising platforms recognise you later, which is why a boot you studied on a Tuesday can reappear in a feed on Thursday. This is ordinary retail machinery, not something we invented.
A good deal of it can be switched off at the source:
- Ad preferences for Facebook and Instagram
- Ad settings on Google
- The industry opt-out page kept by the Digital Advertising Alliance
Your browser's own cookie controls, and its private window, cover a fair share too.
What about the Do Not Track switch in my browser?
Turning it on changes nothing here, and we would rather say so plainly than imply otherwise. No agreed standard exists for what a shop is meant to do on receiving that signal, so our behaviour stays exactly as described above. The opt-out links are the ones with teeth.
Living in Europe or Britain?
You can ask for a great deal, and asking costs nothing:
- Sight of whatever we are holding.
- A correction, where something is wrong.
- Erasure, where no rule requires the record to stay.
- A portable copy, handed to you or sent onward to another company.
- An objection to a specific use — marketing above all.
- Withdrawal of a consent given earlier, which does not unpick anything lawfully done before you withdrew it.
Those come from the General Data Protection Regulation and the United Kingdom's own version of it. Our systems sit in the United States, so your data crosses a border on the way to us; that crossing is covered by the contract clauses the European Commission approved for exactly this purpose. Email cs@sunayla.com and we start work on it. Should our answer disappoint you, your national data protection authority will hear a complaint.
I live in California. What can I ask for?
The California Consumer Privacy Act hands residents of that state a list overlapping heavily with the one above: to know what has been gathered and where it travelled, to have it deleted, to have it corrected, and to stop the sharing of personal information for cross-context behavioural advertising. Using any of those rights will never cost you a worse price or slower service. Same address as everything else: cs@sunayla.com. Expect a question or two first, so that we are certain the request comes from you and not from somebody pretending to be you.
How long is any of this kept?
Order records stay while an order is live, then for as long as tax and accounting rules oblige us to hold them. Support conversations stay while they remain useful. Marketing contact details stop the day you unsubscribe. Ask for whatever remains to be deleted and it will be, unless a law insists that the record survive.
Can my teenager order from here?
No. Sunayla sells to adults, and neither the shop nor its advertising is aimed at anyone under eighteen. We do not knowingly gather anything from a child. Parents who believe otherwise should write to us; it comes off our systems.
Does this page change?
Occasionally. Tools change, laws change, and the wording has to keep pace. Whatever is current always lives right here, which makes an occasional glance the whole of the effort required.
How do I reach a human?
One address covers every question on this page, requests to see, correct or erase what we hold included: cs@sunayla.com. A real person opens it, usually answering inside one business day. There is no phone queue and no separate privacy desk to be routed through — email is the whole channel, and it is the faster one.
For the record, and for anything that must travel on paper, the company deciding how your data gets handled — the controller, in the vocabulary of the regulations named further up — is registered as:
Sunayla LLC
1209 Mountain Road Pl NE
Albuquerque, NM 87110
United States
Written legal notices and data requests can be sent there. Email still reaches us sooner, and nothing on this page requires paper.
Do not post boots to it. Nothing arriving at that door can be matched to an order. A return or an exchange begins with an email instead; once we know what went wrong we reply with whichever address applies, plus the steps to follow. The full route lives on our Returns and Refunds page.
Nearby reading: how long a pair takes to reach you · the conditions attached to using this site.