Privacy
Privacy Notice
Effective September 2026 · Version 2026-10-v16
Who handles information
Walloris US Distribution LLC operates the platform and public website. The distributor identified on a dealer application or account also handles information needed to evaluate and administer its own dealer relationship. Each is responsible for the information it controls.
Information collected
We collect information you submit, including business and contact details, locations and sales channels, tax and resale records — the resale certificate number a dealer gives us, and any resale or exemption certificate a dealer uploads, kept as the file supplied, which may carry a federal tax identification number where the state's form asks for one; our forms never request one — credit-reference contact details, orders, payments, shipping, claims, messages, warranty information, and signed-document evidence. When you apply inside Shopify, we read your store name, owner name, email, phone, address and website, and the brands among your products, from Shopify to prefill fields you can edit, your store's locations as described under Shopify locations, and a few facts about the store as described under Shopify store facts. We record which store and app installation submitted the application so the app can show progress and connect that store when the applicant becomes an active dealer owner. Shopify store redaction removes that attribution; the distributor retains its application record. Portal use is recorded as well: sign-ins and sign-outs, the pages a user views, cart and order activity, the time of each, the IP address and the browser's own description of itself, kept to answer support questions and to secure the account and never used for advertising. We record whether each email we send was delivered. When we email about our products, the dealer program, the platform's own updates, or finishing an account's setup, we may also record whether it was opened and which of its links were followed, and when, with the description the mail program or browser gives of itself; order, payment, and sign-in emails are not tracked this way. To offer the dealer program to shops that do not yet carry our products, we may also hold the business contact details of shops and their staff (a name, role, business email address and telephone number, and the shop's address and website), collected from public sources and from a business-data provider. Where a dealer connects its own online store to receive our catalog, that store's app credentials are stored encrypted and used to write the listings the dealer asked for, to read the stock level of our products in that store, and, where the dealer switches it on, to add the quantities of our products the dealer has received; we do not read the store's orders or its customers. Our forms do not request a dealer's SSN, federal tax identification number, bank account number, or routing number, and we hold no payment instrument.
How it is used
We use information to respond to inquiries; tell dealers about new products; offer the dealer program to shops that do not yet carry our products; evaluate dealer and commercial-credit applications; contact references with authorization; create and secure accounts; price, accept, fulfill, and collect orders; administer warranties, returns, claims, recalls, and safety notices; preserve signed records; prevent fraud and diversion; improve operations; and meet tax, accounting, legal, and regulatory obligations.
Sharing
We share only what is reasonably needed with the applicable distributor, Walloris, the manufacturer for authorized product support, and vendors that provide hosting, communications, identity, payment, shipping, analytics, security, storage, and professional services. Today those are Google Cloud (hosting and file storage), SendGrid (email delivery), Shippo (shipping labels and tracking), Google Maps Platform (address suggestions, see below), Google Analytics on the public website, and a messaging service (Telegram) through which the distributor's own staff receive short operational notifications about dealer activity — an application, an order, a claim, a payment — naming the business and the reference but never a price, a document, or bank details. We may also use Apollo for the business contact details of shops, and to send some outreach emails. We may disclose information to authorities or counterparties where required by law, to protect rights or safety, or in a corporate transaction. We do not sell dealer-applicant personal information for money.
Credit references
If a dealer requests payment terms from its account, we contact the trade or bank references only after the dealer's affirmative authorization and use responses to evaluate or administer commercial credit. A bank reference is a business contact, not permission to access or debit an account.
Retention and security
We retain records for as long as reasonably necessary for the relationship and for legal, tax, accounting, payment, warranty, safety, dispute, fraud-prevention, and evidence purposes. Retention periods differ by record. We use reasonable administrative, technical, and organizational safeguards, but no system can promise absolute security.
Choices and requests
You may request access to or correction of account contact information, unsubscribe from marketing emails, and ask questions about privacy. Every product announcement and outreach email carries an unsubscribe link, and a mail program's own unsubscribe button works too; unsubscribing stops marketing emails from that distributor and never account, order, or security messages. Some transaction, signed, tax, warranty, safety, and security records must be retained. Browser controls can limit nonessential cookies; essential session and security storage is required to sign in and use the platform.
Address lookup
Our address fields offer suggestions from the Google Maps Platform Places API. What you type into an address field is sent to Google to return those suggestions, and your use of that feature is also subject to Google's Terms of Service (https://policies.google.com/terms) and Google's Privacy Policy (https://policies.google.com/privacy), which are incorporated into this notice for that feature. Requests are proxied by our servers; we do not send your Google account identity, and address suggestions are used only to fill in the field you are completing.
Contact and updates
Send privacy requests to dealers@tripeakusa.com or Walloris US Distribution LLC, 5227 N 7th St STE 47149, Phoenix, Arizona 85014. We may update this notice prospectively and will post the effective version here; material dealer-program changes receive notice through the account channel where required.
Shopify locations
When you apply inside our Shopify app, we read your store's location identifiers, names, addresses and active status, show them on the application form, and keep them with the application once you send it. On the form you choose which of the store's locations to use for deliveries and which one is the default, and you may type a delivery address of your own; that choice is kept with the application. If the application is approved, the locations you chose and the address you typed become delivery locations of the dealer account, and the store's locations among them are matched to their Shopify locations when that store is connected. A location you left unticked is recorded as left out and is not added unless you add it later, and a location that could not be offered, or that you chose and we could not add, waits for your choice. Where the form did not ask you to choose, each of the store's own locations with a complete United States address becomes a delivery location instead. If the application is declined, or the app is uninstalled before the store is connected, the locations and the choice kept with the application are removed. When you connect a store through our Shopify app, we read its locations once on connection and again when you ask us to. The portal keeps the latest report, the location matches and your choices about stock matching. After that, a delivery location's name or address changes only when you choose. Disconnecting the store, or uninstalling the app, removes the report, matches and stock-matching choices; delivery locations remain part of your dealer account records. For 48 hours afterwards we keep a note of which Shopify location matched which delivery location and which locations you left out, with their names and addresses as Shopify gave them, so that if the same dealer account connects the same store again within that time, those matches and choices come back, with stock matching off. The note is used once, and is erased when it is used, after 48 hours, or when Shopify asks us to erase the store's data, whichever comes first. We do not read the store's orders or its customers.
Shopify store facts
When you apply inside our Shopify app, we also read when your store was created on Shopify, the name of its Shopify plan and whether it is a development store, its primary web address, how many products it lists, and up to fifty of the brands and fifty of the product types among those products. We keep these with the application so that the distributor can decide it, and we remove them when the application is approved or declined, or when the app is uninstalled. They are not a credit check and are never used for advertising. We do not read the store's orders, customers, sales, payments or staff.
Shopify product drafts
When you import a part with our Shopify app and the app creates a draft product for it in your store, the draft carries our public product details (title, description, photographs, barcode and weight), our suggested retail price as its price, and your own dealer price for that part as Shopify's Cost per item, which Shopify asks apps that bring a supplier's products into a store to fill in. Each is written once, with the draft: we do not change the price or the cost afterwards, and we write neither to a listing you made yourself. Your dealer price is sent to the app for the one part whose draft is being created, and the app does not keep it. Once written it is part of your store's product data, which Shopify makes available to the staff and the apps you have given access to it. We do not read product costs or prices from your store.
Shopify deliveries
For a connected dealer account, our Shopify app displays the last ninety days of our own parcels: order references, shipping and arrival dates, business-location labels and delivery addresses, part identifiers, packing quantities, any quantities received in the portal, and addition results. These parcel records carry no prices or contact names, and the app does not read Shopify orders or customers. The app displays these records without storing parcel reports in its database; the portal retains its lawful delivery and receipt evidence. At your confirmation, or for a new portal receipt while automatic additions are enabled, the app may enable tracking and stock a part at the chosen location only for listings it created, then add positive delivered quantities once. Adopted listings keep their tracking settings. Retired shop redaction erases link-owned addition queues and reviewer-only test deliveries; the shipment's anonymous once-only reservation remains with the business record to prevent another addition after reconnecting.
Shopify stock requests
For parts tracked in Shopify at stock-matched locations, you may request counts, sales outside the portal, shop use, write-offs and transfers between locations. Each request carries the quantity you saw and the quantity you ask for; a changed Shopify quantity refuses the request so you can decide again. Starting tracking with a portal count is offered only for listings the app created and only where Shopify holds no stock. Kept extras and returns are offered for your explicit confirmation and are never sent automatically. The portal keeps the requesting portal user's identity or connected shop's identity, reason, quantities, destinations, time and result. The app receives part and location identifiers, quantities, request identifiers and results, without the portal user's identity or free-text reason. Shopify receives only the quantities, derived inventory and location identifiers, a fixed adjustment reason and a request reference. Retired store redaction erases link-owned request queues; the portal keeps its stock history and an anonymous once-only request reference to prevent a retry from being recorded again.
Ambassador program
When you apply to the ambassador program, we collect what you enter: your name, email address, city and state, what kind of rider or creator you are, the tier you ask for, the addresses of your public YouTube, Instagram, TikTok or Strava accounts, your USA Cycling licence number if you give one, and what you tell us about yourself, with your confirmation that you are 18 or older and live in the United States. We do not ask for a date of birth. To confirm that an account is yours we give you a short code to place in its public description, and a member of our staff looks at the public page; we never ask for the password to any account, we do not sign in to it, and our systems do not request your pages. If you give a USA Cycling licence number, a member of our staff looks it up on USA Cycling's public rankings page and notes the race categories it shows; our systems request nothing from USA Cycling. Staff may note what a public page shows, such as the size of its audience. Applications are kept in a pool, with no deadline, until we decide them. The distributor named on the program page uses this information to decide applications, to email you about yours, and, if you are accepted, to run your place in the program; Walloris handles it as the operator of the platform. If you are accepted, the dealer you are paired with may be told your name, your tier and the public account addresses you gave, so that the dealer can share your posts. The emails about your application are not marketing emails, and we do not record whether you open them. Your application is never used for advertising. You may ask us to delete an application that does not hold a place in the program. Everyone who applied can sign in to an ambassador account on the program page, with a link we email to the address they applied with; there is no password, and we keep a record of when you last signed in. In the account you can correct what you sent and keep your activities, training plans and race results, with any links you add to them. What you keep there is seen by you and by our staff, never by other riders or the public, and our systems do not request the links you add. A second application from an address that already has one is not kept: we email that address instead. If your application is deleted, your account and everything in it are deleted with it. If you make or join a team in your account, the other riders on it see your name and what kind of rider you are, and nothing else you keep in the account; the rider who decides for the team also sees the name and kind of each rider who asks to join. We keep the team's name, home base, what it races, what it tells us and its plans, who is on it, who asked to join, and a record of what happened to it, and our staff see all of it. A team that has not applied is deleted when its last rider leaves.