TODAY’S VEGAN PRIVACY POLICY

Last revised and updated August 27, 2024

This Privacy Policy outlines how Plant Based Naturals, LLC or Plant Based Naturals, LLC DBA Today's Vegan, along with its affiliates and subsidiaries (referred to as “Plant Based Naturals,” “we,” “us,” or “our”), collects, uses, shares, and protects your personal information when you interact with our Offerings. It also informs you of your rights and choices regarding your personal information and provides details on how to contact us if you have any questions.

This Privacy Policy applies to: (1) all of our websites, mobile apps, blogs, and platforms (collectively referred to as “Websites”); (2) all books, ebooks, magazines, digital products, subscriptions, programs, services, and other products available for purchase through our Websites (collectively, the “Products”); (3) all content and materials accessible through our Websites or Products, including but not limited to logos, designs, text, graphics, images, information, data, recipes, software, sound files, user content, and the organization of these elements (collectively, “Content”); and (4) your participation in any of our events or programs (“Events”). In this Privacy Policy, we collectively refer to the Websites, Products, Content, and Events as the “Offerings.”

Our Offerings are available to users in various countries and regions, each with its own legal and cultural standards. This Privacy Policy provides a general overview of our privacy practices and includes specific information relevant to users in certain regions or countries.

You can review topics by going to the section headings below:

Types Of Information We Collect

Use And Processing Of Information

Sharing Of Information

Your Choices

How We Protect Personal Information

Cookies and Other Network Technologies

Mobile Services Practices

Miscellaneous

Contact Information

IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS THE WEBSITES.

TYPES OF INFORMATION WE COLLECT

When you access or use our Offerings, we collect and process information about you to deliver a more personalized and relevant experience. Below are examples of the context and types of information we gather from you and how we utilize that information.

Account Registration

Types of Data: We collect information that identifies you, such as your name, postal address, phone number, unique personal identifier, device ID, geolocation, email address, account name or other similar identifiers when you create an account. Additionally, we gather details about actions you take while logged into your account.

Primary Purpose for Collection and Use of Data: This information is used to provide account-related functionalities to our users, such as facilitating easy checkout and saving your preferences and transaction history.

Client Information

Types of Data: We collect the names and contact information of our clients and their employees with whom we may interact.

Primary Purpose: This information is used to contact clients and communicate with them regarding regular business activities like projects, services, and billing.

Financial and Payment Information

Types of Data: We may collect your credit or debit card number and associated details, as well as other financial information.

Primary Purpose: This data is used to process payments and manage billing, and may be shared with third-party payment processors.

Cookies and First-Party Tracking

Types of Data: We may use cookies and clear GIFs, which are small pieces of data sent to your computer's hard drive while you are on our website.

Primary Purpose: This information is used to enhance your browsing experience and keep track of your interactions with our site.

Cookies and Third-Party Tracking

Types of Data: We may engage in behavior-based advertising, where third parties use technology like cookies or web beacons to gather information about your activities on our website to offer advertising tailored to your interests.

Primary Purpose: This data is used to support behavior-based advertising and capture website analytics.

Demographic Information

Types of Data: We may collect personal details such as your age or location.

Primary Purpose: This information helps us understand our users and provide services tailored to their needs.

Electronic and Sensory Data

Types of Data: We may offer opportunities to engage with our Offerings through audio, electronic, or other similar formats, and may collect this data.

Primary Purpose: This data helps us understand user preferences and provide personalized services.

Email Interconnectivity

Types of Data: When you receive an email from us, we use certain tools to capture data related to when you open our message, click on links or banners within it, and make purchases.

Primary Purpose: This information helps us understand how you interact with our communications to improve our engagement with you.

Feedback/Support

Types of Data: If you provide feedback or contact us for support, we collect your name, email address, and any other content you send us in order to respond.

Primary Purpose: This data is used to address your feedback or resolve issues.

Inferences

Types of Data: We may aggregate or analyze the information you provide to draw inferences about your preferences.

Primary Purpose: These inferences help us share user profiles with service providers, advertisers, social networks, government entities, or for legal or data analytics purposes

Mailing List

Types of Data: When you sign up for our mailing list, we collect your email or postal address.Primary Purpose: This data is used to share information about our products or services.

Mobile Devices and Applications

Types of Data: We may collect information from your mobile device, such as unique identifiers, location data, or order history, through certain applications.

Primary Purpose: This information helps us identify unique visitors and understand how users interact with us on mobile devices.

Subscriptions, Orders, and Order Placement

Types of Data: When you place an order or subscribe to a Product, we collect your name, billing and shipping addresses, email address, phone number, and credit card details. We may also gather information on your purchasing habits and preferences.

Primary Purpose: This data is used to fulfill our contractual obligations, manage orders and supply chains, and enhance our Offerings.

Partner Promotion

Types of Data: We may collect information that you provide during a co-branded promotion with another company.

Primary Purpose: This data is used in joint promotions with our partners.

Personal Information

Types of Data: You may choose to share personal details, such as dietary preferences, intolerances, or nutritional history.

Primary Purpose: This information helps us tailor advertisements or promotions and improve or develop our Offerings.

Surveys and Quizzes

Types of Data: When you participate in a survey or quiz, we collect the information you provide. If the survey is administered by a third party, their privacy policy will apply.

Primary Purpose: Survey data helps us understand your opinions and gather information relevant to our organization.

Sweepstakes or Contests

Types of Data: When you enter a sweepstakes or contest, we collect your contact information to notify you if selected.

Primary Purpose: This data is used to conduct contests or sweepstakes and, in some cases, fulfill legal requirements.

Website Interactions

Types of Data: We use technology to monitor how you interact with our Website, such as which links you click on and information you type into forms. This may also include data about your device or browser, including browsing and search history.

Primary Purpose: This data helps us understand how you interact with our Website, improve it, and identify your preferences to offer relevant content. We may also use this information for fraud detection.

Web Logs

Types of Data: We collect data such as your browser type, operating system, IP address, domain name, click activity, referring website, and date/time stamps.

Primary Purpose: This information is used to monitor our networks and Website traffic, helping us identify popular services and ensure security.

You may also choose to provide information for publication or display (hereinafter, “posted”) on public areas of the Website, such as leaving comments or star ratings for recipes, or for transmission to other users of the Website or third parties (collectively referred to as "User Contributions"). Please note that your User Contributions are posted and transmitted at your own risk. While we strive to implement security measures, no system is entirely foolproof. Additionally, we have no control over the actions of other users of the Website who may have access to your User Contributions. As a result, we cannot and do not guarantee that unauthorized individuals will not view your User Contributions. If you choose to delete your User Contributions from the Website, please be aware that copies of your contributions may still be accessible in cached or archived pages, or may have been copied or stored by other users of the Website. The proper access and use of information on the Website, including User Contributions, are governed by our Terms of Use/Terms of Service.

In addition to the information you provide directly, we may receive information about you from other sources, including third parties, service providers (such as our e-commerce platform provider), business partners, affiliates, or publicly available sources. When you use our Offerings by "clicking through" from a third-party website or when you visit third-party websites through our Offerings, those third-party websites may share information with us about your use of their services. Any information we receive from third-party websites may be combined with the information you provide and processed as described in this Privacy Policy. Additionally, we may share information with service providers and other vendors, including those specified in relation to California law.

USE AND PROCESSING INFORMATION

In addition to the purposes and uses previously mentioned, we use your information in the following ways:

• To recognize you or identify you when you visit our websites or stores.

• To provide products and services or to process returns.

• To enhance our services and product offerings.

• To simplify the checkout process.

• To conduct analytics, surveys, market research, or panel interviews.

• To respond to inquiries related to support, job opportunities, or other requests.

• To send marketing and promotional materials, including information about our products, services, sales, or promotions.

• For internal administrative purposes and to manage our relationships.

• To fulfill any other purpose for which you provide information.

• To respond to legal actions and/or requests from law enforcement and comply with applicable laws, court orders, or governmental regulations.

• To resolve disputes or address problems.

• To prevent fraud and other potentially prohibited or illegal activities.

• To personalize your experience, including making inferences about your interests and preferences based on your activity and customizing the ads shown to you both on and off our website.

• To communicate with you or facilitate communication between you and our partners and/or affiliates.

• To host your reviews, forum posts, photos, videos, and other content.

While the above sections outline our primary reasons for collecting your information, there are instances where we may have multiple purposes. For example, when you complete an online purchase, we may collect your information to fulfill our contract with you, and your information may also be collected by service providers (such as third-party credit card processors).

SHARING OF INFORMATION

In addition to the specific instances mentioned elsewhere in this policy, we may share information in the following situations:

1. Affiliates and Corporate Transactions: We may share information with our corporate affiliates, such as parent companies, subsidiaries, sister companies, joint ventures, or other entities under common ownership or control. These affiliates are required to adhere to this Privacy Policy and all applicable laws related to the transmission of promotional communications. Additionally, we may share information as part of a corporate transaction, such as a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy, or any other change in ownership or control, including during negotiations and due diligence processes.

2. Consent-Based Disclosures: With your consent, we may share your information with unaffiliated third parties who are not otherwise mentioned in this Privacy Policy.

3. Legal and Non-Affiliated Third-Party Disclosures: We may disclose information in response to legal requests such as subpoenas, warrants, court orders, or in connection with any legal proceedings. We may also share your information to establish or exercise our legal rights, defend against legal claims, investigate, prevent, or take action regarding potential illegal activities, suspected fraud, safety concerns, violations of our policies, or to fulfill your request for services provided by third-party intermediaries.

4. Public Disclosures: Our Websites may allow users to post comments, reviews, or other content in public forums. Information you choose to submit in these areas may be publicly accessible.

5. Partner Promotions: We may collaborate with third-party partners to offer contests, sweepstakes, or other promotions. If you choose to participate in such promotions, the information you provide may be shared with both us and the third-party partner. The use of your information by the third-party partner is not governed by this Privacy Policy.

6. Service Providers: We may share your information with service providers who assist us with various tasks, such as website administration, survey conduction, technical support, payment processing, and order fulfillment.

7. International Transfers: We offer our services to users in various jurisdictions. If we transfer your information to other countries, we will protect and use it as described in this Privacy Policy and in compliance with applicable laws.

Additionally, we may disclose your information if we believe, in our sole discretion, that such disclosure is necessary to:

• Comply with valid and enforceable legal processes, such as subpoenas, court orders, or other legal requirements; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law. In such cases, we reserve the right to assert any legal objections or rights available to us.

• Investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect the rights, property, or safety of our company, customers, or others; or in connection with our Terms of Service or other agreements.

• Facilitate a corporate transaction, such as a merger, consolidation, asset sale, or, in the unlikely event of bankruptcy, a transfer of assets.

YOUR CHOICES

You have the ability to make choices regarding how your personal information is processed and used. You may have the option to access, update, change preferences for, or close your account with us; however, please be aware that limiting the information you share with us may impact the functionality and your experience with our services.

1. Access to Your Personal Information: You can request access to your personal information by contacting us at the address provided below. If required by law, we will provide you with reasonable access to the personal information we hold about you. California residents may also request a notice detailing the categories of personal information (if any) that we share with third parties or affiliates for direct marketing purposes.

2. Changes to Your Personal Information: We rely on you to keep your personal information accurate and up-to-date. You may be able to modify or delete your account profile through our website. If the website does not allow you to update or correct certain information, you can contact us at the address below to request changes. Please note that we may retain historical information in our backup files as allowed by law.

3. Deletion of Your Personal Information: We generally retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. You may request information about how long we retain specific types of information or request the deletion of your personal information by contacting us at the address below. If required by law, we will grant your deletion request, but please be aware that in many cases, we need to retain your personal information to comply with legal obligations, resolve disputes, enforce agreements, or for other business purposes.

4. Objection to Certain Processing: You may object to our use or disclosure of your personal information by contacting us at the address below. If required by law, we will honor your request.

5. Online Tracking and Cookies/Do Not Track: We currently do not recognize automated browser signals regarding tracking mechanisms, including “Do Not Track” instructions.

6. Promotional Emails: You may choose to provide your email address so we can send you newsletters, surveys, offers, and other promotional materials, including targeted offers from third parties. You can opt out of receiving promotional emails by following the unsubscribe instructions in the emails you receive. Even if you opt out of promotional emails, we may still send you service-related communications.

7. Promotional Text Messages: If you receive a promotional text message from us, you can opt out of future messages by replying “STOP.”

8. Manage Account and Subscriptions: You can modify account details, close your account, or adjust your subscription settings within your account. We may retain certain information associated with your account for purposes such as backups, fraud prevention, dispute resolution, investigations, our legitimate business interests, and legal compliance, for as long as necessary to fulfill the purposes outlined in this Privacy Policy.

Please direct written requests and questions regarding your rights to [email protected].

As required by law, we will need to verify your identity. We may conduct identity verification through a phone call or email. Depending on your request, we may ask for details such as your name, the last item you purchased from us, or the date of your last purchase. You may also be required to provide a signed declaration confirming your identity.

In certain situations, you may appoint an authorized agent to submit privacy-related requests on your behalf. We will require verification that you have given the agent permission to act on your behalf. You must provide us with a copy of the signed authorization you have given to the agent, along with proof of your identity.

If you are an authorized agent submitting a request on behalf of someone else, please attach the following to your request:

• A completed Authorized Agent Designation Form confirming your authorization to act on behalf of the individual.

• If you are a business, proof of your registration with the Secretary of State to conduct business in Colorado.

If we do not receive both of these documents, your request will be denied.

HOW WE PROTECT PERSONAL INFORMATION

No method of transmitting data over the Internet or storing it electronically is completely secure. While we take reasonable measures to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee its absolute security. If we are legally required to notify you of a breach involving your personal information, we may do so electronically, in writing, or by telephone, as permitted by law. However, we cannot ensure that your information is fully protected from unauthorized access, hardware or software failures, or other factors beyond our control.

If our Websites allow you to create an account, you will be prompted to create a password. It is your responsibility to keep your password confidential, and you are accountable for any access to or use of your account by someone else who has obtained your password, regardless of whether you authorized such access or use. You should inform us immediately of any unauthorized use of your password or account.

COOKIES AND OTHER NETWORK TECHNOLOGIES

1. To improve your online experience, our web pages may currently or in the future use “cookies.” Cookies are small text files that our web server may place on your device to store your preferences. Cookies do not provide us with your email address or other personal information unless you voluntarily choose to share that information with us. However, if you do choose to share personal information, it may be linked to the data stored in the cookies. While you may be able to disable cookies through your device or browser settings, doing so may impact the functionality of certain features of our Services.

2. Our Offerings use Google Analytics, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 (“Google”). Google Analytics employs cookies and similar technologies to gather and analyze information about how the Services are used and to report on activities and trends. This service may also collect information about your use of other websites, apps, and online resources. For more details on how Google uses data when you interact with our Site or Services, you can visit this link:

https://policies.google.com/technologies/partner-sites. You may have the option to opt-out of some Google Analytics features by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

Additionally, for more information about interest-based advertising or to opt-out of having your web browsing information used for behavioral advertising purposes, you can visit http://optout.aboutads.info.

3. We, or our service providers, may also use “pixel tags,” “web beacons,” “clear GIFs,” or similar technologies (collectively referred to as "Pixel Tags") in connection with our Site and HTML-formatted email messages to, among other things, compile aggregate statistics on website usage and response rates. A Pixel Tag is an electronic image, typically just one pixel (1x1) in size, that is usually invisible to website visitors and may be linked to cookies on the visitors’ devices. Pixel Tags enable us and our service providers to count users who have visited specific pages on the Site, deliver customized services, and assess the effectiveness of promotional or advertising campaigns. When used in HTML-formatted email messages, Pixel Tags can inform the sender whether and when the email has been opened.

4. We may incorporate “social media widgets,” which are links to platforms like Facebook, Instagram, Twitter, YouTube, Pinterest, LinkedIn, etc., (which may include features such as the “share this” button or other interactive mini-programs). These features may collect information such as your IP address and the page you are visiting on our Site and may place a cookie to ensure the feature functions properly. These social media features may be hosted by a third party or directly on our Site. Your interactions with these features are governed by the Privacy Policy or terms of the company providing them.

5. As you browse the internet, you generate a trail of electronic data at each website you visit, often referred to as “clickstream data.” This data can be collected and stored by a website's server and may reveal information such as the type of device and browser software you use, as well as the address of the website from which you linked to our Site. We may use clickstream data as non-personally identifiable information to analyze how much time visitors spend on each page of our Site, how they navigate through the Site, and to better tailor our web pages to meet visitors' needs. We will use this information solely to enhance and improve our Site.

MOBILE SERVICES PRACTICES

The following outlines our mobile communication practices:

Collection of Information: When you opt-in to receive SMS/text messages from us, we collect and store your phone number and the date of your opt-in. Additionally, we may collect other information you provide, such as your name and email address, to enhance our services and personalize your experience.

Use of Information: The information collected is used to send you text messages regarding our products, services, and promotions. We may also use this information to improve customer service and respond to your inquiries, requests, or complaints. Your data is processed and stored securely, with access restricted to purposes related to these services.

Sharing of Information: We do not share your personal information with third parties for their marketing purposes without your explicit consent. However, we may share your information with service providers who help us operate our messaging services, conduct our business, or provide customer support, provided they agree to keep your information confidential.

Opting Out: You can opt-out of receiving SMS/text messages from us at any time by replying with "STOP" to any message. Upon receiving your request, we will promptly remove your phone number from our SMS messaging list and confirm the cancellation via SMS.

Data Security: We prioritize the security of your personal information. We implement various security measures to protect your personal data when you interact with us through mobile services, including when you enter, submit, or access your information.

MISCELLANEOUS

Additional Information Regarding Our Privacy Practices

1. Transfer of Information to Other Countries: Your information may be transmitted between or among our affiliates, which may involve processing in a country with less stringent privacy laws than your own. Despite this, we take reasonable steps to apply the same privacy principles that govern the initial jurisdiction of data collection, wherever possible. By submitting your personal information, you consent to its transfer, storage, and processing in a country other than your own, including, but not limited to, the United States. If you would like more details on our efforts to maintain consistent privacy standards across different jurisdictions, please reach out to us using the contact information provided below.

2. Third-Party Applications/Websites: We do not control the privacy practices of websites or applications that we do not own. Our Website may include links to third-party websites for your convenience. These third-party sites have their own privacy policies, notices, and terms of use. We are not responsible for how these linked websites collect, use, disclose, secure, or otherwise handle personal information. We encourage you to review the privacy policies of every website you visit.

3. Children Under the Age of 13: Our Website is not designed for children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you are under 13, please do not use or provide any information on this Website. If we become aware that we have collected personal information from a child under 13 without parental consent, we will delete that information. If you believe we may have inadvertently collected information from a child under 13, please contact us using the information provided below.

4. Changes to this Privacy Policy: Our Privacy Policy and practices may change over time. If we make material changes to this statement, the version in effect at the time you submitted your personal information will generally govern unless we obtain your consent for the new version. The "last updated" date at the top of this Privacy Policy indicates when it was last substantively modified.

5. Accessibility: If you are visually impaired, you can access this notice using your browser’s audio reader.

6. Information for California Residents: In compliance with California Civil Code Sections 1798.115(c), 1798.130(a)(5)(c), 1798.130(c), and 1798.140, organizations must disclose whether certain categories of information are collected, "sold," or transferred for a "business purpose" as defined by California law. You can view a list of the categories of information we collect and share in the Section “Types of Information We Collect” in this Privacy Policy. This list is comprehensive and may include types of information that we share about individuals other than yourself. If you would like more details about the categories of personal information (if any) we share with third parties or affiliates for direct marketing, please submit a written request using the contact information in the "Contact Information" section below. We do not discriminate against California residents who exercise their rights as described in this Privacy Policy.

CONTACT INFORMATION

If you have any questions, comments, or concerns regarding our privacy practices, please reach out to us at the appropriate address listed below. We will do our best to respond to your inquiries and provide you with any additional privacy-related information you may need.

Plant Based Naturals, LLC

DBA Today's Vegan

200 South Wilcox Street, Suite 201

Castle Rock, CO 80104

Email: [email protected]

TERRITORY

Regardless of the location of our servers, your personal data may be processed by us in the United States, where data protection and privacy laws may not provide the same level of protection as in other regions. BY VISITING OUR SITE AND USING OUR SERVICES, YOU CLEARLY AND EXPLICITLY CONSENT TO THE COLLECTION AND PROCESSING OF ANY INFORMATION YOU VOLUNTARILY PROVIDE TO US IN THE UNITED STATES, WITH U.S. LAW GOVERNING SUCH COLLECTION AND PROCESSING.

If you reside in the United Kingdom, the European Union, Switzerland, or another area within the European Economic Area (EEA), the General Data Protection Regulation (GDPR) will apply to our handling of your “Personal Data,” and you will be considered a “Data Subject” as defined by the GDPR. In this context, we may act as both a data “Controller” and a data “Processor.”

Similarly, if you are a resident of California, the California Consumer Privacy Act (CCPA) will govern our handling of your “personal information,” and you are considered a “consumer” with certain rights over your personal information, while we are classified as a “third party” under the CCPA. For the purposes of this Privacy Policy, "Personal Information" includes Personal Data, personal information, and all similar information.

We will take commercially reasonable steps to ensure compliance with GDPR (including, without limitation, adhering to relevant Standard Contractual Clauses) and CCPA requirements.

CALIFORNIA INFORMATION SHARING DISCLOSURE

California Civil Code Sections 1798.115(c), 1798.130(a)(5)(c), 1798.130(c), and 1798.140 require organizations to disclose whether certain categories of personal information are collected, transferred for "valuable consideration," or transferred for an organization's "business purpose" (as defined under California law). We do not sell your personal information. The list below outlines the categories of personal information we may collect and transfer in various situations. While this list is comprehensive, it is not exhaustive, and it may include types of information we collect and share about individuals other than yourself. For instance, while we transfer credit card or debit card numbers for business purposes to process payments for orders, we do not collect or transfer such information for individuals who simply submit inquiries through our website's "contact us" page.

Examples of Categories of Personal Information We May Collect and the Types of Third Parties to Whom We May Disclose Personal Information for Business Purposes:

Identifiers and Account Information–such as name, postal address, phone number, unique personal identifier, online identifier, internet protocol (IP) address, device ID, geolocation, email address, account name, driver’s license number, or other similar identifiers.

Categories of Third Parties to Whom We May Disclose Personal Information for Business Purpose:

Service providers

Product and service fulfillment companies

Internet service providers

Advertising networks

Social networks

Payment processors and financial institutions

Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law

Data analytics providers

Financial information–such as credit or debit card number or other financial information.

Categories of Third Parties to Whom We May Disclose Personal Information for Business Purpose:

Service providers

Payment processors and financial institutions

Government entities, law enforcement, lawyers, auditors, consultants, and other parties as required by law

Commercial information–such as information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Categories of Third Parties to Whom We May Disclose Personal Information for Business Purpose:

Service providers

Product and service fulfillment companies

Advertising networksSocial networks

Payment processors and financial institutions

Government entities, law enforcement, lawyers, auditors, consultants, and other parties as required by law

Data analytics providers

Personal Information–such as information about your personal dietary preferences, intolerances, nutritional history or other personal experiences or preferences.

Categories of Third Parties to Whom We May Disclose Personal Information for Business Purpose:

Partners

Service providers

Product and service fulfillment companies

Advertising networks

Social networks

Payment processors and financial institutions

Government entities, law enforcement, lawyers, auditors, consultants, and other parties as required by law

Data analytics providers

Network activity data–such as internet or other electronic network activity information, such as browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement. This may also include browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to a computer when the Internet is used), domain name, click-activity, referring website, and/or a date/time stamp for visitors

Categories of Third Parties to Whom We May Disclose Personal Information for Business Purpose:

Service providers

Product and service fulfillment companies

Internet service providers

Advertising networks

Social networks

Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law

Data analytics providers

Email interconnectivity, Mailing List, Mobile Devices and Applications–This may include data related to when you open our messages, click on any links or banners it contains, and make purchases, information about your activity coming from your mobile applications or devices, and information needed for our mailing lists.

Categories of Third Parties to Whom We May Disclose Personal Information for Business Purpose:

Service providers

Internet service providers

Advertising networks

Social networks

Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law

Data analytics providers

Electronic and sensory data–such as audio, electronic, or similar information

Categories of Third Parties to Whom We May Disclose Personal Information for Business Purpose:

Service providers

Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law

Inferences–drawn from any of the information listed above to create a profile

Categories of Third Parties to Whom We May Disclose Personal Information for Business Purpose:

Service providers

Advertising networks

Social Networks

Government entities, law enforcement, lawyers, auditors, consultants, and other parties as required by law

Data analytics providers

HOW DO YOU EXERCISE YOUR RIGHTS UNDER THE CCPA?

Because we offer the Offerings exclusively online, you can submit your CCPA rights requests by emailing us at [email protected] with "CCPA Request" in the subject line. When sending your request, please specify which CCPA right you are exercising and provide enough details for us to locate your information. We will acknowledge receipt of your request within 10 business days and strive to respond within 45 calendar days. If more time is needed, we will inform you of the delay and explain the reason.

Before addressing any CCPA-related requests, we will take reasonable steps to verify the identity of the person making the request ("Requestor") to ensure the information is not disclosed to unauthorized parties. This process is intended to protect your information, not to cause inconvenience. We will ask the Requestor to verify at least two pieces of information from our records. Depending on the sensitivity of the requested information, additional verification may be required. For deletion requests, we will confirm your intent to delete the information one last time before proceeding. If we cannot reasonably verify the Requestor’s identity, we will not disclose the requested personal information to protect your privacy.

EUROPEAN UNION PRIVACY RIGHTS

A. If you currently reside in the EEA, the GDPR governs the processing of your personal information. We will process your data based on one or more of the following legal grounds under the GDPR:

• To fulfill our contractual obligations with you (e.g., our Terms of Use);

• For our legitimate interests (or those of a third party), provided that these interests do not override your rights and freedoms;

• To comply with a legal obligation; and/or

• Based on your consent, which you can withdraw at any time.

B. Under the GDPR, you have certain rights as a Data Subject, including:

• The Right to Be Informed: You have the right to know what personal data we or our authorized vendors are processing, why, and to whom it may be disclosed.

• The Right of Access: You can request to see the personal data we hold about you.

• The Right to Rectification: You can request corrections to any inaccurate or incomplete personal data we hold about you.

• The Right to Erasure: You can request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected, if you withdraw your consent, or if the data is being processed unlawfully.

• The Right to Restrict Processing: You can request a temporary halt to the processing of your personal data, for example, during a dispute or legal proceeding, or while the data is being corrected.

• The Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.

• The Right to Object: You can object to further processing of your personal data if it is not consistent with the original purposes for which it was collected.

• Rights Related to Automated Decision-Making and Profiling: You have the right not to be subjected to decisions based solely on automated processing. Our service does not involve automated decision-making or profiling.

For more details on how to exercise these rights or if you have any questions, please contact us at [email protected].

FLORIDA LAW

We strive to adhere to the Florida Telemarketing Act and the Florida Do Not Call Act for our Florida residents. To facilitate compliance, we will consider you a Florida resident if, at the time of account registration, either (a) the billing address you provide is in Florida or (b) the phone number used to create the account has a Florida area code. If you do not meet either of these criteria or do not explicitly inform us in writing that you are a Florida resident, you agree that the provisions of the Florida Telemarketing Act and the Florida Do Not Call Act do not apply to you. As a Florida resident, you also agree that mobile messages sent in response to your mobile messages or requests will not be classified as a “telephonic sales call” or “commercial telephone solicitation call” under Florida Statutes Section 501 (including but not limited to sections 501.059 and 501.616), provided that these laws are relevant and applicable.

WASHINGTON STATE LAW

To the extent applicable to the Offerings, we aim to comply with the commercial telephone solicitation regulations under the Revised Code of Washington (RCW), including but not limited to sections 80.36.390, 19.158.040, 19.158.110, and 19.158, as they pertain to residents of Washington State. For compliance purposes, we will consider you a Washington State resident if the area code of the phone number used to create your account on our Site is a Washington State area code.

VIRGINIA, CONNECTICUT, AND COLORADO MULTI-STATE PRIVACY STATEMENT

This Multi-State Privacy Policy is provided to comply with state laws and applies to residents of Virginia, Connecticut, and Colorado. It adds to our general Privacy Policy with specific disclosures and rights.

As a resident of Virginia, Connecticut, or Colorado, you have the following rights under applicable laws:

(a) You can ask us to confirm whether we process your personal information. With some exceptions, you may also request a copy of the personal information you have provided to us.

(b) You can request the deletion of your personal information that we hold.

(c) You can ask us to correct any inaccurate personal information we maintain about you.

(d) You can request to opt out of the sale of your personal information to third parties.

(e) We may display ads based on personal information collected from your activities over time and across different websites or apps to predict your preferences or interests. If you wish to stop receiving such targeted advertising, you can request this by contacting us at [email protected].

To exercise any of these rights, please contact us at [email protected]. Residents of Connecticut and Colorado may also appoint an authorized agent to make these requests on their behalf. We will take reasonable steps to verify your identity and the authority of any authorized agents before responding. The verification process may vary based on the sensitivity of the information and whether you have an account with us. We will use commercially reasonable efforts to verify authorized agents and their authority, and we may deny or partially fulfill requests based on our legal rights and obligations.

INFORMATION ON STATEMENT CHANGES

We may revise this Privacy Policy periodically at our discretion. If we make significant changes, we will notify you through one or more of the following methods: sending a direct communication, posting a notice on our website, or updating the Statement on the website. The date of the most recent update will be indicated at the top of this Privacy Policy. We recommend that you review this Statement regularly to stay informed about our privacy practices.

If you have any questions about this Privacy Policy or any related terms, policies, or agreements, please reach out to us at [email protected].

CONTACT INFORMATION

If you have any questions, comments, or concerns regarding our privacy practices, please reach out to us at the appropriate mailing address listed below. We will do our best to respond to your inquiries and provide you with any additional privacy-related information you may need.

Plant Based Naturals, LLC
DBA Today's Vegan

200 South Wilcox Street, Suite 201

Castle Rock, CO 80104

Email: [email protected]