PRIVACY POLICY OF STARCO BRANDS, INC.

This Privacy Policy (“Privacy Policy” or “Policy”) explains how Starco Brands, Inc., a Nevada corporation (“Company” , “We” , “Us” or “Our”) may gather, collect, record, hold, distribute, share, disclose, or otherwise use any information or data about or from any of its customers or subscribers, or any other users ( collectively “ User” or “Customer/Subscriber” or “You” or “Your”) of the Company’s website at starcobrands.com (“Company Website”) or of or from any other website, site, program, activity, technology platform, technology application, or service offered by the Company or by any of its Affiliates, as such term is defined in Section 3 herein (hereinafter, the Company Website and these other websites, sites, programs, activities, platform, applications, and services, including but not limited to any other websites of the Company’s Affiliates, are collectively referred to as “Company Program(s)”).

BY CONTINUING TO USE THE COMPANY WEBSITE OR ANY OTHER COMPANY PROGRAM OFFERED BY THE COMPANY, YOU HEREBY AGREE TO BE BOUND BY ALL OF THE TERMS AND CONDITIONS OF THIS PRIVACY POLICY AS THEY ARE PRESENTED TO YOU AS OF THE DATE OF YOUR FIRST USE OF THE COMPANY WEBSITE OR ANY OTHER COMPANY PROGRAM.

NO CHANGES (ADDITIONS OR DELETIONS) BY YOU TO THIS PRIVACY POLICY WILL BE ACCEPTED BY THE COMPANY. IF YOU DO NOT AGREE TO ALL THE TERMS AND CONDITIONS OF THIS PRIVACY POLICY, OR YOU DO NOT WISH YOUR PERSONAL INFORMATION TO BE USED PURSUANT TO THIS PRIVACY POLICY, THEN YOU SHOULD NOT USE ANY OF THE COMPANY WEBSITE OR ANY OTHER COMPANY PROGRAM, AND YOU SHOULD NOT PROVIDE ANY OF YOUR PERSONAL INFORMATION TO THE COMPANY.

THIS IS A BINDING CONTRACT BETWEEN YOU AND THE COMPANY, AND YOU SHOULD DOWNLOAD AND PRINT THIS PRIVACY POLICY FOR YOUR RECORDS.

1. INFORMATION WE COLLECT.

During a User’s access or use of the Company Website or any other Company Program, the Company may, either directly or by using its Service Providers/Contractors (as defined below), gather, collect, record, hold, distribute, share, disclose, or otherwise use personal information or data about You that You provide to Us, as described in Section 1.1 below, that is automatically collected, as described in Section 1.2 below, or that is collected or received from other sources, as described in Section 1.3 below (hereinafter collectively referred to as the User’s “Personal Information”, subject however, to Section 1.4 herein).

1.1 INFORMATION YOU PROVIDE TO US.

We collect Personal Information that You provide directly to Us, including without limitation any Personal Information You provide during Your use of the Company Website or any other Company Program. For example, We may collect Personal Information from You if You:

• Provide Us or any of Our Affiliates with any data about You through the Company Website, any other Company Program, or via telephone or other electronic means;
• Create an account (including a user name and/or password) with Us or any of Our Affiliates;
• Seek, purchase, procure, or otherwise request any of the Company’s or its Affiliates’ (as such term is defined in Section 3 herein) goods, products, or services, including, but not limited to, such consumer products as seasoning sprays; alcoholic whipped cream; aerosol cleaners and hand sanitizers; personal care and grooming items; fragrance; and shakes, powders, and snacks that may be offered by the Company and/or any of its Affiliates (collectively, the “products/services”);
• Seek any information about Your purchase, exchange, or return of any products/services of the Company or its Affiliates.
• Request any customer support;
• Request any exchange or return of any of the products/services of the Company or its Affiliates;
• Request, subscribe to, or otherwise choose to receive any information from or about the Company or its Affiliates, such as signing up for and receiving any newsletter, e-alert, blogs, or any other information about the Company or its Affiliates, any of their products/services, events, and/or about any business partners (collectively referred to as “Newsletters/Blogs”);
• Choose to participate in any of the Company’s or its Affiliate’s customer/subscriber surveys, customer/subscriber forums, or other information gathering activities or events with or involving their Customers/Subscribers or any other Users (collectively, referred to as “Customer/Subscriber Surveys”);
• Choose to participate in or otherwise communicate with the Company or any of its Affiliates via, any social media activities, offerings, or features which may be made available through Your use of any of the Company’s Programs;
• Fill out any other information through any Company Program;
• Communicate with any other representatives of Our Company or any Affiliates; or
• Otherwise communicate with Us in any other way.

In these instances, the following are the types of Personal Information that may be collected from You:

• Your name;
• Mailing address and/or billing address and/or shipping address;
• E-mail address;
• Phone (or mobile) number;
• Date of birth;
• Age;
• Account name and/or account password;
• Credit or debit card number, expiration date, security code, and/or other information about the same (if You make a payment either directly to Us or by using a third party payment provider that handles payments and will receive Your payment card information);
• Information about Your bank or checking account (if You make a payment through Your bank transfer);
• Gift card information or related gift information;
• Other information You may provide when You seek, purchase, or otherwise request any of the Company’s products/services, such as the products/services that are purchased, Your product/service parameters or preferences, Your customer comments about the products/services that are purchased, the date of any such purchase of product/services, and/or the invoice information related to any such purchase of products/services;
• Information You provide or otherwise used in the return or exchange of any products/services, such as information about the transaction, products/services details, purchase price, and the date and location/media of the transaction;
• If You choose to subscribe, receive, or otherwise participate in any Newsletters/Blogs (as defined above in this Section 1.1), We may collect from You, in addition to the above described Personal Information, additional information from and/or about You, such as additional demographic information or other information You may provide as part of Your participation in any such Newsletter/Blogs.
• If You choose to participate in any Customer/Subscriber Surveys (as defined above in this Section 1.1), We may collect from You, in addition to the above described Personal Information, additional information from and/or about You, such Your purchase history, habits, and/or preferences or other information You may provide as part of Your response or feedback to the Customer/Subscriber Surveys.

1.2 INFORMATION AUTOMATICALLY COLLECTED.

When a User accesses or otherwise uses the Company Website or any other Company Program, We may automatically collect certain Personal Information about You, including:

• Device Information. We (or Our Service Providers/Contractors as defined below) may collect information about the computer, tablet, phone, or other device You use to access any of the Company Programs, including the Internet Protocol address, hardware models, operating system and version, mobile network information, and other unique device identifiers (hereinafter collectively referred to as “Device Identifiers”).
• Cookies and Other Web-based Tracking Technologies. We (or Our Service Providers/Contractors as defined in Section 3 herein) may use different technologies such as cookies, web beacons, or other types of small temporary files or web-based tracking technologies to gather certain information. A cookie is a small data file stored by Your web browser on Your computer or mobile device (hard drive) that helps Us to improve the way We deliver Our Company Website or other Company Programs to You, helps Us improve Your overall experience using Our Company Website or other Company Programs, and/or helps Us analyze the areas and features of Our Company Programs that are most popular or to detect fraud. Web beacons are electronic images that may be used in Our Company Programs or emails and help deliver cookies, count visits, and understand usage. Like many other websites, cookies and these other web-based tracking technologies may be used by Us (or Our Service Providers/Contractors) during Your visit to the Company Website or other Company Program in order to improve Your individual experience as a User of the Company Website or other Company Program or to generally improve or enhance the overall functionality of the Company Website or other Company Program. While most websites automatically accept cookies for these purposes, You may be able to instruct Your browser to stop accepting cookies or prompt You before accepting a cookie from the sites You visit, including the Company Website. SEE SECTION 5.5 OF THIS PRIVACY POLICY WHICH PROVIDES FURTHER NOTICE ABOUT HOW THESE COOKIES ARE USED AND PROVIDES INSTRUCTIONS IF YOU WANT TO DISABLE ANY OF THESE COOKIES.
• Geo-location Data. Subject to any of Your device permissions, We (or Our Service Providers/Contractors as defined below) may be able to collect information about the precise location of Your device or may gather other general location data based on GPS data, mailing address, and/or billing address (hereinafter collectively referred to as “Geo-location Data”).
• Social Media Information. If any social media activities, offerings, or features, such as the Facebook “Like” button or similar social media interactive programs (collectively, “Social Media Activities”), are made available to You through any of the Company’s Programs, and in addition to the collection of other Personal Information noted above, the following may apply:
• We may obtain and collect certain information from Your social media account consistent with Your settings within the social media service, such as location, check-ins, activities, interests, photos, status updates, and friends list. We may also allow You to enter into contests to provide photos, such as of products/services You have purchased, which You may share with Your connections on social media for votes, shared offers, or other promotions.
• A third party that is hosting the Social Media Activities may also collect Your Internet Protocol address, which page You are visiting on Our Company Program, Your Geo-location Data, and other Personal Information about You, and may also set a cookie to enable the feature to function properly.
• These Social Media Activities may be hosted by a third party or hosted directly on Our Company Program. Thus, Your interactions with these Social Media Activities may be governed by the privacy policies of the third party that is hosting the Social Media Activities (see Section 8 regarding Third Party Sites).

1.3 ADDITIONAL SOURCES FROM WHOM OR WHERE WE MAY RECEIVE OR COLLECT INFORMATION ABOUT YOU.

In addition to the Personal Information provided by You as described in Section 1.1 and in addition to the collection of Personal Information as described in Section 1.2, the following are additional ways We may collect Personal Information about You or additional sources from which We may receive Personal Information about You:

• From Our Service Providers/Contractors. From Our Service Providers/Contractors, as such term is defined in Section 3 herein, including without limitation from Our Data Analytics Providers or from Our Third Party Application Providers, as such terms are defined in Section 3 herein.
• From Our Advertising Network. From Our Advertising Network, as such term is defined in Section 3 herein.
• From Distributors, Resellers, or Retailers. From any other distributors, resellers, or retailers that We work with or with whom We have a relationship.
• Individuals Representing Businesses. We may collect Personal Information in the context of Your role as a representative of a business. The Personal Information We collect in these cases may include Your name, address, email address, telephone, date of birth, gender, Social Security number, and personal financial information. We use this information for communicating with You in Your role as a representative of a business or if You are an owner of a business to evaluate Your creditworthiness. The Personal Information described in this paragraph is the “Biz Rep Data”.
• Other Sources From Which We Collect Personal Information. We may collect Personal Information about You from a number of sources in addition to those means of collection indicated above, including offline or through sources unrelated to Your use of Our Company Website or other Company Programs. For example, We may collect Personal Information from publicly accessible sources (e.g., property records); directly from a third party, (e.g., credit reporting agencies or customer due diligence providers); or from a third party with Your consent (e.g., Your bank). We may merge or co-mingle that Personal Information with the Personal Information We maintain about You and other data collected on or through Our Company Website. Categories of sources from which We may collect Personal Information include: advertising networks; internet service providers; data analytics providers; government entities; operating systems and platforms; and social networks.

1.4 EXCLUSIONS FROM PERSONAL INFORMATION SUBJECT TO THIS PRIVACY POLICY.

Personal Information for purposes of this Privacy Policy does not include any of the following types of information: (i) publicly available information from government records; (ii) de-identified or aggregated consumer information; or (iii) any information that, pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), is excluded from CCPA’s governance.

2. HOW WE USE YOUR INFORMATION.

2.1 PRIMARY WAYS WE USE YOUR INFORMATION.

In addition to Section 1 above, a User’s Personal Information may be gathered, collected, recorded, held, processed, or otherwise used by or on behalf of the Company (including by Our Service Providers/Contractors as defined in Section 3 below) to provide, maintain, and improve Our Services to You, including for the following purposes:

• Process Your transactions with the Company, including without limitation: (i) fulfilling Your orders (including shipping if applicable), process exchanges and/or returns and send shipping notifications; (ii) scheduling any of Your appointments or meetings with the Company;
• Send support and administrative messages, and respond to Your comments, questions, and customer service requests;
• Communicate with You via email or through other means of communication about products/services, offers, or any other events offered by Us and others, and/or to offer and provide You with news and information that the Company thinks will be of interest to You. If You prefer not to receive promotional communications from Us, You may opt-out at any time by following the “Communication Opt Out” instructions in Section 5.1 herein;
• We may send You SMS Text messages or otherwise communicate with You about the Company Website, the Company’s products and services, other offers and events, or other updates or promotional information. IF YOU PREFER NOT TO RECEIVE PROMOTIONAL COMMUNICATIONS FROM US, YOU MAY “OPT OUT” AT ANY TIME BY FOLLOWING THE “OPT OUT” INSTRUCTIONS IN SECTIONS 5.1 and 5.6 HEREIN AND/OR REPLY "STOP" TO ANY TEXT MESSAGE YOU MAY RECEIVE PURSUANT TO SECTION 5.6.
• Allowing You to sign up and participate in any other Company communication resources, including without limitation any Newsletters/Blogs, as defined in Section 1.1 herein. If You prefer not to continue to receive these other Company communications, You may “Opt Out” at any time by following the “Opt Out” instructions in Section 5.1 herein;
• To allow Us to monitor, analyze, and better understand the needs, preferences, and trends of the Company’s customers, You, and/or any other Users, including to monitor, analyze, and better understand trends, preferences, usage, and activities in connection with the Company’s products/services and the Company’s overall industry;
• To personalize Your experience and the advertisements and content You see when You use any Company Program based on Your preferences, interests, usage, and browsing and purchasing behavior;
• To conduct credit card screenings or to otherwise protect against fraud or unauthorized transactions, including by identifying potential unauthorized users or hackers;
• For compliance purposes as may be required by applicable laws or regulations or as requested by any judicial process or governmental agency (including without limitation for Company’s tax reporting) or as may be requested under any subpoena or by any other Government Entities (as defined in Section 2.2 herein);
• To facilitate Your use of or participation in various Social Media Activities (as defined in Section 1.2 herein) or other integrated tools (including, for example only, certain Facebook features, such as a Facebook “Like” button) which You may use as part of any Social Media Activities;
• To carry out any Customer/Subscriber Survey (as defined in Section 1.1 herein);
• To carry out any other purpose described to You at the time the Personal Information is collected.

2.2 OTHER WAYS WE MAY USE YOUR INFORMATION.

In addition to the above, Your Personal Information may be gathered, collected, recorded, held, or otherwise used for the following additional purposes:

• Outside Professionals. To use with, or otherwise distribute, share, or disclose to, any of the Company’s professional advisors such as attorneys, accountants, financial advisors, investment plan administrators, or insurance providers (collectively, “Outside Professionals”) in order to facilitate the professional advice from those Outside Professionals (See Section 3); or
• Government Entities. To use with, or otherwise distribute, share, or disclose to, any court, tax authorities, law enforcement authorities, other administrative agencies, other governmental agencies, or any other government entities (collectively, “Government Entities”) in order to comply with, or otherwise pursuant to, any subpoena, court order, or other governmental order, law, or regulation, or in order to respond to any request of any Government Entities, including without limitation tax reporting (See Section 3).
• Auditing. Auditing related to a current interaction with You, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards;
• Security. Helping to ensure security and integrity to the extent the use of Your Personal Information is reasonably necessary and proportionate for these purposes;
• Debugging. Debugging to identify and repair errors that impair existing intended functionality;
• Transient Use. Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with Us provided that Your Personal Information is not disclosed to a third party and is not used to build a profile about You or otherwise alter Your experience outside the current interaction with Us;
• Services. Performing services on Our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on Our behalf;
• Advertising. Providing advertising and marketing services to You.
• Research. Undertaking internal research for technological development and demonstration;
• Quality and Safety. Undertaking activities to verify or maintain the quality or safety of Our products and services and to improve, upgrade, or enhance Our products and services; and
• Commercial Interests. Advancing Our commercial or economic interests, such as by inducing a person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction.

2.3 OTHER TERMS REGARDING THE USE OF YOUR INFORMATION.

2.3.1 The Company may also use or share Your Personal Information only for the purposes as described in this Section 2 and in Section 3 herein, unless We reasonably determine We need to use it for another reason and that reason is compatible with the original purpose(s) described herein. For example, We consider de-identification, aggregation, and other forms of anonymization of Personal Information to be compatible with the purposes listed herein and in Your interest because the anonymization of such information reduces the likelihood of improper disclosure of that information. If We need to use Your Personal Information for an unrelated purpose, We will notify You and We will explain the legal basis which allows Us to do so. If You wish to receive an explanation as to how the processing for a particular purpose is compatible with the original purpose, please contact Us via the information specified in the Contact section below.

2.3.2 PLEASE NOTE THAT WE MAY PROCESS YOUR PERSONAL INFORMATION WITHOUT YOUR KNOWLEDGE OR ADDITIONAL CONSENT IN COMPLIANCE WITH THIS PRIVACY POLICY AND WHERE DOING SO IS REQUIRED OR PERMITTED BY LAW INCLUDING WITHOUT LIMITATION ANY SUBPOENA OR OTHER TYPES OF COURT ORDERS.

3. SHARING OF INFORMATION

We may distribute, share, or disclose Personal Information about You as follows or as otherwise described herein:

• Affiliates and Subsidiaries. We may share or disclose Your Personal Information with, or obtain Your Personal Information from, one or more of Our affiliates or subsidiaries (including without limitation Our affiliated brands and the companies that own and/or operate those affiliated brands) for any of the purposes described herein (collectively, “Affiliates”). In addition Our Affiliates may share or disclose Your Personal Information with, or may receive Your Personal Information from, one or more of the other Affiliates.
• Service Providers/Contractors. We may share or disclose Your Personal Information with Our service providers or third-party vendors, or contractors that We engage or retain in connection with the provision of the Company Programs or otherwise to help Us carry out and fulfill a business or commercial purpose for the Company, including without limitation the following types of service providers or contractors (all of the above are hereinafter collectively referred to as ”Service Providers/Contractors”):
• Email, internet, or other telecommunication Service Providers/Contractors;
• Cloud, other data storage, website hosting, or other hosting Service Providers/Contractors;
• Third party payment Service Providers/Contractors, including without limitation third party credit card processors (see Third Party Application Providers below in this Section 3);
• Data analytics companies who assist Us with various types of data analytics, web analytics, and app analytics (see Data Analytics Providers and Data Analytics Tools or Services below in this Section 3);
• Third party delivery or shipping Service Providers/Contractors;
• Third party app or software designers;
• Database management; and
• Third party advertising or marketing companies that We engage (see Advertising Networks below in this Section 3).
• Other third party contractors or service providers We engage to assist Us in providing Our products/services;
• Third Party Application Providers. If a third party application is used to support Our Company Programs, We may share or disclose Your Personal Information to such third party application providers, including without limitation third party credit card processors, other third party payment service providers, or intermediary services that assist in processing Your payments service provider (collectively “Third Party Application Providers”).
• Data Analytics Providers and Data Analytics Tools or Services. We may use analytics tools or services provided by a third party data analytics service provider (“Data Analytics Providers“) or We may use one of their tools, such as, but not limited to Google Analytics, to collect and process certain analytics data (“Data Analytics Tools or Services”). These Data Analytics Tools or Services may also collect data about Your use of other websites, apps, and online resources. SEE SECTION 5.5 OF THIS PRIVACY POLICY THAT PROVIDES FURTHER NOTICE ABOUT HOW SOME OF THESE DATA ANALYTICS PROVIDERS AND DATA ANALYTICS TOOLS OR SERVICES MAY USE COOKIES AND ALSO PROVIDES INSTRUCTIONS IF YOU WANT TO DISABLE ANY OF THESE COOKIES.
• Aggregated Form. We may make certain automatically-collected, aggregated, or otherwise de-identified Personal Information available to third parties for various other purposes, including (i) compliance with various reporting obligations; (ii) for business or marketing purposes; or (iii) to assist such parties in understanding Our Users’ interests, habits, and usage patterns for certain programs, content, services, advertisements, promotions, and/or functionality available through the Company Programs.
• Advertising Network. We may work with third party advertising companies or marketing companies (collectively, “Advertising Network”) in order to provide You or other parties with advertisements, marketing, or other information that We think may be of interest to You or to others. These Advertising Networks may set or access their own cookies, pixel tags, or similar technologies on Our Company Programs or they may otherwise collect or have access to data about You which they may collect over time and across different online services. These Advertising Network may also provide Us with their own independent data about potential customers and such data could include data about You previously collected by the Advertising Network.
• Social Media Activities. The Company Programs may, now or in the future, offer certain Social Media Activities (as defined in Section 1.2 above), including without limitation certain sharing tools or other integrated tools (such as the Facebook “Like” button), which let You share actions that You take on Our social media pages. Your use of such features enables the sharing of Personal Information with the public, depending on the settings You establish with the entity that provides the social sharing feature.
• Company’s Outside Professionals. We may share or disclose Your Personal Information with any of the Company’s Outside Professionals (as defined in Section 2.2 herein) in order to facilitate the professional advice such Outside Professionals provide to the Company.
• Consent. We may also share or disclose Your Personal Information with Your permission.
• Merger, Sale, or Other Asset Transfers. We may share, disclose, or otherwise transfer Your Personal Information to the Company’s Outside Professionals (as defined in Section 2.2 herein), other advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which We are acquired by or merged with another company or We sell, liquidate, or transfer all or a portion of Our assets.
• Government Entities or as Otherwise Required By Law, Subpoena, or Similar Government Order. We may use, distribute, share, disclose, access, or preserve Your Personal Information if We believe doing so is required or appropriate to: (i) comply with all laws or regulations, including any tax reporting requirements of the Company; (ii) comply with any other law enforcement requests or legal process or requirements of any Government Entities (as defined in Section 2.2 above), such as a court order or subpoena; (iv) comply with any other form of request from any Government Entities; (v) respond to Your requests; or (vi) protect Your, Our, or others’ rights, property, or safety. FOR THE AVOIDANCE OF DOUBT, WE MAY BE REQUIRED TO DISCLOSE YOUR PERSONAL INFORMATION TO: (I) TAXING AUTHORITIES AS PART OF OUR TAX REPORTING REQUIREMENTS; OR (II) LAW ENFORCEMENT AUTHORITIES OR OTHER GOVERNMENTAL ENTITIES OR VIA SUBPOENA ARISING OUT OF YOUR USE OF ANY UNLAWFUL OR INFRINGING CONTENT WHILE USING ANY COMPANY PROGRAM.

4. AGE OF CONSENT; COPPA NOTICE.

4.1 COPPA Notice.

This Company Website and other Company Programs are not directed to children under the age of 13. We adhere to the U.S. federal Children's Online Privacy Protection Act ("COPPA") and will not knowingly register or otherwise collect any Personal Information from any child under the age of 13. We ask that minors under the age of 13 not submit any Personal Information to the Company. If You have reason to believe a child under the age of 13 has provided the Company with any Personal Information, please contact the Company at PRIVACY@STARCOBRANDS.COM and request that such information be deleted from Our records.

4.2 User Age Confirmation.

By using the Company Website or any other Company Program, You represent that You are at least the age of majority in Your state or province of residence, or that You are the age of majority in Your state or province of residence and You have given Us your consent to allow any of Your minor dependents to use Our Company Website or other Company Program.

5. CERTAIN ADDITIONAL CHOICES YOU MAY HAVE ABOUT YOUR INFORMATION.

5.1 OPT-OUT FROM RECEIVING COMMUNICATIONS FROM THE COMPANY.

5.1.1 YOU CAN OPT-OUT FROM RECEIVING COMMUNICATIONS FROM THE COMPANY.

In the event a User has provided the Company with Personal Information such as that discussed above, and thereafter a User does not want to continue to directly receive further notices, or information or communications from the Company, such as emails, or newsletters related to the Company’s products/services, the User must send an email message to the Company at this email address PRIVACY@STARCOBRANDS.COM stating that the User no longer wants to receive these communications or other communications directly from the Company (“Communication Opt Out”). Once the Company has received the User’s request for the Communication Opt Out, the Company will use commercially reasonable efforts, in a commercially reasonable time period, to try to carry out such User’s request for the Communication Opt Out; provided, however, the Company will not have any obligation to retrieve, and cannot prevent the further use by others of, such User’s Personal Information which may have been shared up to that time with other parties as permitted by the provisions of this Privacy Policy.

5.1.2 EFFECT OF COMMUNICATION OPT OUT.

If a User elects to send the Company a Communication Opt Out (as defined in Section 5.1.1), and provided such User has properly delivered its Communication Opt Out request to the Company in accordance with Section 5.1.1 herein, such User will no longer receive emails or other communications directly from the Company after a commercially reasonable time from the date such User sent its Communication Opt Out notice to the Company. However, the Company does not have any obligations under, or liability arising out of, this Privacy Policy with regard to a User’s decision to share its Personal Information with, Our use of, any other internet websites, forums, or programs that the User may have linked to via the Company Website which are not under the Company’s direct control or ownership. Accordingly, after sending Your Communication Opt Out notice to the Company, You may need to contact these other entities directly regarding their use of Your Personal Information.

5.2 OPT-OUTING OF BEHAVIORAL ADVERTISING OR USE OF ANALYTICS TOOLS

5.2.1 OPTING OUT OF BEHAVIORAL ADVERTISING.

Our Company Website or other Company Programs may use behavioral advertising. This means that a third party may use technology (e.g., a cookie) to collect information about Your use of the Company Website or other Company Programs so that they can provide advertising about products and services tailored to Your interests. That advertising may appear either on the Company Website or other Company Program(s), or on other websites not operated by Us. If You do not want third parties to collect information about Your use of the Company Website or other Company Program(s), You can opt-out of such at the Digital Advertising Alliance in the US. PLEASE NOTE THAT OPTING-OUT OF BEHAVIORAL ADVERTISING DOES NOT MEAN THAT YOU WILL NOT RECEIVE ADVERTISING WHILE USING OUR COMPANY WEBSITE OR OTHER COMPANY PROGRAM(S). IT WILL, HOWEVER, EXCLUDE YOU FROM INTEREST-BASED ADVERTISING CONDUCTED THROUGH PARTICIPATING NETWORKS, AS PROVIDED BY THEIR POLICIES AND CHOICE MECHANISMS.

5.2.2 OPTING OUT OF USE OF ANALYTICS.

Many analytics providers allow end-users to opt out of the retention of their information, including Our third-party Data Analytics Providers (as defined in Section 3 herein). Please note that, typically, unless You create an account with the analytics provider, Your choice to opt out applies only to the device from which You make the request, because the providers use cookies on that device to recognize Your choice. If You get a new device, install a new web browser, update Your browser, or otherwise erase/alter Your browser cookie files You may clear the opt-out cookie.

5.3. DO NOT TRACK NOTICE.

Some browsers have a “DO NOT TRACK” feature that lets website users inform websites or other applications that they do not want to have their online activities tracked. These “do not track” features may also give website users other choices regarding the collection of their personal identifiable information. However, these “do not track” features and “do not track’ signals are not yet uniform. ACCORDINGLY, EACH USER OF THE COMPANY WEBSITE OR ANY OTHER COMPANY PROGRAM IS HEREBY NOTIFIED THAT THE COMPANY WEBSITE AND THE OTHER COMPANY PROGRAMS ARE NOT CURRENTLY SET UP TO RESPOND TO ANY OF THE USER’S “DO NOT TRACK” FEATURES OR “DO NOT TRACK” SIGNALS. This “DO NOT TRACK” notice is provided to Users at the recommendation of the U.S. Federal Trade Commission and to residents of the State of California as required pursuant to the California Online Privacy Protection Act (CalOPPA).

5.4. GEO-LOCATION DATA.

You may be able to prevent Your device from sharing precise location information, including without limitation some or all of the Geo-Location Data described in Section 1.2 above, at any time through Your device’s operating system settings.

5.5 COOKIES POLICY; HOW YOU CAN DISABLE COOKIES.

5.5.1 What Are Cookies.

As is common practice with almost all professional websites, the Company Website or other Company Programs use cookies, which are tiny files that are downloaded to Your computer, to improve Your experience. This section describes what information they gather, how We use it, and why We sometimes need to store these cookies. We will also share how You can prevent these cookies from being stored, however, this may downgrade or “break” certain elements of a website’s functionality.

5.5.2 How We Use Cookies.

• WE USE COOKIES FOR A VARIETY OF REASONS AS INDICATED IN SECTION 1.2, SECTION 3, AND THIS SECTION 5.5 OF THIS PRIVACY POLICY.
• In addition to the description of cookies as set forth in Section 1.2 and Section 3 of this Privacy Policy, We may use analytics tools, services or similar tools provided by third parties Data Analytics Providers (as defined in Section 3 herein) to help analyze how You and other Users utilize the Company’s products/services. These analytics tools use cookies and other tracking technologies to collect information such as how often Users visit the Company Website or other Company Programs, what pages they visit, and what other websites they have used prior to visiting the Company Website. We use the information We get from these analytics tools to improve Our products/services. Analytics tools collect the IP address or other unique identifier assigned to You and/or Your devices on the date You visited them. Analytics tools provided by third parties plant a persistent cookie on Your web browser to identify You as a unique User the next time You visit the Company Website, and the treatment of that information is governed by the third party’s terms of use and/or privacy policy. However, it is not our business practice to share any text messaging originator opt-in data and consents with any third parties.
• Unfortunately, in most cases there are no industry standard options for disabling cookies without completely disabling the functionality and features they add to this site. It is recommended that You leave on all cookies if You are not sure whether You need them or not in case they are used to provide a service that You use.
• BY USING OUR COMPANY WEBSITE, YOU GIVE CONSENT FOR US TO SHARE YOUR PERSONAL INFORMATION WITH THESE PROCESSORS, AND FOR THEM TO TRANSFER THIS INFORMATION ONWARD TO THEIR PARTNERS IN CONNECTION WITH PROVIDING YOU THE PRODUCTS/SERVICES.

5.5.3 Disabling Cookies.

You can prevent the setting of cookies by adjusting the settings on Your web browser (see, for example, Your browser Help for how to do this, including “Incognito” in Chrome, “In Private” for Internet Explorer, “Private Browsing” in Firefox and Safari, etc.). Be aware that disabling or deleting cookies in Your web browser: (i) will usually affect the functionality and/or usability of the Company Website, other Company Programs and/or other websites that You visit; and/or (ii) will usually result in also disabling certain functionality and features of this Company Website or any other Company Programs.

5.5.4 The Cookies We May Set.

In addition to the disclosures We have provided in Section 1.2 and Section 3 of this Policy regarding cookies or other web-based tracking technologies or analytics tools, the following section details certain ways that We may set or use cookies or other web-based tracking technologies on the Company Website or any other Company Program:

• Email newsletters related cookies: The Company Website or other Company Programs may offer newsletters or other types of email subscription services and cookies may be used to remember if You are already registered and whether to show certain notifications which might only be valid to subscribed/unsubscribed users.
• Orders processing related cookies:
• The Company Website or other Company Programs may offer e-commerce or payment facilities and some cookies are essential to ensure that Your order is remembered as You move between pages so that We can process it properly.
• The Company Website or other Company Program may use cookies to help keep track of items You put into your shopping cart or otherwise seek to procure, including when You have abandoned Your shopping cart and this information is used to determine when to send cart reminder messages via SMS messages.
• Contact or comment related cookies: When You submit any other data through the Company Website or other Company Programs, certain contact or comment-related cookies may be set to remember Your User details for future correspondence or transactions.

5.5.5 Third Party Cookies.

In certain instances, cookies provided by third parties may also be used. In addition to the disclosures, We have provided in Section 1.2 and Section 3 of this Policy regarding use of cookies or other web-based tracking technologies or analytics tools by third parties, the following section details certain third party cookies You might encounter through the Company Website or any other Company Program:

• As noted in Section 3, the Company Website or other Company Program may engage Data Analytics Providers and/or use Data Analytics Tools or Services (including, without limitation, Google Analytics) that provide Us with widely-used analytics tools or services to help Us better understand how You and other Users are utilizing the Company Website or other Company Program in order to allow Us to improve Your experience. These cookies may track things such as how long You spend on the Company Website or other Company Program and the pages that You visit so We can continue to produce engaging content. For more information about Google Analytics cookies, see the official Google Analytics page.
• Data Analytics Providers and/or use Data Analytics Tools or Services may also be used to track and measure usage of this Company Website or other Company Program (including, but not limited to, tracking things such as how long You spend on a website or pages that You visit) so that We can continue to produce engaging content, help Us to understand how We can improve the Company Website or other Company Program site for You and and/or to give Us a better understanding of broader industry trends.
• From time to time, We test new features and make subtle changes to the way that the Company Website or other Company Programs are delivered. When We are testing new features, these cookies may be used to ensure that You receive a consistent experience while on the Company Website or other Company Program while ensuring We understand which optimizations the Users appreciate the most.
• As We promote Our products/services, it’s important for Us to better understand statistics about how many of the visitors of the Company Website or other Company Programs make a purchase or which Company products or services the Users viewed the most and, thus, this is additional types of data that these cookies will track. We consider this to be important to You as it means that We can accurately make business predictions that allow Us to monitor Our advertising and product/service costs to ensure the best possible services to all Users.
• Certain of Our Advertising Networks (as defined in Section 3 of this Policy) may advertise on Our behalf and affiliate tracking cookies allow Us to see if Our customers have come to the Company Website or other Company Programs through one of these Advertising Network sites or sources.
• As noted in Section 3 of this Privacy Policy, We also use social media buttons and/or plugins on this Company Website or other Company Programs that allow You to connect with Your social network in various ways. For these to work, many social media sites (such as, but not limited to, Facebook, Instagram, or LinkedIn) may set cookies through the Company Website or other Company Program and such cookies may be used to enhance Your profile on their social media site or to contribute to the data they hold for various purposes outlined in their respective privacy policies.

6. ENFORCEMENT OF THIS PRIVACY POLICY BY THE COMPANY.

Each User confirms and agrees that by the User’s act of using any of the Company Programs, including without limitation uploading any of the User’s Personal Information or any other content via any Company Program, the User: (a) unconditionally agrees to all of the terms and conditions of this Privacy Policy; and (b) further agrees that no provision of this Privacy Policy shall limit, condition, alter, or amend, in any way whatsoever, any rights that User may have separately granted to the Company pursuant to any other agreement that the User may have separately entered into with the Company.

7. USER RESPONSIBLE FOR UPDATING USER’S OWN PERSONAL INFORMATION.

Users are solely responsible for correcting, updating, or modifying any and all of the User’s Personal Information as it appears in, and as otherwise stored or contained in, any Company Program. Without in any way limiting the foregoing, User acknowledges and agrees that the Company does not have an independent obligation to maintain the accuracy or completeness of any of Personal Information provided by the User to the Company, including such Personal Information once it is stored, described, or otherwise contained in the Company Website or in any other Company Program.

8. LINKS TO, AND USE OF, THIRD PARTY SITES OR PROGRAMS.

The Company Website or other Company Programs may now or in the future provide links or other access to Internet websites, forums, or other programs that are not under the Company’s sole control and not solely owned by the Company (collectively referred to as “Third Party Sites”). If a User clicks on a link to, or otherwise gains access to, any such Third Party Site, the User will be transported to one of these Third Party Sites.

THIS PRIVACY POLICY ONLY APPLIES TO THE COMPANY WEBSITE AND THE OTHER COMPANY PROGRAMS DIRECTLY OWNED BY THE COMPANY. THEREFORE, THIS PRIVACY POLICY: (A) DOES NOT DESCRIBE THE PRIVACY POLICIES OF ANY OF THESE THIRD PARTY SITES; AND (B) DOES NOT GOVERN THE COLLECTION OR USE OF YOUR PERSONAL INFORMATION BY THE THIRD PARTY SITES. THE COMPANY IS NOT RESPONSIBLE FOR THE PRIVACY PRACTICES OF ANY OF THESE THIRD PARTY SITES. IF A USER CLICKS ON A LINK TO, OR IS SENT TO A LINK OF, OR OTHERWISE GAINS ACCESS TO, A THIRD PARTY SITE, THE USER SHOULD REVIEW THE PRIVACY STATEMENTS OR POLICIES OF SUCH THIRD PARTY SITES (IF ANY) TO DETERMINE THAT PARTICULAR THIRD PARTY SITES’ PRACTICES WITH REGARD TO THE COLLECTION AND USE OF PERSONALLY IDENTIFIABLE INFORMATION.

WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, EACH USER AGREES THAT IF THE USER USES ANY THIRD PARTY SITES IN ANY WAY, THE USER IS AWARE THAT ANY OF THE USER’S PERSONAL INFORMATION THAT THE USER PROVIDES TO THAT THIRD PARTY SITE MIGHT BE READ, COLLECTED, SHARED, DISTRIBUTED, OR OTHERWISE USED BY OTHER USERS OF THAT THIRD PARTY SITE OR BY ANY OTHER THIRD PARTIES, AND COULD BE USED TO SEND THE USER UNSOLICITED MESSAGES. THE COMPANY IS NOT RESPONSIBLE FOR ANY PERSONAL INFORMATION THAT THE USER ELECTS TO SUBMIT IN, OR OTHERWISE MAKE AVAILABLE TO, THESE THIRD PARTY SITES.

Any link to any Third Party Site from the Company Website or any other Company Program does not imply any endorsement of the privacy practices of such Third Party Site by the Company, and no such Third Party Site is authorized to make any representation or warranty on Our behalf.

9. INFORMATION SECURITY

No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, We cannot guarantee its absolute security. We make efforts to protect Your Personal Information from improper or unauthorized loss, misuse, access, disclosure, alteration, or destruction. If You have questions about the security of Your Personal Information, contact the Company at the email or regular mailing address specified in the Contact Use section below.

10. DATA RETENTION

We will retain Your Personal Information for as long as necessary to fulfill the purposes for which We collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for Personal Information, We consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of Your Personal Information, the purposes for which We process Your Personal Information, whether We can achieve those purposes through other means, and the applicable legal requirements.

11. THIS PRIVACY POLICY MAY CHANGE.

We reserve the right to change, modify or clarify this Privacy Policy at any time (“Changes”), so please review it frequently. All such Changes to this Privacy Policy will take effect immediately upon their posting on the Company Website or any other Company Program. The Company reserves the right to make any and all Changes to the Privacy Policy without providing individualized notice to a User. YOU HEREBY AGREE THAT YOU ARE BOUND BY ALL CHANGES TO, AND ANY UPDATED VERSION OF, THIS PRIVACY POLICY THAT ARE IN EFFECT EACH TIME YOU USE THE COMPANY WEBSITE OR ANY OTHER COMPANY PROGRAM. THUS, THE TERMS OF THIS PRIVACY POLICY MAY BE DIFFERENT THE NEXT TIME YOU USE THE COMPANY WEBSITE OR ANY OTHER COMPANY PROGRAM. ANY USE OF THE COMPANY WEBSITE OR ANY OTHER COMPANY PROGRAM BY YOU AFTER SUCH CHANGES SHALL BE DEEMED TO CONSTITUTE ACCEPTANCE BY THE USER OF ALL SUCH CHANGES WITH REGARD TO THE COMPANY WEBSITE AND ALL COMPANY PROGRAMS. EACH USER SHOULD REGULARLY REVIEW AND PRINT THIS PRIVACY POLICY FOR THE USER’S RECORD. If the Company is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products or services to You.

12. ADDITIONAL NOTICES AND DISCLOSURES UNDER SPECIFIC LAWS

NOTICE TO CALIFORNIA RESIDENTS: Under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), residents of the State of California (“California Residents”) have certain rights with respect to their Personal Information, and such rights are hereby disclosed to all California Residents as set forth in Appendix 1 of this Privacy Policy.

NOTICE TO COLORADO RESIDENTS: Under the Colorado Privacy Act (the “CPA”), residents of the State of Colorado (“Colorado Residents”) have certain rights with respect to their Personal Information, and such rights are hereby disclosed to all such Colorado Residents as set forth in Appendix 2 of this Privacy Policy.

NOTICE TO CONNECTICUT RESIDENTS: Under the Connecticut Data Privacy Act, Public Act. No. 22-14 (the “CDPA”), residents of the State of Connecticut (“Connecticut Residents”) have certain rights with respect to their Personal Information, and such rights are hereby disclosed to all such Connecticut Residents as set forth in Appendix 3 of this Privacy Policy.

NOTICE TO NEVADA RESIDENTS: Under Nevada Revised Statues Section 603A., et. seq., residents of the State of Nevada (“Nevada Residents”) have certain rights with respect to the Personal Information, and such rights are hereby disclosed to all such Nevada Residents as set forth in Appendix 4 of this Privacy Policy.

NOTICE TO UTAH RESIDENTS: Under the Utah Consumer Privacy Act (the “UCPA”), residents of the State of Utah (“Utah Residents”) have certain rights with respect to the Personal Information, and such rights are hereby disclosed to all such Utah Residents as set forth in Appendix 5 of this Privacy Policy.

NOTICE TO VIRGINIA RESIDENTS: Under the Virginia Consumer Data Protection Act, as amended (the “VCDPA”), residents of the State of Virginia (“Virginia Residents”) have certain rights with respect to the Personal Information, and such rights are hereby disclosed to all such Virginia Residents as set forth in Appendix 6 of this Privacy Policy.

13. CONTACT US.

If a User believes that the Company is not complying with the policies outlined in this Privacy Policy, or if the User has any questions relating to this Privacy Policy, then the User should write to the Company PRIVACY@STARCOBRANDS.COM.

 

APPENDIX 1

CALIFORNIA PRIVACY RIGHTS NOTICE

Effective Date: 1/22/2024

1. YOUR CALIFORNIA PRIVACY RIGHTS UNDER THE CCPA

Under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), if You are a resident of California You have the following rights with respect to Your Personal Information.

1.1 Right to Know About Our Collection, Disclosure, Sharing and Sale of Personal Information about You.

Personal Information as defined in the CCPA is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to You, including the following categories of information: (a) identifiers; (b) categories described in California Civil Code §1798.80(e); (c) characteristics of protected classes; (d) commercial information; (e) biometric information; (f) internet or other electronic network activity; (g) geolocation data; (h) audio, electronic, visual, thermal, olfactory or similar information; (i) professional or employment related information; (j) education information; and (k) inferences drawn from such information to create a consumer profile.

You have the right to know the categories of Personal Information We have collected about You; the categories of sources from which We collect Personal Information; Our business or commercial purpose for collecting, disclosing, sharing, or selling Personal Information; the categories of third parties to whom We disclose, share, or sell Personal Information, if any; and the specific pieces of Personal Information We have collected about You. Personal Information includes “sensitive” Personal Information as described below.

1.2 Right to Know About Our Collection, Disclosure, Sharing and Sale of “Sensitive” Personal Information about You.

“Sensitive” Personal Information as defined in the CCPA is Personal Information that reveals: (a) Your Social Security, driver’s license, state identification card, or passport number; (b) Your account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (c) Your precise geolocation; (d) Your racial or ethnic origin, religious, or philosophical beliefs, or union membership; (e) the contents of Your mail, email, and text messages unless We are the intended recipient of the communication; and (f) Your genetic data. “Sensitive” Personal Information also includes biometric information that is processed for the purpose of identifying You, information that is collected and analyzed concerning Your health; or Your sex life or sexual orientation.

You have the right to know the categories of “sensitive” Personal Information We have collected about You, the categories of sources from which We collect Personal Information, Our business or commercial purpose for collecting, selling, or sharing “sensitive” Personal Information, the categories of third parties with whom We sell or share “sensitive” Personal Information, if any, and the specific pieces of “sensitive” Personal Information We have collected about You.

1.3 Right to Delete Your Personal Information

Subject to the exceptions set out below, and upon Your submission of a verifiable request, You have the right to deletion of Your Personal Information from Our records, and to have Us direct Our Service Providers/Contractors and third parties to delete Your Personal Information from their records.

We are not required to, and reserve Our right to not delete Your Personal Information if it is necessary to: (i) complete the transaction for which the Personal Information was collected, provide a good or service requested by You, or reasonably anticipated within the context of Our ongoing business relationship with You, or otherwise perform a contract between You and Us; (ii) help to ensure security and integrity to the extent the use of Your Personal Information is reasonably necessary and proportionate for those purposes; (iii) debug to identify and repair errors that impair existing intended functionality; (iv) exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law; (v) comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code; (vi) engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when Our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided We have obtained Your informed consent; (vii) enable solely internal uses that are reasonably aligned with Your expectations based on Your relationship with Us and compatible with the context in which You provided the information; and (viii) comply with a legal obligation.

1.4 Right to Correct Inaccurate Personal Information.

Subject to the exceptions set out below, and upon Your submission of a verifiable request, You have the right to correct any inaccurate Personal Information in Our records, and to have Us direct Our Service Providers/Contractors and third parties to correct any inaccurate Personal Information from their records.
If We cannot verify Your identity pursuant to the CCPA and its regulations, We may deny a request to correct. In such event, We shall inform You that Your identity cannot be verified.

In determining the accuracy of the Personal Information that is the subject of Your request to correct, We shall consider the totality of the circumstances relating to the contested Personal Information. We may deny Your request to correct if We determine that the contested Personal Information is more likely than not accurate based on the totality of the circumstances.

1.5 Right to Be Free from Discrimination

You have the right to not be discriminated against by Us because You exercised any of Your rights under the CCPA. This means We cannot, on the basis of the exercise of Your rights thereunder, among other things, deny goods or services to You, charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; provide a different level or quality of goods or services to You; or suggest that You will receive a different price or rate for goods or services or a different level or quality of goods or services or retaliate against You as an employee, applicant for employment, or independent contractor.

1.6 Right to Opt-Out of the Sharing of Personal Information

We may disclose Your Personal Information to third parties for cross-context behavioral advertising purposes (“Share” or “Sharing”). This means the targeting of advertising to You based on Your Personal Information that We obtain from Your activity across businesses, distinctly-branded websites, applications, or services, other than Our business, distinctly-branded website, application, or service. We may Share Personal Information with Advertising Networks so they may help Us to deliver advertisements to You based on Your activity on the Company Website or apps and/or Your activity on other websites or apps.

You have the right to opt-out of the Sharing of Your Personal Information and You may exercise Your right by clicking the following link: HTTPS://STARCOBRANDS.COM/PAGES/DO-NOT-SELL-OR-SHARE-MY-PERSONAL-INFORMATION-NOTICE. If You exercise Your right to opt-out of the Sharing of Your personal information, We will refrain from Sharing Your Personal Information, unless You subsequently provide express authorization for the sharing of Your Personal Information.

1.7 Right to Opt-Out of the Sale of Personal Information

We may disclose Your Personal Information to third parties in exchange for monetary or other consideration. Such disclosures are considered to be “Sales” under the CCPA. We may Sell Personal Information to advertising networks so they may help Us to deliver advertisements to You based on Your activity on the Company Website or any other Company Programs and/or to recommend Our products/services to You based on Your activity on other websites or apps. You have the right to opt-out of the Sale of Your Personal Information and You may exercise Your right by clicking on the following link: HTTPS://STARCOBRANDS.COM/PAGES/DO-NOT-SELL-OR-SHARE-MY-PERSONAL-INFORMATION-NOTICE. If You exercise Your right to opt-out of the Sale of Your Personal Information, We will refrain from Selling Your Personal Information, unless You subsequently provide express authorization for the Sale of Your Personal Information.

1.8 Right to Limit the Use of “Sensitive” Personal Information

We may use Your “sensitive” Personal Information for purposes other than is necessary to provide Our products/services as reasonably expected by You. For example, We may share Your “sensitive” Personal Information with Advertising Networks that may use such information to target advertising to You. You have the right to limit Our use of Your “sensitive” Personal Information to that which is necessary to provide Our goods and services to You by clicking on the following link: HTTPS://STARCOBRANDS.COM/PAGES/DO-NOT-SELL-OR-SHARE-MY-PERSONAL-INFORMATION-NOTICE.

1.9 Right of Children to Opt-In to the Sale of Personal Information

We do not knowingly collect or sell the Personal Information of minors under 16 years of age without affirmative authorization. For minors who wish to opt-in to the sale of their Personal Information, We have established the following processes:

Minors between 13 and 16 years of age:

In the case of consumers between 13 and 16 years of age, We require the consumer to affirmatively authorize the sale of the consumer’s Personal Information. In order to opt-in minors in this age range, as part of the account registration process for Our products which may be targeted toward minors, We require the consumer or consumer’s parent or guardian to verify the consumer’s identity by providing at least two data points with data points maintained by the business, which We have determined to be reliable for the purpose of verifying the consumer.

Minors under 13 years of age:

In the case of consumers who are less than 13 years of age, We require the consumer’s parent to affirmatively authorize the sale of the consumer’s personal information. In order to opt-in minors in this age range, as part of the account registration process for Our products/services s which may be targeted toward minors, We require that the consumer’s parent or guardian verify the consumer’s identity, which We have determined to be reliable for the purpose of verifying the consumer.

We reserve the right to require additional information or not complete Your request if We cannot verify Your identity. If You are a parent or guardian seeking to opt-out on behalf of their child, please contact Us at 1-888-914-9661 (PIN: 568426) or email Us at PRIVACY@STARCOBRANDS.COM with the subject “Minor Opt-Out.”

2. HOW TO EXERCISE YOUR CCPA RIGHTS

Unless otherwise specified, to exercise any of Your rights described in this Appendix A, please submit Your request to Us at 1-888-914-9661 (PIN: 568426) or at PRIVACY@STARCOBRANDS.COM with the subject “CCPA Consumer Request.”

In order to verify Your request, We will need You to provide Us with enough information to identify You (e.g., Your full name, address, and customer or matter reference number), proof of Your identity and address (e.g., a copy of Your driver’s license or passport and a recent utility or credit card bill), and a description of what right You wish to exercise along with any information to which Your requests relates. If feasible, We will match the identifying information provided by You with the personal information that We already maintain about You.

You may designate an authorized agent to make a request under the CCPA on Your behalf. In order to fulfill Your request to know or delete submitted by an authorized agent, You must provide the authorized agent written permission to do so, and We may require that You verify Your own identity with Us directly.

We reserve Our right not to grant a consumer request if We cannot verify that the person making the request is the person about whom We have collected information, or someone authorized to act on such person’s behalf. You may only make a request to access or receive copies of Personal Information twice within a 12-month period. Any Personal Information We collect from You to verify Your identity in connection with Your request will be used solely for the purposes of verification.

3. OUR PERSONAL INFORMATION COLLECTION, USE, AND DISCLOSURE PRACTICES

A description of the Personal Information that We collect online and off-line is provided in Section 1 of the main Policy.

The purposes for which We collect and use Personal Information are described in Sections 1, 2, 3 and 5 of the main Policy.

Sources from which We receive Personal Information are described in Section 1 of the main Policy.

Our Personal Information disclosure practices are described in Section 1, 2, 3, and 5 of the main Policy.

Our Personal Information retention practices are described in Section 10 of the main Policy.

3.1 Categories of Personal Information Collected; Sold or Shared for Cross-Context Behavioral Advertising; and Disclosed for a Business Purpose within the past 12 months.

Category of Personal Information.	Collected	“Sold” or Shared in the Past 12 Months?	Categories of Third Parties to Whom Sold or Shared (as such terms are defined in this Privacy Policy)	Disclosed for a Business Purpose in Past 12 Months?	Categories of Third Parties to Whom Disclosed (as such terms are defined in this Privacy Policy)
Individual Identifiers.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Categories Described in California Consumer Records Act, CA Civil Code §1798.81.5.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Characteristics of protected classifications under California or federal law.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Commercial information.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Biometric information.	No	No	Not Applicable	No	Not Applicable
Internet or other electronic network activity.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Geolocation data.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Audio, electronic, visual, thermal, olfactory, or similar information.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Professional or employment-related information.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Education information.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Inferences drawn from any of the information identified above.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals

 

3.2 Categories of “Sensitive” Personal Information Collected; Sold or Shared for Cross-Context Behavioral Advertising; and Disclosed for a Business Purpose within the past 12 months.

Category of Sensitive Personal Information.	Collected	Shared or Sold in the Past 12 Months?	Categories of Third Parties to Whom Shared or Sold (as such terms are defined in this Privacy Policy)	Disclosed for a Business Purpose in Past 12 Months?	Categories of Third Parties to Whom Disclosed (as such terms are defined in this Privacy Policy)
Social Security, Driver’s License, State ID, or Passport Number.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Account Log-in.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Financial Account, Debit Card, Credit Card Number and account access information.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Government Entities; and Outside Professionals
Precise Geolocation.	Yes	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals	Yes	Affiliates; Related Parties; Service Providers/ Contractors (as such term is fully defined in Section 3 of the main Privacy Policy); Government Entities; and Outside Professionals
Racial or ethnic origin, religious or philosophical beliefs or union membership.	Yes	Yes	Not Applicable	No	Not Applicable
Contents of email, text messages unless We are intended recipient.	Yes	Yes	Not Applicable	No	Not Applicable
Genetic Data	No	No	Not Applicable	No	Not Applicable
Biometric Information for purpose of identification.	No	No	Not Applicable	No	Not Applicable
Health information collected and analyzed.	No	No	Not Applicable	No	Not Applicable
Sex life or sexual orientation collected and analyzed.	Yes	Yes	Not Applicable	No	Not Applicable

 

4. OTHER CALIFORNIA PRIVACY RIGHTS

4.1 Shine the Light Request.

Individual consumers who reside in California and have provided Us with their Personal Information may request information about Our disclosures of certain categories of Personal Information to third parties for their direct marketing purposes. Such requests must include Your name, street address, city, state, and zip code, and be submitted to Us at one of the following addresses: PRIVACY@STARCOBRANDS.COM with the subject “California Shine The Light Request” or 250 26th St. #200, Santa Monica, CA 90402. Within thirty (30) days of receiving such a request, We will provide a list of the categories of Personal Information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year. We reserve Our right not to respond to requests submitted to addresses other than the addresses specified in this paragraph.

4.2 Minor’s Right to Remove Posted Content.

If You are a California resident under the age of 18, and a registered User of any website where this Policy is posted, California Business and Professions Code Section 22581 permits You to request and obtain removal of content or information that You have publicly posted. To make such a request, please send an email with a detailed description of the specific content or information to PRIVACY@STARCOBRANDS.COM with the subject “Privacy Rights for Minors.” Please be aware that such a request does not ensure complete or comprehensive removal of the content or information You have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

 

APPENDIX 2

COLORADO PRIVACY RIGHTS NOTICE

Effective Date: 1/22/2024

1. YOUR COLORADO PRIVACY RIGHTS

Under the Colorado Privacy Act (the “CPA”) if You are a resident of Colorado, acting only in an individual or household context (and not in a commercial or employment context, as a job applicant or as a beneficiary of someone acting in an employment context), Your rights with respect to Your Personal Data are described below.

1.1 Disclosure of Our Personal Data Collection and Processing Practices.

Personal Data as defined in the CPA means any information that is linked or reasonably linkable to You. Our main Privacy Policy and Appendix 1 describe Our collection and processing of Personal Data (therein also referred to as “Personal Information”) practices, including:

• the categories of Personal Data that We collect or process (Section 1);
• the purposes for processing the Personal Data (Sections 1,2 and 3);
• the categories of Personal Data shared with third parties (Sections 1, 2 and 3 in Appendix 1))
• the categories of third parties with whom We share Personal Data (Sections 1, 2 and 3 in Appendix 1)
• Our sale of Personal Data to third parties or targeted advertising (Section 3 in Appendix 1 therein “targeted advertising” is referred to as “sharing for cross-context behavioral advertising”)

1.2 Right of Access.

You have the right to confirm whether We are processing Personal Data concerning You and to access to Your Personal Data.

1.3 Right to Correction.

You have the right to correct inaccuracies in Your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of Your Personal Data.

1.4 Right to Deletion

You have the right to delete Personal Data concerning You.

1.5 Right to Data Portability.

When exercising the right to access Personal Data, You have the right to obtain the Personal Data in a portable, and to the extent technically feasible, readily usable format that allows You to transmit the Personal Data to another entity without hindrance.

1.6 Right to Opt Out.

You have the right to opt out of the processing of Your Personal Data for (a) targeted advertising, (b) sale of Personal Data, or (c) profiling in furtherance of decisions that produce legal or similarly significant effects concerning You.

We may disclose Your Personal Data to third parties for targeted advertising purposes. This means the targeting of advertising to You based on Your Personal Data that We obtain from Your activity across businesses, distinctly-branded websites, applications, or services, other than Our business, distinctly-branded website, application, or service. We may share Personal Data with advertising networks so they may help Us to deliver advertisements to You based on Your activity on the Company Website or apps and/or Your activity on other websites or apps.

You have the right to opt-out of the processing of Your Personal Data for targeted advertising or profiling and You may exercise Your right by clicking the following link: HTTPS://STARCOBRANDS.COM/PAGES/DO-NOT-SELL-OR-SHARE-MY-PERSONAL-INFORMATION-NOTICE. If You exercise Your right to opt-out of the processing of Your Personal Data for targeted advertising or profiling, We will refrain from processing Your Personal Data for targeted advertising or profiling, unless You subsequently provide express authorization for the sharing of Your Personal Data.

We may disclose Your Personal Data to third parties in exchange for monetary or other consideration. We may sell Your Personal Data to advertising networks so they may help Us to deliver advertisements to You based on Your activity on the Company Website or apps and/or to recommend Our products/services to You based on Your activity on other websites or apps. We may sell Your Personal Data to Data Analytics Providers who may use Your Personal Data for their own behavioral advertising analysis purposes.

You have the right to opt-out of the sale of Your Personal Data and You may exercise Your right by clicking on the following link: HTTPS://STARCOBRANDS.COM/PAGES/DO-NOT-SELL-OR-SHARE-MY-PERSONAL-INFORMATION-NOTICE. If You exercise Your right to opt-out of the sale of Your Personal Data, We will refrain from selling Your Personal Data, unless You subsequently provide express authorization for the sale of Your Personal Data.

We will process any opt-out preference signal that (a) is in a format commonly used and recognized by businesses (for example, in an HTTP header field) and (b) is sent from a platform, technology, or mechanism that makes it clear to the consumer, whether in its configuration or in disclosures to the public, that the use of the signal is meant to have the effect of opting the consumer out of the sale and sharing of their Personal Data (“Opt-Out Preference Signal”). We shall treat the Opt-Out Preference Signal as a valid request to opt-out of the sale or sharing of Personal Data for Your browser or device, and, if known, for You.

1.7 Your “Sensitive Data” May Not Be Processed without Your Consent

“Sensitive Data” means (a) Personal Data revealing Your racial or ethnic origin, religious beliefs, a mental or physical health condition or diagnosis, sex life or sexual orientation, or citizenship or citizenship status; (b) the processing of genetic or biometric data for identification purposes and (c) Personal Data from a known child. We will not process Your “Sensitive Data” without Your consent or in the case of a known child, the consent or a parent or lawful guardian.

HOW TO EXERCISE YOUR CPA RIGHTS

Unless otherwise specified, to exercise any of Your rights described in this Appendix 2, please submit Your request to Us at PRIVACY@STARCOBRANDS.COM with the subject “CPA Consumer Request.” We shall respond to Your request within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary, taking into account the complexity and number of requests and We inform You of such extension within the initial forty-five (45) day response period, together with the reason for the extension.
If We decline to take action on Your request, We shall so inform You without undue delay, within forty-five (45) days of receipt of Your request. The notification will include a justification for declining to take action and instructions on how You may appeal.

Not more than sixty (60) days after receipt of an appeal, We will inform You in writing of any action taken or not taken in response to the appeal, including a written explanation of the reason for the decision. If We deny the appeal, You may contact the Colorado Attorney General at https://complaints.coag.gov/s/?varCFT=2 or (720) 508-6000.

We shall provide information in response to Your request free of charge, except that, for a second or subsequent request within a twelve (12) month period, We may charge an amount as provided in the CPA. If We are unable to authenticate Your request using commercially reasonable efforts, We may request additional information reasonably necessary to authenticate You and Your request. If We cannot authenticate You and Your request, We will not be able to grant Your request.

You may designate another person to serve as Your authorized agent and act on Your behalf. We will comply with an opt-out request received from an authorized agent if We are able to verify, with commercially reasonable effort, Your identity and the authorized agent’s authority to act on Your behalf. 

 

APPENDIX 3

CONNECTICUT PRIVACY RIGHTS NOTICE

Effective Date: 1/22/2024

1. YOUR CONNECTICUT PRIVACY RIGHTS

Under the Connecticut Data Privacy Act, Public Act. No. 22-14 (the “CDPA”) if You are a resident of Connecticut, acting in an individual or household context (and not in a commercial or employment context or as a representative of business, nonprofit or governmental entity), Your rights with respect to Your Personal Data are described below.

1.1 Disclosure of Our Personal Data Collection and Processing Practices.

Personal Data as defined in the CDPA means any information that is linked or reasonably linkable to You. Our main Privacy Policy and Appendix A describe Our collection and processing of Personal Data (therein also referred to as “Personal Information”) practices, including:

• the categories of Personal Data that We collect or process (Section 1);
• the purposes for processing the Personal Data (Sections 1, 2 and 3);
• the categories of Personal Data shared with third parties (Sections 1, 2 and 3 in Appendix 1))
• the categories of third parties with whom We share Personal Data (Sections 1, 2 and 3 in Appendix 1)
• Our sale of Personal Data to third parties or targeted advertising (Section 3 in Appendix 1 therein “targeted advertising” is referred to as “sharing for cross-context behavioral advertising”)

1.2 Right of Access.

You have the right to confirm whether We are processing Personal Data concerning You and to access to Your Personal Data, except if doing so would require Us to reveal a trade secret.

1.3 Right to Correction.

You have the right to correct inaccuracies in Your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of Your Personal Data.

1.4 Right to Deletion

You have the right to delete Personal Data concerning You.

1.5 Right to Data Portability.

When exercising the right to access Personal Data, You have the right to obtain the Personal Data in a portable, and to the extent technically feasible, readily usable format that allows You to transmit the Personal Data to another entity without hindrance.

1.6 Right to Opt Out.

You have the right to opt out of the processing of Your Personal Data for (a) targeted advertising, (b) sale of Personal Data, or (c) profiling in furtherance of decisions that produce legal or similarly significant effects concerning You.

We may disclose Your Personal Data to third parties for targeted advertising purposes. This means the targeting of advertising to You based on Your Personal Data that We obtain from Your activity across businesses, distinctly-branded websites, applications, or services, other than Our business, distinctly-branded website, application, or service. We may share Personal Data with advertising networks so they may help Us to deliver advertisements to You based on Your activity on the Company Website or apps and/or Your activity on other websites or apps.

You have the right to opt-out of the processing of Your Personal Data for targeted advertising or profiling and You may exercise Your right by clicking the following link: HTTPS://STARCOBRANDS.COM/PAGES/DO-NOT-SELL-OR-SHARE-MY-PERSONAL-INFORMATION-NOTICE. If You exercise Your right to opt-out of the processing of Your Personal Data for targeted advertising or profiling, We will refrain from processing Your Personal Data for targeted advertising or profiling, unless You subsequently provide Your express authorization.

We may disclose Your Personal Data to third parties in exchange for monetary or other consideration. We may sell Your Personal Data to advertising networks so they may help Us to deliver advertisements to You based on Your activity on the Company Website or apps and/or to recommend Our services/products to You based on Your activity on other websites or apps. We may sell Your Personal Data to Data Analytics Providers who may use Your Personal Data for their own behavioral advertising analysis purposes.

You have the right to opt-out of the sale of Your Personal Data and You may exercise Your right by clicking on the following link: HTTPS://STARCOBRANDS.COM/PAGES/DO-NOT-SELL-OR-SHARE-MY-PERSONAL-INFORMATION-NOTICE. If You exercise Your right to opt-out of the sale of Your Personal Data, We will refrain from selling Your Personal Data, unless You subsequently provide express authorization for the sale of Your Personal Data.
We will process any opt-out preference signal that (a) is in a format commonly used and recognized by businesses (for example, in an HTTP header field) and (b) is sent from a platform, technology, or mechanism that makes it clear to the consumer, whether in its configuration or in disclosures to the public, that the use of the signal is meant to have the effect of opting the consumer out of the sale and sharing of their Personal Data (“Opt-Out Preference Signal”). We shall treat the Opt-Out Preference Signal as a valid request to opt-out of the sale or sharing of Personal Data for Your browser or device, and, if known, for You.

1.7 Your “Sensitive Data” May Not Be Processed without Your Consent

“Sensitive Data” means (a) Personal Data revealing Your racial or ethnic origin, religious beliefs, a mental or physical health condition or diagnosis, sex life or sexual orientation, or citizenship or immigration status; (b) the processing of genetic or biometric data for identification purposes; (c) Personal Data from a known child (individual under the age of 13); precise geolocation data. We will not process Your “Sensitive Data” without Your consent or in the case of a known child, the consent or a parent or lawful guardian.

2. HOW TO EXERCISE YOUR CDPA RIGHTS

Unless otherwise specified, to exercise any of Your rights described in this Appendix 3, please submit Your request to Us at PRIVACY@STARCOBRANDS.COM with the subject “CDPA Consumer Request.” We shall respond to Your request within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary, taking into account the complexity and number of requests and We inform You of such extension within the initial forty-five (45) day response period, together with the reason for the extension.
If We decline to take action on Your request, We shall so inform You without undue delay, within forty-five (45) days of receipt of Your request. The notification will include a justification for declining to take action and instructions on how You may appeal.

Not more than sixty (60) days after receipt of an appeal, We will inform You in writing of any action taken or not taken in response to the appeal, including a written explanation of the reason for the decision. If We deny the appeal, You may contact the Connecticut Attorney General to submit a complaint at https://portal.ct.gov/AG/Common/Complaint-Form-Landing-page or (860) 808-5318.

We shall provide information in response to Your request free of charge, except that, for a second or subsequent request within a twelve (12) month period, We may charge an amount as provided in the CDPA. If We are unable to authenticate Your request using commercially reasonable efforts, We may request additional information reasonably necessary to authenticate You and Your request. If We cannot authenticate You and Your request, We will not be able to grant Your request.

You may designate another person to serve as Your authorized agent and act on Your behalf. We will comply with an opt-out request received from an authorized agent if We are able to verify, with commercially reasonable effort, Your identity and the authorized agent’s authority to act on Your behalf. 

 

APPENDIX 4

NEVADA PRIVACY RIGHTS NOTICE

Effective Date: 1/22/2024

Under Nevada Revised Statues Section 603A., et. seq., residents of Nevada have certain rights with respect to the Personal Information that We collect on the Company Website.

1. The categories of Personal Information that We collect and the categories of third parties with whom We share Personal Information are described in the chart in the above Appendix 1 under the California Privacy Rights Notice.

2. You may review and request changes to the Personal Information that We collect or process on the Company Website by sending an e-mail to PRIVACY@STARCOBRANDS.COM

3. Any material changes to this notice shall be posted in this Appendix 4 to this Privacy Policy.

4. When You use the Company Website, We may share Personal Information about Your online activities over time and across different internet sites or online services with third parties.

 

APPENDIX 5

UTAH PRIVACY RIGHTS NOTICE

Effective Date: 1/22/2024

1. YOUR UTAH PRIVACY RIGHTS UNDER THE UTAH CONSUMER PRIVACY ACT

Under the Utah Consumer Privacy Act (the “UCPA”) if You are a resident of Utah, acting in an individual or household context (and not in a commercial or employment context) Your rights with respect to Your Personal Data are described below.

1.1 Disclosure of Our Personal Data Collection and Processing Practices.
Personal Data as defined in the UCPA means any information that is linked or reasonably linkable to You. Our main Privacy Policy and Appendix A describe Our collection and processing of Personal Data (therein also referred to as “Personal Information”) practices in general, including:

• the categories of Personal Data that We collect or process (Section 1);
• the purposes for processing the Personal Data (Sections 1,2 and 3);
• the categories of Personal Data shared with third parties (Sections 1, 2 and 3 in Appendix 1)
• the categories of third parties with whom We share Personal Data (Sections 1, 2 and 3 in Appendix 1)
• Our sale of Personal Data to third parties and processing of Personal Data for targeted advertising (Section 3 in Appendix 1 , therein “targeted advertising” is referred to as “sharing for cross-context behavioral advertising” )

1.2 Right of Access.

You have the right to confirm whether We are processing Personal Data concerning You and to access to Your Personal Data.

1.3 Right to Correction.

You have the right to correct inaccuracies in Your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of Your Personal Data.

1.4 Right to Deletion

You have the right to delete Personal Data concerning You.

1.5 Right to Data Portability.

When exercising the right to access Personal Data, You have the right to obtain the Personal Data in a portable, and to the extent technically feasible, readily usable format that allows You to transmit the Personal Data to another entity without hindrance.

1.6 Right to Opt Out.

You have the right to opt out of the processing of Your Personal Data for (a) targeted advertising or (b) sale of Personal Data.

We may disclose Your Personal Data to third parties for targeted advertising purposes. This means the targeting of advertising to You based on Your Personal Data that We obtain from Your activity across businesses, distinctly-branded websites, applications, or services, other than Our business, distinctly-branded website, application, or service. We may share Personal Data with advertising networks so they may help Us to deliver advertisements to You based on Your activity on the Company Website or apps and/or Your activity on other websites or apps.

You have the right to opt-out of the processing of Your Personal Data for targeted advertising and You may exercise Your right by clicking the following link: HTTPS://STARCOBRANDS.COM/PAGES/DO-NOT-SELL-OR-SHARE-MY-PERSONAL-INFORMATION-NOTICE. If You exercise Your right to opt-out of the processing of Your Personal Data for targeted advertising, We will refrain from processing Your Personal Data for targeted advertising, unless You subsequently provide express authorization for the sharing of Your Personal Data.

We may disclose Your Personal Data to third parties in exchange for monetary consideration. We may sell Your Personal Data to advertising networks so they may help Us to deliver advertisements to You based on Your activity on the Company Website or apps and/or to recommend Our products/services to You based on Your activity on other websites or apps. We may sell Your Personal Data to Data Analytics Providers who may use Your Personal Data for their own behavioral advertising analysis purposes.

You have the right to opt-out of the sale of Your Personal Data and You may exercise Your right by clicking on the following link: HTTPS://STARCOBRANDS.COM/PAGES/DO-NOT-SELL-OR-SHARE-MY-PERSONAL-INFORMATION-NOTICE. If You exercise Your right to opt-out of the sale of Your Personal Data, We will refrain from selling Your Personal Data, unless You subsequently provide express authorization for the sale of Your Personal Data.

We will process any opt-out preference signal that (a) is in a format commonly used and recognized by businesses (for example, in an HTTP header field) and (b) is sent from a platform, technology, or mechanism that makes it clear to the consumer, whether in its configuration or in disclosures to the public, that the use of the signal is meant to have the effect of opting the consumer out of the sale and sharing of their personal data (“Opt-Out Preference Signal”). We shall treat the Opt-Out Preference Signal as a valid request to opt-out of the sale or sharing of Personal Data for Your browser or device, and, if known, for You.
1.7 Your “Sensitive Data” May Not Be Processed without Your Consent
“Sensitive Data” means (a) Personal Data revealing Your racial or ethnic origin; religious beliefs; sexual orientation; citizenship or immigration status; or medical history, mental or physical health condition, or medical treatment or diagnosis by a health care professional; (b) the processing of genetic or biometric data for identification purposes and (c) specific geolocation data. We will not process Your “Sensitive Data” without Your consent or in the case of a known child, the consent or a parent or guardian.

2. HOW TO EXERCISE YOUR UCPA RIGHTS

Unless otherwise specified, to exercise any of Your rights described in this Appendix 5, please submit Your request to Us at privacy@starcobrands.com the subject “UCPA Consumer Request.” We shall respond to Your request within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary, taking into account the complexity and number of requests and We inform You of such extension within the initial forty-five (45) day response period, together with the reason for the extension.

If We decline to take action on Your request, We shall so inform You without undue delay, within 45 days of receipt of Your request.

We shall provide information in response to Your request free of charge, except that, for a second or subsequent request within a twelve (12) month period, We may charge an amount as provided in the UCPA. If We are unable to authenticate Your request using commercially reasonable efforts, We may request additional information reasonably necessary to authenticate You and Your request. If We cannot authenticate You and Your request, We will not be able to grant Your request.

 

APPENDIX 6

VIRGINIA PRIVACY RIGHTS NOTICE

Effective Date: 1/22/2024

1. YOUR VIRGINIA PRIVACY RIGHTS UNDER THE VCDPA

Under the Virginia Consumer Data Protection Act, as amended (the “VCDPA”) if You are a resident of Virginia acting in an individual or household context (and not in an employment or commercial context), You have the following rights with respect to Your Personal Data.

1.1 Disclosure of Our Personal Data Collection and Processing Practices.

Personal Data as defined in the VCDPA means any information that is linked or reasonably linkable to You. Our main Privacy Policy and Appendix A describe Our collection and processing of Personal Data (therein also referred to as “Personal Information”) practices, including:

• the categories of Personal Data that We collect or process (Section 1);
• the purposes for processing the Personal Data (Sections 1,2 and 3);
• the categories of Personal Data shared with third parties (Sections 1, 2 and 3 in Appendix 1)
• the categories of third parties with whom We share Personal Data (Sections 1, 2 and 3 in Appendix 1)
• Our sale of Personal Data to third parties or targeted advertising (Section 3 in Appendix 1, therein “targeted advertising” is referred to as “sharing for cross-context behavioral advertising”)

1.2 Right of Access.

You have the right to confirm whether We are processing Personal Data concerning You and to access to Your Personal Data.

1.3 Right to Correction.

You have the right to correct inaccuracies in Your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of Your Personal Data.

1.4 Right to Deletion

You have the right to delete Personal Data concerning You.

1.5 Right to Data Portability.

When exercising the right to access Personal Data, You have the right to obtain the Personal Data in a portable, and to the extent technically feasible, readily usable format that allows You to transmit the Personal Data to another entity without hindrance.

1.6 Right to Opt Out.

You have the right to opt out of the processing of Your Personal Data for purposes of (i) targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning You.

We may disclose Your Personal Data to third parties for targeted advertising purposes. This means the targeting of advertising to You based on Your Personal Data that We obtain from Your activity across businesses, distinctly-branded websites, applications, or services, other than Our business, distinctly-branded website, application, or service. We may share Personal Data with advertising networks so they may help Us to deliver advertisements to You based on Your activity on the Company Website or apps and/or Your activity on other websites or apps.

You have the right to opt-out of the processing of Your Personal Data for targeted advertising or profiling and You may exercise Your right by clicking the following link: HTTPS://STARCOBRANDS.COM/PAGES/DO-NOT-SELL-OR-SHARE-MY-PERSONAL-INFORMATION-NOTICE. If You exercise Your right to opt-out of the processing of Your Personal Data for targeted advertising or profiling, We will refrain from processing Your Personal Data for targeted advertising or profiling, unless You subsequently provide Your express authorization.

We may disclose Your Personal Data to third parties in exchange for monetary consideration. We may share Personal Data with advertising networks so they may help Us to deliver advertisements to You based on Your activity on the Company Website or apps and/or to recommend Our products/services to You based on Your activity on other websites or apps. We may share Your Personal Data with Data Analytics Providers who may use Your Personal Data for their own behavioral advertising analysis purposes.

You have the right to opt-out of the sale of Your Personal Data and You may exercise Your right by clicking on the following link: HTTPS://STARCOBRANDS.COM/PAGES/DO-NOT-SELL-OR-SHARE-MY-PERSONAL-INFORMATION-NOTICE. If You exercise Your right to opt-out of the sale of Your personal data, We will refrain from selling Your Personal Data, unless You subsequently provide express authorization for the sale of Your Personal Data.
1.7 Your “Sensitive Data” May Not Be Processed without Your Consent
“Sensitive Data” means (a) Personal Data revealing racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, or citizenship or immigration status; (b) the processing genetic or biometric data for the purpose of uniquely identifying You; (c) the Personal Data from a known child; or (d) precise geolocation. We do not process “Sensitive Data” If We intend to do so, We will obtain Your consent or in the case of a known child, the consent as required by the federal Children’s Online Privacy Protection Act.

2. HOW TO EXERCISE YOUR VCDPA RIGHTS

Unless otherwise specified, to exercise any of Your rights described in this Appendix 6, please submit Your request to Us at PRIVACY@STARCOBRANDS.COM with the subject “VCPDA Consumer Request.” We shall respond to Your request within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary, taking into account the complexity and number of requests and We inform You of such extension within the initial forty-five (45) day response period, together with the reason for the extension.
If We decline to take action on Your request, We shall so inform You without undue delay, within forty-five (45) days of receipt of Your request. The notification will include a justification for declining to take action and instructions on how You may appeal.

We shall provide information in response to Your request free of charge, up to twice annually, unless requests are manifestly unfounded, excessive or repetitive. If We are unable to authenticate Your request using commercially reasonable efforts, We may request additional information reasonably necessary to authenticate You and Your request. If We cannot authenticate You and Your request, We will not be able to grant Your request.

Within a reasonable time, not to exceed sixty (60) days, after You have received a notice that We have declined to take action on Your request, You may appeal by sending Your appeal to PRIVACY@STARCOBRANDS.COM with the subject “VCPDA Appeal.” We shall respond to You within sixty (60) days of receipt of the appeal in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision. If We deny Your appeal, You may file a complaint with the Virginia Attorney General at https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint or call (804) 786-2042.