Revision effective and last updated on July 1, 2025

OVERVIEW

As a valued customer, Belly Bandit and our subsidiaries and affiliates (“Belly Bandit,” “we,” “us,” “our”) respects your security concerns and is committed to protecting your privacy. This Privacy Notice describes what personal data is collected, how the information is used, to whom it is disclosed, and the measures taken to safeguard it. This Privacy Notice applies to the personal data collected through our website, third party sources, and our communications with you (collectively, the “Services”).

If you do not agree to the uses and disclosures of information described in this Privacy Notice, you may be able to exercise certain privacy rights described herein, or you can choose not to use our Services.

CALIFORNIA NOTICE AT COLLECTION

If you are a California resident, the sections below include additional information that we provide pursuant to the California Consumer Privacy Act of 2018 as amended from time to time (“CCPA”). Those sections provide information regarding the categories of information to be collected, the purposes for which the categories of information are collected or used, whether the information is sold or shared and how long the information is retained.

WHAT INFORMATION DO WE COLLECT?

We collect a variety of personal data from and about you through the Services, including:

Information You Provide Directly to Us. We collect personal data from you when you provide it directly to us, such as:

• Contact information, such as your name, address, email address, and phone number.
• Payment card information, such as payment card numbers, expiration dates, and security codes.
• Information about your purchases, such as what products you order.
• Any information you provide when you contact us, which may include your email address, any message to us, and any other information you choose to provide.

We may collect information directly from you when you engage in any of the following:

• Submitting an order for our products or services.
• Creating an account.
• Submitting product reviews.
• Subscribing to email communications.
• Participating in promotional programs, including contests, sweepstakes, surveys, or loyalty programs.
• Applying for or inquiring about a job opening.
• Communicating with our customer service team who may assist with purchases or field inquiries.
• Contacting us, including via our website contact form or on our social media pages with a comment, question, or complaint.
• If you contact us with questions, requests, or complaints, or to exercise your legal rights, including through online chat functionality we make available through the Services, we collect any personal data you choose to provide, including personal data necessary for us to answer your questions and address the issue you are contacting us about. The personal data you choose to provide may be accessed, recorded, or otherwise processed by and through our third-party service providers.

Information Collected Automatically.

As you navigate through and interact with the Services, we may use automatic data collection technologies, such as those collected by your browsers or devices, to collect certain information about your browsers and devices, including browsing actions and patterns, including the details of your visits to the Services and information about your computer and internet connection, including your IP address, MAC address, operating system, and browser type.

We may also use available web-based technologies to collect personal data, such as cookies, or web beacons, including such technologies that are provided by third parties. Cookies are pieces of information stored directly on users' computers or devices. Cookies allow us to collect information about your use of and interactions or communications with the Services such as browser type, time spent on the online services, pages visited, referring URL, and other traffic and usage data. That information may be collected by or through third parties, such as our service providers. We may also use cookies for purposes such as determining which features interest our users, revising our site features or operations, and as further described below. For more information about the cookies we use on the Services and your options, see the YOUR CHOICES section below.

The Services may also use other tracking systems such as log files and pixel tags, including such systems that are provided by third parties such as our service providers. For example, pixel tags, sometimes called web beacons, are similar in function to a cookie and can tell us certain information like what content has been viewed. The information collected through log files and pixel tags may be collected by or disclosed to a third party.

We may use data analytics and work with certain third party service providers, such as Google Analytics, to help us understand and improve the use of the Services. These third party service providers may collect information sent by your device as part of a web page request, such as cookies or your IP address. Information about how Google Analytics collects and processes data can be found here: www.google.com/policies/privacy.

We may also use ad networks to serve targeted or cross-context behavioral advertisements across the Internet. These ad networks use cookies, pixel tags, and other tracking technologies to collect information about your online activity and provide online behavioral advertising.

As described in this section, we may allow third parties to use the Services to collect, receive, and use personal information about your online activities over time and across different websites, applications, and other online products or services. Those third parties may receive the information we collect automatically and use it for measurement services, marketing, advertising, and other purposes on behalf of us, their organization, or their other customers, including delivering targeted or cross-context behavioral advertising.

Information Obtained from Third Party Sources. We receive personal data from third parties that we have engaged to provide services to us, including website chat providers, as well as from third parties that provide web analytics and usage information to us such as Google Analytics.

These third-party sources may include:

• Services that make user-generated content from their service available to others, such as reviews on third-party sites or public social media posts.
• Communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks.
• Service providers that help us determine your device's location.
• Partners with which we offer co-branded services or engage in joint marketing activities.
• Partners with whom we share and receive personal information.
• Publicly-available sources, such as open government databases.

HOW DO WE PROCESS PERSONAL DATA?

As a general matter, we collect, use, disclose, and store your information to provide you the Services when we have an appropriate legal basis. We may use the information we collect from you for the following purposes.

1. Your Consent. We process personal data to the extent you provide your consent, such as when we request to process personal information for a purpose that is not already identified by this Privacy Notice. You have choices when it comes to the technology you use and the data you share. When you are asked to provide personal data or consent to processing, you can decline. Many of our products require some personal data to operate and provide you with a service. If you choose not to provide data necessary to operate and provide you with a product or feature, you cannot use that product or feature.
2. Performance of a Contract. We process personal data to enter into, or perform under, the agreement between us, such as processing payments, shipping orders, and responding to support or warranty requests. If you do not provide the data, we will not be able to enter into the contract; or if this relates to an existing order, we may have to cancel it. We will notify you if this is the case at the time. Where providing the data is optional, and you choose not to share personal data, features like personalization that use the data will not work for you.
3. Legitimate Interests. We process personal data for our legitimate interests, consistent with your rights and appropriate to the context, for:

• Processing and fulfilling your orders for our products or services, including processing your payments;
• Providing you with information tailored to your requests, responding to inquiries, and communicating with you about your account, purchases, orders, and use of the Services, such as responding to your comments, questions, and concerns and otherwise administering customer service, including through chat functionality we make available through the Services which may be accessed, recorded, or otherwise processed by or through our third-party service providers;
• Delivering and providing the Services and other products to you and our customers;
• Engaging in and enabling targeted and cross-context behavioral advertising;
• Providing our loyalty and rewards programs, including to redeem rewards points and deliver any free products, discounts, or other perks;
• Storing information about your preferences and customizing your experience on the Services;
• Operating, maintaining, modifying, and improving the quality of the Services and such content, products and/or services as we may make available through the Services, including understanding our audience size and usage patterns and identifying and repairing issues impairing intended functionality;
• Performing analytics;
• Compliance with applicable laws, regulations, rules and requests of relevant law enforcement and/or other governmental agencies and for other administrative and fraud detection purposes;
• Endeavoring to protect and secure the Services, including against fraud and other misuse, and our and our partners' rights, property, or safety, and the rights, property, and safety of our users and other third parties;
• To engage in or enable internal uses consistent with our relationship with you, or compatible with the context in which you provided the information, such as internal research for technology development;
• For marketing and advertising purposes, including targeted or cross-context behavioral advertising, sending messages, such as by email or SMS text message, about us, our partners, and the products and services we and our partners offer, which may from time to time include contests, rewards, events, and special offers for products and services, and personalizing those messages;
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding; and
• For other purposes, as permitted or required by law or as authorized or directed by you.

4. Compliance with Legal Obligations and Protection of Individuals. We may process personal data to comply with the law and our legal obligations, as well as to protect you and other individuals from certain harms.

Disclosure of Personal Data. Some of the above processing may involve disclosing personal data with third parties, including service providers, affiliates, and other partners as described below.

• We may disclose personal data among our affiliated entities and with our subsidiaries;
• We may disclose personal data with our service providers, including payment processors, providers of chat functionality we make available through the Services, software and web developers, order processing and fulfillment services, commercial email providers, security consultants, vendors supporting our loyalty and rewards programs and other loyalty program benefit partners providing program benefits, and other vendors we engage;
• We may disclose personal data we collect with certain business partners or prospective business partners, such as marketing affiliates or distributors;
• We may disclose personal data with third party data partners enabling or participating in targeted and cross-context behavioral advertising and/or providing tracking or analytics technologies, including providers of third party cookies and tracking technologies on our Services and ad networks;
• We may disclose personal data to communicate with you and others, including for marketing purposes, including email and SMS text message communications;
• We may disclose personal data to enforce our Terms of Use and to protect our and our partners' rights, property, or safety, and the rights, property, and safety of our users and other third parties;
• We may disclose personal data to protect and secure the Services, including against fraud and other misuse, and our and our partners' rights, property, or safety, and the rights, property, and safety of our users and other third parties;
• We may disclose personal data with third parties when we believe it is required by, or necessary to comply with, applicable law, a court order, legal process, or other governmental or regulatory requests.
• We may disclose personal data with a buyer or other successor or organization in the event of an actual or potential merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, including as part of bankruptcy, liquidation, or similar proceedings;
• We may disclose personal data for such purposes as you may authorize or direct us, as we otherwise disclose to you, or as necessary to address your requests; and
• We may disclose personal data for the purposes consistent with those described in the HOW DO WE PROCESS PERSONAL DATA? section above.

PROTECTING PERSONAL DATA

We maintain safeguards intended to promote the security of our systems and protect the confidentiality, integrity, availability, and resilience of personal data. Those safeguards may include encryption of personal data where we deem appropriate, and taking steps to ensure personal data is backed up and remains available in the event of a security incident.

However, no method of safeguarding information is completely secure. While we use measures designed to protect personal data, we cannot guarantee that our safeguards will be effective or sufficient. In addition, you should be aware that internet data transmission is not always secure, and we cannot warrant that information you transmit utilizing the Services is or will be secure.

RETENTION OF PERSONAL DATA

We retain personal data for as long as necessary to carry out the processing activities described above, including but not limited to providing the Services or content, products, or other services we make available through the Services, compliance with applicable laws, regulations, rules and requests of relevant law enforcement and/or other governmental agencies, and protecting our and our business partners' and customers' rights, property, or safety, and the rights, property, and safety of our users and other third parties.

YOUR CHOICES

You have choices about certain information we collect, how we communicate with you, and how we process certain personal data. For example, when you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide any aspect of our Services, you may not be able to use those Services. Other examples of your choices, and how to exercise them, are listed below.

Cookie Preferences. You can accept or reject certain cookies for the Services through our Privacy Settings menu available in the lower left corner of our homepage. You can also do so by adjusting your web browser controls.

Tailored Advertising. We currently employ third-party service providers to deliver display and banner ads or links on our behalf, throughout the internet. Our service providers use cookie and pixel technologies to deliver tailored advertising based on your engagement with our website. You may click the preference icon that may appear on some of our display or banner ads to hide future advertisements. You may manage your third-party advertising preferences through our Privacy Settings menu available in the lower left corner of our homepage.

Communications Opt-Out. You may opt out of receiving marketing or other communications from us at any time through a given communications channel (such as email or telephone, including SMS text message) by following the opt-out link or other unsubscribe instructions provided in any email message, SMS text message, or other communication received, by contacting us as provided in the CONTACT INFORMATION AND ASSISTANCE section at the end of this Privacy Notice, or by informing our customer service representatives of your desire to opt out. If you wish to opt out by sending us an email to the address provided below, please include “Opt-Out” in the email's subject line and include your name and the email address you used to sign up for communications in the body of the email. Note that if you do business with us in the future, you may not, subject to applicable law, opt out of certain automated notifications, such as order or subscription confirmations, based on business transactions (e.g. e-commerce).

Location Information. If you want to limit or prevent our ability to receive location information from you, you can deny or remove the permission for certain Services to access location information or deactivate location services on your device. Please refer to your device manufacturer or operating system instructions for instructions on how to do this.

Do Not Track. Some Internet browsers have a “do-not-track” feature that lets you tell online services that you do not want to have your online activities tracked. The Services do not currently respond to browser “do-not-track” signals.

OTHER IMPORTANT INFORMATION ABOUT PERSONAL DATA AND THE SERVICES

Our Privacy Notice also includes information about other practices with respect to personal data, including:

Collection of Personal Data from Children. We do not direct our Services toward children under the age of 13. We also do not intentionally collect, maintain, or request information provided by children under the age of 13. If you are the parent or guardian of a child under the age of 13 and you believe we have inadvertently received information about that child, please contact us as described in the CONTACT INFORMATION AND ASSISTANCE section at the end of this Privacy Notice for assistance.

Third-Party Websites and Services. As a convenience, we may reference or provide links to third-party websites and services, including those of unaffiliated third parties, our affiliates, service providers, and third parties with which we do business. When you access these third-party services, you leave our Services, and we are not responsible for, and do not control, the content, security, or privacy practices employed by any third-party websites and services. You access these third-party services at your own risk This Privacy Notice does not apply to any third-party services; please refer to the Privacy Notices or policies for such third-party services for information about how they collect, use, and process personal data.

International Transfers. Your personal data will be stored and processed in your region, in the United States, and in any other country where Belly Bandit or its affiliates, subsidiaries, or service providers operate. Typically, the primary storage location is in the customer's region or in the United States, often with a backup to a data center in another region. By your use of the Services you acknowledge that we will transfer your data to, and store your personal data in, jurisdictions which may have different data protection rules than in your country, and personal data may become accessible as permitted by law in those territories, including to law enforcement and/or national security authorities in those territories.

When we transfer personal data originating in the European Economic Area, Switzerland, or the United Kingdom to entities located outside the territory in which the personal data originates, we will rely on a legal framework that provides appropriate safeguards, which could include the standard contractual clauses, binding corporate rules, or frameworks deemed adequate by the European Commission or other data protection authorities.

MODIFICATIONS AND UPDATES TO THIS PRIVACY NOTICE

We reserve the right, in our sole discretion, to modify, update, remove, or otherwise change our Privacy Notice at any time and without prior notice in order to reflect changes regarding our information practices. This Privacy Notice replaces any previous disclosures we may have provided to you about our information practices. We will notify you of an updated Privacy Notice by posting the changes on our website with the updated effective date.

ADDITIONAL INFORMATION FOR RESIDENTS OF THE EUROPEAN ECONOMIC AREA, SWITZERLAND, OR THE UNITED KINGDOM

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you may have rights in respect of their personal data. These rights may include, depending on the circumstances surrounding the processing of personal data:

• The right to object to or request restriction of processing of personal data or object to processing of personal data carried out pursuant to (i) a legitimate interest or (ii) performance of a task in the public interest;
• The right to access your personal data and other information about our processing of your personal data;
• The right to correct inaccurate personal data about you that we process;
• The right to data portability, which means that you can request that we provide certain personal data we hold about you in a format you can more readily use;
• The right to erasure, which means that you can request deletion or removal of certain personal data we process about you;
• Where processing of personal data about you is based on consent, the right to withdraw your consent to such processing; and
• The right to lodge a complaint with a supervisory authority.

You may exercise these rights, to the extent they apply, by contacting us as provided at the end of this Privacy Notice, or by following instructions provided in this Privacy Notice or in communications sent to you. Please be prepared to provide reasonable information to identify yourself and authenticate your request.

ADDITIONAL INFORMATION FOR RESIDENTS OF CANADA

Residents of Canada are permitted to request and obtain from us information respecting the existence, use, and disclosure of their personal data as well as access to that information (subject to certain exceptions pursuant to applicable laws). Without limiting the above, residents of Canada will, upon request:

• Be informed of whether we hold personal data about you;
• Be provided with an account of third parties to which we have disclosed your personal data;
• Be able to challenge the accuracy and completeness of your personal data and have it amended as appropriate; and
• Be provided with information about our policies and practices with respect to the management of personal data.

ADDITIONAL INFORMATION FOR RESIDENTS OF CALIFORNIA, COLORADO, CONNECTICUT, DELAWARE, IOWA, INDIANA, KENTUCKY, MARYLAND, MINNESOTA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, RHODE ISLAND, TENNESSEE, TEXAS, UTAH and VIRGINIA

The US states of California, Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have laws that do or will require additional privacy information to be shared with residents of those states (“consumers” or “you”). This section supplements the rest of our Privacy Notice by providing certain additional information and describing certain rights that apply only to these consumers. This section of the Privacy Notice only applies to personal data subject to the requirements of the laws referenced above (“Personal Data”) and does not apply to data, such as deidentified data, not subject to those requirements.

Personal Data We Collect and Process. We may have collected and processed the following categories of Personal Data regarding consumers within the last 12 months:

• Identifiers such as your real name and email address, alias, postal address, zip code, telephone number, account name, payment card numbers, or other similar identifiers
• Unique and online identifiers such as device identifiers, internet protocol addresses, cookie identifiers, beacon identifiers, pixel tags or mobile ad identifiers or similar technology, or other forms of persistent or probabilistic identifiers that can be used to identify a particular consumer or device
• Commercial information that identifies or could reasonably be linked to you, such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
• Internet or other electronic network activity information identifies or could reasonably be linked to you, such as browsing history, search history and information regarding an individual's interaction with an internet website, application, or advertisement
• Geolocation information, such as your approximate geographic location as derived from your IP address
• Protected classification characteristics under California or federal law, which includes age if 40 years older, citizenship, and veteran or military status.
• Inferences drawn from Personal Data, such as person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.
• Personal Data categories covered by the laws this section is intended to address, such as name, signature, address, telephone number, or bank account number, credit card number, debit card number, or any other financial information. Some Personal Data included in this category may overlap with other categories.
• Sensitive Personal Data as defined by applicable law:
• Personal Data that reveals: A financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.

We will retain the Personal Data we collect and process as described in the RETENTION OF PERSONAL DATA section above.

Sources of Personal Data. We may obtain the categories of Personal Data that we collect and process as indicated above from the following categories of sources.

• Directly from you. For example, through website forms you complete or ordering our products and services.
• Automatically and indirectly from you, such as through logging and analytics tools, cookies, pixel tags, and other automatic data collection.
• From third parties, such as our service providers, consumer data resellers, services that make user-generated content available to others, communications services, social networks and social media online services, affiliates, and other business partners.

Use of Personal Data. We may collect, use, or otherwise process the categories of Personal Data that we collect and process, as described above, for one or more of the business purposes and commercial purposes described in the HOW DO WE PROCESS PERSONAL DATA? section above. Notwithstanding the foregoing we do not process Sensitive Personal Data as defined by applicable law for purposes of inferring characteristics about you.

Personal Data Disclosures. We may disclose the categories of Personal Data that we collect and process as indicated above to the categories of third parties described in the HOW DO WE PROCESS PERSONAL DATA? section above. In the preceding 12 months, we may have disclosed the categories of Personal Data listed below to the categories of third parties listed below for a business purpose:

• Identifiers such as your real name and email address—to our affiliates, service providers, data partners, and such third parties as you may authorize.
• Unique and online identifiers—to our affiliates, service providers, data partners, and such third parties as you may authorize.
• Commercial information—to our affiliates, service providers, data partners, and such third parties as you may authorize
• Internet or other electronic network activity information—to our affiliates, service providers, data partners, and such third parties as you may authorize
• Geolocation information—to our affiliates, service providers, data partners, and such third parties as you may authorize.
• Protected classification characteristics under California or federal law—to our affiliates, service providers, and such third parties as you may authorize.
• Inferences drawn from Personal Data—to our affiliates, service providers, data partners, and such third parties as you may authorize.
• Personal Data categories covered by the laws this section is intended to address—to our affiliates, service providers, data partners, and such third parties as you may authorize.
• Sensitive Personal Data—to our affiliates, service providers, and such third parties as you may authorize. However, we do not disclose Sensitive Personal Data as defined by applicable law for purposes of inferring characteristics about you.

Categories of Personal Data Shared with or Sold to Third Parties. We do not disclose Personal Data to third parties in exchange for monetary consideration (e.g. a cash payment). However, some applicable laws define “sale” very broadly in a manner that includes disclosing Personal Data in exchange for valuable consideration, and also regulate “sharing” and use of Personal Data for targeted or cross-context behavioral advertising. Under those laws, we may sell or share, and in the preceding 12 months, we may have sold to third parties, or shared with third parties for cross-context behavioral advertising, the following categories of Personal Data:

• Identifiers such as your real name and email address, alias, postal address, zip code, telephone number, account name, payment card numbers, or other similar identifiers
• Unique and online identifiers such as device identifiers, internet protocol addresses, cookie identifiers, beacon identifiers, pixel tags or mobile ad identifiers or similar technology, or other forms of persistent or probabilistic identifiers that can be used to identify a particular consumer or device
• Commercial information that identifies or could reasonably be linked to you, such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
• Internet or other electronic network activity information identifies or could reasonably be linked to you, such as browsing history, search history and information regarding an individual's interaction with an internet website, application, or advertisement
• Geolocation information, such as your specific, real-time physical location or precise movements while you access our sites or apps if you have enabled location services on your device
• Inferences drawn from Personal Data, such as person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.
• Personal information categories covered by the laws this section is intended to address, such as name, address, telephone number.

We may have sold or shared each of these categories of Personal Data with third parties such as our data partners, advertising networks that enable or participate in targeted and cross-context behavioral advertising, social media platforms, and analytics partners that provide online tracking technologies that we use to analyze use of the Services.

We do not have actual knowledge that we sell the Personal Data of consumers under the age of 16 or share the personal information of consumers under the age of 16 for targeted or cross-context behavioral advertising.

Personal Data Rights and Choices. We have described below some privacy rights we offer to you and others. Where the rights described below are provided by law, there may be limitations or exceptions that apply to your request in accordance with applicable legal requirements. We have described these rights generally, without noting all applicable or potentially applicable limitations or exceptions, which may include that you do not reside in a state where these rights are made available by law. When you make a request, we may provide more detailed information regarding any legal requirements applicable to or your request and whether any exception or limitation applies.

Right to Opt Out of Our Sale, Sharing, or Processing of Personal Data for Targeted or Cross-context Behavioral Advertising. You have the right to request to opt out of our sale, sharing and/or processing of your Personal Data for targeted or cross-context behavioral advertising, which means displaying advertising to you based on personal data obtained or inferred from your activities over time across different websites, applications, and other online services we do not operate. You may exercise this right by visiting the following link: Do Not Sell or Share My Personal Information.

We have also configured our Services to process opt-out preference signals that may allow you to inform us of your desire to opt out of sales or sharing as described in the above paragraph. Opt-out preference signals must be in a format commonly used and recognized by businesses and be delivered by a platform, technology, or mechanism that makes clear to consumers that the use of the signal is meant to have the effect of opting the consumer out of sales and sharing of Personal Data as described above. If you do not have an account with us or are not logged into your account, your opt-out preference signal will be linked to your browser identifier only and may not be linked to other Personal Data, such as account information, about you that we process that is not associated with your browser identifier.

If we receive an opt-out preference signal from you, we may offer you the option to provide additional information to help facilitate your opt-out request. We may also notify you if an opt-out preference signal we receive from you conflicts with your privacy settings or participation in certain programs we offer, and request your consent to sales or sharing of Personal Data or to affirm your intent to withdraw from any relevant programs.  

Even if you opt out of or sharing or processing of your Personal Data for targeted or cross-context behavioral advertising, you may still see our ads online at other sites and apps, and we may still base aspects of ads on your interactions with us and the Services.

Processing Confirmation, Access to Personal Data, and Data Portability Rights. You have the right to request that we confirm that we process your Personal Data, or to ask us for a copy of the Personal Data we have collected about you.

Deletion Request Rights. Subject to certain exceptions, you have the right to request that we delete the Personal Data that we collected about you. Once we receive and review your request, we will delete your Personal Data from our records, unless an exception applies.

Your Right to Ask Us to Correct Your Personal Data. You can ask us to correct information about you that is inaccurate. We will take into account the nature of the Personal Data and the purposes of our processing when we address your request.

Your Right to Limit Our Use of Your Sensitive Personal Data. You may limit our use of your Sensitive Personal Data to only uses that are reasonably necessary to perform services or provide goods by opting out. Your opt out does not apply to any Sensitive Personal Data that we have not used to make inferences about you.

Your Right to Limit Our Use of Your Personal Data for Profiling. Under applicable law, “profiling” means automated processing performed on Personal Data to evaluate, analyze, or predict personal aspects of a person's economic situation, health, personal preferences, interests, reliability, behavior, location, or movements. If and to the extent we engage in such processing that could produce legal or similarly significant effects concerning you, you may request to opt-out of such processing.

Delaware, Maryland, Minnesota, and Oregon – Your Right to Obtain Information Regarding Third-Party Disclosures. Delaware, Maryland, Minnesota, and Oregon residents may have the right to obtain information regarding the third parties to whom we have disclosed Personal Data.

Maryland – Your Right to Withdraw Consent. To the extent we require consent to process your Personal Data, you have the right to revoke your consent by communicating your choices through tools like our clicking our Privacy Settings menu available in the lower left corner of our homepage or contacting us as described in the CONTACT INFORMATION AND ASSISTANCE section of this Privacy Notice below.

California Right to Request Information About Our Practices Regarding Personal Data About You That We Collect and Share. California residents who have an established business relationship with us may request information regarding third parties, if any, to whom we may have disclosed personal information (as defined by Cal. Civ. Code. § 1798.83(e)(7)) for the direct marketing purposes of those third parties during the preceding calendar year. Requests may be made only once per year per person. To submit a request, send an email or letter to addresses provided in the CONTACT INFORMATION AND ASSISTANCE section at the end of this Privacy Notice.

In addition, if you are a California resident, you have the right to request we disclose certain information to you about our collection, use, and disclosure of your Personal Data during the applicable time period for your request. If we receive and confirm a verifiable consumer request from you pursuant to the Exercising Your Rights section below, we will disclose one or all of the following depending on the scope of the request:

• The categories of Personal Data we collected about you.
• The categories of sources for the Personal Data we collected about you.
• Our business or commercial purpose for collecting Personal Data about you, selling Personal Data about you, or sharing Personal Data about you for cross-context behavioral advertising.
• The categories of third parties to whom we disclose Personal Data.
• The specific pieces of Personal Data we collected about you.
• If we sell Personal Data about you, share Personal Data about you for cross-context behavioral advertising purposes, or otherwise disclose Personal Data about you a list of the categories of third parties to whom we sold Personal Data, shared Personal Data for cross-context behavioral advertising purposes, or disclosed Personal Data about that identifies the categories of Personal Data about you that we sold, shared for cross-context behavioral advertising purposes, or disclosed to those third parties during the applicable period of time for your request.

Exercising Your Rights. To exercise any of your rights described above, or appeal if we do not fulfill your request, please submit a request to us by:

• Calling 888-416-4888; or

• Sending an email to support@bellybandit.com with your first name, last name, and email address, and a detailed explanation of your request.

Only you, or an authorized representative that you authorize to act on your behalf, may make a request related to your Personal Data. You may also make a verifiable consumer request on behalf of your minor child.

Your request must provide information sufficient to permit us to reasonably verify you are the person about whom we collected Personal Data, or an authorized representative of that person. In order to verify your request, we may ask you to provide information such as your first and last name, email address, mailing address, telephone number, or any other information necessary to verify your identity or status as a representative of the person. Your request also must include sufficient detail for us to properly understand, evaluate, and respond to it.

If we cannot fulfill, or are permitted to decline, your request then we will alert you or your authorized representative. We may charge a reasonable fee to respond in certain circumstances where permissible under applicable law, such as if you have made several repetitive requests. For data portability requests, we will select a format to provide your Personal Data that is readily usable.

In certain situations, if we do not fulfill your request, you may appeal by contacting us through the methods described above.

Non-Discrimination. You have a right to not receive discriminatory treatment for exercising rights described above.

Notice of Financial Incentive and Loyalty Programs for California and Colorado Residents. We offer a voluntary loyalty program that provides customers who choose to sign up the opportunity to earn points that can be redeemed for free products, discounts, and other perks. We may also offer other programs that offer similar benefits, such as a discount code if you join our mailing list. When you sign up for our loyalty program, we will ask you to provide your name and contact information, such as your email address and/or telephone number.

Because we ask you to provide personal information when you sign up for these programs and you receive benefits, including potential financial benefits, such as free products, discounts, and other perks, when you participate in them, these programs may be considered a “financial incentive” under the CCPA or a “bona fide loyalty program” under Colorado law. The value of the personal information we collect through these programs is inherently variable and depends on each participant's purchasing and reward redemption activity. We estimate, however, that the value of the personal information we collect from each program participant is equivalent to the expenses related to our providing the program to that program participant, including the cost of discounts, free products, and other perks that the participant earns, and the value of discounts on any purchases made by the participant that are related to their participation in the program.

We may disclose the data we collect through these programs to our affiliates, service providers, loyalty program benefit partners providing program benefits, such as brands and retailers we work with, and such third parties as you may authorize. To our knowledge, none of those parties knowingly collect and sell personal information of consumers with which the party does not have a direct relationship to third parties.

Depending on the nature of the programs in which you participate, our loyalty program benefit partners may provide benefits such as discounts, free products, preferred terms, or other perks to our loyalty program participants.

You may request to withdraw from these programs at any time by contacting us as described in the CONTACT INFORMATION AND ASSISTANCE section at the end of this Privacy Notice or as otherwise provided in other terms or conditions that govern the applicable program.

In some cases, deleting personal information may prevent us from providing you benefits of these programs. For example, if you delete your contact information from your account or we delete your contact information in response to your request, we will not be able to contact you to provide discount codes or other benefits.

THIRD PARTY LINKS AND SOCIAL MEDIA

We may link to non-affiliated third-party websites. We do not endorse or have any official affiliation with these third parties, but provide links as a general convenience. Accessing and visiting the linked sites is done at your own risk, and upon exit of bellybandit.com your personal information will be subject to the individual privacy policy of the linked site(s). We strongly encourage you to read and understand the privacy policy and terms of service of linked site(s). Please be advised that anything shared with us through a social media channel is subject to the privacy policies of that social media channel.

DEIDENTIFIED DATA

If we process Personal Data to create deidentified information, we will maintain and use such deidentified information in deidentified form and will not attempt to reidentify such deidentified information except to the extent permitted by applicable law. We process Personal Data as described in this privacy policy.

CONTACT INFORMATION AND ASSISTANCE

If you have any questions or concerns about this Privacy Notice and/or how we process personal data, or would like to exercise any applicable legal rights set forth above, please contact us at:

Email: support@bellybandit.com

Phone: 888-416-4888

Belly Bandit
c/o Privacy
2041 East St., Suite 831,
Concord, CA 95420