PRIVACY POLICY

Effective Date: May 30, 2025
Last Updated: May 30, 2025

OVERVIEW

This Privacy Policy describes how Stimara, Inc., a Delaware corporation ("Stimara," "we," "us," or "our") collects, uses, processes, and discloses your personal information when you visit, use, or make a purchase from www.Stimara.com (the "Site") or otherwise interact with our services.

This Privacy Policy applies to all information collected through our Site, email communications, text messages, and any related services, sales, marketing, or events (collectively, the "Services").

BY USING OUR SERVICES, YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY.

In addition, you agree to our Messaging Terms and Messaging Privacy Policy.

CONTACT INFORMATION

If you have questions about this Privacy Policy, want more information about our privacy practices, or would like to make a complaint, please contact us:

Stimara, Inc.
Email: support@stimara.com
Address: 816 West Francis Ave #1016, Spokane, WA 99205-6512, United States

INFORMATION WE COLLECT

We collect information about you in various ways when you use our Services. As our business and technology evolve, we may collect additional types of information consistent with this Privacy Policy and applicable law. We refer to any information that identifies, relates to, describes, or is capable of being associated with an identifiable individual as "Personal Information."

1. Information You Provide Directly

Account and Order Information:

• Name, email address, phone number
• Billing and shipping addresses
• Payment information (processed securely by our payment processors)
• Order history and preferences
• Communication preferences

Customer Service Information:

• Information you provide when contacting customer support
• Feedback, reviews, and survey responses
• Communication records and correspondence

Marketing and Social Media:

• Information from social media interactions
• Contest, sweepstakes, or promotion entries
• Newsletter subscriptions and marketing preferences

2. Information Collected Automatically

Device and Technical Information:

• IP address, browser type and version, operating system
• Device identifiers, screen resolution, time zone settings
• Referring website, pages visited, time spent on pages
• Search terms used on our Site
• Geographic location (general area based on IP address)

Usage and Analytics Data:

• How you navigate and interact with our Site
• Products viewed, items added to cart, purchase behavior
• Email engagement (opens, clicks, forwards)
• Website performance and error information

Cookies and Tracking Technologies:

• Information collected through cookies, web beacons, pixels, and similar technologies
• Session data, preferences, and authentication information

3. Information from Third Parties

Service Providers:

• Information from our payment processors, shipping partners, and other service providers
• Analytics and advertising platform data

Social Media and Advertising:

• Information from social media platforms when you interact with our content
• Data from advertising networks and marketing partners

Public Sources:

• Publicly available information that supplements other data we have about you

HOW WE USE YOUR INFORMATION

We use your Personal Information for the following purposes, which may expand as our business grows:

Service Provision and Order Fulfillment

• Processing and fulfilling your orders
• Payment processing and fraud prevention
• Shipping and delivery coordination
• Customer service and support
• Account management and authentication
• Product recommendations and personalization

Marketing and Communications

• Sending promotional emails and newsletters (with your consent)
• SMS marketing and communications (with your consent)
• Personalized product recommendations and offers
• Marketing campaign analysis and optimization
• Social media engagement and advertising
• Affiliate and influencer marketing programs
• Cross-platform advertising and retargeting

Business Operations and Analytics

• Website optimization and performance improvement
• Analytics and reporting for business insights
• Product development and improvement
• Market research and trend analysis
• Customer behavior analysis and segmentation
• Business intelligence and data analytics
• A/B testing and conversion optimization

Legal, Security, and Compliance

• Compliance with legal obligations and regulations
• Fraud detection and prevention
• Security monitoring and threat protection
• Dispute resolution and legal proceedings
• Protecting our rights, property, and interests
• Risk assessment and management

Additional Business Purposes

• Other purposes consistent with this Privacy Policy
• Purposes disclosed at the time of collection
• Purposes for which you provide consent
• Purposes reasonably necessary for our business operations

We may use your Personal Information for additional purposes as our business evolves, provided such uses are consistent with this Privacy Policy and applicable law.

LEGAL BASIS FOR PROCESSING (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your Personal Information under the following legal bases:

• Consent: When you have given clear consent for specific processing activities
• Contract Performance: To fulfill our contractual obligations with you
• Legitimate Interests: For our legitimate business interests that don't override your rights
• Legal Compliance: To comply with applicable laws and regulations
• Vital Interests: To protect your or someone else's life or safety

SHARING YOUR INFORMATION

We may share your Personal Information in the following circumstances:

Service Providers and Business Partners

We share your Personal Information with various service providers and business partners to operate our business and provide our Services. These may include, but are not limited to:

• E-commerce Platform: Shopify and other platform providers
• Order Fulfillment: Shipfusion, Hive, and other fulfillment partners
• Payment Processing: Payment processors, fraud prevention services, and financial institutions
• Shipping and Logistics: Shipping companies, logistics providers, and delivery services
• Analytics and Data: Google Analytics, Meta Analytics, Triple Whale, and other analytics providers
• Marketing and Communications: Email marketing (Klaviyo, Postscript), SMS providers, advertising platforms, and marketing automation tools
• Customer Service: Support platforms, chat services, help desk tools, and communication systems
• Technology Services: Cloud hosting, security services, backup providers, and other technical infrastructure
• Business Intelligence: Data analysis tools, reporting platforms, and business optimization services
• Legal and Professional: Attorneys, accountants, auditors, and other professional service providers

This list is not exhaustive, and we may engage additional service providers as our business evolves. All service providers are contractually required to protect your Personal Information and use it only for the purposes we specify.

Advertising and Marketing

We may share your Personal Information with advertising and marketing partners, which may include, but are not limited to:

• Social Media Platforms: Meta (Facebook/Instagram), TikTok for Business, Reddit Ads, X (Twitter) Ads, Pinterest Business, Snapchat Ads, LinkedIn Ads, YouTube Ads, and other social media advertising platforms
• Search and Display Advertising: Google Ads, Microsoft (Bing) Ads, Amazon DSP, Apple Search Ads, and other search and display advertising networks
• Programmatic and Retargeting: Criteo, The Trade Desk, and other programmatic advertising platforms
• Native and Content Advertising: Taboola, Outbrain, and other native advertising networks
• Email and SMS Marketing: Email service providers, SMS marketing platforms, and marketing automation tools
• Affiliate and Influencer Networks: Affiliate marketing platforms, influencer marketing tools, and partnership networks
• Other Advertising Partners: Additional advertising networks, marketing platforms, and promotional partners as we expand our marketing efforts

This list is not exhaustive, and we may work with additional advertising and marketing partners as our business grows. All partners are required to comply with applicable privacy laws and our data protection requirements.

Legal and Business Transfers

• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Protection of Rights: To protect our rights, property, or safety
• Consent: When you have given explicit consent

Aggregate and De-identified Data

We may share aggregate, anonymous, or de-identified information that cannot reasonably be used to identify you.

DATA RETENTION

We retain your Personal Information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal, accounting, or reporting requirements
• Resolve disputes and enforce our agreements
• Protect against fraudulent or illegal activity

Specific Retention Periods:

• Order Information: 7 years for tax and legal compliance
• Marketing Data: Until you unsubscribe or withdraw consent
• Analytics Data: Up to 26 months (Google Analytics default)
• Customer Service Records: 3 years after last interaction
• Account Information: Until account deletion is requested

YOUR PRIVACY RIGHTS

Depending on your location, you may have the following rights regarding your Personal Information:

Universal Rights

• Access: Request information about how we process your Personal Information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your Personal Information (subject to legal exceptions)
• Portability: Request a copy of your data in a structured format
• Objection: Object to certain types of processing

California Residents (CCPA/CPRA)

• Right to Know: Categories and specific pieces of Personal Information collected
• Right to Delete: Request deletion of Personal Information
• Right to Correct: Request correction of inaccurate Personal Information
• Right to Opt-Out: Opt-out of sale/sharing of Personal Information
• Right to Limit: Limit use of sensitive Personal Information
• Non-Discrimination: Protection against discriminatory treatment

EEA/UK/Swiss Residents (GDPR)

• Withdraw Consent: Withdraw consent for consent-based processing
• Data Portability: Receive your data in a machine-readable format
• Restrict Processing: Request limitation of processing activities
• Lodge Complaints: File complaints with supervisory authorities

To Exercise Your Rights: Contact us at support@stimara.com with your request. We will verify your identity and respond within the timeframes required by applicable law.

CHILDREN'S PRIVACY

Our Services are not intended for individuals under 18 years of age. Due to safety regulations regarding magnetic products, our products are specifically not suitable for children under 14 years of age.

We do not knowingly collect Personal Information from children under 18. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us immediately at support@stimara.com, and we will take steps to remove such information.

COOKIES AND TRACKING TECHNOLOGIES

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your use of our Services and to provide personalized experiences.

Types of Cookies We Use

Essential Cookies: Required for basic Site functionality Analytics Cookies: Help us understand Site usage and performance Marketing Cookies: Enable personalized advertising and marketing Preference Cookies: Remember your settings and preferences

Third-Party Cookies

Our Site may contain cookies, pixels, tags, and other tracking technologies from third parties, including but not limited to:

• Analytics and Performance: Google Analytics, Meta Analytics, Triple Whale, Shopify analytics, and other analytics providers
• Advertising Platforms: Google Ads, Meta (Facebook/Instagram) Pixel, Microsoft Bing Ads, TikTok Pixel, Reddit Pixel, X (Twitter) advertising tools, Pinterest Tag, Snapchat Pixel, LinkedIn Insight Tag, Amazon advertising pixels, Apple advertising identifiers, and other advertising platform tracking tools
• Marketing Automation: Klaviyo email marketing tracking, Postscript SMS and email tracking, and other marketing automation tools
• Retargeting and Programmatic: Criteo advertising tags, Taboola advertising pixels, Outbrain advertising pixels, The Trade Desk advertising tools, and other retargeting platforms
• Additional Third-Party Tools: Other cookies and tracking technologies from service providers, marketing partners, and business tools as we implement new technologies and services

This list is not exhaustive, and we may implement additional third-party tracking technologies as our business and technology stack evolves. We will update this policy periodically to reflect significant changes in our tracking practices.

Cookie Management

You can control cookie settings through your browser preferences. Note that blocking certain cookies may impact Site functionality.

Opt-Out Links:

• Google: https://www.google.com/settings/ads/anonymous
• Facebook: https://www.facebook.com/settings/?tab=ads
• Microsoft: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
• TikTok: https://www.tiktok.com/safety/privacy/ads-and-data
• Reddit: https://www.reddit.com/personalization
• X (Twitter): https://twitter.com/en/privacy
• Pinterest: https://help.pinterest.com/en/article/personalization-and-data
• Snapchat: https://snap.com/en-US/privacy/your-privacy#control-over-your-information
• LinkedIn: https://www.linkedin.com/psettings/advertising
• Amazon: https://www.amazon.com/adprefs
• Apple: https://support.apple.com/en-us/HT202074
• General Opt-Out: https://optout.aboutads.info/

INTERNATIONAL DATA TRANSFERS

Your Personal Information may be transferred to and processed in countries other than your country of residence, including the United States and Canada, which may have different data protection laws.

When we transfer Personal Information internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions by regulatory bodies
• Other legally recognized transfer mechanisms

DATA SECURITY

We implement appropriate technical and organizational security measures to protect your Personal Information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and monitoring
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your Personal Information, we cannot guarantee absolute security.

CALIFORNIA PRIVACY RIGHTS

Sale and Sharing of Personal Information

Under California law, we may "sell" or "share" Personal Information as those terms are defined by the CCPA. This includes sharing information with advertising partners for targeted advertising purposes.

Categories of Personal Information Sold/Shared:

• Identifiers (email, IP address, device IDs)
• Commercial information (purchase history, preferences)
• Internet activity (browsing behavior, interactions)
• Geolocation data (general location)
• Inferences (preferences, characteristics)

Opt-Out: You can opt-out of the sale/sharing of your Personal Information by:

• Visiting our "Do Not Sell My Personal Information" page
• Emailing us at support@stimara.com
• Using the opt-out links provided in our marketing communications

Sensitive Personal Information

We may collect and use the following sensitive Personal Information:

• Precise geolocation (only with your consent)
• Financial account information (for payment processing)

You have the right to limit our use of sensitive Personal Information to what is necessary to provide our Services.

EUROPEAN PRIVACY RIGHTS

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at: support@stimara.com

Supervisory Authority

If you are located in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects for you. Our service providers may use automated fraud detection systems that do not have significant effects on you.

UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our Site with a new effective date
• Sending email notifications to registered users (for significant changes)
• Providing notice through our Services or other communication methods

Your continued use of our Services after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Stimara, Inc.
Privacy Officer
Email: support@stimara.com
Address: 816 West Francis Ave #1016, Spokane, WA 99205-6512, United States

For California residents: You may also contact us to request information about whether we have disclosed your Personal Information to third parties for their direct marketing purposes.

---

This Privacy Policy was last updated on May 30, 2025 and is effective immediately.