SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find more details by clicking the link following each key point or using our table of contents below.

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.
• Do we process any sensitive personal information? We do not process sensitive personal information.
• Do we collect any information from third parties? We do not collect any information from third parties.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. Learn more about how we process your information.
• In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties, such as ad networks for targeted advertising. Learn more about when and with whom we share your personal information.
• How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Learn more about how we keep your information safe.
• What are your rights? Depending on where you are located, applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.
• How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request or contacting us at info@forrowan.com. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the Privacy Notice in full below.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
7. HOW LONG DO WE KEEP YOUR INFORMATION?
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
9. DO WE COLLECT INFORMATION FROM MINORS?
10. WHAT ARE YOUR PRIVACY RIGHTS?
11. CONTROLS FOR DO-NOT-TRACK FEATURES
12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
13. ABANDONED CARTS AND OTHER MESSAGES
14. DO WE MAKE UPDATES TO THIS NOTICE?
15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Disclose to Us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or contact us.

Personal Information Provided by You. The personal information we collect depends on your interactions with us, the choices you make, and the products and features you use. This may include:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Usernames
• Passwords
• Billing addresses
• Debit/credit card numbers

Sensitive Information. We do not process sensitive personal information, such as racial or ethnic origins, sexual orientation, or religious beliefs.

Payment Data. We may collect data necessary to process payments if you make purchases, such as your payment instrument number and security code. All payment data is handled and stored by Shopify. See their privacy notice at https://www.shopify.com/legal/privacy.

Social Media Login Data. We may offer registration using social media account details (e.g., Facebook, X). If you choose this option, we collect profile information as described in “HOW DO WE HANDLE YOUR SOCIAL LOGINS?”.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes to such information.

Information Automatically Collected

In Short: Some information—such as your IP address and/or browser and device characteristics—is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate our Services. This does not reveal your specific identity but may include:

• Log and Usage Data: Service-related, diagnostic, usage, and performance information (e.g., IP address, browser type, pages viewed, date/time stamps).
• Device Data: Information about your device (e.g., IP address, operating system, browser type, hardware model).
• Location Data: Imprecise location data based on your IP address. You can opt out by disabling location settings, though this may affect certain features.

We also use cookies and similar technologies (e.g., web beacons, pixels) for security, analytics, and advertising. See our Cookie Notice at https://forrowan.com/pages/cookie-policy.

Google API: Our use of information from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for purposes including:

• Facilitating account creation and authentication.
• Requesting feedback about our Services.
• Sending marketing and promotional communications (with your consent; see opt-out details in “WHAT ARE YOUR PRIVACY RIGHTS?”).
• Delivering targeted advertising tailored to your interests.
• Identifying usage trends to improve our Services.
• Determining the effectiveness of marketing campaigns.
• Protecting vital interests (e.g., preventing harm).

SMS Marketing Consent

If you provide your phone number for SMS marketing, we obtain your express written consent through an unchecked checkbox on our sign-up form, in compliance with the Telephone Consumer Protection Act (TCPA). You can opt out by replying “STOP” or “UNSUBSCRIBE” to our SMS messages or contacting us at info@forrowan.com.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (e.g., consent, legal obligations, legitimate interests).

If you are in the EU or UK, we rely on:

• Consent: For specific purposes, which you can withdraw at any time.
• Legitimate Interests: For purposes like marketing, analytics, or improving user experience, where these do not outweigh your rights.
• Legal Obligations: To comply with laws or litigation.
• Vital Interests: To protect safety.

If you are in Canada, we rely on express or implied consent, or process without consent in cases like fraud prevention or legal compliance (e.g., subpoenas).

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information with specific third parties for business purposes, such as targeted advertising.

We share your data with third-party vendors, service providers, or contractors who perform services for us, including:

• Categories of Third Parties:
• Affiliate Marketing Programs
• Ad Networks (e.g., Meta, Google for targeted advertising)
• Performance Monitoring Tools
• Retargeting Platforms
• Social Networks
• User Account Registration & Authentication Services

We may share personal information, such as email addresses and browsing data, with ad networks (e.g., Meta, Google) for targeted advertising, which may constitute “sharing” under California law. You can opt out via our “Do Not Sell/Share My Personal Information” link at https://forrowan.com/pages/contact or by emailing info@forrowan.com.

We may also share information during business transfers (e.g., mergers, acquisitions).

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We use cookies and tracking technologies for security, analytics, and advertising.

We use cookies, web beacons, and pixels (e.g., Meta Pixel, Google Analytics) to maintain security, prevent crashes, save preferences, and deliver targeted ads. Third parties use these technologies for analytics and advertising, including abandoned cart reminders. If this constitutes a “sale” or “sharing” under U.S. state laws, you can opt out (see “DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?”).

For details, see our Cookie Notice at https://forrowan.com/pages/cookie-policy. To opt out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout.

6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you use social media to log in, we may access certain profile information.

If you register using social media accounts (e.g., Facebook, X), we receive profile information (e.g., name, email, profile picture) from the provider. We use this only for purposes in this Privacy Notice. Review the provider’s privacy notice for their data practices.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information only as long as necessary, unless required by law.

We retain personal information for the purposes outlined in this Privacy Notice, typically for as long as you have an account with us, unless a longer retention period is required (e.g., for tax or legal purposes). When no longer needed, we delete or anonymize your information.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We use reasonable security measures to protect your information, but no system is 100% secure.

We implement technical and organizational measures to secure your personal information. However, no internet transmission or storage is fully secure, so we cannot guarantee against unauthorized access. Use our Services in a secure environment.

9. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18.

We do not knowingly collect or market to children under 18. For residents of Maryland and New Jersey, we do not use personal information from minors under 18 for targeted advertising, in compliance with state laws effective in 2025. If you are a parent or guardian and believe we have collected minor data, contact us at info@forrowan.com to deactivate accounts and delete data.

10. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your residence, you have rights to access, correct, or delete your personal information.

In regions like the EEA, UK, Switzerland, and Canada, you may have rights to:

• Request access to or a copy of your personal information.
• Request rectification or erasure.
• Restrict processing or request data portability.
• Object to processing or automated decision-making.

To exercise these, contact us at info@forrowan.com. You can opt out of marketing communications by clicking unsubscribe links in emails, replying “STOP” to SMS, or contacting us. No mobile information is shared with third parties for marketing purposes.

If in the EEA/UK, you can complain to your data protection authority. In Switzerland, contact the Federal Data Protection and Information Commissioner.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers offer a Do-Not-Track (DNT) feature, but no uniform standard exists. We do not currently respond to DNT signals, as permitted by California law. If a standard is adopted, we will update this Privacy Notice.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Residents of certain U.S. states have rights to access, correct, delete, or opt out of personal data processing.

If you reside in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights to:

• Know whether we process your personal data.
• Access or correct your personal data.
• Request deletion or a copy of your data.
• Opt out of targeted advertising, data sales, or profiling with legal effects.
• Avoid discrimination for exercising rights.

Additional rights in some states include:

• Accessing categories of personal data processed (e.g., Minnesota).
• Obtaining lists of third parties receiving data (e.g., California, Delaware, Maryland).
• Reviewing profiling processes (e.g., Minnesota).
• Limiting sensitive data use (e.g., California).
• Opting out of voice/facial recognition data (e.g., Florida).

Categories of Personal Information We Collect

We collect and share data through targeting cookies, social media cookies, and pixels for purposes in “HOW DO WE PROCESS YOUR INFORMATION?”.

How We Use and Share Personal Information

In the past 12 months, we have shared personal information (e.g., email addresses, browsing data) with ad networks (e.g., Meta, Google) for targeted advertising, which may constitute “sharing” under California law. We have not sold personal information for monetary compensation. See “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?” for third-party details.

Financial Incentives

We offer a financial incentive program where you receive a 15% discount on your first order in exchange for providing your email address to join our newsletter. The personal information collected is your email address, used for sending marketing communications. You can opt in by submitting your email via our website’s newsletter sign-up form, which requires your explicit consent through an unchecked checkbox. You can withdraw from this program at any time by clicking the unsubscribe link in our emails, emailing info@forrowan.com, or visiting https://forrowan.com/pages/contact. The value of the 15% discount is reasonably related to the value of your email address, which enables us to provide personalized offers and improve our marketing campaigns. We estimate the value of your email based on the average revenue generated from our email marketing efforts, calculated using industry-standard metrics for customer engagement and sales conversions.

For residents of Colorado, this program complies with the Colorado Privacy Act as a bona fide loyalty program, and you may opt out of data processing for marketing purposes by contacting us as described above.

How to Exercise Your Rights

Submit a data subject access request, email info@forrowan.com, or visit https://forrowan.com/pages/contact. We verify your identity using information provided, and authorized agents must submit proof of authorization. If we decline your request, you can appeal by emailing info@forrowan.com. If denied, you may contact your state attorney general.

California “Shine The Light” Law

California residents can request information about personal data shared for direct marketing under Civil Code § 1798.83. Submit requests to info@forrowan.com.

13. ABANDONED CARTS AND OTHER MESSAGES

We use Gobot to send messages about abandoned carts, shopping sessions, and marketing. Gobot may collect device type, operating system, location, browser type, and usage data (e.g., pages visited, links clicked). See Gobot’s privacy policy here. Opt out here.

14. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we update this notice to stay compliant with laws.

We may update this Privacy Notice, with changes indicated by a revised date. Material changes will be notified via a website banner or email. Review this notice regularly.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

Email us at info@forrowan.com or contact us by post at:

ForRowan, LLC
16200 Macy Ln
San Diego, CA 92127
United States

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You may have the right to access, correct, or delete your personal information. Submit a data subject access request, email info@forrowan.com, or visit https://forrowan.com/pages/contact. We will act in accordance with applicable laws.