Privacy

SUNRISE Beverage operates this store and website, including all related information, content, features, tools, products, and services in order to provide you, the customer, with a curated shopping experience (the "Services"). SUNRISE Beverage is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Notice at Collection

At or before the point of collection, we may collect the following categories of personal information:

• Identifiers (name, postal address, email address, account name, IP address, online identifiers)
• Customer records (billing/shipping address, payment information, telephone number)
• Commercial information (products purchased, cart contents, transaction history)
• Internet or electronic network activity (browsing history, search history, interaction data)
• Geolocation data (general location based on IP address)
• Audio, electronic, visual, or similar information (when you contact customer service or upload an ID for age verification)
• Inferences drawn from any of the above to create a consumer profile

We use this information for the purposes described in the "How We Use Your Personal Information" section below. We retain personal information for the periods described in the "Retention" section below. We do not sell personal information for monetary consideration; however, our use of certain advertising technologies may be considered "sharing" under applicable state privacy laws, as described in the "Your Rights and Choices" section.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.
• Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details.
• Account information including your username, password, security questions, preferences, and settings.
• Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange, or cancel and your past transactions.
• Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
• Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
• Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
• Age-verification information including date of birth, and (in certain cases) a photograph of a government-issued identification document submitted to our third-party age-verification provider.

Sensitive Personal Information

In limited circumstances we may collect or process the following categories of "sensitive personal information" as defined under applicable state privacy law:

• Government-issued identification numbers (such as a driver's license number) when submitted to our third-party age-verification provider.
• Financial account information (in connection with payment processing).
• Precise geolocation (only if you affirmatively grant permission).

We use sensitive personal information only for the purposes for which it was collected (age verification, payment processing, fraud prevention, and to comply with law). We do not use sensitive personal information for the purpose of inferring characteristics about you. You have the right to limit our use of sensitive personal information as described in the "Your Rights and Choices" section.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us, complete age verification, or otherwise provide us with your personal information.
• Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
• From our service providers including when we engage them to enable certain technology (including age verification, payment processing, and shipping) and when they collect or process your personal information on our behalf.
• From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

• Provide, Tailor, and Improve the Services. To provide you with the Services, perform our contract with you, process your payments, fulfill your orders, remember your preferences and items you are interested in, send notifications related to your account, process purchases, returns, exchanges, or other transactions, manage your account, arrange for shipping, facilitate any returns and exchanges, enable you to post reviews, and create a customized shopping experience.
• Age Verification and Compliance. To verify your age at the point of entry, at checkout, and at delivery, and to comply with applicable hemp, cannabis, and consumer-protection laws.
• Marketing and Advertising. To send marketing, advertising, and promotional communications by email, text message, or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.
• Security and Fraud Prevention. To authenticate your account, provide a secure payment and shopping experience, detect, investigate, or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe.
• Communicating with You. To provide you with customer support, be responsive to you, provide effective services to you, and maintain our business relationship with you.
• Legal Reasons. To comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• Service providers, including Shopify, our age-verification provider, payment processors, fulfillment and shipping vendors, IT and cloud hosting providers, customer-support platforms, marketing-services providers, and analytics providers, who perform services on our behalf.
• Business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites.
• At your direction when you direct, request us, or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger, acquisition, restructuring, or bankruptcy.
• For legal and safety reasons, including to comply with any applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Sale or Sharing of Personal Information

We do not sell personal information for monetary consideration. We may "share" personal information for "cross-context behavioral advertising" (as those terms are defined under the California Privacy Rights Act and similar state laws) when we use third-party advertising tools and analytics. You may opt out of this sharing at any time by following the instructions in the "Your Rights and Choices" section, including by clicking the "Do Not Sell or Share My Personal Information" link in our website footer.

We do not knowingly sell or share the personal information of consumers under 16 years of age. As a 21+ product, we do not knowingly collect personal information from anyone under 21 (see "Children's Data" below).

Cookies and Tracking Technologies

We and our service providers use cookies and similar technologies to operate the Services and to collect information about your activity on the Services. Cookies fall into the following categories:

• Strictly necessary cookies are required for the Services to function (e.g., shopping cart, checkout, authentication). These cannot be disabled without breaking core functionality.
• Performance and analytics cookies help us understand how visitors interact with the Services and improve them.
• Functional cookies allow us to remember your preferences (e.g., region, language).
• Advertising cookies are used to deliver relevant advertisements and measure their effectiveness, including by sharing information with our advertising partners.

You can manage your cookie preferences through your browser settings or, where available, through a cookie-preferences tool on our website. Disabling certain cookies may affect functionality. We do not currently respond to "Do Not Track" browser signals; however, we honor opt-out preference signals (such as Global Privacy Control / "GPC") for opting out of "sale" and "sharing" of personal information where required by law.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our Store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information through the Shopify Privacy Portal.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

SMS and Text-Message Communications

By providing your mobile telephone number to us and opting in to receive text messages from SUNRISE Beverage, you consent to receive recurring marketing and promotional text messages from us at the number provided. Consent is not a condition of any purchase. Message frequency varies. Message and data rates may apply.

You can opt out at any time by replying STOP to any of our messages. You can request additional information by replying HELP or by contacting us at hello@savorsunrise.com. For full SMS terms, see our SMS Marketing Policy.

Children's Data

The Services are not intended to be used by individuals under the age of 21, and we do not knowingly collect any personal information from individuals under 21. If you are the parent or guardian of a person under 21 who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

Security and Retention of Your Information

We maintain administrative, technical, and physical safeguards designed to protect personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account information is retained for the life of your account plus a reasonable period thereafter (typically 24 months) to allow account reactivation and resolve any post-termination matters.
• Transaction records are retained for at least seven (7) years to comply with tax, financial, and consumer-protection requirements.
• Age-verification records are retained by our third-party verification provider in accordance with their retention policies and applicable law.
• Marketing-list data is retained until you opt out, after which we maintain suppression-list information indefinitely to honor your opt-out request.
• Customer-support communications are retained for up to three (3) years.
• Website analytics data is retained in identifiable form for up to 26 months.

After these periods, we delete or de-identify personal information unless retention is required or permitted by law.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances, and, in certain cases, we may decline your request as permitted by law.

• Right to Access / Know. You may have a right to request access to personal information that we hold about you and to information about how we have collected, used, and disclosed it.
• Right to Delete. You may have a right to request that we delete personal information we maintain about you.
• Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
• Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
• Right to Opt Out of Sale or Sharing. You may have a right to opt out of any sale or sharing of personal information for cross-context behavioral advertising. You can exercise this right by clicking "Do Not Sell or Share My Personal Information" in our website footer or by sending us your request using the contact details below.
• Right to Limit Use of Sensitive Personal Information. Where applicable, you have the right to limit our use and disclosure of sensitive personal information to the purposes specified by law.
• Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. You may opt out of marketing text messages by replying STOP. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights by contacting us using the contact details provided below. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

State-Specific Privacy Disclosures

California

If you are a California resident, you have the rights set forth above under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). Specifically, you have the right to know what personal information we collect, use, disclose, and "share"; the right to delete; the right to correct; the right to opt out of "sale" and "sharing"; and the right to limit our use of sensitive personal information.

In the preceding 12 months, we have collected the categories of personal information identified in the "Personal Information We Collect or Process" section above, and disclosed those categories to the categories of recipients identified in the "How We Disclose Personal Information" section. We have not "sold" personal information for monetary consideration. We have "shared" the following categories for cross-context behavioral advertising: identifiers, internet/electronic network activity information, and inferences.

You can exercise your rights by emailing us at hello@savorsunrise.com, calling (877) 674-7459, or clicking "Do Not Sell or Share My Personal Information" in the footer of our website. We will respond within the timeframes required by law.

If we deny your request, you have the right to appeal our decision. To appeal, contact us at the email or phone number above with the subject line "Privacy Request Appeal."

Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Other States

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, Iowa, or any other state with a comprehensive consumer privacy law in effect, you may have additional rights including the rights to access, correct, delete, port, and opt out of targeted advertising and the sale of personal data. You can exercise these rights using the same methods listed above. We will respond within the timeframes required by your state's law. If we deny your request, you may have the right to appeal our decision by responding to our denial with the subject line "Privacy Request Appeal."

Nevada

If you are a Nevada resident, you have the right to direct us not to make any sale of your covered personal information, as defined under Nevada law. We do not sell covered personal information as defined under Nevada law, but you may submit a request by contacting us at hello@savorsunrise.com.

International Transfers

We are based in the United States. If you are accessing the Services from outside the United States, your personal information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. By using the Services, you consent to the transfer of your personal information to the United States.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us, or lodge your complaint with your local data protection authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date, and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call us at (877) 674-7459, email us at hello@savorsunrise.com, or write to us at:

SUNRISE Beverage
2032 Utica Square, Unit #52521
Tulsa, OK 74114
United States