This Privacy Policy (the “Policy”) describes how Bridgett Moore LLC (“Bridgett Moore LLC,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit or use our website located at www.Bridgettmoore.com, our mobile application(s), our blog(s), and any related online services we own or operate now or in the future (collectively, the “Site”).

By using the Site, you acknowledge that you have read and understood this Policy. If you do not agree

with it, please do not use the Site. This Policy is incorporated into and subject to our Terms of Service.

Questions may be directed to hello@bridgettmoore.com.

We collect the following categories of personal information, depending on how you interact with us:

• Identity and contact data: full name, billing and shipping address, email address, and telephone number.

• Payment data: billing address and payment details. Full card numbers are processed by our third-party payment processor and are not stored on our own servers.

• Transaction and preference data: a record of your orders, purchase history, and shopping preferences.

• User-generated content: product reviews, comments, survey responses, contest/event entries, and messages you send us (including through social media or customer support).

When you use the Site, we and our service providers automatically collect certain information through cookies, pixels/web beacons, tags, software development kits (SDKs), and similar technologies, including:

• Device and usage data: IP address, browser type and language, operating system, device identifiers, referring/exit pages, pages viewed, links clicked, and dates/times of access.

• Analytics data: how you navigate and use the Site, session duration, and general geographic location derived from IP address.

• Approximate location: general location inferred from your IP address, or more precise location if you use our mobile app and grant permission.

We may receive information about you from service providers, business partners, advertising and analytics providers, social media platforms, and publicly available sources, which we may combine with information we already hold.

We use personal information to operate our business and provide the Site, including to:

• Process, fulfill, and deliver your orders and manage payments and returns

• Provide customer support and respond to your inquiries, comments, and requests;

• Operate, maintain, personalize, and improve the Site, our products, and our services;

• Send transactional communications (e.g., order confirmations, account and service notices);

• Send marketing communications, promotions, and offers where permitted (see Section 10);

• Conduct analytics, measure performance, and understand usage trends and statistics;

• Detect, prevent, and address fraud, security incidents, and misuse, and to ensure the safety and integrity of the Site;

• Comply with legal obligations and enforce our terms and agreements.

Where the EU/UK GDPR applies, our legal bases for processing are: (a) performance of a contract with you; (b) your consent (which you may withdraw at any time); (c) our legitimate interests in operating and improving our business (balanced against your rights); and (d) compliance with a legal obligation.

A cookie is a small text file placed on your device when you use the Site. We and our partners use cookies and similar technologies (pixels, web beacons, tags, and SDKs) that may be session-based (deleted when you close your browser) or persistent (remaining until they expire or are deleted). We use these technologies to:

• Enable core Site functionality and remember your preferences (strictly necessary and functional cookies);

• Measure and analyze traffic and performance (analytics cookies);

• Deliver and measure relevant advertising (advertising / targeting cookies).

You can manage your preferences at any time through our cookie / consent management tool at www.bridgettmoore.com/cookie-preferences, or through your browser settings. Blocking some cookies may affect how the Site functions.

We do not sell your personal information for money. We share personal information only as described below:

• Service providers / processors: vendors that perform services on our behalf, such as payment processing, hosting, analytics, email delivery, advertising, and customer support. They may access personal information only to perform these services and are contractually restricted from using it for their own purposes.

• Advertising & analytics partners: providers that help us understand usage and deliver/measure advertising. Depending on your jurisdiction and settings, some of this activity may be considered a “sale” or “sharing” of personal information under certain US State laws (see Section 8).

• Legal and safety: we may disclose information to comply with applicable law, regulation, legal process, or governmental request (such as a subpoena or court order); to enforce our agreements; and to protect the rights, property, or safety of Bridgett Moore LLC, our users, or the public.

• Business transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or dissolution, personal information may be transferred as part of the transaction, subject to this Policy.

• With your direction or consent: when you ask us to share information or otherwise consent to sharing.

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to provide the Site, comply with our legal, accounting, and tax obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we will delete, anonymize, or securely dispose of it. Retention periods vary by data type and the purpose for which it was collected

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights regarding your personal data, subject to applicable law:

• Access — to obtain confirmation of, and a copy of, the personal data we hold about you;

• Rectification — to correct inaccurate or incomplete data;

• Erasure — to request deletion of your data (“right to be forgotten”);

• Restriction — to limit how we process your data in certain circumstances;

• Portability — to receive your data in a portable, machine-readable format;

• Objection — to object to processing based on legitimate interests or to direct marketing;

• Withdraw consent — to withdraw consent at any time, without affecting prior processing;

• Lodge a complaint — to complain to your local data protection authority.

To exercise these rights, contact us at hello@bridgettmoore.com. We will verify your identity and respond within the timeframe required by law (generally one month under the GDPR).

If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you the following rights:

• Right to know the categories and specific pieces of personal information we have collected, the sources, purposes, and third parties with whom we share it;

• Right to delete personal information we have collected, subject to exceptions;

• Right to correct inaccurate personal information;

• Right to opt out of the “sale” or “sharing” of personal information and of certain targeted advertising;

• Right to limit the use and disclosure of sensitive personal information;

• Right to non-discrimination for exercising your privacy rights.

We do not sell your personal information for monetary value. However, our use of certain advertising and analytics cookies may qualify as a “sale” or “sharing” under California law. To opt out, use the “Do Not Sell or Share My Personal Information” link in our website footer or our cookie preference center at the www.bridgettmoore.com/do-not-sell. You may also exercise these rights by contacting us at hello@bridgettmoore.com. You may use an authorized agent to submit a request on your behalf.

Where required by law, we recognize and honor opt-out preference signals, including the Global Privacy Control (GPC), transmitted by your browser or device. When we detect a GPC signal, we will treat it as a request to opt out of the “sale” or “sharing” of personal information for that browser or device. Because these signals are typically device- or browser-specific, you may need to enable them on each browser and device you use.

If you receive marketing emails from us, each message includes an unsubscribe link. You may opt out at any time by clicking that link or by contacting us at hello@bridgettmoore.com. We will honor opt-out requests promptly as required by the CAN-SPAM Act and applicable law. Even if you opt out of marketing, we may still send you non-promotional, transactional messages related to your account or purchases.

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction, including encryption in transit, access controls, and secure storage. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security breach that affects your personal information, we will notify you and applicable authorities as required by law.

We are based in the United States, and we and our service providers may process and store your personal information in the United States and other countries whose data-protection laws may differ from those in your jurisdiction. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or another lawful transfer mechanism.

The Site is intended for a general audience and is not directed to children under 13 (or the minimum age required in your jurisdiction, such as 16 in parts of the EU/UK). We do not knowingly collect personal information from children under that age. If we learn that we have collected personal information from a child without the required parental consent, we will delete it promptly. If you believe a child has provided us personal information, contact us at hello@bridgettmoore.com.

The Site may contain links to third-party websites and services that we do not control. We are not responsible for their content or privacy practices, and we encourage you to review their privacy policies. In addition, any information you voluntarily post in a public area of the Site (such as reviews, comments, or social posts) may be read, collected, and used by others. We are not responsible for information you choose to disclose publicly.

We may update this Policy from time to time. When we do, we will revise the “Effective Date” above and post the updated Policy on the Site. Material changes may be communicated through additional notice (such as a banner or email). Your continued use of the Site after the updated Policy becomes effective constitutes acceptance of the changes.

If you have questions, comments, or requests regarding this Policy or our privacy practices, please contact us:

Bridgett Moore LLC

Email: hello@bridgettmoore.com | Website: www.bridgettmoore.com