SHEFIT Privacy Policy

Effective Date: 10/14/2022
Last Updated: 07/23/2026

SHEFIT wants to give you the best SHEFIT experience possible. This Privacy Policy ("Policy") describes the privacy practices of Long Tine LLC d.b.a. SHEFIT, as well as our family of affiliated companies, ("SHEFIT", "we", or "us") with respect to information collected when you sign up for, use, access, or otherwise interact with SHEFIT.com (the "Sites"), our mobile applications, and our connected products and services (collectively, the "Services"). By using the Services, you consent to the terms of this Policy.

Please note that the Personal Data we collect may be stored and processed in the United States or any other country in which SHEFIT or its affiliates, subsidiaries, agents, or third party service providers maintain facilities and/or infrastructure, and by using the Services and submitting information to us, you consent to the transfer, processing and storage of such information outside of your country. If you do not agree with any part of this Privacy Policy or our Terms and Conditions, please do not access or continue to use any of the Services or otherwise provide your Personal Data.

As you read this Policy, please click "read more" for additional details on a topic. You can reach us at support@shefit.com or the postal address in the "How to Contact Us" section below if you have further questions.

This Policy covers the following areas:

I. Information We Collect

II. How We Use Your Information

III. How We Share Your Information

IV. Data Security

V. Data Retention

VI. Cookies and Other Data Collection Tools

VII. How To Manage Your Privacy Settings

VIII. Children

IX. Region-Specific Disclosures

X. Third Parties We Don't Own or Control

XI. How to Contact Us

XII. Amendments

I. Information We Collect

SHEFIT collects information from users in connection with the Services.

In this policy, "Personal Data" means information that relates to you and identifies you personally, either alone or in combination with other information available to us. "Non-Personal Information" means information that is aggregate, anonymous, de-identified, or otherwise does not and cannot reveal your identity. Examples of “Non-Personal Information” include age, annual income, gender, browser, hardware model, operating system and version, time spent using our Services, and web pages visited, when this information cannot be linked specifically to you.

We collect both Personal Data and Non-Personal Information directly from you when you share it with us, automatically from you when you access our Services, and from our third-party partners.

We collect your Personal Data and Non-Personal Information as follows:

1. If you register for a SHEFIT account, install or use our mobile apps, or place an order, we collect directly or indirectly (such as through a third-party application) certain registration and demographic details (e.g., name, username and password, email address, phone number, date of birth, personal interests and general location (e.g., country) and other similar details ("Account Information")).

2. When interacting with our Services, data is automatically collected by the technology platforms providing the experiences, including without limitation information about the Sites that you visit and how you use them and any GPS-based, Wi-Fi-based, or cell-based location information ("Location Information"), and any other identifier that permits direct identifying, locating, or contacting of the device or user. Your web browser or mobile device may share certain data with SHEFIT as those devices interact with SHEFIT'S Sites or mobile apps. This data includes: Device IDs, network access, storage information and battery information as well as cookies, IP addresses, referrer headers, data identifying your web browser and version, the date and time of the visit and how long you remained on our Sites, and web beacons and tags. Location Data may include the presence of the device, its signal strength and mobile network information, its manufacturer (Apple, Samsung, etc.) and model, and information about the device's interaction with the Services or business services. SHEFIT may combine this information with other information collected in connection with your use of the Services. More information about these practices is included in the Cookies and Other Data Collection Tools section below.

3. If you engage with us through our text message marketing program (the “Messaging Service”), we collect various information about you, including information you directly provide when you use the Messaging Service. For example, we collect the phone number and email address you provided when signing up for the Messaging Service. When you send messages via the Messaging Service, we will also collect your messaging history and any information included in those messages.

4. If you engage with us through a social media account, we may collect account or profile information associated with that account. To the extent you connect an account managed by third parties such as social media sites (e.g., Facebook) with a SHEFIT account, you authorize SHEFIT to have access to information related to that account (as permitted by the terms of service of your account with that social media site) and agree that SHEFIT may collect, store and use such information in accordance with this Policy.

5. If you are accessing third-party products and services that we have made available to you via the Services, we may collect your name, email address, city, payment information, and more, in connection with your registration for and access to those products and services.

6. When you purchase or browse SHEFIT products online, we collect purchase and browsing data. As you browse our products online or submit product inquiries, we may collect Personal Data such as your contact information and your specific requests. We also may collect information regarding a completed purchase (payment amounts and methods, billing and shipping information, returns and other transaction information) and information relating to your browsing of our products (such as browsing order and products removed from a shopping cart). We may associate purchase and browsing information to an account you have registered with us and combine it with information relating to all interactions with us.

We use a combination of website cookies and web beacons (including JavaScript tags) to track product details from products added to a website visitor’s shopping cart and other site activity, in conjunction with server-side data related to the cart. If you abandon your cart and you are opted in to receive text messages from us, we may send you a single text reminder about the items left in your cart within 48-hours of cart abandonment.

7.When you shop at SHEFIT pop-up stores, we may collect contact and purchase information. When you are shopping at a SHEFIT pop-up store we collect any contact and purchase information that is necessary to process your transaction. For example, we may collect payment information and email address (to provide e-receipts). In addition, if you consent and where permissible, we may collect your email and phone number(s) in order to send you information about products and Promotions.

8. If you participate in or utilize, as applicable, contests, sweepstakes, loyalty programs, surveys, discounts, or promotional sales ("Promotions") being offered by SHEFIT, we may collect contact, demographic and eligibility information or other Personal Data.
Promotions may also be run by a SHEFIT service provider or co-branded with one of our business partners. In such instances, Personal Data may be collected directly by and/or shared with SHEFIT, the service provider and/or business partner via print, website, mobile applications or other means. Personal Data associated with a Promotion may be shared with partners that sponsored or were involved with the Promotion.

9.We collect Personal Data relating to your interactions with advertising on the Services or SHEFIT online communities.
We may collect your Personal Data when you click on advertisements, submit content, make reviews, interact with our social media pages, or otherwise contribute to message boards, comment fields, blogs, and other media forums sponsored by or affiliated with SHEFIT.

10. We allow our trusted ad partners to collect information about you when you use our Services.
These companies may collect information from you (e.g. subject of advertisements clicked or scrolled over) during your visits to the Services in order to provide advertisements about goods and services likely to be of interest to you. Our ad partners may use the data they collect from you for a variety of other purposes, including (a) in conjunction with advertising that appears on other websites, (b) to determine the popularity of certain content and analyze and track website traffic, statistics, advertisement data and other interaction with ads and the websites on which they are served, and (c) to measure the effectiveness of web-based and email ads. The ad partners that we engage are bound by confidentiality obligations and other restrictions with respect to their use and collection of your information.

II. How We Use Your Information

We use the information we collect to:

1. Provide our products and services and customer support.

We use Personal Data and Non-Personal Information to process and deliver product orders and to notify you of the status of your order. Additionally, this data may be used to troubleshoot problems with your experience with the Services. If you contact our customer service (or vice versa), we will use Personal Data such as your order information and contact history to process your request and provide you with the best service possible.

2. Customize experiences on our Services and gain insights into our customers and communities.
We use Personal Data and Non-Personal Information to present products and content tailored to you, your interests and location. Our use of Personal Data may also help you engage with other users of our Services. We also use Personal Data to better understand our customers and other individuals who access our Services which helps us develop more interesting and relevant products and services and to improve our Services.

3.Promote SHEFIT’s business through direct mail and online advertising and marketing activities to you and others.
We use Personal Data and Non-Personal Information in connection with advertising and online and offline marketing campaigns, to provide you with information on the products and Services that we think are most relevant to or appropriate for you and to track the success of our marketing activities. We display ads on the online platforms that we own and operate. We also use third party ad partners to display ads for SHEFIT on third party websites and apps ("Retargeting"). Retargeting technologies analyze the information collected about your interactions with SHEFIT Sites as described in relation to marketing above and information about you, obtained from reputable third party sources, including your cookies, and display advertisements matched to your interests, as inferred from your online activities. Ads may also be based on the content of the pages on which they appear and Location Data may be used to serve ads that are more relevant to you based on your particular location. For most devices, you can control the interest-based ads you see as a result of Retargeting by changing the privacy settings of the device itself or changing the privacy settings of your browser but note that our Sites generally are not configured to respond to web browser do-not-track signals.

4.Connect you with third-party products and services.
We use the data we collect to provide third parties with the information required to enable those third parties to fulfill products or services that a SHEFIT user has ordered.

5.Communicate with you.
If you have created an account with us, and consent to receiving messages from us via electronic communications, we may use Personal Data and Non-Personal Information to contact you about the SHEFIT products or Services you have purchased or used and to notify you of other products, promotions and Services we think may be of interest to you. We may use your information to respond to requests for support, online services, product information or to any other interaction you initiate. We also may use your Personal Data to notify you of promotions and other special offers. Irrespective of your privacy settings, we may send you notifications pertaining to the performance of our Services, such as revision of our Terms or this Privacy Policy or other formal communications relating to products or Services you have purchased or use.

6. Administer Promotions.
In connection with Promotions, we may use Personal Data to verify identity, communicate with you about the Promotion or about other offers, conduct market research, and ask you questions relating to the Promotion. If you participate in questions and surveys regarding the Promotion we may share your responses with business partners for their own market research and communication purposes. To opt-out of this kind of collection and sharing, you can decline to answer these kinds of questions or decline to participate in the challenge or survey altogether.

7. Operate and analyze our business.
We use Personal Data and Non-Personal Information to analyze trends and statistics and otherwise monitor usage and performance of the Services, engage in business transactions, including the purchase, sale, lease, merger, amalgamation or any other type of acquisition, disposal, securitization, or financing involving SHEFIT, comply with any applicable legal or regulatory requirements, and for sales, supply chain and financial analysis purposes.

8.Resolve security issues and disputes.
We use the data we collect from you to protect the integrity of our Services, employees and users, to identify and prevent error, negligence and fraud, to audit compliance with and enforce our agreements (such as terms of use, terms of sale and this Privacy Policy), and to resolve disputes.

9. Resolve security issues and disputes.
We may combine Personal Data with information we receive from joint marketing partners, public databases, publicly available pages on social media platforms and other third parties, to give us better consumer insight into your needs, help us tailor our communications with you, deliver marketing messages to you and improve our business. For example, we may obtain updated email address information from email-change-of-address vendors or purchase third-party marketing data and address information and add it to our database to send you offline marketing materials, better direct our advertising and provide pertinent offers we think you are more likely to be interested in. You can opt-out of us combining your personal information with the information lawfully collected from third parties by contacting us using the contact details set out below.

SHEFIT collects certain categories of Sensitive Personal Data.

For the purposes and Services described above, SHEFIT collects the following categories of Sensitive Personal Data:

• Social Security number, driver’s license number, state identification number, passport number
• Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account
• Precise geolocation information
• Racial or ethnic origin, religious, or philosophical believes, or union membership
• Contents of mail, email, and text messages unless the business is the intended recipient of the communication
• Genetic or biometric data
• Health information
• Sex life or sexual orientation information, including status as transgender or nonbinary
• Medical history, medical treatment, or mental or physical health conditions or diagnoses
• Citizenship or immigration status
• Personal information from a known child
• Status as a victim of a crime

III. How We Share Your Information

SHEFIT will share your Personal Data and Non-Personal Information with third parties in the following ways:

1. With Our Affiliates

We will disclose Personal Data and Non-Personal Information to businesses controlling, controlled by, or under common control with SHEFIT for the use purposes and under the conditions outlined above.

2. With Service Providers

SHEFIT may coordinate the provision of services and products to you through third party service providers. We may disclose Personal Data to those service providers and partners and they may have access to or process your Personal Data. For example, SHEFIT may use third-party providers to assist us with delivering, directly marketing and advertising our products and Services, processing payments you make to us, delivering customer service and support, and for e-commerce order fulfillment. When we disclose Personal Data to service providers for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

3. With Remarketing Partners

SHEFIT may partner with third parties in order to promote, support, enable or expand SHEFIT’s business and products and services or enable those third parties to deliver content or advertise the products and services of SHEFIT. When we disclose your Personal Data to our Remarketing partners, they may combine the Personal Data we provide with personal data about you collected on various other websites and applications to determine which products may be most relevant to you. This constitutes “sharing” or “targeted advertising,” as defined by various privacy laws. We “share” the following categories of Personal Data: [contact information, website interaction data, IP address, etc. With your knowledge and consent, our Services may gather and transfer information from other applications, functions and tools within your mobile device.

Note that we have not sold Personal Data to any third parties, and we do not sell Personal Data pertaining to minors under the age of 16.

3. With Social Networks

Our Sites and apps will, in certain circumstances, provide you with social plug-ins from various social networks. If you choose to interact with a social network such as Facebook or Twitter (for example by registering an account), your activity on Sites or via our apps will also be made available to that social network.

4. For Joint Marketing

From time to time SHEFIT might establish joint marketing relationships with other persons or entities whom we believe trustworthy and have privacy practices that are consistent with ours. In such cases and where permitted by applicable law we might exchange, share and/or cross-reference information, including information about you that will enable such persons or entities to contact you regarding products and services that may be of interest to you. If you would like to opt out of our exchange of your information with other marketers, please let us know by writing to our Support Team. To learn more about third parties that are members of self-regulatory programs such as the Network Advertising Initiative, please visit the NAI's website (www.networkadvertising.org) which will allow you to opt out of interest-based advertising by one, or all, NAI members.

5. In Discussion Forums

Content you post through the Services such as reviews, commentary on discussion boards or blogs, and certain social networking preferences (e.g. pages you "Like" or "Recommend") may be accessible by other users and companies and may appear on other websites or web searches, and therefore this information could be read, collected, and used by others. SHEFIT cannot ensure the privacy of any Personal Data included in such user generated content. Please note that SHEFIT does not necessarily verify, endorse, or agree with any content posted in discussion forums.

6. In Business Transfers (country specific disclosures may apply)

In the event SHEFIT sells certain of its assets or goes through a structural change, such as a merger, acquisition by another company, bankruptcy, insolvency, or dissolution, to the extent permitted by applicable law Personal Data may be transferred to a third party as part of such event and thereby become subject to the privacy practices of that third party, which may be materially different than those of SHEFIT.

7. With Your Consent

SHEFIT will share your Personal Data with other third parties (different from those described in this section) in certain limited circumstances. In these instances, we will, to the extent required by applicable law, obtain your consent to share your Personal Data in this way.

8. For Legal Compliance and Special Circumstances

We may be required, subject to applicable law, to disclose your Personal Data if: (i) it is reasonably necessary to comply with legal process (such as a court order, subpoena, search warrant, etc.) or other legal requirements of any governmental authority, (ii) such a disclosure would potentially mitigate our liability in an actual or potential lawsuit, (iii) it is necessary to protect our legal rights or property (such as enforcing or applying applicable terms and conditions and other agreements, including the Services' terms of service), or (iv) it is necessary to protect the legal rights or property or physical security of others, or for the prevention or detection of crime and such disclosure is lawful. For residents of the European Economic Area our disclosure is limited to situations where we are permitted to do so under applicable European and national data protection laws and regulations.

9. Exclusions

Text messaging originator opt-in data and consent will not be shared with any third parties.

IV. Data Security

SHEFIT takes precautions to secure your personal information and protect it from loss, theft, unauthorized access, destruction, use, modification and disclosure. Such measures include technological, physical and organizational safeguards that are appropriate given the sensitivity of the personal information, including maintaining controlled access to electronic and paper documents and files, and using appropriate technology safeguards such as passwords firewalls and encryption as well as non-disclosure or confidentiality agreements as we deem appropriate to protect your data. However, please note that SHEFIT's security measures may change or be unavailable from time to time and no data transmission over the Internet or any wireless network is 100% secure.

V. Data Retention

SHEFIT will retain Personal Data for so long as necessary to fulfill the purposes outlined in this Policy in connection with providing or improving SHEFIT's Services, except if required otherwise by applicable law. We may further retain and use data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

VI. Cookies and Other Data Collection Tools

SHEFIT uses cookies and pixels as automatic data collection mechanisms that collect information, including personal information, from users of our Sites and Services. Third parties also place these tools on our Sites to collect and process information about our users for various purposes, including for security, for analytics, and to facilitate targeted advertising. For detailed information about the cookies and pixels we use, please view our Cookie Policy. By visiting our Sites, or otherwise using our Services, you consent to SHEFIT’s use of cookies and pixels, as detailed in our Cookie Policy.

VII. How To Manage Your Privacy Settings

We provide you several ways to manage your privacy settings:

1. Update your Account Information

If your Account Information changes, you may update or delete and deactivate certain aspects of your Account Information by signing into and managing your SHEFIT account or, if your account does not so permit, by contacting us at support@shefit.com. In addition, depending on the nature of your account, your account management page may allow you to control certain aspects of how other information you submit to the Services is used or shared.

2. Set your preferences to opt-out of communications

There are several ways for you to control how SHEFIT communicates with you:

○ Email and Mobile Messages: You have the ability to unsubscribe to promotional emails or text messages received from us by following the instructions in those emails or text messages. If you use more than one Service, then opting out of the emails relating to that Service will not necessarily stop you receiving emails from other Services.
○ Text Messages: Consent to receive automated marketing text messages is not a condition of any purchase. You can opt-out of receiving further commercial text messages via the Messaging Service by responding to any of our text messages with any of the following replies: STOP, END, CANCEL, UNSUBSCRIBE, or QUIT.
○ Push Notifications: To the extent applicable you can manage the type of push notifications you receive from SHEFIT (if any) by modifying the settings of your SHEFIT applications and websites. You may set your mobile device to not allow push notifications from us.
○ Postal Mail: You may stop receiving marketing materials sent by postal mail from us by writing to our Support Team or following the opt-out instructions that may be included within those communications.
You may also contact us at support@shefit.com to indicate or update your communication preferences. If you like, you may use one of the following statements in your message to us:
-I prefer not to receive email advertisements, such as updates regarding products and services, special promotions or upcoming events.
-I prefer not to receive direct mail advertisements, such as periodic catalogs and mailings regarding products and services, special promotions or upcoming events.

3. Opt out of information exchange with other marketers

If you would prefer for us not to exchange your information with other companies, please contact our support team at support@shefit.com.

4. Manage your Location Data through your mobile device

Most mobile devices give users the ability to control whether location signals are enabled. Disabling location signals will not allow us to collect your Location Data (by virtue of the location of your mobile device) and may impact the operation of a Service. If you have questions about how to set the location preferences for your device, you can contact your mobile service carrier or your device manufacturer.
If you unsubscribe to email marketing messages it may take up to 10 business days before you stop receiving emails and we may still send you non-promotional communications, such as digital receipts (if applicable) and communications about your account. Requests to stop or update postal mail marketing communications may take up to 6-8 weeks to process.

VIII. Children

The Services are intended for general audiences and are not directed to persons less than 13 years of age. We do not knowingly collect Personal Data from those persons. If you become aware that personal information about your child has been provided to SHEFIT without your consent, please contact us. If we become aware that a child under 13 has provided us with Personal Data, we will take steps to delete the information, except where we are required by applicable law to keep it.

XI. Region-Specific Disclosures

1. Residents of Canada

If you reside in Canada, your consent to use or share your Personal Data for the marketing purposes identified above is optional and is not required as a condition of obtaining the Services. If you do not want your Personal Data to be used or shared for these additional purposes, please write to us through support@shefit.com or the mailing address set out below. We do not collect social insurance numbers from Canadian consumers.

2. Residents of the European Economic Area (EEA) or United Kingdom (UK)

As a resident of the EEA or UK, you have choices regarding how we use your personal information. You are entitled to:

• The right to access: You have the right to request copies of your personal information. We may charge you a minor fee for this service.
• The right to rectification: You have the right to request that we correct any information that you believe is inaccurate. You also have the right to request that we complete information that you believe is incomplete.
• The right to erasure: You have the right to request that we erase your personal information under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal information, under certain conditions. You may also decline our marketing communications.
• The right to data portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

In order to exercise these rights at any time, please contact us through support@shefit.com or at the physical address listed below mentioning your electronic contact details and identity sufficiently to allow SHEFIT to verify your identity. Solely to the extent permitted by applicable law, we may charge for this service and will respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law.

International Transfers. Our company is based in the United States. Your personal information may be transferred to, stored at, or processed in the United States, or other countries that may not have equivalent privacy or data protection laws. By using our website, applications, and/or services, you understand and agree to these processing terms. We generally use approved EU and UK Standard Contractual Clauses to assure that Personal Information is adequately protected when it is transferred out of the EEA and UK.

Legal basis and purposes for data processing. We only process personal information when we have a legal basis for the processing or have your consent to do so. We may also process your personal information for the purposes of our own legitimate interests or for the legitimate interests of others so long as that processing does not outweigh your rights and freedoms. Specifically, we will only process your personal information in connection with one or more of the following bases:

• With your consent.
• For the reason you provided it to us, including to provide any services requested or evaluate your employment candidacy.
• To further our legitimate interests, such as performing or marketing our services or preventing fraud.
• To perform a contract between you and us.
• To satisfy an applicable legal requirement.
• To serve the public interest, such as processing in response to a governmental request.

Sensitive Data. A limited amount of the data that we collect may be considered personal health or related data under the European Data Protection Directive or General Data Protection Regulation and its interpretation by applicable authorities. We use this data to better understand your needs and provide you with additional information that you can incorporate into your evaluation of SHEFIT products and services.

3. Residents of California, United States

California residents have certain rights related to the Personal Data we collect about them. For more information, see our CCPA Privacy Notice for California Residents.

X. Third Parties We Don't Own or Control

This Privacy Policy does not apply to the practices of companies that we do not own or control or to people that we do not employ or manage. For example, if you choose to pay through a third-party mechanism offered on our website, the information you choose to share with that third-party will be treated in accordance with that third-party's privacy policy. This Policy does not apply to, and we are not responsible for, the content of such third-party features or the privacy practices, including third-party cookies, web beacons, or other tracking technologies, of such third parties. We encourage you to read the privacy policies of each and every device, website, and service that you use.

XI. How to Contact Us

SHEFIT welcomes questions and comments about this Privacy Policy. You can contact us by emailing us at support@shefit.com or writing to us at:

SHEFIT OPERATING COMPANY LLC.
Attention: Privacy Office
4400 Central Parkway,
Hudsonville, MI 49426

XII. Amendments

We may change this Policy from time to time. The most current version of this Policy will be effective at the time it is posted. By continuing to access or use the Services after those changes become effective, you agree to be bound by the revised Policy. If you have a registered account, we may notify you of any changes to our Privacy Policy via email and/or we may ask you to affirmatively acknowledge and consent to the changes the next time you use our Services.

In addition, you agree to our Messaging Terms (https://terms.pscr.pt/legal/shop/shefit-3/terms_of_service) and Messaging Privacy Policy (https://terms.pscr.pt/legal/shop/shefit-3/privacy_policy).

Privacy Notice for California Residents

Effective Date: 10/11/2022

Last Reviewed on: 09/18/2025

This Privacy Notice for California Residents supplements the information contained in Shefit Operating Company, LLC’s ("SHEFIT" or "we" "us" "our") general Privacy Policy found at https://shefit.com/policies/privacy-policy and applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you"). If you are a California resident, California law provides you with additional rights regarding our use of your personal information. We provide this notice in accordance with the California Consumer Privacy Act of 2018 and California Privacy Rights Act of 2020 (collectively the "CCPA") and any terms defined in the CCPA have the same meaning when used in this Notice.

Information We Collect.

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("personal information"). Personal information does not include:

• Publicly available information from government records or lawfully obtained, truthful information that is a matter of public concern.
• Deidentified or aggregated consumer information.
• Information excluded from the CCPA's scope, such as health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the California Confidentiality of Medical Information Act (CMIA), or clinical trial data.
• Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

In particular, we have collected the following categories of personal information from or about consumers within the last twelve (12) months:

We obtain the categories of personal information listed above:

• Directly from you. For example, from forms you complete or Services you purchase.
• Indirectly from you. For example, from observing your actions on SHEFIT Website.

Use of Personal Information.

We use the information we collect in the following ways:

• To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.
• To provide, support, personalize, and develop our website, products, and services.
• To create, maintain, customize, and secure your account with us.
• To process your requests, purchases, transactions, and payments and prevent transactional fraud.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To personalize your website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our website, third-party sites, and via email or text message (with your consent, where required by law).
• To help maintain the safety, security, and integrity of our website, products and services, databases and other technology assets, and business.
• For testing, research, analysis, and product development, including to develop and improve our website, products, and services.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information or as otherwise set forth in the CCPA.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our consumers is among the assets transferred.

Sharing Personal Information.

We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

We share your personal information for a business purpose to the following categories of third parties:

• with service providers, and other third parties we use to support our business as needed for them to provide us with services that help us with our business activities and promote our products to you;
• with Software/IT service providers we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them;
• when we believe sharing is necessary to protect our rights, preserve safety, investigate fraud or other wrongdoing;
• when required by law, which includes complying with any court order, law, or legal process, including responding to a government or regulatory request;
• in connection with the sale, transfer or financing of our business or its assets;
• to enforce or apply our agreements, including for billing or collection purposes; and
• for any other purpose disclosed by us when you provide the information.

Disclosures of Personal Information for a Business Purpose.

In the preceding twelve (12) months, SHEFIT has disclosed the following categories of personal information to our service providers for a business purpose:

Category A: Identifiers.

Category B: California Customer Records personal information categories.

Category C: Protected classification characteristics under California or federal law.

Category D: Commercial information.

Category F: Internet or other similar network activity.

Category G: Geolocation data.

Category K: Inferences drawn from other personal information.

Sharing of Personal Information for a Commercial Purpose.

In the preceding twelve (12) months, SHEFIT has shared the following categories of personal information with our third-party marketing partners for the purpose of targeted advertising:

Category A: Identifiers.

Category B: California Customer Records personal information categories.

Category C: Protected classification characteristics under California or federal law.

Category D: Commercial information.

Category F: Internet or other similar network activity.

Category G: Geolocation data.

Category K: Inferences drawn from other personal information.

Sale and Sharing of Personal Information.

California residents may opt out of the “sale” or “sharing” of their personal information. While SHEFIT does not monetize your information, we share information with businesses who provide cross-platform advertising and related tracking and analytics for our products in a way that falls under the CCPA’s broad definition of “sale” or “share.” SHEFIT does not knowingly sell the information of minors under the age of 16 without affirmative consent.

We share the following categories of personal information with marketing and advertising providers for the purposes described in this Privacy Notice:

• Commercial information
• Internet or other similar network activity
• Inferences drawn from other personal information

If you would like to opt out of the use of your personal information for such purposes that may be considered a “sale” or “sharing” under California law, you may do so by using this webform and as outlined here https://shefit.com/pages/opt-out

Your Rights and Choices.

The CCPA provides California residents with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

1. Access, Use Limitation, and Data Portability Rights.

You have the right to request that we limit the use and disclosure of certain personal information, opt-out of the use of certain personal information, as well as disclose certain information to you about our collection and use of your personal information over the past 12 months. You may request that we:

• Disclose to you the categories of personal information we collected about you.
• Disclose to you the categories of sources for the personal information we collected about you.
• Disclose to you our business or commercial purpose for collecting or selling that personal information.
• Disclose to you the categories of third parties with whom we share that personal information.
• Disclose to you the specific pieces of personal information we collected about you (also called a data portability request).
• Disclose to you if we sold, shared, or otherwise disclosed your personal information for a business purpose, separately disclosing:
• Sales, identifying the personal information categories that each category of recipient purchased;
• Sharing, identifying the personal information categories that we shared with each category of recipient; and
• Disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
• Disclose to you if we used automated decision-making technology to evaluate or create a profile of you and provide information about the logic involved in such decision-making processes, including descriptions of the likely outcome.
• Stop using automated decision-making technology to evaluate you, create a profile of you, and make predictions about your future behavior.
• Limit the use and disclosure of your “sensitive personal information,” as that term is defined in the CCPA. At your request, we will use “sensitive personal information” only for purposes necessary to provide the Services.

2. Deletion Request Rights.

You have the right to request that we delete your personal information that we have collected from you and retained, subject to certain exceptions. Once we receive and confirm your consumer rights request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us, or our service provider(s), to:

• Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

3. Correcting Your Personal Information.

You have the right to request that we correct any inaccurate information we hold about you. Upon receipt and verification of your request to correct inaccurate personal information, we will use commercially reasonable efforts to correct your personal information as directed by you, pursuant to the law and applicable regulations.

4. Exercising Access, Use Limitation, Data Portability, Deletion, and Correction Rights.

To exercise the access, use limitation, data portability, and deletion rights described above, please submit a consumer rights request to us by any of the following methods:

• By calling 1-866-768-4872
• By emailing: support@shefit.com
• By visiting WWW.SHEFIT.COM

Only you, or someone legally authorized to act on your behalf, may make a consumer rights request related to your personal information. You may also make a consumer rights request on behalf of your minor child. To designate an authorized agent, please contact us through the methods noted above. Only the consumer or authorized agent may make a consumer rights request related to their personal information. An “authorized agent” is a person (or a business entity registered with the California Secretary of State) that consumers have authorized to act on their behalf or an individual granted authority under a written power of attorney issued pursuant to California Probate Code sections 4000 to 4465.

If you are an authorized agent who wishes to submit a request to know, a request to limit use, a request to delete, or a request to opt-out on behalf of another consumer, please submit to us sufficient information to allow us to verify your identity to a reasonably high degree of certainty and either:

• Proof of authorization to submit the request, written and signed by the consumer; or
• A power of attorney pursuant to Probate Code sections 4000 to 4465.

We may deny a request from an authorized agent who does not submit adequate proof that they have been authorized by the consumer to act on the consumer's behalf. We may also contact the consumer directly to confirm their identity and that they provided you permission to submit the request on the consumer's behalf.

You may only make a consumer rights request for deletion, access, or data portability twice within a 12-month period. The consumer rights request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Making a consumer rights request does not require you to create an account with us. However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal information associated with that specific account.

We will only use personal information provided in a consumer rights request to verify the requestor's identity or authority to make the request.

5. Response Timing and Format.

We endeavor to respond to a consumer rights request within forty-five (45) days of its receipt. If we require more time (up to 45 days), we will inform you of the reason and extension period in writing.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your consumer rights request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination.

We will not discriminate against you for exercising any of your CCPA rights.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

California Do Not Track Disclosure.

Do Not Track (“DNT”) is a privacy preference that you can set in your web browsers, which allows you to opt out of tracking by websites and online services. We do not currently recognize or respond to DNT signals. For more information about DNT, please see www.eff.org/issues/do-not-track.

California Shine the Light.

California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our Services who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to support@shefit.com.

California Business and Professions Code Section 22581.

California residents under the age of 18 who are registered users of online sites, services, or applications have a right under California Business and Professions Code Section 22581 to remove, or request and obtain removal of, content or information they have publicly posted. To remove content or information you have publicly posted, please send a detailed description of the specific content or information you wish to have removed using the Contact Information below. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

Contact Information.

If you have any questions or comments about this notice, the ways in which SHEFIT collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

• Phone: 866.768.4872
• Email: support@shefit.com
• Website: www.shefit.com
• Postal Address: 4400 Central Parkway, Hudsonville, MI 49428