1. Introduction

Queen Anne's Suppliers LLC, a North Carolina limited liability company ("QAS," "we," "us," or "our"), respects your privacy. This Privacy Policy explains what information we collect about you when you visit queenannessuppliers.com (the "Site") or use any of our related services, how we use and share that information, and the choices you have about it.

By accessing or using the Site, you agree to this Privacy Policy and to our Terms & Conditions. If you do not agree, please do not use the Site.

This Privacy Policy applies only to the Site and to information collected by QAS. It does not apply to information collected by any third-party website, service, or application that you may access through links on the Site, even if those third parties use a QAS logo or are affiliated with QAS.

2. Who This Policy Applies To

This Privacy Policy applies to anyone who visits the Site, creates an account, places an order, contacts us, signs up for our communications, or otherwise interacts with us through the Site. You must be at least 21 years old to use the Site or its services. We do not knowingly collect personal information from anyone under 21. See Section 10 for additional information.

3. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically when you use the Site, and information we receive from third parties.

3.1 Information You Provide

When you interact with the Site, you may provide us with information including:

• Account information. If you create an account, we collect information such as your name, email address, password, and date of birth (used to confirm age).
• Order information. When you place an order, we collect information necessary to fulfill it, such as your billing address, shipping address, email address, phone number, the products you ordered, and a record of the transaction. Payment card information is collected by our third-party payment processor and is not stored on our servers in full form.
• Age verification information. Depending on how we verify age, we may collect a photo or scan of a government-issued ID, your date of birth, and the result of any third-party age-verification check we run.
• Wholesale information. If you inquire about or place a wholesale order, we may collect information about your business, including business name, address, license or registration numbers, points of contact, and ordering history.
• Communications. If you contact us by email, web form, phone, or other means, we collect the information you provide in that communication, including your name, contact details, and the contents of your message.
• Marketing preferences. If you subscribe to our marketing communications, we collect your email address and any preferences you indicate.

3.2 Information Collected Automatically

When you visit the Site, we and our service providers automatically collect certain information about your device and your interaction with the Site, including:

• Technical information. IP address, browser type and version, operating system, device type, device identifiers, language settings, and referring/exit URLs.
• Usage information. Pages viewed, links clicked, time spent on the Site, scroll depth, navigation paths, search terms used on the Site, products viewed and added to cart, and the date and time of your visit.
• Approximate location. A general geographic region (such as city or state) derived from your IP address. We do not collect precise GPS location data from the Site.
• Cookies and similar technologies. See Section 4 below.

3.3 Information From Third Parties

We may receive information about you from third parties, such as:

• Payment processors (confirmation that a payment was successful, the last four digits of the card used, the type of card);
• Shipping carriers (delivery confirmation, address corrections);
• Age-verification providers (the result of an age check);
• Analytics and advertising partners (aggregated reports on Site usage); and
• Public sources and our affiliates and service providers, where legally permitted.

4. Cookies and Similar Technologies

A "cookie" is a small text file stored on your device when you visit a website. We use cookies and similar technologies (such as pixels and local storage) to operate the Site, remember your preferences, secure your account, analyze how the Site is used, and understand what is working.

We use the following categories of cookies:

• Strictly necessary cookies. Required to operate the Site, including for shopping cart functionality, login sessions, age-gate verification, and security. These cannot be turned off without breaking core Site functionality.
• Functional cookies. Remember choices you have made (such as language or display preferences) to improve your experience.
• Analytics cookies. Help us understand how visitors use the Site so we can improve it. See Section 5 (Google Analytics).
• Marketing/advertising cookies. Where used, these support marketing measurement and may be set by us or by third-party marketing partners.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, and most browsers will let you set preferences for different categories. Blocking strictly necessary cookies may cause parts of the Site to not function. Where required by applicable law, we will request your consent before placing non-essential cookies.

5. Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC ("Google"), to understand how visitors interact with the Site. Google Analytics uses cookies and similar technologies to collect information such as:

• Your IP address (truncated/anonymized where supported);
• The pages you view and the order in which you view them;
• The amount of time you spend on each page;
• The site or source that referred you to us; and
• Aggregate information about the device, browser, and operating system you are using.

This information is transmitted to and stored by Google on servers that may be located outside the State of North Carolina and outside the United States. Google uses this information to evaluate Site usage on our behalf, compile reports for us, and provide other services related to Site activity and internet usage.

You can also learn more about how Google handles data collected through its services at policies.google.com/privacy and policies.google.com/technologies/partner-sites.

If we enable Google Analytics Advertising Features (such as Remarketing or Demographics & Interests reporting), this policy will be updated to reflect that, and additional disclosures and opt-out options will be provided.

6. How We Use the Information We Collect

We use the information we collect for purposes including:

• Verifying your age and eligibility to use the Site;
• Processing, fulfilling, and tracking your orders, including arranging shipment, payment, and customer service;
• Operating, maintaining, securing, and improving the Site;
• Detecting, investigating, and preventing fraud, abuse, security incidents, and other unlawful activity;
• Communicating with you about your orders, account, support requests, and policy changes;
• Sending you marketing communications you have opted into, and tailoring those communications based on your interests and prior interactions with us;
• Conducting analytics, including measuring traffic, identifying trends, and evaluating the effectiveness of our marketing;
• Complying with applicable legal, regulatory, and recordkeeping obligations, including those under N.C.G.S. Chapter 18D and any applicable federal hemp law;
• Enforcing our Terms & Conditions and any other applicable agreement; and
• Any other purpose disclosed to you at the time of collection, or for which you have given your consent.

7. How We Share Information

We do not sell your personal information in the traditional sense of exchanging it for money. We may, however, share information in the following ways:

• Service providers. We share information with third parties that perform services for us, such as website hosting, payment processing, age verification, shipping and logistics, order management, customer support, email marketing, analytics, and advertising. These service providers are authorized to use your information only as necessary to perform their services for us.
• Payment processors. Payment card information is collected and processed by our third-party payment processor under their own terms and privacy policies. We do not retain full payment card numbers on our servers.
• Compliance and legal. We may disclose information when we believe in good faith that disclosure is necessary to comply with a subpoena, court order, regulatory request, or other legal obligation; to enforce our Terms & Conditions; to protect our rights, property, or safety; or to protect the rights, property, or safety of our customers, employees, or others.
• Business transfers. If QAS is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, your information may be transferred as part of that transaction. We will notify you (such as by email and/or a prominent notice on the Site) of any such change in ownership or control of your personal information.
• With your consent. We may share information for any purpose for which you have given consent.
• Aggregated or de-identified information. We may share aggregated or de-identified information that cannot reasonably be used to identify you, for any purpose.

Some of our analytics and advertising partners — including Google Analytics — may collect information through cookies and similar technologies in a manner that, under certain state privacy laws, is considered a "sale" or "share" of personal information. See Section 9 for your opt-out rights.

8. Marketing Communications

If you sign up to receive marketing emails or texts from us, you can opt out at any time by following the unsubscribe link in any marketing email, by replying STOP to any marketing text (where applicable), or by contacting us at queenannessuppliers@gmail.com. Even if you opt out of marketing, we may continue to send you transactional and operational messages, such as order confirmations, shipping updates, account notices, and policy changes.

9. Your Privacy Rights and Choices

Depending on where you live, you may have certain rights regarding the personal information we hold about you. These rights are not absolute and may be subject to exceptions and limitations under applicable law.

9.1 General Rights

Where granted by applicable law, you may have the right to:

• Know and access. Request confirmation of whether we process your personal information and a copy of the personal information we hold about you.
• Correct. Request that we correct inaccurate personal information about you.
• Delete. Request that we delete personal information about you, subject to certain exceptions (for example, we may need to retain certain information for tax, regulatory, or fraud-prevention purposes).
• Opt out of sale or sharing. Where applicable, opt out of any sale or sharing of your personal information.
• Opt out of certain marketing. Opt out of marketing communications at any time.
• Non-discrimination. Not be discriminated against for exercising your privacy rights.

To exercise any of these rights, contact us at queenannessuppliers@gmail.com with the subject line "Privacy Request." We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.

9.2 California Residents

If you are a resident of California, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"). These rights include the rights described in Section 9.1 above, as well as the right to limit the use and disclosure of sensitive personal information (where applicable).

For purposes of the CCPA, in the twelve months preceding the Effective Date of this Privacy Policy, we have collected the categories of personal information described in Section 3, for the purposes described in Section 6, and we have shared those categories with the recipients described in Section 7. We do not knowingly sell or share personal information of California residents under 16 years of age, and the Site is not intended for any person under 21.

To exercise your CCPA rights, including the right to opt out of any "sale" or "share" as those terms are defined under the CCPA, submit a request to queenannessuppliers@gmail.com with the subject line "California Privacy Request." You may also designate an authorized agent to make a request on your behalf, in accordance with CCPA requirements.

9.3 Other State Residents

If you are a resident of Colorado, Connecticut, Virginia, Utah, or another U.S. state that grants similar privacy rights, you may have rights comparable to those described above, subject to the requirements and exceptions of your state's law. To exercise those rights, contact us at queenannessuppliers@gmail.com.

9.4 Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is currently no industry standard for how to interpret these signals, the Site does not currently respond to them. You can still control tracking through the cookie and analytics options described above.

10. Children's Privacy

The Site is not intended for, and is not directed to, anyone under the age of 21. We do not knowingly collect personal information from anyone under 21. If you believe that we may have collected personal information from a person under 21, please contact us at queenannessuppliers@gmail.com and we will take prompt steps to investigate and, where appropriate, delete the information.

11. Data Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect. These measures include encryption of data in transit, restricted access to personal information on a need-to-know basis, and use of reputable service providers for hosting, payment processing, and other functions involving personal information.

No method of transmission over the internet or method of electronic storage is 100% secure, however, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and for any activity that occurs under your account.

12. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to fulfill the purpose for which it was collected, to comply with our legal, tax, accounting, and regulatory obligations, to resolve disputes, and to enforce our agreements. When personal information is no longer needed, we will either delete it or de-identify it.

13. Third-Party Links and Services

The Site may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third parties before providing them with your information.

14. International Users

The Site is operated from the United States and is intended for users located in the United States. If you access the Site from outside the United States, you do so at your own risk and acknowledge that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. By using the Site, you consent to such transfer and processing.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If we make material changes, we will provide additional notice, such as by email or a prominent notice on the Site. Your continued use of the Site after the effective date of any update constitutes your acceptance of the revised policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at: