Privacy Policy

Last Updated: August 31st, 2026

-----

Hedley and Bennett, Inc., along with our brands and subsidiaries (“H&B” or “us”), is committed to protecting your privacy. This privacy policy describes how we collect, use, and share information about our customers and users (“You”). This policy applies to information we collect when you use our website, hedleyandbennett.com (the “Site”), including any Shopify-hosted domains or checkout pages we use to operate our online stores, apps, or when you otherwise interact with us regarding our products, services or offerings (collectively referred to as the “Services”).

We may change this privacy policy from time to time. If we make changes, we will notify you by updating the date at the top of this policy and, in some cases, by providing additional notice. We encourage you to review the privacy policy whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy. Capitalized terms not defined in this privacy policy have the meanings found in our Terms of Service. By using our Site, you acknowledge the terms of this Privacy Policy as they may be amended from time to time.

Collection Of Personal Data

We treat any data that identifies, or reasonably can be linked to, an individual consumer as “Personal Data.” Data that has been de-identified or aggregated so that it cannot reasonably be linked to an individual consumer is not Personal Data, and we may use that data for any purpose. Personal Data also does not include publicly available information, such as information that is lawfully made available through federal, state, or local government records. We may use de-identified, aggregated, or publicly available data for any purpose. We do not attempt to re-identify de-identified data unless we have been given consent to maintain and use the data in identifiable form.

We may provide the following information when you visit our Sites or otherwise interact with us. The Personal Data we collect includes:

Identifying Information - such as name, mailing address, phone numbers, and email addresses.

Internet or Similar Network Activity - such as your activity related to your interaction on our Site, as well as your interaction with our advertising and other communications, which may include your IP address and browsing activity.

Commercial Information - such as information relating to your purchases and services, including your purchasing or consuming histories or tendencies.

Financial Information - such as your bank account number, credit card number or other financial information when you purchase products or services from us.

Demographic or Preference Information – such as birthday, product interests, cooking preferences, survey responses, or other information you choose to provide.

How We Obtain Your Personal Data

Information You Provide to Us

We collect information you provide directly to us. For example, we collect information when you use our Site, shop in our online stores, call us on the phone, create an online account, sign up to receive our emails or SMS messages, participate in sweepstakes, contests, promotions, or surveys, communicate with us via third-party social media sites, request customer support, or otherwise communicate with us.

Information We Collect Automatically

We automatically collect certain information about you when you access or use our websites or transact business with us, including (i) information about your use of our websites, such as the type of browser you use, access times, pages viewed, your IP address and the referring link through which you accessed our websites; (ii) information about the transaction, such as product details and the date and location of the purchase/return; and (iii) we may use cookies, web beacons, also known as “tracking pixels”) and other tracking technologies to collect information about you when you interact with our websites or emails, including information about your browsing and purchasing behavior. We may combine this information with other information we collect about you and use it for various purposes, such as improving our websites and your online experience, understanding which areas and features of our Site are popular, counting visits, understanding campaign effectiveness, tailoring our communications with you, determining whether an email has been opened and links within the email have been clicked and for other internal business purposes.

Use Of Personal Data

Provide Our Services, and to Personalize Your Experience: We use Personal Data to furnish our products and Services, including to: (1) process and fulfill your purchases; (2) manage your account, or (3) provide information about the status of your products or Services.

Communicate with You: We use Personal Data to respond to communications, contact you about your transactions, promote our products or Services, provide other relevant information, and request information or feedback.

Market Our Products: We use Personal Data to contact you about special offers and general information about other goods, Services, and events that we offer.

Personalize Your Experience: We use Personal Data about your use of our Site and Services to personalize and enhance your experience.

Internal Research: We use Personal Data to conduct internal research to develop, improve or repair our products, Services, or technology.

Security or Fraud Prevention: We use Personal Data to: (1) prevent, detect, protect against, or respond to security incidents, fraud or malicious or deceptive practices, or other illegal activity, (2) preserve the integrity or security of systems, and (3) investigate, prepare for, establish or defend legal claims.

For Business Transfers: We may use Personal Data to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.

Legal Compliance: We may use Personal Data to comply with applicable law or a lawful governmental request.

We will retain your Personal Data only for as long as necessary to fulfill the business and commercial purpose(s) for which we obtained the information or as otherwise required by law. Also, please see below regarding consumer rights that may be applicable in your jurisdiction.

We do not use or disclose sensitive personal information, as defined by the California Consumer Privacy Act (“CCPA”), for purposes that would require a consumer to exercise a right to limit under the CCPA.

Sharing of Personal Data

We may share Personal Data with service providers who act on our behalf, our partners, or others operating at your direction or where legally necessary or appropriate.

Service Providers: We engage third parties to act as our service providers and perform certain tasks on our behalf in connection with the delivery of our products or Services to you. The tasks performed by service providers include: (1) processing and storing Personal Data; (2) assisting with marketing communications, advertising, and strategic initiatives to enhance the Site or our Services; (3) processing credit card or other financial charges; and (4) providing technology services. We may provide service providers with all categories of Personal Data described above so they may act on our behalf. We take reasonable steps to ensure that our service providers are contractually obligated to keep Personal Data confidential and to use it only as permitted.

Affiliates: We may share all the above categories of information with our affiliated companies.

Other Legal Purposes: We also may share Personal Data: (1) with your consent; (2) to respond to subpoenas, court orders, or other legal process or otherwise as required or allowed by law or the competent governmental or judicial authorities; (3) to cooperate with law enforcement, government or regulatory entities, and safety or investigation authorities; (4) when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud or other illegal activities or to establish or preserve a legal claim or defense; (5) to prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or other illegal activity, or preserve the integrity or security of systems; (6) to investigate, establish, exercise, prepare for, or defend legal claims; or (7) as part of a corporate restructuring, sale of assets, merger or divestiture.

Advertising and Analytics

We engage third parties to serve advertisements on our behalf across the Internet and to provide analytics services. These entities may use cookies, web beacons, and other technologies to collect information about your use of our Site, such as your IP address, web browser, pages viewed, time spent on pages, links clicked, and conversion information. This information may be used by us and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Site and other websites, and better understand your online or offline activity. We may also work with third parties to serve ads to you as part of a customized campaign on other websites or platforms.

We allow third parties to provide analytics services and serve advertisements on our behalf and on behalf of others across the web and in mobile applications. These third parties may use cookies, web beacons, and other technologies to collect information about your use of our website and other websites, including your IP address, web browser, mobile network information, pages viewed, time spent on pages, links clicked, and conversion information. This information may be used by us and these third parties to analyze and track data, determine the popularity of certain content, deliver advertising targeted to your interests on other websites and online services, and better understand your online activity. For more information about interest-based ads, or to opt out of having your web browsing information used in this way, please visit www.aboutads.info/choices.

We may also work with third parties to serve ads to you on our behalf or on behalf of other advertisers on third-party platforms (such as Facebook or Google). As part of these ad campaigns, we or third-party platforms may convert information about you, such as your email address and phone number, into a unique value that can be matched to a user account on these platforms, allowing us and others to serve you advertising that is customized to your interests. Note that the third-party platforms may offer you choices about whether you see these types of customized ads.

Cookies

We use functional and analytical cookies to provide the best user experience. We, as well as third parties, use tracking cookies on our Site to show you customized advertisements and offers on our Site and on third-party websites and apps. Most web browsers are set to accept cookies by default. If you prefer, you can usually set your browser to remove or reject cookies, but please understand that doing so does not necessarily affect third-party flash cookies used in connection with our Site. Please note that removing or rejecting cookies may affect the availability and functionality of our Site. In addition, many web browsers support Do Not Track technology. However, if you enable Do Not Track, some third-party companies may not recognize browser “Do Not Track” signals. If you would like to opt out of the collection and use of tracking data for ad targeting, please visit www.aboutads.info/choices/. Our website uses cookies to help track items you add to your shopping cart, including when you abandon it. Where you have opted in to receive SMS messages from us, we may use this information to send cart reminder messages via SMS.

Links To 3rd Party Websites

Our Sites may contain links to other websites. Our Privacy Policy does not apply to the practices of other websites, and H&B is not responsible for the actions and privacy policies of third parties. We encourage you to be aware of when you leave our Sites and to read the privacy policies of each website that you visit.

Security

We take reasonable measures to help protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration, or destruction. We use organizational, procedural, and technical safeguards to secure data in our possession, consistent with the sensitivity level of such data. When sensitive information (such as credit card data) is collected on our Site, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol, and may be processed by third parties with similar levels of protection. Regardless of the precautions we take, data transmission over the internet cannot be guaranteed to be completely secure. It may be possible for third parties outside our control to unlawfully intercept or access transmissions or private communications. While we strive to protect Personal Information, we cannot ensure or warrant the security of any information you transmit to us.

Other Data Protection Rights

Depending on your jurisdiction, you may have data protection rights. This section describes those legal rights and explains how to exercise those rights. We will not discriminate against you for exercising any of these rights.

Right to Know About Personal Data Collected, Used, or Disclosed

You have the right to request that we disclose certain information to you about our collection, use, and disclosure of your Personal Data. Once we receive your request and verify your identity, we will disclose to you: (1) the categories of Personal Data we collected about you; (2) the categories of sources for the Personal Data; (3) our business or commercial purpose for collecting or disclosing that Personal Data; (4) the categories of third parties with whom we shared that Personal Data; and (5) the specific pieces of Personal Data we collected about you in the preceding 12 months.

Right to Delete Personal Data Collected or Maintained

You have the right to request that we delete any of your Personal Data that we have collected and retained from you, subject to certain exceptions. Once we receive, confirm your request, and verify your identity, we will permanently delete (and direct our service providers to delete) your Personal Data from our records, unless a legal exception to deletion applies.

Right to Correction of Personal Data

You have the right to request that we correct inaccurate Personal Data that we maintain about you.

Right to Opt-Out of the Sale or Sharing of Your Personal Information for Targeted Advertising

You have the right to opt out of the sharing of your Personal Information for targeted advertising. As noted above, we engage in personalized or targeted advertising using third-party cookies or pixels. In connection with such advertising, we may share the following categories of Personal Information with marketing partners: (a) device information and identifiers, such as unique advertising identifiers and cookies, and IP address; (b) usage information, such as browsing history; (c) location information, such as city; and (d) inference data. We do not otherwise sell your Personal Information, and we have no actual knowledge of selling or sharing Personal Information of minors under 16 years of age to non-affiliated third parties without affirmative consent. To opt out of the sale or sharing of your Personal Information for targeted advertising, click the “Do Not Sell or Share My Personal Information” link in our website footer and update your cookie/privacy preferences.

Additionally, if you enable a browser-based opt-out preference signal, such as Global Privacy Control, in certain jurisdictions, upon receipt or detection of the signal, we will make reasonable efforts to treat the signal as a valid request to opt out of sharing Personal Information for targeted advertising, pursuant to applicable law.

Exercising Your Rights

To exercise the rights described above, please submit a verifiable consumer request to us by either:

Emailing us at customerservice@hedleyb.com

Contacting us online at https://www.hedleyandbennett.com/support/help-center?hcUrl=%2Fen-US%2Fcontact

Authorizing an Agent

Depending on your jurisdiction, you may designate an authorized agent to submit your consumer request on your behalf, provided the agent has your written permission and you have verified your identity directly with us.

Verifying Your Request

We cannot respond to your request or provide you with Personal Data unless we can verify your identity or authority to make the request and confirm that the Personal Data relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Data provided in a verifiable consumer request to verify your identity or authority to make the request.

To verify your identity, we ask that you provide us with the following information when you submit your request: (1) first name, (2) last name, and (3) phone number or email. We will use the above information to verify your identity. Depending on your request or the information you provide, we may require additional information to verify your identity and fulfill your request.

If we decline to take action regarding your request, you may have the right to appeal. Please contact us at customerservice@hedleyb.com if you would like to submit such an appeal.

California Civil Code Section 1798.83 - Shine the Light Law

In addition to the rights provided by the CCPA, California Civil Code section 1798.83 allows California residents to request information once per year about how their personal information has been shared with third parties for direct marketing purposes. To make such a request, please email customerservice@hedleyb.com or write to us at the address listed in the Contact Us section below. H&B permits California residents to opt out of having their information shared with third parties for direct marketing purposes. To opt out, please click “unsubscribe” on any emails from us or email us at customerservice@hedleyb.com requesting to be removed.

Rights and Choices of EU and UK Data Subjects

The EU’s General Data Protection Regulation and the UK Data Protection Act and UK General Data Protection Regulation provide EU and UK data subjects with additional rights described below. We generally act as a data controller of EU and UK data subject’s Personal Data submitted to us. We rely on that Personal Data for the legitimate commercial purposes of providing our Services. Where we need to collect Personal Data by law or under the terms of a contract we have with you, and you fail to provide that Personal Data when requested, we may not be able to provide you with our Services. We consider and balance any potential impact on you and your rights before we process your Personal Data. We do not use your Personal Data for activities where our interests are overridden by the impact on you unless we have your consent or are otherwise required or permitted to by law. In certain circumstances, we act as a data processor, and, in those circumstances, we process your Personal Data for the purposes set out in this Policy consistent with the data processing terms of those partners. If we are relying on your consent to process your Personal Data, you have the right to withdraw your consent at any time by contacting us at the information below. We will only use your Personal Data for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

If you are located in the EU or UK and would like to: (1) access your Personal Data; (2) transfer your Personal Data; (3) request the erasure of your Personal Data; (4) object to the processing of your Personal Data; or (5) change your privacy preferences, please use our privacy forms by sending an email to: customerservice@hedleyb.com. Please note that there are certain exceptions and restrictions of these rights under the European data privacy laws that enable Personal Data to be retained, process or withheld from access, and we will inform you of these exemptions and restrictions, if applicable. If you are located in the EU or UK and have any complaints regarding our privacy practices as a data controller, you have the right to make a complaint at any time to your local Supervisory Authority. However, we would appreciate the chance to address your concerns before you approach your Supervisory Authority, so please contact us first at the information below.

Cross-Border Data Transfers

We process Personal Data both inside and outside the United States. When appropriate, we execute EU and UK Model Clauses, also known as Standard Contractual Clauses, to meet the adequacy and security requirements for our customers that operate in the EU and the UK and make transfers of personal data from those jurisdictions to the United States and other countries that lack adequacy determinations. Please contact us as detailed in the “Contact Us” section below for more information. In addition, we may transfer your Personal Data if one of the legal exceptions for such transfer can be invoked, such as with your consent or in execution of an agreement you have with us.

Children

We do not knowingly collect any Personal Information from children under the age of 13. We do not sell products for purchase by children and all children’s products we sell are for purchase by adults only.

Contact Us

If you have any questions about this Privacy Policy, the practices of this Site, or your dealings with this Site, please contact us at: (i) by mail at Hedley and Bennett, Inc., 2301 East 7th Street, A-431, Los Angeles, CA 90023; or (ii) by email at customerservice@hedleyb.com.

Policy Last Updated: August 20th, 2026