Effective Date: January 1^st, 2020 (Updated June 9^th 2025)

Eden Brands, Inc. (“Evereden”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you interact with our website (www.ever-eden.com), contact our team, place orders, or engage with us across social platforms or through customer support.

1. Scope of This Policy

This Privacy Policy applies to all personal information collected about individuals who access or use our Services, including purchases, promotions, marketing communications, and customer support. This policy applies globally and is intended to meet the requirements of the GDPR (EU), UK GDPR, the California Consumer Privacy Act (CCPA), and the Australian Privacy Act.

2. Information We Collect

A. Device Information

• Examples: IP address, browser type, operating system, time zone, pages viewed, time spent, referring URLs.
• Purpose: Site optimization, analytics, fraud detection.
• Collected Automatically: Via cookies, web beacons, pixels, and log files.

B. Order Information

• Examples: Name, shipping/billing address, payment method (incl. card data), phone number, email.
• Purpose: Fulfill orders, communicate with you, detect fraud, comply with legal obligations.
• Collected From: Directly from you.
• Disclosure: Shared with service providers like Shopify, payment processors, and couriers.

C. Support & Communications

• Examples: Email history, recorded calls, skincare-related disclosures (if volunteered), health or medical info if submitted in support requests.
• Purpose: Respond to inquiries, improve service, provide personalized support.
• Collected From: You or someone contacting us on your behalf.
• Disclosure: Support team, advisors, or authorities when required by law.

3. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Maintain session state and cart information;
• Provide personalized product recommendations and currency display;
• Analyze site traffic and user behavior.

You can control cookies via browser settings. For more detail, visit www.allaboutcookies.org.

4. Advertising & Analytics

We may use services like Google Analytics and Meta Ads to:

• Understand user behavior;
• Deliver targeted ads across the web;
• Measure ad campaign effectiveness.

You can opt out of personalized advertising via:

• Google: ads settings
• Facebook: ad preferences
• Network Advertising Initiative: opt-out tool

5. International Transfers

Your personal data may be processed or stored in the United States or other countries outside your jurisdiction. Where legally required, we take steps to ensure adequate protection or obtain your consent.

For Australian residents: You consent to overseas data transfers under Australian Privacy Principle 8.1, acknowledging that foreign entities may not be subject to equivalent protections.

6. Legal Basis for Processing (GDPR/UK GDPR)

For users in the EEA or UK, we process personal data under the following legal bases:

• Your explicit consent;
• Performance of a contract (e.g., fulfilling your order);
• Legal obligations;
• Legitimate interests (e.g., marketing, fraud prevention).

7. Retention

We retain personal data for as long as necessary to fulfill our services or comply with our legal and business obligations. You may request deletion of your data, subject to our legal or regulatory obligations.

8. Security

We employ technical and organizational safeguards including:

• Secure data transmission via HTTPS and encrypted databases;
• Limited access to personal data within our organization;
• Ongoing monitoring and audits.

Despite our efforts, no method is 100% secure. You acknowledge the risks inherent in transmitting data online.

9. Your Rights

Under GDPR/UK GDPR (EEA/UK residents)

You have the right to:

• Access the data we hold about you;
• Request corrections or deletion;
• Object to processing or request data portability;
• File a complaint with your national data protection authority.

Under CCPA (California residents)

You have the right to:

• Know what data we collect;
• Request deletion;
• Opt out of “sale” of personal data (we do not sell your data);
• Designate an authorized agent to exercise your rights.

Under Australian Privacy Act

You may:

• Choose not to provide certain data;
• Request correction or deletion;
• Lodge complaints with the Office of the Australian Information Commissioner (OAIC).

To exercise any rights, contact us at: privacy@ever-eden.com

10. Children’s Privacy

Our services are not directed at children under 13. If we become aware that a child has provided us personal data, we will delete it unless legally required to retain it.

11. Automated Decision-Making

We do not engage in fully automated decision-making that produces legal or significant effects. Our ecommerce platform (Shopify) uses limited automation for fraud prevention.

12. Behavioral Profiling and Communications

If you opt into marketing (via email or SMS), we may use your activity to personalize your experience. You can opt out at any time using the unsubscribe links or by replying “STOP” to SMS messages.

13. Third-Party Tools & Integrations

We may use platforms including:

• Shopify (storefront and payments)
• Klaviyo, Repeat and Wunderkind (email)
• Meta, Google, Tik Tok, Criteo (ads)
• Gorgias or Zendesk (support)
• Attentive (text messaging)
• Loop (subscription)
• Yotpo (loyalty program and customer reviews)
• Google Analytics and TripleWhale (analytics)
• Postpilot (direct mail)

Each provider handles data under their own privacy terms.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be posted on our Website. Material changes will be communicated via email or banner notice where appropriate.

15. Contact Us

If you have questions, feedback, or wish to exercise any data rights, please contact:

Evereden Privacy Team
privacy@ever-eden.com
Eden Brands, Inc.
401 Broadway, Suite 2001
New York, NY 10013