Effective Date: February 12, 2026

Bloedstone ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website https://bloedstone.com (the "Site") and use our services.

By accessing or using the Site, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Site.

1. Information We Collect

1.1 Personal Information Collected Directly

We collect personal information that you voluntarily provide to us when you:

• Create an account on the Site
• Make a purchase or payment
• Subscribe to our marketing emails
• Contact us with inquiries

The specific types of personal information we collect include:

• Identifiers: Names, postal addresses, email addresses, and IP addresses
• Account Information: Name and email address required for account creation
• Commercial Information: Records of products purchased, obtained, or considered, and other purchasing or transaction histories

1.2 Information Collected Automatically

We automatically collect certain information when you visit, use, or navigate the Site through cookies and similar automated technologies. This information includes:

• Identifiers: IP addresses
• Internet or Network Activity Information: Device and browser information, usage data, and analytics information regarding your interaction with our Site

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and improve the Site and our services
• To process your transactions and manage your account
• To communicate with you, including responding to your inquiries and sending service-related notifications
• For advertising and marketing purposes, including delivering targeted advertising to you through third-party platforms
• To analyze usage patterns and improve user experience through analytics
• To comply with legal obligations and protect our rights

3. How We Share Your Information

We do not sell your personal information for monetary consideration. However, we may share your information in the following ways:

3.1 Third-Party Platforms for Advertising

We share information with the following categories of third parties for advertising and marketing purposes. Under California law, this may constitute "sharing" personal information for cross-context behavioral advertising:

• Social Media Platforms: We share identifiers (names, addresses, email addresses) for advertising and marketing purposes
• Content Measurement and Analytics Companies: We share identifiers and internet/network activity information to measure content performance and analyze user behavior
• Advertising and Marketing Services: We share identifiers with advertising partners and marketing service providers for targeted advertising purposes

3.2 Payment Processors

We use third-party payment processors, including PayPal, Shop Pay, and Shopify, to process transactions. When you make a purchase, your payment information is transmitted directly to these payment processors. We do not store your complete payment card information on our servers. These payment processors have their own privacy policies and terms of service, which govern how they collect, use, and protect your payment information. By making a purchase through our Site, you agree to the terms and policies of these payment processors.

3.3 Service Providers and Contractors

We disclose the following categories of personal information to service providers and contractors who perform services on our behalf: identifiers (names, addresses, email addresses, IP addresses), commercial information (transaction records), and internet/network activity information. These service providers and contractors are contractually obligated to use personal information only for the purposes we specify and in accordance with applicable data protection laws, including the California Consumer Privacy Act. They may not use the information for their own purposes or share it with others without our authorization.

3.4 Legal Compliance and Protection

We may disclose information to comply with legal obligations, respond to legal requests, protect our rights, prevent fraud, or ensure the safety of our users.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information automatically. Cookies are small data files stored on your device. We use cookies for:

• Essential functionality of the Site (strictly necessary cookies that do not require consent)
• Analytics and performance monitoring
• Marketing and advertising purposes (including delivering targeted advertising through third-party platforms)

Cookie Consent: For non-essential cookies (analytics and marketing/advertising cookies), we will obtain your explicit consent before placing these cookies on your device. Closing or navigating away from our cookie consent banner without clicking "Accept" does not constitute consent. Non-essential cookies will remain blocked until you provide affirmative consent by clicking the "Accept" button. Essential cookies necessary for the Site to function are placed automatically and do not require consent.

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Site. You may also opt out of targeted advertising using the mechanisms described in Section 5 below. For detailed information about the specific cookies we use, including their names, purposes, and durations, please visit our Cookie Policy page at https://bloedstone.com/cookie-policy.

Do Not Track Signals: Some web browsers transmit "Do Not Track" (DNT) signals. Currently, our Site does not respond to DNT signals. However, you can opt out of the sharing of your personal information for targeted advertising purposes as described in Section 5.1.

5. Your Privacy Rights and Choices

5.1 California Residents (CCPA/CPRA Rights)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you in the preceding 12 months (or longer if we maintain such data), the categories of sources from which we collected the information, the business purpose for collecting the information, and the categories of third parties and service providers with whom we share the information.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sharing: While we do not sell personal information for monetary consideration, we share personal information with third parties for cross-context behavioral advertising (targeted advertising). You have the right to opt out of such sharing. To opt out, you can use the "Do Not Sell or Share My Personal Information" link on our homepage, adjust your privacy settings on the Site, or use the Global Privacy Control (GPC) signal in your browser.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information. We do not currently collect or use sensitive personal information as defined by the CCPA.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights.

Opt-Out Confirmation: When you opt out of sharing through the "Do Not Sell or Share My Personal Information" link or GPC signal, we will display a visible confirmation to indicate that your request has been processed. Specifically, we will display a persistent banner in the Site header showing "Opt-Out Request Honored" for 30 days after processing your request. Additionally, a toggle indicator in your account privacy settings will show your current opt-out status. You will not be required to create an account to exercise your opt-out rights. We will honor opt-out requests for at least 12 months before requesting consent again.

5.2 EU and UK Residents (GDPR Rights)

If you are located in the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Right of Access: You have the right to request access to your personal data.
• Right to Rectification: You have the right to request correction of inaccurate personal data.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You have the right to request restriction of processing of your personal data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on consent, you have the right to withdraw it at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority about how we process your personal data.

5.3 Legal Basis for Processing (GDPR)

For EU and UK residents, we process your personal data based on the following legal bases:

• Consent: When you provide consent for marketing communications or non-essential cookies (e.g., analytics and advertising cookies). You can withdraw consent at any time through your account settings or by contacting us.
• Contract: When processing is necessary to fulfill our contract with you (e.g., processing your order, providing customer support, managing your account).
• Legitimate Interests: When we have a legitimate business interest, such as improving our services, fraud prevention, network security, or internal analytics, provided your rights do not override these interests.
• Legal Obligation: When we must comply with applicable laws (e.g., tax reporting, responding to legal requests).

5.4 Cookie Consent for EU/UK Residents

If you are accessing our Site from the EU or UK, we will display a cookie consent banner when you first visit our Site. This banner allows you to accept or reject non-essential cookies (analytics and advertising cookies) before they are placed on your device. Non-essential cookies are blocked until you provide explicit consent. Essential cookies necessary for the Site to function are placed automatically and do not require consent.

Our cookie banner provides you with granular choices across the following cookie categories:

• Strictly Necessary Cookies: Essential for site functionality (no consent required)
• Analytics and Performance Cookies: Used to analyze usage and improve the Site (requires consent)
• Advertising and Marketing Cookies: Used for targeted advertising (requires consent)

Our cookie banner presents accept and reject options with equal prominence, ensuring that rejecting cookies is as easy as accepting them. You can change your cookie preferences at any time through the cookie settings link in our website footer or through your browser settings. For detailed information about specific cookies we use, please visit our Cookie Policy page at https://bloedstone.com/cookie-policy.

5.5 Exercising Your Rights

To exercise any of your privacy rights, please contact us at hello@bloedstone.com or by mail at 539 Crane Blvd, Los Angeles, CA 90065. We will respond to your request within the timeframes required by applicable law (typically 30-45 days for CCPA requests and 30 days for GDPR requests). We may need to verify your identity before processing your request to protect your personal information from unauthorized access.

6. Marketing Communications

We send marketing emails to users who have subscribed to our communications. You can opt out of marketing emails at any time by clicking the "unsubscribe" link in the footer of any marketing email we send you, or by contacting us at hello@bloedstone.com. You may also withdraw your consent for marketing communications at any time. Please note that even if you opt out of marketing communications, we may still send you non-promotional messages related to your account, transactions, or legal obligations.

7. Data Security

We implement appropriate administrative, technical, and physical security measures to protect your personal information, including:

• Multi-Factor Authentication (MFA) for account access
• Locked physical storage for sensitive data
• Home alarm system for physical security of our equipment
• Encrypted data transmission using industry-standard protocols

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information using commercially reasonable means, we cannot guarantee its absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Information: Retained for the duration of your account plus 30 days after account termination, unless you request earlier deletion
• Transaction Records: Retained for 7 years for tax, accounting, and legal compliance purposes
• Marketing Communications Data: Retained until you unsubscribe or request deletion
• Analytics and Cookie Data: Retained for up to 26 months

When we no longer need your information, we will securely delete or anonymize it. For California residents, we provide access to personal information collected in the preceding 12 months, or longer if we maintain such information.

9. Children's Privacy

Our Site is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information as soon as possible. If you believe we have collected information from a child under 13, please contact us at hello@bloedstone.com.

California residents under 18 years of age have additional rights regarding the removal of content they have posted. If you are a California resident under 18 and have posted content on our Site, you may request removal by contacting us at hello@bloedstone.com.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where we or our service providers operate. These countries may have data protection laws that are different from the laws of your country. By using our Site, you consent to the transfer of your information to these countries.

For EU and UK residents, we will take appropriate measures to ensure your information receives an adequate level of protection in accordance with GDPR and UK GDPR requirements. These measures may include:

• Using European Commission-approved Standard Contractual Clauses
• Ensuring our service providers are certified under approved adequacy frameworks
• Implementing additional technical and organizational security measures

11. Third-Party Links

The Site may contain links to third-party websites and services, including our payment processors (PayPal, Shop Pay, and Shopify) and social media platforms. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. When you use third-party payment processors, you are subject to their terms of service and privacy policies in addition to ours.

12. Account Management

If you wish to terminate your account, please email us at hello@bloedstone.com. Upon termination, we will delete or anonymize your personal information in accordance with our data retention policies and applicable law, except where we are required to retain certain information for legal, tax, accounting, or business purposes (such as transaction records). Account termination requests will be processed within 30 days.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this Privacy Policy. For registered users, we will notify you of material changes by email to the address associated with your account at least 30 days before the changes take effect. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Site after changes become effective constitutes your acceptance of the updated Privacy Policy.

14. California-Specific Disclosures

In the preceding 12 months, we have collected and disclosed the following categories of personal information:

Categories Collected:

• Identifiers (names, addresses, email addresses, IP addresses)
• Commercial Information (records of products purchased, transaction histories)
• Internet or Network Activity Information (device and browser information, usage data, analytics information)

Sources of Collection:

• Directly from users (via forms, account creation, purchases)
• Automatically through cookies and similar technologies

Business Purposes for Collection:

• Providing and improving the Site and services
• Processing transactions and managing accounts
• Communicating with users
• Advertising and marketing (including delivering targeted advertising through third-party platforms)
• Analytics and performance monitoring

Categories Shared with Third Parties for Cross-Context Behavioral Advertising:

• Identifiers shared with social media platforms, analytics companies, and advertising/marketing services
• Internet or Network Activity Information shared with analytics companies

Categories Disclosed to Service Providers for Business Purposes:

• Identifiers disclosed to service providers (e.g., email service providers, hosting providers)
• Commercial Information disclosed to service providers assisting with transaction processing and customer support
• Internet or Network Activity Information disclosed to service providers assisting with analytics and site operations

We do not sell personal information for monetary consideration. We do not knowingly sell or share personal information of consumers under 16 years of age.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Bloedstone

Email: hello@bloedstone.com

Mailing Address: 539 Crane Blvd, Los Angeles, CA 90065

Website: https://bloedstone.com

By using our Site, you acknowledge that you have read and understood this Privacy Policy.