I.             PRIVACY POLICY

Your privacy is important to us. This Privacy Policy describes how we may process your personally identifiable information or personal data (“Personal Information”), including when you visit or make a purchase from blueland.com (the “Site”).

For information on the rights of consumers under various state privacy laws, and our handling of Personal Information of residents of those states, please see the section titled “Privacy Rights for Residents of Certain States” below. Please also see below for information on the rights of consumers in various foreign countries, including the European Economic Area, the United Kingdom, Canada, Australia, and New Zealand.

II.             PERSONAL INFORMATION WE COLLECT

The Personal Information that we collect depends on the nature of the relationship we have with you. Below are some of the ways we may collect and use Personal Information and our legal or business purposes for doing so.

Our Customers

When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you to process your order, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number, which we may use to contact you regarding your order, including by Short Message Service (SMS) text messaging, according to your preferences. We refer to this information as “Order Information.”

Visitors to Our Site

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.” Please see the section below titled “Cookies and Global Privacy Controls” for more information.

Surveys, Promotions, and Marketing

We send marketing emails to our customers and website visitors, often to inform you about upcoming sales, new products, or products you viewed on our Site. Sometimes these emails contain surveys that ask for demographic information, including your age, geographic location, and gender. You may also sign up for our mailing lists by providing your email address. We refer to this information as “Marketing Information.”

III.            COOKIES AND UNIVERSAL OPT-OUT MECHANISMS

We collect Device Information using the following technologies:

• “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. These cookies may be placed by us or our service providers to manage and secure the website (“first-party cookies”) or by third-parties such as our advertising partners for them to obtain Device Information to perform marketing and serve ads (“third-party cookies”).

• “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

• “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.

If you do not wish to be tracked via cookies, please decline cookie tracking when you visit the website, or visit the help pages of your web browser to clear your cookies. For more information on how to manage cookies, including how to disable cookies, you may choose to visit unaffiliated third-party websites, such as https://allaboutcookies.org/how-to-manage-cookies. We are not responsible for, and cannot guarantee the accuracy of, the content provided on https://allaboutcookies.org.

You may also choose to install Universal Opt-out Mechanisms (UOOMs) on your browser. UOOMs are browser signals that indicate a user’s intent to opt-out of some uses of their Personal Information on websites they visit. If our site recognizes that your browser is expressing a UOOM, we will treat it as a request to opt-out of the sharing of your Personal Information and limit the use of your sensitive Personal Information collected by our site.

In some cases, we may not be able to link the UOOM of your browser to other Personal Information that we have collected from you by other means. To express your intent to opt-out of our processing of Personal Information that we may have collected from you outside of our Site, please see the sections titled “Privacy Rights for Residents of Certain States” and “Privacy Rights for Residents of the EU, UK, Canada, and Other Countries” below.

Do Not Track

Although we will respond to UOOMs, please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

Links to Other Websites

Our Site may also contain links to third-party websites. These links are provided solely as a convenience to you and not as an endorsement by us of those websites. We are not responsible for the content of linked third-party websites and make no representations regarding the privacy practices, content, or accuracy of materials on third-party websites.

IV.           HOW WE USE YOUR PERSONAL INFORMATION

We use Order Information generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to: communicate with you and provide customer service; screen our orders for potential risk or fraud; and provide you with information or advertising relating to our products or services or your prior purchases, in accordance with the preferences you have shared with us.

We use Device Information to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns). We also use Device Information to provide you with information or advertising relating to our products or services, in accordance with the preferences you have shared with us.  The Site also uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart, and this information is used to determine when to send cart reminder messages via SMS.

We use Marketing Information to provide you with information or advertising relating to our products or services, in accordance with the preferences you have shared with us.

V.             SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use it for the purposes described above. For example, we use Shopify to power our online store and share Device Information and Order Information with Shopify. Shopify may process your Personal Information when you visit or make purchases in our online store, including to provide services based on your interactions with other merchants and with Shopify. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.

We also share your Personal Information, including Device Information, Marketing Information, and Order Information, with Google Analytics and similar third-parties (including for example Meta and Disco) to help us understand how our customers use the Site.  You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout or through the options to manage cookies on our Site.

We use and share your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. This use includes sharing your Personal Information with third-party advertising partners (including for example Google Ads, Meta, TikTok, Amazon).  We may also share these categories of Personal Information with these third parties using “third-party cookies” that they install on your device.  For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

We also share your Personal Information with our third-party service providers, in order to perform business functions such as fulfilling or shipping your orders, customer service, hosting services, communications, software and website development services, payment processing services, accounting and audit services, compliance services, quality control services, and analytics services. Unless otherwise noted in this Privacy Policy, our third-party service providers are only allowed to use, disclose, or retain your Personal Information for the purpose of providing these services to us, and are prohibited from selling your Personal Information.

We will not share your opt-in to an SMS campaign with any third-party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Information, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to prevent fraud, to respond to a subpoena or other lawful request for information, or to otherwise protect our rights or the rights of others. In the event that we choose to sell, transfer, or merge parts of our business or our assets with another business or a third-party, your personal information may also be disclosed or transferred as part of that merger or transaction.

VI.           HOW WE PROTECT YOUR PERSONAL INFORMATION

We maintain generally accepted industry standards to protect the Personal Information that we collect from unauthorized access or disclosure. We use administrative, technical and physical safeguards designed to protect Personal Information, including for example: multi-factor authentication; physical access restrictions; electronic access restrictions and strong authentication protocols; access restriction policies; firewalls and anti-malware; and employee cybersecurity training. We also comply with payment card industry data security standards that require merchants to implement security measures for credit card information. We never have access to your credit card information, as it is tokenized following PCI-compliant standards.

While we strive to protect your Personal Information and privacy, no data transmission or storage is 100% safe. We cannot guarantee or warrant the security of any information disclosed or transmitted to us and cannot be responsible for the theft, destruction or inadvertent disclosure of Personal Information.

VII.         RETAINING AND DELETING YOUR PERSONAL INFORMATION

We do not retain Personal Information for longer than reasonably necessary to fulfill the business purposes for which it was collected, conduct audits, enforce our legal rights, prevent fraud and ensure security, or comply with our legal obligations. Our retention periods for Personal Information vary depending on the nature of our relationship with you, the sensitivity of the Personal Information, and the risks involved with any related processing. We regularly review our data retention periods and update these policies as needed.

VIII.        CHILDREN’S PRIVACY

Our Site and our products are not intended for purchase or use by children. We do not knowingly collect Personal Information from anyone under 18 years of age. If you are under 18, please do not submit any Personal Information on our Site.

IX.           PRIVACY RIGHTS FOR RESIDENTS OF CERTAIN STATES

This section contains additional information relevant to residents of certain states (listed below). This section is part of, and should be read in conjunction with, this entire Privacy Notice.  This section also serves as our notice at collection for Personal Information collected online or that you submit by email or phone.

If you are a resident of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Montana, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, you may have certain rights regarding the use of your Personal Information. This section of the Privacy Policy describes those rights and how you can exercise them.  Not all state privacy laws provide equal privacy rights.  While we endeavor to respond to all privacy rights requests, we reserve the right to limit our response if we determine that your request is fraudulent or made in bad faith, or if the law does not require it.

(1) The right to notice that Personal Information will be collected:

You have the right to request certain information about our collection and use of Personal Information over the past 12 months. The categories of information that we have collected in the past 12 months are listed below along with the general sources of that information, the purposes for which we collect it, the types of third parties to whom we have disclosed it and our criteria for how long to retain it. We update this information at least once every 12 months.

In addition to the processing of Personal Information described above, which may apply to you, some US privacy laws require us to disclose certain details of our data processing activities in the last 12 months. The following chart identifies the categories of Personal Information that we’ve collected within the last 12 months, the sources of that data, the business or commercial purposes for its collection, the categories of third parties to whom we’ve disclosed it, and the business or commercial purposes for such disclosure:

While we do not exchange any Personal Information for money, we do engage in cross-context behavioral and targeted advertising.  Sharing Personal Information for these purposes may be deemed by some US privacy laws as a “sale” of Personal Information. You may opt-out of the sale or sharing of your Personal Information for behavioral or targeted advertising by clicking the “Do Not Sell or Share My Personal Information” link or by exercising your privacy rights as described below.

In the preceding 12 months, we have sold or shared Personal Information to third parties, and we continue to sell or share it to third parties, as specified below.

For all of the categories listed in this section, we do not use this Personal Information to create profiles on individuals that produce legal or similarly significant effects.  We retain your Personal Information as described in section VII above. We will delete this information upon request from you, unless one of the purposes described in this Privacy Policy or the law prevents us from doing so.  We do not collect Personal Information or Sensitive Personal Information of individuals under eighteen (18).

(2) Your Privacy Rights:

Depending on your state of residence, you may have the right to:

• Request to know more about the Personal Information that we collect, use, and disclose.  Once we receive your request, we may disclose:

  o   The categories of Personal Information we’ve collected about you

  o   The categories of sources for Personal Information we’ve collected about you

  o   Our business or commercial purpose for collecting and/or sharing or selling that Personal Information

  o   The categories of Personal Information that we’ve shared with or sold to third parties

  o   The categories of third parties with whom we’ve shared, or to whom we’ve sold, that Personal Information (residents of Delaware, Maryland, Minnesota, and Oregon have the right to request a list of such third parties)

  o   The specific pieces of Personal Information we’ve collected about you

• Request to access your Personal Information, including in a portable format

• Request deletion of your Personal Information

• Request correction of inaccurate Personal Information

• Opt-out of the sale or sharing of Personal Information for targeted or cross-context behavioral advertising, or limit the use of Sensitive Personal Information, and

• Not be discriminated against for exercising these rights.

Pursuant to state privacy laws, we may deny your request, in whole or in part, including to comply with federal, state or local laws or prevent disclosure of information that we are otherwise legally prohibited from disclosing. If we deny your request, we will inform you of the basis for such denial.

(3) Opting-out of the sale or sharing of your Personal Information, or its use for targeted advertising, or limiting the use of your Sensitive Personal Information:

You have the right to direct companies not to sell your Personal Information and to opt-out from a company sharing your Personal Information for targeted or cross-context behavioral advertising. Except for Utah residents, you also have the right to opt-out from a company processing your Personal Information by automated means for profiling in furtherance of decisions that produce legal or similarly significant effects. Minnesota residents have the right to challenge and possibly change a decision made by automated profiling. California residents have the right to request that we limit the use of their Sensitive Personal Information. Utah residents have the right to opt out of a business processing their Sensitive Personal Information. Residents of most other states listed above have the right to withhold or withdraw consent to the processing of their Sensitive Personal Information

You may opt-out of processing that constitutes “targeted advertising,” “sharing,” or “sales” of Personal Information under US privacy laws at any time by changing your cookie preferences in our cookie banner (to opt out of cookie-based activities), by installing a UOOM, or by clicking on the “Do Not Sell or Share My Personal Information” at the footer of our webpages. Your opt-out choice will be linked to your browser only; therefore, you will need to renew your opt-out choice if you visit the Site from a new device or browser, or if you clear your browser’s cookies.

You may opt out of non-cookie-based targeted advertising disclosures associated with your email address or other Personal Information by following the instructions on the form found here. Alternatively, you may make the same requests by calling us at (833) 399-0397, or by emailing us at help@blueland.com, Attn: Privacy Officer.  We do not require any additional personal information to verify requests to opt-out of processing that constitutes “targeted advertising,” “sharing,” or “sales” of Personal Information, or to limit the use of your Sensitive Personal Information, but our ability to grant these requests and correlate different pieces of Personal Information to you will be limited by the Personal Information you choose to provide in your request.

Exercising your state privacy rights:

If you are a resident of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Montana, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, and would like to make a request pursuant to any of the rights described in this section, you may do so by following the instructions on the form found here. Alternatively, you may make the same requests by calling us at (833) 399-0397, or by emailing us at help@blueland.com, Attn: Privacy Officer.

To protect your Personal Information, we are required to verify that any person making a request under this section is in fact you or your authorized agent. To verify the identity of the person making a request, we may ask you to provide the following information: your email address and prior order or payment information. We will use this information only for the purposes of verifying that your request is authentic.

Once we receive your request, we will respond within 10 business days and inform you if we need any more information to verify your request. We will provide the information you requested within 45 days of your request. If we require more than 45 days to respond to your request, we will inform you of the reasons why. For requests from California consumers to opt out of the sale or sharing of their Personal Information for the purposes of cross-context behavioral advertising, or requests to limit the use of sensitive Personal Information, we will respond within 15 days.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive or manifestly unfounded.

Exercising privacy rights as the resident’s authorized agent:

If you are a consumer and you would like to authorize an agent to submit requests on your behalf, to exercise your rights under the state privacy laws listed herein, please designate your authorized agent by filling out the form found here. Alternatively, you may authorize an agent by contacting us at the addresses and phone number listed above.

When possible, we will compare the identifying information you provide with the Personal Information we already have in our systems. Generally, we will refrain from requesting additional information for verification purposes. Only when we cannot verify your identity or residency based on the information in our possession will we seek additional information from you. The supplementary Personal Information collected will be used solely for the accurate verification of your identity to facilitate the exercise of your privacy rights, and to prevent fraud.

If you are an account holder with us, we will request your email address. However, in cases where we suspect fraudulent or malicious activity on a password-protected account, we will not fulfill requests to know or delete Personal Information until additional verification procedures have been successfully completed.  For individuals who do not have an account with us, we will ask for specific data points that enable us to reasonably verify your consumer request.

Exercising the right to know. If you are requesting to know the categories of Personal Information collected, we may require two data points to be provided by you that match two of the data points that we maintain.  But if you request to know specific pieces of information or obtain a copy of that information, a higher bar for verification is required, which may require us to match three data points of information provided by you with three data points that we maintain in our records, together with a signed declaration under penalty of perjury that you are the individual whose Personal Information is the subject of the request. We will maintain all signed declarations as part of our record-keeping obligations under state privacy laws.

Exercising the right to delete. When you make a request to delete your Personal Information, the level of reasonable certainty required during our verification process will vary depending on the nature of the Personal Information you wish to have deleted. We will gather the necessary data points required to verify your identity to a reasonable degree of certainty, which may require verifying three data points. We will act in good faith when determining what standard to apply when verifying all consumer requests.

You may designate an authorized agent to act on your behalf to make a privacy request. If you use an authorized agent to submit privacy requests (aside from requests to opt-out of targeted ads, sales, or sharing and/or requests to limit the use of Sensitive Personal Information – which do not require verification), we may ask you to provide the following information: your email address and prior order or payment information. We may also require written and signed authorization from you before an agent may act on your behalf. We will use this information only for the purposes of verifying that your request is authentic.

Your right to appeal our response to your privacy rights requests:

Residents of Colorado, Connecticut, Indiana, Kentucky, Minnesota, Montana, New Jersey, Oregon, Texas, and Virginia have the right to appeal our decisions in response to your privacy rights requests. To initiate an internal appeal, please contact us at the addresses or phone number listed above or by filling out the form found here. We will respond to your request for an internal appeal within 45 days, but we may take up to 60 additional days for good cause. If you are unhappy with the results of your appeal, you may contact your state attorney general.

X.             PRIVACY RIGHTS FOR RESIDENTS OF THE EU, UK, CANADA AND OTHER COUNTRIES

This section contains additional information relevant to residents of the European Economic Area (including EU Member States), the United Kingdom, Canada, Australia, New Zealand and certain other countries, which have their own data privacy laws, regulations and associated rights. The content in this section is part of, and should be read in conjunction with, the rest of our Privacy Policy.

The ways in which we process your personal information may vary based on our relationship with you. Please see the sections above titled “How We Use Your Personal Information” and “Privacy Rights for Residents of Certain States” for a description of the ways that we process your personal information and how long we retain it, based on the types of interactions you have with us.

The legal bases for which we may process your personal information include:

• The performance of any contractual relationship we have with you

• Where it is necessary for compliance with our legal obligations

• Where you have provided your consent to certain types of processing

• Regarding marketing, either your express consent or our legitimate interests in providing you with communications on products that may interest you

• Where it is in our legitimate interests or the legitimate interests of our partners, affiliates, clients, and service providers (provided these are not overridden by your interests and fundamental rights and freedoms), such as:

  • To provide our products and services

  • To provide an efficient and personalized customer experience

  • To respond to your requests and inquiries

  • To administer our business, including marketing and analysis

  • To prevent and detect fraud or security threats and ensure proper functioning of the Site

  • To comply with applicable laws, regulations or ethical obligations

We use administrative, technical and physical safeguards to protect personal information from unauthorized access or disclosure. However, while we strive to protect your personal information and privacy, no data transmission or storage is 100% safe. We do not retain personal information for longer than reasonably necessary to fulfill the business purpose(s) for which it was collected, with some exceptions (e.g., for security purposes or complying with our legal obligations).

When we collect Personal Information from you, we will only process it as needed for the fulfillment of the purposes set out in this Privacy Notice. We will use your Personal Information for the purpose(s) for which we collected it, and for reasons compatible with the original purpose(s). If you wish to get an explanation as to how the processing for further purposes is compatible with the original purpose, please contact us by email at help@blueland.com, Attn: Privacy Officer. If we need to use your Personal Information for an unrelated purpose, we will notify you and we will explain our purpose and the legal basis which allows us to do so.

Note to Canada residents: the only legal basis that we rely upon to process your Personal Information is your implied or express consent, except where permitted or required by law. Therefore, we will only collect, use and disclose your Personal Information based on your consent to the purposes identified in this Privacy Policy (or any other purpose that we have identified to you).

Transferring Data Abroad

Your personal information may be stored and processed in any country where we have offices or servers or in which we engage service providers, including in the United States, which may have different data protection and data processing laws than those in your country. Additionally, our online store provider Shopify may share your Personal Information with third parties in other countries, in order to provide services to those third-parties, such as advanced product and store customization, analytics, and advertising services.  You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. By submitting your personal information, you agree to this transfer, storing, and processing. Our internal policies require all of our offices to comply with this Privacy Policy and ensure a level of protection for personal information at least as protective as that mandated by the European Economic Area. Any such transfer shall take place only in accordance with and as permitted by the law of your jurisdiction. In all cases, we shall apply the provisions of this Privacy Policy to your personal information wherever it is located.

Your Rights

Residents of the EU, UK, Canada, Australia, New Zealand and certain other countries have the right to receive or reasonably access the personal information that we process, request a portable copy of that information, and the ability to review, correct, delete, restrict, or object to the processing of such information. You may also have the right to withdraw your consent to our processing of your personal information at any time by using the contact information at the bottom of this section.

All of these rights are subject to certain conditions and exceptions. Although we make good faith efforts to provide individuals with access to their personal information, there may be circumstances in which we are unable to provide access, including but not limited to when it would compromise others’ privacy or other legitimate rights, when the burden or expense of providing access would be disproportionate to the risks to the individual’s privacy, or when the information is commercially proprietary. If we determine that access should be restricted in any particular instance, we will endeavor to provide you with an explanation of why that determination has been made and a contact point for any further inquiries. To protect your privacy, we will take commercially reasonable steps to verify your identity before granting access to or making any changes to your personal information.

If you would like to exercise your privacy rights, please let us know by email at help@blueland.com, Attn: Privacy Officer or by contacting us at the information below.

Residents of the European Economic Area and the United Kingdom may report privacy complaints directly to their local data protection authorities. See https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm for more information. You may also contact us to be directed to the relevant authorities for your jurisdiction.

CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. Please check back regularly to ensure you have up-to-date notice.

This Privacy Policy was last updated on October 1, 2025.

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at help@blueland.com or by mail using the details provided below:

One Home Brands Inc.
104 W 27th St, Fl 7
New York NY 10001, United St