Privacy Policy

The following definitions apply throughout this Privacy Policy. They have the same meaning whether they appear in singular or plural form.

Account means a unique account created for you to access our Service or parts of our Service.

Business, for the purpose of the California Consumer Privacy Act (CCPA), refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of processing.

Company (also referred to as "we," "us," or "our") refers to Good Kitty Wellness, Inc., 1401 21st St., Suite 10287, Sacramento, CA 95811.

Consumer, for the purpose of the CCPA, means a natural person who is a California resident.

Cookies are small files placed on your computer, mobile device, or other device by a website, containing details of your browsing history.

Country refers to California, United States.

Device means any device that can access the Service, such as a computer, cellphone, or digital tablet.

Personal Data is any information that relates to an identified or identifiable individual. For the purposes of the CCPA, Personal Data means any information that identifies, relates to, describes, or is capable of being associated with, or could reasonably be linked, directly or indirectly, with you.

Sale, for the purpose of the CCPA, means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a Consumer's personal information to another business or third party for monetary or other valuable consideration.

Service refers to the Website.

Service Provider means any natural or legal person who processes data on behalf of the Company.

Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.

Website refers to Good Kitty, accessible from www.goodkittyco.com.

You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

While using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to, your email address and Usage Data.

Usage Data

Usage Data is collected automatically when using the Service. It may include your device's Internet Protocol (IP) address, browser type and version, the pages of our Service you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When you access the Service through a mobile device, we may automatically collect additional information including the type of mobile device you use, your mobile device's unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile internet browser you use, unique device identifiers, and other diagnostic data.

We may also collect information that your browser sends whenever you visit our Service or access it through a mobile device.

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Tracking technologies used include beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

Refusing cookies

A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service. Unless you have adjusted your browser setting to refuse cookies, our Service may use cookies.

Managing stored data

While cookies are commonly used to store data, websites may also use your browser's local storage, session storage, or other storage technologies. You can control or delete this data by adjusting your browser settings.

Web beacons

Certain sections of our Service and our emails may contain small electronic files known as web beacons (also called clear gifs, pixel tags, or single-pixel gifs) that permit us to count users who have visited those pages or opened an email, and for related website statistics like recording the popularity of a section or verifying system integrity.

Persistent and session cookies

Persistent cookies remain on your device when you go offline. Session cookies are deleted as soon as you close your web browser.

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including monitoring its usage

• To manage your Account and registration as a user of the Service

• For the performance of a contract, including the development, compliance, and undertaking of the purchase contract for products you have purchased

• To contact you by email, telephone, SMS, or other electronic communications regarding updates or informative communications related to the Service

• To provide you with news, special offers, and general information about goods, services, and events similar to those you have purchased or inquired about, unless you have opted not to receive such information

• To manage your requests and respond to inquiries

• For business transfers, including evaluating or conducting a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets

• For other purposes such as data analysis, identifying usage trends, determining the effectiveness of promotional campaigns, and evaluating and improving our Service

Sharing your Personal Data

We may share your personal information in the following situations:

• With Service Providers to monitor and analyze the use of our Service, for payment processing, and to contact you

• For business transfers in connection with any merger, sale of Company assets, financing, or acquisition

• With affiliates, in which case we will require those affiliates to honor this Privacy Policy

• With business partners to offer you certain products, services, or promotions

• With other users when you share personal information or otherwise interact in public areas of the Service

• With your consent for any other purpose

Retention

The Company will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Usage Data is generally retained for a shorter period, except when this data is used to strengthen security or improve functionality, or when we are legally obligated to retain it for longer.

Transfer

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in processing are located. This means information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. The Company will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy.

Business transactions

If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose your Personal Data if required by law or in response to valid requests by public authorities, such as a court or government agency.

Other legal requirements

The Company may disclose your Personal Data in good faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of the Company, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users of the Service or the public, or protect against legal liability.

Security

The security of your Personal Data is important to us, but no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

The Service Providers we use may have access to your Personal Data. These third-party vendors collect, store, use, process, and transfer information about your activity on our Service in accordance with their own privacy policies.

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

You can opt out of having your activity on the Service made available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript from sharing information with Google Analytics about visit activity. For more information, visit the Google Privacy & Terms page.

Email marketing

We may use your Personal Data to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving any or all of these communications by following the unsubscribe link in any email we send or by contacting us.

We use Klaviyo to manage and send marketing emails. Their privacy policy can be viewed at klaviyo.com/marketing-resources/data-privacy.

Payment processors

We may provide paid products or services within the Service. We use third-party payment processors and do not store or collect your payment card details. That information is provided directly to our payment processors, whose use of your personal information is governed by their privacy policies. These payment processors adhere to PCI-DSS standards managed by the PCI Security Standards Council.

Our payment processors include Shopify (privacy policy) and PayPal (privacy policy).

This section supplements the information in our Privacy Policy and applies solely to visitors, users, and others who reside in the State of California.

Under the CCPA, we have collected the following categories of personal information in the past twelve (12) months:

Categories we collect

Category A — Identifiers. Including real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, and account name.

Category B — California Customer Records. Personal information categories listed in Cal. Civ. Code § 1798.80(e), including name, address, telephone number, and similar identifiers. Some information in this category may overlap with other categories.

Category D — Commercial information. Records and history of products or services purchased or considered.

Category F — Internet or other similar network activity. Interaction with our Service or advertisements.

Categories we do not collect

We do not collect Category C (protected classification characteristics), Category E (biometric information), Category G (geolocation data), Category H (sensory data), Category I (professional or employment-related information), Category J (non-public education information), or Category K (inferences drawn from other personal information).

Information excluded from CCPA scope

Under the CCPA, personal information does not include publicly available information from government records, deidentified or aggregated consumer information, health or medical information covered by HIPAA and the California Confidentiality of Medical Information Act, or personal information covered by certain sector-specific privacy laws.

We obtain the categories of personal information listed above from the following sources:

• Directly from you. For example, from forms you complete on our Service, preferences you express, or your purchases.

• Indirectly from you. For example, from observing your activity on our Service.

• Automatically from you. For example, through cookies set on your device as you navigate the Service.

• From Service Providers. For example, third-party vendors used for analytics, payment processing, or other Service-related functions.

We may use or disclose personal information we collect for business or commercial purposes (as defined under the CCPA), including the following:

• To operate our Service and provide it to you

• To provide support and respond to inquiries, including investigating and addressing concerns and improving our Service

• To fulfill the reason you provided the information (for example, processing a payment or facilitating delivery)

• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations

• For internal administrative and auditing purposes

• To detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity

Categories disclosed for business purposes

In the past twelve (12) months, we may have disclosed the following categories for business or commercial purposes: Category A (Identifiers), Category B (California Customer Records), Category D (Commercial information), and Category F (Internet activity).

When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to keep the information confidential and not use it for any purpose except performing the contract.

We may share your personal information with the following categories of third parties:

• Service Providers

• Payment processors

• Our affiliates

• Our business partners

• Third-party vendors to whom you or your authorized representatives have asked us to disclose your personal information in connection with products or services we provide

Sale of Personal Information of minors under 16

We do not knowingly collect personal information from minors under the age of 16 through our Service. We do not sell the personal information of consumers we know to be less than 16 years of age unless we receive affirmative authorization from either the consumer (if between 13 and 16) or a parent or guardian (if under 13).

If you have reason to believe that a child under the age of 13 has provided us with personal information, please contact us so we can delete that information.

The CCPA provides California residents with specific rights regarding their personal information. If you are a resident of California, you have the following rights:

Right to notice

You have the right to be notified which categories of Personal Data are being collected and the purposes for which they are being used.

Right to request

You have the right to request that we disclose information about our collection, use, sale, disclosure for business purposes, and sharing of personal information. Once we receive and confirm your request, we will disclose the categories of personal information we collected, the sources of that information, our business or commercial purpose for collecting or selling it, the categories of third parties with whom we shared it, and the specific pieces of personal information we collected about you.

Right to opt out of sale

You have the right to direct us not to sell your personal information.

Right to delete

You have the right to request the deletion of your Personal Data, subject to certain exceptions. We may deny your deletion request if retaining the information is necessary for us or our Service Providers to complete the transaction, detect security incidents, debug products, exercise free speech rights, comply with the California Electronic Communications Privacy Act, engage in public-interest research, enable internal uses aligned with consumer expectations, comply with a legal obligation, or make other internal and lawful uses compatible with the context in which you provided the information.

Right not to be discriminated against

You have the right not to be discriminated against for exercising any of your consumer rights, including by being denied goods or services, charged different prices, or provided a different level of quality.

To exercise any of your rights under the CCPA, you can contact us by email at contact@goodkittyco.com.

Only you, or a person registered with the California Secretary of State whom you authorize to act on your behalf, may make a verifiable request related to your personal information.

Your request to us must provide sufficient information to allow us to reasonably verify you are the person about whom we collected personal information (or an authorized representative), and describe your request with sufficient detail to allow us to properly understand, evaluate, and respond.

We cannot respond to your request or provide the required information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you.

We will disclose and deliver the required information free of charge within 45 days of receiving your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary, and with prior notice. Disclosures will only cover the 12-month period preceding receipt of the request.

For data portability requests, we will select a format to provide your personal information that is readily usable and allows you to transmit the information from one entity to another without hindrance.

You have the right to opt out of the sale of your personal information. Once we receive and confirm a verifiable request from you, we will stop selling your personal information.

The Service Providers we partner with (for example, our analytics or advertising partners) may use technology on the Service that sells personal information as defined by the CCPA. To opt out of the use of your personal information for interest-based advertising and these potential sales, you may use the following platforms. Note that any opt-out is specific to the browser you use, so you may need to opt out on every browser you use.

Website opt-out

• Network Advertising Initiative (NAI) opt-out platform

• European Digital Advertising Alliance (EDAA) opt-out platform

• Digital Advertising Alliance (DAA) opt-out platform

The opt-out will place a cookie on your computer that is unique to the browser you use. If you change browsers or delete the cookies saved by your browser, you will need to opt out again.

Mobile devices

Your mobile device may give you the ability to opt out of the use of information about the apps you use to serve targeted ads:

• "Opt out of Interest-Based Ads" or "Opt out of Ads Personalization" on Android devices

• "Limit Ad Tracking" on iOS devices

You can also stop the collection of location information from your mobile device by changing the preferences on your device.

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 13 without verification of parental consent, we take steps to remove that information from our servers.

If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent's consent before we collect and use that information.

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "last updated" date at the top.

For material changes, we will let you know via email or a prominent notice on our Service before the change takes effect.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.