Effective Date: March 11, 2025

At Brightline Commerce, we recognize that privacy is an essential part of providing a dependable online experience. This Privacy Policy explains how personal information may be collected through our website, online services, customer programs, and other digital interactions. It describes the types of information we may receive, the purposes for which that information may be used, the situations in which it may be disclosed, and the measures we take to help protect it. It also outlines certain choices and rights that may be available to individuals depending on where they live and how they interact with our services.

Personal information may be collected when you voluntarily provide it while shopping, creating an account, contacting us, joining a customer or rewards program, completing a survey, entering a promotion, or using another feature of our services. Depending on the circumstances, this information may include your name, email address, telephone number, billing information, shipping details, account credentials, communication preferences, date of birth, interests, and other information you decide to submit. We may also maintain records relating to purchases, orders, returns, exchanges, gift cards, rewards activity, promotional participation, events, surveys, and other customer transactions. If you purchase an item for someone else, we may collect information about the intended recipient when it is needed to process or deliver the order.

We may receive additional information when you communicate with our customer service teams. Contact may take place through email, telephone, online chat, postal correspondence, social media, or other supported channels. Depending on the request, our records may contain your contact details, the nature of your inquiry, information describing a product or service issue, communications exchanged with our representatives, and relevant transaction history. If you voluntarily provide photographs, videos, reviews, comments, contest submissions, testimonials, or other materials, those materials may be processed according to the terms and conditions associated with the activity in which they are submitted.

Information may sometimes be obtained from organizations outside our company. These sources may include social platforms, business partners, marketing providers, technology companies, service vendors, and other organizations that support commercial or customer-related functions. The information made available by an outside organization may depend on your account settings, permissions you have granted, applicable contractual arrangements, and the authority that organization has to provide such information.

We may also collect certain information automatically when you browse or interact with our website. This can include your IP address, approximate geographic area, browser and operating system details, device characteristics, device identifiers, language preferences, internet service information, referring pages, searches, links selected, products viewed, shopping-cart activity, browsing duration, access dates and times, and other technical or interaction data. Automatically collected information helps us understand how our digital services are being used, identify performance issues, maintain functionality, and improve the overall website experience.

The information we collect may be used for a variety of legitimate business and customer service purposes. These purposes may include processing orders, confirming transactions, arranging shipping, facilitating payments, managing accounts, handling returns and exchanges, providing requested assistance, administering rewards programs, conducting promotions, organizing surveys and events, and responding to customer communications. Information may also be used to troubleshoot technical difficulties, maintain website security, evaluate service quality, understand customer behavior, improve products and services, develop new website features, and make our digital platforms easier and more useful to navigate.

Where permitted by applicable law, we may use contact information to provide promotional communications based on available preferences. These communications may include product announcements, newsletters, special promotions, rewards updates, invitations, service notices, and other marketing messages. We may evaluate how recipients interact with these communications in order to measure campaign performance, understand customer engagement, improve marketing strategies, and provide content that may be more relevant to individual interests.

Our operations may depend on a variety of external service providers. These providers can include payment companies, technology and hosting vendors, shipping and fulfillment organizations, customer support platforms, analytics providers, consultants, auditors, attorneys, accountants, and other professional or operational partners. Personal information may be provided to these organizations when reasonably necessary for them to perform services on our behalf or support legitimate business activities. Information may also be shared with affiliated companies or related entities when appropriate for operating services, administering business functions, or completing customer-requested transactions.

Cookies and related technologies may be used to maintain and improve the functionality of our website. These technologies can help remember shopping-cart contents, preserve selected preferences, support account functions, improve site performance, analyze browsing patterns, and provide certain personalization features. In some circumstances, cookies or comparable technologies may support reminders relating to abandoned shopping carts for individuals who have agreed to receive applicable text communications. Browser and device settings may provide options for restricting or managing certain tracking technologies. However, limiting these technologies may cause some website features to operate differently or become unavailable.

We may also use technologies such as tracking pixels, web beacons, JavaScript, tags, server logs, and similar tools. These technologies may help determine whether webpages or digital content have been viewed, measure interactions with emails and online services, identify technical problems, monitor website performance, and develop statistical information. They can also help us better understand how customers navigate our website and interact with electronic communications.

Third-party analytics, advertising, and measurement providers may collect certain technical or usage information through these technologies. Depending on the provider and service involved, this information may include IP addresses, approximate location data, browser characteristics, device information, advertising identifiers, and online activity. Such information may be used to understand website traffic, measure advertising results, evaluate digital engagement, improve online content, personalize selected experiences, and assess activity across websites, applications, and other digital channels.

You may have options for controlling certain communications and privacy preferences. Marketing emails generally contain an unsubscribe mechanism that allows recipients to stop receiving future promotional messages. Individuals who receive text communications may follow the instructions provided in those messages to change or discontinue future texts. The options available to you may depend on your location, device, communication channel, account configuration, and applicable legal requirements.

Where supported, we may also recognize certain browser-based privacy preference signals, including Global Privacy Control. A preference communicated through a particular browser or device may apply only to that environment. Consequently, a selection made on one browser, device, or account may not automatically carry over to other devices or browsing environments.

Personal information may be disclosed when necessary to comply with applicable laws or lawful governmental and regulatory requirements. This may include responding to subpoenas, court orders, regulatory demands, official investigations, legal proceedings, or other legally valid requests. Information may also be used when reasonably necessary to identify, investigate, prevent, or address fraud, unauthorized activity, security incidents, misuse of our services, violations of applicable policies, or conduct that could harm our customers, employees, business partners, property, systems, or other individuals.

Personal information may also be involved in significant corporate or financial transactions. If our business undergoes a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, transfer of operations, or another comparable transaction, relevant information may be disclosed to parties involved in assessing, negotiating, or completing the transaction. Professional advisers such as attorneys, accountants, auditors, financial institutions, consultants, lenders, and other authorized representatives may receive access when reasonably necessary for legitimate transaction-related purposes.

We may create or use aggregated, anonymized, or de-identified information for business purposes where individual identification is not required. Such information may support statistical analysis, research, planning, reporting, product development, performance evaluation, and other internal activities. When information has been processed so that it meets the applicable legal standard for de-identification, we generally intend to maintain it in that form and will not attempt to reconnect it with identifiable individuals except when permitted or required for purposes related to maintaining or validating the de-identification process.

We maintain administrative, technical, and organizational safeguards designed to reduce the risk of unauthorized access, misuse, modification, loss, or disclosure of personal information. Despite these efforts, no website, electronic network, communication channel, transmission, or data-storage system can be guaranteed to be completely secure. Customers should use appropriate precautions when managing passwords, account credentials, and other sensitive information. If you believe that your account or personal information may have been accessed without authorization, please contact us as soon as reasonably possible.

Privacy rights differ according to jurisdiction and applicable law. Depending on where you reside and subject to relevant exceptions and limitations, you may have rights to request access to certain personal information, correct inaccurate data, request deletion of eligible information, receive information in a portable format, or manage certain choices concerning advertising and data-sharing practices. Residents of particular jurisdictions, including California, may have additional privacy rights. Before fulfilling certain requests, we may need to verify the identity or authority of the person submitting the request in order to protect personal information from unauthorized disclosure.

Questions, concerns, or privacy requests may be directed to Brightline Commerce by email at privacy@brightlinecommerce.com. Written correspondence may be sent to 2400 Westlake Avenue, Suite 500, Seattle, WA 98121. Telephone assistance is available at +1 800 555 0199.

This Privacy Policy may be updated periodically to reflect changes in our services, technologies, operational practices, or legal requirements. When revisions are made, the updated policy will be posted on the website and the effective date may be changed as appropriate. We encourage customers and visitors to review this Privacy Policy from time to time so they can remain aware of how personal information may be collected, used, disclosed, protected, and managed through our services.