California Privacy Policy

.

Privacy Policy for California Residents

Sassy Saints B.V.

Effective Date: 07/04/2026 | Last Updated: 07/04/2026

This Privacy Policy for California Residents supplements and is incorporated into the Sassy Saints B.V. Privacy Policy available at https://www.sassysaints.com/pages/privacy-policy. It applies to visitors, users, and customers who reside in the State of California and describes how Sassy Saints B.V., registered with the Dutch Chamber of Commerce (KvK) under number 78771307, with an address at Keizersgracht 62, 1015 CS, Amsterdam, the Netherlands ("Sassy Saints", "we", "us", or "our") collects, uses, and discloses the personal information of California residents through www.sassysaints.com and related services (collectively, the "Sites").

We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act (CPRA) (collectively, the "CCPA"), and other applicable California privacy laws. Any terms defined in the CCPA have the same meaning when used in this notice.

I. Personal Information We Collect

In the preceding twelve (12) months, Sassy Saints has collected the following categories of personal information from California residents:

II. Sources From Which We Collect Personal Information

• Directly from you: When you create an account, place an order, subscribe to our newsletter, contact our support team, participate in a sweepstake or promotion, or otherwise interact with us.

• Automatically: When you visit our Sites, information is automatically collected through cookies, pixels, and similar technologies, including through Meta Pixel, Google Ads tags, TikTok Pixel, and Pinterest Pixel. For details, see our Cookie Policy at https://www.sassysaints.com/pages/cookie-policy.

• Third-party sources: We may receive information from advertising and analytics partners, social media platforms, and business partners to whom you have provided your information and consented to its transfer.

III. Business or Commercial Purposes for Collection

We collect personal information for the following business or commercial purposes:

• To fulfill orders, process payments, arrange shipping, and manage returns and exchanges.

• To create, maintain, and secure your account with us.

• To send you marketing communications by email and SMS, where you have consented or where permitted by law.

• To personalise your experience and deliver content and offers relevant to your interests.

• To monitor and analyse trends, usage, and activities in connection with our Sites and services.

• To detect, investigate, and prevent fraud and security incidents.

• To facilitate sweepstakes, promotions, and contests and to process and deliver entries and rewards.

• To respond to your enquiries and provide customer support, including through AI-assisted tools.

• To comply with applicable laws and respond to legal process.

• To evaluate or conduct a merger, acquisition, restructuring, or other corporate transaction involving Sassy Saints.

IV. Personal Information Disclosed for a Business or Commercial Purpose

In the preceding twelve (12) months, Sassy Saints has disclosed the following categories of personal information for a business or commercial purpose:

V. Personal Information Shared for Cross-Context Behavioral Advertising

In the preceding twelve (12) months, Sassy Saints has not sold personal information. Sassy Saints does not sell personal information.

In the preceding twelve (12) months, Sassy Saints has shared the following categories of personal information for cross-context behavioral advertising:

VI. Right to Opt Out of Sharing for Cross-Context Behavioral Advertising

If you are 16 years of age or older, you have the right to direct us not to share your personal information for cross-context behavioral advertising at any time. We do not share the personal information of consumers we have actual knowledge are less than 16 years old.

To exercise your right to opt out, you or your authorised representative may submit a request by:

• Visiting: https://www.sassysaints.com/pages/do-not-sell-or-share

• Emailing: wegotyou@sassysaints.com with the subject line "Do Not Sell or Share My Personal Information"

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorise sharing for cross-context behavioral advertising. You do not need to create an account to exercise your opt-out rights.

VII. Your Rights Under the CCPA

As a California resident, you have the following rights with respect to your personal information:

Right to Know and Access

You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources, our business or commercial purposes for collecting or sharing it, and the categories of third parties with whom we share it.

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions. We may deny your deletion request if retaining the information is necessary to complete a transaction, detect security incidents, comply with a legal obligation, or for other lawful purposes.

Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

Right of Data Portability

You have the right to receive a copy of your personal information in a portable and, where technically feasible, readily useable format that allows you to transmit the information to another entity.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, provide a different level or quality of goods or services, or suggest that you may receive different treatment as a result of exercising your rights.

VIII. How to Exercise Your Rights

To exercise your access, deletion, correction, or portability rights, please submit a verifiable consumer request by:

• Email: wegotyou@sassysaints.com

Only you, or a person registered with the California Secretary of State that you authorise to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may make a verifiable consumer request for access or data portability no more than twice within a twelve (12) month period. Your request must provide sufficient information to allow us to reasonably verify your identity and describe your request in enough detail for us to properly understand and respond to it.

Response Timing

• We will confirm receipt of your request within 10 business days.

• We will respond to access, deletion, and correction requests within 45 days of receipt. If we require additional time (up to a further 45 days), we will notify you in writing within the initial 45-day period.

• We will respond to opt-out requests within 15 business days of receipt.

• We do not charge a fee to process or respond to a verifiable consumer request unless the request is excessive, repetitive, or manifestly unfounded.

IX. Notice of Financial Incentive

Sassy Saints offers a 10% discount on your first order when you provide your email address through our signup prompt. This is a financial incentive as defined under the CCPA.

If you do not wish to participate, simply do not submit your email address. If you wish to withdraw from this incentive after signing up, please email wegotyou@sassysaints.com. Please note that withdrawing from the incentive means you will no longer have access to the discount, though you will continue to receive non-personalised promotions where available.

The 10% discount reflects the value of your participation. While Sassy Saints does not assign a specific monetary value to personal information, the discount is intended to represent a reasonable estimate of the value of the data provided, taking into account anticipated revenue generated from the relationship, the cost of providing the benefit, and other relevant factors, as permitted under the CCPA.

Where Sassy Saints offers sweepstakes, promotions, or other campaigns involving personal information, the material terms of each will be disclosed at the time of the offer and opt-in consent will be obtained before participation. You may opt out of any such programme at any time by following the instructions provided in the relevant terms.

X. Shine the Light

Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents who have an established business relationship with us may request information about whether we have disclosed personal information to any third parties for their direct marketing purposes during the preceding calendar year.

To make such a request, please contact us at wegotyou@sassysaints.com with the subject line "California Shine the Light Request" and include your name, street address, city, state, and ZIP code. We will respond within 30 days. Please note we are only required to respond to one such request per customer per calendar year.

XI. Other California Privacy Rights

Pursuant to California Civil Code Section 1789.3, California residents are entitled to file grievances and complaints with the California Department of Consumer Affairs:

• Address: 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834

• Telephone: (800) 952-5210

• Email: dca@dca.ca.gov

• Website: www.ftc.gov

XII. Changes to This California Privacy Policy

We reserve the right to amend this California Privacy Policy at our discretion and at any time. When we make changes, we will post the updated policy on our website and update the effective date. Your continued use of our Sites following the posting of changes constitutes your acceptance of such changes.

XIII. Contact Information

If you have any questions or comments about this California Privacy Policy or wish to exercise any of your rights, please contact us:

• Email: wegotyou@sassysaints.com

• Address: Sassy Saints B.V., Keizersgracht 62, 1015 CS, Amsterdam, the Netherlands

• Main Privacy Policy: https://www.sassysaints.com/pages/privacy-policy

Note: The following URL needs to be created before publishing this policy:

https://www.sassysaints.com/pages/do-not-sell-or-share — Do Not Sell or Share opt-out page (referenced in Section VI)