Effective date: October 23, 2026

This notice supplements the Investor Crate Privacy Policy for California and Texas residents. It explains the state-specific privacy rights and request methods that may apply when you use investorcrate.com, place an order, manage a subscription, enter a giveaway, or otherwise interact with Investor Crate, LLC (“Investor Crate,” “we,” “us,” or “our”). Read it together with our Privacy Policy at https://investorcrate.com/page/Privacy-Policy. If a state-specific provision in this notice conflicts with the general Privacy Policy, this notice controls for the rights it addresses.

This notice describes rights provided by applicable law. It does not determine whether a particular privacy statute applies to Investor Crate or to a particular request. We accept privacy requests through the methods below and will evaluate them under applicable law.

1. Personal Information and Personal Data We Process

The general Privacy Policy describes the information we collect, how we collect it, our purposes, and the service providers and other parties that may receive it. For California and Texas disclosures, the categories below summarize the types of information that may be processed through our store and connected services. The specific information involved depends on your relationship with us, your choices, and which integrations are active.

·    Identifiers and contact information, such as name, postal address, email address, telephone number, account or customer identifiers, IP address, device identifiers, and cookie or advertising identifiers.

·    Customer records and account information, such as billing and shipping details, account credentials, support communications, and contact preferences.

·    Commercial information, such as products viewed or purchased, order and subscription history, transaction records, giveaway entry information, and delivery or return details.

·    Internet or other electronic network activity, such as pages visited, searches, filters used, clicks, cart activity, referral information, ad interactions, and conversion events.

·    Approximate geolocation, which may be inferred from an IP address or device settings. We do not use precise geolocation for advertising.

·    Inferences or audience information, such as general product interests or likely engagement with an ad, where generated from activity on our Site or by an advertising platform.

·    Sensitive personal information, if collected: account login credentials and, if needed for a legal, anti-fraud, or anti-money-laundering purpose, identity verification information such as a government-issued identifier or related verification details. Payment providers handle payment credentials; we may receive payment status and limited transaction identifiers. We do not use sensitive personal information to infer characteristics about you or for targeted advertising.

We receive information directly from you, automatically through the Site, and from Shopify and service providers that support our store, marketing, fulfillment, subscriptions, tax, giveaways, analytics, and advertising. We use it to operate and secure the store; complete transactions and subscriptions; fulfill and ship orders; provide customer support; administer giveaways; calculate and report taxes; communicate with you; conduct internal reporting and business planning; measure and deliver advertising; prevent fraud; meet legal obligations; and administer our anti-money-laundering program.

2. Disclosures to Service Providers and Advertising Partners

We disclose information to service providers to operate our business. Depending on the information and service involved, recipients may include Shopify and connected Shopify apps; Klaviyo; payment providers and shipping carriers; Apliiq; Seal Subscriptions; Gleam Competitions; Tax Rex; and providers that support analytics, search, digital downloads, workflow automation, order documents, messaging, and store administration.

We also use Google and Meta advertising services. When the relevant integrations or features are active and permitted by your choices and applicable law, we may disclose online identifiers, Site or device activity, product and order events, and related audience or conversion information to Google and Meta for ad delivery, audience functions, campaign measurement, and conversion reporting. Google services may include Google Ads, Google Analytics, YouTube, and Google advertising placements. Meta services may include Facebook, Instagram, and Threads.

We do not sell personal information for money in the ordinary sense. However, a disclosure to Google or Meta for cross-context behavioral advertising may qualify as “sharing” or “selling” under California law, and processing for targeted advertising under Texas law, even when no money is paid for the information. We provide the opt-out methods described below. Service providers may also receive information for business purposes such as fulfillment, payment, customer support, tax, security, and store operations.

During the preceding 12 months, the categories that may have been disclosed to advertising partners for these purposes, if the applicable integrations were enabled, include identifiers, internet or electronic network activity, commercial information such as product or purchase events, and inferences or audience information. The categories disclosed to service providers for business purposes may include identifiers, customer records, commercial information, Site activity, communications, giveaway information, and compliance or security information. The third-party categories include advertising platforms, ecommerce and app providers, payment processors, fulfillment providers, carriers, and tax or accounting service providers.

The precise categories disclosed during the preceding 12 months depend on the Site’s actual tag, app, audience, and consent configuration. We will keep this disclosure accurate as those configurations change.

3. California Residents’ Rights

If the California Consumer Privacy Act, as amended (“CCPA”), applies to Investor Crate and your information, you may have the following rights, subject to legal limits and exceptions:

·    Right to know and access: request information about the categories and specific pieces of personal information collected about you, the sources, purposes, and categories of recipients, and the categories of information sold, shared, or disclosed for business purposes.

·    Right to delete: request deletion of personal information we collected from you, subject to exceptions such as completing a transaction, maintaining required records, security, fraud prevention, legal compliance, and establishing or defending legal claims.

·    Right to correct: request correction of inaccurate personal information.

·    Right to opt out of sale or sharing: direct us to stop selling or sharing personal information, including sharing for cross-context behavioral advertising.

·    Right to limit sensitive personal information: where applicable, direct us to limit use or disclosure of sensitive personal information to permitted purposes.

·    Right to equal treatment: we will not unlawfully discriminate against you for exercising a CCPA right.

If we use automated decision-making technology in a manner that gives California residents additional rights under applicable law, we will provide the required notice and request process.

4. How California Residents Can Opt Out

You may opt out of sale or sharing through the “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” control in the footer of our Site, or by emailing support@investorcrate.com with the subject “California Privacy Opt-Out.” You do not need to create an account to make an opt-out request.

We will honor Global Privacy Control and other opt-out preference signals that applicable law requires us to honor. Where we can associate a signal with your account or other information, we will apply it as required by law. You can also use the Site’s Cookie Settings control to reject or change optional analytics and advertising technologies. Cookie Settings and the statutory sale/sharing opt-out may control different data flows; use the specific privacy-choice link or email method if you want to opt out of sale or sharing.

An opt-out does not stop disclosures needed to provide the service you request, disclosures made at your direction, or other disclosures permitted by law. It also may not stop advertising that is not based on personal information shared for cross-context behavioral advertising.

5. Texas Residents’ Rights

If the Texas Data Privacy and Security Act (“TDPSA”) applies to Investor Crate and your information, you may have the right to:

·    Confirm whether we process your personal data and access that data.

·    Correct inaccuracies in your personal data, taking into account the nature of the data and the purposes of processing.

·    Request deletion of personal data you provided or that we obtained about you.

·    Obtain a portable copy of personal data you provided to us, to the extent required by law.

·    Opt out of processing for targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects, where the law provides that right.

·    Appeal our denial of a privacy request.

These rights are subject to the TDPSA’s scope, exclusions, and exceptions. Where required by Texas law, we will process a recognized universal opt-out mechanism, including Global Privacy Control, as an opt-out of targeted advertising or sale, as applicable. We will process requests according to the law that applies.

6. How to Submit a Request or Appeal

Email support@investorcrate.com. For deletion, use the subject “Privacy Request – Delete My Information.” For another request, use “Privacy Request” and describe the right you want to exercise. For a Texas appeal, use “Privacy Request Appeal.” You may also use any privacy request form we make available on the Site.

Include enough information for us to understand and verify your request, such as your name, email address, and the order or account email associated with your relationship with us. Do not email payment-card numbers, Social Security numbers, passwords, or copies of identity documents unless we specifically request information through a secure process. We will not require you to create an account solely to submit a request.

We may request information reasonably necessary to verify your identity or authority. If you use an authorized agent, we may require proof of your authorization and may verify your identity directly where permitted by law. We will use information submitted with a request to verify and respond to it, as permitted by law.

We will process requests without charge unless applicable law permits a fee. We will confirm, respond to, and complete requests within the applicable legal timeframes. Under the CCPA, covered businesses generally confirm receipt of requests to know, delete, or correct within 10 business days and respond within 45 calendar days, with a permitted extension of up to 45 additional days when notice is provided. Opt-out requests generally must be honored as soon as feasible and no later than 15 business days. Under the TDPSA, covered controllers generally respond within 45 days and may extend by an additional 45 days when reasonably necessary and with notice.

If we deny a request, we will explain the reason to the extent required by law. If we deny a Texas request, you may appeal by emailing support@investorcrate.com with the subject “Privacy Request Appeal” and identifying the original request and denial. We will review the appeal and respond as required by law. If we deny an appeal under the TDPSA, you may submit a complaint to the Texas Attorney General at https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.

You may also contact the California Privacy Protection Agency at https://cppa.ca.gov/ or the California Attorney General at https://oag.ca.gov/privacy/ccpa to raise a concern. These agencies do not submit a privacy request to Investor Crate on your behalf; please use the request methods above first.

7. Deletion and Information We May Retain

If a deletion request is granted, we will delete or deidentify personal information we control and direct service providers to delete it where required. We may retain information when permitted or required for an active transaction or subscription; tax, accounting, anti-money-laundering, or other legal obligations; fraud prevention and security; dispute resolution; or the establishment, exercise, or defense of legal claims. We may also retain limited information needed to keep an opt-out or marketing suppression request effective.

A request to Investor Crate concerns information we hold for our store. Information Shopify holds in its own capacity, including certain information connected with your separate use of Shop or Shop Pay, may require a separate request to Shopify. Third parties that process information for their own purposes may also have separate privacy notices and request processes.

8. Location, VPNs, and Privacy Choices

We may use your IP address or other signals to estimate your general location and display relevant privacy controls. VPNs, proxies, mobile networks, browser settings, or other technologies may make location estimates inaccurate and may affect which notice or controls appear. Your location signal does not determine whether you are entitled to exercise a privacy right. If you believe the Site is not showing the appropriate choice or request option, contact us at support@investorcrate.com.

9. Links and Contact Information

This notice supplements, and should be read with, our general Privacy Policy: https://investorcrate.com/page/Privacy-Policy. We will link this notice from that Policy and make the privacy request and opt-out methods easy to find on the Site.

Investor Crate, LLC
900 S. Willow Ave., Unit #2669
Cookeville, TN 38501
Email: support@investorcrate.com

For information about our subscriptions, giveaways, and other store practices, see the applicable policies linked on investorcrate.com.