PRIVACY POLICY

1. Definitions

For purposes of this Privacy Policy:

1. "Personal Information" or "Personal Data" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.
2. "Sensitive Personal Information" has the meaning assigned under applicable state privacy laws and may include financial account information, precise geolocation data, account login credentials, and other categories defined by statute.
3. "Sale," "Share," "Targeted Advertising," and "Profiling" shall have the meanings assigned under applicable U.S. state privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CPRA"), and other comprehensive state privacy statutes.
4. Hyperlink Infosystem Inc. acts as the "Controller" (as defined under applicable state privacy laws) with respect to personal information collected through the Website.

Personal information is processed and stored within the United States. In certain circumstances described below, personal information may be transferred to affiliates or service providers located outside the United States for purposes consistent with this Privacy Policy.

2. Scope of This Privacy Policy

1. This Privacy Policy applies solely to information collected through the Website and in connection with customer transactions, communications, and service interactions.
2. It does not apply to third-party websites, platforms, or services that are not owned or controlled by the Company, even if linked from the Website.

3. Information We Collect

1. We collect personal information that you voluntarily provide to us and information collected automatically through your interaction with the Website.
2. The categories of personal information collected may include:
   1. Identifiers such as name, email address, telephone number, billing address, shipping address, and IP address.
   2. Commercial information including records of products purchased, transaction history, order details, and customer service interactions.
   3. Internet or electronic network activity information such as browser type, device characteristics, pages visited, and interactions with the Website.
   4. Account credentials where you create an account.
   5. Payment-related information necessary to complete transactions; however, complete payment card data is processed by third-party payment processors and is not stored by us.
3. We collect only information reasonably necessary to operate the Website, fulfill transactions, provide customer service, maintain security, and comply with legal obligations. During the preceding twelve (12) months, we have collected the categories of personal information described above.

4. Sources of Information

1. We collect information:
   1. Directly from you when you place orders, register accounts, submit forms, or communicate with us.
   2. Automatically through cookies and similar technologies.
   3. From service providers such as payment processors for confirmation of completed transactions.

5. How We Use Personal Information

1. We use personal information for legitimate business purposes, including:
   1. Processing and fulfilling orders.
   2. Shipping and delivery coordination.
   3. Payment confirmation and transaction management.
   4. Customer service and order support.
   5. Website functionality and security.
   6. Fraud prevention and risk management.
   7. Business recordkeeping.
   8. Compliance with legal and regulatory obligations.

We do not sell personal information as defined under applicable U.S. state privacy laws.

6. Disclosure of Personal Information

We may disclose personal information to:

1. Service Providers

   We engage third-party vendors to perform services such as website hosting, order fulfillment, shipping coordination, customer support systems, analytics, and payment processing. These entities are contractually required to use personal information only for specified business purposes and to implement appropriate safeguards.

2. Legal and Regulatory Disclosures

   We may disclose personal information where required to comply with applicable law, court order, subpoena, regulatory inquiry, or other lawful governmental request, or where disclosure is reasonably necessary to protect our legal rights or the safety of users.

3. Business Transfers

   In the event of a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of the transaction, subject to applicable confidentiality protections.

4. Affiliates and International Service Providers

   In connection with performance of our contractual obligations and operation of the Website, personal information may be shared with our affiliates and authorized vendors, including entities located outside the United States, where such sharing is necessary to:

   • Deliver products and services;
   • Provide customer support;
   • Facilitate logistics and fulfillment;
   • Maintain technical infrastructure; or
   • Perform services consistent with this Privacy Policy.

   Where personal information is transferred to affiliates or service providers in other jurisdictions, such transfers are conducted pursuant to appropriate contractual safeguards and are limited to purposes necessary for performance of the applicable agreement or legitimate business operations.

5. Categories of Third Parties

   During the preceding twelve (12) months, we have disclosed personal information for business purposes to the following categories of recipients:

   • Service providers and contractors (including hosting providers, analytics providers, logistics partners, and customer support vendors);
   • Payment processors;
   • Shipping and fulfillment partners;
   • Affiliates and related entities;
   • Professional advisors (including legal, accounting, and compliance advisors);
   • Governmental authorities where required by law; and
   • Successor entities in connection with corporate transactions.

7. Payment Processing

1. All payment transactions are processed by independent third-party payment processors. We do not store full credit card numbers or full payment authentication data on our servers.
2. The processing of payment information by such third parties is governed by their respective privacy policies. Users should consult those policies for additional information.

8. Advertising and Targeted Advertising

1. We may use standard analytics tools to measure Website traffic and performance.
2. If we engage in targeted advertising or cross-context behavioral advertising, users may have the right under certain state laws to opt out of such processing. Where required by applicable law, we will provide appropriate opt-out mechanisms.
3. We do not sell personal information as defined under applicable U.S. state privacy laws.

9. Cookies and Tracking Technologies

1. The Website uses cookies and similar technologies to:
   1. Maintain session functionality.
   2. Remember user preferences.
   3. Analyze website performance.
   4. Enhance user experience.
2. Users may configure browser settings to limit cookies; however, certain Website features may not function properly as a result.

10. Data Retention

1. We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to:
   1. Complete transactions and provide requested services;
   2. Maintain business, accounting, and tax records;
   3. Comply with legal and regulatory obligations;
   4. Resolve disputes; and
   5. Enforce agreements.
2. Retention periods are determined based on the category of personal information, the nature of the relationship with the consumer, statutory limitations periods, and legal or regulatory requirements.

11. Data Security

1. We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction.
2. These measures include encrypted transmission, secure hosting environments, restricted internal access, and monitoring systems designed to detect unauthorized activity.
3. No method of data transmission or storage is completely secure; however, we maintain reasonable safeguards consistent with industry standards.

12. Children's Privacy

1. The Website is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will take appropriate steps to delete it.

13. CALIFORNIA PRIVACY NOTICE (CPRA COMPLIANCE)

This section applies to California residents.

1. California "Shine the Light" Law (Civil Code § 1798.83)

   1. Pursuant to California Civil Code Section 1798.83, commonly known as the "Shine the Light" law, California residents may request, once per calendar year and free of charge, information regarding the categories of personal information (if any) that we disclosed to third parties for those third parties' direct marketing purposes during the preceding calendar year, as well as the names and addresses of such third parties.
   2. If you are a California resident and wish to submit such a request, you may do so by sending a written request to:

      Hyperlink Infosystem Inc.
      Email: [email protected]

      We will respond in accordance with applicable law.

2. Categories of Personal Information Collected and Disclosed

   1. During the preceding twelve (12) months, we have collected and disclosed for business purposes the following categories of personal information:
      • Identifiers
      • Commercial information
      • Internet or electronic network activity information
      • Account credentials
      • Payment-related information (processed via service providers)
   2. We have not sold personal information. To the extent we engage in targeted advertising in the future, such activities may constitute "sharing" under California law, and opt-out rights will apply.

3. Removal of Publicly Posted Content

   1. If you are a California resident under the age of 18 and are a registered user of the Website, you may request removal of content or information that you have publicly posted on the Website, if applicable.
   2. To submit a request for removal, please contact us at: [email protected] and include:
      • The email address associated with your account; and
      • A statement that you reside in California.
   3. Upon verification, we will take steps to remove such content from public display. Please note that removal from public display does not guarantee complete or comprehensive removal of the content from our systems, including archival copies or backups, to the extent retention is permitted by law.

4. Financial Incentives

   1. We do not offer financial incentives, price differences, or loyalty programs in exchange for the collection, retention, sale, or sharing of personal information.

5. CCPA / CPRA Privacy Notice

   1. This section applies exclusively to California residents and supplements the other provisions of this Privacy Policy. For purposes of this section, the term "resident" shall have the meaning set forth in the California Code of Regulations, which defines a resident as:
      • Any individual who is in the State of California for other than a temporary or transitory purpose; and
      • Any individual domiciled in the State of California who is outside the State for a temporary or transitory purpose.

      All other individuals are considered non-residents for purposes of the CCPA/CPRA.

6. If you are a California resident, you have the following rights with respect to your personal information, subject to statutory limitations and exceptions.

   1. Right to Request Deletion

      You have the right to request that we delete personal information that we have collected from you.

      Upon receipt of a verifiable consumer request, we will delete your personal information from our records and direct our service providers to do the same, unless an exception applies under applicable law. Such exceptions include, without limitation, situations where retention of the information is necessary to:

      • Complete a transaction for which the personal information was collected;
      • Detect security incidents or protect against fraudulent or illegal activity;
      • Comply with a legal obligation;
      • Exercise or defend legal claims; or
      • Enable solely internal uses reasonably aligned with consumer expectations.

   2. Right to Know and Right to Access

      You have the right to request disclosure of:

      • Whether we collect and use your personal information;
      • The categories of personal information we collect;
      • The categories of sources from which personal information is collected;
      • The business or commercial purposes for collecting, selling, or sharing personal information;
      • The categories of third parties to whom personal information is disclosed;
      • The categories of personal information disclosed for a business purpose;
      • The categories of personal information sold or shared (if applicable); and
      • The specific pieces of personal information we have collected about you.

      We are not required to provide personal information that has been de-identified, nor are we required to re-identify data solely to respond to a request.

   3. Right to Correct

      You have the right to request correction of inaccurate personal information that we maintain about you, taking into account the nature of the information and the purposes of processing.

   4. Right to Opt Out of Sale or Sharing

      We do not sell personal information as defined under applicable U.S. state privacy laws.

      If, in the future, we engage in activities that constitute "sharing" for purposes of cross-context behavioral advertising under California law, California residents will have the right to opt out of such sharing.

      Requests to opt out will be processed as soon as reasonably practicable and no later than fifteen (15) business days from receipt of the request.

   5. Right to Limit Use and Disclosure of Sensitive Personal Information

      We use sensitive personal information, if collected, solely for purposes permitted under California law, including providing requested goods or services, processing transactions, ensuring security, and complying with legal obligations.

      We do not use or disclose sensitive personal information for purposes requiring a "Limit the Use" right under the CPRA.

   6. Right to Non-Discrimination

      We will not discriminate against you for exercising any of your rights under the CCPA or CPRA. This means we will not deny goods or services, charge different prices, provide a different level or quality of services, or suggest that you may receive different treatment for exercising your statutory rights, except as permitted by law.

   7. Verification Process

      Upon receiving a request, we will take reasonable steps to verify your identity before responding. Verification may include matching information you provide against information maintained in our records or contacting you through a previously provided communication method.

      We will use personal information provided in a request solely for purposes of verification and responding to the request. If additional information is required to verify your identity, we will request only what is reasonably necessary and will delete such additional information once verification is complete, unless otherwise required by law.

      Authorized agents may submit requests on behalf of California residents. We may require proof of written authorization and verification of the resident's identity before processing such requests.

   8. Exercising Your California Privacy Rights

      To exercise your rights under California law, you may submit a request by contacting:

      Hyperlink Infosystem Inc.
      Email: [email protected]

      We will respond to verifiable consumer requests within forty-five (45) days of receipt, subject to a permissible forty-five (45) day extension where reasonably necessary, in which case we will provide notice of the extension. If you have concerns regarding how we handle your personal information, you may contact us using the information above.

14. Additional U.S. State Privacy Disclosures

The following provisions apply to residents of the identified states and supplement the general Privacy Policy. These rights are subject to statutory limitations, exemptions, and verification requirements under applicable law. Unless otherwise specified, we will respond to verified consumer requests within forty-five (45) days of receipt, subject to a permissible extension where allowed by law.

1. Colorado Residents

   This section applies to Colorado residents.

   Under the CPA, Colorado residents have the right to:

   • Confirm whether we are processing their personal data and access such data;
   • Correct inaccuracies in personal data;
   • Delete personal data;
   • Obtain a portable copy of personal data previously provided to us; and
   • Opt out of processing for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

2. Connecticut Residents

   This section applies to Connecticut residents.

   Connecticut residents have rights to access, correct, delete, and obtain a portable copy of personal data, as well as to opt out of targeted advertising, the sale of personal data, and certain profiling activities.

3. Virginia Residents

   This section applies to Virginia residents. Terms used herein shall have the meanings assigned under the VCDPA. This section does not apply to information excluded from the definition of "personal data," including de-identified or publicly available information.

   Targeted Advertising and Sale of Data
   We do not currently engage in targeted advertising as defined under the VCDPA. If we engage in targeted advertising in the future, Virginia residents will have the right to opt out in accordance with applicable law.

   Profiling
   The VCDPA provides the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in profiling that produces such effects.

   Non-Discrimination
   We will not discriminate against a Virginia resident for exercising statutory rights, except as permitted by law.

   Virginia Consumer Rights
   Virginia residents have the right to:

   • Confirm whether we process their personal data and access such data;
   • Correct inaccuracies;
   • Delete personal data;
   • Obtain a portable copy of personal data; and
   • Opt out of targeted advertising, sale of personal data, and qualifying profiling activities.

4. Utah Residents

   This section applies to Utah residents.

   Utah residents have the right to:

   • Confirm whether we process their personal data and access such data;
   • Delete personal data provided to us by the consumer;
   • Obtain a portable copy of personal data previously provided to us; and
   • Opt out of targeted advertising and the sale of personal data.

5. Montana Residents

   Montana residents have rights similar to those provided under other comprehensive state privacy laws, including rights to access, correct, delete, and obtain a portable copy of personal data, as well as to opt out of targeted advertising and sale of personal data. Where we have actual knowledge that a consumer is between the ages of 13 and 15, we will obtain consent prior to processing personal data for targeted advertising or sale, as required by law.

6. Oregon Residents

   Oregon residents have the right to access, correct, delete, and obtain a copy of personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling.

7. Texas Residents

   Texas residents have rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising and sale of personal data.

8. Iowa Residents

   Iowa residents have rights to access, delete, and obtain a portable copy of personal data previously provided to us.

   We will respond within ninety (90) days of receipt of a verified request. The response period may be extended once for an additional forty-five (45) days where reasonably necessary, with notice to the consumer.

9. Delaware Residents

   Delaware residents have rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising and sale of personal data.

10. Indiana Residents

    Indiana residents have rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising and sale of personal data.

11. Tennessee Residents

    Tennessee residents have rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising and sale of personal data.

15. Verification and Appeals

1. To protect personal information, we may require reasonable verification of identity prior to responding to requests.
2. If we decline to take action in response to a consumer request, we will provide written notice explaining the basis for our decision.
3. Where applicable state law provides a right to appeal, consumers may submit an appeal within ninety (90) days of receipt of our decision. Unless otherwise required by state law, we will respond to appeals within sixty (60) days of receipt.
4. If an appeal is denied, we will provide information regarding how to contact the applicable state attorney general or regulatory authority, where required by law.

16. Do Not Track and Opt-Out Signals

1. Certain web browsers transmit "Do Not Track" signals. Because there is no uniform standard governing such signals, we do not respond to generic browser-based Do Not Track settings. Where required by applicable law, including California and Delaware law, we recognize and process legally valid opt-out preference signals, including Global Privacy Control (GPC), as a request to opt out of sale or sharing of personal information.

17. Changes to This Privacy Policy

1. We reserve the right to modify this Privacy Policy at any time. Updates will be posted on this page with a revised "Last Updated" date.

18. Contact Information