BEAN BOX PRIVACY NOTICE

INFORMATION FOR ALL USERS

Bean Box, Inc. (“Bean Box,” “we”) values the privacy of individuals who use our websites, app, and related services (collectively, our “Services”). This Privacy Notice explains how we collect, use, and share the information of users of our Services (“Users” or “you”). By using our Services, you agree to the collection, use, disclosure, and processing of your information as described by this Privacy Notice. Beyond this Privacy Notice, your use of our Services is also subject to our Bean Box - Terms of Service (https://beanbox.com/terms) and any additional agreements you may enter into with us.

INFORMATION WE COLLECT

We may collect a variety of information about you or your devices from various sources, as described below.

Information You Provide to Us

Registration Information. If you sign up for an account, register to use our Services, or sign up for emails or other updates, we may ask you for basic contact information, such as name, email, phone number, or mailing address.

Communications. If you contact us directly, we may collect additional information from you. For example, when you reach out to our customer support team, we may ask for your name, email address, mailing address, phone number, or other contact information so that we can verify your identity and communicate with you. We may also store the contents of any message or attachments that you send to us, as well as any information you submit through any of our forms or questionnaires.

User Content. We allow Users of our Services to share their own content with others. This may include posts, comments, reviews, or other User-generated content. Unless otherwise noted when creating such content, this information may be shared publicly through our Services.

Payment Information. If you make a purchase through the Services, your payment-related information, such as credit card or other financial information, may be collected by our third-party payment processor on our behalf.

Job Applications. If you apply for a job with us, we may collect relevant information such as your name, phone number, email address, position, job history, education history, references, a cover letter, or similar information.

Information We Collect Automatically When You Use Our Services

Device Information. We may collect information about the devices and software you use to access our Services, such as your IP address, web browser type, operating system version, device identifiers, or similar information.

Usage Information. To help us understand how you use our Services and to help us improve them, we may collect data about your interactions with our Services. This includes information such as crash reports, session lengths and times, the pages or other content you view, and any searches you conduct on our site.

Cookies and Similar Technologies. We and our third-party partners may collect information using cookies, pixel tags, or similar technologies. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services.

We use a consent banner to obtain your permission before activating non-essential cookies and tracking technologies. You may modify your preferences at any time using the "Cookie Preferences" link in our site footer.

Tracking Technologies We Use

The following table lists the tracking technologies deployed on our website, their operators, purposes, and whether your consent is required before they activate.

Strictly necessary cookies (session, cart, security, and CSRF tokens) are always active and do not require consent, as they are essential for the website to function.

No non-essential tracking technologies are activated until you provide consent through our cookie banner. If you decline, no data is collected or shared with the third parties listed above.

HOW WE USE THE INFORMATION WE COLLECT

We may use the information we collect:

• To provide, maintain, improve, and enhance our Services
• To understand and analyze how you use our Services and develop new products, services, features, and functionality
• To facilitate purchases of products or services that you order
• To allow you to share content with other Users of our Services
• To evaluate and process applications for jobs with us
• To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide User support
• For marketing and advertising purposes, including developing and providing promotional and advertising materials that may be relevant, valuable or otherwise of interest to you
• To detect and prevent fraud, and respond to trust and safety issues that may arise
• For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency
• For other purposes for which we provide specific notice at the time the information is collected

SMS/MMS MOBILE MARKETING

SMS Consent and Data Sharing

When you opt in to receive text messages from Bean Box, we collect and use your mobile phone number and SMS consent status to send you promotional and transactional messages as described in our Terms of Service.

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your personal data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers (such as Klaviyo), phone companies, wireless carriers, and any other vendors who assist us in the delivery of text messages.

Your SMS opt-in data and consent status will not be sold or shared for marketing purposes unrelated to our text messaging program. This restriction on SMS data sharing operates independently of any other data sharing provisions in this Privacy Policy and is in addition to protections provided by applicable data privacy laws (such as GDPR, CCPA, or similar legislation).

Cookies and Tracking for Cart Abandonment Messages

We use cookies and similar tracking technologies to monitor your activity on our website, including items you add to your shopping cart. This tracking allows us to identify when you have abandoned your cart without completing a purchase.

If you have opted in to receive text messages from Bean Box, we may use the information collected through cookies to send you cart reminder messages via SMS or MMS. These messages are designed to remind you of items left in your cart and encourage you to complete your purchase.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may impact our ability to send you personalized cart reminder messages. For more information about how we use cookies generally, please see the section on Cookies and Similar Technologies in this Privacy Policy.

HOW WE SHARE THE INFORMATION WE COLLECT

Service Providers. We may share any information we collect with service providers retained in connection with the provision of our Services. These companies are only permitted to use this information to help us provide our Services, not for their own purposes.

Other Users. Content you post, including comments, may be displayed to other Users as appropriate.

Our Partners. We use analytics services to collect and process certain analytics data. We also work with third-party advertising partners. These services may also collect information about your use of other websites, apps, and online resources. These partners include:

• Google: We use Google’s services to collect and process analytics data and to place ads that we think may interest our users and potential users. Google Privacy and Terms
• Facebook: We use Facebook’s services to place ads that we think may interest our users and potential users. Meta [Facebook] Data Policy, Facebook Advertising
• Microsoft: We use Microsoft’s services to place ads that we think may interest our users and potential users. Microsoft Advertising policies

Please note that this list may be updated from time to time to provide you with the latest information. For more information about your choices regarding how these partners use your information, see the Your Choices section below.

As Required by Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety. In particular, we may disclose relevant information to the appropriate third parties if you post any illegal, threatening, or objectionable content on or through the Services.

Merger, Sale, or Other Asset Transfers. We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or in which we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the same general provisions of this Privacy Notice.

Consent. We may also disclose your information with your permission.

YOUR CHOICES

Cookie Consent. When you first visit our website, a consent banner allows you to accept or reject non-essential cookies and tracking technologies. You may change your preferences at any time by clicking the "Cookie Preferences" link in our site footer. If you reject non-essential cookies, no analytics or marketing data is collected or shared with third parties through cookies or tracking technologies. However, if you voluntarily provide your email address or phone number through our signup forms, that information will be shared with our email and SMS service provider to deliver the marketing communications you requested, regardless of your cookie preferences.

Global Privacy Control. We honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we automatically treat this as a request to opt out of all non-essential tracking and data sharing. No further action is required on your part.

Our Communications. From time to time, you may receive marketing or other informational email messages from us. You can unsubscribe from our promotional and informational emails via the link provided in the emails. Users may continue to receive administrative messages from us necessary to service User accounts after opting out of receiving promotional messages from us.

Browser Cookies. Most web browsers allow you to manage cookies through the browser settings. To find out more about cookies, you can visit www.aboutcookies.org or www.allaboutcookies.org.

Our Partners. You can learn more about Google’s privacy practices and your options about how they use your information on Google’s website. You can also install the Google Analytics Opt-out Browser Add-on. Meta, the parent company of Facebook, provides information about how it uses the information it collects through our Services in its Data Policy. You can also learn specifically about Facebook’s advertising practices on its website. Some of our advertising partners are members of the Network Advertising Initiative or the Digital Advertising Alliance. You can visit those organizations’ websites to learn about how you may opt out of receiving web-based personalized ads from their member companies. You can also access any settings offered by your mobile operating system to limit ad tracking. To inquire about your choices regarding our business partners generally, contact us at privacy@beanbox.com.

CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the purposes for which we collected or sold it, and the categories of third parties with whom we shared it.
• Right to Delete. You may request that we delete the personal information we have collected from you, subject to certain exceptions.
• Right to Correct. You may request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing. You may opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. To exercise this right, click the "Do Not Sell or Share My Personal Information" link in our site footer, or adjust your cookie preferences to reject Marketing cookies.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.

When you reject Marketing cookies through our consent banner, we do not share your personal information with third-party advertising partners (Google, Meta, Microsoft, or others listed in the tracker disclosure table above). This effectively opts you out of any "sale" or "sharing" of personal information as those terms are defined under California law.

DATA SUBJECT REQUESTS

To exercise any of the rights described above, or to submit a data subject request, please email us at privacy@beanbox.com with the subject line "Privacy Rights Request." We will respond to verifiable requests within 45 days as required by applicable law. We may need to verify your identity before processing your request.

If you have previously consented to the collection of your data by third-party trackers, and you wish to request deletion of data already shared with those parties, we will make reasonable efforts to propagate your request to the relevant third parties.

THIRD-PARTY CONTENT

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the content provided by, or the privacy practices of, these third parties. Please be aware that this Privacy Notice does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.

SECURITY

We make reasonable efforts to protect your information by using administrative, technological, and physical safeguards designed to improve the security of the information we maintain and protect it from accidental loss, unauthorized access or use, or any other inappropriate or unlawful processing. However, because no information system can be 100% secure, we cannot guarantee the absolute security of your information.

CHILDREN’S PRIVACY

We do not knowingly collect, maintain, or use information from children under 13 years of age, and no part of our Services are directed toward children. If you learn that a child has provided us with information in violation of this Privacy Notice, then you may alert us at privacy@beanbox.com.

INTERNATIONAL VISITORS

Our Services are hosted in the United States and intended for visitors located within the United States. If you choose to use the Services from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your information outside of those regions to the United States for storage and processing. Also, we may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services. By using our Services, you consent to the transfer, storage, and processing of your information as described in this Privacy Notice.

CHANGES TO THIS PRIVACY NOTICE

We will post any adjustments to the Privacy Notice on this page, and the revised version will be effective when it is posted. If we make material changes, we may notify you via a notice posted on our website or another method. We encourage you to read this Privacy Notice periodically to stay up to date about our privacy practices.

CONTACT US

If you have any questions, comments, or concerns about our processing activities, please email us at privacy@beanbox.com. Or you may write to us at:

Privacy Matters
Bean Box
Bean Box, Inc.
1037 NE 65th Street, PMB 326, Seattle, WA 98115

Last updated: March 22, 2026