PRIVACY POLICY

Last updated: July 7, 2026

This Privacy Policy describes how Mullea, a brand of RiverPink LLC (the "Site", "we", "us", or "our"), collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from trymullea.com (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected. Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources. The information we collect and use varies depending on how you interact with us. In addition to the specific uses below, we may use information we collect to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce applicable terms, and protect or defend the Services, our rights, and the rights of our users or others.

If you have any questions about this Privacy Policy, you can contact us at support@trymullea.com.

What Personal Information We Collect

Information You Provide Directly: contact details (name, address, phone number, email); order information (billing and shipping address, payment confirmation, email, phone); account information (username, password, security details); shopping information (items viewed, cart contents, reviews, referrals, purchases); and customer support information (anything you include in messages to us).

Information We Collect About Your Usage ("Usage Data"): We automatically collect certain information about your interaction with the Services using cookies, pixels, and similar technologies. This may include device information, browser information, network connection, IP address, and other interaction data.

Information We Obtain from Third Parties: We may obtain information from vendors and service providers who collect information on our behalf, such as companies that support our Site (e.g., Shopify) and our payment processors (who collect payment information to process your orders). Any information we obtain from third parties is treated in accordance with this Privacy Policy.

How We Use Your Personal Information

- Providing Products and Services: to process payments, fulfill orders, send account and transaction notifications, manage your account, arrange shipping, and facilitate returns and exchanges (to perform our contract with you).
- Marketing and Advertising: to send marketing communications by email, text, or postal mail and to show you advertisements, including tailoring the Services and advertising on our Site and other websites. For EEA residents, the legal basis is our legitimate interest in selling our products under Art. 6(1)(f) GDPR.
- Security and Fraud Prevention: to detect, investigate, and act on possible fraudulent, illegal, or malicious activity. For EEA residents, the legal basis is our legitimate interest in keeping our website secure under Art. 6(1)(f) GDPR.
- Communicating with You and Service Improvement: to provide customer support and improve our Services, in our legitimate interests under Art. 6(1)(f) GDPR.

Cookies

Like many websites, we use cookies on our Site. For information about the cookies used to power our store with Shopify, see https://www.shopify.com/legal/cookies. We use cookies to power and improve our Site (including remembering your preferences), run analytics, and better understand user interaction. We may permit third parties and service providers to use cookies to tailor services, products, and advertising.

Most browsers accept cookies by default, but you can set your browser to remove or reject them. Blocking cookies can negatively impact your experience and may cause some features to work incorrectly.

Our website recognizes the Global Privacy Control (GPC) signal, which lets you opt out of certain uses or disclosures of your information. If you notify us of your preference through GPC, we will treat it as a valid request to opt out of sharing / targeted advertising for that browser or device. To learn more, visit https://globalprivacycontrol.org/. Other than GPC, we do not recognize other "Do Not Track" signals.

How We Disclose Personal Information

In certain circumstances we may disclose your personal information to third parties, including: vendors who perform services on our behalf (IT, payment processing, analytics, customer support, cloud storage, fulfillment, and shipping); business and marketing partners (who use your information under their own privacy notices); parties you direct or consent to us sharing with; our affiliates or corporate group; and in connection with a business transaction, to comply with legal obligations, enforce terms, or protect our rights.

We may "sell" or "share" (as defined by applicable law) identifiers, commercial information, and Usage Data with business and marketing partners for advertising and marketing purposes. We do not use or disclose sensitive personal information without your consent or to infer characteristics about you.

Third Party Websites and Links

Our Site may link to websites operated by third parties. If you follow links to sites we don't control, you should review their privacy and security policies. We are not responsible for the privacy or security of such sites.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information about children. If you are a parent or guardian of a child who has provided us with their personal information, contact us to request deletion. We do not have actual knowledge that we "share" or "sell" personal information of individuals under 16 years of age.

Security and Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Information you send us may not be secure in transit; we recommend not using insecure channels for sensitive information. How long we retain your personal information depends on factors such as our need to maintain your account, provide the Services, comply with legal obligations, and resolve disputes.

Your Rights

Depending on where you live, you may have rights including: Access/Know, Delete, Correct, Portability, Opt out of Sale/Sharing/Targeted Advertising, Restriction of Processing, Withdrawal of Consent, Appeal, and Managing Communication Preferences (you can opt out of promotional emails via the unsubscribe link at any time). These rights are not absolute and may apply only in certain circumstances. We will not discriminate against you for exercising them. We may need to verify your identity before responding. To exercise any right, contact us at support@trymullea.com.

Complaints

If you have complaints about how we process your personal information, contact us at support@trymullea.com. Depending on where you live, you may have the right to appeal or to lodge a complaint with your local data protection authority.

International Users

We may transfer, store, and process your personal information outside the country you live in. If we transfer your personal information out of Europe, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, unless the transfer is to a country determined to provide an adequate level of protection.

SMS Privacy Statement

If you provide your mobile phone number and opt in to receive SMS or MMS communications from Mullea, we will use your number solely to deliver transactional, informational, or promotional messages you have agreed to receive.

- Information Collected: your mobile phone number, message interaction data (such as delivery confirmations), and opt-in/opt-out status.
- Use of Information: your mobile number is used only to send SMS/MMS messages related to Mullea services, updates, or promotions, in accordance with your consent.
- Opt-Out: you may opt out at any time by replying STOP to any message. For help, reply HELP or contact support@trymullea.com.
- No Third-Party Marketing Sharing: mobile contact information will not be shared, sold, rented, or disclosed to third parties for their marketing or promotional purposes.

Contact

If you have questions about our privacy practices or this Privacy Policy, or would like to exercise any of your rights, email us at support@trymullea.com. For the purpose of applicable data protection laws, and unless stated otherwise, RiverPink LLC is the data controller of your personal information.