Privacy Policy

Effective Date: August 18, 2026
Last Updated: August 18, 2026

Henny Benny LLC, doing business as HYZL (“HYZL,” “we,” “us,” or “our”), respects your privacy and is committed to responsibly handling personal information.

This Privacy Policy explains how HYZL collects, uses, stores, discloses, protects, and otherwise processes personal information when you visit or interact with the HYZL website, create an account, join HYZL Passport, subscribe to marketing communications, participate in promotions, contact us, place or receive an order, request a return or refund, submit a warranty or customer-service request, interact with HYZL through social media or advertising, or otherwise use our services.

For purposes of this Privacy Policy, our website, ecommerce services, customer accounts, HYZL Passport, communications, promotions and related online services are collectively referred to as the “Services.”

This Privacy Policy is intended to provide transparency regarding our privacy practices. It does not constitute a blanket consent to all processing described in this Policy. Where applicable law requires separate consent, notice or authorization, HYZL will seek that consent, notice or authorization separately.

1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information collected through or in connection with the Services.

It may include information collected when you:

• browse the HYZL website;

• create or use a customer account;

• purchase HYZL products;

• enter billing or delivery information;

• receive or track an order;

• communicate with HYZL regarding shipping or delivery;

• request an exchange, return, refund or warranty service;

• join HYZL Passport;

• subscribe to email, SMS or other marketing communications;

• participate in a promotion, giveaway, survey or other HYZL program;

• submit a product review or other content;

• contact customer service;

• interact with HYZL advertising;

• interact with HYZL through social-media platforms;

• use cookies or similar technologies on our website; or

• otherwise voluntarily provide information to HYZL.

This Privacy Policy does not govern the independent privacy practices of websites, payment processors, shipping carriers, social-media platforms, advertising platforms or other third parties that maintain their own privacy policies.

Purchases, payment obligations, product availability, shipping, delivery, returns, refunds, warranties, product use, risk of loss, limitations of liability and disputes relating to purchases are governed separately by HYZL's applicable Terms of Service, Shipping Policy, Return and Refund Policy, Warranty terms and other applicable purchase terms.

2. PERSONAL INFORMATION WE MAY COLLECT

The information HYZL collects depends on how you interact with us.

A. Identifiers and Contact Information

We may collect:

• first and last name;

• billing address;

• shipping address;

• email address;

• telephone number;

• customer or account identifier;

• username;

• IP address;

• device identifiers;

• online identifiers; and

• other similar identifiers.

B. Account Information

If you create an account, we may process information associated with your account, including:

• login credentials;

• account preferences;

• saved addresses;

• order history;

• wishlist or saved-product information, if available;

• marketing preferences; and

• account activity.

Passwords and authentication credentials may be processed through Shopify or other service providers rather than directly accessible to HYZL personnel.

C. Transaction and Commercial Information

We may collect information concerning:

• products viewed;

• products added to a cart;

• purchases;

• product variants;

• quantities;

• prices;

• discounts and promotional codes;

• gift cards;

• order numbers;

• order history;

• abandoned carts;

• returns;

• exchanges;

• refunds;

• warranties;

• customer-service issues; and

• preferences or interests inferred from your interactions with HYZL.

D. Payment Information

When you make a purchase, payment information may be processed by Shopify, Shopify Payments or another payment processor.

Depending on the payment method, payment processors may receive information such as:

• credit or debit card information;

• billing information;

• payment-account information;

• digital-wallet information; and

• transaction authentication data.

HYZL generally receives transaction-related information such as payment status, payment method and limited payment details rather than complete payment-card credentials.

Payment processing is subject to the privacy and security practices of the applicable payment provider.

E. Shipping, Delivery and Fulfillment Information

To process and deliver orders, we may collect or disclose:

• recipient name;

• delivery address;

• billing address;

• email address;

• telephone number;

• order number;

• package information;

• shipment status;

• tracking information;

• delivery confirmation;

• delivery exceptions;

• return-shipment information;

• carrier communications; and

• information related to missing, delayed, damaged, refused, returned or potentially fraudulent shipments.

We may disclose information necessary to fulfill an order to shipping carriers, fulfillment providers, logistics providers, insurers, fraud-prevention services or other businesses involved in completing or investigating a shipment.

Shipping carriers and logistics providers may independently collect and process information pursuant to their own privacy policies.

F. Internet, Device and Browsing Information

When you access the Services, we or our technology providers may automatically collect information such as:

• IP address;

• browser type;

• operating system;

• device type;

• device identifiers;

• language;

• referring website;

• pages viewed;

• products viewed;

• links clicked;

• search queries;

• time and date of access;

• approximate location derived from an IP address;

• session information;

• checkout activity;

• cart activity;

• advertising identifiers;

• cookie identifiers;

• pixel data; and

• interactions with HYZL marketing or advertisements.

G. Location Information

We may process approximate geographic information based on your IP address or information you provide, such as your shipping location.

HYZL does not intentionally collect precise geolocation information unless it is reasonably necessary for a feature you affirmatively request or another disclosed purpose.

H. Communications and Customer-Service Information

When you communicate with HYZL, we may retain:

• emails;

• contact-form submissions;

• chat communications;

• customer-service correspondence;

• photographs or videos you submit;

• complaints;

• delivery inquiries;

• warranty documentation;

• return requests;

• refund requests;

• dispute information; and

• other information you choose to provide.

I. Reviews and User-Submitted Content

If you submit a product review, photograph, testimonial, social-media tag, comment or similar content, we may collect the content and information associated with your submission.

Information you intentionally submit for public display may become publicly available.

Do not include private, confidential, financial or sensitive personal information in public reviews or public submissions.

J. Marketing and HYZL Passport Information

If you join HYZL Passport, subscribe to marketing or participate in promotions, we may collect:

• name;

• email address;

• telephone number, if provided;

• marketing preferences;

• signup source;

• promotional participation;

• discount usage;

• purchase history;

• engagement with marketing communications; and

• other information voluntarily provided in connection with the program.

K. Fraud, Security and Risk Information

We and our service providers may process information used to:

• authenticate transactions;

• detect fraud;

• identify suspicious activity;

• prevent chargebacks;

• protect customer accounts;

• investigate unauthorized transactions;

• enforce purchase limits;

• prevent abuse of promotions;

• detect bots;

• protect our website;

• protect HYZL intellectual property; and

• protect HYZL, our customers and third parties.

This information may include IP addresses, transaction patterns, device information, account information, order activity, shipping information and risk indicators provided by payment or fraud-prevention providers.

L. Inferences

We or advertising, analytics or ecommerce technology providers may derive inferences from available information, such as likely product interests, shopping preferences or advertising interests.

M. Sensitive Personal Information

Certain laws define categories such as account credentials, financial-account information or precise geolocation as “sensitive personal information.”

HYZL seeks to collect and use sensitive personal information only when reasonably necessary to:

• process requested transactions;

• provide requested products or Services;

• secure customer accounts;

• prevent fraud;

• authenticate transactions;

• comply with law; or

• perform another purpose permitted under applicable law.

HYZL does not intend to use sensitive personal information to infer characteristics about customers unless expressly disclosed and permitted by applicable law.

N. Information HYZL Does Not Intentionally Request

Unless reasonably necessary for a specific disclosed purpose, HYZL does not ask customers to provide information such as:

• Social Security numbers;

• medical records;

• biometric templates;

• genetic information;

• religious beliefs;

• political beliefs; or

• other highly sensitive information unrelated to purchasing or using HYZL products.

Please do not send HYZL unnecessary sensitive personal information.

3. SOURCES OF PERSONAL INFORMATION

We may obtain personal information:

Directly From You

For example, when you create an account, order a product, join HYZL Passport, contact customer service or request a return.

Automatically

Through cookies, pixels, local storage, server logs, analytics technologies and similar technologies.

From Shopify

Our ecommerce platform may provide transaction, account, storefront, analytics and customer information necessary to operate our store.

From Payment Providers

Payment and fraud-prevention providers may provide payment status, authentication results, risk indicators and related transaction information.

From Shipping and Logistics Providers

Carriers may provide tracking, delivery confirmation, delivery exceptions, address corrections and other shipment information.

From Advertising and Analytics Providers

Subject to applicable privacy choices, providers may provide information concerning advertisement interactions, website traffic, attribution and marketing performance.

From Social-Media Platforms

If you interact with HYZL through social media, tag us or access our Services through a social-media platform, we may receive information permitted by your platform settings and the platform's policies.

From Other Third Parties

We may receive information from service providers, fraud-prevention companies, business partners, referral partners, affiliate programs or publicly available sources where permitted by law.

4. HOW HYZL USES PERSONAL INFORMATION

HYZL may process personal information to:

Provide the Services

Including to:

• operate our website;

• maintain customer accounts;

• display products;

• manage carts;

• process transactions;

• fulfill orders; and

• provide requested Services.

Process Purchases

Including to:

• verify transaction information;

• authorize payment;

• process payment;

• confirm orders;

• prevent duplicate transactions;

• manage discounts;

• issue receipts; and

• maintain transaction records.

Fulfill and Deliver Orders

Including to:

• create shipping labels;

• provide shipment information to carriers;

• send tracking notifications;

• confirm delivery;

• investigate delivery exceptions;

• investigate lost or damaged packages;

• process returned shipments; and

• respond to shipping-related customer inquiries.

Provide Customer Service

Including to:

• answer questions;

• investigate complaints;

• address delivery issues;

• process returns;

• process refunds;

• administer warranties;

• resolve account issues; and

• communicate regarding orders.

Secure the Services and Prevent Fraud

Including to:

• authenticate users;

• detect unauthorized access;

• identify fraudulent transactions;

• detect suspicious orders;

• prevent payment fraud;

• prevent promotional abuse;

• protect HYZL and customers;

• investigate security incidents; and

• enforce applicable policies.

Improve HYZL

Including to:

• understand website performance;

• analyze shopping behavior;

• improve product offerings;

• improve customer experience;

• diagnose technical problems;

• measure marketing effectiveness; and

• develop new features and Services.

Communicate With You

Including to send:

• order confirmations;

• shipping updates;

• delivery notices;

• account communications;

• security notices;

• customer-service messages;

• warranty communications;

• return and refund communications; and

• other transactional or service-related communications.

Market HYZL

Subject to applicable law and your available choices, we may use information to:

• send promotional emails;

• send promotional messages where separately authorized;

• personalize advertising;

• measure advertising performance;

• create audiences;

• provide product recommendations;

• administer HYZL Passport; and

• communicate promotions and product launches.

Comply With Law and Protect Legal Rights

We may process information to:

• comply with tax and accounting obligations;

• maintain legally required records;

• respond to lawful government requests;

• respond to subpoenas, court orders or other legal process;

• establish or defend legal claims;

• enforce agreements;

• investigate suspected misconduct;

• protect our intellectual property;

• cooperate with law enforcement when legally required; and

• protect the rights, property and safety of HYZL, customers or others.

Corporate Transactions

Information may be used or disclosed as reasonably necessary in connection with financing, investment, restructuring, merger, acquisition, sale, transfer, bankruptcy or another corporate transaction.

5. SHOPIFY AND ECOMMERCE TECHNOLOGY

HYZL's online store is hosted and supported by Shopify.

Shopify may process personal information when you browse, interact with or make purchases through the HYZL store.

Depending on HYZL's Shopify settings and the Shopify services enabled, Shopify may process information relating to your interactions with HYZL, Shopify and other Shopify merchants to provide ecommerce, security, analytics, personalization, advertising or other enhanced services.

Where legally required, HYZL will provide mechanisms allowing customers to exercise applicable privacy choices concerning targeted advertising or the sale or sharing of personal information.

Customers may also have rights that can be exercised directly through Shopify's privacy tools.

Shopify Consumer Privacy Policy: [INSERT SHOPIFY'S CURRENT CONSUMER PRIVACY POLICY LINK]

Shopify Privacy Portal: [INSERT SHOPIFY'S CURRENT PRIVACY PORTAL LINK]

HYZL should not be understood as controlling every independent processing activity undertaken by Shopify or another technology provider acting in its own capacity.

6. COOKIES AND SIMILAR TECHNOLOGIES

HYZL and its technology providers may use:

• cookies;

• pixels;

• tags;

• SDKs;

• local storage;

• server logs; and

• similar technologies.

These technologies may be used for:

Strictly Necessary Purposes

Such as website security, checkout, shopping carts, authentication and fraud prevention.

Functional Purposes

Such as remembering preferences and improving website functionality.

Analytics Purposes

Such as understanding website traffic, visitor activity and performance.

Advertising Purposes

Such as measuring advertising, attribution, audience creation, personalization and displaying advertisements based on activity across websites or services.

Where consent is legally required before non-essential technologies may operate, HYZL will seek consent through an appropriate consent mechanism.

You may be able to manage certain choices through HYZL's cookie banner or privacy settings.

Changing browser settings or deleting cookies may affect some website functionality.

7. GLOBAL PRIVACY CONTROL AND OTHER BROWSER SIGNALS

Where applicable law requires HYZL to recognize a qualifying browser-based opt-out preference signal, such as Global Privacy Control (“GPC”) or another legally recognized opt-out preference signal, HYZL will process the signal as required by applicable law.

A qualifying opt-out preference signal may apply to the browser or device from which it is transmitted and may not automatically identify you across other devices, browsers or offline interactions.

Legacy “Do Not Track” browser signals are not standardized in the same manner as legally recognized opt-out preference signals. HYZL may not respond to a traditional Do Not Track signal unless required by applicable law.

8. WHEN HYZL MAY DISCLOSE PERSONAL INFORMATION

HYZL may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this Policy.

Shopify and Ecommerce Providers

To operate our store, checkout, accounts, analytics and related ecommerce infrastructure.

Payment Processors and Financial Institutions

To process transactions, refunds and payment disputes.

Shipping, Logistics and Fulfillment Providers

To fulfill and deliver orders, provide tracking and investigate delivery issues.

Fraud-Prevention and Security Providers

To assess order risk, prevent fraud and secure the Services.

Cloud, Hosting and IT Providers

To host, maintain and secure HYZL's technology systems.

Customer-Service Providers

To help answer inquiries and process customer requests.

Email and Communications Providers

To deliver transactional and promotional communications.

Analytics Providers

To analyze website performance and customer interactions.

Advertising and Marketing Providers

Subject to applicable law and privacy choices, to measure, personalize or deliver advertising and marketing.

Affiliate and Referral Providers

To attribute qualifying purchases, administer referral arrangements or calculate commissions.

Professional Advisers

Such as lawyers, accountants, auditors, insurers and consultants where reasonably necessary.

Government Authorities and Legal Parties

When reasonably necessary to comply with law, protect legal rights, investigate fraud or respond to valid legal process.

Parties to Corporate Transactions

In connection with a potential or completed merger, acquisition, financing, sale, restructuring or similar transaction.

9. SALE, SHARING AND TARGETED ADVERTISING

HYZL does not intend to sell customer lists or personal information to third parties in exchange for money as an independent business model.

However, privacy laws in certain states define “sale” and “sharing” more broadly than an exchange of information for money.

For example, disclosures involving advertising cookies, pixels, analytics technologies, audience tools or cross-context behavioral advertising may be legally classified as:

• a “sale” of personal information;

• “sharing” of personal information;

• targeted advertising; or

• cross-context behavioral advertising,

even when HYZL receives no direct monetary payment for the information.

Accordingly, if HYZL enables technologies that constitute sale, sharing or targeted advertising under applicable law, HYZL will provide the legally required opt-out method.

Depending on the technologies enabled, categories potentially involved may include:

• identifiers;

• device and internet information;

• browsing activity;

• commercial information;

• approximate location;

• advertising identifiers; and

• inferences concerning interests or preferences.

HYZL does not knowingly sell or share personal information of consumers under 16 years of age in circumstances requiring affirmative authorization.

10. MARKETING COMMUNICATIONS

You may opt out of promotional email communications by using the unsubscribe mechanism contained in a marketing email.

If HYZL offers SMS or similar marketing, legally required consent will be obtained separately.

Consent to receive marketing messages is not intended to be a condition of purchasing HYZL merchandise unless expressly permitted by applicable law.

Opting out of marketing does not prevent HYZL from sending non-promotional communications reasonably necessary to:

• fulfill an order;

• provide shipping information;

• respond to customer service;

• process a return or refund;

• communicate about an account;

• provide warranty information;

• issue security notices; or

• satisfy legal obligations.

HYZL may retain limited suppression information necessary to remember and honor an unsubscribe request.

11. HYZL PASSPORT, PROMOTIONS AND FINANCIAL INCENTIVES

HYZL may offer HYZL Passport membership, promotional discounts, early access, benefits or other incentives.

Participation is voluntary.

If a HYZL program constitutes a “financial incentive,” loyalty program, price difference or service difference regulated by applicable privacy law, HYZL will provide any legally required Notice of Financial Incentive or similar notice before enrollment.

That separate notice may describe:

• the material terms of the program;

• categories of personal information involved;

• how to opt in;

• how to withdraw;

• the value of the consumer information where legally required; and

• the method used to determine that value.

A customer may withdraw from a qualifying program as provided in the applicable program terms.

Nothing in this Privacy Policy authorizes HYZL to discriminate unlawfully against a customer for exercising a privacy right.

12. DATA RETENTION

HYZL retains personal information only for as long as reasonably necessary and proportionate for the purposes for which it was collected, subject to legal, accounting, tax, security and dispute-resolution requirements.

Retention considerations generally include:

Customer Account Information

For the duration of the account and for a reasonable period following account closure when necessary for security, fraud prevention, legal compliance or dispute resolution.

Order and Transaction Records

For as long as reasonably necessary to fulfill the transaction and satisfy applicable tax, accounting, fraud-prevention, chargeback, warranty, litigation and recordkeeping obligations.

Shipping and Delivery Information

For as long as reasonably necessary to complete delivery, investigate delivery disputes, process returns and satisfy legal, accounting, fraud-prevention or dispute-resolution obligations.

Customer-Service Records

For as long as reasonably necessary to resolve the request and maintain records relating to disputes, returns, warranties, chargebacks or legal obligations.

Marketing Information

Until you unsubscribe, withdraw consent where applicable, or the information is no longer reasonably necessary for the marketing purpose. Limited suppression information may be retained to ensure that opt-out requests continue to be honored.

Cookie and Analytics Information

According to the retention configuration of the applicable technology and subject to HYZL's privacy settings and applicable law.

Security and Fraud Information

For as long as reasonably necessary to prevent, detect or investigate fraud, security incidents or abuse and to protect HYZL and its customers.

When information is no longer reasonably necessary, HYZL may delete, de-identify or anonymize it, subject to applicable law and technical limitations involving backups and archival systems.

13. DATA SECURITY

HYZL seeks to maintain reasonable administrative, technical and organizational safeguards appropriate to the nature of the personal information processed.

Safeguards may include measures intended to:

• restrict unauthorized access;

• protect customer accounts;

• secure ecommerce transactions;

• detect fraud;

• protect systems;

• limit access to personal information;

• use reputable ecommerce and payment providers; and

• respond to potential security incidents.

However, no website, network, storage system, internet transmission or electronic transaction can be guaranteed to be completely secure.

Accordingly, HYZL cannot guarantee that unauthorized third parties will never defeat security measures or improperly access, acquire, alter or disclose information.

Nothing in this section limits any rights or remedies that cannot legally be waived.

14. ACCOUNT SECURITY AND CUSTOMER RESPONSIBILITIES

If you create an HYZL account, you are responsible for taking reasonable steps to protect your login credentials.

Please:

• use a strong and unique password;

• do not disclose your credentials to unauthorized persons;

• protect devices used to access your account; and

• notify HYZL promptly if you believe your account has been compromised.

HYZL may take reasonable action to protect an account or transaction when suspicious activity is detected, including requesting additional verification, restricting access or canceling transactions where permitted by applicable terms and law.

15. PRIVACY RIGHTS FOR U.S. RESIDENTS

Depending on where you reside and whether the relevant law applies to HYZL, you may have rights concerning your personal information.

These may include the right to:

• confirm whether HYZL processes your personal information;

• access personal information;

• obtain information about categories of personal information collected;

• obtain information about sources of personal information;

• obtain information about purposes for processing;

• obtain information about categories of recipients;

• request correction of inaccurate information;

• request deletion of certain information;

• obtain a portable copy of certain information;

• opt out of certain sales of personal information;

• opt out of certain sharing of personal information;

• opt out of targeted advertising;

• limit certain uses of sensitive personal information;

• withdraw consent where processing depends upon consent;

• appeal certain privacy-request decisions where applicable; and

• receive equal treatment for exercising legally protected privacy rights.

These rights are subject to applicable exceptions and verification requirements.

HYZL may retain information when legally permitted or required, including when reasonably necessary to:

• complete transactions;

• provide requested products or services;

• detect fraud;

• maintain security;

• maintain records;

• establish or defend legal claims;

• comply with tax, accounting or legal obligations;

• honor opt-out requests; or

• exercise or defend other legal rights.

16. CALIFORNIA PRIVACY RIGHTS

California residents may have rights under the California Consumer Privacy Act, as amended (“CCPA”), when the CCPA applies to HYZL.

These may include:

Right to Know and Access

The right to request information concerning personal information HYZL has collected, used, disclosed, sold or shared as provided by applicable law.

Right to Delete

The right to request deletion of certain personal information, subject to legal exceptions.

Right to Correct

The right to request correction of inaccurate personal information.

Right to Opt Out of Sale or Sharing

Where HYZL engages in activity legally defined as a sale or sharing of personal information, qualifying California consumers may request that HYZL stop such activity.

Right to Limit Certain Uses of Sensitive Personal Information

If HYZL uses sensitive personal information for purposes that trigger a right to limit under California law, HYZL will provide the required method for exercising that right.

Right to Non-Discrimination

HYZL will not unlawfully discriminate against a consumer for exercising a right granted by applicable California privacy law.

Authorized Agents

Where permitted by law, a California resident may use an authorized agent to submit a privacy request.

HYZL may require reasonable evidence that:

• the agent is authorized to act for the consumer; and/or

• the consumer has verified their identity directly with HYZL,

except where different procedures are legally required.

Opt-Out Preference Signals

Where required, HYZL will honor qualifying opt-out preference signals as requests to opt out of applicable sale or sharing.

California Direct-Marketing Disclosures

California residents may have additional rights concerning certain disclosures of personal information to third parties for their own direct-marketing purposes.

Requests concerning applicable California direct-marketing rights may be submitted through the privacy contact methods listed below.

17. PRIVACY REQUEST PROCEDURE

To submit an applicable privacy request, you may use one of the following methods:

Email: [INSERT ACTIVE HYZL PRIVACY EMAIL BEFORE PUBLISHING]

Online: Submit a request through the HYZL website Contact page and identify the request as a “Privacy Request.”

Where required, HYZL will acknowledge and respond to verified privacy requests within the period required by applicable law.

HYZL may request information reasonably necessary to:

• verify your identity;

• locate relevant records;

• protect against fraudulent requests; and

• confirm an authorized agent's authority.

Information obtained for verification will be used for verification and related security purposes as permitted by law.

HYZL may deny or limit a request where permitted or required by law and, where required, will provide an explanation.

18. APPEALS

If applicable law provides a right to appeal HYZL's decision concerning a privacy request, you may submit an appeal using the privacy contact information listed above and include “Privacy Appeal” in your request.

HYZL will review and respond to qualifying appeals as required by applicable law.

19. CHILDREN'S PRIVACY

HYZL is a general-audience fashion and lifestyle brand and its Services are not directed to children under 13.

HYZL does not knowingly collect personal information online from children under 13 in circumstances governed by the Children's Online Privacy Protection Act without legally required authorization.

If HYZL learns that it has collected personal information from a child in violation of applicable law, it will take reasonable steps to delete or otherwise address that information.

A parent or legal guardian who believes that a child has provided HYZL with personal information in violation of applicable law should contact HYZL through the privacy contact information below.

HYZL does not knowingly sell or share personal information of consumers under 16 where applicable law requires affirmative authorization.

20. AUTOMATED TOOLS

HYZL and its service providers may use automated technology for purposes such as:

• fraud detection;

• payment-risk analysis;

• website security;

• order-risk analysis;

• product recommendations;

• analytics;

• advertising; and

• personalization.

HYZL does not intend to use automated decision-making to make decisions producing legal or similarly significant effects concerning consumers unless appropriate disclosures and rights are provided as required by applicable law.

21. THIRD-PARTY WEBSITES AND SERVICES

The Services may contain links or integrations involving third-party websites or services, including:

• Shopify;

• payment providers;

• shipping carriers;

• social-media platforms;

• review providers;

• affiliate platforms;

• analytics providers; and

• advertising platforms.

HYZL does not control every privacy practice of independent third parties.

When you interact directly with a third-party service, that third party's privacy policy and terms may apply.

You should review the privacy practices of third parties before providing them with personal information.

22. SHIPPING CARRIERS AND DELIVERY PRIVACY

To fulfill an order, HYZL may provide carriers and logistics providers with information reasonably necessary to deliver the package.

Once information is provided to an independent shipping carrier, that carrier may separately process information according to its own privacy practices and legal obligations.

Carriers may independently collect or generate information relating to:

• tracking;

• delivery scans;

• delivery photographs;

• signatures;

• geographic delivery data;

• delivery preferences;

• corrected addresses; and

• communications regarding the shipment.

Privacy issues involving information independently collected or controlled by a carrier may also be governed by that carrier's privacy policy.

This section concerns privacy only. Rights and responsibilities concerning delayed, lost, stolen, damaged, misdelivered or otherwise disputed shipments are governed separately by HYZL's Shipping Policy, Terms of Service and applicable law.

23. INTERNATIONAL VISITORS

HYZL is based in the United States.

If you access the Services from another jurisdiction, personal information may be processed in or transferred to the United States and other countries where HYZL's service providers operate.

Where applicable law requires a lawful basis for processing, HYZL may rely on one or more of the following, depending on the circumstances:

• performance of a contract;

• steps requested before entering a contract;

• legitimate interests;

• compliance with legal obligations; and

• consent.

Where applicable, individuals in the European Economic Area, United Kingdom, Switzerland or other jurisdictions may have rights relating to:

• access;

• correction;

• deletion;

• restriction;

• objection;

• portability;

• withdrawal of consent; and

• lodging a complaint with an applicable supervisory authority.

These rights apply only to the extent provided by applicable law.

24. BUSINESS TRANSFERS

If HYZL or substantially all or part of its business or assets is involved in a merger, acquisition, financing, investment, restructuring, sale, bankruptcy or similar transaction, personal information may be reviewed, disclosed or transferred as part of that transaction, subject to applicable legal requirements.

25. LEGAL REQUESTS AND PROTECTION OF RIGHTS

HYZL may preserve, use or disclose information when HYZL reasonably believes doing so is necessary or appropriate to:

• comply with applicable law;

• respond to lawful legal process;

• respond to a valid government request;

• investigate fraud;

• investigate security incidents;

• enforce agreements;

• protect HYZL intellectual property;

• establish, exercise or defend legal claims;

• protect customers;

• protect HYZL;

• protect third parties; or

• prevent unlawful activity.

Nothing in this section requires HYZL to disclose information where disclosure is prohibited by law.

26. DE-IDENTIFIED AND AGGREGATED INFORMATION

Where permitted by law, HYZL may create or use aggregated, anonymized or de-identified information that cannot reasonably be linked to an identifiable individual.

HYZL may use such information for legitimate business purposes, including analytics, research, operational improvement and business planning.

Where required by applicable law, HYZL will maintain de-identified information in de-identified form and will not attempt to re-identify it except as legally permitted.

27. CHANGES TO THIS PRIVACY POLICY

HYZL may update this Privacy Policy from time to time to reflect:

• changes to our Services;

• changes to technology;

• new service providers;

• changes to our privacy practices;

• changes to applicable laws; or

• other operational or legal developments.

When this Privacy Policy is revised, HYZL will update the “Last Updated” date.

Where applicable law requires additional notice or consent for a material change, HYZL will provide that notice or request that consent.

We encourage customers to periodically review this Privacy Policy.

28. ACCESSIBILITY

HYZL intends for privacy information and privacy-request mechanisms to be reasonably accessible.

If you require this Privacy Policy or information regarding your privacy rights in an alternative format because of a disability, please contact HYZL using the contact information below.

29. NO WAIVER OF NON-WAIVABLE RIGHTS

Nothing in this Privacy Policy is intended to waive, restrict or eliminate any consumer right or remedy that cannot lawfully be waived, restricted or eliminated.

Likewise, nothing in this Privacy Policy expands HYZL's obligations beyond those imposed by applicable law except to the extent HYZL expressly undertakes a specific obligation in this Policy.

30. CONTACT HYZL

Questions, concerns or requests regarding this Privacy Policy or HYZL's privacy practices may be directed to:

HYZL
Henny Benny LLC, doing business as HYZL
California, United States

Privacy Email: [INSERT ACTIVE PRIVACY EMAIL]

Online: HYZL website Contact page

Mailing Address: [INSERT HYZL BUSINESS/PRIVACY MAILING ADDRESS]

Please include “Privacy Request” in the subject line or heading when contacting HYZL concerning a privacy-rights request.