Privacy Policy

Date last modified: March 26, 2024

This is the privacy policy of Bastazo, Inc. and its wholly-owned subsidiaries (collectively,
“Bastazo,” “we,” “our,” or “us”). We provide security solutions that help protect the data and
systems of our business customers from continually evolving risks. This privacy policy describes
how your personal information is collected, used, and shared when you visit
https://www.bastazo.com/ (the “Website”).

Please read this policy carefully to understand our policies and practices regarding your
information and how we will treat it. If you do not agree with our policies and practices, you
have the choice not to use our Website. By accessing or using this Website, you agree to this
privacy policy. This policy may change from time to time. Your continued use of this Website
after we make changes is deemed to be acceptance of those changes, so please check the policy
periodically for updates.

PERSONAL INFORMATION WE COLLECT

When you visit the Website, we automatically collect certain information about your device,
including information about your web browser, IP address, time zone, and some of the cookies
that are installed on your device. Additionally, as you browse the Website, we may collect
information about the individual web pages or products that you view, what websites or search
terms referred you to the Website, and information about how you interact with the Website. We
refer to this automatically-collected information as “Device Information.”

The information we collect automatically may include personal information, or we may maintain
it or associate it with personal information we collect in other ways or receive from third parties.
It helps us to improve our Website and to deliver a better and more personalized service,
including by enabling us to:

· Estimate our audience size and usage patterns.
· Store information about your preferences, allowing us to customize our Website
according to your individual interests.
· Speed up your searches.
· Recognize you when you return to our Website.

We collect Device Information using the following technologies:

 “Cookies” are data files that are placed on your device or computer and often include an
anonymous unique identifier. For more information about cookies, and how to disable
cookies, visit http://www.allaboutcookies.org.

 “Log files” track actions occurring on the Website, and collect data including your IP
address, browser type, Internet service provider, referring/exit pages, and date/time
stamps.
 “Web beacons,” “tags,” and “pixels” are electronic files used to record information about
how you browse the Website.

Additionally, when you make a purchase or attempt to make a purchase through the Website, we
collect certain information from you, including your name, billing address, shipping address,
payment information (including credit card numbers), email address, and phone number. We
refer to this information as “Order Information.”

When we talk about “Personal Information” in this Privacy Policy, we are talking both about
Device Information and Order Information.

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Website are served by third-
parties, including advertisers, ad networks and servers, content providers, and application
providers. These third parties may use cookies alone or in conjunction with web beacons or other
tracking technologies to collect information about you when you use our website. The
information they collect may be associated with your personal information or they may collect
information, including personal information, about your online activities over time and across
different websites and other online services. They may use this information to provide you with
interest-based (behavioral) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they may be used. If you
have any questions about an advertisement or other targeted content, you should contact the
responsible provider directly.

We do not control third parties’ collection or use of your information to serve interest-based
advertising. However, these third parties may provide you with ways to choose not to have your
information collected or used in this way. You can opt out of receiving targeted ads from
members of the Network Advertising Initiative (“NAI”) on the NAI’s website.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use the Order Information that we collect generally to fulfill any orders placed through the
Website (including processing your payment information, arranging for shipping, and providing
you with invoices and/or order confirmations). Additionally, we use this Order Information to:

 Communicate with you;
 Screen our orders for potential risk or fraud; and
 When in line with the preferences you have shared with us, provide you with information
or advertising relating to our products or services.
 We use the Device Information that we collect to help us screen for potential risk and
fraud (in particular, your IP address), and more generally to improve and optimize our

Website (for example, by generating analytics about how our customers browse and
interact with the Website, and to assess the success of our marketing and advertising
campaigns).

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information,
as described above. For example, we use Wix to power our online store and provide analytics
data to help us understand how our customers use the Website – you can read more about how
Wix uses your Personal Information at https://www.wix.com/about/privacy.

We may disclose Personal Information that we collect or you provide as described in this Privacy
Policy:

· To our subsidiaries and affiliates.
· To contractors, service providers, and other third parties we use to support our business.
· To a buyer or other successor in the event of a merger, divestiture, restructuring,
reorganization, dissolution, or other sale or transfer of some or all of our assets, whether
as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which
personal information held by us about our Website users is among the assets transferred.
· To fulfill the purpose for which you provide it.
· For any other purpose disclosed by us when you provide the information.
· With your consent.
We may also disclose your Personal Information:
· To comply with any court order, law, or legal process, including to respond to any
government or regulatory request.
· To enforce or apply our terms of use, and other agreements, including for billing and
collection purposes.
· If we believe disclosure is necessary or appropriate to protect the rights, property, or
safety of our customers, or others. This includes exchanging information with other
companies and organizations for the purposes of fraud protection and credit risk
reduction.

Cookies and Similar Technologies

Our Website may use cookies, web beacons, pixel tags, and similar digital tracking technologies.
Cookies are small data files that are transferred to your hard drive when you visit a website if
your browser settings permit the acceptance of cookies. Cookies may enable us to recognize your
computer, store your preferences and settings, enhance your user experience by delivering
content specific to your interests, perform searches and analytics, and assist with security
administrative functions. We may also use automated technologies to collect and analyze other
non-personal information related to the devices you use to access the Websites, such as IP
addresses, browser types, browser language, unique device identifiers, and other information
about your computer(s) and/or mobile device(s). Some tracking technologies may track your
activities not only on our Websites, but on third party websites you visit after you leave our

Websites, and some services may aggregate this information collected from many websites into a
single profile.

Our Website may use Wix or similar tools or services to collect information about the
performance and use of our Website. Our analytics services may collect information such as how
often users visit our Website, what pages they visit when they do so, and what other websites
they used prior to coming to our Website. We use the information we get from Wix and other
providers to improve our Website. Although Wix places persistent cookies on your computer to
identify how users arrived at a website and the number of times they return, the cookies are not
intended for use by anyone but Wix to provide analytics to us. Wix’s ability to use and share
information collected by Wix about your visits to the Website is restricted by Wix’s policies. You
may be able to prevent Wix from recognizing you on return visits to the Websites by disabling
cookies on your browser. To learn more about, or to opt-out of Wix’s analytic and marketing
services, visit Wix Terms of Use at https://www.wix.com/about/terms-of-use, the Wix Privacy
Policy at https://www.wix.com/about/privacy.

Additionally, our Website uses cookies for retargeting online advertisements.

SMS/MMS MOBILE MESSAGING MARKETING PROGRAM

We may use your telephone number for the purpose of sending you SMS messaging related to
marketing messages, order and shipping confirmations, and other order updates if you have
opted in to receive such messaging. You may opt-out from receiving SMS messaging from us, at
any time, by responding STOP to any of our messages. Messaging will be sent by an automated
system initiated by our third-party messaging provider. We do not share your telephone number
with third parties for the purposes of receiving third party marketing messages. We also will not
send messages to you promoting the goods or services of third parties. For additional information
regarding our SMS messaging program, please read our Terms of Service or by responding
HELP to any of our messages, or by emailing our Customer Service team at support@bastazo.com.
DO NOT TRACK

Please note that we do not alter our Website’s data collection and use practices when we see a Do
Not Track signal from your browser.

YOUR RIGHTS

If you are a European resident, you have the right to access personal information we hold about
you and to ask that your personal information be corrected, updated, or deleted. If you would like
to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident, we note that we are processing your information in
order to fulfill contracts we might have with you (for example if you make an order through the
Website), or otherwise to pursue our legitimate business interests listed above. Additionally,
please note that your information will be transferred outside of Europe, including to Canada and
the United States.

DATA RETENTION

When you place an order through the Website, we will maintain your Order Information for our
records unless and until you ask us to delete this information.

DATA SECURITY

We have implemented measures designed to secure your personal information from accidental
loss and from unauthorized access, use, alteration, and disclosure. All information you provide to
us is stored on our secure servers. Any payment transactions will be encrypted.

The safety and security of your information also depends on you. Where we have given you (or
where you have chosen) a password for access to certain parts of our Website, you are
responsible for keeping this password confidential. We ask you not to share your password with
anyone. We urge you to be careful about giving out information in public areas of the Website
like message boards. The information you share in public areas may be viewed by any user of the
Website.

Unfortunately, the transmission of information via the internet is not completely secure.
Although we do our best to protect your personal information, we cannot guarantee the security
of your personal information transmitted to our Website. Any transmission of personal
information is at your own risk. We are not responsible for circumvention of any privacy settings
or security measures contained on the Website.

MINORS

Our Website is not intended for children under 16 years of age. No one under age 16 may
provide any personal information to or on the Website. We do not knowingly collect personal
information from children under 16. If you are under 16, do not use or provide any information
on this Website or through any of its features, register on the Website, make any purchases
through the Website, or provide any information about yourself to us, including your name,
address, telephone number, or email address. If we learn we have collected or received personal
information from a child under 16 without verification of parental consent, we will delete that
information. If you believe we might have any information from or about a child under 16,
please contact us at support@bastazo.com.

California residents under 16 years of age may have additional rights regarding the collection
and sale of their personal information. Please see Your California Privacy Rights for more
information.

YOUR CALIFORNIA PRIVACY RIGHTS

The California Consumer Privacy Act (CCPA) took effect on January 1, 2020, and is intended to
protect the data of California residents. If you are a resident of California, you have certain rights
with respect to your data. We respond to all requests that we receive from individuals who wish

to exercise their data protection rights in accordance with applicable data protection laws. You
can contact us by sending an email to support@bastazo.com.

Rights that you may have, include:

 Requesting deletion of your information.
 If you request that your account be deleted, you will lose access to all of our programs in
which you are actively registered.
 Opting out from the sale of your information to third parties.
 Requesting disclosure of the personal information we have collected about you and the
types of third parties with whom it has been shared.
 Requesting the portability of your information.
 Opting out from receiving marketing communications that we send you at any time. You
can exercise this right by selecting the “unsubscribe” or “opt-out” link in the marketing
emails we send you. Additionally, you may update your email preferences by changing
the settings in your account.
 Requesting that we not sell your information, by clicking on the corresponding link on
our website.

Every effort will be made to respond to a verified request within a reasonable time, or the time-
frame required by law.

This Privacy Policy is strictly limited to the Website and has no effect on any other privacy
policy(ies) that may govern the relationship between you and us in other contexts.
This Privacy Policy does not apply to Personal Information collected by us offline or through
any other means, including on any other website operated by us or any third party (including our
affiliates and subsidiaries); or any third party (including our affiliates and subsidiaries), including
through any application or content (including advertising) that may link to or be accessible from
the Website.

CHANGES TO OUR PRIVACY POLICY

We may update this privacy policy from time to time in order to reflect, for example, changes to
our practices or for other operational, legal or regulatory reasons. It is our policy to post any
changes we make to our privacy policy on this page. If we make material changes to how we
treat our users’ personal information, we will notify you by email to the email address specified
in your account or through a notice on the Website home page. The date the privacy policy was
last revised is identified at the top of the page. You are responsible for ensuring we have an up-
to-date active and deliverable email address for you, and for periodically visiting our Website
and this privacy policy to check for any changes.

For more information about our privacy practices, if you have questions, or if you would like to
make a complaint, please contact us by e-mail at support@bastazo.com.