Privacy Policy

CUPPING WAREHOUSE PRIVACY POLICY

Effective Date: August 9, 2017

CSSM Reed LLC (hereinafter referred to as “CSSM Reed”, “we”, “us” or “our”) operates a website located at www.CuppingWarehouse.com which is an online store featuring instructional dvds and videos and offering products and equipment in the fields of allopathic medicine, alternative medicine, Chinese medicine, massage cupping, and myofascial decompression and products and equipment used in the fields of allopathic medicine, alternative medicine, Chinese medicine, massage cupping, and myofascial decompression. The purpose of this Privacy Policy is to inform you of our policies and procedures regarding the collection, use and disclosure of information through www.CuppingWarehouse.com (the “Site”), and any other websites, features, applications, widgets or online services that are owned or controlled by CSSM Reed and that post a link to this Privacy Policy (together with the Site, the “Service”), as well as any information we collect offline in connection with the Service. It also describes the choices available to you regarding the use of, your access to, and how to update and correct your personal information. Note that we combine the information we collect from you from the Site, through the Service generally, and offline. If you do not agree to any part of this Privacy Policy, then we cannot provide the Site or Service to you, and you should not proceed with accessing the Service.

By accessing or using the Service, you consent to the information collection, disclosure and use practices described in this Privacy Policy. Please note that certain features or services referenced in this Privacy Policy may not be offered on the Service at all times. Please also review our Terms of Service, which governs your use of the Service, and which is accessible at https://www.CuppingWarehouse.com/TermsofService.

INFORMATION COLLECTION

We collect the following types of information:

1. Information You Provide to Us

Personal Information: In the course of using the Service, we may require or otherwise collect information that identifies you as a specific individual and can be used to contact or identify you (“Personal Information”). Examples of Personal Information include your name, email address, company address, billing address, and phone number.

Payment Information: If you use the Service to make payments, we do not collect payment information (such as credit card, Stripe, PayPal or other

financial account information, and billing address), but our Payment Processors (currently Stripe or PayPal) may collect such information.

Identity Verification: We or our Payment Processors may collect Personal Information, such as your date of birth, to validate your identity or as may be required by law. We or the Payment Processor may request documents to verify this information, such as a copy of your government-issued identification or photo or a billing statement.

General Audience Service: The Service is general audience and intended for users age 18 and older. We do not knowingly collect Personal Information from anyone younger than age 18. If we become aware that a child younger than 18 has provided us with Personal Information, we will use commercially reasonable efforts to delete such information from our files. If you are the parent or legal guardian of a child younger than age 18 and believe that we have collected Personal Information from your child, please contact us at: operations@cssmreedllc.com.

Non-Identifying Information/Usernames: We also may collect other information, such as zip codes, demographic data, information regarding your use of the Service, and general project-related data (“Non-Identifying Information”). We may aggregate information collected from registered and non-registered users (“Users”). We consider usernames to be Non-Identifying Information.

In some cases, we may render Personal Information (generally, email address) into a form of Non-Identifying Information referred to in this Privacy Policy as “Hashed Information.” This is typically accomplished using a mathematical process (commonly known as a hash function) to convert information into a code. The code does not identify you directly, but it may be used to connect your activity and interests.

 Combination of Personal and Non-Identifying Information: Certain Non-Identifying Information would be considered a part of your Personal Information if it were combined with other identifiers in a way that enables you to be identified (for example, combining information with your name), but the same pieces of information are considered Non-Identifying Information when they are taken alone or combined only with other non-identifying information (for example, your viewing preferences). We may combine your Personal Information with Non-Identifying Information, but we will treat the combined information as Personal Information.

2. Information Received from Third Parties

We also may receive information about you from third parties. For example, we may supplement the information we collect with outside records or third parties may provide information in connection with a co-marketing agreement or at your

request (such as if you choose to sign in with a third-party service such as Facebook). If we combine the information we receive from others with information we collect through the Service, we will treat the combined information as described in this Privacy Policy.

3. Information Collected from Users Automatically

We and our third party service providers, including analytics and third party content providers, may automatically collect certain information from you whenever you access or interact with the Service. This information may include, among other information, the browser and operating system you are using, the URL or advertisement that referred you to the Service, the search terms you entered into a search engine that led you to the Service, areas within the Service that you visited, and other information commonly shared when browsers communicate with websites. We may combine this automatically collected log information with other information we collect about you. We do this to improve services we offer you and to improve marketing, analytics, and site functionality.

The information we collect also includes the Internet Protocol (“IP”) address or other unique device identifier (“Device Identifier”) for any device (computer, mobile phone, tablet, etc.) used to access the Service. A Device Identifier is a number that is automatically assigned or connected to the device you use to access the Service, and our servers identify your device by its Device Identifier. Some mobile service providers may also provide us or our third party service providers with information regarding the physical location of the device used to access the Service.

The technology used to collect information automatically from Users may include the following:

Cookies: Like many websites, we and our marketing partners, affiliates, analytics, and service providers use “cookies” to collect information. A cookie is a small data file that we transfer to your computer’s hard disk for record-keeping purposes. We use both persistent cookies that remain on your computer or similar device (such as to save your registration ID and login password for future logins to the Service and to track your compliance with our Terms of Service) and session ID cookies, which expire at the end of your browser session (for example, to enable certain features of the Service, to better understand how Users interact with the Service and to monitor aggregate usage by Users and web traffic routing on the Service). You may be able to instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all functionality of the Service.

For further information on cookies and how they are used for the Service, please visit our Cookie Policy at www.CuppingWarehouse.com/cookies.

Web Beacons: We and our marketing partners, affiliates, analytics, and service providers may also employ software technology known as “web beacons” and/or “tracking tags” to help us keep track of what content on our Service is effective and to serve relevant advertising to you. Web beacons are small graphics with a unique identifier that may be invisible to you, and which are used to track the online activity of Internet users. Web beacons are embedded in the web pages you review or email messages you receive. Web beacons or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to our Service, to monitor how Users navigate the Service, to count how many emails that were sent were actually opened, or to count how many particular articles or links were actually viewed.

Embedded Scripts: We and our marketing partners, affiliates, analytics, and service providers may also employ software technology known as an Embedded Script. An Embedded Script is programming code that is designed to collect information about your interactions with the Service, such as the links you click on. The code is temporarily downloaded onto your computer or other device and is deactivated or deleted when you disconnect from the Service.

In addition, we and our marketing partners, affiliates, analytics, and service providers may use a variety of other technologies (such as tags) that collect similar information for security and fraud detection purposes and we may use third parties to perform these services on our behalf.

4. Community Forums

The Service may provide you the opportunity to participate and post content publicly in forums, on blogs, through interactive features and through other communication functionality (“Community Forums”). If we at any time provide Community Forums, you may choose, through such features or otherwise, to submit or post questions, comments, or other content (collectively, “User Forum Content”). Please note that certain information, such as your name and Profile may be publicly displayed on the Service along with your User Forum Content. Please note that your use of Community Forums is subject to our Terms of Service.

Note that anything you post to a Community Forum is public —others will have access to your User Forum Content and may use it or share it with third parties. If you choose to voluntarily disclose Personal Information in your User Forum Content or use Community Forums to link to your Profile, that information will be considered public information and the protections of this Privacy Policy will not apply.

To request removal of your Personal Information from our blog or community forum, contact us at operations@cssmreedllc.com. In some cases, we may not

be able to remove your Personal Information, in which case we will let you know if we are unable to do so and why.

5. Testimonials

We may display personal testimonials of satisfied Users on our Service, in addition to other endorsements. With your consent we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us at operations@cssmreedllc.com.

6. Feedback

From time to time, we may collect feedback from Users about their experience with our Service. Please note that any feedback you provide via the Service is publicly viewable via the Service. On very rare occasions, we may remove feedback pursuant to the relevant provisions of our Terms of Service, including the Terms of Use.

7. Social Networking Services

You may register to join the Service directly via the Service or by logging into your account with a third party social networking service (“SNS”) via our Service (e.g., Facebook, LinkedIn, Google+ and other third party services that let you sign in using your existing credentials with those services). If you choose to register via an SNS, or to later link your account with the Service to your account with an SNS, we will use the Personal Information you have provided to the SNS (such as your name, email address, gender and other information you make publicly available via the SNS) to create your account. Note that the information we collect from and through an SNS may depend on the privacy settings you have set with the SNS and the permissions you grant to us in connection with linking your account with the Service to your account with an SNS. Other than what we may share with the SNS as described below, the Personal Information an SNS has about you is obtained by the SNS independent of our Service, and we are not responsible for it.

The Service also may permit additional interactions between it and a third party website, service, or other content provider, such as enabling you to “like” or share content to a third party SNS. If you choose to “like” or share content, or to otherwise share information from or via our Service with a third party site or service, that information may be publicly displayed, and the third party may have access to information about you and your use of our Service (and we may have access to information about you from that third party). These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Your interactions with third parties through an SNS or similar features are governed by the respective privacy policies of those third parties.

You represent that you are entitled to use your SNS account for the purposes described herein without breach by you of any of the terms and conditions that govern the SNS, and without obligating us to pay any fees or making us subject to any usage limitations imposed by such SNS. You can disable the link between your CuppingWarehouse account and your SNS account at any time though the “Settings” section of our Service. Please note that your relationship with any SNS is governed solely by your agreement(s) with such SNS. If your SNS account terminates, then functions enabled through the link between your CuppingWarehouse account and your SNS account will terminate as well.

HOW WE RESPOND TO DO NOT TRACK SIGNALS

Please note that your browser setting may allow you to automatically transmit a “Do Not Track” signal to websites and online services you visit. There is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites and online services, DoughNation does not alter its practices when it receives a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

USE AND RETENTION OF INFORMATION

1. WE USE INFORMATION WE COLLECT:

to enable you to access and use the Site and Service and to provide and improve the Service, complete your transactions, and address your inquiries, process your registration, verify the information you provide is valid, to contact you with administrative communications and for compliance and internal business purposes;

to operate, protect, improve and optimize the Service, our business, and our users’ experience, such as to perform analytics, conduct research, personalize or otherwise customize your experience, and for advertising and marketing;

to help create and maintain a trusted and safer environment on the Site and Service, such as fraud detection and prevention, conducting investigations and risk assessments, and conducting checks against databases such as public government databases;

to send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you and to tailor content we display to you and offers we may present to you, both on the Service and elsewhere online;

to send you newsletters, marketing or promotional materials (for ourselves and on behalf of or third parties) and other information that may be of interest to you, including information about us or general promotions for partner campaigns and services. If you decide at any time that you no

longer wish to receive such communications from us, please follow the instructions in the Your Choices and Opting Out section, below;

to administer referral programs, rewards, surveys, sweepstakes, contests, or other promotional activities or events sponsored or managed by us or our business partners;

to comply with our legal obligations, resolve any disputes that we may have with any User, and enforce our agreements with third parties;

to administer and develop our business relationship with you and, if applicable, the corporation or other legal entity you represent;

to enforce and comply with the law, including to conduct an investigation, to protect our property and rights or those of a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, fraudulent, unethical or legally actionable activity (we may also use Device Identifiers to identify Users); and

for the purposes disclosed at the time you provide your information, with your consent, and as further described in this Privacy Policy.

UNLESS YOU REQUEST THAT WE DELETE CERTAIN INFORMATION (SEE CHANGING YOUR INFORMATION OR CLOSING YOUR ACCOUNT BELOW), WE RETAIN THE INFORMATION WE COLLECT FOR AT LEAST 5 YEARS AND MAY RETAIN THE INFORMATION FOR AS LONG AS NEEDED FOR OUR BUSINESS AND LEGAL PURPOSES.

2. INFORMATION SHARING AND DISCLOSURE

We may share aggregated Non-Identifying Information and we may otherwise disclose Non-Identifying Information (including, without limitation, Hashed Information) to third parties. We do not share your Personal Information with third parties for those third parties’ marketing purposes unless we first provide you with the opportunity to opt-in to or opt-out of such sharing. We may also share the information we have collected about you, including Personal Information, as disclosed at the time you provide your information, with your consent, as otherwise described in this Privacy Policy, or in the following circumstances:

Service Providers: We may employ third party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services (e.g., without limitation, maintenance services, database management, web analytics and online advertising, payment processing, fraud detection and improvement of the Site’s features) or to assist us in analyzing how our Service is used. These third parties may

have access to your Personal Information in order to perform these tasks on our behalf.

What Happens If You Agree to Receive Information From Third Parties or Request That We Share Your Information: You may be presented with an opportunity to receive information and/or marketing offers from one or more third parties. If you agree at that time to have your Personal Information shared, your Personal Information will be disclosed to that third party (or parties) and will be subject to the privacy policy and practices of that third party. We are not responsible for the privacy policies and practices of third parties, and, if you later decide that you no longer want to receive communications from a third party, you will need to contact that third party directly. You also may request, sometimes through your use of an SNS or similar interactive feature or third party application, that we share information about you with a third party and we will typically do so under those circumstances.

Legal and Investigative Purposes: We will share information with government agencies as required by law, including without limitation, in connection with reporting earnings. We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), at the request of governmental authorities or other third parties conducting an investigation, to protect our property and rights or those of a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, fraudulent, unethical or legally actionable activity. We may also use Device Identifiers to identify Users, and may do so in cooperation with third parties at our discretion.

Internal and Business Transfers: We may share information, including Personal Information, with our subsidiaries, and affiliates, primarily for business and operational purposes. We may sell, transfer or otherwise share some or all of our assets, including your Personal Information, in connection with a merger, acquisition, reorganization or sale of assets (including, in each case, as part of the due-diligence process with any potential acquiring entity) or in the event of bankruptcy. You will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your Personal Information, as well as any choices you may have regarding your Personal Information.

Sweepstakes, Contests and Promotions: We may offer sweepstakes, contests, and other promotions (any, a “Promotion”) that may require registration. By participating in a Promotion, you are agreeing to the official rules that govern that Promotion, which may contain specific

requirements of you, including, except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness or other indicia of persona in advertising or marketing associated with the Promotion. If you choose to enter a Promotion, your Personal Information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, without limitation, in connection with winner selection, prize fulfillment, and as required by law or permitted by the Promotion’s official rules, such as on a winner’s list.

3. THIRD PARTY ANALYTICS PROVIDERS, AD SERVERS AND SIMILAR THIRD PARTIES

We work with (or may in the future work with) network advertisers, ad agencies, analytics service providers and other vendors to provide us with information regarding traffic on the Service, including pages viewed and the actions taken when visiting the Service; to serve our advertisements on other web sites, within mobile apps and elsewhere online; and to provide us with information regarding the use of the Service and the effectiveness of our advertisements. Our service providers may collect certain information about your visits to and activity on the Service as well as other websites or services, they may set and access their own tracking technologies on your device (including cookies and web beacons), and may use that information to show you targeted advertisements. Some of these parties may collect Personal Information when you visit the Service or other online websites and services. We may also share certain Non-Identifying Information with these parties, including Hashed Information, in connection with the services they provide to us.

While we may use a variety of service providers to perform advertising services, some of these companies are members of the Network Advertising Initiative (“NAI”) or the Digital Advertising Alliance (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. You may want to visit http://www.networkadvertising.org/managing/opt_out.asp, which provides information regarding targeted advertising and the “opt-out” procedures of NAI members. You may also want to visit or http://www.aboutads.info/choices/, which provides information regarding targeted advertising and offers an “opt-out” by participating companies in the DAA Self-Regulatory Program. You may also opt-out by clicking here . Please note that opting out through these mechanisms does not opt you out of being served advertising, and you may continue to receive generic ads while online.

4. YOUR CHOICES AND OPTING OUT

Registered Users may update their choices regarding the types of communications you receive from us through your online account. You also may opt-out of receiving marketing emails from us by following the opt-out instructions provided in those emails. Please note that we reserve the right to send you certain communications relating to your Account or use of the Service

(for example, administrative and service announcements) via email and other means and these transactional account messages may be unaffected if you opt-out from receiving marketing communications. You may opt-out of receiving text messages by replying “STOP” to any text message received. Registered Users who access the Service by using a mobile application may, with permission, receive push notifications. Similarly, registered Users who access the Service by using certain desktop browsers may, with permission, receive push notifications. Notification preferences can be modified in the settings menu for the mobile application or the applicable browser.

5. CHANGING YOUR INFORMATION OR CLOSING YOUR ACCOUNT

Upon request we will provide you with information about whether we hold any of your Personal Information. You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information. You may access, correct, or request deletion of your personal information by making updates to that information or by contacting us through your online account. If you request to access all Personal Information you’ve submitted, we will respond to your request to access within 30 days. If you completely delete all such information, then your account may become deactivated. If your account is deactivated or you ask to close your account, you will still be able to use the Service. If you would like us to delete your account in our system, you can do so by contacting us at operations@cssmreedllc.com. We will use commercially reasonable efforts to honor your request; however, certain information will actively persist on the Service even if you close your account, including listing and rental information and messages you posted to the Service. In addition, your Personal Information may remain in our archives and information you update or delete, or information within a closed account, may persist internally or for our administrative purposes. It is not always possible to completely remove or delete information from our databases. In addition, we typically will not remove information you posted publicly through or on the Service. Bear in mind that neither you nor we can delete all copies of information that has been previously shared with others on the Service.

6. SECURITY

We take commercially reasonable steps to help protect and secure the information it collects and stores about Users. All access to the Site is encrypted using industry-standard transport layer security technology (TLS). When you enter sensitive information, we encrypt the transmission of that information using secure socket layer technology (SSL). We also use HTTP strict transport security to add an additional layer of protection for our Users. But remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. Thus, while we strive to protect your personal data, we cannot ensure and does not warrant the security of any information you transmit to us.

7. INTERNATIONAL TRANSFER OF PERSONAL INFORMATION

CSSM Reed, LLC is a United States company, and the Site and Service are intended only for persons and organizations located in the United States. If you are located outside the United States and choose to provide information to us, we transfer Personal Information to the United States for processing. The U.S. may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to the U.S., we will protect it as described in this Privacy Policy. By visiting the Service, or providing us with any information, you fully understand and unambiguously consent to this transfer, processing and storage of your information in the United States.

8. LINKS TO OTHER SITES

Our Service contains links to other websites. If you choose to click on a third party link, you will be directed to that third party’s website. The fact that we link to a website is not an endorsement, authorization or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third party websites. These other websites may place their own cookies or other files on your computer, collect data or solicit Personal Information from you. We encourage you to read the privacy policies or statements of the other websites you visit.

9. PROFILE

Unless we notify you in advance by posting a notification on the Site and/or by email, we will not share the profile you create on our Site except as stated in the Terms of Service and this Privacy Policy. While we strive to protect your profile and personal data, please remember that no method of transmission over the Internet, or any method of electronic storage, is 100% secure and that DoughNation cannot ensure and does not warrant the security of any information you transmit to us. You may change the privacy settings of your profile through your account portal.

10. PHISHING

Phishing websites imitate legitimate websites in order to obtain personal or financial information. Identity theft and the practice currently known as “phishing” are of great concern to us. For more information about phishing, visit the website of the Federal Trade Commission at http://www.consumer.ftc.gov/articles/0003-phishing. In addition, if you believe you have received an email or had a similar interaction with a third party pretending to be CuppingWarehouse, please report it at operations@cssmreedllc.com.

CHANGES TO THIS POLICY

We may update this Privacy Policy at any time and any changes will be effective upon posting such change(s) on the Site. In the event that there are material changes to the way we treat your Personal Information, we will display a notice through the Service prior to the change becoming effective. We may also notify you by email, in our discretion. However, we will use your Personal Information in a manner consistent with the Privacy Policy in effect at the time you submitted the information, unless you consent to the new or revised policy.

CONTACTING US

If you have any questions about this Privacy Policy, please contact us at operations@cssmreedllc.com or by mail addressed to CSSM Reed LLC, 122 Seascape Blvd., Unit 1001, Miramar Beach, FL 32550.