Privacy Policy for H2ALL, INC.

1. Introduction

H2ALL, INC. ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [H2ALL.COM], use our services, including our claim portal [redeem.h2all.com/claim], and interact with us.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site or use our services.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Site, through our claim portal, and through our services includes:

Personal Data:

• Contact Information: First name, last name, and email address.
• Account Information: When you interact with our services, including our claim portal.
• Purchase Information: Details related to your bottled water purchases.

Derivative Data:

• Information our servers automatically collect when you access the Site or claim portal, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site.

Financial Data:

• Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you make purchases. We store only very limited, if any, financial information that we collect. Otherwise, all financial information is stored by our payment processor, Shopify, and you are encouraged to review their privacy policy.

Data From Contests, Giveaways, and Surveys:

• Personal and other information you may provide when entering contests or giveaways and/or responding to surveys.

3. How We Use Your Information

We use personal information collected via the Site, our claim portal, and our services for a variety of business purposes, including to:

• Facilitate Account Creation and Log-In Process: Manage your account and facilitate your access to our services, including the claim portal.
• Process and Fulfill Orders: Process your bottled water purchases, manage returns, and deliver the services you request.
• Track Impact: Allow buyers of bottled water to track their individual and collective impact on funding water wells.
• Provide Personalized Services: Use purchase history to offer personalized offers, loyalty programs, and enhance your overall experience.
• Manage Promotions and Redemptions: Utilize data from the claim portal to track and manage specific redemptions, promotions, and related activities.
• Send Marketing and Promotional Communications: Send you marketing and promotional emails, newsletters, and other information about new products, services, and offers, in accordance with your communication preferences.
• Improve Our Services: Monitor and analyze usage and trends to improve the efficiency, operation, and features of H2ALL.COM, the claim portal, and our overall services.
• Administer Contests, Giveaways, and Surveys: Manage and notify participants of contests, giveaways, and gather feedback through surveys.
• Respond to User Inquiries: Effectively respond to your customer service requests and support needs.
• Request Feedback: Contact you to request feedback about your use of our Site and services.
• Enforce Our Terms and Conditions: Enforce our terms, conditions, and policies, and protect against fraudulent transactions.
• Other Business Purposes: We may use your information for other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our Site, products, services, marketing, and your experience.

4. Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

By Law or to Protect Rights:

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, or safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.

Third-Party Service Providers:

We may share your information with third parties that perform services for us or on our behalf, including payment processing (Shopify), data analysis (Google Analytics), email delivery, hosting services, customer service, and marketing assistance. These third-party service providers have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Business Transfers:

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Affiliates:

We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.

Anonymized or Aggregated Data for Market Research:

We may share anonymized and aggregated demographic information and market research data with our partners, particularly those related to our water well funding initiatives. This data does not identify you personally but helps us and our partners understand trends and impact.

Licensing Partners:

If we license our online platform to other brands, we may share aspects of our database of consumer information with these licensing partners to enable them to market and drive sales, subject to your communication preferences and this Privacy Policy. We will ensure that such partners are bound by confidentiality obligations and privacy practices consistent with this policy.

Third-Party Advertisers:

We may use third-party advertising companies to serve ads when you visit the Site. These companies may use information about your visits to our Site and other websites that are contained in web cookies and other tracking technologies in order to provide advertisements about goods and services of interest to you.

With Your Consent:

We may disclose your personal information for any other purpose with your explicit consent.

5. Tracking Technologies and Cookies

We may use cookies, web beacons, tracking pixels, and other tracking technologies on the Site and claim portal to help customize the Site and improve your experience. When you access the Site, your personal information is not collected through the use of tracking technology. Most browsers are set to accept cookies by default. You can remove or reject cookies, but be aware that such action could affect the availability and functionality of the Site. You may not decline web beacons. However, they can be rendered ineffective by declining all cookies or by modifying your web browser's settings to notify you each time a cookie is tendered, permitting you to accept or decline cookies on an individual basis.

Specifically, we use:

Cookies:

Small data files stored on your computer or mobile device when you visit our Site. They allow us to recognize your browser, remember your preferences, and track your activity, which helps us provide a better user experience.

Google Analytics:

We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Social Media Tracking:

We may use tracking technologies from social media platforms (e.g., Facebook Pixel, Instagram tracking) to help us understand the effectiveness of our advertising campaigns and to deliver more relevant advertisements to you.

6. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

Specifically, H2ALL, INC. employs the following security practices:

• SSL Certificates: Our website (H2ALL.COM) and claim portal (redeem.h2all.com/claim) utilize Secure Sockets Layer (SSL) certificates to encrypt data transmitted between your browser and our servers, ensuring secure communication.
• Secure Cloud Infrastructure: Data is stored with Microsoft Azure, a recognized cloud provider known for its robust security features and compliance certifications.
• Internal Access Controls: We implement strict internal access controls to sensitive data, ensuring that only authorized personnel have access to personal information on a need-to-know basis.
• Industry-Standard Practices: We generally follow industry-standard security practices, including those facilitated by our use of Hubspot for customer relationship management and marketing automation, which adhere to relevant data protection standards.

7. Policy for Children

Our services are not intended for individuals under the age of 13. We do not knowingly solicit information from or market to children under 13 years of age. If you become aware of any data we have collected from children under age 13, please contact us using the contact information provided below.

8. Your Privacy Rights

You have certain rights regarding the personal information we hold about you. You may, at any time, review or change the information in your account or opt-out of certain communications:

Account Information:

You can update or correct your account information by logging into your account settings.

Opting Out of Email Marketing:

You can unsubscribe from our marketing email list at any time by clicking on the "unsubscribe" link in the emails we send or by contacting us directly. Please note that we may still send you service-related emails (e.g., order confirmations, security notices) that are necessary for the administration of your account.

Access, Correction, and Deletion:

To request access to, correction of, or deletion of your personal information, please contact us using the contact information provided below. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.

9. Do Not Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: