Wallflower Privacy Policy

Updated September 19, 2019

Wallflower (“Wallflower” or “We” or “Us”) has a strong commitment to providing excellent service to all of our customers (“Users”), including respecting their concerns about privacy. We understand that visitors to our website or digital applications may have questions about whether and how our website or digital application collects and uses information, and is committed to protecting your privacy. In support of this, we only use the personally identifiable information (“personal information” or “personal data”) that you provide in accordance with the terms outlined below.

This Privacy Policy (“Policy”) covers any personal information we obtain when you visit us, use our services, or access the features on the websites or digital applications that Wallflower owns or controls (today or in the future), including http://wallflower-house.com or our mobile App (together, the “Sites”). You can access the Sites in many ways, including from a computer or mobile phone, and this Policy will apply regardless of the means of access. This Policy also governs the use of personal information we obtain from you from any third party site or application where we post content or invite your feedback or participation, including (“Third Party Sites”). Wallflower cannot control the privacy policies or practices of Third Party Sites or of companies Wallflower does not own or control, and cannot control the actions of people Wallflower does not employ or manage. You should always check the privacy policies of Third Party Sites and your privacy settings.

1. Principles for Processing Personal Information

We respect your privacy and are committed to protecting your personal information in compliance with the applicable legislation. This compliance is consistent with our desire to keep you informed and to recognize and respect your privacy rights. We agree to observe the following principles when processing personal information: • Data will be processed fairly and in accordance with applicable law. • Data will be collected for specified, legitimate purposes and not processed further in ways incompatible with those purposes. • Data will be relevant to and not excessive for the purposes for which they are collected and used. For example data may be rendered anonymous if deemed reasonable, feasible and appropriate, depending on the nature of the data and the risks associated with the intended uses. • Data will be accurate and, where necessary kept up up-to-date. Reasonable steps will be taken to rectify or delete personal information that is inaccurate or incomplete. • Data will be kept only as it is necessary for the purposes for which it was collected and processed. Those purposes shall be described in this Policy. • Data will be deleted or amended following a relevant request by the concerned data subject, should such notice comply with the applicable legislation each time. • Data will be processed in accordance with the individual’s legal rights (as described in this Policy or as provided by law). • Appropriate technical, physical and organizational measures will be taken to prevent unauthorized access, unlawful processing and unauthorized or accidental loss, destruction or damage to data. In case of any such violation with respect to personal data, we will take appropriate steps to end the violation and determine liabilities in accordance with applicable law and will cooperate with the competent authorities.

2. Information We Collect

Personal Information Users may be asked for, as appropriate: • name; • email address; • mailing address; • social security or national identification number; • date of birth; • employment history; • payment card information; and • phone number. Users may, however, visit our Sites anonymously. We will collect personal identification information from Users only if they voluntarily submit such information to us. Users can always refuse to supply personal identification information, except that it may prevent them from engaging in certain activities on the Sites. Non-personal Information We may collect non-personal identification information about Users whenever they interact with our Sites. Non-personal identification information may include the browser name, the type of computer and technical information about Users means of connection to our Sites, such as the operating system and the Internet service providers utilized and other similar information. Web Browser Cookies We collect information about how you use our Sites by setting and accessing cookies on your computer. A cookie is a small piece of information sent by our Sites that is saved on your hard drive by your computer's browser. The cookie holds information our Sites may need to personalize or enhance your experience and to gather statistical data, such as which pages are visited, the Internet provider's domain name and the addresses of the sites visited immediately before coming to and immediately after leaving the Sites. The information in the cookie lets Wallflower trace "clickstream" activity (i.e., the paths taken by visitors to our Sites as they move from page to page) to enable us to better serve our customers by revealing which portions of our Sites are the most popular. We may link the anonymous visitor ID from your cookie to a user ID in our database to help us analyze web traffic and statistics. From time to time, other companies may help us with data research and analysis, but they will be prohibited from using that data for any other purpose. You may disable cookies on your browser. Please review your browser's instructions for doing so. Note that certain features of the Sites may not be available if you delete or reject cookies. Pixel Tags We may use pixel tags (also called web beacons or clear gifs) on our Sites. They can help us analyze what our customers like to do on our Sites and the effectiveness of our features and advertising. They can also help us customize your browsing experience. We may use information collected through pixel tags or tracked links in combination with your personal information. We may also combine personal information you provide to Wallflower with other personal information (such as purchase history and demographic information). If we work with other companies to help us track, collect and analyze this information, they will be prohibited from using this information for any other purpose.

3. How We Collect Information

We may collect personal information from Users in a variety of ways, including when Users: • visit our site; • create an account; • apply for a job; • make a purchase; • subscribe to the text service or similar listserve; • respond to a survey; and • fill out a form. We also collect personal information from Users in connection with other activities, services, features or resources we make available on our Sites.

4. How We Use Collected Information

Wallflower collects and uses Users’ personal information for the following purposes: • To personalize user experience; • To facilitate purchases and transactions; • To verify your eligibility for rewards; • To improve our Sites; • To improve customer service; • To share your information with third parties (see Section 7 (Sharing your personal information)); • To administer a content, promotion, survey or other Sites feature; • To send Users information they agreed to receive about topics we think will be of interest to them; • To send periodic emails or mobile/SMS messages; and • If a User decides to opt-in to our mailing list, they will receive emails that may include company news, updates, related product or service information, etc. If at any time the User would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email or User may contact us via our Sites or email us directly at info@wallflower-house.com. We may also use information in the aggregate to understand how our Users as a group use the services and resources provided on our Sites. If you apply for a job through our Sites, we may also use the information to: • assess qualifications and personal experience to determine if it meets specific job requirements; and • help us inform candidates of future openings at Wallflower.

5. How We Protect Your Information

We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and other data stored on our Sites. Sensitive and private data exchange between the Sites and its Users happens over a Secure Socket Layers (SSL) secured communication channel and is encrypted and protected with digital signatures.

6. Secure Shopping and Payment Card Information (if applicable)

We offer multiple options for processing credit card payments. Wallflower goes to great lengths to keep financial information you provide to us private and safe. We use SSL, the industry standard in transferring information to process your orders. All credit card transactions occur in a secure area of our Site, to protect you from any loss, misuse or alteration of information collected. When you have finished shopping and begin the checkout process, you will move into the secure area of our Site. Once you've entered, the page address (URL) will change from http to https, to let you know you are in a secure area. You acknowledge, however, that no transmission of data over the Internet or mobile phone devices can be guaranteed to be 100% secure, despite our efforts. We also cannot protect financial or personal information that is not under our control. Thus, while we will use every means possible to ensure the security of information you transmit to us, we cannot guarantee that such information will not be intercepted by third parties.

7. Sharing your personal information

We may share your information with third parties: • to help us operate our business and the Sites or administer activities on our behalf, such as sending out newsletters or surveys for those limited purposes provided that you have given us your permission; • to verify your eligibility for rewards or other services; • to protect payment transactions against fraud or identity theft; and • to provide you with offers and marketing that may be of interest to you.

8. Third party websites

Users may find advertising or other content on our Sites that link to the sites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these sites and are not responsible for the practices employed by websites linked to or from our Sites. In addition, these sites or services, including their content and links, may be constantly changing. These sites and services may have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to our Sites, is subject to that website’s own terms and policies.

9. Advertising

Ads appearing on our site may be delivered to Users by advertising partners, who may set cookies. These cookies allow the ad server to recognize your computer each time they send you an online advertisement to compile non personal identification information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you. This Policy does not cover the use of cookies by any advertisers.

10. Children

The Sites are not directed to children under the age of 21 and Wallflower does not intentionally collect any information from or about children under the age of 21. If you believe a child has provided us with information, contact us info@wallflower-house.com.

11. Text/SMS Messages and Email Communications

Text/SMS

If you wish to receive alerts and promotional messages from Wallflower on your mobile device, you may opt-in at the point-of-sale on the retail floor to join the Wallflower Promo Alert. You may opt-out of these individual programs at any time by replying STOP in the open message. You agree to receive a final text message confirming your opt-out. We will send you a text message confirming that you are no longer enrolled in the program and we will not send you any more text messages. We do not charge for this service; however, message and data rates may apply from your mobile carrier. By providing your consent to participate in this program, you approve any such charges from your mobile carrier. Charges for text messages may appear on your mobile phone bill or be deducted from your prepaid balance. By joining the Wallflower Promo Alert, you are also expressly consenting to our Terms of Use. Texts may be sent through an automatic telephone dialing system. You agree to notify Us of any changes to your mobile number and update your account with us to reflect this change. Your carrier may prohibit or restrict certain features and certain features may be incompatible with your carrier or mobile device. Contact your carrier with questions regarding these issues. We will never charge you for the text messages you receive. You may be charged for message and data from your mobile provider, though, so be sure to check your plan.

Email

We may periodically contact you via e-mail and provide information about Wallflower special offers and promotions that may be of interest to you. We use a third party e-mail service provider to send e-mails. This service provider is prohibited from using your e-mail address for any purpose other than to send Wallflower related e-mail. In addition, every time you receive an e-mail you will be provided the choice to opt-out of future e-mails.

12. Notice to EU Residents

This Policy is intended to provide adequate and consistent safeguards for the handling of personal information in accordance with Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“the Directive”) and all the relevant transposing legislation of the Directive in the European Union/European Economic Area, the Swiss Federal Data Protection Act, as such laws may from time to time be amended and valid during the application of this Policy, the Privacy Shield, and any other privacy laws, regulations and principles concerning the collection, storage, use, transfer and other processing of personal data transferred from the European Economic Area or Switzerland to the United States including but not limited to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“the General Data Protection Regulation”) as of its entry into force on 25 May 2018.

13. Your Rights

You have the right to be provided with information as to the nature of the personal information stored or processed about you by Wallflower and may request deletion or amendments. You may email info@wallflower-house.com to review, update, and revise your personal information. If access is denied, you have the right to be informed about the reasons for denial. You may resort to the dispute resolution described in this Policy as well as in any competent regulatory body or authority. Wallflower shall handle in a transparent and timely manner any type of internal dispute resolution procedure about personal information. If any information is inaccurate or incomplete, you may request that the data be amended. It is your responsibility to provide use with accurate personal information about yourself and to inform us of any changes. (e.g. new home address or change of name). If you demonstrate that the purpose for which the data is being processed in no longer legal or appropriate, the data will be deleted, unless the applicable law requires otherwise. You also have the right to request the deletion of your personal data for any reason by emailing. info@wallflower-house.com

14. Additional Enforcement Rights and Mechanisms

If at any time, you believe that your personal information has been processed in violation of this Policy, you may report the concern to the competent Wallflower official. In particular, if you have any inquires or complaints about the use or limitation of use of your personal information, you may contact our corporate headquarters:

Wallflower 6540 Blue Diamond Rd, Las Vegas, NV 89139, USA

or email us at info@wallflower-house.com

15. California Privacy Rights

If you are a California resident, you have the right to request information from us regarding the manner in which Wallflower shares certain categories of personal information with third parties for their direct marketing purposes, in addition to the rights set forth above. Under California law, you have the right to send us a request at the designated address listed below to receive the following information: 1. The categories of information we disclosed to third parties for their direct marketing purposes during the preceding calendar year; 2. the names and addresses of the third parties that received the information; and 3. if the nature of the third party's business cannot be determined from their name, examples of the products or services marketed. This information may be provided in a standardized format that is not specific to you. The designated email address for these requests is: info@wallflower-house.com Also, please note that we have not yet developed a response to browser “Do Not Track” signals, and do not change any of our data collection practices when we receive such signals. We will continue to evaluate potential responses to “Do Not Track” signals in light of industry developments or legal changes.

16. Obligations to Data Protection Authorities (“DPAs”)

We will respond diligently and appropriately to requests from DPAs about this Policy or compliance with applicable data protection privacy laws and regulations. We will, upon request, provide DPAs with names and contact details of the individuals designated to handle this process. With regard to transfers of personal information, we will (i) cooperate with inquiries from the DPA responsible for the entity exporting the data and (ii) respect its decisions, consistent with applicable law and due process rights. With regard to transfers of data to third parties, we will comply with DPAs’ decisions relating to it and cooperate with all DPAs in accordance with applicable legislation.

17. Your Consent and Updates to this Policy

You acknowledge that this Policy is part of the Terms of Use for your use of the Sites, and you agree that using the Sites signifies your assent to Wallflower’s Policy. Wallflower reserves the right to change this Policy at any time. If we decide to change our Policy, we will post those changes on this page so that you are always aware of what information we collect, how we use it and under what circumstances we disclose it. As we may make changes from time to time without notifying you, we suggest that you periodically consult this Policy. Your continued use of the Sites after the effective date of any modification to the Policy will be deemed to be your agreement to the changed terms.

If you have any questions about your privacy or security on our Sites, please contact us using the following information:

Wallflower 6540 Blue Diamond Rd, Las Vegas, NV 89139, USA

or email us at info@wallflower-house.com

Store

Jelly Donut Infused Preroll (1G)

Tropicana Cookies Infused Preroll (1G)

Split Tongue Preroll (1G)

Northern Lights Infused Preroll (1G)

Pineapple Runtz Infused Preroll (1G)

Baja Blast Infused Preroll (1G)

Sin City Confidential Infused Preroll (1G)

Jelly Donut (1G)

Ice Cream Sandwich Infused Preroll (1G)

Sticky Fingers Preroll (1G)

Maui Wowie (1G)

Bear Claw

GMO Cookies Preroll (1G)

Baja Blast (1G)

Pineapple Runtz (1G)

Fruity Pebbles OG (1G)

Trainwreck

Blue Cookies Infused Preroll (1G)

Sin City Confidential (1G)

Pineapple Runtz Disposable (1G)

Smacks Preroll (1G)

Gelato #41

Blueberry Muffin Disposable (1G)

Fruity Pebbles OG Disposable (1G)

Baja Blast Disposable (1G)