PRIVACY POLICY

Last Updated: January 5, 2026

This Privacy Policy describes the practices of Jo's Hauz of Ltd. (“Operator,” “we,” “our,” and “us”) with respect to the Personal Information we collect from or about you when you visit the online storefront Shop.thereselee.com (the “Site”) operated by us on behalf of Therese Lee, JS Media, LLC (“Creator”).

The Site’s e-commerce and hosting technology are provided by Fourthwall, Inc. (“Platform Provider”). While the Operator manages the website and customer data, the Platform Provider acts as a data processor to facilitate secure transactions and hosting.

1. INFORMATION WE COLLECT

We collect information to fulfill your orders, prevent fraud, provide access to exclusive content, and improve your experience.

A. Personal Information You Provide:

• Account Information: Name, email address, password (stored in encrypted format), and content access history (e.g., merchandise items purchased).

• Purchase Information: Name, shipping address, billing address, phone number, and payment details. (Note: We do not store full credit card numbers; these are processed directly by secure third-party vendors like Stripe or PayPal).

• Checkout Notes & Tips: If you voluntarily leave a "Tip" or a "Personal Note" for the Creator during checkout, we collect the content of that message and associate it with your transaction identity.

• Fan Club & Newsletter: If you subscribe to the Creator's updates or Fan Club, we collect your email and communication preferences.

• Communications: Content of messages you send to our support team.

B. Information Collected Automatically:

• Log Data: IP address, browser type, time zone, and date/time of access.

• Media Interaction: Data regarding which videos or digital content you view and for how long.

• Device Information: Device type (mobile/desktop), operating system, and unique identifiers (e.g., IDFA or Android ID).

• Cookies & Analytics: We use cookies, pixel tags, and similar technologies to track how you interact with the Site. This helps us recall your cart items and analyze traffic.

C. Information from Third Parties: We may receive information about you from third parties, such as payment processors (for fraud protection) or the Creator (if you opted into a mailing list at a live event).

2. HOW WE USE PERSONAL INFORMATION

We use your data for the following legitimate business purposes:

• Service Delivery: To process payments (including tips), ship products, and provide access to digital content.

• Customer Support: To resolve issues with orders, returns, or technical access.

• Fraud Prevention: To protect the safety and integrity of the Operator, the Creator, and the Platform.

• Marketing (with Consent): To send you emails about new music releases, merch drops, or updates from the Creator.

• Compliance: To satisfy legal obligations (e.g., tax laws, subpoenas).

3. DISCLOSURE OF PERSONAL INFORMATION

We do not sell your personal data. We disclose Personal Information only in the following circumstances:

• The Creator: We share your contact information, purchase history, and the content of your Checkout Notes/Tips with Therese Lee, JS Media, LLC so they can receive your messages, understand their audience, and (if you opted in) send marketing communications.

• Platform Provider: We share data with Fourthwall, Inc., which acts as a Data Processor providing the hosting, security, and checkout infrastructure.

• Service Providers: We share necessary data with vendors who perform services on our behalf, including Payment Processors (Stripe/PayPal), Fulfillment Centers, and Shipping Carriers.

• Legal Compliance: We may disclose information if required by law enforcement or to protect our legal rights.

• Business Transfers: If the Operator or Creator undergoes a merger or acquisition, customer data may be transferred as an asset.

4. COOKIES, ANALYTICS & EMBEDDED MEDIA

We use third-party analytics services (such as Google Analytics) to help us understand how you use the Site.

• Embedded Media: The Site may feature embedded videos from platforms like YouTube or Vimeo. When you play these videos, these third parties may set their own cookies on your device. We do not control these cookies.

• Opt-Out: You can opt out of Google Analytics here: [Google Analytics Opt-Out].

• Do Not Track: We do not currently respond to browser "Do Not Track" signals as there is no industry standard.

5. YOUR RIGHTS (STATE & INTERNATIONAL)

Depending on your location, you have specific rights regarding your data.

A. For Colorado Residents (CPA): Since the Operator is based in Colorado, you have the right to:

• Confirm whether we are processing your personal data.

• Access, correct, and delete your personal data.

• Obtain a portable copy of your data.

• Opt-out of targeted advertising.

B. For EEA/UK Residents: The Operator is the Data Controller. Our legal basis for processing includes Contractual Necessity (to fulfill orders), Legitimate Interests (fraud prevention/site security), and Consent (marketing).

C. For California Residents (CCPA/CPRA): This section provides the specific disclosures required by California law.

Categories of Personal Information We Collect & Share: The following chart lists the categories of personal information we have collected and disclosed for business purposes over the last 12 months:

Your California Rights:

• Right to Know/Access: You may request the specific pieces of personal information we have collected about you.

• Right to Delete: You may ask us to delete your personal information, subject to legal exceptions (e.g., tax records).

• Right to Correct: You may ask us to fix inaccurate data.

• Right to Opt-Out of "Sale/Sharing": We do not sell data for money. However, using analytics cookies (like Google) may be considered "sharing" under California law. You may opt out by blocking cookies or emailing us.

Global Privacy Control (GPC): We respond to and abide by opt-out preference signals sent through the Global Privacy Control. Any opt-out preferences you have exercised through these methods will only apply to the specific device/browser on which you made them.

How to Exercise Your Rights: To submit a request regarding any of the rights listed above, please contact the Operator directly. You do not need to call a phone number. Simply email us at: Email: support@joshauzof.com

6. SHINE THE LIGHT

Under California’s “Shine the Light” law, California residents may request certain information regarding our disclosure of your information to third parties for their direct marketing purposes. We do not disclose your information to third parties for their direct marketing purposes.

7. CHILDREN’S PRIVACY

The Site is not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately to have it removed.

8. DATA RETENTION

We retain your Order Information for our records to comply with tax and auditing laws (generally up to 7 years). Marketing and Fan Club data is retained until you unsubscribe.

9. SECURITY

We protect your personal information by using physical and electronic safeguards designed to improve the security of the personal information we maintain. However, as no electronic transmission or storage of personal information can be entirely secure, we can make no guarantees as to the security or privacy of your personal information.

10. INTERNATIONAL DATA TRANSFER

If you are visiting from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located. By using the Site, you consent to this transfer.

11. CONTACT US

For questions about this Privacy Policy or to exercise your privacy rights, please contact the Operator:

Jo's Hauz of Ltd. Email: support@joshauzof.com