Privacy policy

Contents

1. Introduction
2. Age Requirement
3. Information We Collect
4. How We Use Your Information
5. Data Retention
6. Cookies & Tracking
7. How We Share
8. Disclosed Categories
9. Data Security
10. Your Rights & Choices
11. Marketing Communications
12. Third-Party Links & UGC
13. International Users
14. Policy Changes
15. Contact Us

Last updated: September 29, 2026

Privacy update notice: Our September 16, 2026 update added information about potential data licensing for research and AI development. This September 29, 2026 update clarifies those disclosures, retention criteria, and privacy-request procedures. See the licensing and privacy-choices sections below. These updates do not waive your privacy rights or provide consent where separate consent is required.

Introduction

This Privacy Policy describes how Good Feels Hemp LLC ("Good Feels," "we," "us," or "our") collects, uses, and discloses your personal information when you visit our website, use our services, or make a purchase from getgoodfeels.com or shop.getgoodfeels.com (collectively, the "Services"). It also explains your rights regarding that information and how to exercise them.

This policy describes our practices; it is not a request for blanket consent or a waiver of your privacy rights. Publishing a policy update or continuing to use our services does not, by itself, provide consent where affirmative consent is required or authorize a new use inconsistent with promises made when information was collected.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, where appropriate, notify you by email or a site notice.

01 Age Requirement

Our products contain hemp-derived THC and are intended for adults who meet the minimum legal age to purchase hemp-derived THC products in their state (typically 21 years of age). The Services are not directed to individuals under 21.

We do not knowingly collect personal information from anyone under the minimum purchase age. If we discover that we have inadvertently done so, we will promptly delete it. If you are a parent or guardian and believe your child has submitted personal information to us, please contact us at hello@getgoodfeels.com.

02 Information We Collect

Information you provide directly

• Contact details: name, email address, phone number, billing and shipping address
• Account credentials: username, password, security questions
• Order information: items purchased, payment confirmation, shipping details
• Communications: messages you send through contact forms or customer support
• Reviews and user-generated content you choose to post publicly

Information collected automatically

When you visit our site, we and our service providers automatically collect:

• Device and browser information (type, operating system, browser version)
• IP address and approximate location (city/region level)
• Pages viewed, links clicked, time on site, and shopping behavior (items viewed, added to cart, or wishlisted)
• Referring URLs and exit pages

This data is collected using cookies, pixels, and similar tracking technologies. See Section 05 for details on how to manage these.

Information from third parties

We may receive information about you from:

• Shopify (e-commerce platform): order and payment processing data
• Payment processors: billing confirmation and fraud signals (we do not store full card numbers)
• Email marketing platforms (e.g., Klaviyo): email engagement data such as opens and clicks
• Review platforms (e.g., Judge.me): reviews you submit
• Affiliate and referral tracking partners
• Advertising partners: information used to serve and measure ads across platforms

03 How We Use Your Information

• To fulfill orders and provide our services: Processing payments, arranging shipping, sending order confirmations and tracking updates, managing returns and exchanges, and maintaining your account.
• To communicate with you: Responding to customer support inquiries, sending transactional emails (order updates, shipping notifications), and providing information you request.
• Marketing and advertising: Sending promotional emails and SMS messages (with your consent where required), running targeted advertising on our site and third-party platforms, and personalizing your experience. You may opt out at any time — see Section 10.
• Analytics and improvement: Understanding how customers use our site, measuring marketing effectiveness, and improving our products and services.
• Security and fraud prevention: Detecting and preventing fraudulent transactions, unauthorized access, and other illegal or harmful activity.
• Data licensing, research, and AI development: Supporting the purposes described in Section 06, subject to the notices, permissions, exclusions, and privacy rights described there.
• Legal compliance: Meeting obligations under applicable laws, responding to legal requests, and enforcing our terms of service.

04 Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, subject to applicable law. We determine retention periods based on the type and sensitivity of the information, the duration of your account or loyalty membership, the time needed to fulfill orders and resolve inquiries, applicable accounting and legal obligations, fraud prevention, and the need to establish, exercise, or defend legal claims.

Marketing contact information is used until you unsubscribe or it is no longer needed for permitted marketing purposes. After you opt out, we may keep limited information needed to honor your preferences and document compliance. Cookie and usage-data retention depends on the purpose of the cookie or technology and the relevant service settings. When information is no longer needed, we delete it or deidentify it in accordance with applicable law.

05 Cookies & Tracking Technologies

We use cookies and similar technologies (pixels, web beacons, SDKs) to keep your cart and session active, remember your preferences, analyze site traffic, and serve and measure targeted advertising.

Most browsers accept cookies by default. You can manage or disable cookies through your browser settings, though doing so may affect site functionality.

You may also opt out of advertising-related tracking through:

• Global Privacy Control (GPC):

  Where applicable law requires us to honor an opt-out preference signal, we treat a recognized signal such as Global Privacy Control (GPC) as a request to opt out of sale or sharing. The request applies to the browser or device sending the signal and, where required and we can associate it with you, to your known profile. You can also email hello@getgoodfeels.com with the subject line "Privacy Opt-Out Request."

• Shopify Audiences ad opt-out: privacy.shopify.com/en
• Retention.com email ad opt-out: app.retention.com/optout
• Shopify cookie information: shopify.com/legal/cookies

06 How We Share Your Information

We may disclose, license, or sell personal information in the circumstances described below:

• Service providers: We share information with vendors who help us operate the Services, including Shopify, payment processors, shipping carriers, Klaviyo (email marketing), Judge.me (reviews), affiliate tracking partners, and analytics providers. These parties are contractually required to protect your information and use it only to provide services to us.
• Business and marketing partners: We may share certain data (identifiers, usage data) with advertising partners to serve targeted ads and measure effectiveness. This may constitute a "sale" or "sharing" under California law — see Section 09 for opt-out options.
• Data licensing, research, and AI development:

  We may disclose, license, or sell contact identifiers, commercial information such as purchase and loyalty-program activity, internet or network activity, and communications collected through our services to data-licensing partners, research organizations, and companies developing artificial intelligence or machine-learning systems. These recipients may use the information for analytics, research, product development, and the development, training, testing, or improvement of those systems. We do so only as permitted by applicable law and consistent with the notices and permissions applicable when the information was collected. Before a new use or disclosure, we provide additional notice and obtain consent where required, and honor applicable opt-outs and other privacy rights.

  This licensing does not include account passwords, payment-card details, mobile phone numbers, SMS-program data, SMS opt-in data, or SMS consent. Existing restrictions on SMS-related information remain in effect.

• Legal requirements: We may disclose your information when required by law, court order, or government authority, or when necessary to protect the safety of any person, investigate fraud, or enforce our agreements.
• Business transfers: If Good Feels is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
• With your consent: We may share your information for any other purpose with your explicit consent.

We may also create and disclose aggregated or deidentified information. For information treated as deidentified under applicable law, we take reasonable measures to prevent it from being associated with an individual, maintain and use it in deidentified form without attempting to reidentify it except as permitted by law to assess our deidentification processes, and contractually require recipients to comply with applicable deidentification restrictions. Pseudonymized information may still be personal information and remains subject to applicable privacy protections; replacing names or other identifiers does not by itself make information anonymous.

07 Disclosed Categories (Past 12 Months)

Consistent with California law, the following categories of personal information have been disclosed to service providers, business and marketing partners, and affiliates:

• Identifiers (name, email, address, IP address)
• Commercial information (purchase history, items viewed or added to cart)
• Internet or network activity (usage data, browsing behavior on our site)

We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.

08 Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These include encryption of data in transit (TLS/HTTPS), access controls, and security monitoring.

No security system is perfect. We recommend using a strong, unique password for your account and contacting us immediately at hello@getgoodfeels.com if you suspect unauthorized access.

In the event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law, including Massachusetts data breach notification requirements under MGL Chapter 93H.

09 Your Rights & Choices

Depending on your state of residence, you may have some or all of the following rights:

To exercise your rights, email us at hello@getgoodfeels.com with the subject line "Privacy Rights Request" or "Privacy Opt-Out Request."

We respond within the deadlines required by applicable law. Where the California Consumer Privacy Act applies, we acknowledge requests to access, correct, or delete information within 10 business days and generally respond within 45 calendar days. If a permitted extension is necessary, we notify you within the initial 45-day period and explain the reason; the total response period will not exceed 90 calendar days. We process requests to opt out of sale or sharing as soon as feasibly possible and no later than 15 business days where required by that law. Other applicable laws may provide different or shorter deadlines.

We may request information reasonably necessary to verify access, correction, or deletion requests. We do not require identity verification for requests to opt out of sale or sharing. You may designate an authorized agent, subject to applicable authorization requirements. If we decline a rights request, you may appeal by replying to our response. We will handle appeals within the deadlines required by applicable law.

10 Marketing Communications

If you opt in to marketing emails or SMS, you may opt out at any time by:

• Clicking "Unsubscribe" in any marketing email
• Replying "STOP" to any marketing text message
• Emailing us at hello@getgoodfeels.com

Even after opting out of marketing, you may continue to receive transactional messages related to your orders, account, or legal notices.

11 Third-Party Links & User Content

Our site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies before providing any personal information.

If you post a product review or other content in a public area of our Services, that content may be visible to other users. We are not responsible for how others use information you choose to make public.

12 International Users

Our Services are operated in the United States. If you are accessing the Services from outside the United States, your personal information may be transferred to, stored, and processed in the US, where data protection laws may differ from those in your country.

For users in the European Economic Area (EEA) or United Kingdom, we rely on recognized transfer mechanisms — such as the European Commission's Standard Contractual Clauses — when transferring personal data outside of Europe.

13 Policy Changes

We may update this policy from time to time. We will post the revised policy with its actual revision date. For material changes, we will provide a clear notice on our website or by email, as appropriate, and obtain consent where required before introducing a new use inconsistent with prior notices or promises.

14 Contact Us

If you have questions, wish to exercise your privacy rights, or have a complaint, please reach out:

If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority. California residents may also contact the California Privacy Protection Agency (CPPA).