Privacy policy

Contents

1. Introduction
2. Age Requirement
3. Information We Collect
4. How We Use Your Information
5. Data Retention
6. Cookies & Tracking
7. How We Share
8. Disclosed Categories
9. Data Security
10. Your Rights & Choices
11. Marketing Communications
12. Third-Party Links & UGC
13. International Users
14. Policy Changes
15. Contact Us

Last updated: March 25, 2026

Introduction

This Privacy Policy describes how Good Feels Hemp LLC ("Good Feels," "we," "us," or "our") collects, uses, and discloses your personal information when you visit our website, use our services, or make a purchase from getgoodfeels.com or shop.getgoodfeels.com (collectively, the "Services"). It also explains your rights regarding that information and how to exercise them.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you agree to the practices described here. If you do not agree, please do not use the Services.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, where appropriate, notify you by email or a site notice.

01 Age Requirement

Our products contain hemp-derived THC and are intended for adults who meet the minimum legal age to purchase hemp-derived THC products in their state (typically 21 years of age). The Services are not directed to individuals under 21.

We do not knowingly collect personal information from anyone under the minimum purchase age. If we discover that we have inadvertently done so, we will promptly delete it. If you are a parent or guardian and believe your child has submitted personal information to us, please contact us at hello@getgoodfeels.com.

02 Information We Collect

Information you provide directly

• Contact details: name, email address, phone number, billing and shipping address
• Account credentials: username, password, security questions
• Order information: items purchased, payment confirmation, shipping details
• Communications: messages you send through contact forms or customer support
• Reviews and user-generated content you choose to post publicly

Information collected automatically

When you visit our site, we and our service providers automatically collect:

• Device and browser information (type, operating system, browser version)
• IP address and approximate location (city/region level)
• Pages viewed, links clicked, time on site, and shopping behavior (items viewed, added to cart, or wishlisted)
• Referring URLs and exit pages

This data is collected using cookies, pixels, and similar tracking technologies. See Section 06 for details on how to manage these.

Information from third parties

We may receive information about you from:

• Shopify (e-commerce platform): order and payment processing data
• Payment processors: billing confirmation and fraud signals (we do not store full card numbers)
• Email marketing platforms (e.g., Klaviyo): email engagement data such as opens and clicks
• Review platforms (e.g., Judge.me): reviews you submit
• Affiliate and referral tracking partners
• Advertising partners: information used to serve and measure ads across platforms

03 How We Use Your Information

• To fulfill orders and provide our services: Processing payments, arranging shipping, sending order confirmations and tracking updates, managing returns and exchanges, and maintaining your account.
• To communicate with you: Responding to customer support inquiries, sending transactional emails (order updates, shipping notifications), and providing information you request.
• Marketing and advertising: Sending promotional emails and SMS messages (with your consent where required), running targeted advertising on our site and third-party platforms, and personalizing your experience. You may opt out at any time — see Section 11.
• Analytics and improvement: Understanding how customers use our site, measuring marketing effectiveness, and improving our products and services.
• Security and fraud prevention: Detecting and preventing fraudulent transactions, unauthorized access, and other illegal or harmful activity.
• Legal compliance: Meeting obligations under applicable laws, responding to legal requests, and enforcing our terms of service.

04 Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy. General guidelines by data type:

When we no longer need your information, we will securely delete or anonymize it. Where legally required, we may retain data for longer periods.

05 Cookies & Tracking Technologies

We use cookies and similar technologies (pixels, web beacons, SDKs) to keep your cart and session active, remember your preferences, analyze site traffic, and serve and measure targeted advertising.

Most browsers accept cookies by default. You can manage or disable cookies through your browser settings, though doing so may affect site functionality.

You may also opt out of advertising-related tracking through:

• Global Privacy Control (GPC): If you visit our site with a GPC signal enabled, we will treat this as a request to opt out of the sale or sharing of your personal information for that browser and device, as required by California law.
• Shopify Audiences ad opt-out: privacy.shopify.com/en
• Retention.com email ad opt-out: app.retention.com/optout
• Shopify cookie information: shopify.com/legal/cookies

06 How We Share Your Information

We do not sell your personal information to data brokers. We share personal information only in the following circumstances:

• Service providers: We share information with vendors who help us operate the Services, including Shopify, payment processors, shipping carriers, Klaviyo (email marketing), Judge.me (reviews), affiliate tracking partners, and analytics providers. These parties are contractually required to protect your information and use it only to provide services to us.
• Business and marketing partners: We may share certain data (identifiers, usage data) with advertising partners to serve targeted ads and measure effectiveness. This may constitute a "sale" or "sharing" under California law — see Section 10 for opt-out options.
• Legal requirements: We may disclose your information when required by law, court order, or government authority, or when necessary to protect the safety of any person, investigate fraud, or enforce our agreements.
• Business transfers: If Good Feels is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
• With your consent: We may share your information for any other purpose with your explicit consent.

07 Disclosed Categories (Past 12 Months)

Consistent with California law, the following categories of personal information have been disclosed to service providers, business and marketing partners, and affiliates:

• Identifiers (name, email, address, IP address)
• Commercial information (purchase history, items viewed or added to cart)
• Internet or network activity (usage data, browsing behavior on our site)

We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.

08 Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These include encryption of data in transit (TLS/HTTPS), access controls, and security monitoring.

No security system is perfect. We recommend using a strong, unique password for your account and contacting us immediately at hello@getgoodfeels.com if you suspect unauthorized access.

In the event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law, including Massachusetts data breach notification requirements under MGL Chapter 93H.

09 Your Rights & Choices

Depending on your state of residence, you may have some or all of the following rights:

To exercise your rights, email us at hello@getgoodfeels.com with the subject line "Privacy Rights Request" or "Privacy Opt-Out Request." We will respond within 45 days. If we need additional time (up to 90 days total), we will notify you within the initial 45-day window.

To verify your identity, we may ask you to confirm your email address or other account information. You may designate an authorized agent to make requests on your behalf — we will require written proof of authorization.

10 Marketing Communications

If you opt in to marketing emails or SMS, you may opt out at any time by:

• Clicking "Unsubscribe" in any marketing email
• Replying "STOP" to any marketing text message
• Emailing us at hello@getgoodfeels.com

Even after opting out of marketing, you may continue to receive transactional messages related to your orders, account, or legal notices.

11 Third-Party Links & User Content

Our site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies before providing any personal information.

If you post a product review or other content in a public area of our Services, that content may be visible to other users. We are not responsible for how others use information you choose to make public.

12 International Users

Our Services are operated in the United States. If you are accessing the Services from outside the United States, your personal information may be transferred to, stored, and processed in the US, where data protection laws may differ from those in your country.

For users in the European Economic Area (EEA) or United Kingdom, we rely on recognized transfer mechanisms — such as the European Commission's Standard Contractual Clauses — when transferring personal data outside of Europe.

13 Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or a notice on our site. We review this policy at least annually.

14 Contact Us

If you have questions, wish to exercise your privacy rights, or have a complaint, please reach out:

If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority. California residents may also contact the California Privacy Protection Agency (CPPA).