A. J. Edgar Craft

This privacy policy for A. J. Edgar Craft, LLC ("Company"), describes how and why information might be collected, stored, used, and/or shared ("processed") when using the services ("Services") provided by the Company, such as:

• Visit the website at http://edgarcraft.com, or any website that links to this privacy policy
• Engage in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy policy will help you understand your privacy rights and choices. If you do not agree with the policies and practices mentioned here, please do not use the Services. If you still have any questions or concerns, please contact hi@edgarcraft.com.

This summary provides key points from the privacy policy, but you can find out more details about any of these topics by clicking the link following each key point or by using the table of contents below to find the section you are looking for.

What personal information is processed? When visiting, using, or navigating the Services, personal information may be processed depending on how the user interacts with the Services, the choices they make, and the products and features they use. Learn more about personal information disclosed.

Is sensitive personal information processed? Sensitive personal information is not processed.

Is information received from third parties? No information is received from third parties.

How is information processed? Information is processed to provide, improve, and administer the Services, communicate with the user, for security and fraud prevention, and to comply with law. Information may also be processed for other purposes with the user's consent. Information is processed only when a valid legal reason exists. Learn more about how information is processed.

In what situations and with which parties is personal information shared? Information may be shared in specific situations and with specific third parties. Learn more about when and with whom personal information is shared.

How is information kept safe? Organizational and technical processes and procedures are in place to protect personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so it cannot be promised or guaranteed that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat the security and improperly collect, access, steal, or modify the information. Learn more about how personal information is kept safe.

What are the user's rights? Depending on where the user is located geographically, the applicable privacy law may mean they have certain rights regarding their personal information. Learn more about privacy rights.

How do users exercise their rights? The easiest way to exercise rights is by visiting your account page, or by contacting the organization. Any request will be considered and acted upon in accordance with applicable data protection laws.

Want to learn more about what is done with any information collected? Review the privacy policy in full.

1. What Information Is Collected?
2. How Is Information Processed?
3. What Legal Bases Are Relied Upon To Process Your Personal Information?
4. When And With Whom Is Your Personal Information Shared?
5. How Long Is Your Information Kept?
6. How Is Your Information Kept Safe?
7. Is Information Collected From Minors?
8. What Are Your Privacy Rights?
9. Controls For Do-Not-Track Features
10. Do United States Residents Have Specific Privacy Rights?
11. Do Other Regions Have Specific Privacy Rights?
12. Is This Policy Updated?
13. How Can You Contact About This Policy?
14. How Can You Review, Update, Or Delete The Data Collected From You?

Personal information you disclose

In Short: Personal information is collected that is voluntarily provided by users.

Personal information is collected that you voluntarily provide when registering, expressing an interest in obtaining information about products and services, participating in activities on the service, or otherwise when contacting.

Personal Information Provided by Users. The personal information that is collected depends on the context of user interactions, the choices users make, and the products and features used. The personal information collected may include the following:

• Names
• Phone numbers
• Email addresses
• Contact or authentication data

Sensitive Information. Sensitive information is not processed.

All personal information that users provide must be true, complete, and accurate, and users must notify of any changes to such personal information.

In Short: Personal information is processed to provide, improve, and administer the Services, communicate with users, for security and fraud prevention, and to comply with law. Personal information may also be processed for other purposes with the user's consent.

Personal information is processed for a variety of reasons, depending on how users interact with the Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts. Personal information may be processed so users can create and log in to their account, as well as keep their account in working order.
• To deliver and facilitate delivery of services to the user. Personal information may be processed to provide users with the requested service.
• To respond to user inquiries/offer support to users. Personal information may be processed to respond to user inquiries and solve any potential issues users might have with the requested service.
• To send administrative information to users. Personal information may be processed to send users details about products and services, changes to terms and policies, and other similar information.
• To fulfill and manage users' orders. Personal information may be processed to fulfill and manage users' orders, payments, returns, and exchanges made through the Services.
• To save or protect an individual's vital interest. Personal information may be processed when necessary to save or protect an individual’s vital interest, such as to prevent harm.

In Short: Personal information is only processed when there is a valid legal basis to do so under applicable law, such as with your consent, to comply with laws, to provide services, to fulfill contractual obligations, to protect rights, or to fulfill legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require explanation of the valid legal bases relied upon to process personal information. The following legal bases may be relied upon to process personal information:

• Consent. Information may be processed if permission (i.e., consent) has been given to use personal information for a specific purpose. Consent can be withdrawn at any time. Learn more about withdrawing consent.
• Performance of a Contract. Personal information may be processed when necessary to fulfill contractual obligations, including providing services or at the request prior to entering into a contract.
• Legal Obligations. Information may be processed where necessary for compliance with legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend legal rights, or disclose information as evidence in litigation.
• Vital Interests. Information may be processed where necessary to protect vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

Personal information may be processed if specific permission (i.e., express consent) has been given to use personal information for a specific purpose, or in situations where permission can be inferred (i.e., implied consent). Consent can be withdrawn at any time.

In some exceptional cases, personal information may be legally permitted to be processed without consent under applicable law, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If there are reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations

In Short: Personal information may be shared in specific situations described in this section and/or with the following third parties.

Personal information may need to be shared in the following situations:

• Business Transfers. Personal information may be shared or transferred in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of a business to another company.
• Affiliates. Personal information may be shared with affiliates, in which case those affiliates will be required to honor their privacy policy. Affiliates include parent companies and any subsidiaries, joint venture partners, or other companies that are controlled or are under common control.

In Short: Your information is kept for as long as necessary to fulfill the purposes outlined in this privacy policy unless otherwise required by law.

Your personal information will only be kept for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this policy will require keeping your personal information for longer than the period of time in which you have an account with the entity.

When there is no ongoing legitimate business need to process your personal information, the entity will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then the entity will securely store your personal information and isolate it from any further processing until deletion is possible.

In Short: The aim is to protect your personal information through a system of organizational and technical security measures.

Appropriate and reasonable technical and organizational security measures have been implemented to protect the security of any personal information that is processed. However, despite the safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so it cannot be promised or guaranteed that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat the security and improperly collect, access, steal, or modify the information. Although the best will be done to protect the personal information, transmission of personal information to and from the Services is at your own risk. You should only access the Services within a secure environment.

In Short: Data is not knowingly collected from or marketed to children under 18 years of age.

Data is not knowingly solicited from or marketed to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If personal information from users less than 18 years of age has been collected, the account will be deactivated and reasonable measures will be taken to promptly delete such data from the records. If you become aware of any data that may have been collected from children under age 18, please contact hi@edgarcraft.com.

In Short: In some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by using the contact details provided in the section How Can You Contact About This Policy? below.

Your requests will be considered and acted upon in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe your personal information is being unlawfully processed, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent If your consent has been relied upon to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by using the contact details provided in the section How Can You Contact About This Policy? below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If at any time you would like to review or change the information in your account or terminate your account, you can:

• Log in to your account settings and update your user account.

Upon your request to terminate your account, your account and information will be deactivated or deleted from active databases. However, some information may be retained in files to prevent fraud, troubleshoot problems, assist with any investigations, enforce legal terms and/or comply with applicable legal requirements.

If you have questions or comments about privacy rights, you may email hi@edgarcraft.com.

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, you do not currently receive a response to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that you must follow in the future, you will be informed about that practice in a revised version of this privacy policy.

In Short: If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you are granted specific rights regarding access to your personal information.

What categories of personal information are collected?

The following categories of personal information have been collected in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name	NO
B. Personal information as defined in the California Customer Records statute	Name, contact information, education, employment, employment history, and financial information	NO
C. Protected classification characteristics under state or federal law	Gender and date of birth	NO
D. Commercial information	Transaction information, purchase history, financial details, and payment information	NO
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Browsing history, search history, online behavior, interest data, and interactions with this and other websites, applications, systems, and advertisements	NO
G. Geolocation data	Device location	NO
H. Audio, electronic, visual, thermal, olfactory, or similar information	Images and audio, video or call recordings created in connection with this business activities	NO
I. Professional or employment-related information	Business contact details in order to provide you the Services at a business level or job title, work history, and professional qualifications if you apply for a job	NO
J. Education Information	Student records and directory information	NO
K. Inferences drawn from collected personal information	Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics	NO
L. Sensitive personal Information		NO

Collected personal information will be used and retained as needed to provide the Services or for:

• Category B - As long as the user has an account

Other personal information maybe collected outside of these categories through instances where you interact in person, online, or by phone or mail in the context of:

• Receiving help through customer support channels;
• Participation in customer surveys or contests; and
• Facilitation in the delivery of the Services and to respond to your inquiries.

How is your personal information used and shared?

Learn about how your personal information is used in the section, How Is Information Processed?

Will your information be shared with anyone else?

Personal information may be disclosed with service providers pursuant to a written contract between them and the provider. For more information on how personal information is shared, please refer to the section, When And With Whom Is Your Personal Information Shared?

Personal information may be used for internal research for technological development and demonstration purposes. This is not considered to be "selling" of personal information.

In the preceding twelve (12) months, no personal information has been disclosed, sold, or shared with third parties for business or commercial purposes. Personal information belonging to website visitors, users, and other consumers will not be sold or shared in the future.

California Residents

California Civil Code Section 1798.83, also known as the "Shine The Light" law permits users who are California residents to request and obtain, once a year and free of charge, information about categories of personal information (if any) disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which personal information was shared in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact using the contact information provided below and include the email address associated with your account and a statement that you reside in California. You will be ensured that the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from all systems (e.g., backups, etc.).

CCPA Privacy Policy

This section applies only to California residents. Under the California Consumer Privacy Act (CCPA), you have the rights listed below.

The California Code of Regulations defines a "residents" as:

1. every individual who is in the State of California for other than a temporary or transitory purpose and
2. every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose

All other individuals are defined as "non-residents."

If this definition of "resident" applies to you, the Company must adhere to certain rights and obligations regarding your personal information.

Your rights with respect to your personal data

Right to request deletion of the data — Request to delete

You have the right to request the deletion of your personal information. If you request the deletion of your personal information, your request will be respected, and your personal information will be deleted, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of their right to free speech, compliance requirements resulting from a legal obligation, or any processing that may be required to protect against illegal activities.

Right to be informed — Request to know

Depending on the circumstances, you have a right to know:

• Whether personal information is being collected and used;
• The categories of personal information that are being collected;
• The purposes for which the collected personal information is being used;
• Whether personal information is being sold or shared with third parties;
• The categories of personal information that are being sold, shared, or disclosed for a business purpose;
• The categories of third parties to whom the personal information is being sold, shared, or disclosed for a business purpose;
• The business or commercial purpose for collecting, selling, or sharing personal information; and
• The specific pieces of personal information that have been collected about you.

In accordance with applicable law, there is no obligation to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

There will be no discrimination against a consumer who exercises their privacy rights.

Right to Limit Use and Disclosure of Sensitive Personal Information

Sensitive personal information of consumers is not processed.

Verification process

Upon receiving the request, the identity of the person needs to be verified to determine that it is the same person about whom the information is already present in the system. Verification efforts require the person to provide information so that it can be matched with the information provided previously. For example, depending on the type of request submitted, the person may be asked to provide certain information so that it can be matched with the information already present in the records, or the person may be contacted through a communication method (e.g., phone or email) that they have previously provided. Other verification methods may also be used as per the circumstances.

Personal information provided in the request will only be used to verify the identity or authority of the person to make the request. Additional information for the purpose of verification will be requested only if the identity cannot be verified from the information already present. In such cases, the person may be asked to provide additional information for the purpose of verifying their identity and ensuring security or fraud prevention. The additional information provided will be deleted as soon as the verification is complete.

Other privacy rights

• You have the right to object to the processing of your personal information.
• You can ask to correct your personal data if it is incorrect or no longer relevant, or request to restrict the processing of the information.
• You may designate an authorized agent to make a request under the CCPA on your behalf. The request may be denied if the authorized agent does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
• You have the right to ask to opt out from future selling or sharing of your personal information to third parties. Once an opt-out request is received, it will be acted upon as soon as feasibly possible, but no later than fifteen (15) days from the date of the request submission.

To exercise these rights, please contact by visiting your account page, by email at hi@edgarcraft.com, by calling toll-free at (888) 795-9599, or by referring to the contact details at the bottom of this document. If you have a complaint about how your data is being handled, please do not hesitate to reach out.

Colorado Residents

This section applies only to Colorado residents. Under the Colorado Privacy Act (CPA), you have the rights listed below. However, these rights are not absolute, and in certain cases, the request may be declined as permitted by law.

• Right to be informed whether or not personal data is being processed
• Right to access personal data
• Right to correct inaccuracies in personal data
• Right to request deletion of personal data
• Right to obtain a copy of the personal data previously shared
• Right to opt out of the processing of personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")

To submit a request to exercise these rights described above, please email hi@edgarcraft.com or visit your account page.

If the request is declined and an appeal is desired, please use the email provided above. Within forty-five (45) days of receipt of an appeal, a written response will be provided that includes any action taken or not taken in response to the appeal, along with a written explanation of the reasons for the decisions.

Connecticut Residents

This section applies only to Connecticut residents. Under the Connecticut Data Privacy Act (CTDPA), you have the rights listed below. However, these rights are not absolute, and in certain cases, the request may be declined as permitted by law.

• Right to be informed whether or not your personal data is being processed
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of the personal data you previously shared
• Right to opt out of the processing of personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")

To submit a request to exercise these rights described above, please email hi@edgarcraft.com or visit your account page.

If action is declined regarding your request and an appeal is desired, kindly send an email to hi@edgarcraft.com. Within sixty (60) days of receipt of an appeal, a written response will be sent to you, detailing any action that has been taken or not taken in response to the appeal, along with a written explanation of the reasons for the decisions.

Utah Residents

This section applies only to Utah residents. Under the Utah Consumer Privacy Act (UCPA), you have the rights listed below. However, these rights are not absolute, and in certain cases, the request may be declined as permitted by law.

• Right to be informed whether or not your personal data is being processed
• Right to access your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of the personal data you previously shared
• Right to opt out of the processing of your personal data if it is used for targeted advertising or the sale of personal data

To submit a request to exercise these rights described above, please email hi@edgarcraft.com or visit your account page.

Virginia Residents

Under the Virginia Consumer Data Protection Act (VCDPA):

"Consumer" means a natural person who is a resident of the Commonwealth acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.

"Personal data" means any information that is linked or reasonably linkable to an identified or identifiable natural person. "Personal data" does not include de-identified data or publicly available information.

"Sale of personal data" means the exchange of personal data for monetary consideration.

If this definition of "consumer" applies to you, certain rights and obligations regarding your personal data must be adhered to.

Your rights with respect to your personal data

• Right to be informed whether or not your personal data is being processed
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of the personal data you previously shared
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")

Exercise your rights provided under the Virginia VCDPA

You may contact by email at hi@edgarcraft.com or visit account page.

If an authorized agent is being used to exercise your rights, a request can be denied if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.

Verification process

Additional information may be requested to verify you and your consumer's request. If the request is submitted through an authorized agent, additional information may need to be collected to verify your identity before processing the request.

Upon receiving a request, a response will be given without undue delay, but in all cases, within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary. You will be informed of any such extension within the initial 45-day response period, together with the reason for the extension.

Right to appeal

If a decision is made to decline taking action regarding your request, you will be informed of the decision and reasoning behind it. If you wish to appeal the decision, please email at hi@edgarcraft.com. Within sixty (60) days of receipt of an appeal, a written explanation of the reasons for the decisions will be given. If an appeal is denied, the Attorney General can be contacted to submit a complaint.

In Short: You may have additional rights based on the country you reside in.

Australia and New Zealand

The personal information you provide is collected and processed under the obligations and conditions set by Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020 (Privacy Act).

This privacy policy satisfies the policy requirements defined in both Privacy Acts, in particular: what personal information is collected from you, from which sources, for which purposes, and other recipients of your personal information.

If you choose not to provide the personal information necessary to fulfill their applicable purpose, it may affect the ability to provide services, in particular:

• Offer you the products or services that you want
• Respond to or help with your requests
• Manage your account with them
• Confirm your identity and protect your account

At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting them by using the contact details provided in the section How Can You Review, Update, Or Delete The Data Collected From You?

If you believe your personal information is being unlawfully processed, you have the right to submit a complaint about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner and a breach of New Zealand's Privacy Principles to the Office of New Zealand Privacy Commissioner.

Republic of South Africa

At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting the contact details provided in the section How Can You Review, Update, Or Delete The Data Collected From You?

If you are unsatisfied with the manner in which any complaint regarding the processing of personal information is addressed, you can contact the office of the regulator, the details of which are:

The Information Regulator (South Africa) General enquiries: enquiries@inforegulator.org.za Complaints (complete POPIA/PAIA form 5): PAIAComplaints@inforegulator.org.za & POPIAComplaints@inforegulator.org.za

In Short: Yes, this policy will be updated as necessary to stay compliant with relevant laws.

This privacy policy may be updated periodically to ensure compliance with relevant laws. Any updates will be indicated by an updated "Revised" date and will be effective immediately upon being accessible. In case of any significant changes, you may be notified either through a prominently posted policy or a direct notification. It is recommended that you review this privacy policy frequently to stay informed about how your information is being protected.

If you have questions or comments about this policy, you may email hi@edgarcraft.com

You have the right to request access to the personal information collected from you, change that information, or delete it. To request to review, update, or delete your personal information, please visit your account page.