Privacy policy

Last Updated: April 8, 2026

1. INTRODUCTION

Mint & Lily, a brand owned and operated by Fanrock, Inc. ("Mint & Lily," "Company," "we," "us," "our"), respects your privacy and is committed to protecting it through our compliance with this Privacy Policy ("Policy"). This Policy describes the types of information we may collect from you or that you may provide when you visit the website mintandlily.com (the "Site"), place an order, or otherwise interact with us, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

Please read this Policy carefully to understand our policies and practices regarding your information. If you do not agree with our policies and practices, your choice is to not use the Site. By accessing or using the Site, you agree to this Privacy Policy.

This Policy should be read together with our Terms of Service, which are available on the Site and incorporated herein by reference.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

When you interact with us, you may voluntarily provide:

Account and Order Information: Name, email address, mailing address, shipping address, billing address, phone number, and payment information (credit/debit card number, expiration date, CVV) when you create an account or place an order.

Personalization Data: Names, dates, initials, messages, or other text you provide for personalized products.

Communications: Message content when you contact customer support via email, chat, phone, or social media, including any information you choose to provide in those communications.

Reviews and User Content: Product reviews, ratings, photos, or other content you submit to the Site.

2.2 Information Collected Automatically

When you access the Site, we may automatically collect certain information about your device and your visit, including:

Device and Browser Information: IP address (which may be used to derive approximate geographic location), browser type and version, operating system and platform, device type (desktop, mobile, tablet), screen resolution and display settings, and language preferences.

Usage Information: Pages visited and time spent on each page, date and time of access, referring URL (the website you came from), click-through data and navigation patterns, products viewed, search queries, page response times, and download errors.

Transaction Information: Purchase history, order details, and shopping cart activity.

2.3 Information from Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to collect information about your browsing and purchasing behavior. See Section 3 for full details.

2.4 Information from Third-Party Sources

We may receive information about you from third-party sources, including:

Payment Processors: Transaction confirmation and fraud detection data from payment processors (e.g., Shopify Payments, PayPal).

Advertising Partners: Conversion and audience data from advertising platforms when you interact with our ads on third-party platforms.

Identity Resolution Services: We use third-party identity resolution technology provided by Retention.com that may match device identifiers, browser information, and IP addresses against third-party consumer databases to obtain contact information (including email addresses) for visitors to our Site, even if you do not create an account or otherwise voluntarily provide your contact information. See Section 3.5 for full details and opt-out instructions.

3. COOKIES AND TRACKING TECHNOLOGIES

3.1 Types of Technologies Used

We use the following categories of cookies and tracking technologies on the Site:

Strictly Necessary Cookies: Essential for the Site to function properly, including cart functionality, checkout processing, and fraud prevention. These cannot be disabled without impairing Site functionality. These cookies are session-based and expire when you close your browser, or persist for up to twelve (12) months for preferences like language and currency.

Analytics Cookies: We use Google Analytics (and similar analytics services) to collect information about how visitors use the Site. This helps us improve the Site's performance and user experience. Analytics data may include pages visited, session duration, bounce rate, products viewed, and general geographic region. Analytics cookies persist for up to twenty-four (24) months.

Advertising Cookies and Pixels: We use tracking pixels and cookies from advertising partners — including Meta (Facebook/Instagram), Google Ads, and AppLovin — to measure advertising effectiveness, enable retargeting, and create custom and "lookalike" audiences for advertising purposes. Information shared with these partners may include hashed email addresses, device identifiers, cookie data, and browsing behavior on our Site. Advertising cookies may persist for up to thirteen (13) months.

3.2 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies to help us analyze how visitors use the Site. The information generated by the cookie about your use of the Site is generally transmitted to and stored on Google's servers in the United States.

Google Analytics Opt-Out: You may prevent the collection and use of data generated by Google Analytics cookies by downloading and installing the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout

For more information about Google's privacy practices, visit: https://policies.google.com/privacy

3.3 Advertising Pixels

We use pixels and tracking technologies provided by Meta Platforms, Inc., Google LLC, and AppLovin Corporation to:

(a) Track conversions from our advertising campaigns;

(b) Create custom audiences of people who have visited our Site or taken specific actions;

(d) Measure the effectiveness of our advertising; and

(e) Deliver targeted advertising to you on third-party platforms.

Our sharing of information with these advertising partners may constitute a "sale" or "share" of personal information under certain state privacy laws, including the California Consumer Privacy Act (CCPA). You may opt out of this sharing as described in Section 8, or by clicking the "Do Not Sell or Share My Personal Information" link on our Site.

3.4 Managing Cookies

Most web browsers allow you to control cookies through their settings. You may set your browser to refuse all or some browser cookies or to alert you when cookies are being sent. You may also decline non-essential cookies through our cookie consent banner. If you disable or refuse cookies, some parts of the Site may become inaccessible or not function properly (e.g., the shopping cart may not work).

3.5 Identity Resolution Technology

We use third-party identity resolution technology provided by Retention.com. This technology may identify visitors to our Site by matching device identifiers, browser characteristics, and IP addresses against third-party consumer databases. Through this process, Retention.com may obtain contact information — including your email address — even if you do not create an account, log in, or otherwise voluntarily provide your information to us.

How it works: When you visit our Site, Retention.com's technology collects device-level identifiers and attempts to match them against its consumer database. If a match is found, Retention.com provides us with your contact information, which we may use for marketing communications (including email marketing) subject to applicable law.

Your consent: Identity resolution technology activates only after you have been presented with our cookie consent banner and have affirmatively consented to non-essential cookies. If you do not affirmatively consent to non-essential cookies, identity resolution technology will not be used for your visit. You may withdraw your consent at any time using the opt-out mechanisms described below.

CCPA/CPRA disclosure: Our use of Retention.com's identity resolution technology may constitute a "sale" or "sharing" of personal information as defined under the California Consumer Privacy Act. You have the right to opt out of this sale or sharing.

Opt-out: You may opt out of Retention.com's identity resolution by: (a) visiting Retention.com's opt-out page at https://retention.com/opt-out; (b) declining non-essential cookies via our cookie consent banner; (c) clicking the "Do Not Sell or Share My Personal Information" link on our Site; (d) enabling Global Privacy Control (GPC) in your browser; or (e) contacting us at support@mintandlily.com with the subject line "Identity Resolution Opt-Out." Processing opt-out requests may take up to ten (10) business days.

3.6 Do Not Track and Global Privacy Control Signals

Some browsers include a "Do Not Track" ("DNT") feature that signals to websites that you do not want your online activity tracked. Because there is no uniform standard for interpreting DNT signals, the Site does not currently respond to DNT browser signals or headers.

Global Privacy Control (GPC): We recognize and honor Global Privacy Control (GPC) signals as a valid opt-out request under the California Consumer Privacy Act (CCPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), and other applicable state privacy laws, in accordance with the requirements of 11 CCR § 7025. When we detect a GPC signal from your browser, we will treat it as a request to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising, and we will disable non-essential advertising cookies, advertising pixels, and identity resolution technology for your session. You can learn more about GPC at https://globalprivacycontrol.org.

3.7 Technologies We Do NOT Use

For the avoidance of doubt, the Site does not employ session replay or screen recording technology that captures video-like recordings of your screen. We do not record your individual keystrokes. Our analytics tools collect clickstream and behavioral data as described above, but do not produce visual recordings of your browsing sessions. We do not use browser fingerprinting or device fingerprinting techniques for tracking purposes.

AI image tools. Mint & Lily uses artificial intelligence tools to create and enhance product images and marketing materials, as described in Section 3.6 of our Terms of Service. These AI image generation and editing tools operate on our content production systems and do not collect, process, or transmit any personal information from Site visitors. The use of AI for image creation is unrelated to the cookies, pixels, and tracking technologies described in this Section 3.

4. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

(a) Order Fulfillment: To process, fulfill, and ship your orders, and to communicate with you about your orders (including order confirmations, shipping notifications, and delivery updates);

(b) Customer Service: To respond to your inquiries, requests, and customer service communications;

(c) Site Operation and Improvement: To present the Site and its contents to you, maintain and improve the Site's functionality, personalize your experience, and ensure the Site operates securely and reliably;

(d) Analytics and Performance: To understand how visitors interact with the Site, identify usage trends, and improve the user experience;

(e) Marketing and Advertising: To send you marketing communications (including email marketing), display targeted advertising on third-party platforms, and create custom and lookalike audiences for advertising purposes, subject to your opt-out rights;

(f) Personalization: To customize product recommendations, content, and offers based on your browsing and purchasing behavior;

(g) Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities, and to protect the rights and property of Mint & Lily and others;

(h) Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests;

(i) Legal Protection: To enforce our Terms of Service, protect our operations, and protect the rights, privacy, safety, or property of Mint & Lily, our affiliates, you, or others; and

(j) Business Operations: For any other purpose with your consent or as otherwise described to you at the time of collection.

Automated Decision-Making: We do not use your personal information for automated decision-making that produces legal effects or similarly significant effects concerning you. Our use of analytics and advertising technologies involves profiling for marketing purposes (such as creating audience segments), but these activities do not result in automated decisions with legal or similarly significant consequences. You have the right to opt out of profiling for targeted advertising purposes as described in Section 8.

5. HOW WE SHARE YOUR INFORMATION

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

(a) E-Commerce Platform: Shopify, Inc. (hosting, order processing, payment facilitation);

(b) Payment Processors: For payment processing and fraud detection;

(d) Email and SMS Platforms: For transactional and marketing communications;

(e) Cloud Hosting Providers: For data storage and infrastructure;

(f) Customer Service Tools: For managing customer support inquiries; and

(g) Fraud Prevention Services: For detecting and preventing fraudulent activity.

These service providers are contractually obligated to use your information only as necessary to provide services to us and are required to maintain the confidentiality and security of your information.

5.2 Advertising and Analytics Partners

We share information with advertising and analytics partners, including Meta Platforms, Google LLC, AppLovin Corporation, and similar companies. Information shared may include hashed email addresses, device identifiers, cookie data, and browsing/purchasing behavior. This sharing may constitute a "sale" or "share" of personal information under certain state privacy laws. See Section 8 for your opt-out rights.

5.3 Identity Resolution Services

We share device-level identifiers and browsing data with Retention.com for identity resolution purposes as described in Section 3.5. This sharing may constitute a "sale" or "share" of personal information under certain state privacy laws. See Sections 3.5 and 8 for your opt-out rights.

5.4 Legal Obligations and Protection of Rights

We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation, court order, subpoena, or legal process; (b) protect and defend the rights or property of Mint & Lily; (c) prevent or investigate possible wrongdoing in connection with the Site; (d) protect the personal safety of users of the Site or the public; or (e) protect against legal liability.

5.5 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, dissolution, sale of all or a portion of our assets, or similar corporate transaction, your information may be transferred as part of that transaction. We will notify you via a prominent notice on our Site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

5.6 Aggregate and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for any purpose. Such information is not personal information.

5.7 With Your Consent

We may share your personal information for any other purpose disclosed by us when you provide the information or with your consent.

6. DATA RETENTION

We retain the information we collect for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specifically:

Order and transaction data: Retained for at least seven (7) years for tax, accounting, and legal compliance purposes.

Account data: Retained for the duration of your account and for up to three (3) years thereafter to allow for account reactivation, warranty claims, and resolution of any pending disputes.

Marketing data: Retained until you opt out or request deletion, subject to any legal retention requirements.

Analytics data: Retained in accordance with our analytics provider's standard retention periods (currently 14 months for Google Analytics).

Customer service communications: Retained for up to five (5) years for quality assurance, training, dispute resolution, and customer support purposes.

Identity resolution data: Retained for up to twelve (12) months from the date of collection unless you opt out earlier, in which case your data will be deleted within thirty (30) days of the opt-out request.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, whether we can achieve those purposes through other means, and applicable legal requirements.

When your personal information is no longer necessary for the purposes described above, we will securely delete or de-identify it in accordance with our data retention procedures.

7. DATA SECURITY

We implement commercially reasonable administrative, technical, and physical security measures designed to protect the information we collect against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), PCI DSS-compliant payment processing (handled by our payment processor), access controls, and regular security assessments.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee its absolute security. You acknowledge and accept that any transmission of information to us is at your own risk.

In the event of a data breach involving your personal information, we will notify you and applicable regulatory authorities as required by applicable law.

8. YOUR RIGHTS AND CHOICES

8.1 Access and Correction

You may request access to the personal information we hold about you or request that we correct any inaccurate information by contacting us at support@mintandlily.com.

8.2 Deletion

You may request that we delete your personal information by contacting us at support@mintandlily.com. We will comply with such requests unless we are required to retain the information by law, have a legitimate business need to do so (such as retaining transaction records for tax purposes), or the information is necessary to complete a transaction you initiated.

8.3 Opt-Out of Marketing Communications

You may opt out of marketing emails by clicking the "Unsubscribe" link in any marketing email or by contacting us at support@mintandlily.com. You may opt out of marketing SMS messages by replying "STOP" to any marketing text message. Please note that opting out of marketing communications does not affect transactional communications (such as order confirmations and shipping notifications).

8.4 Opt-Out of Sale/Sharing and Advertising

You may opt out of the "sale" or "sharing" of your personal information and targeted advertising by:

(a) Clicking the "Do Not Sell or Share My Personal Information" link on our Site;

(b) Declining non-essential cookies via our cookie consent banner;

(d) Visiting Retention.com's opt-out page at https://retention.com/opt-out;

(e) Enabling Global Privacy Control (GPC) in your browser;

(f) Adjusting your advertising preferences on Meta, Google, and AppLovin through their respective privacy settings; or

(g) Contacting us at support@mintandlily.com with the subject line "Opt-Out Request."

8.5 Cookie Management

You can control cookies through your browser settings as described in Section 3.4.

9. STATE-SPECIFIC PRIVACY RIGHTS

9.1 California Residents — CCPA/CPRA

If you are a California resident, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA"), grants you additional rights regarding your personal information.

Categories of Personal Information Collected: In the preceding twelve (12) months, we may have collected the following categories of personal information as defined by the CCPA: Identifiers (name, email address, mailing address, IP address, phone number); Commercial information (purchase history, products purchased, transaction details); Internet or other electronic network activity information (browsing history on the Site, products viewed, search queries, interactions with the Site); Geolocation data (approximate location derived from IP address); and Inferences drawn from the above categories to create a profile about you.

Categories of Personal Information Sold or Shared: We may have "sold" or "shared" (as those terms are defined under the CCPA) the following categories of personal information with advertising partners and identity resolution services: Identifiers (hashed email addresses, device identifiers); Internet or other electronic network activity information; and Commercial information (purchasing behavior). These disclosures are made for purposes of targeted advertising, retargeting, audience creation, and identity resolution.

Your CCPA Rights:

Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collecting, selling, or sharing, and the categories of third parties with whom we share personal information.
Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. You may exercise this right using the methods described in Section 8.4 or by clicking the "Do Not Sell or Share My Personal Information" link on our Site.
Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information. We collect payment information (a category of sensitive personal information under the CCPA) solely for the purpose of processing your transactions; we do not use it for other purposes.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Exercising Your Rights: To exercise your CCPA rights, you may submit a verifiable consumer request by emailing support@mintandlily.com with the subject line "CCPA Request" or by contacting us via the methods in Section 14. We will verify your identity before processing your request by matching information you provide with information we already maintain. We will respond within forty-five (45) days, with one extension of forty-five (45) days if reasonably necessary (with notice to you of the extension). You may also designate an authorized agent to make a request on your behalf; we may require the authorized agent to provide a signed, written authorization or power of attorney, and we may still verify your identity directly.

California "Shine the Light" (Civil Code §1798.83): California residents may request information regarding the disclosure of personal information to third parties for their direct marketing purposes. As described in Section 5, we share personal information with advertising partners for marketing purposes. You may opt out of this sharing using the methods described in Section 8.4. To make a Shine the Light request, contact support@mintandlily.com with the subject line "Shine the Light Request."

California Financial Information Privacy Act (SB-1): To the extent the California Financial Information Privacy Act applies to our handling of your financial data, we comply with its requirements regarding the sharing of financial information. We do not share your financial account details with third parties for their independent marketing use.

9.2 Virginia Residents — VCDPA

If you are a Virginia resident, the Virginia Consumer Data Protection Act ("VCDPA") provides you with the rights to: access your personal data; correct inaccuracies; delete your personal data; obtain a copy of your personal data in a portable format; and opt out of the processing of your personal data for purposes of targeted advertising, sale, or profiling. To exercise these rights, contact support@mintandlily.com with the subject line "VCDPA Request." If we decline your request, you may appeal by contacting us at the same address with the subject line "Privacy Rights Appeal — Virginia." If we deny your appeal, we will provide you with instructions for contacting the Virginia Attorney General.

9.3 Colorado Residents — CPA

Colorado residents have similar rights under the Colorado Privacy Act ("CPA"), including the rights to access, correct, delete, and obtain a portable copy of personal data, as well as the right to opt out of targeted advertising, sales, and profiling. To exercise these rights, contact support@mintandlily.com with the subject line "CPA Request." If we decline your request, you may appeal by contacting us at support@mintandlily.com with the subject line "Privacy Rights Appeal — Colorado." If we deny your appeal, we will provide you with instructions for contacting the Colorado Attorney General.

9.4 Connecticut Residents — CTDPA

Connecticut residents have rights under the Connecticut Data Privacy Act ("CTDPA") to access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising, sales, and profiling. To exercise these rights, contact support@mintandlily.com with the subject line "CTDPA Request." If we decline your request, you may appeal by contacting us at support@mintandlily.com with the subject line "Privacy Rights Appeal — Connecticut." If we deny your appeal, we will provide you with instructions for contacting the Connecticut Attorney General.

9.5 Oregon Residents — OCPA

Oregon residents have rights under the Oregon Consumer Privacy Act ("OCPA"), including the rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising, sales, and profiling. To exercise these rights, contact support@mintandlily.com with the subject line "OCPA Request." If we decline your request, you may appeal by contacting us at support@mintandlily.com with the subject line "Privacy Rights Appeal — Oregon."

9.6 Texas Residents — TDPSA

Texas residents have rights under the Texas Data Privacy and Security Act ("TDPSA"), including the rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising, sales, and profiling. To exercise these rights, contact support@mintandlily.com with the subject line "TDPSA Request." If we decline your request, you may appeal by contacting us at support@mintandlily.com with the subject line "Privacy Rights Appeal — Texas."

9.7 Montana Residents — MCDPA

Montana residents have rights under the Montana Consumer Data Privacy Act ("MCDPA"), including the rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising, sales, and profiling. To exercise these rights, contact support@mintandlily.com with the subject line "MCDPA Request." If we decline your request, you may appeal by contacting us at support@mintandlily.com with the subject line "Privacy Rights Appeal — Montana."

9.8 Additional State Laws

Residents of other states with comprehensive privacy laws (including but not limited to Utah, Iowa, Indiana, Tennessee, Delaware, New Hampshire, New Jersey, Nebraska, Maryland, Minnesota, and other states that enact such laws after the date of this Policy) may have similar rights. We are committed to complying with applicable state privacy laws. If you are a resident of a state with a comprehensive privacy law not specifically listed above, you may exercise your rights by contacting support@mintandlily.com with the subject line "Privacy Rights Request."

10. INTERNATIONAL USERS

The Site is operated in the United States and is primarily intended for customers in the United States. If you are located outside the United States and choose to provide information to us or place an order, please be aware that we transfer the data to the United States and process it there. Such transfers are carried out using appropriate safeguards, including Standard Contractual Clauses approved by the European Commission (where applicable) and reliance on our service providers' own data transfer mechanisms. For Google Analytics, Meta, and other advertising partners, these providers have implemented Standard Contractual Clauses or equivalent safeguards for data transfers from the EEA/UK to the United States. By using the Site, you acknowledge this transfer and the safeguards described herein.

10.1 European Economic Area (EEA), United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation ("GDPR") or equivalent legislation:

Contract Performance: Processing necessary to fulfill your orders and provide our services (e.g., processing payment, shipping products).
Legitimate Interests: Processing analytics data to improve the Site, fraud prevention, and direct marketing to existing customers (subject to your right to object).
Consent: Where you have provided consent to specific processing activities, such as non-essential cookies, advertising pixels, identity resolution, and marketing communications.
Legal Obligation: Where processing is necessary for compliance with legal obligations.

Your GDPR Rights: Subject to applicable law, you have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; data portability; object to processing (including direct marketing); not be subject to automated individual decision-making (including profiling) that produces legal or similarly significant effects; and withdraw consent at any time. To exercise these rights, contact support@mintandlily.com with the subject line "GDPR Request." You also have the right to lodge a complaint with your local data protection authority.

Data Transfer Mechanisms: Transfers of personal data from the EEA/UK to the United States are made pursuant to Standard Contractual Clauses ("SCCs") approved by the European Commission (Decision 2021/914), our service providers' own transfer mechanisms (including Google's, Meta's, and Shopify's SCCs), and, for occasional or non-repetitive transfers, reliance on Article 49 derogations (including explicit consent for the transfer and necessity for the performance of a contract).

Data Protection Contact: For questions about our data protection practices or to exercise your GDPR rights, you may contact our data protection point of contact at: legal@fanrock.com with the subject line "Data Protection Inquiry."

11. CHILDREN'S PRIVACY

The Site is not intended for children under the age of thirteen (13) (or sixteen (16) where applicable under local law, including under the GDPR). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verification of parental consent, we will delete that information promptly. If you believe we might have any information from or about a child under 13, please contact us at support@mintandlily.com.

If you are a parent or guardian and believe that your child has provided us with personal information, you may contact us to request access to, correction of, or deletion of that information.

12. LINKS TO OTHER WEBSITES

The Site may contain links to other websites that are not operated by us, including social media platforms, payment processors, and advertising partner sites. If you click on a third-party link, you will be directed to that third party's site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will post the updated Policy on this page with a revised "Last Updated" date. If we make material changes to how we treat your personal information — including changes to the categories of personal information collected, the purposes of processing, or the third parties with whom we share information — we will notify you through a notice on the Site's home page and/or by email (if you have provided your email address) at least thirty (30) days before the changes take effect. The date the Privacy Policy was last revised is identified at the top of the page. Your continued use of the Site after the posting of changes constitutes your acceptance of such changes.

14. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Mint & Lily (operated by Fanrock, Inc.) Email: support@mintandlily.com Legal/privacy inquiries: legal@fanrock.com Data protection inquiries (GDPR): legal@fanrock.com (subject line: "Data Protection Inquiry") Website: mintandlily.com Mailing address: 2245 Texas Drive, STE 300, Sugar Land, TX 77479

For California-specific privacy inquiries: support@mintandlily.com (subject line: "CCPA Request") For accessibility-related requests: support@mintandlily.com (subject line: "Accessibility")

By using the Site, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.