Effective Date: January 19, 2026 Online Services Inc. operates bagbarn.com. We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. By using our Site, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site. #### 1. Information We Collect We may collect the following types of information: - **Personal Information** you provide directly: - Name - Email address - Phone number - Company name or job title (if provided) - Any other information you voluntarily submit (e.g., through contact forms, newsletter sign-ups, inquiries, or purchases) - **Automatically Collected Information**: - IP address - Browser type and version - Device information - Pages visited, time spent, and referral sources - Cookies, pixels, and similar tracking technologies (for more details, see our Cookie Policy if separate, or section below) We do not intentionally collect sensitive personal information (e.g., racial/ethnic origin, health data, biometric data) unless you voluntarily provide it. #### 2. How We Use Your Information We use the information we collect for the following purposes: - To operate, maintain, and improve our Site - To respond to your inquiries, requests, or communications - To process transactions or fulfill orders (if applicable) - **To send you information about our products, services, updates, and promotions** from time to time. This may include newsletters, special offers, or marketing emails. We only send these if you have opted in (e.g., by subscribing) or where permitted by law. - To personalize your experience on the Site - To prevent fraud, enforce our terms, comply with legal obligations, or protect our rights - For analytics, research, and internal business purposes #### 3. Sharing and Disclosure of Your Information We do not sell your personal information. We have not sold, and do not sell, your personal information to third parties for monetary or other valuable consideration, as defined under applicable privacy laws such as the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We may share your information in these limited circumstances: - With service providers and vendors who help us operate the Site (e.g., email service providers like Mailchimp, hosting companies, analytics tools, payment processors). These parties are contractually required to use your information only for the services they provide to us and to protect it. - With business partners, but only with your consent or as necessary to provide a service you requested. - In connection with a merger, acquisition, sale of assets, or similar corporate transaction. - To comply with legal obligations, respond to lawful requests, protect safety, or enforce our rights. We do not share your information with third parties for their independent marketing purposes without your consent. #### 4. Marketing Communications and Opt-Out From time to time, we may send you emails about our products, services, promotions, news, or events that we believe may interest you. You can opt out of receiving these promotional emails at any time by: - Clicking the "unsubscribe" link at the bottom of any marketing email - Contacting us directly at the email address below Note: Even if you opt out of marketing emails, we may still send you transactional or service-related communications (e.g., order confirmations, password resets). #### 5. Your Privacy Rights Depending on your location, you may have rights regarding your personal information, including: - Access to the data we hold about you - Correction of inaccurate data - Deletion of your data (subject to legal exceptions) - Opt-out of certain processing (e.g., marketing) - For California residents under CCPA/CPRA: The right to know what personal information we collect/use/share, and confirmation that **we do not sell your personal information** To exercise these rights, contact us at [[email protected]]. We will respond within the timeframes required by applicable law (typically 45 days for CCPA requests). We do not discriminate against users who exercise their privacy rights. #### 6. Data Security We implement reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. However, no method of transmission or storage is 100% secure. #### 7. International Data Transfers If you are located outside the United States, your information may be transferred to and processed in the U.S. or other countries. We take steps to ensure appropriate safeguards are in place. #### 8. Children's Privacy Our Site is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such data, we will delete it. #### 9. Changes to This Privacy Policy We may update this Privacy Policy from time to time. Changes will be posted here with a revised effective date. We encourage you to review it periodically. #### 10. Contact Us If you have questions about this Privacy Policy or our data practices, contact us at: bagbarn.com 975 Industrial Dr. Madison, IN 47250 Email: [email protected] Thank you for trusting us with your information. ---