California Supplemental Privacy Policy

LAST UPDATED: April 29, 2026

This Supplemental California Privacy Policy (“California Policy”) supplements the So Good So You Privacy Policy and provides additional information in accordance with the California Consumer Privacy Act (“CCPA”) about So Good So You’s processing of Personal Information about residents of California (collectively “Consumers,” “you,” “your”) who use our Services.

Please note that this California Policy does not apply to information we collect about employees, independent contractors, job applicants, or business contacts. For disclosures applicable to California residents who interact with us in those contexts, please see our CCPA Employee Privacy Policy, CCPA Applicant Privacy Policy, or CCPA Business Contacts Privacy Policy, as applicable. 

I. DEFINITIONS 

• “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or household. It does not include deidentified or aggregate information, public information lawfully available from governmental records, or other information that falls outside of the scope of the CCPA.
• “Vendor” means a service provider, vendor, contractor, or processor which collects, stores, or otherwise handles personal information for us and is bound by certain contractual obligations consistent with applicable laws.
• “Third Party” means a person or organization which is not a Consumer, Vendor, or an entity owned or controlled by us.

II. PERSONAL INFORMATION WE COLLECT

We collect and have collected in the past 12 months the following categories of Personal Information about Consumers:

(1)   Identifiers, such as name, alias, postal address, unique personal identifier, online identifiers, Internet Protocol address, email address, account name, signatures, physical characteristics or description, photographs, telephone number, or other similar identifiers.

(2)   Internet or Other Network Information, such as browsing history, search history, information regarding your interactions with our websites or advertisements.

(3)   Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

III. PURPOSES FOR COLLECTING, PROCESSING, & DISCLOSING PERSONAL INFORMATION

We collect, process, and disclose, and we have collected, processed, and disclosed in the past 12 months, the categories of Personal Information listed in Section II of this California Policy for the following purposes:

• to provide our Services, including to provide the products and services you request;
• to provide you with effective customer service;
• to provide you with a personalized experience when you use our Services;
• to send you transactional and administrative messages related to our products;
• to send you marketing communications (in accordance with any privacy preferences you have expressed to us);
• to invite you to participate in surveys and provide feedback to us (in accordance with any privacy preferences you have expressed to us);
• to improve the content, functionality and usability of our Services;
• to advertise and market our products and services;
• to improve our marketing and promotional efforts;
• to better understand your needs and interests;
• to improve our products, develop new products, and for analytics purposes;
• for security, credit, or fraud prevention purposes;
• to attract investors;
• to comply and enforce our policies and the Terms of Use and as necessary for the establishment, exercise, or defense of our legal rights and to protect our rights or property;
• for our legal and compliance purposes; and
• for any other purpose identified in an applicable privacy notice, click-through agreement, or other agreement between you and us.

We may also deidentify any Personal Information we collect about you. When we do so, we take reasonable measures to ensure that the information cannot be associated with a consumer or household, and we maintain and use the information in deidentified form. We will not attempt to reidentify the information, except that we may attempt to reidentify the information solely for the purpose of determining whether our deidentification processes satisfy applicable legal requirements. After it has been deidentified, the information is no longer Personal Information and is not subject to this California Policy.

We may also process Personal Information via use of automated technologies, including artificial intelligence, for the purposes listed above. To the extent permitted by applicable law, we may also use Personal Information we collect to train automated technologies we use for the above purposes. However, we do not process Personal Information using automated decision making technologies to make significant decisions concerning consumers.

We do not collect Sensitive Personal Information. Accordingly, we do not process Sensitive Personal Information for purposes not permitted by the CCPA regulations.

IV. RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as needed to provide services to you. We may also retain your Personal Information for longer if it is necessary for legitimate business purposes, including to satisfy legal or reporting obligations, resolve disputes, collect fees, improve our services or maintain security, comply with regulatory requirements, or as permitted or required by applicable law. When we no longer need to retain Personal Information for the above purposes, we will either delete the Personal Information or de-identify it so that it no longer constitutes Personal Information.  

V. SALE & SHARING OF PERSONAL INFORMATION

Under the CCPA, “Sell,” “Sale,” or “Sold” means renting, releasing, or transferring an individual’s personal information to a Third Party for money or other valuable consideration, and “Share,” “Shared,” or “Sharing” means transferring an individual’s personal information to a Third Party for cross-context behavioral advertising purposes, whether or not for money or other valuable consideration. Accordingly, we Sell and Share and in the past 12 months have Sold and Shared, information collected by Cookies including identifiers, such as IP addresses and other device identifiers, internet or other electronic network activity information, and inferences to third party marketing and analytics providers for advertising and marketing, including interest-based marketing, and analytics purposes. We Sell and Share these categories of Personal Information to improve the content, functionality and usability of our Services; to advertise and market our products and services; to improve our Services and our marketing and promotional efforts; and to better understand your needs and interests, and for analytics purposes. We do not otherwise “Sell” or “Share” other types of Personal Information we may collect about you outside the cookie and online tracking technology context.

California Consumers have the right to opt-out of the Sale and Sharing of their Personal Information and can submit a request to opt out by clicking the “Your Privacy Choices” link in the footer of our website and clicking “Reject All” to opt out of non-strictly necessary Cookies.

Additionally, we do not have actual knowledge that we Sell or Share Personal Information of consumers who are under 16 years of age.

VI. HOW WE DISCLOSE PERSONAL INFORMATION

We disclose the categories of Personal Information listed in Section II of this California Policy in the following contexts:

To our Affiliates. We may disclose Personal Information we collect to our affiliates for the purposes listed in Section III of this California Policy.

To our Vendors. So Good So You discloses the Personal Information we collect to our vendors who act on our behalf. For example, we use vendors to operate our Services, to respond to your inquiries, for internal business processes, to help us with our promotional efforts, to process payments or collect debts, to provide information technology and hosting services, and to provide legal and professional services, and similar services. These vendors may need Personal Information about you to perform their obligations. We contractually require our vendors to keep the Personal Information they process on our behalf confidential and to use it only to provide services on our behalf.

To Marketing and Analytics Providers. We may disclose Personal Information we collect via our Services to third parties for marketing and analytics purposes. This primarily includes disclosure of IP address and related web browsing information via Cookies.

As Described in a Privacy Notice or With Your Consent. We may disclose Personal Information as described in any privacy notice we provide to you via our Services, or with your consent if we obtain it from you in a particular context.

In Aggregate or Deidentified Form. We may aggregate or deidentify the Personal Information we collect, and we may disclose aggregated and/or deidentified information to our Vendors, and to Third Parties for our business operational purposes and for any other purposes permitted by applicable law.

We may also disclose Personal Information in the following contexts:

As Part of a Business Transfer. We may disclose Personal Information to a successor organization if, for example, we transfer the ownership or operation of all or a portion of our Services to another organization, we merge with or are acquired by another organization, or if we liquidate our assets. If such a transfer occurs, we will seek assurances that the successor organization will treat the Personal Information we disclose to it in accordance with this California Policy.

To Comply with Laws and Protect Our Rights and the Rights of Others. We may disclose Personal Information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order, or a subpoena. We may also disclose Personal Information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of our Services; to enforce or apply our other agreements; or to protect our own rights or property or the rights, property, or safety of our users or others.

VII. SOURCES OF PERSONAL INFORMATION

We collect the Personal Information listed in Section II of this California Policy from the following sources:

Directly From You. So Good So You collects information you provide to us when you use our Services or when you otherwise interact with us. For example, we collect the information you provide when you create an account with us, enter a contest or sweepstakes, comment on our Services, ask us a question, or otherwise interact with us. Types of Personal Information we may collect directly from you include your name, postal address, email address, phone number, financial information to process your payment for our products and services, and your photo or images you submit to us or on our Services.

From Other Sources. So Good So You also collects Personal Information from other sources, such as from our vendors and from third parties when they disclose Personal Information to us. We may also collect Personal Information about you in other contexts.

Via Cookies & Other Tracking Technologies. So Good So You collects Personal Information passively via cookies and other tracking technologies. This typically includes information about our website visitors, such as IP address, other device identifiers, and internet or other electronic network activity information.

VIII. YOUR PRIVACY RIGHTS

California consumers have the following rights regarding our collection and use of their Personal Information, subject to certain exceptions.

• Rights that Require Verification. You may exercise the data subject rights below by clicking here, selecting “General Questions/Comments” from the drop down list, and filling out the contact form or by calling us toll-free at (612) 259-7245. You may also authorize an agent to make data subject requests on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. To verify your identity and protect your Personal Information, we may ask the requestor to provide information that will enable us to verify your identity in order to comply with your data subject request, such as asking your agent to provide proof of signed permission from you, or we may ask you to confirm with us directly that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
  • Right to Know: You may request that we provide you with the following information about how we have handled your Personal Information:
    • The categories of Personal Information we have collected about you;
    • The categories of sources from which such Personal Information was collected;
    • The business or commercial purpose for collecting, Selling or Sharing Personal Information about you;
    • The categories of Personal Information about you that we disclosed and the categories of third parties to whom we disclosed such Personal Information;
    • The categories of Personal Information about you that we Sold or Shared, and the categories of third parties to whom we Sold or Shared such Personal Information;
  • Right to Delete: You may request that we delete any Personal Information about you we that we collected from you.
  • Right to Correct: You may request that we correct any inaccurate Personal Information we maintain about you.
  • Right to Access Specific Pieces of Personal Information: You may ask to obtain the specific pieces of Personal Information we have collected about you.
• Rights that Do Not Require Verification. You may exercise these rights through the “Your Privacy Choices” link below or at the footer of every page on our website. The “Your Privacy Choices” link will open our Cookie Preference Center, and you can then click “Reject All” to opt out of Sale and Sharing of Personal Information.
  • Right to Opt-Out of Sale and Sales: You have the right to opt out of the Sale and Sharing for cross context behavioral advertising purposes of your Personal Information. 

• Opt-Out Preference Signals. Some web browsers or devices offer settings where you may pre-set a signal to websites that you do not want to have your online activity and behavior tracked, Sold, Shared, or otherwise used for targeted advertising purposes. We recognize the opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by the CCPA, we treat the opt-out preference signals we are required to comply with as a valid request to opt-out of Sale and Sharing for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of Sale and Sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. Please note, however, that our sites are not currently configured to recognize the “Do Not Track” signal, which is separate from the opt-out preference signals described above.
• Non-Retaliation. We will not retaliate against you for exercising your data subject rights. For example, we will not deny goods or services to you as a result of you exercising your data subject rights.

IX. OTHER DISCLOSURES

Direct Marketing. California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of personal information to other entities for their direct marketing purposes in the preceding calendar year. To make such a request, if applicable, please send an email to privacy@sogoodsoyou.com with the subject “Shine the Light Request.”

• Financial Incentives. We do not provide financial incentives to California consumers who allow us to collect, retain, Sell, or Share their Personal Information. We will describe such programs to you if and when we offer them to you.

Disclosure for Nevada Consumers: We may sell “Covered Information” as defined under Nevada law, but we generally do not disclose or share “Personal Information” as defined under Nevada law for commercial purposes. Under Nevada law, you have the right to direct us to not sell your Covered Information to third parties, as defined under Nevada law. To exercise this right, if applicable, you or your authorized representative may contact us at hello@sogoodsoyou.com or call us toll free at (612) 259-7245.

X. CHANGES TO THIS CALIFORNIA POLICY

So Good Brand, Inc. reviews its privacy practices from time to time, which are subject to change, and we may periodically update this California Policy. We ask that you periodically review this page to remain familiar with the most current version of our California Policy. Information collected after the posted effective date will be treated in accordance with the then most current California Policy. When this California Policy changes, we will update the “Last updated” date at the top of the California Policy. If required by applicable law, we will provide you with additional notice if we make a material change to the California Policy, for example, by sending you an email or posting a banner on our Services.

XI. CONTACT US

If you have any questions regarding this California Policy, please contact us via email at privacy@sogoodsoyou.com or at:

So Good Brand, Inc
520 Kasota Ave SE
Minneapolis, MN 55414-2811
Attn: Privacy Policy