1. Introduction

This Privacy Policy describes how Craft Kettle Brewing Equipment LLC ("Craft Kettle," "we," "us," or "our") collects, uses, and discloses your personal information when you visit or use our website at www.craftkettle.com (the "Site"), use our services, or otherwise communicate with us (collectively, the "Services").

For purposes of this Privacy Policy, "you" and "your" refer to you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understand this Privacy Policy and agree to its terms.

2. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal requirements, or other operational reasons. When we make material changes, we will:

• Post the revised Privacy Policy on the Site
• Update the "Last Updated" date at the top of this page
• Where required by applicable law, notify you by email or through a prominent notice on the Site

We encourage you to review this Privacy Policy periodically.

3. Personal Information We Collect

The types of personal information we collect depend on how you interact with our Site and Services. We collect information from three sources: directly from you, automatically through your use of the Services, and from third parties.

3.1 Information You Provide Directly

• Contact Details: Name, title, company name, address, phone number, and email address.
• Order Information: Billing and shipping addresses, payment information (including credit card numbers and bank account information for ACH transactions), Federal Employer Identification Number (FEIN), email address, and phone number.
• Account Information: Username, password, security questions, and other credentials used for account security.
• Customer Support Information: Information you include in communications with us, such as messages, inquiries, or feedback.
• Chatbot and Virtual Assistant Interactions: When you use our AI-powered chatbot or virtual assistant features, we collect the content of your conversations, including questions, requests, and any personal information you choose to share during those interactions.
• SMS/Text Message Consent Records: Your phone number, opt-in confirmation, consent timestamp, and message history when you enroll in our text messaging programs.

Some features of the Services may require you to provide certain information. You may choose not to provide this information, but doing so may prevent you from using or accessing those features.

3.2 Information Collected Automatically (Usage Data)

We automatically collect certain information about your interaction with the Services ("Usage Data") using cookies, pixels, tags, SDKs, and similar technologies. Usage Data may include:

• Device type, operating system, and hardware identifiers
• Browser type and version
• Time zone setting and language preference
• IP address and approximate geolocation derived from IP address
• Internet service provider and network connection type
• Referring URLs and exit pages
• Pages viewed, links clicked, scrolling behavior, and time spent on pages
• Interaction patterns with site elements (clicks, form interactions, hover behavior)

3.3 Information from Third Parties

We may receive information about you from third parties, including:

• Analytics Providers: Such as Google Analytics (including GA4), Hotjar, or similar services that help us understand how visitors use the Site through aggregated and individual session data.
• Advertising and Tracking Platforms: Including Google Ads, Meta (Facebook/Instagram) Ads, and other advertising networks, which may provide us with conversion data, audience insights, and retargeting information. These platforms may use pixels, tags, and cookies on our Site to collect data about your browsing activity across websites.
• Payment Processors: Such as Stripe, which securely process payment transactions on our behalf.
• Customer Communication Platforms: Including SMS/MMS service providers that facilitate text message communications.
• AI and Chatbot Service Providers: Third-party platforms that power our chatbot and virtual assistant features, which may process conversation data to generate responses.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We encourage you to review the privacy policies of these third-party services.

4. How We Use Your Personal Information

4.1 Providing Products and Services

We use your personal information to fulfill our contract with you and deliver the Services, including:

• Order Processing: Processing payments, verifying orders, arranging shipping, and providing order confirmations and tracking information.
• Account Management: Creating, maintaining, and securing your account.
• Customer Support: Responding to your inquiries, troubleshooting issues, and providing assistance through email, phone, chat, or our AI-powered chatbot.
• Communications: Sending transactional notifications related to your account, purchases, returns, exchanges, and shipping updates.

4.2 AI-Powered Features

Our Site may use AI-powered chatbots and virtual assistants to provide customer support, answer product questions, and assist with order-related inquiries. When you interact with these features:

• Your conversation content is processed by our AI service provider(s) to generate responses.
• Conversations may be logged and reviewed to improve accuracy, train models, and enhance the quality of our support.
• We do not use your chatbot conversations to build individual advertising profiles.
• You may request deletion of your chatbot conversation history by contacting us (see Section 14).

4.3 Marketing and Advertising

We may use your personal information for marketing and promotional purposes, such as:

• Sending marketing communications via email, text message, or postal mail, in accordance with your preferences and applicable law.
• Delivering targeted advertisements through third-party advertising platforms based on your browsing activity, interests, and demographics.
• Measuring and analyzing the effectiveness of our marketing and advertising campaigns.

4.4 Analytics and Site Improvement

We use analytics tools and tracking technologies to understand how visitors interact with the Site, monitor performance, identify errors, conduct A/B testing, and generate aggregate statistical data about Site usage.

4.5 Security and Fraud Prevention

We use your personal information to detect, investigate, and take action regarding possible fraudulent, illegal, or malicious activities, and to protect the security and integrity of our Services.

4.6 Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal information based on the following legal grounds:

• Performance of a Contract: To fulfill orders, manage your account, and provide the Services you have requested.
• Consent: Where you have given us explicit consent, such as opting into marketing communications or text messaging programs.
• Legitimate Interests: To improve our Services, conduct analytics, prevent fraud, and ensure security, where these interests are not overridden by your data protection rights.
• Legal Obligation: To comply with applicable laws, regulations, and legal processes.

5. Cookies, Tracking Technologies & Advertising

5.1 Types of Technologies We Use

We use the following technologies to collect Usage Data and support the Services:

• Cookies: Small text files stored on your device that help us recognize you and remember your preferences.
• Pixels/Web Beacons: Invisible image tags embedded in web pages and emails that track whether content has been accessed.
• JavaScript Tags/SDKs: Code embedded on our Site that collects interaction data and enables third-party services.
• Local Storage: Browser-based storage used to retain user preferences and session information.

5.2 Categories of Cookies and Tracking

5.3 Third-Party Tracking and Advertising

Our advertising partners may collect information about your activity on our Site and across other websites to serve you targeted advertisements. These partners include but are not limited to:

• Google Ads / Google Marketing Platform — conversion tracking, remarketing, and audience targeting
• Meta (Facebook/Instagram) Ads — conversion tracking via the Meta Pixel and Custom Audiences
• Other advertising networks as we may add from time to time

These third parties may use their own cookies and tracking technologies and are governed by their own privacy policies.

5.4 Managing Cookies and Tracking Preferences

You can manage your cookie and tracking preferences in the following ways:

• Cookie Consent Banner: When you first visit our Site, you will be presented with a cookie consent banner where you can accept or decline non-essential cookies.
• Browser Settings: Most browsers allow you to block or delete cookies. Blocking essential cookies may impair Site functionality.
• Opt-Out Tools: You may opt out of interest-based advertising through the Digital Advertising Alliance (DAA), Network Advertising Initiative (NAI), Google Ads Settings, or Meta Ad Preferences.

5.5 Do Not Track and Global Privacy Control

Our Site does not currently respond to "Do Not Track" (DNT) browser signals. However, we do honor Global Privacy Control (GPC) signals where required by applicable law. To learn more about GPC, visit globalprivacycontrol.org.

6. Text Messaging (SMS/MMS)

6.1 What We Send

With your consent, we may send you text messages (SMS or MMS) including promotional offers and marketing messages, order confirmations, shipping updates and delivery notifications, project status communications, and customer service and support messages.

6.2 Consent and Opt-In

By providing your phone number through our web forms, point-of-sale interactions, or other opt-in methods, and by affirmatively consenting to receive text messages, you agree to receive text messages from Craft Kettle at the phone number provided. Consent is not a condition of purchase. Message and data rates may apply. Message frequency varies.

6.3 Opt-Out

You may opt out of text messages at any time by replying STOP to any text message you receive from us, emailing us at info@craftkettle.com, or calling us at 855-953-8853. After opting out, you may receive a single confirmation message. Opting out of promotional messages will not affect transactional messages related to active orders.

6.4 SMS Data Sharing

We use third-party SMS platforms to send and manage text messages. These service providers may process your phone number and message content solely to deliver messages on our behalf. We do not sell, rent, or share your phone number with third parties for their own marketing purposes.

7. How We Disclose Personal Information

We may disclose your personal information to the following categories of recipients:

• Service Providers and Vendors: Companies that perform services on our behalf, including IT infrastructure, payment processing, data analytics, customer support (including AI chatbot providers), cloud storage, fulfillment, shipping, and SMS/email communication platforms. These providers are contractually obligated to use your information only as directed by us.
• Advertising and Analytics Partners: Third-party platforms that help us deliver targeted advertising and measure campaign performance, as described in Section 5.
• Professional Advisors: Accountants, auditors, lawyers, and consultants as necessary for the operation of our business.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, subpoenas, court orders, or other legal processes, and to enforce our terms of service.
• Business Transfers: In connection with any merger, acquisition, financing, sale of assets, or bankruptcy proceeding, your information may be transferred as a business asset.
• Safety and Protection: To protect the rights, property, and safety of Craft Kettle, our customers, and the public.

Categories of Personal Information Disclosed (Past 12 Months)

We do not sell your personal information as defined under the CCPA/CPRA or other applicable privacy laws.

8. Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data management procedures.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information.

9.1 All Users

All users of the Services may: access and update their account information by logging into the Site; opt out of marketing emails using the unsubscribe link in any promotional email; opt out of text messages by replying STOP or contacting us; and request deletion of chatbot conversation history by contacting us.

9.2 California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, California residents have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we have collected, used, disclosed, and sold.
• Delete: Request deletion of personal information we hold about you, subject to certain exceptions.
• Correct: Request correction of inaccurate personal information.
• Opt-Out of Sale/Sharing: We do not sell your personal information. You may opt out of the sharing of personal information for cross-context behavioral advertising.
• Limit Use of Sensitive Personal Information: Where applicable.
• Non-Discrimination: We will not discriminate against you for exercising any of these rights.

9.3 EEA and UK Residents (GDPR / UK GDPR)

Under the General Data Protection Regulation and UK GDPR, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal information.
• Erasure: Request deletion of your personal information under certain circumstances.
• Restriction: Request restriction of processing under certain circumstances.
• Data Portability: Receive your personal information in a structured, commonly used, machine-readable format.
• Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
• Lodge a Complaint: File a complaint with your local data protection authority.

9.4 Exercising Your Rights

To exercise any of these rights, you may log into your account and update your information directly, email us at info@craftkettle.com, or call us at 855-953-8853. We will verify your identity before processing your request. You may designate an authorized agent to make requests on your behalf, subject to verification. We will respond to verified requests within the timeframes required by applicable law (generally 30–45 days, with possible extensions as permitted by law).

9.5 Appeals

If we decline to process your request, we will inform you of the reason and provide instructions for how to appeal. You may contact us using the information in Section 14 to submit an appeal.

10. Children's Privacy

The Services are not intended for individuals under the age of eighteen (18). We do not knowingly collect personal information from children or minors. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a minor, please contact us immediately using the information in Section 14.

11. Third-Party Websites and Links

Our Site may contain links to websites or platforms operated by third parties. These third-party sites have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policy of any third-party site you visit.

12. International Data Transfers

If you access the Services from outside the United States, your personal information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where we transfer personal information outside of the EEA or UK, we rely on recognized transfer mechanisms, including the European Commission's Standard Contractual Clauses (SCCs), to ensure that your personal information receives an adequate level of protection.

13. Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including encryption of sensitive data in transit (TLS/SSL) and at rest, access controls and authentication measures, regular security assessments and monitoring, and employee training on data protection practices.

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. We encourage you to use strong passwords and avoid transmitting sensitive information through insecure channels.

14. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us: