California Consumer Privacy Notice (CCPA/CPRA)

Effective Date:4/30/2026  Last Updated: 4/30/2026

This Notice supplements our main Privacy Policy and applies only to California residents. It describes how Sales Peak Inc., doing business as Organo Republic ("Organo Republic," "we," "us," "our") collects, uses, and discloses your personal information, and the rights you have under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

If you are not a California resident, this Notice does not apply to you.

1. Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

* Payment card numbers are processed by our payment processors and are not stored on our servers.

We do not knowingly collect personal information from minors under 16.

2. Sources of Personal Information

We collect personal information from:

• You directly, when you create an account, place an order, contact us, or sign up for marketing.

• Automatically, through cookies and similar technologies when you use our site.

• Third parties, including our payment processors and shipping carriers.

3. Purposes for Collection

We use personal information to:

• Process and fulfill your orders, including shipping and payment.

• Provide customer support and respond to inquiries.

• Send transactional communications (order confirmations, shipping updates).

• Send marketing communications, where you have opted in.

• Administer our loyalty and rewards programs (see Section 7).

• Personalize your experience and recommend products.

• Detect and prevent fraud and security incidents.

• Comply with legal obligations and enforce our terms.

• Analyze and improve our website and services.

We will not collect additional categories or use personal information for materially different purposes without providing notice.

4. Disclosure and "Sale"/"Sharing" of Personal Information

Categories Disclosed for a Business Purpose

In the past 12 months, we have disclosed the following categories of personal information to service providers for business purposes: identifiers, customer records, commercial information, internet/network activity, and geolocation data. Recipients include:

• Payment processors (Shopify Payments, PayPal, Shop Pay)

• Shipping and fulfillment providers

• Email and marketing platforms (Klaviyo)

• Analytics providers (Google Analytics)

• Customer support tools

• Hosting and IT infrastructure (Shopify Inc.)

"Sale" or "Sharing" of Personal Information

We do not sell or share your personal information for cross-context behavioral advertising, as those terms are defined under the CCPA. We do not knowingly sell or share the personal information of consumers under 16.

5. Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Notice, comply with legal and tax obligations, resolve disputes, and enforce our agreements. Typical retention periods:

• Account data: retained until you delete your account or request deletion, after which it is deleted or anonymized within 30 days, except where retention is required by law (see "Order and transaction records" below).

• Order and transaction records: 7 years (to comply with U.S. tax and accounting requirements), retained even after account deletion.

• Marketing data: retained until you opt out; a minimal suppression record (e.g., a hashed email) is kept afterwards solely to honor your opt-out.

• Website analytics: up to 26 months.

• Customer support records: up to 3 years after the last interaction.

6. Your CCPA Rights

If you are a California resident, you have the right to:

1. Know what personal information we collect, use, and disclose.

2. Access a copy of the personal information we have collected about you.

3. Delete personal information we have collected from you (subject to legal exceptions, such as our obligation to retain transaction records for tax purposes).

4. Correct inaccurate personal information.

5. Opt out of the sale or sharing of your personal information. (Note: we do not sell or share personal information.)

6. Limit the use of sensitive personal information.

7. Non-discrimination -we will not deny services, charge different prices, or provide a different level of quality because you exercised your rights. (Note: differences in price or service tied to participation in our loyalty programs are reasonably related to the value of the data -see Section 7.)

How to Exercise Your Rights

You can submit a request by:

• Email: support@organorepublic.com

• Phone: (305) 306-7345

• Mail: Sales Peak Inc., 3719 NW 50th St, Miami, FL 33142, USA

We honor opt-out preference signals, including the Global Privacy Control (GPC).

Verification

To protect your information, we will verify your identity before fulfilling certain requests, typically by matching information you provide against information we have on file (such as details from a recent order).

Authorized Agents

You may designate an authorized agent to make a request on your behalf. The agent must provide written permission signed by you, and we may require you to verify your identity directly with us.

Response Timeframe

We will confirm receipt of your request within 10 business days and respond to verifiable requests within 45 days, with a possible extension of an additional 45 days if reasonably necessary.

7. Notice of Financial Incentives

We offer programs that may be considered "financial incentives" under the CCPA because they involve the collection of personal information in exchange for a benefit:

• Newsletter signup discount: When you subscribe to our email newsletter, we may offer a one-time discount code or promotional offer. Personal information collected: email address (and name, where requested).

• Loyalty / rewards program: Earn points, rewards, or exclusive offers based on your purchases and engagement. Personal information collected: name, email, purchase history, and engagement data.

How to opt in: Sign up via the relevant form on our website or at checkout.

How to withdraw: Unsubscribe from marketing emails using the link at the bottom of any email, opt out of the loyalty program by contacting us, or email support@organorepublic.com. Withdrawing will end your participation in the program but will not affect any benefits already earned, except as described in the program terms.

Material terms: Full terms are provided when you join. Participation is entirely voluntary.

Good-faith estimate of value: We have determined that the value of the personal information collected through these programs is reasonably related to the value of the discounts and rewards offered. We calculate this estimate based on the expenses we incur to operate the program (including platform costs, the value of discounts redeemed, and customer acquisition costs) and the benefit received by participating customers. The value of personal information to us is reasonably related to, and not greater than, the value of the offer to you.

8. Sensitive Personal Information

We use sensitive personal information (such as account login credentials) only for purposes permitted under CCPA regulations -including providing the service you requested, ensuring security and integrity, preventing fraud, and verifying your identity. We do not use sensitive personal information for the purpose of inferring characteristics about you.

9. Changes to This Notice

We may update this Notice from time to time. We will post any changes here with a revised "Last Updated" date. Material changes will be communicated through our website or by email where required.

10. Contact Us

For questions about this Notice or our privacy practices:

Sales Peak Inc. DBA Organo Republic 3719 NW 50th St Miami, FL 33142, USA Email: support@organorepublic.com Phone: (305) 306-7345