Medici Privacy Policy
Last Updated: September 2, 2026
OVERVIEW
Medici Brands, Inc. (“Medici,” “we,” “us,” or “our”) is committed to protecting the privacy of those who visit our website (the “Site”). This Privacy Policy explains how we collect, use, disclose, store, and otherwise process personal information when you access or use the Site.
This Privacy Policy contains the following sections:
- Personal Information We Collect
- How We Use Personal Information
- How We Disclose Personal Information
- Security
- Privacy Rights Requests
- Additional Information for California Residents
- Retention Period
- Third-Party Services
- Use of the Site By Minors
- Updates to this Privacy Policy
- Contacting Us
SECTION 1 - PERSONAL INFORMATION WE COLLECT
Here are the types of personal information we collect through our Site.
Personal information we receive from you:
| Data Categories | Examples |
|---|---|
| Contact Details | If you choose to contact us by mail or email, we will receive and retain the personal information you include in that communication, such as your first and last name, email address, mailing address, and mobile telephone number. |
| User Content | Content you may create or disclose to us during our relationship. |
| Preferences | Language, interests, and other feedback/preferences that you might express during your use of our Site. We may also infer information about your preferences and interests based on the personal information we collect from and about you. |
| Relationship Information | Details of your communications with us and queries in general. |
Personal information we collect automatically through your use of our Site:
| Data Categories | Examples |
|---|---|
| Online Activity Data | Pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access. |
| Device Information | Your device’s operating system type and version, manufacturer and model, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 3G), other unique device identifiers, and general location information. |
We use the following tools for automatic data collection:
| Cookies | Cookies are pieces of information stored directly on the device that you are using to access the Site that allow us to collect the Device and Online Activity Data noted above. We and our service providers and partners may use the information for security purposes, to facilitate navigation, display information more effectively, conduct analytics, and personalize your experience. |
|---|---|
| Local Storage Technologies | These technologies provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications. |
| Pixel Tags | Also known as web beacons and clear GIFs, pixel tags may be used to, among other things, track the actions of users of the Site and compile statistics about usage of the Site. |
Other sources from which we collect personal information:
| Other Third Parties | We may collect additional information about you from sources such as publicly available databases and third-party providers. We may combine this information with the other information we collect and use the combined information for the purposes discussed in this Privacy Policy. |
|---|
We need to collect personal information to provide the Site to you. If you do not provide the information requested, we may not be able to provide the Site.
If you disclose any personal information relating to other people to us or to our service providers in connection with the Site, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.
SECTION 2 - HOW WE USE PERSONAL INFORMATION
Here’s an overview of how we use personal information in providing our Site.
| Purposes | Examples |
|---|---|
| Administering the Site | To respond to your inquiries and manage our relationship with you, including providing you with the information, products and services that you request from us, and notifying you about changes to our terms or Privacy Policy. |
| General Business Operations | To conduct our operations (such as troubleshooting, diagnostic testing, performance analyses of the Site, testing of new system features to evaluate their impact, system and log maintenance, technical support, system debugging, and hosting data) and to facilitate mergers, acquisitions, and other reorganizations and restructurings of our business (including to engage in diligence regarding prospective transactions). |
| Personalizing Our Site | To personalize our interactions with you and to provide you with information tailored to your interests, such as delivering content that we believe will be relevant and interesting to you. |
| Improving and Developing the Site | To conduct data analysis, to monitor and analyze use of the Site, to use data analytics to improve the efficiency of the Site, to develop new products and services, to enhance, improve, repair, maintain, or modify the Site, to identify trends, and for other similar purposes. |
| Aggregation and/or De-Identification | We may de-identify and aggregate personal information to create data that does not reasonably identify you or another individual, and use and disclose such data for our own business purposes without limitation. |
| Security and Fraud Prevention | To conduct audits, to verify that our internal processes function as intended and are compliant with legal, regulatory, or contractual requirements, to monitor for and prevent fraudulent, deceptive, or malicious activity, to verify and maintain the safety, quality, and accuracy of the Site, and for security purposes, including maintaining system security. |
| Legal and Compliance | To fulfill our legal and compliance-related obligations, including complying with applicable laws, complying with legal processes, responding to requests from public and government authorities, meeting national security or law enforcement requirements, complying with requirements set by industry-specific supervisory bodies, enforcing our terms and conditions and standards, protecting our operations, protecting the rights, privacy, or property of our business, responding to auditors, pursuing available legal remedies, making insurance claims, defending claims, and limiting the damages that we may sustain. |
SECTION 3 - HOW WE DISCLOSE PERSONAL INFORMATION
Here are the types of parties to which we may disclose personal information in connection with the Site:
| Service Providers | We use service providers that provide hosting, information technology, fraud prevention, and analytics services for the purposes listed above. These entities process the personal information we disclose to them or that they have access to on our behalf and pursuant to our instructions. |
|---|---|
| Professional Advisors | We use accountants, auditors, experts, consultants, lawyers, banks, and financial institutions to support our business. |
| Authorities and Others | If we are required by law or legal process or if we deem the disclosure appropriate for other legal, compliance or fraud-prevention purposes, we may disclose personal information to law enforcement, public, regulatory, and government authorities, courts, or other entities that obtain valid subpoenas. |
| Business Transferees | We may disclose or transfer your personal information to third parties such as acquiring entities and their advisors in the event of, or in preparation for, any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings). |
SECTION 4 - SECURITY
We employ a variety of organizational, technical, and administrative measures to protect the personal information we hold. Unfortunately, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately using the contact information below.
SECTION 5 - YOUR PRIVACY RIGHTS
Your Rights
Your local laws (including applicable laws in Canada and the United States (including California, Connecticut, Colorado, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Montana, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Virginia, Tennessee, and Texas, as well as similar U.S. state laws) may permit you to request that we:
- provide access to and/or a copy of certain personal information we hold about you
- update personal information which is out of date or incorrect
- delete certain personal information that we process about you
- restrict the way that we process and disclose personal information
- prevent the processing of your personal information for direct-marketing purposes
- opt out of the processing of your personal information for automated processing that results in legal or similarly significant effects (if relevant)
Your local laws may also permit you to revoke your consent to the processing of your personal information for certain purposes.
In addition:
- California and Oregon residents can request information about the categories of personal information we collect, disclose or “sell” or “share” (as defined in California law) about you; California residents can request the sources of such information, the business or commercial purpose for collecting or “selling” or “sharing” your information; and the categories of third parties to whom we disclose information. Such information is also set forth in this Privacy Policy.
- Oregon, Connecticut, and Minnesota residents can request a list of the specific third parties, other than natural persons, to which we have disclosed personal information.
How to Exercise Your Rights
If you wish to exercise your data subject rights, please email us at contact@medicibrands.com. We will consider all requests and provide our response within the time period stated by applicable law and as otherwise required by applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, which may include if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. We may request you provide us with information necessary to confirm your identity before responding to your request. We cannot respond to your request or provide you with the information you seek if we cannot verify your identity or authority to make the request and confirm the request relates to you and your information.
If you are a resident of Virginia, Minnesota, Montana, Oregon, Tennessee, Texas, Iowa, Indiana, Kentucky, Maryland, Nebraska, New Hampshire, New Jersey, Rhode Island, Delaware, Colorado, or Connecticut, and we deny your information request, you have the right to appeal our denial. You can exercise this right by emailing us at contact@medicibrands.com. Your description must include your full name and the email address used for your account with us, along with a copy of the denial notice you received from us.
If you would like to submit your request through an authorized agent, we will ask the agent to provide written permission from you and we may need to separately verify your identity as discussed above.
Sale/Targeted Advertising Opt Out Rights
We do not currently engage in the “sale” or processing of your information for “targeted advertising” purposes as both terms are defined under applicable law.
SECTION 6 – ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS
If you are a California resident, the California Consumer Privacy Act (“CCPA”) requires us to provide you with the following additional information about:
- the purpose for which we use each category of “personal information” (as defined in the CCPA) we collect; and
- the categories of third parties to which we (a) disclose such personal information for a business purpose, (b) “share” personal information for “cross-context behavioral advertising,” and/or (c) “sell” such personal information.
Under the CCPA, “sharing” is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across distinct online services, and “selling” is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration. Our use of third-party analytics services may result in the sharing of online identifiers (e.g., cookie data, IP addresses, device identifiers, and usage information) in a way that may be considered a “sale” under the CCPA.
The chart below summarizes how we collect, use and share personal information by reference to the statutory categories specified in the CCPA. Categories in the chart refer to the categories described above in the general section of this Policy.
| Statutory Category of Personal Information (PI) | Purpose of Collection | Categories of third parties to whom we “sell” or “share” PI |
|---|---|---|
| Identifiers (i.e., name and business contact information) |
| None |
| Online Identifiers, Internet or Network Information, and General Geolocation Data |
| None |
| Other information provided (user content, preferences) |
| None |
Your California Privacy Rights. Please see the “Privacy Rights Requests” section above in the Privacy Policy for the rights you have under applicable law.
Your Choices Regarding “Sharing” and “Selling”. We do not currently engage in the “sale” or “sharing” of your information for “cross-context behavioral advertising” purposes as both terms are defined under the CCPA.
Other CCPA rights. The CCPA allows you to limit the use or disclosure of your “sensitive personal information” (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for business purposes for which you cannot opt out under the CCPA.
Notice Concerning Do Not Track. Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our website for third-party purposes, which is why we describe a variety of opt-out mechanisms above. However, we do not currently recognize or respond to browser-initiated DNT signals. Please note that DNT is different from the browser-based privacy signal (the global privacy control) referred to above, which we do honor.
Shine the Light. The California “Shine the Light” law gives residents of California the right under certain circumstances to opt out of the disclosure of certain categories of “personal information” (as defined in the Shine the Light law) to third parties for their “direct marketing purposes” (as such term is defined in the Shine the Light law), or in the alternative, that we maintain a policy of providing a cost-free means for consumers to opt out of any such disclosure. We maintain such a procedure. We do not currently disclose personal information to third parties for their own direct marketing purposes. To opt out of “sales” and “sharing” as defined under the CCPA, see the “Your Choices Regarding “Sharing” and “Selling”” section above.
SECTION 7 – RETENTION PERIOD
We retain personal information for as long as needed or permitted in light of the purposes for which it was obtained as outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you (for example, for as long as you keep using our Site);
- Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records or communications for a certain period before we can delete them); or
- Whether retention is advisable considering our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).
SECTION 8 - THIRD-PARTY SERVICES
This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties. This includes any third party operating any website or service to which our Site links. The inclusion of a link on our Site does not imply endorsement of the linked site or service by us or by our affiliates.
SECTION 9 – USE OF THE SITE BY MINORS
The Site is not directed to individuals under the age of 16, and we do not knowingly collect personal information from individuals under 16. If you have reason to believe that a child under the age of 16 has provided personal information to us through the Site, please contact us.
SECTION 10 - UPDATES TO THIS PRIVACY POLICY
From time to time we may change or update this Privacy Policy to reflect changes in the law, our data collection and use practices, the features of our Site, or advances in technology. You should review the Privacy Policy periodically, and you can know if the Privacy Policy has changed since the last time you reviewed it by checking the “Last Updated” date at the beginning of the document. By continuing to use the Site, you are confirming that you have read and understood the latest version of this Privacy Policy. If we make material changes to the Policy, we will provide notice through our Site, or by other means, to provide you the opportunity to review the changes before they become effective, in accordance with applicable legal requirements.
SECTION 11 - CONTACTING US
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at contact@medicibrands.com.