PRIVACY POLICY

Effective Date: May 11, 2026 | Website: whitelip.us

Company	Whitelip Inc.
Address	150 N Michigan Ave, Suite 1950, Chicago, Illinois 60601, United States
Support	support@whitelip.com
Website	whitelip.us

Contents

1. Scope of This Privacy Policy

2. Key Points

3. Personal Information We Collect

4. Sensitive Personal Information

5. Sources of Personal Information

6. How We Use Personal Information

7. How We Disclose Personal Information

8. Cookies, Analytics, Pixels, and Similar Technologies

9. Targeted Advertising; Sale or Sharing; Your Opt-Out Choices

10. Payment Providers and Kustom

11. Age Verification, Fraud Prevention, and Regulated-Product Compliance

12. Marketing Communications

13. Retention of Personal Information

14. Security

15. Your Privacy Rights and Choices

16. California Notice at Collection and State Privacy Disclosures

17. Children and Persons Under 21

18. International Users

19. Changes to This Privacy Policy

20. Contact Us

This Privacy Policy explains how Whitelip Inc. (“Whitelip,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you visit whitelip.us, create an account, place an order, communicate with us, participate in promotions, subscribe to marketing, interact with our advertisements, or otherwise use our website, online store, products, or services (collectively, the “Site”).

The Site is intended only for adults who are at least 21 years old. We do not knowingly sell products to, or collect personal information from, persons under 21.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information we collect online through the Site, through customer-service communications, through marketing and advertising interactions, and through service providers that help us operate a regulated adult-only e-commerce business. It also serves as our notice at collection and privacy notice for U.S. state privacy laws to the extent those laws apply to Whitelip.

This Privacy Policy does not apply to websites, services, platforms, or applications operated by third parties, even if they are linked from or integrated with the Site. Third parties process personal information according to their own privacy notices.

2. Key Points

• We collect information needed to operate the Site, verify age and identity, process orders and payments, ship products, provide customer support, prevent fraud, comply with law, and market products to adult users.
• We use third-party providers for e-commerce hosting, payments, age verification, fraud prevention, shipping, analytics, advertising, email, and customer support.
• Our use of advertising cookies, pixels, and similar technologies may be considered a “sale,” “sharing,” or “targeted advertising” under some U.S. state privacy laws. You can opt out as described below.
• Depending on where you live, you may have rights to access, delete, correct, or port your personal information and to opt out of certain uses or disclosures.
• We do not knowingly collect, sell, share, or use personal information of persons under 21.

3. Personal Information We Collect

The categories of personal information we collect depend on how you interact with us. The table below describes common categories, examples, and why we collect them.

Category	Examples	Primary Purposes
Identifiers and contact information	Name, billing address, shipping address, email address, telephone number, account username, IP address, online identifiers, date of birth, and age-verification information.	Create and manage accounts; verify age and identity; process orders; communicate with you; prevent fraud; comply with law.
Commercial information	Products viewed, carts, purchases, order history, shipping status, returns, refunds, promotions, preferences, and customer-service history.	Operate the store; fulfill orders; provide support; manage returns; personalize the Site; analyze business performance.
Payment and financial information	Payment method details processed by payment providers, billing address, transaction identifiers, payment tokens, payment status, and financing or invoice information if you use a provider such as Kustom.	Process payments; prevent fraud; provide invoice or pay-over-time services; maintain transaction records.
Device, internet, and network information	Browser type, device type, operating system, referring URLs, pages viewed, search terms, cookie IDs, pixel IDs, session data, log files, interaction data, and approximate location inferred from IP address.	Load and secure the Site; remember preferences; analyze usage; prevent fraud; measure and improve advertising; troubleshoot technical issues.
Approximate location information	General location inferred from IP address, shipping address, billing address, and state or ZIP-code eligibility checks.	Determine shipping eligibility; calculate taxes and fees; comply with state and local restrictions; personalize site experience.
Communications and user content	Emails, support requests, chat messages, reviews, ratings, photos, survey responses, promotion entries, and feedback.	Respond to inquiries; improve products and services; moderate reviews; administer promotions; maintain records.
Marketing and advertising information	Email subscription status, marketing preferences, ad interactions, referral source, campaign identifiers, audience segments, and cookie or pixel data.	Send marketing to adults who opt in or as otherwise permitted; measure campaigns; personalize ads; honor opt-outs.
Compliance, fraud, and security information	Age-verification status, fraud scores, risk flags, carrier delivery confirmation, adult-signature records, compliance records, and account/security logs.	Operate a regulated adult-only business; prevent underage access; detect fraud; enforce terms; comply with legal and regulatory obligations.

4. Sensitive Personal Information

Depending on the feature, transaction, verification method, and applicable law, we or our service providers may collect information that some laws treat as sensitive personal information, such as date of birth, government-issued identification information, payment-card or financial-account information, account login credentials, precise geolocation if enabled, and information used to verify age or identity.

We use and disclose sensitive personal information only for permitted business purposes, including age verification, identity verification, payment processing, fraud prevention, account security, order fulfillment, legal compliance, and other purposes permitted by applicable law. We do not knowingly sell or share sensitive personal information for cross-context behavioral advertising.

5. Sources of Personal Information

• You, when you create an account, place an order, contact support, submit a review, sign up for marketing, or provide information through the Site.
• Your device and browser, through cookies, pixels, log files, web beacons, tags, analytics tools, and similar technologies.
• Service providers and business partners, including payment processors, Kustom or other payment-method providers, age-verification providers, fraud-prevention providers, shipping carriers, e-commerce platforms, analytics providers, advertising partners, and email providers.
• Public or commercially available sources used for age verification, identity verification, fraud prevention, address validation, compliance screening, or similar purposes.
• Other users or third parties, such as when someone purchases a product for lawful delivery to you or provides your information in connection with customer support, subject to our verification and compliance controls.

6. How We Use Personal Information

• To operate, maintain, secure, and improve the Site and online store.
• To verify that users and recipients are at least 21 years old and eligible to access, purchase, receive, or use products.
• To process orders, payments, refunds, taxes, shipping, adult-signature delivery, returns, customer support, and account activity.
• To comply with federal, state, local, tribal, and territorial laws, including laws related to nicotine products, age verification, shipping, taxes, recordkeeping, fraud prevention, and consumer protection.
• To personalize the Site, remember preferences, analyze traffic, diagnose errors, improve products and services, and conduct internal business operations.
• To send transactional communications such as order confirmations, account notices, age-verification messages, shipping updates, policy updates, and customer-service responses.
• To send marketing communications to adult users where permitted by law and to honor opt-out requests.
• To measure, deliver, and improve advertising and promotions, including interest-based advertising, subject to your privacy choices.
• To detect, investigate, and prevent underage access, fraud, abuse, security incidents, illegal activity, violations of our Terms, and misuse of the Site or products.
• To protect our rights, users, customers, employees, service providers, business partners, property, and the public.

7. How We Disclose Personal Information

We disclose personal information to the categories of recipients described below. We require service providers and contractors to use personal information only as needed to provide services to us or as otherwise permitted by law.

• E-commerce, hosting, and technology providers, including WordPress, WooCommerce, website hosting, security, cloud, database, and IT providers.
• Payment and financing providers, including card processors, payment gateways, fraud-prevention tools, banks, digital wallets, invoice providers, pay-over-time providers, and Kustom where offered.
• Age-verification, identity-verification, address-validation, compliance, and fraud-prevention providers.
• Shipping, fulfillment, logistics, adult-signature, tax, and returns providers.
• Email, SMS, customer-support, CRM, survey, review, and promotion providers, including Mailchimp where used.
• Analytics and advertising partners, including Google Analytics, Google Ads, Meta/Facebook, Microsoft/Bing, and similar providers where used.
• Professional advisors, insurers, auditors, legal counsel, accountants, consultants, and compliance advisors.
• Government authorities, regulators, law enforcement, courts, carriers, payment networks, and other parties where we believe disclosure is required or appropriate to comply with law, protect rights, prevent harm, enforce our Terms, or respond to lawful requests.
• Parties involved in a business transaction, such as a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or transfer of business operations.

8. Cookies, Analytics, Pixels, and Similar Technologies

We and our providers use cookies, pixels, web beacons, tags, SDKs, local storage, log files, and similar technologies to operate the Site, remember preferences, keep carts active, verify security, analyze performance, measure marketing, and deliver or measure advertising.

• Essential cookies are necessary for checkout, account login, cart functions, security, age-gating, fraud prevention, and basic Site operation.
• Analytics and performance technologies help us understand how visitors use the Site, diagnose errors, and improve the Site.
• Advertising and social media technologies may help us measure campaigns, build audiences, limit ad frequency, and deliver ads that may be relevant to adult users.
• Cookie duration varies. Session cookies expire when you close your browser. Persistent cookies remain until they expire or you delete them. Common durations may range from minutes to two years depending on the provider and purpose.

You can control cookies through your browser settings. Blocking cookies may affect Site functionality, including checkout, account login, fraud prevention, or age verification. We do not respond to browser “Do Not Track” signals because there is no uniform industry standard for those signals. We do honor Global Privacy Control and other legally required universal opt-out mechanisms where applicable, as described below.

9. Targeted Advertising; Sale or Sharing; Your Opt-Out Choices

Some U.S. state privacy laws define “sale,” “sharing,” or “targeted advertising” broadly. Our use of advertising cookies, pixels, analytics tools, and similar technologies may be considered a sale, sharing, or targeted advertising under those laws because it can involve making identifiers, device information, internet activity, commercial information, or approximate location available to advertising or analytics partners.

You may opt out of sale, sharing, or targeted advertising by using our privacy choices page at [insert “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” link], by adjusting cookie preferences where available, by contacting support@whitelip.com, or by using a recognized universal opt-out mechanism such as Global Privacy Control where required by law.

We do not knowingly sell or share personal information of anyone under 21. We do not knowingly sell or share personal information of consumers under 16.

10. Payment Providers and Kustom

When you make a purchase, payment information is processed by third-party payment providers. We generally do not store full payment-card numbers on our systems. We may receive transaction confirmations, tokens, last-four-digit references, payment status, billing details, and fraud or eligibility results.

If we offer Kustom or another invoice, credit, financing, or pay-over-time payment method, we may disclose contact details, order details, billing details, delivery details, age-verification or fraud-prevention information, and other information reasonably necessary for that provider to assess eligibility, process payment, manage risk, customize available payment methods, comply with law, and provide its payment services. That provider may process some information under its own privacy notice and terms.

11. Age Verification, Fraud Prevention, and Regulated-Product Compliance

Because the Site is an adult-only regulated-product website, we use personal information to confirm age, identity, location, payment legitimacy, shipping eligibility, and compliance with applicable law. This may include use of third-party age-verification databases, identity-verification tools, fraud-prevention tools, address validation, carrier adult-signature services, tax tools, and compliance records.

If we cannot verify that you or the recipient are at least 21 years old, or if we believe an order may violate applicable law, our Terms, carrier rules, or compliance controls, we may deny access, cancel or hold the order, refuse delivery, request additional information, or close an account.

12. Marketing Communications

If you subscribe to marketing communications or otherwise permit us to send marketing, we may use your email address, phone number, marketing preferences, purchase history, and interaction data to send information about products, offers, promotions, and updates to adult users. You may unsubscribe from marketing emails using the link in the message or by contacting us. You may opt out of SMS or similar messages using the instructions in the message, if SMS marketing is offered.

We may continue to send transactional or service-related messages, including order confirmations, shipping updates, account notices, compliance notices, policy updates, and customer-service responses.

13. Retention of Personal Information

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Site, fulfill orders, maintain accounts, verify age, comply with regulated-product, tax, accounting, shipping, fraud-prevention, legal, and recordkeeping obligations, resolve disputes, enforce agreements, and protect rights. Actual retention periods vary based on the type of information, legal obligations, business needs, and security considerations.

Information Type	Typical Retention Approach
Account and contact information	While the account is active and for a reasonable period afterward for support, fraud prevention, legal compliance, and recordkeeping.
Order, payment, shipping, tax, and compliance records	Generally retained for the period required for tax, accounting, regulated-product, carrier, fraud-prevention, and legal obligations; often several years.
Age-verification and identity-verification records	Retained as needed to document age-restricted compliance, prevent underage access, resolve disputes, and comply with law, while minimizing unnecessary data where possible.
Customer-support communications	Retained for support quality, dispute resolution, compliance, and business records.
Marketing information	Retained until you unsubscribe or opt out, plus suppression-list information needed to honor your opt-out.
Cookies, pixels, analytics, and log data	Retained according to cookie settings, provider configurations, and security or analytics needs; durations vary by provider and purpose.
Security and fraud-prevention logs	Retained as needed to protect the Site, investigate incidents, prevent fraud, and comply with legal obligations.

14. Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include access controls, encryption or tokenization where appropriate, vendor controls, logging, fraud screening, secure payment processing, and internal policies.

No website, network, database, or transmission is completely secure. You are responsible for keeping your account credentials confidential and for notifying us promptly if you believe your account has been compromised.

15. Your Privacy Rights and Choices

Depending on your state of residence and whether a particular privacy law applies to Whitelip, you may have some or all of the rights listed below:

• Right to know or access the personal information we collect, use, disclose, sell, or share about you.
• Right to receive a copy of certain personal information in a portable format.
• Right to correct inaccurate personal information.
• Right to request deletion of personal information, subject to legal and business exceptions.
• Right to opt out of sale, sharing, targeted advertising, or certain profiling, where applicable.
• Right to limit certain uses and disclosures of sensitive personal information, where applicable.
• Right to withdraw consent where processing is based on consent.
• Right to appeal a denied privacy request where applicable.
• Right not to be discriminated against for exercising privacy rights.

To exercise privacy rights, contact us at support@whitelip.com or use [insert privacy request web form]. If required by law, you may also contact us at [insert toll-free number]. To opt out of sale, sharing, or targeted advertising, use [insert “Your Privacy Choices” link] or enable Global Privacy Control in a supported browser or extension where applicable.

We may need to verify your identity before processing a request. Verification may require matching information you provide with information we maintain or requesting additional information. If you use an authorized agent, we may require proof of authorization and may ask you to verify your identity directly, unless prohibited by law. We will respond to privacy requests within the time required by applicable law. If we deny a request and applicable law provides an appeal right, you may appeal by replying to our denial or contacting us at support@whitelip.com with “Privacy Appeal” in the subject line.

16. California Notice at Collection and State Privacy Disclosures

This section applies to personal information governed by the California Consumer Privacy Act, as amended, and similar U.S. state privacy laws where applicable. The table below summarizes categories of personal information we may have collected, disclosed for business purposes, or sold/shared for cross-context behavioral advertising or targeted advertising during the previous 12 months.

Category	Collected	Disclosed for Business Purposes	Sold/Shared or Used for Targeted Advertising
Identifiers	Yes	Service providers, payment providers, age-verification providers, shipping providers, legal/compliance providers.	Yes, for online identifiers and advertising-related identifiers where advertising technologies are used.
Customer records information	Yes	Payment, shipping, age-verification, fraud, tax, customer-support, and compliance providers.	No, except limited online identifiers where treated as sale/share by law.
Protected classification characteristics	Limited, such as age/date of birth for 21+ verification.	Age-verification, compliance, and fraud-prevention providers.	No.
Commercial information	Yes	E-commerce, payment, shipping, fulfillment, customer-support, analytics, and compliance providers.	Yes, where purchase or browsing activity is used for targeted advertising.
Internet or network activity	Yes	Hosting, security, analytics, advertising, and technology providers.	Yes, where advertising cookies, pixels, or similar technologies are used.
Geolocation data	Approximate location only, unless another feature is enabled.	Shipping, tax, compliance, analytics, and advertising providers.	Yes, for approximate location where advertising technologies are used.
Audio, electronic, or visual information	Possible, if you submit images or communications or if support calls are recorded.	Customer-support, review, compliance, or legal providers.	No.
Inferences	Possible, such as product interests, preferences, or audience segments.	Analytics, advertising, and marketing providers.	Yes, where used for targeted advertising.
Sensitive personal information	Possible, including date of birth, ID data, account credentials, financial/payment data, and verification information.	Payment, age-verification, fraud-prevention, security, and compliance providers.	No. We do not knowingly sell/share sensitive personal information.

We use and disclose personal information for the business and commercial purposes described in this Privacy Policy. We do not use or disclose sensitive personal information for purposes that would require a right to limit under California law unless we provide the required notice and choice.

California residents may request information about certain disclosures of personal information to third parties for their own direct marketing purposes under California Civil Code Section 1798.83, if applicable, by contacting us at support@whitelip.com with “California Shine the Light Request” in the subject line.

Residents of other states may have additional rights under laws such as those in Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Delaware, Iowa, Montana, Tennessee, Minnesota, New Jersey, and other states as they become effective. Where those laws apply to Whitelip, we will honor applicable rights and opt-out preference signals as required.

17. Children and Persons Under 21

The Site and products are not intended for persons under 21. We do not knowingly collect personal information from persons under 21, and we do not knowingly sell or share personal information of persons under 16. If you believe a person under 21 has provided personal information to us, contact us at support@whitelip.com so we can review and take appropriate action.

Parents or guardians who believe a child has submitted personal information may contact us to request deletion, subject to legal and compliance obligations.

18. International Users

The Site is directed primarily to users in the United States. If you access the Site from outside the United States, you understand that your personal information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. Those countries may have data-protection laws different from those in your jurisdiction.

If we specifically offer goods or services to users in the European Economic Area, United Kingdom, Switzerland, or another jurisdiction with additional privacy requirements, supplemental disclosures or rights may apply. You may contact us at support@whitelip.com with privacy questions or requests.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, products, service providers, or business operations. The updated Privacy Policy will be posted on the Site with a new effective date. If required by law, we will provide additional notice or obtain consent for material changes.

20. Contact Us

For questions, privacy requests, complaints, or appeals, contact us at support@whitelip.com.

Mailing address: Whitelip Inc., 150 N Michigan Ave, Suite 1950, Chicago, Illinois 60601, United States.