Fried Ocean Store — Privacy Policy

Effective date: August 10, 2026 Applies to: the Fried Ocean merchandise store at shop.friedocean.com (the "Store")

This Privacy Policy explains how JBW Investments, Inc. handles personal information in connection with the Store. It is specific to the Store. The Fried Ocean publication at friedocean.com is covered by a separate privacy policy (currently version 2.1); this document is complete on its own and you do not need to read the publication policy to understand how the Store handles your data.

1. Who we are (data controller)

The Store is operated by:

JBW Investments, Inc. (doing business as "Fried Ocean") 466 Foothill Blvd. #108 La Cañada, CA 91011, USA Email: hello@friedocean.com

JBW Investments, Inc. is the controller responsible for the personal information described in this Policy.

2. Scope and relationship to the publication

This Policy governs personal information collected through the Store — browsing shop.friedocean.com, placing and receiving orders, contacting us about an order, and any Store newsletter sign-up. If you also visit or subscribe through the publication at friedocean.com, that activity is governed by the publication's own privacy policy. Where the same processing is described in both documents, we intend them to be consistent; the publication policy governs publication-side activity and this Policy governs the Store.

3. Personal information we collect

Information you provide:

• Name
• Email address
• Phone number (optional)
• Shipping address and billing address
• Order details (items, sizes, quantities)
• Payment information — card and payment details are collected and processed by our payment processor (Shopify Payments / Shop Pay); we do not receive or store full payment card numbers
• Messages you send us (e.g., order questions, defect reports, photos of a defect)
• Newsletter sign-up, if you choose to subscribe

Information collected automatically when you use the Store:

• IP address and approximate location derived from it
• Device and browser type, operating system, and device or advertising identifiers
• Pages viewed, links clicked, referring pages, session activity, and similar usage information
• Information collected through cookies, pixels, tags, and similar technologies (see Section 5)

Information from third parties:

• Order and fulfillment status from our print and fulfillment provider (Printify)
• Transaction and fraud-screening signals from our payment processor
• Audience, measurement, and advertising data from analytics and advertising partners

We do not intentionally collect sensitive personal information (as defined under California law) through the Store, and we do not ask you to provide it.

4. How we use personal information

We use personal information to:

• Process, fulfill, and deliver your orders, and produce items made to order
• Take payment and screen for fraud
• Send order confirmations, shipping notices, and other transactional messages
• Provide customer support and handle defect or delivery issues
• Operate, secure, debug, and improve the Store
• Measure and analyze Store traffic and performance
• Advertise the Store, including through cross-context behavioral advertising, where permitted
• Send marketing or newsletter emails where you have subscribed (you can unsubscribe at any time)
• Comply with legal, tax, accounting, and record-keeping obligations, and enforce our terms

5. Cookies, pixels, and the services we use

The Store uses cookies, pixels, tags, local storage, and similar technologies, some operated by us and some by third parties. The specific providers we use in connection with the Store are:

• Shopify — our e-commerce platform, checkout, hosting, and payment processing (Shopify Payments / Shop Pay). Shopify processes personal information as our service provider to run the Store and take payment.
• Printify — our print-on-demand and fulfillment provider. To fulfill your order, we share your name, shipping address, and order contents with Printify and its production/shipping partners. Printify acts as our service provider for fulfillment.
• Google Analytics 4 and Google tags — website analytics and advertising/measurement tags operated with Google and loaded through Google Tag Manager (GA4 measurement ID G-X0SHYZ8V3V; Google tag/container GT-5R3QPK9R). These set identifiers and collect usage information to help us measure Store activity and support advertising measurement.
• Meta Pixel (pixel ID 1455704836058170) — advertising and measurement operated with Meta Platforms, Inc. It collects identifiers and information about your activity on the Store to measure and deliver advertising, including advertising shown to you on Meta's platforms and elsewhere.
• Resend — delivery of transactional emails (such as order and shipping notifications), where used.
• Newsletter (Beehiiv) — if you subscribe to a Fried Ocean newsletter, your subscription and email-engagement data are processed by our newsletter platform, Beehiiv.
• Affiliate networks (Awin, Skimlinks, Amazon Associates) — affiliate links are used primarily on the publication at friedocean.com rather than in the Store. Where you follow an affiliate or outbound commerce link associated with Fried Ocean, these networks and the destination merchant may collect information under their own privacy policies.

You can control cookies through your browser settings. Where required by law, we recognize the Global Privacy Control (GPC) browser signal as a request to opt out of the "sale" or "sharing" of personal information (see Section 7).

6. How we disclose personal information

We disclose personal information to:

• Service providers that process personal information on our behalf under contract — including Shopify (platform, checkout, payments), Printify (fulfillment), Resend (transactional email), and Beehiiv (newsletter) — for the purposes described above and not for their own independent marketing.
• Advertising and analytics partners — including Google and Meta — in connection with the analytics and advertising technologies described in Section 5.
• Legal and safety recipients — where we believe disclosure is required by law, legal process, or to protect rights, safety, or property.
• Business transferees — in connection with a merger, acquisition, financing, asset sale, or similar transaction, subject to applicable law.

7. "Sale" and "sharing" of personal information

Consistent with the position taken in the publication's privacy policy, we disclose plainly: our use of advertising and measurement technologies — the Meta Pixel and Google Analytics 4 / Google advertising tags — to build audiences and deliver advertising across other websites and platforms constitutes a "sale" and/or "sharing" of personal information (including identifiers, internet or other electronic network activity, and inferences) under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), and may constitute "targeted advertising" or a "sale"/"share" under other U.S. state privacy laws.

You have the right to opt out. You can opt out of this sale/sharing by:

• Using the "Your Privacy Choices" / "Do Not Sell or Share My Personal Information" link on the Store, or
• Emailing hello@friedocean.com with the subject line "Do Not Sell or Share" and the email address associated with your activity.

Where required by law, we also honor the Global Privacy Control (GPC) signal as a valid opt-out request for the browser and device you use.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

8. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the rights below. The categories in the following table describe our practices in the 12 months preceding the effective date and on an ongoing basis.

CCPA category of personal information	Collected	Sources	Business/commercial purposes	Disclosed for a business purpose to	"Sold" or "shared"
Identifiers (name, email, postal address, IP, device/advertising IDs)	Yes	You; automatic; service providers	Fulfillment, payment, support, analytics, advertising, security, legal	Service providers; advertising/analytics partners	Yes (to advertising/analytics partners)
Customer records (name, address, payment information)	Yes	You; payment processor	Fulfillment, payment, fraud prevention, legal	Service providers (Shopify, Printify)	No
Commercial information (products purchased or considered, transaction history)	Yes	You; automatic	Fulfillment, support, analytics, advertising	Service providers; advertising/analytics partners	Yes
Internet or other electronic network activity (browsing, interactions, pixel data)	Yes	Automatic	Analytics, advertising, security, improvement	Advertising/analytics partners	Yes
Geolocation data (approximate, from IP)	Yes	Automatic	Analytics, fraud prevention	Advertising/analytics partners	Yes
Inferences (audience segments, preferences)	Yes	Derived	Advertising, analytics, improvement	Advertising/analytics partners	Yes
Sensitive personal information	Not intentionally collected	—	—	—	No

Your rights:

• Know / access the personal information we have collected, used, disclosed, and sold or shared
• Delete personal information we hold about you, subject to legal exceptions
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information (see Section 7)
• Limit the use of sensitive personal information (we do not use sensitive personal information for inferring characteristics)
• Data portability — receive a copy of your personal information
• Non-discrimination — we will not discriminate against you for exercising your rights
• Appeal — where your state grants an appeal right, you may appeal a decision on your request

How to exercise these rights: email hello@friedocean.com, or use the "Your Privacy Choices" link on the Store. We may need to verify your identity before responding, and you may use an authorized agent where the law permits. We will respond within the timeframes required by law.

9. Your UK and EU privacy rights (UK GDPR / EU GDPR)

We ship internationally, and this Section applies if you are in the United Kingdom or the European Economic Area. JBW Investments, Inc. is the controller.

Lawful bases for processing:

• Performing our contract with you (Article 6(1)(b)) — to accept, produce, fulfill, and deliver your order, take payment, and provide support.
• Consent (Article 6(1)(a)) — for marketing/newsletter emails and for non-essential cookies and advertising/measurement technologies, where consent is required. You may withdraw consent at any time.
• Legitimate interests (Article 6(1)(f)) — to secure and improve the Store, prevent fraud, and understand Store performance, balanced against your rights.
• Legal obligation (Article 6(1)(c)) — for tax, accounting, and record-keeping requirements.

International transfers: we and our service providers process personal information in the United States and other countries. Where we transfer personal information out of the UK or EEA, we rely on appropriate safeguards required by law, such as the European Commission's Standard Contractual Clauses (and the UK Addendum/IDTA), or another lawful transfer mechanism.

Your rights: access, rectification, erasure, restriction of processing, data portability, objection to processing (including to direct marketing), and withdrawal of consent. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).

10. Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy — including fulfilling your order, providing support, and meeting our legal, tax, accounting, and record-keeping obligations — and then delete or de-identify it. Order and transaction records are generally retained for the period required by applicable tax and commercial law.

11. Data security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children

The Store is not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not knowingly sell or share the personal information of anyone under 16.

13. Third-party links

The Store may link to third-party websites and services, including our payment processor and platform providers, which operate under their own privacy policies. We are not responsible for their practices.

14. Changes to this Policy

We may update this Policy. The "Effective date" above shows the most recent revision. Material changes will be posted on the Store.

15. Contact

Questions or requests about this Policy or your personal information:

JBW Investments, Inc. (dba Fried Ocean) 466 Foothill Blvd. #108, La Cañada, CA 91011, USA Email: hello@friedocean.com — we aim to reply within 2 business days.