1. Information We Collect

We collect personal information in the following categories. The specific information we collect depends on how you interact with us.

1.1 Information you provide directly

• Contact information, such as name, email address, postal address, and phone number.
• Account credentials, such as username and password.
• Payment information, such as credit card details, billing address, and order history. Payment card numbers are collected and processed by our payment processors and are not stored by Salt Strong.
• Membership and purchase information, such as products purchased, subscription status, and member preferences.
• Communications, such as the content of messages you send us, customer support inquiries, survey responses, and reviews.
• Marketing preferences, such as your subscription to our email newsletters and SMS messaging program.

1.2 Information collected automatically

• Device and browser information, such as IP address, browser type, operating system, device identifiers, and mobile carrier.
• Usage information, such as pages viewed, links clicked, search terms, session duration, referring and exit pages, and timestamps.
• Approximate location information, derived from your IP address.
• Cookie identifiers, advertising identifiers, and similar identifiers assigned to your device or browser.
• App usage data, such as screens viewed, in-app actions, and crash reports for users of our mobile application.

1.3 Information from third parties

• Information from social media platforms when you interact with us through those platforms or use a social login.
• Information from advertising and analytics partners about how you found our Services and how you interact with our advertisements.
• Information from payment processors and fraud-prevention vendors necessary to process transactions and protect against fraud.
• Information from referral and affiliate partners when you are referred to us by another participant in a referral program.

1.4 Sensitive information

We do not intentionally collect categories of “sensitive data” as defined under applicable U.S. state privacy laws, including racial or ethnic origin, religious beliefs, mental or physical health diagnoses, sexual orientation, citizenship or immigration status, genetic or biometric data, personal data from a known child, or precise geolocation data. If we collect precise geolocation data through any feature of our mobile application, we will request your consent before doing so and use the information only for the purpose you have authorized.

2. How We Use Personal Information

We use personal information for the following business purposes:

• Providing and operating the Services, including processing memberships, fulfilling product orders, and providing customer support.
• Communicating with you, including sending order confirmations, account notifications, fishing reports, and other transactional messages.
• Marketing and promotional communications, including email newsletters, SMS messages where you have consented, and personalized offers.
• Advertising, including measuring the effectiveness of our advertising and delivering advertisements that may be relevant to your interests on third-party sites and applications. See Section 4 for details on targeted advertising and your choices.
• Analytics and product improvement, including understanding how users interact with the Services and developing new features.
• Security and fraud prevention, including detecting and preventing fraudulent transactions, account takeovers, and other unlawful activity.
• Compliance with legal obligations, including tax, accounting, and regulatory requirements.
• Enforcing our Terms and Conditions and protecting our legal rights.

3. Cookies, Pixels, and Other Tracking Technologies

We and our service providers use cookies, web beacons, pixels, software development kits (SDKs), and similar technologies to operate the Services, understand how users interact with them, and deliver advertising.

3.1 Categories of cookies and similar technologies we use

• Strictly necessary cookies. Required for the Services to function. These cannot be switched off in our systems. They are usually set in response to actions you take, such as logging in, filling out forms, or setting privacy preferences.
• Performance and analytics cookies. Help us count visits and traffic sources, measure and improve performance, and understand how users interact with the Services.
• Functional cookies. Enable enhanced functionality and personalization, such as remembering your preferences.
• Advertising and targeting cookies. Set by us and our advertising partners to deliver advertisements that may be relevant to your interests and to measure the effectiveness of those advertisements.

We also use web beacons, pixels, and clear gifs, which are small graphic files containing a unique identifier that enable us to recognize when someone has visited the Services or opened an email we sent. These technologies often depend on cookies to function.

3.2 Categories of third-party providers we work with

We engage third-party service providers that fall into the following categories. The specific providers in each category may change over time. You can view the current list of cookies and similar technologies active on our Services, and manage your preferences for each category, on our Your Privacy Choices page accessible from the footer of saltstrong.com.

• Analytics and performance providers. Help us understand how visitors use our Services, including page views, traffic sources, session duration, and crash reports.
• Advertising and conversion tracking providers. Help us deliver advertisements that may be of interest to you on third-party websites and applications, and measure the effectiveness of those advertisements.
• Session analytics providers. Provide anonymized session recordings, heatmaps, and similar behavioral data that help us understand user experience and improve the Services.
• Customer relationship and marketing automation providers. Help us manage customer relationships, deliver newsletters and other communications, and track marketing campaign engagement.
• Mobile app analytics and attribution providers. Help us understand how users interact with our mobile application and measure the effectiveness of our mobile advertising campaigns.

3.3 Managing your preferences

• Your Privacy Choices page. Visit our Your Privacy Choices page, accessible from the footer of saltstrong.com, to view the current list of cookies and similar technologies active on our Services and manage your preferences by category.
• Browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or alert you when cookies are placed. Blocking cookies may affect certain features of the Services.
• Mobile device settings. On iOS, you can manage tracking permissions through your device settings under Privacy & Security and deny App Tracking Transparency permission to limit cross-app tracking. On Android, you can manage ad personalization through your device settings.

We currently do not respond to “Do Not Track” browser signals. We will update this Policy if that changes.

4. “Sale” of Personal Information and Targeted Advertising

Salt Strong does not sell personal information for monetary consideration.

Salt Strong does engage in “targeted advertising,” as that term is defined under applicable U.S. state privacy laws. This means we allow third-party advertising partners to use cookies, pixels, and similar technologies on our Services to deliver advertisements to you on other websites and applications based on your interaction with our Services.

We do not process personal data for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

You have the right to opt out of targeted advertising. To exercise this right, please use our Your Privacy Choices page accessible from the footer of our website, or follow the platform-specific opt-out instructions in Section 3 above.

5. How We Share Personal Information

We share personal information in the following categories:

• Service providers and processors. We share personal information with vendors that perform services on our behalf, including web hosting, payment processing, customer relationship management, email and SMS delivery, analytics, advertising measurement, customer support, fraud detection, and IT services. These vendors are contractually restricted from using personal information for any purpose other than providing services to us.
• Advertising partners. As described in Section 4, we share information about your interaction with our Services with advertising platforms to deliver and measure advertising.
• Affiliates. We may share personal information with affiliated entities that are owned by or under common control with Salt Strong, LLC, for the purposes described in this Policy.
• Legal and safety. We may disclose personal information when we believe in good faith that disclosure is necessary to comply with applicable law, respond to legal process, protect the rights, property, or safety of Salt Strong, our users, or the public, or detect and prevent fraud.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction.
• With your consent. We may share personal information for any other purpose with your consent.

6. Your Privacy Rights

6.1 Rights available to all users

Regardless of where you live, you may:

• Unsubscribe from our marketing emails by clicking the “unsubscribe” link in any marketing email.
• Stop receiving SMS messages by replying STOP to any SMS message from us. Additional terms governing our SMS marketing program are set out in our Terms and Conditions.
• Update your account information by logging in to your account or contacting us.
• Contact us with questions or concerns about our privacy practices using the contact information in Section 13.

Opting out of marketing communications will not stop transactional or account-related messages, such as order confirmations, subscription notices, or messages about changes to this Policy or our other agreements.

6.2 Rights of Virginia residents

If you are a resident of Virginia, you have the following rights under the Virginia Consumer Data Protection Act, Va. Code Ann. § 59.1-577:

• Right to confirm and access. You have the right to confirm whether we are processing your personal data and to access that data.
• Right to correct. You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and the purposes of processing.
• Right to delete. You have the right to request deletion of personal data we have collected about you.
• Right to data portability. You have the right to obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format.
• Right to opt out. You have the right to opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Salt Strong does not sell personal data and does not engage in profiling that produces legal or similarly significant effects. We do engage in targeted advertising, and you may opt out of that processing as described in Sections 4 and 6.3.

6.3 How to exercise your rights

To exercise any of the rights described above, please use one of the following methods:

• Visit our Your Privacy Choices page, accessible from the footer of saltstrong.com.
• Email us at fish@saltstrong.com.
• Write to us at Salt Strong, LLC, Attn: Privacy, 250 Magnolia Avenue SW, Suite 218-22, Winter Haven, Florida 33880.

Please describe your request with sufficient detail so we can properly respond. Identify the right you are exercising and provide enough information for us to verify your identity. The information you provide in your request will be used solely to verify your request and respond to it. We may ask for additional information to authenticate your identity. We may decline a request if we are unable to authenticate the requester or if we have reasonable grounds to believe the request is fraudulent.

In response to a request for access, we will provide the personal information we have collected about you in the 12 months prior to our receipt of your request, except where a longer period is required by applicable law.

We will respond to your request within 45 days of receipt. If we need additional time, we will notify you within that 45-day period and may extend our response time by an additional 45 days. We will provide our response to you free of charge for up to two requests per year. If we determine that a request is excessive, repetitive, or manifestly unfounded, we may charge a reasonable fee or decline to act on the request, and we will explain that decision.

6.4 Authorized agents

You may designate an authorized agent to submit a privacy rights request on your behalf. If you use an authorized agent, we may require: (i) the agent to provide proof of your written permission to act on your behalf, (ii) confirmation directly from you that you have authorized the agent, or (iii) verification of your identity. We may deny a request from an agent who does not submit proof of authority.

6.5 No discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you Services, charge you different prices or rates, provide a different level or quality of Services, or suggest that you may receive a different price, rate, level, or quality of Services because you exercised your rights.

6.6 Right to appeal