PRIVACY POLICY

SUNNLL, LLC PRIVACY POLICY

Effective: February 26, 2026

SCOPE OF THE PRIVACY POLICY

This Privacy Policy explains how SUNNLL, LLC (collectively referred to as "SUNNLL," "we," "our," or "us") collects, uses, and shares information about you ("you," "your," or "user") when you use our services. These services include, but are not limited to, our website with the homepage at sunnll.com, any applications we may provide (including mobile apps), all products and services we may offer from time to time through our website and/or related applications, our official social media pages (such as Instagram, Twitter, and Facebook), and any other forms of interaction you have with us (our website, applications, products, services, and social media pages are collectively referred to as the "Services").

This Privacy Policy also outlines the legal rights and responsibilities of both you and us regarding "Personal Information"—information that identifies you or can be used to identify you, such as your name, contact details, user account information, and data about how you use our website. SUNNLL takes full responsibility for protecting the safety and security of the Personal Information we process and is committed to upholding your privacy rights.

APPLICABILITY OF SUNNLL’S PRIVACY POLICY

This Privacy Policy is part of our Terms of Use, which govern your access to and use of the Services. In the following content, "use" shall collectively refer to accessing, using, transmitting, or exchanging information, as well as utilizing or availing of features, functions, or activities related to the Services.

This Privacy Policy applies to all Personal Information we collect from or about you through the methods described below (see "Information We Collect" and "How We Use Your Information") to provide the Services. It applies regardless of the means used to access or use the Services. Additionally, this Privacy Policy covers our targeted content—including online offers and advertisements for products and services—that you may see on third-party websites, platforms, and applications ("Offer Sites") based on your online activities. These Offer Sites may have their own privacy policies and terms of service, and we encourage you to review them before using those sites.

This Privacy Policy does not apply to information collected about you by third parties, such as SUNNLL’s service providers (including, but not limited to, shopline Inc., which hosts our e-commerce website; PayPal, Inc., which processes payments on our behalf; and our social media pages). The collection and use of your information by such third parties are governed by their respective privacy policies, statements, and practices. We are not responsible or liable for any third party’s compliance with these policies under any circumstances.

This Privacy Policy also does not apply to websites that link to SUNNLL’s website or that may be accessed through the Services. We may provide links to other websites containing information we believe is useful or valuable to you. However, we have not evaluated the security of these linked websites, and you should not assume they have a privacy policy equivalent to ours. If you access a third-party website through a link we provide, you will be subject to that website’s privacy policy. SUNNLL is not responsible for the content of any linked webpages. If you have questions about the privacy, security, or content of these sites, please contact the relevant parties at those websites directly.

SUNNLL, LLC is a subsidiary of Color Image Apparel Inc.

ACCEPTANCE OF THE PRIVACY POLICY

By using SUNNLL’s Services (including our website), you acknowledge and accept the terms of this Privacy Policy. If you do not agree to these terms, please do not use the Services. Your continued use of the Services after changes to this Privacy Policy are posted will constitute your acceptance of those changes.

AGE OF CONSENT

By accessing SUNNLL’s Services, you represent and warrant that you are at least the age of majority in your state or province of residence. If you are of the age of majority, you may also provide consent for your minor dependents to use the Services.

INFORMATION WE COLLECT

Information You Provide Voluntarily

We collect information that you provide directly to us. For example, this includes information you provide when you use our website, shop at our store, call us, create an online account, sign up for our emails, enter a giveaway, sweepstakes, contest, promotion or survey, communicate with us through a third-party social media platform (such as Facebook or Instagram), request customer support, apply for a job or otherwise interact with us.

Providing your personal information is voluntary; however, if you choose not to provide some or all of the information we request, we may not be able to provide you with certain products, services, or information.

The types of information you may provide directly include, but are not limited to: your name, shipping address, billing address, zip code, phone number, email address, date of birth, credit card or payment information, product and communication preferences, family member details, demographic information, and any other information you choose to disclose to SUNNLL.

In some cases, we may also collect information you provide about other people, such as when you purchase a gift card for another person and request electronic delivery, create and share a "wish list," or order products to be shipped to another person. We will only use this information to fulfill your request and will not send marketing communications to your contacts unless they have individually opted in to receive such communications.

Information Collected Automatically

To enhance the quality of your online experience, SUNNLL, its partners, and/or vendors automatically collect certain information about you when you access or use our website or Offer Sites, interact with our emails or online advertisements, or conduct transactions with us. This automatically collected information includes:

Log File Information: We collect data about your use of our website, such as your browser type, access dates and times, pages viewed, Internet Protocol (IP) address, and the referring link through which you accessed our website. An IP address is a unique number that identifies the computer or device you use to access the Internet. It allows our server to send you requested web pages and may reveal your Internet Service Provider’s server. We track and aggregate this information to analyze trends and statistics (e.g., traffic flow and feature usage) for internal purposes, such as improving our website, managing operations, and diagnosing technical issues. We may also share this aggregated, non-identifiable information with third parties as part of our business activities.
Cookies and Similar Technologies: Our website, online advertisements, and emails use first-party and third-party "cookies," pixel tags, and other technologies to automatically collect information about you (e.g., browser type, pages viewed, links clicked, and other actions). A cookie is a small data file sent from a web server to your browser and stored on your computer’s hard drive. These technologies help us facilitate navigation, display information effectively, personalize your experience, understand how users interact with our website, market our products and services, measure marketing campaign success, and enhance security.

Most web browsers are set to accept cookies by default. You can adjust your browser settings to refuse all cookies or notify you when a cookie is being placed. However, certain features of our website (such as the shopping cart) may not function properly if cookies are disabled, and you may need to re-enter information each time you use the website. For more details about cookies and how to disable them, please refer to our Cookie Policy.

When using Google Analytics, we have configured the service to anonymize your IP address as soon as data is received by the Analytics Collection Network, prior to any storage or processing. To opt out of Google Analytics tracking across all websites, visit https://sunnll.com/

Transaction Information: When you purchase or return a product, we collect details about the transaction, including product information, and the date and location of the purchase or return.
Mobile Device Information: If you access our website from a mobile or smartphone device, we may collect information about your location and your device (e.g., unique device identifiers).
Information from Third-Party Sources: We also receive information about you from third parties, including service providers (such as shopline, PayPal, and Google) and social media platforms where you interact with us. This information is added to the data associated with your account.

Information We Do Not Intend to Collect

When you create an account on our website, you may provide information such as your first and last name, email address, password, date of birth, and other details. SUNNLL does not intend to collect or retain records of sensitive personal information, data regarding minority status, or data from third parties that is not expressly authorized by this Policy or a written contract. We do not knowingly contact or collect information from individuals under the age of majority in their state or province of residence, and the Services are not intended to solicit information from minors.

TEXT MESSAGE/SMS CONSENT AND OPT-OUT

We may send you text messages via an automated dialing system ("Text Messages") in the following circumstances:

Shipping Alerts: If you choose to provide your mobile phone number, you may receive Text Messages containing shipping updates from our third-party shipper, DHL Express ("DHL"), via an automated dialing system. By providing your mobile phone number, you expressly consent to receive these automated Text Messages from DHL. Message and data rates may apply, and you should check with your mobile carrier for details. You can opt out of future shipping Text Messages by following the opt-out instructions included in DHL’s messages. For information on how DHL manages your data, please review DHL’s privacy policy.
Marketing Text Messages: If you sign up for our marketing Text Messages, we may send you periodic updates about products, promotions, or offers we believe may interest you. We will only send these messages if you first provide your voluntary consent (consent is not required to complete a purchase). You can opt out of marketing Text Messages by following the opt-out instructions included in our messages. Message and data rates may apply.

We may share your mobile phone number with service providers contracted to assist with the above activities, but we will not share it with third parties for their own marketing purposes without your consent. You acknowledge that Text Messages are transmitted through third-party mobile network providers, and we cannot control factors affecting delivery (e.g., carrier limitations). We do not guarantee the availability or performance of this service, including liability for delays or message failures, and expressly disclaim liability related to third-party carriers or service providers.

SECURITY OF PERSONAL INFORMATION TRANSMISSION

Unfortunately, transmitting information via the Internet or email is not entirely secure. While we will use commercially reasonable efforts to protect the Personal Information you submit to us, we cannot guarantee the security of data transmitted to our website—any transmission is at your own risk. Once we receive your information, we will use appropriate security procedures and features to prevent unauthorized access.

HOW WE USE YOUR INFORMATION

We may use your Personal Information to provide products and services, support our business operations, and enhance your experience. Specific uses include:

To Provide, Improve, and Develop the SUNNLL Website and Services

Fulfill and process your orders (e.g., shipping products, sending order confirmations and shipment updates, and processing returns).
Provide customer support.
Operate, protect, improve, and optimize the website and user experience (e.g., conducting analytics and research).
Communicate with you via email, postal mail, telephone, text message, or other means (e.g., product updates, security alerts, account notifications, and promotional offers).
Communicate with third parties using information you provide (e.g., notifying a gift recipient).
Personalize your shopping experience (e.g., saving shipping information for future purchases).
Address product or service issues and develop new offerings.
Enable in-store and online technology features.
Organize local community events, promotions, and in-store experiences.
Facilitate social media sharing.
Administer contests and promotions.
Understand your shopping and product preferences.
Fulfill contractual obligations to you.
Conduct profiling based on your website interactions, search history, profile information, and preferences to personalize your experience.

We process this information based on our legitimate interest in improving the website and user experience, and where necessary to fulfill our contractual obligations to you.

To Create and Maintain a Trusted and Safe Environment

Prevent, detect, mitigate, and investigate fraud, security breaches, and illegal activities.
Conduct security investigations and risk assessments.
Verify or authenticate information.
Protect the rights, property, safety, and security of SUNNLL, our employees, customers, and others.
Comply with applicable laws, government requests, and legal processes.
Resolve disputes and enforce our agreements with third parties.
Enforce our Terms of Use and other policies.

We use your Personal Information for automated decision-making through our third-party service provider shopline to prevent fraud during checkout. shopline uses Personal Information to block potentially fraudulent transactions (see shopline’s Privacy Policy for details). We process this information based on our legitimate interest in protecting the website, fulfilling contractual obligations, and complying with laws.

To Provide, Personalize, Measure, and Improve Advertising and Marketing

Send promotional messages, marketing materials, and advertising (including social media ads) based on your preferences.
Personalize, measure, and optimize our advertising.
Administer referral programs, rewards, surveys, and promotions.
Conduct profiling to send targeted marketing communications.

We process this information based on our legitimate interest in marketing products or services that may interest you. You can opt out of marketing communications by following the unsubscribe instructions in our emails or updating your account settings.

Other Uses

With your consent.
To protect your vital interests or the interests of others.
To fulfill a task in the public interest.
For our legitimate business purposes (e.g., updating records, providing services, conducting business analysis, preventing fraud, communicating with you, and participating in legal proceedings). We will not prioritize our legitimate interests over your rights.

HOW WE SHARE YOUR INFORMATION

We share your Personal Information with third parties under confidentiality agreements or as described below:

Affiliated Brands: If you provide Personal Information to any Color Image Apparel Inc. brand (including SUNNLL, Bella+Canvas, Cody, or Ingrid & Isabel), we may share that information with other Color Image Apparel Inc. brands.
Your Public Disclosures: Any Personal Information you post to public forums (e.g., our social media pages, blogs, or product reviews) will become public.
Third-Party Service Providers: We share information with service providers who perform services on our behalf (e.g., hosting our e-commerce platform, processing payments, sending communications, and conducting surveys). These providers are only authorized to use your information to fulfill their services to us. Third parties such as shopline and PayPal have their own privacy policies, and we encourage you to review them.
Partner Companies: We may share information when collaborating with other companies to offer products, services, or promotions.
Social Media Sharing: If you log into your account using a social media platform, we may share information with that platform (governed by the platform’s privacy policy).
Legal Requirements: We may share information to comply with laws, legal processes, government requests, or to protect SUNNLL’s rights, property, or safety.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your Personal Information may be transferred as part of the business assets.
Professional Advisors: We may share information with our legal, regulatory, audit, and other professional advisors for legitimate business purposes.

Third parties do not have the independent right to share your Personal Information. We will take reasonable steps to ensure third parties comply with applicable data protection laws.

HOW WE STORE YOUR INFORMATION

We store your Personal Information for as long as necessary to fulfill the purposes for which it was collected (e.g., providing services, complying with laws, or pursuing legitimate business interests). We may delete or irreversibly anonymize information when it is no longer needed. Deleted information may remain in our archives but will not be used for active processing. You should retain your own records, as we may delete information at our discretion.

HOW WE PROTECT YOUR PERSONAL INFORMATION

We use physical, technical, and operational measures to protect your Personal Information from unauthorized access, use, or disclosure. This includes:

Limiting access to Personal Information to authorized staff and service providers.
Using password protection and other technical security measures.

However, electronic communications (e.g., email) are not fully secure. We recommend you do not send confidential information via email.

For online transactions, we use Secure Sockets Layer (SSL) technology to encrypt data transmitted between your computer and our servers. Encrypted data is stored on a server not connected to the Internet. You can verify a secure connection by checking for an unbroken key or closed lock icon in your browser.

LOCATION OF YOUR PERSONAL INFORMATION AND YOUR CONSENT

Consent to International Data Transfer

SUNNLL is based in the United States (U.S.), where data privacy laws may be less stringent than in the European Union (EU) and other jurisdictions. We store and process your information in the U.S.

Our e-commerce platform is hosted by shopline Inc. (a Canadian company), which may transmit your information outside your country of residence. By submitting your Personal Information or using the Services, you consent to the transfer, processing, and storage of your information outside your country of residence to our affiliates, partners, and service providers for the purposes outlined in this Privacy Policy.

Some recipients may be located in countries with lower data protection standards than the EU. To ensure your information is protected, we use legally recognized safeguards, such as:

Transferring data to countries with privacy laws equivalent to the EU’s.
Using contracts requiring recipients to meet EU data protection standards.
Transferring data to organizations participating in the EU-U.S. Privacy Shield Framework.

Consent to Electronic Notice of Security Breaches

We will take reasonable steps to protect your Personal Information, but security breaches cannot be guaranteed against. If a breach occurs, we may notify you by posting a notice on our website or sending an email to the address we have on file. Your consent to electronic notice includes notice on behalf of others for whom you act.

YOUR OPT-OUT CHOICES

Targeted Advertising Opt-Out

We work with third parties (e.g., Google, Facebook) to serve targeted ads based on your browsing activities. You can learn more about targeted advertising at the Network Advertising Initiative’s website. To opt out of most behavioral advertising:

Visit the opt-out page for U.S. users.
For EU users, visit the EU opt-out page.
Adjust your browser settings to block cookies.

Marketing Communications Opt-Out

You can opt out of marketing emails or postal mail by:

Not providing your Personal Information (note: some information may be required to make