Privacy Policy

Last Updated: August 6, 2026

Tones Digital LLC (DBA FourLeaf) (“FourLeaf,” “we,” “our,” or “us”) operates meetfourleaf.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or purchase from the Site. It also describes your rights under applicable U.S. privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and similar laws in other states.

1. Personal Information We Collect

When you use our Site, we collect the following categories of personal information as defined under California law:

Category of Personal Information

Examples

Purpose of Collection

Categories of Third Parties Shared With

Identifiers

Name, email address, phone number, shipping/billing address, IP address

Order fulfillment, customer support, marketing

Payment processors, shipping carriers, advertising partners, e-commerce platform provider (Shopify)

Commercial Information

Purchase history, products viewed, cart activity

Process transactions, customer service, analytics

E-commerce platform provider, logistics providers

Internet/Network Activity

Browsing history, referral URLs, device type, cookies, pixels

Site functionality, analytics, advertising

Advertising partners, analytics providers (e.g., Google Analytics)

Payment Information

Credit or debit card number (processed by our payment processor; we do not store full card numbers)

Complete transactions securely

Payment processors

Geolocation Data

Approximate location derived from IP address

Fraud prevention, regional offers, shipping calculations

Analytics providers, fraud-prevention vendors

Inferences

Preferences and interests inferred from browsing or purchase activity

Personalize experiences, targeted marketing

Advertising partners

We may also collect information you voluntarily provide when contacting customer support, entering a promotion, or subscribing to marketing communications.

Sensitive Personal Information

We do not collect or use Sensitive Personal Information (as defined by California law) for purposes other than those legally permitted, such as completing transactions, preventing fraud, or providing services you have requested.

2. Sources of Personal Information

We collect personal information directly from you (e.g., when you place an order or contact us), automatically through your use of the Site (e.g., via cookies and similar technologies), and from third parties such as our payment processors, shipping partners, and analytics or advertising providers.

3. How We Use Your Personal Information

We use your information to:

  • Process, fulfill, and ship your orders

  • Communicate with you about your purchases, account, or inquiries

  • Provide customer service and support

  • Detect, investigate, and prevent fraud or security incidents

  • Improve and optimize our Site, products, and marketing campaigns

  • Deliver advertising and promotions, including through targeted advertising where permitted

  • Comply with legal and regulatory obligations

4. How We Share Personal Information

We share your information only with trusted third parties necessary to run our business, including:

  • Service Providers: our e-commerce platform provider, payment processors, and shipping/logistics partners

  • Analytics Providers: such as Google Analytics, to understand traffic and Site performance

  • Advertising Partners: to deliver relevant ads across the web

  • Legal & Safety: where required to comply with law, respond to legal process, or protect our rights, property, or the safety of others

  • Business Transfers: in connection with a merger, acquisition, financing, or sale of assets

We do not sell your personal information for money. However, some of our advertising and analytics practices may be considered a “sale” or “sharing” of personal information under California and certain other state laws because they involve sharing identifiers or online activity with third-party advertising partners.

5. Cookies & Tracking Technologies

We and our third-party partners use cookies, pixels, and similar technologies to operate the Site, remember your preferences, analyze traffic, and deliver relevant advertising. You can control cookies through your browser settings; disabling cookies may affect Site functionality. Where required by law, we will request your consent before placing non-essential cookies.

6. Targeted Advertising & Opt-Out Rights

We may share information with third-party advertising partners to display personalized ads. Under some U.S. state laws (including California), this may be treated as a “sale” or “sharing” of your information.

  • You may opt out of these activities at any time by visiting our Your Privacy Choices page (linked in the footer of our Site) or by contacting us at contact@meetfourleaf.com.

  • We honor the Global Privacy Control (GPC) browser signal. If your browser sends a GPC signal, we treat it as an opt-out request for the device and browser you are using.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

  • Right to Know: request details about the categories and specific pieces of personal information we have collected about you, and the sources, purposes, and third parties involved.

  • Right to Delete: ask us to delete your personal information, subject to certain legal exceptions.

  • Right to Correct: request correction of inaccurate personal information.

  • Right to Opt-Out: direct us not to sell or share your personal information, or to use it for targeted advertising.

  • Right to Limit Use of Sensitive Personal Information: we do not use or disclose Sensitive PI beyond legally permitted purposes.

  • Right to Data Portability: request your information in a portable, readily usable format.

  • Right to Appeal: if we deny your request, you may appeal the decision as described below.

  • Non-Discrimination: we will not deny goods or services, charge different prices, or provide a different level of service because you exercised your privacy rights.

8. How to Exercise Your Rights

To exercise these rights, contact us at contact@meetfourleaf.com. We will verify your request using information you have already provided to us and, where permitted, you may designate an authorized agent to submit a request on your behalf. We will respond within the timelines required by applicable law. If we deny your request in whole or in part, you may appeal by replying to our decision with the word “Appeal” and a brief explanation; we will respond to appeals within the time required by law.

9. Other State Privacy Rights

If you are a resident of Colorado, Connecticut, Virginia, Utah, or another state with a comprehensive privacy law, you may have rights similar to those described above, including the right to know, delete, correct, and opt out of targeted advertising, the sale of personal data, or certain profiling. You may exercise these rights using the contact information in Section 8. We do not knowingly discriminate against residents of any state for exercising their privacy rights.

10. Children’s Privacy

Our Site is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children under 13 in a manner inconsistent with the Children’s Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at contact@meetfourleaf.com.

11. Data Retention & Security

We retain personal information only as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to satisfy legal, accounting, tax, or reporting requirements (typically no longer than 7 years for order and transaction records, unless a longer period is required by law). We use reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Do Not Track

Some browsers offer a “Do Not Track” (DNT) signal. Because there is no common industry standard for DNT, we do not currently respond to DNT signals, but we do honor the Global Privacy Control as described in Section 6.

13. Third-Party Links

Our Site may include links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing any personal information.

14. International Users

The Site is intended for users located in the United States. If you access the Site from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those of your country.

15. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. Material changes will be posted on this page with a revised “Last Updated” date, and, where required by law, we will provide additional notice.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Attn: Privacy Team

Email: contact@meetfourleaf.com