The protection of your personal information is an important concern for Krüger North America, Inc. ("KNA," "we," "us," or "our"). We collect and process your personal information exclusively in accordance with applicable United States federal and state privacy laws. This Privacy Policy explains what personal information we collect when you visit and shop on this website, how we use it, with whom we share it, and the choices and rights you have.

The company responsible for the processing of your personal information on this website ("controller" or "business") is:

Krüger North America, Inc.

1010 Lake St, Unit 106

Oak Park, Illinois 60301, USA

Tel. +1 708 851-3670

E-mail: Hello@maxinutrition.us

Privacy inquiries: For any question, request, or complaint regarding this Privacy Policy or our handling of your personal information, please contact us at the e-mail address or postal address above, marking your message "Attn: Privacy."

When you visit this website and use its various features, we process your personal information as described in detail below. In operating this website we work with external service providers whom we have carefully selected and bound by contractual obligations to protect your personal information.

Table of Contents

1. Cookies and Similar Technologies

2. Server Log Files

3. Analytics and Advertising Tools

4. Contact and Customer Service: Form and E-mail

5. Online Shop

6. Marketing Communications (E-mail and SMS)

7. Data Security

8. Retention of Personal Information

9. Children's Privacy

10. Your Privacy Rights and Choices

11. Changes to This Privacy Policy

1. Cookies and Similar Technologies

Each time you visit our website we use cookies, i.e. small text files that are stored in your browser. Cookies store certain settings and data for exchange with our systems via your browser. There are two basic types of cookies: session cookies, which are deleted as soon as you close your browser, and persistent cookies, which remain on your device for a longer or indefinite period. This storage helps us design our website and offers for you and makes them easier to use, for example by remembering certain entries so that you do not have to repeat them.

1.a Session Cookies

We use session cookies, which are retained until you close all browser windows. We need these cookies to process your requests on our website and to direct you to its various sub-pages. Session cookies are strictly necessary to operate the website; for example, they are required to offer you the shopping cart function across several pages. If you do not wish cookies to be used, you can block them in your browser settings. You can still visit our website, but you may not be able to use all of its functions.

1.b Persistent Cookies

In addition, we use persistent cookies, which remain on your device and enable us to recognize your browser on your next visit so that, for example, your preferences are retained. These cookies are automatically deleted after a specified period, which differs depending on the cookie. Our website is operated on the Shopify platform, which sets the cookies necessary to provide the store, remember your cart, keep you logged in to your customer account, and protect against fraud. Persistent cookies also allow us to recognize you as a new or returning visitor and to optimize the content of our website over time.

A list of the cookies set by our store, their purposes, and their duration is available [in our Cookie Notice / cookie banner]. Where required by applicable law, we will ask for your consent before setting cookies that are not strictly necessary, and you may withdraw that consent at any time through the cookie settings on our website.

1.c Cookie Settings

The storage period of cookies is shown in your web browser under "cookie settings," where you can choose between several default settings. Each browser has its own individual cookie settings, described in the respective browser help menu. The following links may help you set your cookie preferences:

•       Safari™: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac

•       Chrome™: https://support.google.com/chrome/answer/95647

•       Firefox™: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop

•       Microsoft Edge™: https://support.microsoft.com/microsoft-edge/manage-cookies

•       Opera™: https://help.opera.com/en/latest/web-preferences/#cookies

Some browsers also offer a "Do Not Track" signal or support the Global Privacy Control (GPC). Where required by applicable law, we treat a GPC signal as a valid request to opt out of the sale or sharing of your personal information (see Section 10).

2. Server Log Files

Your browser transmits access data, so-called server log files, which we and our hosting provider process each time you visit our website in order to guarantee system security and to compile usage statistics. In particular, the date and time of access, the name of the page accessed, your IP address, the referrer URL (the originating URL from which you accessed the website), the volume of data transmitted, and product and version information of the browser used are transmitted to us. This data is required to ensure system security, e.g. to identify and block an attacker in the event of a hacking attempt. Where IP addresses are anonymized, they are altered so that the information can no longer be assigned to a specific or identifiable person, or only with a disproportionately large expenditure of time, cost, and manpower.

3. Analytics and Advertising Tools

This website uses Google Analytics, a web analytics service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is transferred to a Google server in the USA and stored there. We have enabled IP anonymization where available so that your IP address is shortened before it is stored. On our behalf, Google uses this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet use.

We use Google Analytics to analyze and regularly improve the use of our website so that we can improve our offer and make it more interesting for you as a user. You can prevent the collection of your data by Google Analytics by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout or by adjusting your preferences in our cookie settings.

Google's privacy policy: https://policies.google.com/privacy. How Google uses data from sites that use its services: https://policies.google.com/technologies/partner-sites.

In addition, we may use the following analytics and advertising tools on this website: [Meta Pixel, TikTok Pixel, Google Ads, Klaviyo, Shopify Audiences]. These tools may collect information about your visit and use it to measure the effectiveness of our advertising and to show you MaxiNutrition ads on other websites and social media platforms. Under certain state privacy laws, this activity may be considered a "sale" or "sharing" of personal information or "targeted advertising." You may opt out as described in Section 10.

4. Contact and Customer Service: Form and E-mail

You can contact us directly using the contact form provided on our website. If you do so, you must provide your name and e-mail address and, in exceptional cases, your address and telephone number. We collect this information, your message, your IP address, and the time you submit the form.

We also offer you the opportunity to contact us directly via e-mail. If you click on the "e-mail" link on our website, the contact form of your e-mail provider will open and you can send us a message to our pre-registered e-mail address. We have no influence on the data processing by the e-mail program of your respective provider; we only create a link to it.

We use the information you send us via the contact form or e-mail exclusively to process your request, and we delete it as soon as the communication is completed unless legal retention obligations require further storage. We need your IP address and the time of submission for security reasons, so that we can identify automated access and hacking attempts and exclude them from renewed access. Customer service inquiries may be handled by a customer service provider acting on our behalf Influx.

5. Online Shop

In addition to the purely informational use of our website, you can also order our products online. In order to process an order we require further information from you; in addition, you may voluntarily make use of further offers such as a customer account.

If you use our shop to order our products, we collect, store, and process further personal information from you. This information is only collected when you provide it to us when ordering goods or opening a customer account. We need some information to process an order (e.g. name, shipping and billing address, e-mail address, telephone number, and payment information), and other information to provide you with the functionalities of your customer account (e.g. order history and saved addresses).

We use the information you provide exclusively for the fulfillment and processing of your order or the other offer you have chosen, such as the customer account. You can choose whether to enter the information necessary for a single order as a guest, or to create a customer account in which your information is saved for future purchases. Setting up a customer account is voluntary; you can also order from us without one.

If you set up a customer account with us, your information will be processed for as long as you do not delete this account. In addition to the information you provide, such as your name, e-mail address, and address, we also store your order history. You can request deletion of your customer account at any time by contacting us.

Our online shop is hosted on Shopify, a platform provided by Shopify Inc. (Ottawa, Canada) and its affiliates, including Shopify (USA) Inc. Shopify stores your information on secure servers and processes it on our behalf. Information about how Shopify handles personal information is available at https://www.shopify.com/legal/privacy.

We do not sell your personal information to third parties for money. However, without the cooperation of third parties it would not be possible for us to process your order. We therefore work together with various service providers, in particular:

•       external service providers who support us in the technical provision of our services, including Shopify as our e-commerce platform, and who have been carefully selected and bound by contract to protect your information;

•       fulfillment and shipping providers who are involved in processing and delivering your order UPS, USPS, FedEx

•       payment service providers for processing your payment, depending on your chosen method of payment: Shopify Payments (operated by Stripe), Shop Pay, PayPal, Apple Pay, and Google Pay;

•       e-mail and SMS marketing platforms Klaviyo and customer service providers acting on our behalf.

When you pay with PayPal, Shop Pay, Apple Pay, or Google Pay, your payment information is transmitted directly to the respective payment service provider and is subject to that provider's privacy policy. We do not receive or store your full card number. How PayPal handles your data is the subject of the contractual relationship between you and PayPal; PayPal's current privacy policy can be found at https://www.paypal.com/us/legalhub/privacy-full. You are free to choose any of the payment methods offered and are not obliged to use any particular one.

We may also disclose personal information where required by law, court order, or government request; to protect our rights, property, or safety or those of our customers; to detect and prevent fraud; or in connection with a merger, acquisition, or sale of all or part of our business.

6. Marketing Communications (E-mail and SMS)

If you sign up for our newsletter or opt in to receive text messages, we will use your e-mail address or mobile phone number to send you information about MaxiNutrition products, promotions, and news. You can unsubscribe from marketing e-mails at any time by clicking the "unsubscribe" link at the bottom of any e-mail. You can opt out of text messages at any time by replying STOP. Message and data rates may apply. Your consent to receive marketing messages is not a condition of purchase. Transactional messages (e.g. order confirmations and shipping updates) will continue to be sent as necessary to fulfill your order.

7. Data Security

In order to protect your personal information as well as possible, we use SSL/TLS encryption (https standard) together with technical and organizational security measures that are regularly adapted in accordance with the current state of the art. Payment transactions on our store are processed through PCI-DSS compliant payment providers. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Retention of Personal Information

If you order from us as a guest, your information will be blocked from further use once the contract has been fully performed and the purchase price has been paid in full, and deleted after expiry of the retention periods required by applicable tax, accounting, and commercial law, unless another legal basis permits further processing. If you have a customer account, we retain your information for as long as your account remains active. In general, we retain personal information only as long as necessary for the purposes described in this Privacy Policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements.

9. Children's Privacy

Our website and products are intended for adults. We do not knowingly collect personal information from children under the age of 13, and we do not knowingly sell or share the personal information of consumers under the age of 16. If you believe a child has provided us with personal information, please contact us at hello@maxinutrition.us and we will delete it.

10. Your Privacy Rights and Choices

Depending on the state in which you reside, you may have some or all of the following rights with respect to your personal information under applicable state privacy laws (including the California Consumer Privacy Act as amended by the California Privacy Rights Act, and comparable laws in other states):

•       Right to know / access: to request information about the personal information we have collected about you, including the categories and specific pieces of information, the sources, the purposes of collection, and the categories of third parties with whom it has been shared.

•       Right to correct: to request that we correct inaccurate personal information we hold about you.

•       Right to delete: to request that we delete personal information we have collected from you, subject to certain exceptions (e.g. to complete a transaction, comply with legal obligations, or detect fraud).

•       Right to data portability: to receive a copy of your personal information in a portable and readily usable format.

•       Right to opt out of sale, sharing, or targeted advertising: to direct us not to sell or share your personal information or use it for targeted advertising. You can exercise this right through the ["Do Not Sell or Share My Personal Information"] link in the footer of our website, through your cookie settings, or by enabling the Global Privacy Control in your browser.

•       Right to non-discrimination: we will not discriminate against you for exercising any of your privacy rights.

•       Right to appeal: in certain states, if we decline to act on your request, you may appeal our decision by contacting us as described below.

To exercise these rights, please contact us at hello@maxinutrition.us by mail at the address at the beginning of this Privacy Policy, or [by using our online Data Request Form]. We will need to verify your identity before responding to your request, which may require us to ask for information that matches what we have on file (e.g. the e-mail address associated with your order). You may designate an authorized agent to make a request on your behalf, in which case we may require proof of the agent's authority. We fulfill valid requests free of charge and within the time frames required by applicable law (generally within 45 days).

You may also withdraw any consent you have given to data processing at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Categories of personal information collected in the last 12 months: identifiers (name, postal address, e-mail address, telephone number, IP address, account ID); commercial information (products purchased, order history); internet or network activity (browsing and interaction with our website); geolocation data (approximate location derived from IP address); and inferences drawn from the above for the purpose of showing you relevant products and offers. We do not collect sensitive personal information other than the payment information necessary to process your order, which is handled by our payment providers.

California residents: California's "Shine the Light" law permits you to request information regarding the disclosure of your personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically.

Annex: Change Log vs. K-fee Privacy Policy (for legal review)

Status key: Kept = carried over with only brand/entity substitutions; Adjusted = wording changed to fit the US context; New = section not present in the K-fee original; Removed = deleted because it does not apply in the US.

Open items for the lawyers

•       Confirm the legal entity name exactly as registered (Krüger North America, Inc. vs. Kruger North America Inc.) and add the ZIP code, phone, and privacy e-mail.

•       Confirm which tracking pixels, e-mail/SMS platforms, and fulfillment partners will actually run on the MaxiNutrition store so the placeholders in Sections 3 and 5 can be finalized.

•       Confirm whether KNA meets the applicability thresholds of the CCPA/CPRA and other state privacy laws (Virginia, Colorado, Connecticut, Texas, Oregon, etc.); Section 10 is drafted to cover them generically.

•       Decide whether to publish a separate Cookie Notice or fold the cookie list into this Policy.

•       Note: this Privacy Policy covers data only. Product-specific legal texts (FDA supplement disclaimer, allergen notice, California Prop 65, Terms & Conditions, Return Policy) are separate documents and were not part of the K-fee file provided.