FeNau US Privacy Policy & California Privacy Notice

Effective Date: 6th of May 2026
Applicability: United States Operations

This Privacy Policy explains how FeNau ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit our website, communicate with us, or make a purchase. We are committed to protecting your personal data in compliance with applicable US state and federal laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you ("Personal Information"). Depending on your interactions with FeNau, we may collect the following categories of information:

• Identifiers & Contact Information: Name, shipping/billing address, email address, telephone number, and WhatsApp number (if you contact us via WhatsApp Business).
• Commercial Information: Records of products or services purchased, obtained, or considered, as well as purchasing histories.
• Financial Information: Payment details processed securely through our third-party payment gateways (e.g., PayPal). We do not store full credit card numbers on our servers.
• Internet or Network Activity: Browsing history, search history, IP address, browser type, operating system, and information regarding your interaction with our website and advertisements (collected via server logs and cookies).
• Professional or Employment Information: If you apply for a job with us via email, we collect your resume, qualifications, and employment history.
• User-Generated Content: Images, files, or custom designs you submit to us via email or WeTransfer for personalized products.

2. How We Use Your Information

We use the collected information for legitimate business purposes, including:

• Fulfilling your orders, processing payments, and managing shipping logistics (e.g., via our ERP system Microtech).
• Responding to your inquiries via email, contact forms, or WhatsApp.
• Sending marketing communications, newsletters (via Brevo), and SMS promotions, provided you have opted in.
• Evaluating creditworthiness using third-party credit agencies (e.g., Creditsafe) when you choose invoice or delayed payment methods.
• Improving website performance, security, and user experience using tools like Google reCAPTCHA, Google Maps, and functional cookies.

3. Cookies, Tracking, and Targeted Advertising

We use cookies, web beacons, pixels, and similar tracking technologies to analyze site traffic and deliver targeted advertising. Under California law (CCPA/CPRA), the use of these third-party marketing tools may constitute the "sharing" or "selling" of Personal Information for cross-context behavioral advertising.

Our advertising and analytics partners include, but are not limited to:

• Analytics: Google Analytics 4, Hotjar.
• Advertising & Retargeting Pixels: Meta Pixel (Facebook/Instagram), TikTok Pixel, Google Ads Conversion Tracking, LinkedIn Insight Tag, and HubSpot.
• Affiliate Tracking: ADCELL Partner Program.

These third parties may collect information about your online activities over time and across different websites. You have the right to opt-out of this tracking (see Section 5).

4. Third-Party Service Providers

We may share your data with trusted third-party vendors to facilitate our services. These include payment processors (PayPal, Sofort, Giropay, Ratepay), shipping carriers, email/SMS marketing platforms, file transfer services (WeTransfer), and consent management platforms (CookieFirst). We also embed third-party content (YouTube, Vimeo, Google Fonts, FontAwesome, Social Media Plugins), which may collect your IP address when you interact with them.

5. California Privacy Rights (CCPA / CPRA)

If you are a resident of California, you have the following explicit rights regarding your Personal Information:

• Right to Know and Access: You may request disclosure of the specific pieces and categories of Personal Information we have collected about you over the past 12 months, the sources of that data, and the business purpose for collecting it.
• Right to Delete: You have the right to request the deletion of your Personal Information, subject to certain legal exceptions (e.g., completing a transaction, preventing fraud, or complying with legal obligations).
• Right to Correct: You may request that we correct any inaccurate Personal Information we maintain about you.
• Right to Opt-Out of "Sale" or "Sharing": Because we use third-party advertising pixels, you have the right to opt-out of the "sharing" of your data for targeted advertising. You can exercise this right by clicking the "Do Not Sell or Share My Personal Information" link in our website footer or via our Cookie Consent banner.
• Right to Limit Use of Sensitive Information: You may direct us to limit the use of any sensitive data to only what is strictly necessary to perform our services.
• Right to Non-Discrimination: FeNau will never deny goods, charge different prices, or provide a different level of service if you exercise your privacy rights.

To exercise your rights: Please submit a verifiable consumer request to us at info@fenau.eu or call us at +1 (773) 493-4879. We will verify your request by matching the identifying information you provide with the personal information we already maintain.

6. Data Security and Limitation of Liability

We implement commercially reasonable administrative, technical, and physical security measures to protect your Personal Information. However, no electronic transmission or data storage system is 100% secure.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, FENAU EXPRESSLY DISCLAIMS ANY LIABILITY FOR UNAUTHORIZED ACCESS TO, DISCLOSURE OF, OR LOSS OF YOUR PERSONAL INFORMATION. IN NO EVENT SHALL FENAU BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, OR PUNITIVE DAMAGES ARISING OUT OF OR RELATING TO A DATA BREACH, HACKING, OR SECURITY INCIDENT.

7. Dispute Resolution: Arbitration and Class Action Waiver

Binding Arbitration: Any dispute, claim, or controversy arising out of or relating to this Privacy Policy, your privacy rights, or the breach thereof, shall be settled exclusively by binding arbitration administered by the American Arbitration Association (AAA) in Chicago, Illinois. You explicitly waive your right to a trial by jury.

Class Action Waiver: YOU AND FENAU AGREE THAT ANY PROCEEDINGS TO RESOLVE DISPUTES WILL BE CONDUCTED ONLY ON AN INDIVIDUAL BASIS AND NOT IN A CLASS, CONSOLIDATED, OR REPRESENTATIVE ACTION.

8. Children's Privacy (COPPA)

The FeNau website is intended for a general adult audience and is not directed at children. We do not knowingly collect Personal Information from children under the age of 16. If we become aware that we have collected such data without verified parental consent, we will delete it immediately.

9. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or legal requirements. The updated version will be indicated by an updated "Effective Date" at the top of this page.