Privacy Policy

Effective date: 5 September 2026

1. Introduction

This Privacy Policy (“Policy”) describes the practices of North Row Brands (“Company”, “we”, “us” or “our”) with respect to the collection, use, disclosure and retention of Personal Information obtained through the website located at northrowbrands.com (the “Site”).

By accessing the Site or submitting an inquiry through it, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, you should not use the Site or submit information through it.

2. Definitions

For the purposes of this Policy:

  • “Personal Information” means any information that identifies, relates to, describes, or is reasonably capable of being associated with an identified or identifiable natural person.
  • “Processing” means any operation performed on Personal Information, whether or not by automated means, including collection, recording, storage, use, disclosure, or erasure.
  • “Service Provider” means a third party that processes Personal Information on our behalf and pursuant to our instructions.
  • “You” or “User” means the natural person accessing the Site or submitting information through it.

3. Categories of Information Collected

3.1 Information You Provide Directly

The contact form made available on the Site is the sole mechanism by which the Company solicits information from Users. When you submit an inquiry, we collect:

  • the name you supply;
  • the electronic mail address you supply;
  • the domain name identified as the subject of your inquiry; and
  • the contents of the message you compose.

3.2 Information Collected Automatically

In connection with the transmission of an inquiry, and by operation of our infrastructure provider rather than by your entry, we receive the following technical information concerning the originating connection:

  • Internet Protocol (IP) address;
  • approximate geolocation, comprising city, region, postal code and country, together with time zone, in each case as estimated from the IP address;
  • the internet service provider or autonomous system associated with the connection;
  • browser user-agent string and declared language preference; and
  • the referring URL, where transmitted by your browser.

Notice regarding geolocation. Geolocation derived from an IP address is an estimate and not a determination of your actual physical location. Such estimates frequently correspond to infrastructure operated by your internet service provider rather than to your own position, and may be inaccurate by a material distance. The Company does not treat this information as an accurate indication of any User’s whereabouts.

3.3 Information Collected by Site Analytics

Independently of any inquiry, and on every page of the Site, the analytics service identified in Section 6 collects:

  • a randomly generated identifier stored on your device, as described in Section 7;
  • the pages and page sections you view, and the order and duration of those views;
  • interactions with page elements, including clicks, form field changes, and the outcome of a contact form submission;
  • the referring URL, and any campaign parameters present in the address by which you arrived;
  • browser, operating system, device type, screen dimensions and declared language;
  • approximate geolocation, estimated from IP address and subject to the notice in Section 3.2; and
  • diagnostic reports of errors occurring in your browser while using the Site.

The Company does not attach your name, electronic mail address, or the contents of any inquiry to this analytics information.

3.4 Information Not Collected

The Site does not provide for the creation of user accounts, does not require authentication, and does not offer newsletter subscription. The Company does not knowingly collect payment card information, government identification numbers, precise geolocation data obtained from a device, or any category of information designated as sensitive under applicable law.

4. Purposes of Processing

The Company processes the information described in Section 3 for the following purposes only:

  1. to respond to and correspond regarding your inquiry;
  2. to evaluate the authenticity of an inquiry and to detect, prevent and investigate fraudulent, abusive or automated submissions;
  3. to maintain a business record of communications;
  4. to measure use of the Site in aggregate, to understand which content is read, and to detect faults in the Site and in the contact form; and
  5. to comply with applicable legal obligations and to establish, exercise or defend legal claims.

Where the General Data Protection Regulation or any equivalent regime applies, the Company relies upon its legitimate interests in responding to business inquiries and in maintaining the security and integrity of the Site, and, where applicable, upon the taking of steps at your request prior to entering into a contract.

5. Restrictions on Use and Disclosure

The Company does not sell, rent, lease, or otherwise make available for consideration any Personal Information collected through the Site. The Company does not use such information for advertising, for behavioral profiling, or for the compilation of marketing lists, and does not disclose it to third parties for those purposes.

Personal Information may be disclosed only:

  1. to Service Providers, as enumerated in Section 6, acting on our behalf and subject to contractual obligations of confidentiality;
  2. where required by applicable law, regulation, subpoena, court order, or other lawful process;
  3. where reasonably necessary to protect the rights, property or safety of the Company, its Users, or the public; or
  4. in connection with a merger, acquisition, reorganization or sale of assets, in which case the acquiring party shall be bound by terms no less protective than those set out herein.

6. Service Providers

The Company engages the following Service Providers in connection with the Site:

  • Cloudflare, Inc., which provides hosting, content delivery, bot mitigation (Cloudflare Turnstile), and transmission of inquiry notifications. Cloudflare processes network requests necessary to deliver the Site and may retain connection logs, including IP addresses, for security and abuse-prevention purposes. Refer to the Cloudflare Privacy Policy.
  • PostHog, Inc., which provides the product analytics used to measure use of the Site, as described in Sections 3.3 and 7. PostHog processes this information on the Company’s instructions and stores it in the United States. Refer to the PostHog Privacy Policy.
  • Google LLC, which provides the electronic mail service at which inquiry notifications are received and retained. Refer to the Google Privacy Policy.

7. Cookies and Tracking Technologies

The Site employs no advertising technology, no cross-site tracking, and no third-party behavioral advertising mechanism. Information collected through the Site is not sold, is not used to compile marketing lists, and is not disclosed for the purpose of targeted advertising.

PostHog is employed to measure use of the Site. It stores, in your browser’s local storage and in a first-party cookie named ph_<project identifier>_posthog, a randomly generated identifier known as a distinct ID, together with associated session information. That identifier allows repeat visits from the same browser to be recognised as the same visitor and enables the measurement described in Section 3.3. It is generated at random, is not derived from any information about you, and is not linked by the Company to your name, electronic mail address, or the contents of any inquiry. Analytics requests are transmitted to t.northrowbrands.com, a subdomain operated by the Company that forwards them to PostHog; this arrangement keeps such requests first-party and does not extend the information collected.

You may prevent this collection by declining or clearing cookies and local storage for this Site in your browser settings, or by using browser features or extensions that block analytics requests. The Site remains fully usable in that event.

Cloudflare Turnstile is employed to distinguish human Users from automated agents. Turnstile does not set tracking cookies and does not profile Users across unaffiliated websites.

8. Retention

Inquiry submissions and the associated technical information described in Section 3.2 are retained in the Company’s electronic mail records for such period as is necessary to fulfil the purposes set out in Section 4, and thereafter for such period as may be required to comply with applicable legal, accounting or reporting obligations. You may request erasure in accordance with Section 9.

Analytics information described in Section 3.3 is retained by PostHog for the retention period configured for the Company’s account, after which it is deleted or aggregated such that no individual browser remains distinguishable.

9. Your Rights

Subject to applicable law and to verification of your identity, you may exercise the following rights in respect of Personal Information the Company holds about you:

  • Access — to obtain confirmation as to whether Personal Information concerning you is processed and to obtain a copy thereof;
  • Rectification — to obtain correction of inaccurate or incomplete Personal Information;
  • Erasure — to obtain deletion of Personal Information, subject to any overriding legal obligation to retain it;
  • Restriction and Objection — to restrict or object to processing carried out on the basis of legitimate interests; and
  • Non-Discrimination — not to be subjected to discriminatory treatment for having exercised any right conferred by applicable privacy legislation.

Requests may be submitted by the means identified in Section 12. The Company will respond within the period prescribed by applicable law. No fee is charged for the exercise of these rights except where a request is manifestly unfounded or excessive.

10. Security

The Company maintains administrative and technical measures appropriate to the nature of the information processed, including transmission of all Site traffic over encrypted connections. No method of transmission over the internet or method of electronic storage is entirely secure, and the Company therefore cannot warrant the absolute security of any information transmitted to it.

11. Additional Provisions

11.1 Children. The Site is directed to businesses and is not intended for persons under the age of sixteen (16). The Company does not knowingly collect Personal Information from such persons. Should the Company become aware that it has done so, it will delete that information promptly.

11.2 International Transfers. The Company is established in the United States, and information submitted through the Site is processed there. Where you access the Site from another jurisdiction, you acknowledge that your information will be transferred to and processed in the United States, which may afford protections different from those of your jurisdiction of residence.

11.3 External Links. The Site may reference websites operated by third parties. The Company exercises no control over, and assumes no responsibility for, the privacy practices or content of any such website.

11.4 Amendment. The Company may amend this Policy from time to time. Any amended version will be published on this page bearing a revised effective date. Continued use of the Site following publication constitutes acceptance of the amended Policy.

12. Contact

Inquiries and requests concerning this Policy, including requests made under Section 9, may be directed to:

North Row Brands 3702 W Spruce St # 1580 Tampa, FL 33607-2553 United States

Requests may be submitted using the contact form on the homepage.