This Privacy Policy describes how IronLeaf Backyard ("we," "us," or "our") collects, uses, and shares personal information when you visit, use, or make a purchase from ironleafbackyard.com (the "Site"), or otherwise communicate with us. Our store is hosted on and powered by Shopify. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, use, and disclosure of your personal information. By using the Site, you acknowledge that you have read and understand this Privacy Policy.

"Personal information" means information that identifies, or can reasonably be linked to, you or another person. It does not include information that has been collected anonymously or de-identified. We collect information in the following ways:

Information you provide directly:

• Name, billing address, shipping address
• Email address and phone number
• Payment information (processed securely — we do not store full card numbers)
• Account information, such as your username, password, preferences, and settings, if you create an account
• Any messages or inquiries you send us, including customer support requests

Information about your shopping activity:

• Items you view, add to your cart or wish list, or purchase
• Order history, including cancellations and replacement-part requests

Like most websites, we automatically collect some technical information to keep our site working properly and improve your experience:

• IP address and approximate location
• Browser type, operating system, and device type
• Pages viewed, referring URLs, and time spent on pages
• Cookies, web beacons, pixels, and similar tracking technologies

We collect personal information from the following sources

• Directly from you, such as when you place an order, create an account, or contact us
• Automatically through the Site, including through cookies and similar technologies
• From our service providers, such as Shopify, payment processors, and shipping carriers, when they collect or process information on our behalf
• From our partners, such as the manufacturers who ship products to you and our advertising partners

We use the information we collect to:

• Process and fulfill your orders, including payment and shipping coordination
• Create, maintain, and manage your account, if you have one
• Send order confirmations, shipping notifications, and customer service communications
• Handle damage claims, replacement parts, and warranty questions span>
• Screen for fraud and protect the security of our Site and customers
• Analyze how customers use our Site to improve our products and experience
• Send you marketing and promotional communications (you may opt out at any time)
• Serve you targeted advertisements based on your browsing behavior (see Behavioral Advertising below)
• Comply with applicable laws, respond to valid legal requests, and enforce our Terms of Service and other policies

We participate in behavioral advertising. This means that third-party advertising partners, including Meta (Facebook/Instagram) and Google, may use cookies and tracking pixels placed on our Site to serve you advertisements on other websites and platforms based on your visit to ironleafbackyard.com. We also use Shopify features that support personalized advertising based on your online activity. Under some state privacy laws, this type of advertising may be considered a "sale" or "sharing" of personal information.

You can opt out of targeted advertising by visiting:

• Our data-sharing opt-out page: https://ironleafbackyard.com/pages/data-sharing-opt-out
• Meta Ad Preferences: https://www.facebook.com/settings/?tab=ads
• Google Ad Settings: https://adssettings.google.com
• Digital Advertising Alliance opt-out: http://optout.aboutads.info
• Network Advertising Initiative opt-out: http://optout.networkadvertising.org

We use cookies to enhance your experience, remember your preferences, and understand how you interact with our Site. You can control cookies through your browser settings. Disabling cookies may affect some Site functionality.

If you visit our Site with the Global Privacy Control (GPC) signal enabled, depending on where you live, we will automatically treat it as a request to opt out of the sale or sharing of your personal information for the device and browser you are using. If we can link that device to a customer account, we will apply the opt-out to your account as well. You can learn more at https://globalprivacycontrol.org/. Other than GPC, we do not currently respond to other "Do Not Track" signals.

We do not sell your personal information. We may share your information with:

• Shopify, which hosts our store (see Relationship with Shopify below)
• Shipping carriers and logistics providers to fulfill your order
• Manufacturer partners who ship products on our behalf
• Payment processors (e.g., Shopify Payments, PayPal) to handle transactions securely
• Analytics providers (e.g., Google Analytics) to understand Site usage
• Advertising partners (e.g., Meta, Google) for behavioral advertising purposes
• Other third parties when you direct or consent to it, such as when you use social media widgets or login integrations
• Our affiliates, or a buyer or successor in connection with a merger, acquisition, bankruptcy, or sale of all or part of our business
• Law enforcement or government agencies when required by law, subpoena, or legal process, or to protect our rights, our customers, or others

Our business and marketing partners use your information in accordance with their own privacy notices.

Our Site is hosted by Shopify, which collects and processes personal information about your access to and use of the Site in order to provide and improve its services. Information you submit on our Site is transmitted to and shared with Shopify, as well as third parties that may be located outside the country where you live.

We also use certain Shopify features that combine information from your interactions with our store, other merchants, and Shopify. For these features, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights. To learn more about how Shopify uses your personal information, visit the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/app-users. You can also exercise certain rights through the Shopify Privacy Portal at https://privacy.shopify.com/en.

Our Site may link to websites or platforms operated by third parties, such as manufacturer websites or social media. We are not responsible for the privacy or security practices of those sites, and we encourage you to review their privacy policies. Information you share on public platforms, such as social networks or product reviews, may be visible to others.

We retain your order and account information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your personal data at any time by contacting us (see Your Rights below).

Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute and may apply only in certain circumstances:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request that we correct inaccurate information
• Right to deletion: Request that we delete your personal data (subject to legal retention requirements)
• Right to portability: Request a copy of your personal data in a portable format, or that we transfer it to another company
• Right to opt out of sale, sharing, and targeted advertising: Opt out at https://ironleafbackyard.com/pages/data-sharing-opt-out, or by enabling Global Privacy Control in your browser
• Right to manage communications: Unsubscribe from marketing emails at any time using the link in our emails. We may still send you non-promotional messages about your orders
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

To exercise any of these rights, contact us at support@ironleafbackyard.com. We may need to verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf; we will require proof of their authorization and may ask you to verify your identity directly with us. We will respond within 30 days, or within the timeframe required by applicable law.

If you have a complaint about how we handle your personal information, please contact us at support@ironleafbackyard.com. If we decline your request, depending on where you live, you may have the right to appeal our decision by contacting us, or to file a complaint with your local data protection authority or state attorney general.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of your personal information. We do not sell personal information as defined under the CCPA. To submit a CCPA rights request, contact us at support@ironleafbackyard.com with "CCPA Request" in the subject line.

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors, and we do not have actual knowledge that we sell or share the personal information of individuals under 16. If you believe a minor has provided us with personal information, please contact us at support@ironleafbackyard.com and we will delete it promptly.

We implement industry-standard security measures, including SSL/TLS encryption, to protect your personal information during transmission. However, no method of transmission over the internet is 100% secure. We encourage you to protect your own account credentials and notify us immediately if you suspect unauthorized access.

We, Shopify, and our service providers may transfer, store, and process your personal information outside the country where you live. When we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses, unless the transfer is to a country considered to provide an adequate level of protection

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. When we do, we will post the revised policy on this page, update the "Last Updated" date at the top, and provide any notice required by applicable law. Your continued use of the Site after changes are posted constitutes your acceptance of the updated policy.

Effective Date: June 24, 2026

For privacy-related concerns: