KAXI CO LLC

CALIFORNIA CONSUMER PRIVACY ACT (CCPA/CPRA)

COMPLIANCE NOTICE

Privacy Disclosures for California Residents

Last Updated: March 25, 2026

1. Introduction

This California Consumer Privacy Act Notice ("CCPA Notice") is provided by KAXI CO LLC ("KAXI," "we," "us," or "our") and applies to California residents ("consumers") as defined by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CCPA"). This notice supplements our general Privacy Policy and describes our data collection, use, and sharing practices specifically as they relate to California consumers and their rights under the CCPA.

KAXI operates the website www.shopkaxi.com and sells women's hair accessories and related products through our direct-to-consumer website, wholesale partnerships, and third-party marketplaces.

2. Applicability

While the CCPA's primary thresholds apply to larger businesses, we provide this notice as a transparency measure for our California customers and because our data practices may intersect with the CCPA through our use of third-party advertising and analytics services. We are committed to honoring the spirit of California privacy law regardless of whether we technically meet every statutory threshold.

3. Categories of Personal Information We Collect

In the preceding 12 months, we have collected the following categories of personal information from California consumers:

Identifiers: Name, email address, mailing address, phone number, and IP address. Collected when you place an order, create an account, sign up for our email list, or visit our website.

Commercial Information: Records of products purchased, order history, return and exchange history, and shopping preferences. Collected through your transactions with us.

Internet or Electronic Network Activity Information: Browsing history on our website, search history on our site, and information regarding your interaction with our website, emails, and advertisements. Collected through cookies, pixels, and similar technologies.

Geolocation Data: Approximate location derived from your IP address. Collected automatically when you visit our website.

Inferences: Inferences drawn from the above categories to create a profile reflecting your preferences and interests (e.g., product category preferences). Generated through our marketing and analytics tools.

4. Sources of Personal Information

We collect personal information from the following sources: directly from you when you make a purchase, create an account, subscribe to emails, or contact customer service; automatically through cookies and similar technologies when you browse our website; and from third-party platforms such as Shopify (our ecommerce provider), social media platforms, and advertising networks.

5. Purposes for Collection and Use

We collect and use personal information for the following business and commercial purposes: processing and fulfilling orders, including shipping and returns; managing your account and providing customer support; sending marketing communications (with your consent); improving our website, products, and services; preventing fraud and ensuring security; complying with legal obligations; and measuring the effectiveness of our advertising.

6. Sale and Sharing of Personal Information

Sale of Personal Information: KAXI does not sell personal information for monetary consideration.

Sharing for Cross-Context Behavioral Advertising: We may share certain personal information (such as identifiers and internet activity data) with advertising partners like Meta and TikTok through tracking pixels and cookies for the purpose of cross-context behavioral advertising. Under the CCPA, this constitutes "sharing" of personal information. You have the right to opt out of this sharing.

Categories Shared: Identifiers (such as device IDs and cookie identifiers), internet or electronic network activity information, and inferences. These are shared with advertising and analytics partners including Meta (Facebook/Instagram), TikTok, and Google.

7. Your California Privacy Rights

As a California resident, you have the following rights under the CCPA:

Right to Know / Right of Access: You can request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share your data.

Right to Delete: You can request that we delete personal information we have collected from you, subject to certain exceptions (such as completing a transaction or complying with legal obligations).

Right to Correct: You can request that we correct inaccurate personal information we maintain about you.

Right to Opt Out of Sale/Sharing: You can opt out of the sharing of your personal information for cross-context behavioral advertising by clicking the "Do Not Sell or Share My Personal Information" link on our website, or by enabling the Global Privacy Control (GPC) signal in your browser. We honor GPC signals as valid opt-out requests.

Right to Limit Use of Sensitive Personal Information: We do not collect or process sensitive personal information beyond what is necessary to provide our services.

Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. You will not receive different pricing, quality of service, or be denied service for making a privacy request.

8. How to Exercise Your Rights

To submit a request to know, delete, or correct your personal information, you may contact us by:

Email: hello@shopkaxi.com (please include "CCPA Request" in the subject line)

Website: Submit a request through our Contact Us page at www.shopkaxi.com/pages/contact-us-1

We will acknowledge your request within 10 business days and provide a substantive response within 45 calendar days. If we need additional time (up to an additional 45 days), we will notify you of the extension and the reason for it.

To verify your identity, we may ask you to provide information that matches what we already have on file, such as your name and email address associated with your order history. We will not ask you to create an account to make a request.

You may designate an authorized agent to make a request on your behalf. We may require the agent to provide proof of authorization and may separately verify your identity.

9. Do Not Sell or Share My Personal Information

You can opt out of the sharing of your personal information for cross-context behavioral advertising at any time by:

Clicking the "Do Not Sell or Share My Personal Information" link available on our website.

Enabling the Global Privacy Control (GPC) signal in your browser settings. We detect and honor GPC signals as valid opt-out requests for the sharing of personal information.

Contacting us directly at hello@shopkaxi.com.

When you opt out, we will cease sharing your personal information with advertising partners for behavioral advertising purposes. Please note that opting out does not affect data processing necessary to complete your transactions or provide customer service.

10. Third-Party Service Providers

We work with the following categories of service providers and contractors who may process personal information on our behalf:

Ecommerce Platform: Shopify Inc., which hosts our website and processes orders.

Payment Processing: Shopify Payments and related payment processors.

Email Marketing: Klaviyo or similar email service providers.

Returns and Exchanges: Redo, our third-party returns management partner.

Shipping and Fulfillment: USPS, UPS, FedEx, and other carriers.

Analytics and Advertising: Google Analytics, Meta (Facebook/Instagram Pixel), TikTok Pixel.

Wholesale Marketplace: Faire, for wholesale order management.

We maintain appropriate contracts with our service providers that restrict how they can use your personal information and require them to implement reasonable security measures.

11. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically: order and transaction records are retained for a minimum of 7 years for tax and legal compliance; account information is retained while your account is active and for 2 years thereafter; marketing data is retained until you unsubscribe; and cookie and analytics data is retained for no longer than 13 months.

12. Updates to This Notice

We review and update this CCPA Notice at least annually, or more frequently when material changes occur to our data practices. Updates are posted on this page with a revised "Last Updated" date. We encourage California consumers to review this notice periodically.

13. Contact Us

If you have questions about this CCPA Notice or wish to exercise your privacy rights, contact us: