Privacy Policy

Protecting your personal information is important to us. This Privacy Policy describes
how STATE Bags LLC (“State Bags,” “we,” “our,” or “us”) collects, uses, or discloses
personal information we receive through our website at statebags.mom, together with
any stores, mobile app or other online and offline services provided by State Bags
(collectively, the “Services”). State Bags is a direct-to-consumer bag and accessories
company that sells products for adults and children through our online store. This policy
also describes your choices about the collection and use of your information.

Please read this policy carefully before you start to use our Services. By using the
Services, you agree to be bound and abide by our posted Terms & Conditions (the
“Terms”). If you do not agree to our policy or the Terms, or if you violate them in any
way, your right to access or use the Services is terminated. Please see Section 18 of
our Terms regarding your legal rights in any dispute involving our Services, including a
waiver of rights to a jury trial or class action.

1. How We Collect Information

We may collect information about you through various means, including:

Directly from you, both online (e.g., our website, email, live chat) and offline (e.g.,
stores);
Through your use of the State Bags website or related online services;
Through account registration, purchases and checkout;
Through product personalization requests, warranty claims, corporate gifting
inquiries, and customer service communications;
Through your participation in loyalty programs, product reviews, waitlists, and
promotional activities; and
From third-party sources, including social media platforms that you may use to
engage with us, as well as our service providers, technology and product
fulfillment partners, and advertising platforms, for the purposes described below
and/or to supplement information we already possess.

2. Types of Information We Collect

In order to provide you with our Services or otherwise communicate with you, we may
collect the following categories of information:

Profile and subscription information, such as a username and password (where
we offer account creation), your name, shipping and billing address, e-mail
address, phone number, and usage and subscription preferences, which may
include signing up to some of our Services or communications from us;
Transactional information including payment information, gift card information and shopping history if we provide the ability to make purchases through the Services;
Survey information in response to questions we may send you through the Services, including for inquiries, feedback and research purposes;
User Content you may provide to publicly post via the Services if we permit (e.g., reviews and ratings);
Communications between you and us, such as via email, mail, phone, or other channels;
Offline activity you directly engage in with us, if any; and
Online activity described in the next section.

3. Online Activity, Cookies and Information Collected by Other Automatic Means

Cookies are a commonly-used web technology that allow websites to store and retrieve
certain information on a user’s system, and track users’ online activities. We, together
with vendors we use, may collect information about your use of our Services by such
automated means, including but not limited to cookies, pixels, SDKs and other similar
technologies.

Cookies and similar technologies can help us automatically identify you when you return
to our website. Cookies help us review traffic patterns, improve our website, and
determine what products and Services are popular. We can also use such information
to deliver customized content and advertisements to users of the Services whose
behavior indicates that they are interested in a particular subject area.

When you use the Services, we may collect certain information by automated means,
for example:

Usage details about your interaction with our Services (such as date, time, and
length of visits, specific pages or products viewed during visits, search terms,
items added to your shopping cart, features used, frequency of visits, and
referring website addresses);
Device information, including the IP address and other details of a device that
you use to connect with our Services (such as device type, unique device
identifier, operating system, browser type, and mobile network information); and
Location information where you choose to provide the website with access to
information about your device’s location.

We may also ask advertisers or other partners to serve ads or services to you, which
may use cookies or similar technologies placed by us or the third party. If a user does
not want information collected through the use of cookies, most browsers allow the
visitor to reject cookies, but if you choose to decline cookies, you may not be able to
fully experience the interactive features of our Services. We may share non-personal
information we obtained via cookies with our affiliates.

4. How We Use Information We Collect
We may use the information we obtain about you for purposes allowed by applicable
laws, including to:

Provide our Services to you, including processing and fulfilling your orders
(including product personalization), creating and managing your account, and
operating our online (and any physical) store;
Respond to your requests, questions and comments, and provide customer
support;
Personalize your shopping experience and recommend products that may
interest you based on your browsing and purchase history;
Administer loyalty programs, rewards, gift cards, referral programs, and
promotional offers;
Process purchases, payments, returns, exchanges, and shipping;
Monitor the performance of our Services, including metrics such as total number
of visitors, traffic, and usage patterns;
Tailor the content we display to you in our Services and communications,
including advertising that may be of interest to you;
Operate, evaluate, and improve our programs, our websites, and other products
and services we offer (including to develop new services), and diagnose or fix
technology problems;
Analyze and enhance our communications and strategies (including by
identifying when emails sent to you have been received or read);
Inform you about changes to this policy and our Terms and other policies; and
Comply and enforce as needed legal requirements, industry standards, our
policies, and our contractual rights.

In connection with our Services, we may train and use AI tools with user information
and content for certain business purposes, such as to analyze customers’ experiences
and activities with us, to improve the efficiency, quality, and speed of our business
operations, to support communications with customers (such as a chatbot), to generate
business content, and to provide more personalized experiences and marketing, but our
Services do not use AI tools in any manner that could be expected to negatively impact
customers in a material or unlawful manner.

We may also use or share information in an anonymized or aggregate manner for many
purposes such as research, analysis, modeling, marketing, and improvement of our
Services. By using our Services, you consent to us using your de-identified data for any
such purposes as permitted by law.

5. How We Share Your Information

We will not disclose your personal information to third parties without your consent,
except in the following circumstances:

Limited information (e.g., IP addresses, page views, etc.) may be collected
through third-party online tools such as cookies, as described above. As
explained above, you can opt out of certain cookies or take other steps to
prevent such collection.
If you voluntarily share or submit any User Content including contact information
(e.g., name) or content (e.g., picture), or commentary (e.g., product review) for
public posting through our Services, or link it to any social media platforms, that
post and any content or information associated with it may become available to
the public. See our Terms for more information about User Content.
We may share your personal information with our affiliates under common control
and with service providers that we believe need information to perform a
technology, business, or other professional function for us (examples include: IT
services, maintenance and hosting of our Services, payment processors, product
fulfillment and shipping, marketing partners, and other service providers). We
only provide such vendors with information so they can provide their required
functions on our behalf.
We may disclose information about you (i) if we are required to do so by law or
legal process, (ii) when we believe disclosure is necessary to prevent harm or
financial loss, (iii) in connection with an investigation of suspected or actual
fraudulent or illegal activity, or (iv) under exigent circumstances to protect the
personal safety of our staff, users, or the public.
We reserve the right to transfer the information we maintain in the event we sell
or transfer all or a portion of our business or assets. If we engage in such a sale or transfer, we will make reasonable efforts to direct the recipient to use your personal information in a manner that is consistent with this policy.

Note that we do not share your text message program enrollment or consent with third
parties for their own purposes. Where appropriate, we will limit sharing of your information in accordance with the choices you have provided us and applicable law.

6. Text Message Program
Participation in our optional text messaging program is subject to our Messaging Terms
(https://terms.pscr.pt/legal/shop/newstatebags/terms_of_service) and Messaging
Privacy Policy (https://terms.pscr.pt/legal/shop/newstatebags/privacy_policy).

7. Your Privacy Choices

We offer you certain choices about what information we collect from you, how we use
and disclose the information, and how we communicate with you.

Marketing Emails: From time to time, we may contact you via email for the
purpose of providing announcements, promotional offers, alerts, confirmations,
surveys, and/or other general communication. You may choose not to receive
marketing emails from us by clicking the unsubscribe link in the marketing emails
you receive from us. Even if you opt out of receiving such communications, we
will continue sending you non-marketing email communications, such as order
confirmations, shipping updates, or information about changes to our Privacy
Policy or Terms, when necessary.
Cookies: Web browsers may offer users the ability to disable certain types of
cookies; however, if you cookies are disabled, some features or functionality of
our Services may not function correctly.
Targeted Advertising: We may potentially work with advertising partners who
collect information about your online activities and provide you with choices
regarding the use of your browsing behavior for purposes of targeted advertising.

8. State-Specific Rights

(A) State Privacy Requests

Certain state privacy laws may provide additional rights with respect to our collection
and use of personal information. This includes laws for residents of California, Colorado,
Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana,
Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas,
Utah and Virginia. Due to our size, operations, and the nature of our business, we may
not be subject to any particular state’s privacy laws, but you can submit such requests
to us via the contact information provided below and we will endeavor to fulfill any obligations that are legally required; otherwise, we will respond to such request in our discretion.

You may request a copy of the following: (1) the categories of personal information
we collected about you; (2) the categories of sources from which the personal
information is collected; (3) the business or commercial purpose for collecting or
selling (if applicable) the personal information; (4) the categories (or identity) of third parties with whom we shared personal information, and the categories of personal information shared; and (5) the specific pieces of your personal information that we have collected, used, disclosed, or sold.
You may request that we correct your personal information if it is inaccurate or
delete your personal information. Note that deletion requests are subject to certain
limitations, for example, we may retain personal information as permitted by law,
such as for tax or other record keeping purposes, to maintain an active account, to
process transactions and facilitate customer requests, and for certain other internal business purposes described in this Policy.
You have the right at any time to opt out of (i) any selling or sharing of your personal information to a third party (excluding service providers or other exceptions permitted by law); (ii) any third-party targeted advertising (i.e., cross-context behavioral advertising); (iii) any use of sensitive personal information (such as precise geo-location or financial information) except for the purposes it was collected and as otherwise permitted by law; or (iv) impactful profiling activities. However, as a general matter, we do not use of sensitive personal information except for the purposes provided, and do not engage in impactful profiling activities.

To request a copy of personal information we have collected about you, or to request
that your information be corrected or deleted, or to opt-out of the activities described
above, please contact us as directed below. You may authorize another person (your
“agent”) to submit a request on your behalf the same way. Shortly after you (or your
agent) submit a request, we will check our records for matching information and contact
you (via the email address provided during submission of your request) with instructions
on how to verify the request before we fulfill it. If and to the extent required by privacy
laws in your state of residence, we will aim to complete requests as soon as reasonably
practicable, consistent with any deadline under applicable law. We may not, and will
not, discriminate against anyone for exercising their privacy rights, including those
provided by the applicable privacy laws.

If we deny a privacy request, you may appeal the decision to us at the contact
information provided below. To the extent possible, please describe the basis for your
appeal. We will endeavor to provide a prompt response. If we deny an appeal, you can
raise any concerns with your state’s Office of the Attorney General.

(B) Residents of California only

The categories of information we collect are described above in this policy, and include:
(i) Identifiers such as name, email address, IP address, postal address and phone
number, such as if you visit our Services, create an account or engage in a transaction
with us; (ii) Commercial information such as any payment activities; (iii) Internet activity
such as the Online User Activity described above; (iv) Geolocation data including
location enabled services such as WiFi; and (v) Sensitive personal information such as
account credentials provided for any Services, and financial information provided for a
transaction.

We do not have any financial incentives programs in connection with personal
information, and do not generally assign monetary value to individuals’ personal
information in connection with the Sites. We do not share personal information with third
parties for their own direct marketing purposes.

Do Not Track (DNT) is a privacy preference you can set in most browsers but there is
no standard interpretation or practice for responding to DNT signals, and we therefore
handle all information consistent with this Policy.

California privacy rights apply to all individuals including job applicants, current and
former employees, contractors and business partners. Due to the nature of these
relationships, the collection and use of personal information can vary, but in general
terms and in addition to all the disclosures above:

Job applicants may provide us with personal information as part of an employment
application and review process that includes the applicant’s contact information,
education and employment history, resume and cover letter. We do not use this
information for any purpose other than to evaluate the individual for employment with us and manage our careers program. Job applicants may provide additional
information for routine background checks to a third-party provider of such services, under specific privacy terms and consents that will be provided at the time of collection.
Employees receive disclosures during and after onboarding that provides additional details regarding our employee privacy practices.
We collect contact information and other reasonably necessary personal information to engage and work with contractors and business partners in the course of a business relationship.

For Nevada residents, please note that we do not sell personal information as defined
by Nevada law (Nevada Revised Statutes, Chapter 603A, Section 1.6), but you can
submit a request to us at the contact information provided below.

9. International Notice

This section is intended for individuals residing outside of the United States (“US”). This
includes residents of the European Economic Area ("EEA") including the European Union ("EU"), the United Kingdom ("UK"), Switzerland and any other relevant jurisdiction
outside the United States. As a US-based business we are not necessarily subject to
privacy and data protection laws in your jurisdiction, but solely to the extent they are
applicable to us, we will endeavor to comply with such laws, and will otherwise operate
in our discretion.

(A) Legitimate Bases for Processing

Where required by law, all processing of personal information is justified by a legally-
recognized basis for processing. In the majority of cases, processing will be justified on
one or more of the following bases for processing: (i) the processing is necessary to
perform a contract with you (such as if you using Services to make purchase) (ii) the
processing is necessary for us to comply with a relevant legal obligation, such as
keeping accounting records; (iii) the processing is in our legitimate interests, which are
not overridden by your interests and fundamental rights. Our legitimate interests are to
use personal information to reasonably and responsibly conduct and develop our
business activities without abusing any privacy interests or rights of such individuals,
including provision of our Services, facilitating communications between users, and
engaging in promotional and advertising activities with partners that may be of interest
to you; and (iv) in some instances, we rely on your consent to our processing (at times
as a secondary basis for processing in an abundance of caution).

(B) Transfer of Personal Information

If you use our Services from outside of the United States, you acknowledge and agree
that we may transfer your information to and from the United States. If you are in the
EEA/EUK, the UK, Switzerland or another jurisdiction that has imposed similar legal
requirements regarding the lawful transfer of personal information from that jurisdiction
to another country (e.g., the U.S.), to the extent that we engage in such a transfer of
your personal information (a “Cross-Border Transfer”) we will take steps to ensure that
such Cross-Border Transfer satisfies known legal requirements. In particular: if we
transfer personal information to a jurisdiction deemed by relevant regulatory authorities
to provide adequate protection for personal information, we will rely on such adequacy
decision, as applicable, and will otherwise take steps to conduct the Cross-Border
Transfer using other legally-valid mechanisms, such as by relying on your consent
and/or entering into data transfer agreements with standard contractual clauses
(“SCCs”) among our affiliates and with relevant service providers. We monitor evolving
laws and regulatory developments to assess if and when alternative or supplemental
measures are available or necessary.

Residents of certain jurisdictions outside the United States may seek to exercise certain
rights under privacy laws applicable to their personal information. This includes the right to (a) request access to your personal information; (b) request that we correct
inaccurate personal information we hold about you; (c) request that we delete any
personal information we hold about you; (d) restrict or object (i.e. withdraw consent) to
the processing of personal information we hold about you in some circumstances;
and/or (e) receive any personal information we hold about you in a structured and
commonly used format. Where applicable by law, you may also have the right to lodge a
complaint with the relevant regulatory authority if the processing of your personal
information infringes applicable law. Please contact us as provided below if you wish to
exercise any of our rights, or if you have any inquiries or complaints regarding the
processing of your personal information.

10. Our retention practices

We retain Personal Information based on a number of factors, including (i) for business
purposes such as for as long as your account is active, as long as is reasonably
necessary to provide you with our products and services, and for the other purposes we
use your information as described above, and (ii) as reasonably necessary to prevent
fraud and abuse, resolve disputes, enforce our agreements and comply with our legal
obligations, including tax, payment industry, securities, and clinical regulatory
compliance requirements. We may also retain archived copies of your information for a
reasonable period of time.

In some cases we choose to retain certain information (for example, usage data
concerning website activity) in a depersonalized or aggregated form. Once aggregated,
this information ceases to be personal and will not be subject to user deletion requests.

11. Security practices

We have implemented technical, administrative and physical security measures that are
designed to protect Personal Information from unauthorized access, disclosure, use and
modification. We periodically review our security and privacy practices and enhance
them as we believe appropriate to better protect the integrity of our systems and your
Personal Information. While we cannot guarantee that loss, misuse or alteration of data
will not occur, we use reasonable efforts to prevent this. Please be aware though that,
despite our best efforts, no security measures are perfect or impenetrable. We will make
any legally required disclosures in the event of any compromise of Personal
Information. To the extent the law allows us to provide such notification via e-mail or
conspicuous posting on the Services, you agree to accept notice in that form

It is also important for you to guard against unauthorized access to your Personal
Information by maintaining strong passwords and protecting against the unauthorized
use of your own computer or device.

12. Online Advertising; Links to Other Websites and Third Party Content

You may see us advertising on various websites, web pages, social media and other
platforms. Please note that online advertising services do not always provide us with complete information about the platforms or website on which our advertising may
appear. If you believe that our advertising is being displayed through websites or
channels that promote inappropriate or offensive content, please contact us.

Our Services may contain links to other websites or online services, including social
media. Please be aware that we are not responsible for the content or privacy practices
of such other websites or online services, and we encourage you to be aware when you
leave our Services and to read the privacy statements of any other website or online
service that collects Personal Information.

You may see us promoted by other businesses on various websites, web pages, social
media and other platforms. Please note that we do not always have complete
information about where our brand may be displayed or promoted, and if you believe
that we are featured in venues that are inappropriate or offensive, please contact us.

13. Children’s Privacy

We do not knowingly collect personal information from minors on our Services. If you
believe that a minor provided personal information to us, please notify us. If we learn
that we received personal information from a minor without parental consent, we will
endeavor to promptly delete that information.

14. Updates to Our Privacy Policy

We may make changes to this policy from time to time, in our sole discretion. When we
make changes we deem material, we will provide you with prominent notice as
appropriate under the circumstances, e.g., on the Services or by sending you an email.
In some cases, we will notify you in advance of the changes taking effect. Your
continued use of the Services after the changes have been made will constitute your
acceptance of those changes. Please therefore make sure you read any such notice
carefully.

15. Contact Us

If you have any questions, concerns or comments about this policy or our privacy
practices, to exercise a privacy request, or if you would like us to update information or
preferences you provided to us, please contact us via email at info@statebags.mom, by
phone to (347) 609-0870, or by mail to State Bags, Inc., 379 West Broadway FL 2, New
York, NY 10012-5125, United States.

This Privacy Policy was last updated June 24, 2026.