Privacy Policy

Hot Girl Soda, Inc. Effective Date: September 14, 2026 Last Updated: September 14, 2026

Hot Girl Soda, Inc. ("Hot Girl Soda," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices and rights you have.

It applies to hotgirlsoda.com, hgsoda.com, our checkout, our email and text messaging programs, and our pages on social media platforms (together, the "Services"). It does not apply to third-party websites we link to, or to retailers who sell our products.

1.1 Information you give us

- Identifiers and contact details: name, shipping address, billing address, email address, and telephone number. - Order information: the products you order, order history, and the contents of your cart. - Payment information: your payment card or digital wallet details are collected and processed by our payment processors. We do not store full payment card numbers. We receive limited information such as the card brand, the last four digits, and the authorization result. - Communications: messages you send us by email or through a form on the Services, including any information you choose to include. - Marketing preferences: your email and SMS subscription status. - User content: reviews, photographs, and social media content you submit or tag us in.

1.2 Information collected automatically

When you visit the Services, we and our partners collect:

- Device and connection data: IP address, browser type, operating system, device identifiers, and language settings. - Usage data: pages viewed, products viewed, referring and exit pages, links clicked, search terms, and timestamps. - Approximate location derived from IP address, and, if you use our store locator and allow it, more precise location from your device. - Cookies, pixels, tags, SDKs, and similar technologies. See Section 6.

1.3 Information from third parties

- Order and fulfillment data from our e-commerce and logistics providers. - Advertising and analytics data, including audience and measurement data, from advertising platforms. - Social media information you make available when you interact with our pages or content.

We do not knowingly collect Social Security numbers, government identification numbers, precise health information, or biometric data.

- To process, fulfill, ship, and support your orders, and to communicate with you about them. - To provide customer service and respond to your inquiries. - To operate, maintain, secure, and improve the Services. - To personalize the Services and show you products and offers likely to be relevant. - To send marketing emails and, if you opt in, text messages. - To measure and target advertising, including on Meta, TikTok, and Google. - To detect, investigate, and prevent fraud, abuse, and security incidents. - To comply with law and to establish, exercise, or defend legal claims. - For any other purpose we describe to you at the point of collection.

We do not sell your personal information for money. We do disclose it to the following categories of recipients, and, where noted, we "share" it for cross-context behavioral advertising as those terms are defined under California law. You can opt out — see Section 8.

3.1 E-commerce and website platform. Our online store and checkout run on Shopify, which processes order, account, and payment-related information on our behalf and hosts our storefront data.

3.2 Payment processors. Card and wallet payments are processed by our payment providers, including Shopify Payments and Shop Pay, and by any alternative payment method you select at checkout. They handle your payment details under their own privacy policies.

3.3 Fulfillment and shipping. We share your name, shipping address, telephone number, email address, and order contents with our third-party logistics provider, UNIS Co., which stores and ships our products, and with the parcel carriers that deliver them, currently UPS, FedEx, and Amazon Shipping.

3.4 Email and messaging. We use email and SMS marketing platforms, including Klaviyo, to send transactional and marketing messages and to manage your subscription preferences.

3.5 Advertising and analytics partners. We use advertising and measurement technologies from Meta (Facebook and Instagram), TikTok, and Google. These partners receive device identifiers, online activity, and, in some cases, hashed contact information so that we can measure advertising and reach relevant audiences. This constitutes "sharing" for cross-context behavioral advertising, and for some partners may constitute a "sale" under certain state laws.

3.6 Store locator. Our where-to-buy locator is provided by StoreLocators.com, which receives search and location information you enter in order to return nearby retailers.

3.7 Social media content. We use a third-party service to display our Instagram content on our site.

3.8 Professional advisors and service providers. Accountants, auditors, attorneys, insurers, and IT and security vendors, bound by confidentiality obligations.

3.9 Legal and safety. Government authorities, regulators, and other parties when we believe disclosure is required by law or necessary to protect the rights, property, or safety of Hot Girl Soda, our customers, or others.

3.10 Business transfers. A buyer or successor in connection with a merger, financing, acquisition, reorganization, or sale of assets, including in bankruptcy.

In the twelve months preceding the date of this policy, we disclosed the following categories of personal information for business purposes: identifiers, commercial information, internet and network activity, approximate geolocation, and inferences drawn from the foregoing.

We "shared" identifiers, internet and network activity, and inferences with advertising partners for cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16 years of age.

We keep personal information for as long as needed for the purposes described in this policy. In general:

- Order and transaction records are retained for at least seven years to meet tax, accounting, and warranty obligations. - Marketing contact records are retained until you unsubscribe and for a reasonable period afterward to honor your opt-out. - Website analytics and advertising identifiers are retained according to the retention settings of the relevant platform, typically no more than 26 months.

When information is no longer needed, we delete it or de-identify it.

6.1 We use strictly necessary cookies to operate the Services, including to keep items in your cart and to secure checkout. We also use analytics cookies to understand how the Services are used, and advertising cookies and pixels to measure and target advertising.

6.2 You can control cookies through your browser settings and, where offered, through the cookie preference control on our site. Blocking cookies may affect site functionality.

6.3 You may also opt out of interest-based advertising through industry tools such as the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org).

6.4 Global Privacy Control. We honor the Global Privacy Control ("GPC") signal. If your browser or extension sends a GPC signal, we treat it as a request to opt out of the sale and sharing of personal information for that browser.

7.1 Email. Every marketing email includes an unsubscribe link. You will continue to receive transactional messages about your orders.

7.2 Text messages. Reply STOP to any marketing text to stop receiving them, or HELP for help. Message and data rates may apply.

7.3 Location. You can turn off precise location for the store locator in your browser or device settings.

8.1 California residents. Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to:

- Know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients. - Delete personal information we have collected, subject to exceptions. - Correct inaccurate personal information. - Opt out of the sale or sharing of your personal information. - Limit the use and disclosure of sensitive personal information. We do not use or disclose sensitive personal information for purposes that require us to offer this right. - Be free from discrimination for exercising your rights. We will not deny you products, charge you a different price, or provide a different level of service because you exercised a privacy right.

8.2 Residents of other states. Residents of Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia, among others, have rights to confirm processing, access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and certain profiling. Where required, you may appeal a denial by replying to our response with the word "Appeal."

8.3 Nevada residents. Nevada residents may direct us not to sell certain personal information.

8.4 How to exercise your rights. Email hello@hgsoda.com with the subject line "Privacy Request" and tell us which right you want to exercise and the state you reside in.

8.5 Verification. To protect your information, we will verify your identity before acting on a request, usually by matching the email address and order information we already hold. We may ask for additional information if we cannot verify you.

8.6 Authorized agents. An authorized agent may submit a request on your behalf with written proof of authorization. We may still contact you to confirm.

8.7 Timing. We respond to verified requests within 45 days, and may extend once by an additional 45 days with notice.

The Services are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, email hello@hgsoda.com and we will delete it.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and vendor due diligence. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We are based in the United States, and we and our service providers process and store personal information in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States.

The Services may link to third-party sites, including retailers. We are not responsible for their privacy practices. Review their policies before providing information.

We may update this Privacy Policy from time to time. We will change the "Last Updated" date above and, for material changes, provide more prominent notice.

Hot Girl Soda, Inc. 26242 Carmel St Laguna Hills, CA 92656 hello@hgsoda.com