m2 Privacy Policy

Effective Date: 10/18/2025

This Privacy Policy describes how m2 Collagen (also referred to as “we”, “us”, or “our”) collects, uses, discloses, and protects information about you when you visit or interact with our websites, mobile apps, online stores, or otherwise engage with us (collectively, the “Site”). This Privacy Policy applies in addition to any other terms or agreements between you and M2 (for example, our Terms of Service).

If we make material changes to this policy, we will indicate a new effective date and, where required, provide additional notice (for example via email or a banner on the Site).

By using or accessing the Site, or by providing your information to us, you agree to this Privacy Policy (as updated from time to time). If you do not agree, please do not use the Site or provide personal information.

1. Collection of Information

We collect information in a few different ways: directly from you, automatically when you use our Site, and (in some cases) from third parties.

a) Information You Provide

You may provide certain information when you:

• Create an account
• Place an order or make a purchase
• Subscribe to newsletters, email lists, or SMS messaging
• Fill out forms (e.g. contact form, surveys)
• Participate in promotions, contests, or giveaways
• Contact customer support or otherwise communicate with us

Examples of information you provide may include:

• Name
• Email address
• Postal address
• Phone number
• Billing and shipping information
• Payment method and transaction details
• Preferences, feedback, and other content you submit
  

b) Information Collected Automatically

When you interact with our Site, we may automatically collect certain technical and usage information, such as:

• IP address
• Browser type and version
• Operating system
• Referring/exit pages
• Pages viewed and time spent on pages
• Clicks, scrolls, and navigation behavior
• Device identifiers
• Date/time stamps
• Cookies, web beacons, tracking pixels, and similar technologies
  

We may combine this automatically collected data with other information (including personal information) to better understand user behavior, improve the Site, and deliver personalized experiences.

c) Information from Third Parties

We may receive additional information about you from third-party sources, such as:

• Advertising and analytics providers
• Social media platforms (if you choose to link or log in via social media)
• Payment processors or fraud-detection services
• Publicly available sources (as allowed by law)
  

2. Use of Information

We may use the information we collect for various purposes, including but not limited to:

• Processing and fulfilling your orders, transactions, and returns
• Managing your account
• Providing customer service and responding to your inquiries
• Sending you transactional communications (order confirmations, shipping notices, etc.)
• Sending marketing and promotional communications (if you opt in)
• Personalizing your experience, showing relevant content or offers
• Measuring and analyzing Site usage and trends
• Conducting research, testing, and development to improve the Site and our services
• Detecting, preventing, and combating fraud, security issues, or other illegal activity
• Complying with legal obligations, enforcing our rights, and protecting persons or property
• Any other purpose for which the information was originally collected (or disclosed to you)
  

3. Retention & Transfer

We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, or as required by law, resolve disputes, and enforce our agreements.

We may store and process personal information on servers located in the United States or in other jurisdictions, and transfer information across borders, subject to applicable safeguards.

If you request deletion of your information, we will comply except where retention is necessary (e.g. to complete a transaction, comply with legal obligations, detect fraud, or other permitted uses).

4. Your Choices & Controls

You have certain rights and controls over your data. Depending on your location and applicable law, these may include:

• Accessing, correcting, or updating your personal information
• Deleting your personal information (subject to exceptions)
• Opting out of marketing or promotional communications
• Controlling cookies or trackers (through browser settings or preference tools)
• Withdrawing consent (where we rely on consent)
• Objecting to or restricting certain processing activities
  

If you want to exercise any of these rights, you may contact us (see Section 9). We may require verification of your identity to protect your privacy.

5. Disclosure & Sharing

We may share or disclose your personal information in the following situations:

• To our service providers, vendors, contractors, or agents who perform services on our behalf (e.g. payment processors, shipping partners, IT providers, marketing platforms)
• To comply with legal process or obligations (e.g. subpoena, court order, government requests)
• In the event of a merger, acquisition, reorganization, or sale of assets
• To enforce or protect our rights, privacy, security, property, or safety (or those of others)
  
• With your consent or at your direction
• In aggregated or de-identified form (which cannot reasonably identify you)
  

We do not sell your personal information for monetary consideration. (If in your jurisdiction “sale” is broadly defined, you may need to check whether certain sharing or advertising practices qualify.)

6. Advertising, Analytics & Cookies

We and our third-party partners use cookies, pixels, analytics tools, and advertising technologies to:

• Understand how users interact with our Site
• Serve personalized or interest-based advertisements
• Measure the effectiveness of campaigns
• Track conversions, clicks, and other metrics
  

You can manage cookie preferences (for example, via a cookie consent banner) or disable certain tracking via browser settings. Please note that disabling cookies may affect your experience and some Site functionality.

7. Security

We implement reasonable organizational, technical, and administrative safeguards to protect your information against unauthorized access, disclosure, alteration, or destruction. This includes encryption (e.g. SSL/TLS) for transmissions of sensitive data.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you suspect any breach or vulnerability, please contact us immediately (see Section 9).

8. Special Notices by Region

a) European Union / UK / EEA (GDPR)

If you are resident in the EU, UK, or EEA, then the following provisions apply in addition to the rest of this policy:

• Lawful bases: We will only process your personal data where we have a lawful basis (e.g. performance of contract, legitimate interests, consent, compliance with legal obligations).
  
• Rights you may have:
  
    • Right to access your data
    • Right to rectification
    • Right to erasure
    • Right to restrict processing
    • Right to object to processing
    • Right to data portability
    • Right to withdraw consent (if processing is based on consent)
  
• We may rely on standard contractual clauses or other safeguards when transferring data outside the EU/EEA.
• You have the right to lodge a complaint with a supervisory authority in your country.
  

b) California (CCPA / CPRA)

If you are a California resident, this section supplements the above and describes your rights under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) (and any implementing regulations):

• Rights you may have:
  
    • Right to know: What personal information we collect, use, disclose, and sell/share
    • Right to access: Request a copy of your personal information
    • Right to delete: Request deletion of your personal information (subject to exceptions)
    • Right to correct: Request correction of inaccurate information
    • Right to opt-out: Opt out of the sale or sharing of your personal information
    • Right to limit use of sensitive personal information
  
• To make a request, contact us (see below). We will verify identity before processing.
• We will not discriminate against you for exercising your rights.
• We will respond to verified requests within the time frames required by law (e.g. 45 days; possibly extended).
  

(If your business engages in financial incentives, or you share data for advertising considered a “sale” or “sharing,” you may need to include additional disclosures.)

c) Other U.S. States & Territories

If you reside in other U.S. states with privacy laws (e.g. Colorado, Virginia, Utah, etc.), you may have additional rights similar to those above (e.g. access, deletion, portability, opt-out). We will comply with applicable state laws.

9. Contact & Exercising Your Rights

If you have questions about this Privacy Policy or want to exercise your rights, you may contact us:

By email: overseas@shinybrands.com

Please specify in your message:

• Your name and contact information
• The nature of your request (access, deletion, correction, opt-out, etc.)
• Any other information needed to help us locate your data
  

We may require verification of your identity before fulfilling certain requests. We aim to respond within the timeframes required by applicable law.

10. Children

We do not knowingly collect personal information from children under 16 years old. If we learn we have collected data from a child under the applicable minimum age without parental consent, we will delete such data as soon as practicable. If you believe we may have collected information from a child, please contact us.

11. Links to Third-Party Sites

Our Site may contain links to other websites or services not operated by us. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies. We are not responsible for their practices or content.

12. Updates to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” above. If changes are material, we may provide additional notice (such as via email or a banner). Your continued use of the Site after such changes signifies your acceptance of the revised policy.