Privacy Policy

Last Updated: 6/3/2026

OUR PRIVACY COMMITMENT

We take your privacy seriously at Scrapbook.com. We treat your information the way we would want ours treated, by taking active steps to keep it safe, secure, and used only as you would expect. We do not sell your personal information to third parties for their own marketing purposes. Where we share information with advertising partners for the purpose of delivering relevant ads, we provide you with the ability to opt out of that sharing, as described in this Policy.

You can manage your cookie preferences and opt out of targeted advertising at any time by clicking the "Your Privacy Choices" link in the footer of our Website, or by using the controls described in Section 7 of this Policy.

1. ABOUT THIS PRIVACY POLICY

This Privacy Policy ("Policy") describes how Scrapbook.com, LLC, an Arizona limited liability company ("Scrapbook," "we," "us," or "our"), with its principal place of business at 1495 E. Baseline Rd., Suite 102, Gilbert, Arizona 85233, collects, uses, stores, shares, and protects your personal information in connection with the website located at www.scrapbook.com and all related platforms, applications, and services (collectively, the "Services").

This Policy applies to your online interactions with the Services and governs the personal information we collect through those interactions. It does not cover data collected offline or through channels not linked to the Services.

This Policy is part of and governed by Scrapbook's Terms of Service. By creating an Account or using the Services, you acknowledge that you have read and understood this Policy and agree to its terms. For privacy inquiries, please contact us at [email protected].

We may amend this Policy from time to time. We will post changes on this page with an updated "Last Updated" date and may provide additional notice for material changes. Your continued use of the Services after any modification constitutes your acceptance of the revised Policy. If you do not agree to a modified Policy, you must cease using the Services.

2. DEFINITIONS

For purposes of this Policy:

• "Account" means a registered user account created on the Services.
• "CCPA/CPRA" means the California Consumer Privacy Act of 2018 (Cal. Civ. Code § 1798.100 et seq.) as amended by the California Privacy Rights Act of 2020, and all implementing regulations.
• "FDBR" means the Florida Digital Bill of Rights (Fla. Stat. § 501.701 et seq.), effective July 1, 2024.
• "GDPR" means the General Data Protection Regulation, EU Regulation 2016/679, as applicable to the European Economic Area ("EEA"), including EU member states, Norway, Iceland, and Liechtenstein.
• "Personal Data" has the meaning given in the GDPR: any information relating to an identified or identifiable natural person.
• "Personal Information" has the meaning given in the CCPA/CPRA: information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information includes Personal Data.
• "Registered User" means any individual who has created an Account.
• "Sensitive Personal Information" has the meaning given in the CPRA, including financial account credentials, precise geolocation, racial or ethnic origin, religious beliefs, biometric information, health information, and other categories defined in Cal. Civ. Code § 1798.121.
• "Tracking Technologies" means cookies, pixel tags, web beacons, JavaScript tags, local storage objects, and similar technologies used to collect information about your interactions with the Services.
• "User," "you," or "your" means any individual who accesses or uses the Services.

3. PERSONAL INFORMATION WE COLLECT

3.1 Information You Provide Directly

We collect information you voluntarily submit to us, including:

• Registration information: your name and email address when you create an Account.
• Account profile information: your birthdate, city, hobbies, occupation, and other preferences you choose to add to your account profile.
• Order information: your shipping address, billing address, phone number, email address, and order details when you make a purchase.
• User Content: forum posts, gallery uploads, product reviews, article comments, questions and answers, and any other content or media you submit through the Services.
• Communications: messages you send us, including support requests, survey responses, testimonials, and contest entries.
• Social media account information: if you connect your Scrapbook Account to a social media or third-party platform account, we may receive information you have authorized that platform to share with us, in accordance with that platform's privacy settings.

3.2 Information We Collect Automatically

When you access or use the Services, we automatically collect:

• Usage data: pages visited, links clicked, features used, search queries, and other interactions with the Services.
• Device and application data: IP address, browser type and version, operating system, device identifiers, and other technical information about the device and software used to access the Services.
• Approximate geolocation: inferred from your IP address. We do not collect precise real-time geolocation.
• Referral data: information about the source that referred you to the Services, such as a link in an email or on another website.
• Tracking Technology data: information collected through cookies, pixel tags, web beacons, and similar technologies, as described in Section 7 of this Policy.

3.3 Information We Receive From Third Parties

We may receive information about you from third parties, including:

• Analytics and advertising partners (Google, Meta, Microsoft, Pinterest, Bloomreach/Exponea) as described in Section 7.
• Third-party platforms where you have granted permission for those platforms to share information with us.
• Publicly available sources, such as publicly visible social media profiles.

4. HOW WE USE YOUR PERSONAL INFORMATION

We use the personal information we collect for the following purposes:

• To provide, operate, maintain, and improve the Services.
• To create and manage your Account.
• To process your purchases and transactions, including payment processing through third-party payment processors.
• To communicate with you about your Account, orders, and use of the Services, including responding to your inquiries and providing customer support.
• To personalize your experience and deliver content, product recommendations, and offers tailored to your interests.
• To display interest-based advertising to you on the Services and on third-party platforms through advertising partners, using information about your browsing and purchase activity.
• To send you newsletters, promotions, special offers, and marketing communications (subject to your communication preferences and applicable opt-out rights).
• To measure and analyze usage of the Services through analytics tools, to understand user behavior and trends, and to improve our platform performance and features.
• To develop new products and services.
• To maintain the security and integrity of the Services, detect and prevent fraud, spam, and unauthorized activity.
• To comply with applicable legal obligations, respond to legal process, and enforce our Terms of Service.
• To aggregate and de-identify data for statistical analysis, research, and reporting.
• To facilitate social sharing and content embedding on third-party platforms.

5. HOW WE SHARE YOUR PERSONAL INFORMATION

We do not sell your personal information to third parties for their own marketing purposes. We share your personal information in the following circumstances:

5.1 With Service Providers

We share personal information with third-party service providers who perform services on our behalf, including payment processing, hosting, analytics, email delivery, customer support, advertising, and marketing. These providers are permitted to use your information only to perform services for us and are required to maintain appropriate data security practices. See Section 11 for our named third-party list.

5.2 With Advertising Partners (Sharing for Cross-Context Behavioral Advertising)

We share certain personal information, including browsing data, device identifiers, and purchase-related data, with advertising partners, including Meta Platforms, Inc. (Meta Pixel), Google LLC

(Google Ads/Remarketing), Pinterest, Inc., and Microsoft Corporation, for the purpose of delivering targeted advertising to you on our Website and on third-party platforms. Under the California Privacy Rights Act (CPRA), this type of sharing for cross-context behavioral advertising is regulated separately from the "sale" of personal information. You have the right to opt out of this sharing as described in Section 19 (California Residents) and Section 23 (How to Stop Data Collection). California, Colorado, and other state residents may also click the "Do Not Sell or Share My Personal Information" link in our Website footer to exercise this right.

5.3 With Affiliates and Business Partners

We may share your personal information with our subsidiaries, affiliates, and business partners.

Any such sharing is subject to this Policy.

5.4 In Connection With a Business Transaction

If Scrapbook is involved in a merger, acquisition, asset sale, restructuring, bankruptcy, or other business transaction, your personal information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a materially different privacy policy.

5.5 For Legal Compliance and Safety

We may disclose your personal information: (a) to comply with applicable law, legal process, government requests, subpoenas, or court orders; (b) to protect the rights, safety, or property of Scrapbook, our users, or the public; (c) to detect, prevent, or investigate fraud, security incidents, or illegal activity; or (d) to enforce our Terms of Service and other agreements.

5.6 With Your Consent

We may share your personal information with third parties when you have provided your consent to such sharing.

5.7 Publicly Available User Content

User Content you post publicly on the Services, including your username, profile information, forum posts, gallery uploads, and reviews, may be visible to other users and to non-registered visitors. Publicly posted User Content may be indexed by search engines.

5.8 Aggregated or De-identified Information

We may share aggregated or de-identified information with third parties for analytics, research, and marketing purposes, provided such information does not permit the identification of any individual.

6. LAWFUL BASIS FOR PROCESSING (GDPR)

For users in the European Economic Area (EEA), our processing of your personal data is based on the following lawful bases under Article 6 of the GDPR:

•  Consent (Art. 6(1)(a)): We rely on your consent for certain processing activities, including the use of non-essential Tracking Technologies (advertising and analytics cookies and pixels). You may withdraw your consent at any time by adjusting your cookie preferences through the "Your Privacy Choices" footer link or the consent banner presented on your first visit.
•  Contract Performance (Art. 6(1)(b)): Processing is necessary to perform our contract with you, including creating and maintaining your Account, processing your orders, and delivering the Services you request.
• Legal Obligation (Art. 6(1)(c)): Processing is necessary to comply with our legal obligations, including tax law, consumer protection law, and regulatory requirements.
• Legitimate Interests (Art. 6(1)(f)): We process certain personal data on the basis of our legitimate interests, which include: (i) maintaining and improving the security and integrity of the Services; (ii) detecting and preventing fraud and unauthorized activity; (iii) understanding how users interact with the Services in order to improve them; (iv) marketing our products and services to existing customers in a manner proportionate and not overriding your privacy interests; and (v) managing and administering our business operations. We have assessed that our legitimate interests are not overridden by your rights and interests in each case.

For sensitive personal data, we rely on your explicit consent (Art. 9(2)(a)) unless another basis under Art. 9(2) applies.

7. COOKIES AND TRACKING TECHNOLOGIES

7.1 What Are Tracking Technologies

A cookie is a small text file transferred from a website to your device that allows the website to recognize your browser, remember your preferences, and collect information about your use of the website. Pixel tags, web beacons, and clear GIFs are tiny graphics embedded in web pages or emails that function similarly to cookies, they track whether a page or email has been opened, clicked, or shared, and transmit that information to the operator of the pixel.

We and our third-party partners use cookies, pixel tags, JavaScript tags, web beacons, local storage objects, and similar technologies (collectively, "Tracking Technologies") to collect information about your browsing activity on the Services and across third-party websites.

7.2 Cookie Table

The following table describes the categories of Tracking Technologies we use, the specific tools deployed in each category, and how you can manage your preferences:

Type of Cookie	Description	Managing Settings
Required/Strictly Necessary	These cookies are essential for the Website to function properly. They enable core features such as account login, shopping cart functionality, checkout, and session security. Without these cookies, the Services cannot be provided. These cookies do not collect information used for marketing or advertising.	These cookies cannot be disabled as they are required for the Services to function. You may block them via your browser settings, but doing so will impair your ability to use the Website.
Functional/Analytics (Non-Strictly Necessary)	These cookies help us understand how visitors use the Website and enable enhanced functionality and personalization. Tools in this category include: Google Analytics (traffic analysis, user behavior); Microsoft Clarity (heatmaps, session replays, behavioral metrics); and Osano CMP (consent management and preference storage). These cookies collect information in aggregate and anonymized form.	You may opt out of Google Analytics data collection by installing the Google Analytics Opt-Out Browser Add-On at https://tools.google.com/dlpage/gaoptout. For cookie settings by browser: Chrome: https://support.google.com/chrome/answer/95647; Firefox: https://support.mozilla.org/kb/enable-and-disable-cookies-website-preferences; Safari Desktop:https://support.apple.com/guide/safari/manage-cookies-sfri11471; Safari Mobile: https://support.apple.com/en-us/HT201265; Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft- edge.
Targeting/Advertising (Non-Strictly Necessary)	These cookies are used to deliver advertising relevant to your interests, to limit the number of times you see an ad, and to measure the effectiveness of advertising campaigns. Tools in this category include: Meta Pixel (Facebook advertising and retargeting; Pixel ID: 287877851382600); Pinterest Tag (Pinterest advertising and conversion tracking); Microsoft Advertising (Bing Ads retargeting); Google Ads / Google Remarketing (Google advertising and retargeting); and Bloomreach/Exponea (personalization and marketing automation). These cookies may transmit your browsing data to the respective advertising platforms for cross-context behavioral advertising purposes.	You may opt out of targeted advertising using these tools: Google Ad Settings: https://adssettings.google.com Google advertising opt-out: https://optout.aboutads.info Meta (Facebook) Ad Preferences: https://www.facebook.com/adpreferences Pinterest Ad Settings: https://pinterest.com/settings/privacy Microsoft Ad Opt-Out: https://account.microsoft.com/privacy Network Advertising Initiative (NAI) Opt-Out: https://optout.networkadvertising.org California, Colorado, and other state residents may also use the "Do Not Sell or Share My Personal Information" link in the footer of our Website to opt out of sharing your personal information with advertising platforms.

 

7.3 Your Cookie Choices

You can manage your cookie preferences at any time by clicking the "Your Privacy Choices" link in the footer of the Website, which opens the Osano consent management interface. You can also adjust your browser settings to refuse cookies; however, doing so may impair the functionality of the Services. Note that opting out of advertising cookies does not mean you will stop seeing ads, it means the ads you see will be less relevant to your interests. 

Users in California, Colorado, and other states with applicable privacy laws may exercise the right to opt out of sharing of personal information for cross-context behavioral advertising by clicking "Do Not Sell or Share My Personal Information" in our Website footer.

8. THIRD-PARTY SERVICE PROVIDERS

The following table lists the third-party service providers with whom we share personal information. This list may not be exhaustive; we maintain internal records of all service providers and update this list as our vendor relationships change. Each provider's privacy policy governs their use of information shared with them.

Third-Party Service Provider	Privacy Policy / Opt-Out Link
Google LLC (Google Analytics, Google Ads, Google Tag Manager)	https://policies.google.com/privacy
Meta Platforms, Inc. (Meta Pixel / Facebook Pixel, ID: 287877851382600)	https://www.facebook.com/privacy/policy/
Pinterest, Inc. (Pinterest Tag)	https://policy.pinterest.com/privacy-policy
Bloomreach, Inc. (formerly Exponea) — CRM, personalization, marketing automation	https://www.bloomreach.com/en/privacy-policies
Microsoft Corporation (Microsoft Clarity, Microsoft Advertising)	https://privacy.microsoft.com/en-us/privacystatement
Osano, Inc. (Consent Management Platform)	https://www.osano.com/legal/privacy

We require all service providers that process personal information on our behalf to implement appropriate data security measures and to process such information only in accordance with our instructions and applicable law. We do not authorize service providers to use your information for their own purposes except as permitted by this Policy or required by law.

9. THIRD-PARTY LINKS AND SERVICES

The Services may contain links to third-party websites and services. These third parties have their own independent privacy policies and data collection practices. Scrapbook has no responsibility or liability for the content, privacy practices, or activities of any third-party website or service. Even if Scrapbook deletes information from its systems, the third-party service provider's database may retain copies of that information, subject to the third party's own privacy policy. We welcome your feedback about third-party sites accessible through our Services.

10. DATA TRANSFER AND INTERNATIONAL STORAGE

Scrapbook is based in the United States. Your personal information is collected, stored, and processed on servers located in the United States. If you access the Services from outside the United States, your personal information will be transferred to and stored in the United States, where data protection laws may differ from those in your country of residence.

For users in the EEA and other jurisdictions with data transfer restrictions, we rely on your consent to the transfer of your personal information to the United States through your use of the Services. We apply the same privacy protections described in this Policy regardless of where your personal information is stored or processed.

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to comply with applicable legal obligations, resolve disputes, prevent fraud, and enforce our agreements. When personal information is no longer needed for these purposes, we will delete it or anonymize it. Specific retention periods vary by category of data and applicable law. Billing and transaction records are retained for the period required by applicable tax and regulatory law.

You may request deletion of your personal information as described in Section 23. Please note that we may retain certain information even after a deletion request where retention is required by law, necessary for legal claims, or technically required to maintain the integrity of existing records.

11. SECURITY OF YOUR PERSONAL INFORMATION

We implement administrative, technical, and organizational safeguards designed to protect your personal information from unauthorized access, use, disclosure, alteration, and destruction. Our security measures include: Transport Layer Security (TLS/SSL) encryption for data transmitted over the Internet; encrypted storage for sensitive data including payment information in our payment gateway systems; access controls limiting access to personal information to authorized personnel only; PCI DSS-compliant payment processing through third-party payment processors; and regular security assessments of our systems.

Your credit card information is transmitted via TLS/SSL encryption and stored in encrypted form by our payment processor. Scrapbook does not store your full credit card number on its servers.

No method of electronic transmission or storage is completely secure. While we use commercially reasonable safeguards to protect your personal information, we cannot guarantee absolute security. You provide your personal information to the Services at your own risk. If you believe your information may have been compromised, please contact us immediately at [email protected].

We encourage you to use strong, unique passwords for your Account, log out when you have finished using the Services, and close your browser when using a shared or unsecured device.

12. CHILDREN'S PRIVACY

The Services are not directed to or intended for children under the age of 18. Scrapbook does not knowingly or intentionally collect personal information from children under the age of 13. If Scrapbook becomes aware that it has collected personal information from a child under the age of 13 without verifiable parental consent, it will take prompt steps to deactivate the account and delete the information. If you are the parent or guardian of a child and believe Scrapbook has inadvertently collected personal information from that child, please contact us immediately at [email protected].

Users between the ages of 13 and 17 may access the Services only with the express permission and supervision of a parent or legal guardian who accepts the Terms of Service on their behalf.

13. PUSH NOTIFICATIONS AND ELECTRONIC COMMUNICATIONS

We may send you electronic communications, including emails, browser push notifications, and in-Service messages, about your Account, orders, and promotional offers. You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email

we send, or by updating your communication preferences in your account settings. You may disable browser push notifications through your browser or device settings. Disabling marketing communications will not affect transactional communications related to your Account or orders.

14. YOUR PRIVACY RIGHTS - GENERAL

Subject to applicable law, you may have the following rights with respect to your personal information:

• Right of Access: to request confirmation of whether we process your personal information and to receive a copy of it.
• Right to Correction / Rectification: to request that we correct inaccurate or incomplete personal information.
• Right of Erasure / Deletion: to request that we delete your personal information, subject to applicable legal exceptions.
• Right to Restriction of Processing: to request that we restrict our processing of your personal information in certain circumstances.
• Right to Data Portability: to receive your personal information in a structured, commonly used, machine-readable format.
• Right to Object: to object to our processing of your personal information on the basis of legitimate interests.
• Right to Opt Out of Automated Decision-Making: to not be subject to decisions made solely by automated means that produce legal or similarly significant effects on you.
• Right to Non-Discrimination: to not be discriminated against for exercising any of your privacy rights.

To exercise any of these rights, please contact us as set forth in Section 26. We will respond to verifiable requests within the timeframe required by applicable law. We may require you to verify your identity before processing your request.

15. EEA USERS - RIGHTS UNDER THE GDPR

If you are located in the European Economic Area (EEA), the GDPR grants you the following specific rights with respect to your personal data:

• Article 15 — Right of Access: to obtain confirmation that we process your personal data; to receive a copy of that data; and to receive supplementary information about the purposes of processing, the categories of data, the recipients, the storage period, the source of the data, and the existence of any automated decision-making.
• Article 16 — Right of Rectification: to have inaccurate personal data corrected and incomplete personal data completed.
• Article 17 — Right of Erasure (Right to be Forgotten): to have your personal data deleted when: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and there is no other lawful basis; (c) you object to processing and there are no overriding legitimate grounds; (d) the data was unlawfully processed; or (e) erasure is required by EU/EEA law.
• Article 18 — Right to Restriction of Processing: to have processing restricted while you contest the accuracy of data, while we determine whether our legitimate grounds override yours, or while we assess an objection.
• Article 20 — Right to Data Portability: to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller where technically feasible.
• Article 21 — Right to Object: to object at any time to processing of your personal data for direct marketing purposes (including profiling for direct marketing), or to processing based on legitimate interests, on grounds relating to your particular situation.
• Article 22 — Right Not to Be Subject to Automated Decision-Making: to not be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you, except where necessary for a contract, authorized by law, or based on your explicit consent.
• Right to Lodge a Complaint with a Supervisory Authority: you have the right to lodge a complaint with the data protection supervisory authority in the EEA member state of your habitual residence, your place of work, or the place of the alleged infringement. A directory of EEA supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

To exercise your GDPR rights, please contact us at [email protected] or by mail at the address in Section 26. We will respond to your request within one (1) month of receipt. For complex or numerous requests, we may extend this period by up to two (2) additional months with notice to you.

16. CALIFORNIA RESIDENTS - RIGHTS UNDER CCPA/CPRA

If you are a California resident, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together, "CCPA/CPRA"), provides you with the following rights:

16.1 Right to Know

You have the right to request that Scrapbook disclose: (a) the categories of personal information we have collected about you; (b) the categories of sources from which we collected your personal information; (c) our business or commercial purposes for collecting, selling, or sharing your personal information; (d) the categories of third parties with whom we share your personal information; and (e) the specific pieces of personal information we have collected about you.

16.2 Right to Delete

You have the right to request that Scrapbook delete personal information we have collected from you, subject to certain exceptions permitted by CCPA/CPRA, including where retention is necessary to complete a transaction, comply with a legal obligation, or exercise or defend legal claims.

16.3 Right to Correct Inaccurate Personal Information

You have the right to request that Scrapbook correct inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes for which we process it.

16.4 Right to Opt Out of Sale or Sharing

Scrapbook does not sell your personal information for monetary consideration. However, we share certain personal information with advertising partners (including Meta, Google, Pinterest, and Microsoft) for the purpose of cross-context behavioral advertising. Under CPRA, this constitutes "sharing" of personal information and you have the right to opt out of it. You may exercise this right by:

• Clicking "Do Not Sell or Share My Personal Information" in the footer of our Website; or
• Clicking "Your Privacy Choices" in the Website footer to adjust your advertising cookie preferences; or
• Contacting us at [email protected] with the subject line "California Opt-Out Request."

We also honor Global Privacy Control (GPC) signals as a valid opt-out of sharing for cross-context behavioral advertising for California residents.

16.5 Right to Limit Use of Sensitive Personal Information

If we collect Sensitive Personal Information (as defined by CPRA), you have the right to direct us to limit its use to purposes necessary to provide the Services. To exercise this right, please contact us at [email protected].

16.6 Right to Non-Discrimination

Scrapbook will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, or provide a different level of service because you exercised a privacy right.

16.7 Shine the Light

Under California Civil Code Section 1798.83, California residents may request, once per year and free of charge, information about the categories of personal information we disclosed to third parties for their own direct marketing purposes during the prior calendar year. To make such a request, please contact us at [email protected] with the subject line "Shine the Light Request."

16.8 How to Submit a Request

To exercise your California privacy rights, please contact us at [email protected] or mail us at the address in Section 26. We will respond within 45 days of receiving your request. If we need more time, we will notify you and may take up to an additional 45 days to respond. We

may require you to verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf by providing written authorization.

17. FLORIDA RESIDENTS - RIGHTS UNDER THE FLORIDA DIGITAL BILL OF RIGHTS

If you are a Florida resident, the Florida Digital Bill of Rights (Fla. Stat. § 501.701 et seq.), effective July 1, 2024, provides you with the following rights with respect to your personal data processed by Scrapbook:

• Right to Confirm: to confirm whether Scrapbook processes your personal data.
• Right of Access: to obtain a copy of your personal data that Scrapbook holds.
• Right to Correct: to request correction of inaccurate personal data.
• Right to Delete: to request deletion of personal data you have provided to Scrapbook or that Scrapbook has obtained about you.
• Right to Data Portability: to obtain a portable copy of your personal data in a readily usable format.
• Right to Opt Out of Targeted Advertising: to opt out of the processing of your personal data for the purpose of targeted advertising.
• Right to Opt Out of Profiling: to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.
• Right to Non-Discrimination: to not be discriminated against for exercising these rights.

Scrapbook does not sell personal data. To exercise any of these rights, please contact us at [email protected] or by mail at the address in Section 26. To opt out of targeted advertising, you may also click "Do Not Sell or Share My Personal Information" or "Your Privacy Choices" in the footer of our Website.

18. COLORADO, VIRGINIA, CONNECTICUT, TEXAS, AND OTHER STATE RESIDENTS

Residents of Colorado (Colorado Privacy Act), Virginia (Virginia Consumer Data Protection Act), Connecticut (Connecticut Data Privacy Act), Texas (Texas Data Privacy and Security Act), Montana, Oregon, Iowa, Indiana, Tennessee, and other states with applicable consumer privacy

laws have rights with respect to your personal data that may include: the right of access, the right to correction, the right to deletion, the right to data portability, and the right to opt out of the processing of your personal data for targeted advertising, the sale of your personal data, or profiling in furtherance of decisions with legal or similarly significant effects.

To exercise these rights, please contact us at [email protected] or by mail at the address in Section 26. We will respond within the timeframe required by applicable law. Colorado residents may also contact the Colorado Attorney General's Office regarding the rights described herein. We honor Global Privacy Control (GPC) signals as valid opt-out requests for applicable state residents.

19. NEVADA RESIDENTS

Under Nevada Revised Statutes Chapter 603A, certain Nevada residents may opt out of the sale of covered personal information for monetary consideration. Scrapbook does not engage in the sale of personal information for monetary consideration. Nonetheless, if you are a Nevada resident and wish to submit an opt-out request, you may do so by contacting us at [email protected] with the subject line "Nevada Opt-Out Request."

20. PAYMENT DATA

Payment card transactions are processed by third-party payment processors that are PCI DSS compliant. Scrapbook does not store your full credit card number on its servers. Your credit card information is transmitted via TLS/SSL encryption to our payment gateway provider's encrypted database, accessible only to authorized personnel. The payment processor's privacy policy governs the processing of your payment information at the time of purchase.

21. PURCHASE OR SALE OF BUSINESS

Scrapbook may purchase, sell, or transfer components of its business. If Scrapbook is involved in a merger, acquisition, asset sale, or similar transaction, personal information may be transferred as part of that transaction. We will notify you before your personal information becomes subject to a materially different privacy policy and provide you with options, where required by applicable law.

22. YOUR OBLIGATIONS

You are responsible for ensuring that the personal information you provide to Scrapbook is accurate, current, and complete. Please update your personal information promptly when it changes by logging in and visiting your "My Account" settings page. Inaccurate information may

affect the quality of Services we provide to you and may affect our ability to process your orders or communicate with you.

23. HOW TO STOP DATA COLLECTION AND EXERCISE PRIVACY RIGHTS

You have several options for limiting data collection and exercising your privacy rights:

• Account Cancellation: You may cancel your Scrapbook Account at any time by contacting us at www.scrapbook.com/contact. Cancellation may result in the permanent deletion of Account data from our systems.
• Email Opt-Out: Click the "unsubscribe" link in any marketing email, or update your communication preferences in your Account settings.
• Cookie and Tracking Technology Preferences: Click "Your Privacy Choices" in the Website footer to manage your cookie preferences through our Osano consent management interface. You may also disable cookies through your browser settings (see Section 7 for browser-specific instructions), though this may impair Website functionality.
• Do Not Sell or Share: California residents and residents of other states with applicable privacy laws may click "Do Not Sell or Share My Personal Information" in our Website footer to opt out of the sharing of personal information for cross-context behavioral advertising.
• Global Privacy Control (GPC): We honor GPC signals as valid opt-out requests for applicable state residents. If your browser transmits a GPC signal, we will treat it as an opt-out of sharing for cross-context behavioral advertising.
• Do Not Track: We acknowledge Do Not Track browser signals, although the current standard does not require a specific response to DNT signals and our response may be limited.
• Privacy Rights Requests: To submit a request to access, correct, delete, or port your personal information, or to exercise any other applicable privacy right, please contact us at [email protected].

Please note that after account deletion, some personal information may be retained in backup systems or in records required by law. Information you posted publicly to the Services may continue to be visible to others.

24. RETENTION OF YOUR INFORMATION

We retain personal information for as long as your Account is active and for a period thereafter as necessary to: fulfill the purposes described in this Policy; comply with our legal obligations under applicable federal, state, and international law (including tax and regulatory retention requirements); resolve disputes; prevent fraud; and enforce our agreements. After the applicable retention period, personal information is deleted or anonymized.

Transaction and billing records are retained for the period required by applicable tax and financial regulations. User Content you have posted publicly may remain accessible after your Account is closed unless you separately delete it. We will respond to verified deletion requests within the timeframe required by applicable law.

25. CHILDREN'S ONLINE PRIVACY PROTECTION

The Services are not intended for, directed to, or designed to attract children under the age of 13. Scrapbook does not knowingly collect personal information from children under the age of 13. If we become aware that a child under 13 has provided us with personal information without verifiable parental consent, we will take steps to deactivate the account and delete that information as promptly as possible. If you are a parent or guardian and you believe that your child under the age of 13 has provided personal information to Scrapbook, please contact us immediately at [email protected].

26. HOW TO CONTACT US

For privacy questions, rights requests, or concerns about this Policy, please contact us:

Scrapbook.com, LLC
Attn: Legal Department
1495 E. Baseline Rd., Suite 102
Gilbert, AZ 85233
United States
Email: [email protected]
Phone: (800) 727-2726
Web: www.scrapbook.com/contact

For accessibility inquiries: [email protected] | 1 (855) 625-1162

---