Privacy Addendum — EU & California
This addendum supplements our Privacy Policy and applies to customers in the European Union, United Kingdom, and California. In case of conflict, this addendum controls for those residents.
Last updated: June 19, 2026
A. GDPR Lawful Bases (EU & UK Customers)
| Purpose | Legal Basis |
|---|---|
| Processing your order | Performance of a contract |
| Fraud prevention and security | Legitimate interests |
| Marketing emails and SMS | Consent (withdraw anytime) |
| Personalized advertising | Consent |
| Legal compliance | Legal obligation |
| Improving our services | Legitimate interests |
B. Cookie Categories
| Cookie Type | Purpose | Can Opt Out? |
|---|---|---|
| Essential | Cart, checkout, login — required for store to function | No |
| Analytics | Site usage and performance (e.g. Google Analytics) | Yes |
| Marketing | Ad tracking and retargeting | Yes |
| Personalization | Remember preferences and customize experience | Yes |
We honor the Global Privacy Control (GPC) opt-out signal.
C. Data Retention Schedule
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (tax and legal compliance) |
| Account information | Until deletion + 1 year |
| Marketing data | Until you opt out or unsubscribe |
| Customer support communications | 3 years |
| Analytics and behavioral data | 26 months |
| Legal and compliance records | As required by law |
D. Do Not Sell or Share My Personal Information (California)
Sharing data with advertising partners for targeted advertising may be considered a "sale" or "sharing" under California law (CCPA/CPRA).
To opt out, email us at support@jazbodyessentials.com with the subject line "Do Not Sell or Share My Data" or use the opt-out link in our cookie consent tool.
We do not knowingly sell or share personal information of consumers under 16 years of age.
E. Your Rights by Region
EU/UK (GDPR): Access, rectification, erasure, restriction, portability, objection, withdraw consent, lodge a complaint with your local supervisory authority.
California (CCPA/CPRA): Know, delete, correct, opt out of sale/sharing, limit use of sensitive data, non-discrimination, appeal.
To exercise any right, contact: support@jazbodyessentials.com
Response time: 30 days (GDPR) / 45 days (CCPA).
F. International Data Transfers
Your data may be transferred to and processed in the United States. For EU/UK transfers, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.
G. Contact for Privacy Requests
JAZ Body Essentials
Privacy Request Email: support@jazbodyessentials.com
850 Dogwood Rd B200 #2409, Lawrenceville, GA 30044
This addendum does not constitute legal advice. Please consult your attorney to confirm compliance with applicable law.