Privacy Policy

MAV FARM INC.

PRIVACY POLICY

Last Updated: October 8, 2026

Mav Farm Inc. (“MAV FARM,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you access or use our website at https://www.mav.farm, the MAV FARM Shopify application (“Shopify App”), our marketplace, and related software, integrations, applications, features, and services (collectively, the “Services”).

This Privacy Policy applies to Customers, visitors, Stores, Store representatives, and other individuals whose personal information we process in connection with the Services.

For purposes of this Privacy Policy, “Stores” means independent brands, retailers, and merchants offering products through our Services or participating marketplaces. “Customers” means individuals purchasing or considering products offered by Stores.

Our Services include a multichannel commerce integration connecting Shopify Stores with the MAV FARM, FORM, OVER UNDER (“OU”), and WEEKENDS marketplaces (collectively, “Participating Marketplaces”).

This Privacy Policy describes MAV FARM's privacy practices. Each Participating Marketplace and Store may also maintain its own Privacy Policy governing its independent collection and use of personal information.

This Privacy Policy is intended to provide notice of our privacy practices and does not waive or limit rights provided by applicable law.

1. INFORMATION WE COLLECT

We collect personal information directly from you, automatically through your interactions with the Services, from Shopify and connected Stores, from Participating Marketplaces, and from authorized service providers and business partners.

“Personal Information” means information that identifies, relates to, describes, or can reasonably be linked to an individual, as defined by applicable law.

1.1 Information You Provide

Depending on how you interact with the Services, we may collect:

Name, email address, telephone number, and mailing address.
Account credentials and authentication information.
Business name, Store name, website, and business contact details.
Customer service requests, correspondence, and feedback.
Reviews, photographs, videos, comments, and other content you submit.
Preferences, interests, and marketing communication choices.
Information submitted when registering for a marketplace or connecting a Shopify store.

1.2 Information from Shopify Stores

When a Store installs or connects the Shopify App, we may access and process information made available through Shopify's APIs and the permissions authorized by the Store.

This may include:

Store Information: Store name, domain, contact information, Shopify identifiers, account configuration, and integration settings.

Product Information: Product names, descriptions, photographs, variants, categories, pricing, inventory, availability, and related catalog data.

Order Information: Order identifiers, products purchased, quantities, discounts, order values, taxes, shipping charges, order status, and transaction-related records.

Customer Information: Customer names, email addresses, telephone numbers, shipping and billing addresses, and other information necessary to process, transmit, fulfill, or support orders.

Fulfillment Information: Shipping methods, tracking numbers, fulfillment status, delivery information, returns, cancellations, and refunds.

Integration Information: Connection status, API permissions, synchronization logs, errors, and technical information necessary to operate the Shopify App.

We collect and use Shopify information only as permitted by applicable permissions, agreements, law, and the purposes described in this Privacy Policy.

1.3 Information from Participating Marketplaces

When Stores participate in FORM, OU, WEEKENDS, or MAV FARM, we may receive information necessary to support marketplace operations and Shopify synchronization.

This may include marketplace identifiers, product listing information, order attribution, order details, fulfillment updates, Customer service information, and commission-related records.

1.4 Information Collected Automatically

When you access or interact with the Services, we may collect:

IP address and approximate location inferred from IP address.
Device identifiers and browser information.
Operating system, device type, and network information.
Pages viewed, links clicked, and interactions with the Services.
Referral sources and marketing campaign information.
Session activity, timestamps, and usage patterns.
Application performance, diagnostic information, and error logs.
Cookie identifiers and similar online identifiers.

Where device permissions and applicable law permit, certain Services may also collect location information. You may control device-based location permissions through your device settings.

1.5 Information from Service Providers and Business Partners

We may receive information from analytics providers, advertising partners, fraud prevention services, Shopify, Participating Marketplaces, and other authorized partners.

This may include technical identifiers, usage information, marketing attribution, transaction information, and information needed to verify or support marketplace operations.

1.6 Sensitive Personal Information

Certain information, such as account credentials, payment-related identifiers, or other information classified as sensitive under applicable law, may be processed when necessary to provide or secure the Services.

We do not intentionally collect sensitive personal information beyond what is reasonably necessary for the Services or other disclosed lawful purposes.

We do not use sensitive personal information to infer sensitive characteristics for advertising purposes unless specifically disclosed and lawfully authorized.

2. HOW WE USE PERSONAL INFORMATION

We use personal information for the following purposes.

2.1 Providing the Services

To operate MAV FARM's marketplace, maintain accounts, provide the Shopify App, enable marketplace connections, and deliver requested features.

2.2 Shopify Integration and Synchronization

To synchronize products, inventory, pricing, orders, fulfillment information, and related commerce data between connected Shopify Stores and enabled Participating Marketplaces.

2.3 Marketplace Transactions

To facilitate product discovery, transmit orders, support fulfillment, provide Customer service, and coordinate transaction-related communications.

2.4 Commissions and Billing

To identify the marketplace where a Sale originated, calculate applicable commissions, maintain billing records, support Shopify commission collection, and reconcile billing adjustments.

For Shopify App transactions, the Store charges the Customer and receives purchase proceeds through Shopify. Shopify collects applicable marketplace commissions from Stores and remits them to MAV FARM.

MAV FARM does not ordinarily collect or hold the underlying Customer purchase proceeds for these transactions.

2.5 Customer Support

To respond to inquiries, resolve technical problems, investigate complaints, and communicate with Stores and Customers.

2.6 Personalization and Recommendations

To personalize product discovery, recommendations, merchandising, search results, and other Services based on relevant preferences, product information, and interactions.

2.7 Analytics and Product Improvement

To understand how the Services are used, evaluate performance, identify technical issues, test features, and improve marketplace and integration functionality.

2.8 Marketing and Advertising

To communicate about products, participating brands, promotions, events, and services; measure advertising performance; and, where permitted by law, deliver relevant advertising.

2.9 Security and Fraud Prevention

To authenticate accounts, detect suspicious activity, prevent unauthorized access, investigate fraud, and protect Users, Stores, and the Services.

2.10 Legal and Regulatory Compliance

To comply with applicable laws, respond to lawful requests, maintain required records, enforce agreements, and establish, exercise, or defend legal claims.

2.11 Business Administration

To conduct internal reporting, financial administration, auditing, business planning, and corporate transactions.

3. SHOPIFY APP AND MULTICHANNEL DATA SHARING

3.1 Shopify Integration

The Shopify App connects a Store's Shopify store with enabled Participating Marketplaces.

The Store authorizes MAV FARM to access and synchronize information within the permissions granted through Shopify.

The information exchanged depends on the features enabled and the requirements of the Participating Marketplace.

3.2 Product and Inventory Data

We may transmit product descriptions, photographs, prices, inventory, and other catalog information from Shopify to enabled Participating Marketplaces.

Updates may also be transmitted between systems to maintain product listings and availability.

3.3 Customer and Order Data

When a Customer purchases a product through a Participating Marketplace, relevant order information may be transmitted to the Store's Shopify system and to authorized parties involved in processing, fulfilling, or supporting the transaction.

Such information may include Customer contact details, shipping information, purchased products, order identifiers, and fulfillment status.

3.4 Commission Information

We may process order attribution, product sales amounts, refunds, adjustments, and related transaction information to calculate applicable marketplace commissions and support Shopify billing.

Shipping charges and taxes are excluded from the commission base under the applicable merchant arrangements.

3.5 Separate Marketplace Operators

FORM, OU, and WEEKENDS may operate independently and maintain their own privacy practices.

When information is provided to another Participating Marketplace for that marketplace's independent operations, its applicable Privacy Policy may govern its subsequent use of the information.

MAV FARM's provision of shared integration technology does not automatically make MAV FARM responsible for every independent processing activity conducted by another marketplace operator.

3.6 Store Responsibilities

Stores are independently responsible for their collection and use of Customer information, including Shopify checkout, order fulfillment, returns, refunds, and marketing activities.

Stores must provide appropriate privacy notices and comply with applicable privacy and data protection laws.

3.7 Data Processing Roles

Depending on the activity, MAV FARM may process personal information as an independent business or controller, or as a service provider or processor acting on documented instructions from a Store or another Participating Marketplace.

The applicable role depends on the purpose of processing, contractual arrangements, and applicable law.

Where required, we enter into appropriate data processing or data sharing agreements.

3.8 Shopify App Removal

If a Store uninstalls or disconnects the Shopify App, future data synchronization may cease.

We may retain information for legitimate operational, accounting, security, legal, or compliance purposes, subject to applicable law and Shopify requirements.

4. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients.

4.1 Stores

We disclose Customer information to the applicable Store as necessary to process purchases, fulfill orders, provide support, handle returns, and satisfy legal obligations.

4.2 Participating Marketplaces

We disclose relevant information to FORM, OU, WEEKENDS, and MAV FARM marketplace systems where necessary to provide enabled multichannel services.

4.3 Shopify and Payment Providers

We exchange relevant information with Shopify and authorized payment providers for integration, transactions, commission billing, refunds, fraud prevention, and related services.

Payment card information is generally collected and processed directly by the applicable Store's payment provider rather than stored by MAV FARM.

4.4 Service Providers

We may disclose information to vendors providing hosting, cloud infrastructure, analytics, customer communications, customer support, security, fraud prevention, software development, and other operational services.

4.5 Advertising and Analytics Partners

Where permitted by law, we may disclose identifiers and activity information to advertising, measurement, and analytics providers for campaign measurement, attribution, remarketing, and related purposes.

Certain disclosures may constitute a “sale” or “sharing” of personal information under California law, even where no money is exchanged for the information.

4.6 Affiliates and Business Partners

We may disclose information to affiliates and business partners for legitimate operational purposes, subject to applicable privacy laws and contractual protections.

4.7 Legal and Safety Purposes

We may disclose information when reasonably necessary to comply with law, respond to lawful requests, enforce agreements, investigate fraud, protect safety, or defend legal claims.

4.8 Corporate Transactions

Information may be disclosed or transferred in connection with a merger, acquisition, financing, restructuring, bankruptcy, or sale of business assets, subject to applicable law.

4.9 With Your Direction or Consent

We may disclose information where you direct us to do so or provide legally valid consent.

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, pixels, software development kits, and similar technologies to operate, secure, analyze, and improve the Services and support marketing activities.

5.1 Essential Cookies

These support account authentication, security, session management, and core functionality.

5.2 Functional Cookies

These remember preferences, settings, and other choices.

5.3 Analytics Cookies

These help us understand usage patterns, measure performance, and improve the Services.

5.4 Advertising Cookies and Pixels

These may support advertising attribution, audience measurement, remarketing, and interest-based advertising.

5.5 Email Tracking

Where permitted by law, email communications may contain technologies that help measure delivery, opens, and engagement.

5.6 Cookie Preferences

You may control certain cookies through browser settings or privacy preference tools made available through the Services.

Disabling cookies may affect functionality.

Where required by law, we obtain consent before using nonessential tracking technologies.

5.7 Global Privacy Control

Where applicable law requires, we recognize qualifying browser-based opt-out preference signals, including Global Privacy Control (“GPC”), as requests to opt out of the sale or sharing of personal information associated with the relevant browser or device.

5.8 Do Not Track

Some browsers provide a legacy “Do Not Track” setting. Our Services do not necessarily respond to that setting. This is separate from our obligation to recognize legally required opt-out preference signals.

6. ANALYTICS, ADVERTISING, AND SERVICE PROVIDERS

Our existing privacy disclosures identify the following providers or platforms. The actual providers used may change, and each provider's processing is subject to its applicable terms and privacy practices.

6.1 Google Analytics

Google Analytics may be used to measure website traffic, engagement, and usage.

Google's Privacy Policy: https://policies.google.com/privacy

6.2 RudderStack

RudderStack may be used for event collection, analytics infrastructure, and customer data routing.

6.3 Shopify

Shopify supports merchant integrations, transactions, and commission billing.

6.4 Google Ads

Google Ads may be used for advertising, conversion measurement, and remarketing.

Privacy Information: https://policies.google.com/privacy

6.5 Meta / Facebook

Meta technologies may be used for advertising, remarketing, and campaign measurement.

6.6 X

X may be used for advertising and remarketing.

6.7 Pinterest

Pinterest may be used for advertising and audience measurement.

6.8 AdRoll / NextRoll

AdRoll may be used for digital advertising and remarketing.

6.9 Klaviyo

Klaviyo may be used for email communications, marketing automation, and related customer engagement services.

Privacy Information: https://www.klaviyo.com/legal/privacy/privacy-notice

6.10 Other Providers

We may use additional hosting, security, analytics, communications, software, and operational providers.

We require appropriate contractual safeguards where applicable law requires them.

The identification of a provider in this Policy does not mean that every provider receives every category of personal information.

7. MARKETING COMMUNICATIONS

We may send you promotional communications concerning MAV FARM, participating brands, products, services, events, and related offerings where permitted by law.

You may unsubscribe from marketing emails using the unsubscribe mechanism provided in those messages or by contacting us.

You may continue to receive nonmarketing communications concerning transactions, security, account administration, or legal matters.

A Customer's purchase from a Store does not, by itself, constitute blanket consent to receive unrelated marketing from that Store or another Participating Marketplace. Each party must comply with applicable marketing and privacy requirements.

8. PERSONALIZATION, RECOMMENDATIONS, AND AUTOMATED PROCESSING

We may use product information, preferences, purchase history, browsing activity, and other relevant information to personalize search results, product recommendations, merchandising, and related features.

Certain features may use automated systems to rank products, identify relevant content, detect suspicious activity, or improve marketplace operations.

Where applicable law provides rights concerning automated decision-making or profiling, we will honor those rights to the extent they apply to our processing.

We will provide additional notices or choices where required for automated decisions that produce legal or similarly significant effects.

9. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

Providing accounts, marketplace services, and Shopify integrations.
Maintaining product and order synchronization.
Completing transactions and handling returns or disputes.
Maintaining accounting, commission, and tax records.
Preventing fraud and protecting security.
Complying with legal and regulatory requirements.
Establishing, exercising, or defending legal claims.

Retention periods depend on the category of information, purpose of processing, applicable contractual obligations, and legal requirements.

When information is no longer reasonably necessary, we delete, deidentify, or securely dispose of it, subject to applicable law and technical limitations.

Deidentified or aggregated information may be retained for legitimate analytical purposes where permitted by law.

10. DATA SECURITY

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, or loss.

Measures may include access controls, authentication, encryption where appropriate, monitoring, and vendor security practices.

No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a security incident requiring notification under applicable law, we will provide required notices and take appropriate remedial measures.

11. INTERNATIONAL DATA TRANSFERS

MAV FARM is based in the United States, and information may be processed or stored in the United States or other countries where we or our service providers operate.

Where required by applicable law, we implement appropriate safeguards for international transfers, which may include standard contractual clauses or other lawful transfer mechanisms.

12. YOUR PRIVACY CHOICES

Depending on your location and applicable law, you may have rights to:

Access personal information we maintain about you.
Obtain a portable copy of certain information.
Correct inaccurate information.
Request deletion of information.
Object to or restrict certain processing.
Withdraw consent where processing is based on consent.
Opt out of targeted advertising or the sale or sharing of personal information.
Limit certain uses of sensitive personal information.
Challenge certain automated decisions where applicable law provides that right.
Appeal a denial of a privacy request where required by law.

To submit a request, contact legal@mav.farm.

We may request information reasonably necessary to verify your identity or authority.

Where information is processed on behalf of a Store or Participating Marketplace, we may refer your request to the relevant business or assist it in responding.

You may also manage certain information through your account, Shopify, browser, or device settings.

13. CALIFORNIA PRIVACY NOTICE

This section supplements the Privacy Policy for California residents and is intended to address the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”).

13.1 Categories of Personal Information

Depending on the Services used, we may collect the following categories:

Identifiers: Names, addresses, email addresses, telephone numbers, IP addresses, account identifiers, and similar identifiers.

California Customer Records Information: Contact details, transaction-related information, and other information covered by California Civil Code § 1798.80(e), where applicable.

Commercial Information: Products purchased or considered, order history, transaction records, marketplace attribution, and related commerce information.

Internet or Network Activity: Browsing activity, interactions with websites and applications, advertising interactions, and usage logs.

Geolocation Information: Approximate location inferred from IP addresses and, where enabled and permitted, device location information.

Professional or Business Information: Store representative information, business roles, and merchant contact details.

Inferences: Preferences, interests, and product affinities inferred from interactions with the Services.

Sensitive Personal Information: Account authentication information and other sensitive information processed where necessary for the Services.

We do not intentionally collect biometric identifiers, protected classification information, or health information for ordinary marketplace operations unless specifically disclosed and lawfully authorized.

13.2 Sources

We collect information from individuals, Shopify, connected Stores, Participating Marketplaces, service providers, advertising partners, and automatic collection technologies.

13.3 Purposes

We use personal information for the business and commercial purposes described in Sections 2 through 8, including providing Services, processing orders, synchronizing marketplace information, billing commissions, preventing fraud, improving functionality, and supporting marketing.

13.4 Categories of Recipients

We may disclose relevant information to Stores, Participating Marketplaces, Shopify, payment providers, hosting and technology providers, analytics services, advertising partners, affiliates, and authorized business partners.

The categories disclosed depend on the purpose and recipient.

13.5 Sale and Sharing of Personal Information

We do not describe ordinary marketplace operations as selling Customer information for monetary payment.

However, certain disclosures of identifiers and internet activity information to advertising and remarketing partners may constitute a “sale” or “sharing” under the CCPA, including sharing for cross-context behavioral advertising.

We may engage in such activities where legally permitted and subject to applicable opt-out rights.

Operational transfers necessary to complete transactions or provide Shopify integration services are evaluated separately from advertising-related disclosures.

13.6 Right to Opt Out

California residents may request that we stop selling or sharing their personal information by:

(a) contacting legal@mav.farm;

(b) using the “Your Privacy Choices” mechanism made available on our Website; or

We will honor qualifying requests as required by law.

13.7 Sensitive Personal Information

We use sensitive personal information primarily for purposes reasonably necessary to provide, secure, and maintain the Services.

If we use or disclose sensitive personal information for additional purposes that trigger a right to limit under California law, we will provide the required notice and method to exercise that right.

13.8 California Privacy Rights

Subject to applicable exceptions, California residents may have the right to:

(a) know the categories and specific pieces of personal information collected;

(b) access personal information;

(d) request deletion;

(e) opt out of sale or sharing;

(f) limit certain uses of sensitive personal information;

(g) obtain information about applicable automated decision-making activities and exercise related rights where required; and

(h) exercise privacy rights without unlawful discrimination or retaliation.

13.9 Authorized Agents

You may designate an authorized agent to submit certain privacy requests on your behalf.

We may request proof of authorization and identity verification where permitted by law.

13.10 Response Times

We respond to verified privacy requests within the periods required by applicable law, including extensions where legally permitted.

13.11 Minors

We do not knowingly sell or share the personal information of individuals under sixteen (16) years of age without the affirmative authorization required by applicable law.

13.12 Notice at Collection

The categories of personal information collected, purposes of use, retention practices, and relevant sale or sharing disclosures are described in this Policy.

Additional notices may be presented at specific collection points where required.

13.13 California Shine the Light

California residents with an established business relationship may request information concerning certain disclosures of personal information to third parties for their direct marketing purposes, as provided by California Civil Code § 1798.83.

Requests may be submitted to legal@mav.farm.

14. OTHER UNITED STATES PRIVACY RIGHTS

Residents of certain states, including Colorado, Connecticut, Virginia, Utah, and other states with applicable comprehensive privacy laws, may have additional rights concerning access, correction, deletion, portability, targeted advertising, sale of personal information, sensitive data, or certain profiling activities.

We will honor applicable rights and provide appeal procedures where required by law.

Requests may be submitted to legal@mav.farm.

15. EUROPEAN ECONOMIC AREA, UNITED KINGDOM, AND SWITZERLAND

Where the European Union General Data Protection Regulation (“GDPR”), United Kingdom GDPR, or corresponding Swiss privacy laws apply, the following additional disclosures are relevant.

15.1 Legal Bases

Depending on the processing activity, we may rely on:

Contractual Necessity: To provide requested Services, maintain accounts, operate integrations, and perform contractual obligations.

Legitimate Interests: To maintain security, prevent fraud, improve Services, administer business operations, and support lawful business activities where those interests are not overridden by applicable rights.

Consent: For certain marketing, tracking, or other processing activities where consent is required.

Legal Obligations: To comply with applicable law and regulatory requirements.

Vital Interests or Public Interest: Where applicable under the relevant legal requirements.

15.2 Your Rights

Where applicable, you may have rights to access, rectify, erase, restrict processing, object to processing, obtain data portability, withdraw consent, and exercise rights concerning certain automated decisions.

15.3 Complaints

You may lodge a complaint with an appropriate data protection supervisory authority.

15.4 International Transfers

Where required, transfers outside the relevant jurisdiction will be supported by an appropriate legal transfer mechanism.

15.5 Contact

You may contact legal@mav.farm concerning GDPR-related requests.

16. AUSTRALIA PRIVACY DISCLOSURES

Where the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles apply, we process personal information in accordance with those requirements.

Australian individuals may request access to or correction of their personal information and submit privacy complaints using the contact information below.

We may disclose information to overseas recipients, including service providers and marketplace partners, as described in this Privacy Policy, subject to applicable law.

17. CHILDREN'S PRIVACY

The Services are not directed to children under thirteen (13) years of age.

We do not knowingly collect personal information directly from children under thirteen without legally required parental authorization.

If we learn that we have collected such information unlawfully, we will take appropriate steps to delete it or otherwise comply with applicable law.

Parents or guardians who believe a child has provided personal information may contact support@mav.farm.

Additional protections apply to minors under applicable state, federal, and international laws.

18. THIRD-PARTY WEBSITES AND SERVICES

The Services may link to websites or services operated by Stores, Participating Marketplaces, Shopify, and other third parties.

Those parties may maintain independent privacy policies and practices.

We encourage you to review their policies before providing personal information.

MAV FARM is not responsible for independent third-party privacy practices except to the extent required by applicable law.

19. RELATED MARKETPLACE PRIVACY POLICIES

The following policies may apply depending on the Services and Participating Marketplaces you use.

MAV FARM

WEEKENDS

Store Agreement: https://www.weekends.world/storeagreement

OVER UNDER

Store Agreement: https://www.over---under.com/company/store-agreement

FORM

Store Agreement: [Insert URL]

References to other marketplace policies do not mean that every policy applies to every User. Applicability depends on the relevant marketplace, services, and processing activities.

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our Services, technologies, data practices, or legal obligations.

When we make changes, we will revise the “Last Updated” date.

For material changes, we will provide additional notice where required by law, which may include email, account notifications, or prominent notices within the Services.

Where legally required, we will obtain consent before applying materially different processing practices.

21. CONTACT US

Mav Farm Inc.

8605 Santa Monica Blvd, PMB 97559
West Hollywood, CA 90069
United States

General Support:support@mav.farm

Privacy and Legal Requests:legal@mav.farm

Website:https://www.mav.farm

You may contact us to request access, correction, deletion, opt-out, or other privacy rights, or to ask questions about this Privacy Policy.