Supurb Privacy Policy

Effective Date: June 6, 2026

Introduction

Supurb Holdings Inc. ("Supurb," "we," "our," or "us") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access or use the Supurb website, mobile applications, communications, customer support channels, and related services (collectively, the "Platform").

By accessing or using the Platform, you acknowledge that you have read and understand this Privacy Policy.

Table of Contents

• Introduction
• 1. Scope of This Privacy Policy
• 2. Information We Collect
• 3. Cookies and Similar Technologies
• 4. How We Use Information
• 5. How We Share Information
• 6. Communications
• 7. Cannabis Compliance and Verification
• 8. Data Retention
• 9. Data Security
• 10. Your Privacy Choices
• 11. Children's Privacy
• 12. Third-Party Services
• 13. Changes to This Privacy Policy
• 14. Contact Us

1. Scope of This Privacy Policy

This Privacy Policy applies to information collected when you:

• Visit our website
• Create an account
• Place an order
• Complete identity verification
• Receive deliveries
• Contact customer support
• Subscribe to communications
• Use any Supurb mobile application
• Interact with the Platform

This Privacy Policy does not apply to information collected directly by licensed cannabis retailers, payment processors, or third parties that maintain their own privacy practices.

2. Information We Collect

Information You Provide

We may collect information that you voluntarily provide to us, including:

• Name
• Email address
• Phone number
• Date of birth
• Delivery address
• Billing address
• Username and password
• Customer support communications
• Reviews and ratings
• Marketing preferences

Identity Verification Information

To comply with applicable laws and platform requirements, we may collect:

• Government-issued identification
• Identification numbers
• Identification expiration dates
• Verification status information
• Medical cannabis card information
• Caregiver information
• Verification photographs or images

Identity verification information may be processed by trusted third-party verification providers acting on our behalf.

Transaction Information

We may collect information related to transactions conducted through the Platform, including:

• Order history
• Products ordered
• Purchase amounts
• Delivery information
• Retailer information
• Payment confirmation information
• Refund requests
• Customer support interactions

Location Information

We may collect precise or approximate location information, including:

• Delivery addresses
• GPS location data
• Device location information
• IP address location information

Location information may be used to determine delivery eligibility, verify compliance with applicable laws, prevent fraud, and improve Platform functionality.

Device and Usage Information

We may automatically collect information regarding your use of the Platform, including:

• IP address
• Browser type
• Device type
• Operating system
• Mobile device identifiers
• Application version
• Usage activity
• Referral URLs
• Pages viewed
• Session information
• Crash reports
• Diagnostic information

3. Cookies and Similar Technologies

We use cookies, pixels, SDKs, web beacons, and similar technologies to:

• Authenticate users
• Remember preferences
• Analyze usage patterns
• Improve Platform performance
• Detect and prevent fraud
• Measure marketing effectiveness

You may modify your browser settings to control cookies; however, some Platform features may not function properly if cookies are disabled.

4. How We Use Information

We use information we collect to:

• Create and manage user accounts
• Verify identity and eligibility
• Process orders
• Facilitate deliveries
• Coordinate with licensed retailers and delivery providers
• Process payments
• Provide customer support
• Send transactional communications
• Send marketing communications where permitted by law
• Detect fraud and abuse
• Comply with legal obligations
• Enforce our Terms of Use
• Improve and develop products and services
• Conduct analytics and research

5. How We Share Information

Licensed Cannabis Retailers

We may share information necessary to process and fulfill orders, including your name, date of birth, delivery information, verification status, and order information.

Delivery Providers

We may share information necessary to complete deliveries, including your name, delivery address, contact information, and order information.

Service Providers

We may share information with vendors providing services such as:

• Identity verification
• Payment processing
• Cloud hosting
• Analytics
• SMS messaging
• Email delivery
• Customer support
• Security monitoring

These service providers are authorized to use information only as necessary to perform services on our behalf.

Legal and Regulatory Requirements

We may disclose information when required by applicable law, court order, regulatory request, law enforcement request, or other legal process.

We may also disclose information to protect our rights, users, retailers, delivery providers, or the public.

Business Transfers

Information may be transferred as part of a merger, acquisition, financing transaction, corporate restructuring, sale of assets, bankruptcy proceeding, or similar business event.

6. Communications

We may communicate with you through:

• Email
• SMS
• Push notifications
• Telephone calls
• In-app notifications

Communications may include:

• Verification codes
• Account notifications
• Security alerts
• Order updates
• Delivery updates
• Customer support responses
• Marketing communications

Message and data rates may apply.

You may opt out of marketing communications at any time; however, operational communications necessary to provide services may continue.

7. Cannabis Compliance and Verification

To comply with applicable cannabis laws and retailer requirements, Supurb may verify:

• Age
• Identity
• Medical patient status
• Caregiver status
• Delivery eligibility
• Order eligibility

Verification records may be retained for compliance, fraud prevention, audit, legal, and regulatory purposes.

8. Data Retention

We retain information for as long as reasonably necessary to:

• Provide services
• Maintain accounts
• Fulfill legal obligations
• Resolve disputes
• Enforce agreements
• Prevent fraud
• Maintain business records

Retention periods may vary depending on the type of information and applicable legal requirements.

9. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information.

Although we use commercially reasonable measures to protect information, no method of transmission or storage is completely secure. Accordingly, we cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their account credentials.

10. Your Privacy Choices

Subject to applicable law, you may:

• Access certain account information
• Update account information
• Correct inaccurate information
• Request deletion of eligible information
• Opt out of marketing communications
• Manage communication preferences

Privacy requests may be submitted to:

support@supurb.com

We may need to verify your identity before processing certain requests.

Certain information may be retained where required by law or necessary for compliance, fraud prevention, dispute resolution, security, or business recordkeeping purposes.

11. Children's Privacy

The Platform is not intended for individuals who are not legally eligible to purchase cannabis products under applicable law.

We do not knowingly collect personal information from individuals who are not legally eligible to use the Platform.

If we learn that we have collected information from an ineligible individual, we may delete the information and terminate the associated account.

12. Third-Party Services

The Platform may contain links to third-party websites, applications, or services.

Supurb is not responsible for the privacy practices, content, or security of third parties.

Users should review the privacy policies of third-party services before providing information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Material changes may be communicated through the Platform, email, SMS, or other reasonable methods.

Your continued use of the Platform following the effective date of any changes constitutes acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions regarding this Privacy Policy, your personal information, our privacy practices, or would like to submit a privacy-related request, please contact:

Supurb Holdings Inc.
support@supurb.com

We will use commercially reasonable efforts to respond to privacy inquiries and requests in a timely manner.

Privacy requests, account deletion requests, verification-related requests, and communication preference updates may also be submitted to support@supurb.com.