Powered by 4ocean | Sustainability Programs That Grow Your Business

Privacy Policy

How 4ocean PBC collects, uses, discloses, retains, and protects your personal information.

Last Updated: September 1, 2026

4ocean PBC (“4ocean,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or interact with 4ocean.com and other websites, online stores, services, communications, and digital experiences that link to this Privacy Policy (collectively, the “Services”). It also explains the privacy rights and choices that may be available to you depending on where you live.

4ocean PBC

Email: info@4ocean.com

Phone: 561-270-0650

For purposes of applicable data protection laws, 4ocean PBC is the business, controller, or other entity responsible for determining how and why your personal information is processed, except where otherwise stated.

1. Personal Information We Collect

The personal information we collect depends on how you interact with 4ocean and the Services.

Information You Provide Directly

We may collect information you provide to us, including:

If you make a purchase, payment information is processed by our payment providers. We generally do not receive or store complete payment card numbers.

Partnership and Business Inquiry Information

If you submit a partnership, licensing, corporate gifting, wholesale, sponsorship, or other business inquiry, we may collect:

We may also create or receive inferences about likely partnership interests, fit, priorities, or readiness based on information you provide and your interactions with the Services.

Information Collected Automatically

When you use our Services, we and our service providers may automatically collect information about your device and how you interact with our Services, including:

We may collect this information using cookies, pixels, tags, software development kits, APIs, server logs, local storage, and similar technologies.

Information We Receive From Other Sources

We may receive personal information from third parties, including:

We may combine information obtained from these sources with information we collect directly from you.

Technologies and Service Providers We Use

To operate, secure, analyze, and improve our Services, we use the following technologies and service providers, which may collect or process information about your device, activity, or communications with us:

These providers process information under their own privacy notices as well as our agreements with them. We may add, replace, or remove providers over time and will update this list when we make material changes. To limit analytics and advertising technologies, see the "Cookies and Tracking Technologies" and "Your Choices" sections below.

2. How We Use Personal Information

We may use personal information for purposes including:

Providing Our Services

We use personal information to:

Personalization and Improvement

We may use personal information to:

Partnership and Business Relationship Management

We may use information collected through partnership and other business inquiry forms to:

We may send marketing or promotional communications concerning partnership opportunities where permitted by law and consistent with your communication preferences. You may opt out of those communications as described below.

Marketing and Advertising

Subject to applicable law and your choices, we may use personal information to:

You may unsubscribe from marketing emails using the unsubscribe link included in those emails.

Where available, you may opt out of marketing SMS communications by following the instructions included in the message, such as replying STOP.

Security and Fraud Prevention

We may process personal information to:

Legal and Compliance Purposes

We may use personal information to:

Business Transactions

We may use and disclose personal information in connection with an actual or proposed merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or other corporate transaction.

3. Cookies and Similar Technologies

We and third parties that provide services to us may use cookies, pixels, tags, APIs, local storage, and similar technologies. These technologies may be used for:

Essential Functions

These technologies are necessary for functions such as:

Functional Technologies

These technologies help provide enhanced functionality and remember preferences such as language, region, or other settings.

Analytics Technologies

These technologies help us understand how visitors interact with our Services, measure website performance, identify technical issues, and improve the customer experience.

Advertising Technologies

Advertising technologies may help us and our advertising partners:

Depending on applicable law, we may request your consent before using certain non-essential cookies or similar technologies. You can manage available cookie and privacy preferences through our cookie or privacy preference tools. Browser settings may also allow you to block or delete cookies. Blocking certain technologies may affect the functionality of portions of the Services.

4. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

Service Providers and Processors

We may disclose information to companies that perform services for us, such as:

These providers may process personal information on our behalf or provide services necessary for our operations.

Advertising, Analytics, and Marketing Partners

We may disclose certain information to advertising, analytics, social media, and marketing partners. Depending on how you interact with our Services, this may include:

Some disclosures involving advertising may be considered a “sale,” “sharing,” or processing for “targeted advertising” under certain U.S. state privacy laws even when no money is exchanged for the information. See Your Choices and Controls and U.S. State Privacy Rights below for more information.

Business Partners and Affiliates

We may disclose information to affiliated companies or business partners when reasonably necessary to provide services, operate programs, or conduct legitimate business activities.

Legal and Safety Disclosures

We may disclose personal information if we reasonably believe disclosure is necessary to:

Corporate Transactions

Personal information may be disclosed or transferred as part of a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar corporate transaction.

5. Your Choices and Controls

Depending on where you live and how you use our Services, you may have choices regarding how your information is collected and used.

Marketing Emails

You may unsubscribe from marketing emails at any time using the unsubscribe link provided in the email. You may continue to receive non-promotional communications, including transactional messages relating to orders, accounts, security, or customer service.

SMS Marketing

Where we offer SMS marketing, you may opt out at any time by following the opt-out instructions provided in the message, such as replying STOP.

Cookie and Advertising Preferences

You may manage non-essential cookies, advertising technologies, and applicable sale, sharing, or targeted-advertising preferences through the cookie and privacy preference tool available on our Services.

6. Global Privacy Control and Universal Opt-Out Signals

Certain jurisdictions allow consumers to exercise privacy rights through browser-based universal opt-out mechanisms. Where required by applicable law, 4ocean recognizes qualifying opt-out preference signals, including the Global Privacy Control (“GPC”) signal. When we receive a legally valid GPC or other recognized universal opt-out signal, we will process the signal as a request to opt out of applicable sale, sharing, or targeted advertising activities associated with that browser or device as required by law. Because these signals are typically associated with a particular browser or device, you may need to enable the signal separately on each browser or device you use. If we can associate an opt-out request with your account as required or permitted by applicable law, we may apply the preference more broadly.

7. U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights regarding their personal information. Depending on your state of residence and subject to applicable legal requirements and exceptions, these rights may include:

These rights vary by state and are not available in every jurisdiction. To exercise an applicable privacy right, you may:

You may also use the cookie and privacy preference tool available on our Services for applicable sale, sharing, targeted-advertising, or cookie-related choices. We may need to verify your identity before fulfilling certain requests. Where permitted by law, you may authorize another person to submit a request on your behalf. We may require evidence that the person is authorized to act for you. If we deny a request and your state provides a right to appeal, you may submit an appeal using the same contact information above and indicate that your request is an appeal of a privacy rights decision. We will respond within the period required by applicable law.

8. Supplemental Notice for California Residents

This section supplements the remainder of this Privacy Policy and applies to California residents where the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies.

Categories of Personal Information

Depending on your interactions with us, we may collect the following categories of personal information:

Identifiers — examples include:

Customer Records Information — examples may include:

Payment card information is generally processed by our payment providers.

Commercial Information — examples include:

Internet or Electronic Network Activity — examples include:

Geolocation Information — we may derive an approximate geographic location from your IP address or similar information.

Inferences — we may create or receive inferences about customer preferences, likely interests, or potential partnership fit, priorities, or readiness based on shopping, browsing, form submissions, or other interaction activity.

Communications and Other Information You Provide — this may include customer service communications, reviews, survey responses, promotion entries, partnership inquiries, questionnaire responses, company and job information, anticipated budget or timeline, proposal and follow-up records, or other information you voluntarily provide. We collect these categories from the sources and for the purposes described elsewhere in this Privacy Policy.

Sale and Sharing of Personal Information

We do not necessarily exchange personal information for money. However, some disclosures of online identifiers, website activity, commercial information, or related information to advertising or marketing partners may constitute “selling” or “sharing” under the CCPA. Depending on our practices and your interaction with the Services, categories involved may include:

Recipients may include advertising networks, analytics providers, social media platforms, and other marketing technology providers. California residents may opt out of applicable selling or sharing through the cookie and privacy preference tool available on our Services. We also process qualifying opt-out preference signals, including Global Privacy Control, as required by applicable law.

California Privacy Rights

Subject to applicable exceptions, California residents may have the right to:

We will not discriminate against you for exercising rights provided by the CCPA.

9. Financial Incentives, Promotions, and Loyalty Programs

We may offer promotions, discounts, rewards, loyalty benefits, or other incentives in exchange for participation in a program or the provision of information such as an email address or mobile telephone number. Participation is voluntary. When required by law, we will provide the material terms of the applicable program at or before enrollment, including information about any financial incentive associated with the program. The value to 4ocean of information associated with a program may vary based on factors including:

Any estimate of the value of personal information is a good-faith estimate based on the circumstances of the applicable program. You may withdraw from a program according to the instructions provided for that program.

10. Sensitive Personal Information

Certain privacy laws provide additional protections for information considered “sensitive.” 4ocean does not use sensitive personal information for purposes that are incompatible with the reason the information was provided unless permitted by applicable law or we obtain any consent required by law. Where applicable law provides a right to limit or withdraw consent to processing sensitive personal information, you may exercise that right using the methods described in this Privacy Policy.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as otherwise permitted or required by law. The length of time we retain information depends on factors including:

When personal information is no longer reasonably necessary, we may delete, anonymize, aggregate, or otherwise dispose of it in accordance with applicable law.

12. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. However, no information system, website, network, or method of electronic transmission can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of account credentials and should contact us if you believe your account or information has been compromised.

13. Children's Privacy

Our Services are intended for a general audience and are not directed to children under the age of 13. We do not knowingly collect personal information online from children under 13 in a manner that would require parental consent under the U.S. Children's Online Privacy Protection Act (“COPPA”). We also do not knowingly sell or share personal information of children or teenagers, or use it for targeted advertising or profiling, where prohibited by applicable law without any consent or authorization required by law. If you are a parent or legal guardian and believe that a child has provided personal information to us in violation of applicable law, please contact us at info@4ocean.com. We will take appropriate steps to investigate and delete the information where required.

14. European Economic Area Privacy Rights

If you are located in the European Economic Area (“EEA”), applicable data protection law, including the General Data Protection Regulation (“GDPR”), may provide additional rights. For purposes of GDPR, 4ocean PBC generally acts as the data controller for personal data described in this Privacy Policy.

Legal Bases for Processing

Depending on the circumstances, we may process personal data based on:

Performance of a Contract — processing may be necessary to:

Legitimate Interests — we may process information where necessary for legitimate business interests, provided those interests are not overridden by your rights and interests. Examples may include:

Consent — we may rely on consent for certain activities, including certain marketing communications, cookies, advertising technologies, or other processing where consent is required. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.

Legal Obligations — we may process information when necessary to comply with applicable legal obligations.

EEA Rights

Subject to applicable law, you may have the right to:

To exercise these rights, contact us at info@4ocean.com.

15. United Kingdom Privacy Rights

If you are located in the United Kingdom, your personal information may be protected by the UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025, the Privacy and Electronic Communications Regulations, and other applicable UK privacy laws. Depending on the circumstances, you may have rights including:

You may contact us at info@4ocean.com to exercise applicable rights. You may also have the right to lodge a complaint with the United Kingdom Information Commissioner's Office (“ICO”). Our use of cookies and similar storage or access technologies for users in the United Kingdom will be handled in accordance with applicable UK requirements, including applicable consent requirements and statutory exceptions.

16. Canada Privacy Rights

If you are located in Canada, applicable Canadian federal or provincial privacy laws may provide rights relating to your personal information. Depending on the law that applies, these rights may include the ability to:

Where consent is required under applicable Canadian law, we will seek consent appropriate to the sensitivity of the information and the circumstances. You may unsubscribe from commercial electronic marketing communications using the unsubscribe mechanism provided in the communication. To exercise applicable rights or ask questions about our Canadian privacy practices, contact info@4ocean.com.

17. International Data Transfers

4ocean is based in the United States. If you access our Services from outside the United States, your personal information may be transferred to, stored in, or processed in the United States or other countries where we or our service providers operate. Those countries may have privacy laws that differ from those in your jurisdiction. Where applicable law requires safeguards for international transfers of personal information, we and our service providers may use recognized legal mechanisms, such as:

Where required, we take appropriate measures designed to protect personal information transferred internationally.

18. Automated Processing and Profiling

We may use automated tools to assist with activities such as:

We do not use solely automated decision-making to make decisions producing legal or similarly significant effects about consumers unless permitted by applicable law and appropriate safeguards are provided. Where applicable law provides rights concerning profiling or automated decision-making, you may exercise those rights through the methods described in this Privacy Policy.

19. Third-Party Websites and Services

Our Services may contain links to websites, applications, platforms, or services operated by third parties. This Privacy Policy does not govern the privacy practices of those third parties. We encourage you to review the privacy policies of third-party services before providing personal information to them.

20. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

When we make changes, we will update the Last Updated date at the top of this Privacy Policy. If changes are material, we may provide additional notice as required by applicable law.

21. Contact Us

If you have questions about this Privacy Policy, want to exercise a privacy right, or have a privacy-related complaint, contact us at:

4ocean PBC

Email: info@4ocean.com

Phone: 561-270-0650

For privacy rights requests, please include enough information for us to understand your request and, where necessary, verify your identity. We will use information submitted in connection with a privacy request only as reasonably necessary to verify and process the request, prevent fraud, maintain legally required records, and comply with applicable law.