2225 PRIVACY POLICY

Last updated: May 18, 2026

1. Introduction

Welcome to 2225 (“2225”, “we”, “us”, or “our”).

This Privacy Policy explains how we collect, use, share and protect personal data when you:

• visit our website www.2225.world (“Site”)
• create an account or log in
• purchase our products
• register products or warranty
• contact our support team or use live chat
• interact with our marketing and social media content

We process personal data in accordance with applicable data protection laws, including the EU/UK General Data Protection Regulation (“GDPR”) and, where applicable, the California Consumer Privacy Act as amended (“CCPA/CPRA”).

Please read this Policy carefully. By using the Site or our services, you acknowledge that you have read and understood this Policy.

Note: This document is provided for general informational purposes and does not constitute legal advice. You may wish to have it reviewed by your legal counsel before final use.

2. Data Controller & Contact Details

The data controller responsible for processing your personal data in connection with the Site is:

2225

The Ebullient Cottage, LLC DBA 2225

[m1] MA, United States

If you have any questions regarding this Privacy Policy or our data practices, you can contact us at:

 human@2225.world

If required by law in your jurisdiction, we may appoint a Data Protection Officer (DPO); their contact details will be provided here or upon request.

3. Categories of Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

3.1 Browsing & Device Data

Automatically collected when you visit the Site, such as:

• IP address
• browser type and version
• device type and operating system
• pages visited and time spent
• referring/exit pages
• general location (country/region)

This data is primarily collected using cookies and similar technologies. For more information, see our Cookie Policy.

3.2 Account & Profile Data

When you create an account, log in, or use our custom portal:

• name
• email address
• password (stored in encrypted form)
• account preferences (e.g. language, marketing settings)
• wishlist items

3.3 Order & Transaction Data

When you purchase products:

• name and contact details
• shipping and billing address
• phone number (if provided)
• products purchased, order history, order value
• chosen shipping and payment methods

Payment card data is processed directly by our payment providers (e.g. Shopify Payments, PayPal, or other processors) and is not stored in full by 2225. We may receive limited information such as the last four digits of the card, card type, or transaction status.

3.4 Warranty, Humanation & Aftercare Data

When you register products, humanate them, or submit aftercare/warranty requests:

• product serial code or unique identifier
• purchase date and retailer (if applicable)
• photos or videos of the product or reported issue
• your description of the issue
• communication history related to support or warranty

3.5 Communication & Support Data

When you contact us (email, contact form, live chat, social media):

• name and contact details
• content of your messages
• support notes and ticket history
• preferences or feedback you provide

3.6 Marketing, Analytics & Social Media Data

When you consent to marketing or interact with our content:

• email marketing preferences (subscribe/unsubscribe)
• behavior on our Site used for analytics (e.g. pages visited, clicks, time on page)
• interactions with ads on platforms such as Meta (Facebook, Instagram), Google, and TikTok
• data collected via cookies/pixels for ad performance and retargeting

This data is collected via tools including:

• Shopify basic analytics
• Google Analytics 4
• Meta Pixel
• TikTok Pixel
• Google Ads conversion tags
• Embedded Instagram/TikTok content

Details about these cookies and tracking technologies are provided in our Cookie Policy.

4. Purposes of Processing & Legal Bases

We process your personal data for the purposes and legal bases listed below. Where GDPR applies, the legal basis is one of: contract, legal obligation, legitimate interests, or consent.

4.1 Operating the Site & Providing Services

• Enable browsing of the Site
• Provide secure login, user accounts, and wishlist functionality
• Process and ship orders, manage payments and invoices
• Provide customer support, returns, and aftercare/warranty handling

Legal basis:

• Performance of a contract (Art. 6(1)(b) GDPR)
• Legitimate interests in operating our business and services (Art. 6(1)(f) GDPR)

4.2 Warranty, Humanation & Anti-Counterfeit

• Register products and warranty
• Verify humanity of products with serial codes
• Track warranty eligibility and service history
• Investigate suspected counterfeit products

Legal basis:

• Performance of a contract (warranty and support)
• Legitimate interests in protecting our brand, customers, and products

4.3 Analytics & Site Improvement

• Understand how visitors use our Site
• Improve user experience, layout, and performance
• Diagnose technical issues

Legal basis:

• Legitimate interests in improving our services (where allowed)
• Consent via cookie banner for non-essential analytics cookies

4.4 Marketing & Advertising

• Send marketing communications (e.g. newsletters) if you subscribe
• Show personalized ads on platforms such as Facebook, Instagram, Google, and TikTok
• Measure the performance of advertising campaigns

Legal basis:

• Consent (e.g. email marketing opt-in, cookie consent for marketing pixels)

You may withdraw your consent at any time by:

• clicking “unsubscribe” in marketing emails, or
• adjusting your cookie settings as described in our Cookie Policy.

4.5 Security, Fraud Prevention & Legal Compliance

• Protect our Site, accounts, and systems from misuse and fraud
• Comply with legal obligations (e.g. tax and accounting)
• Defend against, or establish, legal claims

Legal basis:

• Legal obligation (Art. 6(1)(c) GDPR)
• Legitimate interests in protecting our business and users (Art. 6(1)(f) GDPR)

5. How We Process & Store Personal Data

We process personal data using secure IT systems and, in limited cases, paper records. We take appropriate technical and organizational measures to protect data against loss, misuse, and unauthorized access.

Examples of safeguards:

• encryption and secure connections (HTTPS/TLS)
• access controls and humanation
• limited access to personal data on a need-to-know basis
• data processing agreements with key service providers

6. Data Retention

We keep personal data only for as long as necessary for the purposes described above, or as required by law.

Indicative retention periods:

• Account data: for as long as your account is active, then for a limited period to handle potential queries or disputes.
• Order and transaction data: typically up to 10 years to comply with tax, accounting, and legal obligations (subject to local laws).
• Warranty & humanation data: for the duration of the warranty period and a reasonable period afterward for product safety and support.
• Customer support communications: until your request is resolved and for a limited period afterward for quality, training, and dispute-handling.
• Marketing data: until you withdraw your consent or unsubscribe, or after a defined inactivity period, after which it may be anonymized or deleted.
• Cookies and similar technologies: as described in our Cookie Policy.

When data is no longer needed, it is deleted or irreversibly anonymized.

7. Sharing of Personal Data

We may share personal data with:

7.1 Service Providers (Processors)

Trusted third parties who assist us in operating our business, including:

• e-commerce and hosting providers (e.g. Shopify)
• payment processors and fraud prevention tools
• logistics and shipping partners
• email and marketing automation tools
• analytics and advertising partners (GA4, Meta, TikTok, Google Ads)
• customer support and live chat platforms

These providers process data on our behalf and only according to our instructions, under data processing agreements.

7.2 Other Recipients

We may also share data with:

• authorities or regulators, when required by law or to protect our rights
• professional advisors (lawyers, auditors, consultants)
• potential buyers or investors in the context of business transfers or restructuring (subject to confidentiality safeguards)

We do not sell your personal data in the traditional sense. However, under some privacy laws (e.g. CCPA/CPRA), certain uses of advertising cookies and pixels may be considered a “sale” or “sharing” of personal information for cross-context behavioral advertising. See Section 9 for your rights.

7.3 International Transfers

Some of our service providers may be located outside your country, including outside the EU/EEA or UK.

Where such transfers occur, we will ensure an adequate level of protection, for example by:

• relying on an adequacy decision; or
• using Standard Contractual Clauses approved by the European Commission or UK authorities, supplemented by additional safeguards where necessary.

You may contact us for more information about international transfers.

8. Your Rights (GDPR & Similar Laws)

Where GDPR or similar laws apply, you have the following rights, subject to certain conditions:

• Right of access: obtain confirmation whether we process your data and receive a copy.
• Right to rectification: correct inaccurate or incomplete personal data.
• Right to erasure (“right to be forgotten”): request deletion of your data in specific cases.
• Right to restriction: request we limit use of your data in certain circumstances.
• Right to data portability: receive your data in a structured, machine-readable format and transmit it to another controller where technically feasible.
• Right to object:
• at any time to processing based on our legitimate interests, and
• at any time to processing for direct marketing (including profiling for such purposes).
• Right to withdraw consent: when processing is based on your consent, you may withdraw it at any time (this does not affect prior lawful processing).

To exercise these rights, please contact us at human@2225.world.

We may need to verify your identity before responding.

You also have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

9. Additional Information for California Residents (CCPA/CPRA)

If you are a resident of California, you may have additional rights regarding your “personal information”:

• Right to know/access: request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete: request deletion of personal information, subject to legal exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to opt-out of “sale” or “sharing”: opt out of certain disclosures of personal information for targeted advertising.
• Right to non-discrimination: you will not receive discriminatory treatment for exercising your rights.

Some uses of advertising cookies and pixels (e.g. Meta Pixel, Google Ads, TikTok Pixel) may be considered a “sale” or “sharing” for cross-context behavioral advertising. Where required, we provide a “Do Not Sell or Share My Personal Information” mechanism or honor your opt-out preference signals.

To submit a request under CCPA/CPRA, contact us at human@2225.world and indicate you are a California resident.

10. Cookies & Similar Technologies

Our use of cookies and similar technologies is described in detail in our Cookie Policy, which forms part of this Privacy Policy.

You can manage your cookie preferences via our cookie banner or through your browser settings.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• our services
• applicable legislation
• the technologies we use

When we make material changes, we will update the “Last updated” date and, where appropriate, notify you via email or Site notice.

We encourage you to review this page regularly to stay informed about our data practices.

12. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or your personal data, you can contact us at:

 human@2225.world