Privacy Policy

Last updated March 12, 2026

This privacy notice for SumFoods LLC (“Company,” “we,” “us,” or “our”) describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

• Visit our website at sumsweet.com, or any website of ours that links to this privacy notice;
• Engage with us in other related ways, including any sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, please contact us at info@sumsweet.com.

Summary of Key Points

This summary provides key points from our privacy notice. You can find more detail using the table of contents below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we receive any information from third parties? We do not receive any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific categories of third parties.

How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission or storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located, applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way is by filling out our data subject request form, or by contacting us.

Table of Contents

1. What Information Do We Collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us. The personal information we collect may include: names; phone numbers; email addresses; mailing addresses; usernames; passwords; contact preferences; billing addresses; and debit/credit card numbers.

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number and its security code. All payment data is stored by Stripe. You may review their privacy notice at stripe.com/privacy.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to it.

Information automatically collected

In short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services. This is primarily needed to maintain the security and operation of our Services and for internal analytics and reporting. Like many businesses, we also collect information through cookies and similar technologies, including log and usage data, device data, and location data.

2. How Do We Process Your Information?

In short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, including: to facilitate account creation and authentication and manage user accounts; to deliver and facilitate delivery of services; to respond to inquiries and offer support; to send administrative information; to fulfill and manage your orders, payments, returns, and exchanges; to request feedback; to send marketing and promotional communications (which you can opt out of at any time); to deliver targeted advertising; to post testimonials; to protect our Services including fraud monitoring and prevention; to administer prize draws and competitions; and to evaluate and improve our Services, products, marketing, and your experience.

3. What Legal Bases Do We Rely On to Process Your Information?

In short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.

If you are located in Canada, this section applies to you. We may process your information if you have given us specific permission (express consent) or where permission can be inferred (implied consent). You can withdraw your consent at any time. In some exceptional cases we may be legally permitted to process your information without consent, for example for fraud detection and prevention, certain business transactions, to comply with a subpoena or court order, or where the information is publicly available and specified by the regulations.

4. When and With Whom Do We Share Your Personal Information?

In short: We may share information in specific situations described in this section and/or with the following categories of third parties.

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us and require access to do that work. Categories include: ad networks; affiliate marketing programs; data analytics services; data storage service providers; finance & accounting tools; order fulfillment service providers; government entities; payment processors; performance monitoring tools; sales & marketing tools; website hosting service providers; and user account registration & authentication services.

We may also share your personal information in connection with a business transfer (merger, sale of assets, financing, or acquisition); with certain Google Maps Platform APIs (subject to Google’s Privacy Policy); and with our affiliates, who are required to honor this privacy notice.

5. Do We Use Cookies and Other Tracking Technologies?

In short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

6. How Long Do We Keep Your Information?

In short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as necessary, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if that is not possible, securely store it and isolate it from any further processing until deletion is possible.

7. How Do We Keep Your Information Safe?

In short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures. However, despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our Services is at your own risk, and you should only access the Services within a secure environment.

8. Do We Collect Information From Minors?

In short: We do not knowingly collect data from or market to children under 18 years of age.

By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to such minor’s use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete the data. If you become aware of any data we may have collected from children under 18, please contact us at info@sumsweet.com.

9. What Are Your Privacy Rights?

In short: In some regions, such as Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.

In some regions you have certain rights under applicable data protection laws, which may include the right to request access and obtain a copy of your personal information, to request rectification or erasure, to restrict processing, and where applicable, data portability. To make a request, contact us using the details in the “How can you contact us” section.

Withdrawing your consent: You may withdraw your consent at any time by contacting us. This will not affect the lawfulness of processing before its withdrawal.

Opting out of marketing: You can unsubscribe at any time by clicking the unsubscribe link in our emails, replying STOP or UNSUBSCRIBE to our SMS messages, or contacting us. We may still send you non-marketing, service-related messages.

Account information: You can review or change your account information by logging into your account settings, or contact us to terminate your account. Upon your request to terminate, we will deactivate or delete your account and information from our active databases, though we may retain some information to prevent fraud, troubleshoot problems, assist investigations, enforce our legal terms, and/or comply with legal requirements.

10. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature you can activate. As no uniform technology standard for recognizing DNT signals has been finalized, we do not currently respond to DNT browser signals. If a standard is adopted that we must follow in the future, we will inform you in a revised version of this privacy notice.

11. Do California Residents Have Specific Privacy Rights?

In short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83 (the “Shine The Light” law) permits California residents to request, once a year and free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes. California residents under 18 with a registered account may request removal of unwanted data they publicly post on the Services.

CCPA Privacy Notice — categories of personal information collected (past 12 months)

Category	Collected
A. Identifiers (name, address, IP, email, account name)	YES
B. California Customer Records categories (name, contact, employment, financial)	YES
C. Protected classification characteristics (gender, date of birth)	YES
D. Commercial information (transactions, purchase history, payment)	YES
E. Biometric information	NO
F. Internet or other network activity (browsing/search history, interactions)	YES
G. Geolocation data (device location)	YES
H. Audio, electronic, visual, or similar information	NO
I. Professional or employment-related information	NO
J. Education information	NO
K. Inferences drawn from other personal information	YES
L. Sensitive personal information	NO

You may opt out of the selling or sharing of your personal information by disabling cookies in Cookie Preference Settings. You may contact us at info@sumsweet.com to exercise your rights, including the right to request deletion, the right to be informed, the right to non-discrimination, and the right to limit use and disclosure of sensitive personal information. We will verify your identity before acting on a request.

12. Do Virginia Residents Have Specific Privacy Rights?

In short: Yes, if you are a resident of Virginia, you may be granted specific rights regarding access to and use of your personal information.

Under the Virginia Consumer Data Protection Act (CDPA), your rights include: the right to be informed whether we are processing your personal data; to access it; to correct inaccuracies; to request deletion; to obtain a copy of the data you previously shared; and to opt out of processing for targeted advertising, the sale of personal data, or profiling. SumFoods LLC has not sold any personal data to third parties and will not sell personal data in the future. To exercise your rights, contact us at info@sumsweet.com or via our data subject request form. We will respond within 45 days (extendable once by 45 days where reasonably necessary). If we decline to act, you may appeal; if your appeal is denied, you may contact the Attorney General to submit a complaint.

13. Do We Make Updates to This Notice?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date and will be effective as soon as it is accessible. If we make material changes, we may notify you by prominently posting a notice or by directly sending you a notification.

14. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at info@sumsweet.com or by post to:

SumFoods LLC
215 Laredo Dr. Ste.100
Decatur, GA 30030
United States

15. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please submit a data subject access request.