Privacy Policy

Effective date: October 30, 2026 · Last updated: October 30, 2026

This Privacy Policy explains how US Fruit and Veg Inc., doing business as The Reggie Bar ("The Reggie Bar," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit thereggiebar.com, shop with us, join our email list, scan a QR code on our packaging, take part in our Club 44 rewards program, or otherwise interact with us online, by email, or by phone (together, the "Services").

By using the Services, you acknowledge that you have read this Privacy Policy. Your use of the Services is also governed by our Terms & Conditions. If you do not agree with this Privacy Policy, please do not use the Services.

1. Scope of this policy

This Privacy Policy applies to personal information we collect through the Services. "Personal information" means information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular individual or household. It does not include de-identified or aggregated information, or information that is publicly available as defined by applicable law.

This policy does not apply to information collected by third parties that we do not control, including websites you reach through links on our site. When you check out, your purchase is processed on a checkout page provided by Shopify Inc. ("Shopify"). We receive information about your order from Shopify and treat it under this policy; Shopify's own handling of information is described in the Shopify Privacy Policy.

2. Information we collect

The information we collect depends on how you use the Services. We collect it from you directly, automatically when you use the Services, and from our service providers.

Information you give us

• Orders and checkout. When you place an order, we and Shopify collect your name, email address, shipping and billing address, phone number (if provided), the products you buy, order totals, discount codes, gift notes, and your email marketing preference. We do not receive or store your full payment card number. Card and wallet payments (such as Apple Pay and Shop Pay) are handled by Shopify and its payment processors, which provide us only limited information such as the card type, the last four digits, and whether the payment was approved.
• Email list signup. When you join our list for promotions and offers, we collect your email address and the page you signed up from.
• Contact, support, and wholesale requests. When you use our contact form, email us, or call us, we collect your name, email address, any order number you give us, the content of your message, and anything you choose to send us, such as photos of a damaged delivery.
• Club 44 membership. When you join Club 44, we collect your email address, first and last name, and mobile phone number, a one-time sign-in code we send you, any profile changes you make, the QR codes you scan, the actions you complete, and your points balance and history. If we later offer receipt uploads, we will also collect the receipts you submit and the purchase details they contain.
• Rewards, events, and promotions. If you redeem a reward, attend an event, or enter a promotion, we may collect information needed to deliver it, such as a shipping address or the name to put on a guest list.

Information collected automatically

When you visit our site or scan a QR code, our own first-party analytics and our hosting and security providers automatically collect:

• Device and connection information: IP address, browser type and version (user agent), device type, screen or window size, language setting, and the time zone your browser reports.
• Usage information: the pages you view, the time you spend on each page, how far you scroll, the products you look at, items you add to your cart, the steps of checkout you reach, email signups, and the date and time of each visit.
• Referral and campaign information: the site that referred you and campaign tags in the link you followed (for example utm_source, utm_campaign, and click identifiers such as gclid, fbclid, ttclid, or msclkid).
• QR scan information: which QR code you scanned (we print one code per package type, not one per bar) and when.
• Approximate location: the country, state or region, and city associated with your IP address, along with approximate coordinates for that area. We get this from our content delivery provider (Cloudflare) or an IP location service (IPinfo). It is not precise geolocation: we do not request your device's GPS location, and the location we derive does not pinpoint where you are.
• Visit identifiers: a random visitor ID stored in your browser and a random session ID for each browser tab, used to count visits and connect the pages viewed in one visit. If you join Club 44 or give us your email, we may link these identifiers to your account or email address.

Information from third parties

• Shopify sends us order, refund, and cancellation details, customer records created at checkout or through Shopify email signup forms, email marketing consent status, and checkout progress events.
• HighLevel, our customer relationship management (CRM) and messaging platform, stores contact records, tags, and messaging preferences that we may sync back to our systems.
• Cloudflare and IPinfo provide the approximate location associated with an IP address.

We do not intentionally collect sensitive personal information such as Social Security numbers, financial account credentials, precise geolocation, health information, or information about race, religion, or sexual orientation. Please do not send us this kind of information.

3. Cookies, local storage, and similar technologies

We use a small number of first-party cookies and browser storage entries, plus those set by our checkout and security providers. We do not use third-party advertising cookies.

Fonts. Our pages load typefaces from Google Fonts. When your browser requests these fonts, Google receives your IP address and browser information. See the Google Privacy Policy.

Managing these technologies. You can block or delete cookies and clear local and session storage in your browser settings. If you do, the cart and Club 44 sign-in may not work, and our analytics will treat you as a new visitor.

Do Not Track and Global Privacy Control. Browsers handle "Do Not Track" signals inconsistently and there is no common standard for responding to them, so our site does not change its behavior in response to them. We do honor the Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information for your browser. Because we do not sell or share personal information, we do not need to change anything when we receive the signal, but we treat it as a standing opt-out in case our practices ever change.

4. How we use information

We use personal information for the following business purposes:

• To provide the Services and fulfill orders: processing purchases, shipping, sending order confirmations and tracking, handling returns, damaged-delivery claims, and refunds.
• To run Club 44: creating and verifying your account with one-time codes, awarding and adjusting points (including reversing points for refunded or cancelled orders), delivering rewards, and communicating with you about your membership.
• To communicate with you: responding to questions, sending service and account messages, and, with your permission or as the law allows, sending news, promotions, and offers.
• To understand and improve the Services: measuring visits, page performance, product interest, checkout drop-off, and the effect of our marketing campaigns and package QR codes.
• To protect the Services and our customers: detecting and preventing fraud, bots, abuse of QR codes or points, spam, and security incidents. For example, we may compare your browser's time zone with the time zone of your IP address as one signal of automated or proxied traffic.
• To meet legal obligations: keeping tax and accounting records, responding to lawful requests, and enforcing our Terms & Conditions.
• For business transfers: evaluating or completing a merger, acquisition, financing, reorganization, or sale of all or part of our business.
• For other purposes we tell you about when we collect the information, or with your consent.

We do not use personal information to make decisions that produce legal or similarly significant effects about you based solely on automated processing.

5. How we disclose information

We disclose personal information only as described here:

• Service providers that process information on our behalf, under contracts that limit their use of it to providing services to us. These include:
  • Shopify (online store, checkout, payment processing through Shopify Payments and its partners, and order management)
  • HighLevel (customer relationship management and marketing messages)
  • Twilio SendGrid (delivery of emails such as sign-in codes and contact form replies)
  • Replit (website hosting and database)
  • Cloudflare (content delivery, security, and approximate location)
  • IPinfo (approximate location for an IP address, when used)
  • Google (web font delivery)
• Shipping carriers such as USPS, UPS, and FedEx, which receive your name, address, and package details to deliver your order.
• Reward and event partners, when needed to deliver a Club 44 reward or event you choose to redeem. For example, we may give a venue the name on a guest list. We will tell you when a reward requires this.
• Our brand licensors and professional advisers, such as lawyers, accountants, and auditors, when reasonably necessary, under confidentiality obligations.
• Legal and safety. When we believe in good faith that disclosure is required by law, subpoena, or court order, or is needed to protect the rights, property, or safety of The Reggie Bar, our customers, or others, including to prevent fraud.
• Business transfers. To a buyer, successor, or other party in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets. The recipient will be bound to honor this policy for the information transferred.
• With your consent or at your direction.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you. When we de-identify information, we maintain it in de-identified form and do not attempt to re-identify it, except as permitted by law.

6. No sale or targeted advertising

We do not sell personal information for money or other valuable consideration. We do not "share" personal information for cross-context behavioral advertising, and we do not process personal information for targeted advertising or for profiling in furtherance of decisions that produce legal or similarly significant effects, as those terms are defined under US state privacy laws. We have not done so in the preceding 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age.

If this ever changes, we will update this policy first and provide any notice and opt-out choices the law requires.

7. Email and text message communications

Email. If you join our email list (which requires you to check a box agreeing to receive promotional emails), opt in at checkout, or join Club 44, we may send you news, promotions, and offers. Every marketing email includes an unsubscribe link, and you can also unsubscribe by emailing support@thereggiebar.com. Even after you unsubscribe from marketing, we will still send transactional and account messages, such as order confirmations, shipping updates, and Club 44 sign-in codes.

Text messages. We ask for a mobile number when you join Club 44 so we can identify your account and contact you about your membership. We will send you recurring automated marketing text messages only if you have given us your separate, express written consent to receive them. Consent to receive marketing texts is never a condition of purchase. Message frequency varies, and message and data rates may apply. You can opt out at any time by replying STOP, and reply HELP for help.

No mobile information will be sold or shared with third parties or affiliates for their own marketing or promotional purposes. Text messaging opt-in data and consent are never shared with any third party, except with the service providers that deliver our messages on our behalf.

8. Club 44 and Notice of Financial Incentive

Club 44 is our free rewards program. Members earn points for scanning the QR code on our packaging, for qualifying purchases, and for other actions we offer, and can redeem points for rewards such as signed memorabilia, meet-and-greets, and events. Program rules are in our Terms & Conditions.

Under California law, a loyalty program that offers benefits in connection with the collection of personal information may be considered a "financial incentive." This section is our Notice of Financial Incentive.

• What you get: points and the rewards and member benefits described in the program rules.
• Personal information involved: identifiers (name, email address, mobile number, member ID), commercial information (purchases and QR scans linked to your account, points history, rewards redeemed), and internet activity on Club 44 pages.
• How to opt in: by joining Club 44 and verifying your email address with the one-time code we send you. By joining, you agree to the program's material terms.
• How to withdraw: at any time, by emailing support@thereggiebar.com and asking us to close your account. If you close your account or ask us to delete your information, your unredeemed points will be forfeited, because we cannot track points without your account.
• Value of your data: we do not assign a dollar value to an individual member's personal information. In good faith, we estimate that the value of the personal information collected through Club 44 is reasonably related to, and roughly equal to, the cost to us of the points and rewards we provide to members. We calculate this from our expenses for providing rewards, program administration, and member benefits.

We will not discriminate against you for exercising your privacy rights. If you ask us to delete information that the program needs to work, such as your email address or points history, we may be unable to keep providing program benefits to you, as the law permits.

9. Your choices

• Marketing: unsubscribe from emails using the link in any marketing email; reply STOP to any marketing text.
• Club 44 profile: update your name and mobile number on your member page, or email us for other changes.
• Browser controls: clear cookies and site data, use private browsing, or turn on Global Privacy Control.
• Not sharing information: you can browse the site without giving us personal information, though you will need to provide some to place an order or join Club 44.

10. How long we keep information

We keep personal information only as long as reasonably necessary for the purposes described in this policy, unless the law requires or permits a longer period. To set retention periods, we consider the amount, nature, and sensitivity of the information, the risk of harm from unauthorized use, the purposes for which we process it, and our legal, tax, and accounting obligations. In general:

• Order records are kept for as long as needed to fulfill and support your order and to meet tax, accounting, and legal requirements, which is generally up to seven years.
• Club 44 account information is kept while your account is active and for a reasonable period after it closes, so we can resolve disputes, prevent fraud, and honor program commitments.
• Email list information is kept until you unsubscribe or ask us to delete it. We keep a record of your opt-out so we do not email you again by mistake.
• Website analytics and security logs are kept for as long as they are useful for measuring trends, troubleshooting, and security, after which we delete or de-identify them.
• Support messages are kept as long as needed to resolve your request and keep a record of our response.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. These include encrypted (HTTPS) connections, payment processing by a PCI-compliant provider, password-free sign-in with one-time codes, access controls that limit who on our team can see customer information, and rate limits and other protections against abuse. No method of transmitting or storing data is completely secure, so we cannot guarantee absolute security. Please protect access to the email account you use with us, because sign-in codes are sent there. If we learn of a security breach affecting your personal information, we will notify you as required by law.

12. Children's privacy

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. Club 44 is open only to people 18 or older. If you believe a child under 13 has given us personal information, contact us at support@thereggiebar.com and we will delete it.

13. California privacy rights

This section applies to California residents and supplements the rest of this policy. It is provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), and serves as our notice at collection.

Categories of personal information we collect

In the past 12 months we have collected the following categories of personal information, from the sources and for the business purposes described in Sections 2 and 4. We disclosed each category for a business purpose to the categories of recipients listed below. We did not sell or share any category.

We use and disclose sensitive personal information only for purposes permitted by the CCPA, such as providing the Services you request and keeping them secure, and not to infer characteristics about you. We keep each category for the periods described in Section 10.

Your California rights

Subject to certain exceptions, California residents have the right to:

• Know and access: request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we disclosed it.
• Delete: request that we delete personal information we collected from you, subject to legal exceptions such as completing a transaction, preventing fraud, or meeting legal obligations.
• Correct: request that we correct inaccurate personal information.
• Opt out of sale or sharing: we do not sell or share personal information, so there is nothing to opt out of. We honor Global Privacy Control signals regardless.
• Limit use of sensitive personal information: we use sensitive personal information only for permitted purposes, so this right does not apply.
• Non-discrimination: we will not deny you goods or services, charge you different prices, or give you a different level of quality because you exercised your rights, except as permitted for financial incentive programs such as Club 44 (see Section 8).

Shine the Light

California Civil Code § 1798.83 lets California residents request information about the disclosure of personal information to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

14. Privacy rights in other US states

Residents of states with comprehensive consumer privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, may have some or all of the following rights, subject to exceptions and to whether the law applies to us:

• to confirm whether we process your personal information and to access it;
• to correct inaccuracies;
• to delete personal information;
• to obtain a copy of your personal information in a portable format;
• to opt out of the sale of personal information, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in any of these); and
• to appeal our decision on your request.

Appeals. If we decline your request, you may appeal by replying to our decision or emailing support@thereggiebar.com with the subject line "Privacy Appeal." We will respond within the time the law requires. If you are not satisfied with the outcome of your appeal, you may contact your state's attorney general.

Nevada residents. We do not sell covered information as defined by Nevada law. You may still submit a request directing us not to sell your covered information by emailing us.

15. How to exercise your rights

To submit a request, email support@thereggiebar.com with the subject line "Privacy Request," call 831-646-3314, or write to us at US Fruit and Veg Inc., Attn: Privacy, 158 Carmelito St, Monterey, CA 93940. Tell us which right you want to exercise and the email address you use with us.

• Verification. To protect your information, we will verify your identity before acting on a request to know, access, correct, or delete. We will usually do this by matching information you give us with information we hold, for example by sending a one-time code to the email address on your order or Club 44 account. We will ask for more information if needed, and we will use it only to verify your request.
• Authorized agents. You may use an authorized agent to submit a request on your behalf. We may require written, signed permission from you, and may ask you to verify your identity directly with us, unless the agent has a valid power of attorney.
• Timing. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time, up to another 45 days, we will tell you why.
• Cost. Requests are free. We may decline, or charge a reasonable fee for, requests that are manifestly unfounded, excessive, or repetitive, as the law allows.

16. Visitors outside the United States

The Services are intended for people in the United States, and we ship only to US addresses. Our servers and service providers are located in the United States and other countries. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

17. Third-party sites and services

The Services link to sites and services we do not control, such as Instagram and Shopify's checkout. Their privacy practices are governed by their own policies, and we are not responsible for them. We encourage you to read the privacy policy of every site you visit.

18. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. If we make material changes, we will give you notice as the law requires, such as by posting a prominent notice on the site or emailing you, before the changes take effect. Where the law requires your consent to a change, we will ask for it.

19. Contact us

If you have questions about this Privacy Policy or our privacy practices, contact us:

• Email: support@thereggiebar.com
• Phone: 831-646-3314
• Mail: US Fruit and Veg Inc., d/b/a The Reggie Bar, Attn: Privacy, 158 Carmelito St, Monterey, CA 93940

If you have a disability and need this policy in another format, contact us and we will provide it.