HIKIMATCHA PRIVACY POLICY

Effective Date: October 14, 2026

This Privacy Policy (“Policy”) describes how HIKIMATCHA LLC (“HIKIMATCHA,” “we,” “our,” or “us”) collects, uses, discloses, stores, and otherwise processes personal information when you visit www.hikimatcha.com (the “Site”), purchase our products, communicate with us, or otherwise interact with us in connection with our business and services (collectively, the “Services”).

By accessing or using the Services, you acknowledge that your personal information may be processed as described in this Policy, subject to any rights that may apply under applicable law.

ABOUT HIKIMATCHA

HIKIMATCHA LLC is a limited liability company organized under the laws of the State of Wyoming and authorized to transact business in the State of New York.

For privacy-related questions or requests, please contact us at:

Email: info@hikimatcha.com

SCOPE OF THIS POLICY

This Policy applies to personal information collected through the Site and in connection with the Services, including when you:

• Visit, browse, or interact with the Site.
• Place or attempt to place an order.
• Purchase, receive, or redeem a gift card.
• Contact us by email or otherwise communicate with us.
• Subscribe to receive marketing or other communications.
• Interact with payment, checkout, shipping, customer service, or similar functionality.
• Otherwise provide information to us in connection with our business.

This Policy does not apply to third-party websites, applications, platforms, services, or offerings that we do not own or control, even if they are linked to or accessible through the Site.

CATEGORIES OF PERSONAL INFORMATION WE MAY COLLECT

Depending on how you interact with us, we may collect the following categories of personal information.

1. Information You Provide Directly

We may collect information you provide directly to us, including:

• First and last name.
• Billing address.
• Shipping address.
• Email address.
• Telephone number.
• Order details and purchase history.
• Payment-related information required to process a transaction.
• Gift card recipient details, where applicable.
• Information contained in emails, messages, or other communications you send to us.
• Any other information you voluntarily provide.

Payment and transaction processing may be handled through third-party payment processors and commerce service providers. These providers may collect and process payment card details and other transaction information in accordance with their applicable privacy and security practices.

2. Information Collected Automatically

When you visit or use the Site, we and our service providers may automatically collect certain information, including:

• IP address.
• Browser type and browser version.
• Device type and identifiers.
• Operating system.
• Approximate location inferred from IP address.
• Language, region, and time zone settings.
• Referring website or source.
• Pages viewed and time spent on pages.
• Navigation paths, clicks, and interactions.
• Products viewed.
• Cart and checkout activity.
• Information collected through cookies, pixels, tags, local storage, scripts, SDKs, and similar technologies.

3. Information from Other Sources

We may receive personal information from other sources, including service providers, payment processors, shipping and fulfillment partners, fraud prevention or security providers, marketing or analytics providers, social media or advertising partners, and other vendors or advisors supporting our business.

We may also receive information from publicly available sources or where reasonably necessary to protect our rights, investigate misuse, prevent fraud, or comply with legal obligations.

HOW WE USE PERSONAL INFORMATION

We may use personal information for business, commercial, operational, and legal purposes, including to:

• Provide, operate, maintain, and improve the Services.
• Process, fulfill, ship, deliver, support, and service orders.
• Process payments, refunds, returns, exchanges, disputes, and chargeback-related matters.
• Communicate with you regarding orders, inquiries, customer service, and other service-related matters.
• Send transactional communications, including confirmations, updates, notices, and similar messages.
• Administer and support gift cards.
• Manage records, internal operations, administration, and business functions.
• Improve the functionality, security, performance, and user experience of the Site.
• Detect, investigate, prevent, and address fraud, abuse, unauthorized activity, security incidents, violations of our policies, and other harmful or unlawful conduct.
• Support analytics, measurement, attribution, advertising, audience development, and related marketing activities.
• Send promotional or marketing communications where permitted by law.
• Enforce our Terms of Service and other applicable policies.
• Protect our rights, property, systems, business operations, personnel, customers, and legal interests.
• Comply with applicable laws, regulations, legal processes, governmental requests, court orders, subpoenas, and similar obligations.

We may also use personal information for additional purposes disclosed at the time of collection or otherwise permitted by applicable law.

HOW WE MAY DISCLOSE PERSONAL INFORMATION

We may disclose personal information to third parties where reasonably necessary for business, operational, commercial, or legal purposes.

Certain information disclosures involving cookies, advertising technologies, analytics, or related tools may be considered a “sale,” “sharing,” or use for “targeted advertising” under applicable privacy laws, even when no monetary compensation is involved.

Depending on the technologies used on the Site and our business operations, personal information may be disclosed to the following categories of recipients.

1. Store and Commerce Platform Providers

We use Shopify to operate our online store and related commerce functionality.

Shopify and its service providers may process personal information as necessary to support storefront operation, checkout, payments, security, fraud prevention, analytics, and related business functions.

Depending on the features and settings enabled, Shopify may also process certain information in connection with enhanced commerce features, analytics, personalization, or advertising services.

For more information about Shopify's privacy practices, please review:

https://www.shopify.com/legal/privacy/consumers

2. Payment, Commerce, and Transaction Providers

We may disclose personal information to payment processors, commerce providers, digital wallet providers, and similar service providers to process, verify, authorize, complete, support, or secure transactions.

These providers may process payment and transaction information in accordance with their respective privacy policies, security practices, and applicable laws.

3. Shipping, Logistics, and Fulfillment Providers

We may disclose personal information to shipping carriers, logistics providers, and fulfillment partners to prepare, ship, deliver, track, and support orders.

Information disclosed for these purposes may include customer names, delivery addresses, contact information, and relevant order details.

4. Technology, Hosting, Security, Analytics, and Advertising Providers

We may disclose personal information to providers that support website hosting, infrastructure, security, fraud prevention, analytics, measurement, performance monitoring, advertising, attribution, audience development, and related services.

Such providers may process certain personal information through cookies, pixels, scripts, or similar technologies, depending on the tools and integrations used.

5. Professional Advisors and Business Operations Providers

We may disclose personal information to accountants, auditors, insurers, attorneys, consultants, and other professional or operational service providers where reasonably necessary for business, legal, compliance, administrative, or risk-management purposes.

6. Legal, Compliance, and Protection Purposes

We may disclose personal information where required or permitted by law or where we reasonably believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, subpoena, court order, or governmental request.
• Protect or enforce our rights, property, policies, agreements, or legal claims.
• Protect the safety or security of our business, systems, customers, or others.
• Investigate fraud, misuse, chargebacks, security incidents, or unlawful activity.
• Respond to emergencies or other urgent situations.

7. Corporate Transactions

We may disclose personal information in connection with an actual or proposed merger, acquisition, investment, financing, asset sale, restructuring, insolvency proceeding, or similar corporate transaction, subject to applicable legal requirements.

COOKIES, TRACKING TECHNOLOGIES, ANALYTICS, AND ADVERTISING

We and our service providers may use cookies and similar technologies for operational, functional, security, analytics, advertising, and related purposes, including to:

• Operate the Site and checkout functionality.
• Maintain session continuity and cart functionality.
• Remember preferences and selected settings.
• Improve website performance and usability.
• Understand traffic, interactions, and user behavior.
• Support measurement, analytics, and attribution.
• Prevent fraud and enhance security.
• Support advertising, remarketing, audience development, and related activities.

Because the technologies used on the Site may change over time depending on business operations, store settings, service providers, payment methods, integrations, and other factors, the specific cookies, tags, pixels, scripts, SDKs, or similar technologies in use may vary.

You may be able to manage certain privacy choices through the settings or controls made available on the Site, your browser settings, your device settings, or other applicable privacy tools.

Disabling certain technologies may affect the functionality, availability, or performance of some portions of the Site.

Categories of Cookies and Similar Technologies We May Use

1. Strictly Necessary Cookies

Purpose: To operate the Site, maintain essential functionality, protect security, and support checkout.

Examples of Use: Session continuity, cart functionality, security controls, and checkout integrity.

2. Functional / Preference Cookies

Purpose: To remember settings and improve convenience and usability.

Examples of Use: Saved preferences, regional settings, and selected choices.

3. Analytics / Performance Cookies

Purpose: To understand Site usage and improve performance.

Examples of Use: Traffic measurement, browsing patterns, page interactions, and performance review.

4. Advertising / Marketing Cookies

Purpose: To support marketing, advertising, audience development, and campaign measurement.

Examples of Use: Attribution, remarketing, audience matching, and campaign effectiveness.

5. Payment / Transaction-Related Technologies

Purpose: To support payment authentication, wallet functionality, and transaction integrity.

Examples of Use: Payment flow support, wallet display, and transaction verification.

The descriptions above are illustrative and do not constitute a fixed or exhaustive list of every cookie or similar technology that may be used at any given time.

SOCIAL MEDIA, MARKETING, AND DIGITAL ENGAGEMENT

We maintain a presence on digital and social media channels and may use such channels to publish content, engage with customers, promote products, measure engagement, support campaign performance, and conduct related business and marketing activities.

Depending on our business activities, systems, and marketing operations, we may work with social media, analytics, advertising, or related service providers in connection with marketing, measurement, audience development, attribution, or brand visibility.

Nothing in this Policy should be interpreted as a representation that any particular advertising pixel, tag, platform integration, or specific marketing tool is active at all times.

GIFT CARDS

We may offer digital or other gift card products.

In connection with gift card purchases, delivery, redemption, servicing, and support, we may collect and process information relating to the purchaser and, where applicable, the intended recipient.

Recipient information may be used to issue, deliver, support, redeem, or service the gift card transaction.

MARKETING COMMUNICATIONS

If you choose to receive promotional communications from us, we may send marketing emails regarding products, launches, restocks, updates, brand communications, or promotions.

You may opt out of marketing emails at any time by using the unsubscribe link in the applicable message or by contacting us at info@hikimatcha.com.

Even if you opt out of promotional messages, we may still send non-promotional communications relating to transactions, customer service, security matters, legal notices, policy updates, or other important operational matters.

We may, now or in the future, offer SMS or text message communications.

If we do so, the applicable terms of enrollment, consent, message frequency, opt-out procedures, and other required disclosures will be presented at the time of sign-up or otherwise as required by law.

Where an SMS program is active, you may be able to opt out by following the instructions provided in the message, including, where applicable, by replying STOP.

CUSTOMER ACCOUNTS

If customer account functionality is offered now or in the future, we may collect and process information necessary to create, administer, maintain, secure, and support customer accounts and related interactions.

If customer accounts are not currently enabled, this section applies only if and when such functionality becomes available.

REVIEWS, USER CONTENT, AND PUBLIC SUBMISSIONS

If you voluntarily submit reviews, ratings, comments, testimonials, photographs, or other content to us or through the Site, we may review, moderate, use, display, remove, decline to publish, or otherwise handle such content to the extent permitted by law and any applicable terms.

Please do not submit sensitive personal information in content intended for public display.

Information you choose to make public may be visible to other users, customers, or visitors.

CHILDREN'S PRIVACY

The Services are intended for a general audience and are not directed to children under 13 years of age.

We do not knowingly collect personal information directly from children under 13 without legally sufficient authorization.

If you believe that a child under 13 has provided personal information to us, please contact us at info@hikimatcha.com, and we will take appropriate steps in accordance with applicable law.

DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to:

• Provide and support the Services.
• Complete and support transactions.
• Maintain accounting, tax, business, and operational records.
• Investigate and resolve disputes, returns, claims, chargebacks, fraud, or security-related matters.
• Comply with legal, regulatory, audit, tax, and recordkeeping obligations.
• Protect and enforce our rights, interests, agreements, and business operations.

Retention periods vary depending on the nature of the information, the purpose for which it was collected, and applicable legal or operational requirements.

In some cases, we may retain information for up to seven years or longer where required or permitted by applicable law and consistent with legitimate business needs.

When personal information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it in accordance with applicable legal requirements and our data retention practices.

SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, destruction, loss, misuse, alteration, or disclosure.

Such safeguards may include access controls, secure transmission methods, payment-related protections, security monitoring, vendor oversight, and other commercially reasonable measures.

However, no method of transmission, storage, or processing is completely secure, and we cannot guarantee absolute security.

Customers are also encouraged to protect their account information, use secure devices and networks, and notify us if they become aware of suspicious activity involving their interactions with our Services.

PRIVACY RIGHTS AND CHOICES

Depending on your state of residence and applicable law, you may have certain rights with respect to your personal information.

These rights may include the ability to:

• Request access to certain personal information.
• Request correction of inaccurate personal information.
• Request deletion of certain personal information, subject to applicable exceptions.
• Obtain a copy of certain personal information in a portable format, where required by law.
• Opt out of certain types of targeted advertising or data disclosures where applicable.
• Withdraw consent where processing is based on consent.
• Appeal a decision relating to a privacy request where such a right is provided by law.

To submit a privacy-related request, please contact us at:

Email: info@hikimatcha.com

Subject Line: Privacy Request

We may require verification of identity before responding to a request.

We may deny, limit, defer, or decline a request to the extent permitted by applicable law, including where we are unable to verify identity, where an exception applies, where retention is legally required, or where compliance would interfere with legitimate legal, security, fraud-prevention, accounting, or recordkeeping obligations.

We will respond to applicable privacy requests within the timeframes required by law.

U.S. STATE PRIVACY DISCLOSURES

Because we may offer products throughout the United States, certain privacy laws of particular states may apply depending on the consumer's state of residence, the nature of the transaction, and whether those laws apply to our business activities.

Where applicable, consumers in certain states may have rights relating to:

• Accessing personal information.
• Correcting inaccurate information.
• Deleting certain personal information.
• Obtaining copies of certain information.
• Opting out of targeted advertising or certain data disclosures.
• Appealing decisions regarding privacy requests.

We will honor applicable rights to the extent required by law.

Nothing in this Policy is intended to waive rights that cannot be waived under applicable law, nor to create rights beyond those required by law, contract, or our actual business practices and systems.

CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you may have certain rights under California privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), to the extent these laws apply to our business.

Depending on applicable law, such rights may include:

• The right to know what categories of personal information are collected, used, or disclosed.
• The right to request access to certain personal information.
• The right to request correction of inaccurate personal information.
• The right to request deletion of certain personal information, subject to legal exceptions.
• The right to opt out of certain disclosures considered a “sale” or “sharing” under California law.
• The right to limit certain uses or disclosures of sensitive personal information, where applicable.
• The right not to be unlawfully discriminated or retaliated against for exercising applicable privacy rights.

Where required by applicable law, we will provide a method for exercising relevant opt-out rights, which may include a link such as “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” on the Site.

You may also submit a California privacy request by emailing info@hikimatcha.com with the subject line:

California Privacy Request

We may take reasonable steps to verify requests and will respond in accordance with applicable legal requirements.

DO NOT TRACK AND PRIVACY PREFERENCE SIGNALS

Certain browsers and devices may transmit privacy preference signals, including “Do Not Track” requests or Global Privacy Control (GPC) signals.

Because there is no universally adopted standard governing how websites must respond to all “Do Not Track” browser signals, the Site may not respond to every such signal.

Where required by applicable law, we will honor recognized opt-out preference signals, including applicable GPC signals, in accordance with relevant legal requirements.

Additional privacy controls may be available through our Site, your browser, your device, or applicable third-party services.

THIRD-PARTY WEBSITES AND SERVICES

The Site may contain links to third-party websites, applications, services, payment methods, social media platforms, or other resources that we do not own or control.

This Policy does not apply to such third parties, and we are not responsible for their independent content, terms, security, or privacy practices.

We encourage you to review the applicable terms and privacy policies of any third-party services you choose to use.

U.S.-FOCUSED OPERATIONS; INTERNATIONAL VISITORS

Our business is currently intended primarily for customers in the United States.

If you access the Site from outside the United States, your personal information may be transferred to, stored in, or processed in the United States or other jurisdictions where our service providers operate.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, and applicable privacy laws govern our processing activities, we will process your personal information in accordance with the requirements of those laws.

Depending on the circumstances, applicable legal bases for processing may include:

• Performance of a contract.
• Compliance with legal obligations.
• Consent, where required.
• Legitimate interests that are not overridden by applicable privacy rights.

Additional privacy rights or protections may apply depending on your location and the nature of your interaction with our Services.

CHANGES TO THIS POLICY

We may update this Policy from time to time to reflect changes in our business operations, legal obligations, practices, services, technologies, payment methods, privacy tools, service providers, or other operational matters.

If we make changes, we will update the Effective Date above or otherwise provide appropriate notice where required by law.

The updated Policy will apply from its stated effective date, subject to applicable legal requirements.

We encourage you to review this Policy periodically to remain informed about our privacy practices.

CONTACT INFORMATION & PRIVACY INQUIRIES

If you have questions about this Policy, our privacy practices, or wish to submit a privacy-related request, please contact us at:

HIKIMATCHA LLC

Registered Address: 4402 72nd Street, Woodside, New York 11377, United States

Email: info@hikimatcha.com

Website: www.hikimatcha.com