2. TIPTAP PRIVACY POLICY

TipTap Labs, LLC, doing business as TipTap (“TipTap,” “we,” “us,” or “our”) operates the TipTap website and related services (“Services”).

This Privacy Policy describes how we collect, use, disclose, and otherwise process personal information when you visit or use the Services, request information or a quotation, communicate with us, maintain an optional account, or otherwise interact with TipTap.

Personal Information We Collect

Depending on how you interact with the Services, we may collect:

• name and contact details;
• organization or laboratory information;
• shipping, billing, transaction, and order information where applicable;
• optional account information;
• equipment, instrument, platform, model, configuration, tip, consumable, workflow, and requirement information;
• OEM or source part numbers;
• quote, support, return, shipping, order, or sample-request information;
• information contained in communications with TipTap;
• device, browser, IP-address, and usage information generated in connection with the website or Shopify-powered Services; and
• other information you choose to provide.

Do not submit patient-identifying information or protected health information through ordinary TipTap website forms, finder notes, quote requests, email, or support channels.

Sources of Personal Information

We may collect personal information:

• directly from you;
• automatically through the Services and associated technologies;
• through Shopify and other service providers acting in connection with the Services; and
• from business partners or other third parties where permitted by law.

How We Use Personal Information

We may use personal information to:

• provide and operate the Services;
• respond to inquiries;
• prepare and review quotations;
• review Product or compatibility requirements;
• process authorized transactions;
• communicate regarding orders, shipments, returns, samples, support, or other requested Services;
• manage optional accounts;
• maintain business records;
• detect fraud, abuse, or security incidents;
• comply with applicable legal obligations; and
• protect legal rights.

Shopify

TipTap uses Shopify to operate its website and related storefront functionality.

Information submitted through Shopify-powered Services may be processed by Shopify as necessary to provide those Services and in accordance with Shopify’s applicable privacy terms and notices.

Google Workspace and Email

TipTap uses Google Workspace / Gmail for business communications.

Information sent to or from TipTap email addresses may be processed through Google Workspace as necessary to provide those communications.

Public functional addresses include:

• hello@tiptap.co
• quotes@tiptap.co
• sales@tiptap.co
• orders@tiptap.co
• support@tiptap.co
• accounting@tiptap.co
• returns@tiptap.co
• samples@tiptap.co
• shipping@tiptap.co
• privacy@tiptap.co

Optional Customer Accounts

Customer accounts are optional.

If you choose to create or use an account, personal information associated with that account may be collected or processed as necessary to provide and manage the account and related Services.

Creating an account is not required to browse the Services or use features available without an account.

Saved Finder Drafts on Your Device

When you use TipTap’s equipment and tip finder, the Services may save a draft of your finder selections in your browser’s local storage.

The saved draft may include information about:

• laboratory equipment;
• setup;
• tip requirements; and
• free-text equipment or requirement notes.

This browser-local draft is used to preserve finder progress in the same browser environment.

Contact information entered in the later quote-request contact step, such as your name, email address, organization, postal code, and contact notes, is not part of that saved finder draft.

A successfully submitted quote or contact request may be delivered through Shopify’s native contact-form transport and received in a TipTap business mailbox.

Cookies and Similar Technologies

The Services may use cookies, local storage, and similar technologies in connection with website functionality, security, account functions, Shopify platform functions, and related operations.

Additional cookies or similar technologies may be used by Shopify or other service providers in connection with the Services.

How We Disclose Personal Information

We may disclose personal information to:

• Shopify;
• Google Workspace;
• service providers;
• suppliers;
• fulfillment or logistics providers;
• payment providers;
• professional advisers;
• government or regulatory authorities; or
• other parties

where reasonably necessary to operate the Services, fulfill a request or transaction, provide support, comply with law, prevent fraud or misuse, or protect legal rights.

We may also disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction where permitted by law.

Third-Party Websites and Links

The Services may contain links to websites or platforms operated by third parties.

Their privacy practices are governed by their own notices and policies.

Your Privacy Rights

Depending on where you live and applicable law, you may have rights relating to personal information, including rights to:

• access or know about personal information maintained about you;
• request deletion;
• request correction;
• obtain portability;
• opt out of sale, sharing, or processing for targeted advertising where applicable;
• appeal certain decisions where applicable; and
• exercise other rights provided by applicable law.

These rights are not absolute and may be subject to legal exceptions.

We may verify your identity before processing a request as permitted or required by law.

Authorized agents may be required to provide evidence of their authority, and direct verification from the individual may also be required where permitted.

We will respond to privacy-rights requests within the period required by applicable law and will provide any legally required notice if an extension is permitted and used.

We will not discriminate against you for exercising legally protected privacy rights.

Sale, Sharing, Targeted Advertising, and Browser-Based Opt-Out Signals

Depending on where you reside and applicable law, you may have the right to opt out of the sale or sharing of personal information or processing for purposes defined by law as targeted advertising.

Where applicable law requires recognition of a legally recognized browser-based opt-out preference signal, including Global Privacy Control where applicable, TipTap will honor the signal as required by applicable law.

Privacy requests concerning these rights may also be submitted through the Privacy contact below.

Communication Preferences

Where TipTap sends optional promotional communications, recipients may use the available unsubscribe mechanism to opt out of those promotional communications.

Opting out of promotional messages does not prevent TipTap from sending non-promotional communications concerning an existing transaction, quotation, order, support matter, account, legal notice, or other requested business interaction.

Children’s Data

The Services are not intended for use by children.

If a parent or guardian believes that a child has provided personal information to TipTap through the Services, the parent or guardian may contact TipTap using the Privacy contact below to request appropriate action as provided by applicable law.

Security and Retention

No method of storage or transmission is completely secure, and information transmitted over the Internet may be subject to security risks.

How long personal information is retained depends on factors including:

• the purposes for which it was collected;
• transaction and business-record requirements;
• legal obligations;
• dispute-resolution needs; and
• enforcement of applicable agreements or policies.

Complaints and Appeals

If you have a complaint about how TipTap processes personal information, please contact TipTap using the Privacy contact below.

Depending on applicable law, you may have a right to appeal a decision concerning a privacy-rights request or to contact an applicable regulatory or data-protection authority.

International Processing

Personal information may be transferred, stored, or processed in a country or jurisdiction different from where you reside, including through Shopify, Google Workspace, or other service providers used to provide the Services.

Where applicable law imposes requirements on such processing or transfer, those requirements apply.

Changes to This Privacy Policy

TipTap may update this Privacy Policy from time to time to reflect changes in practices, Services, technology, or legal requirements.

The published Policy will identify its current effective or last-updated date.

Where applicable law requires notice of a material change, TipTap will provide notice as required.

Contact

Privacy questions and privacy-rights requests may be directed to:

TipTap Labs, LLC, doing business as TipTap
privacy@tiptap.co