End User Privacy Policy

Last revised: June 2025

1. Creator Service Overview

This Privacy Policy explains how Dashery, operated by TP Apparel LLC, collects, uses, discloses, and safeguards your information when you visit our platform (the “Platform”).

TP Apparel LLC (“TeePublic”), 91 5th Avenue, 5th Floor, New York, NY 10003, USA is the data controller for the purposes of the General Data Protection Regulation (GDPR) applicable in the European Union and the United Kingdom.

2. Personal information we collect

We may collect the following types of information from you:

• Account Information:
  When you create an account, we collect your name, last name, social media URL, and email address.

• Personal and Contact Information:
  We collect your name, shipping address, phone number, and email address when you make a purchase.

For purposes of Article 26 of the EU General Data Protection Regulation, the Creator and TeePublic (operator of Dashery) act as joint controllers regarding the collection and processing of your email address for marketing purposes. This means:

• Both Dashery/TeePublic and the Creator have responsibilities regarding the processing of your email address
• Both parties must comply with applicable data protection laws
• Both parties must maintain appropriate security measures to protect your information

The Creator has entered into an agreement with Dashery/TeePublic that clearly defines its respective responsibilities to ensure the protection of your personal information.

This agreement ensures that regardless of which party you contact, your rights regarding your personal information (i.e. email address) will be respected.

You may exercise your privacy rights (including access, correction, and deletion rights) by contacting either Dashery/TeePublic or the Creator. For your convenience, we recommend contacting the Creator directly via the Contact Form, and the Creator will coordinate with TeePublic/Dashery, as required under our internal arrangement (i.e. Joint Controller Agreement Joint Controller Agreement).

If you wish to unsubscribe from marketing communications, you can use the unsubscribe link in the emails. You can also contact us to opt out of having your information shared with us for marketing purposes.

• Financial Information:
  We collect your bank or payment information to process transactions.

• Order Information:
  We keep track of your order history and favorite products.

• Device Information:
  web browser, IP address, time zone, and some of the cookies that are installed on your device.

• Behavioral Data:
  We collect data on your movements and actions on the platform to understand your preferences and improve our services.

3. How do we use your personal information?

We use your Account Information and Personal and Contact Information to process and complete orders placed through the Platform. This includes handling payment details, coordinating shipping, and issuing invoices or order confirmations. Additionally, we use this information to communicate with you regarding your orders or inquiries, conduct fraud detection and risk assessment for orders, and provide you with promotional materials or advertisements about our products or services, in accordance with your stated preferences.

We use the Device Information collected to enhance the security of our Platform by identifying and mitigating potential risks or fraudulent activities (e.g., using your IP address). More broadly, this information helps us improve and optimize the Platform by analyzing customer interactions and browsing behaviors, as well as evaluating the effectiveness of our marketing and advertising efforts.

4. Sharing your personal Information

We share your Personal Information with third parties, including service providers and partners, to help us use your Personal Information as described above. These third parties may act as 'data processors' or 'data controllers' under applicable data protection laws. If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful requests for information we receive, or to otherwise protect our rights.

5. Residents of the EU and the UK

TeePublic acts as the "data controller" for the personal data we manage under this Privacy Policy, we are responsible for determining how to collect, use, and disclose this data in accordance with applicable laws. In jurisdictions such as the European Economic Area and the United Kingdom, data controllers are required to inform you of the legal grounds for processing your personal information. Our legal bases include:

• Contractual Necessity:
  We process personal information to fulfill our contractual obligations to you. This includes using your data to comply with agreements and honor commitments made in any contracts we have with you.
• Consent:
  Where legally required, we process personal information based on your consent. You have the right to withdraw your consent at any time, free of charge. This will not affect the legality of any processing conducted prior to the withdrawal of your consent.
• Legitimate Interests:
  We may process personal information to further our legitimate business interests, provided these are not overridden by your rights and freedoms. This includes activities such as customer service, promotional activities, business analysis, security, fraud prevention, and legal management.
• Legal Compliance:
  We process personal information to comply with legal obligations, including tax and accounting requirements.

You have the following rights under GDPR: the right to access, rectify, or delete your data; the right to restrict or object to processing; the right to data portability; and the right to lodge a complaint with a supervisory authority. In order to exercise your rights set out under the GDPR, please contact us at [email protected].

6. Data retention

Your personal data will be stored by us only as long as it is necessary to achieve the purposes for which it was collected or – if there are any legal retention periods beyond this – for the duration of the legally prescribed retention period. Subsequently, your personal data will be deleted.

7. Amendments

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

8. Security Measures

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and penetration testing
• Employee training on data protection
• Incident response procedures

9. Contact us

For more information about our privacy practices, if you have questions please contact us at [email protected].

10. California Law Disclosure

Under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (“CCPA”), California residents have certain rights in relation to the collection, use, and sharing of their personal information.

As of January 1, 2023 you have the right to opt-out of sharing your personal information with third parties for the purposes of targeted behavioral advertising.

We will not discriminate against you for exercising your rights under the CCPA. An agent may submit a request on your behalf, but you must verify that your agent is authorized to do so. Separate from the CCPA, California’s “Shine the Light” law (Civil Code Section § 1798.83) permits California consumers to request certain information regarding TeePublic’s disclosure of personal information to third parties for their direct marketing purposes. To exercise any of your rights, please email the Dashery Privacy Team ([email protected]). We do not have actual knowledge of selling or sharing the personal information of consumers under the age of 16 years old.

For CA Residents: The California Consumer Privacy Act

The California Consumer Privacy Act (“CCPA”) provides California resident users (referred to here as “California consumers”) of Dashery with specific rights regarding their personal information. This section describes California consumers’ rights and explains how they can exercise them.

Access To Specific Information And Data Portability Rights

California consumers have the right to certain information about TeePublic’s collection and use of their personal information over the past 12 months. This Privacy Policy describes the types of personal information TeePublic collects, how it is processed by TeePublic and the third parties with whom TeePublic shares such information and the purpose for that sharing.

Exercising Access, Data Portability, And Deletion Rights

California consumers have the right to request that TeePublic deletes any of their personal information collected from them, subject to certain exceptions set out in the CCPA. These rights may be exercised by clicking this link: Do not sell my Personal Information or by e-mailing [email protected]. Only the relevant California consumer, or a person registered with the California Secretary of State that is authorized to act on a California consumer's behalf, may make a verifiable consumer request related to that California consumer's personal information. California consumers can also make a verifiable consumer request on behalf of their minor child.

California consumers may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

1. provide sufficient information that allows TeePublic to reasonably verify identity; and
2. describe the request with sufficient detail that allows TeePublic to properly understand, evaluate, and respond to it.

Response Timing And Format

TeePublic will endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If more time is required (up to 90 days), TeePublic will inform you of the reason and extension period in writing. There is no fee for processing verifiable consumer requests unless it is excessive, repetitive, or manifestly unfounded.

Non-Discrimination

TeePublic will not discriminate against anyone for exercising any of their CCPA rights. However, certain financial incentives may be offered to the extent permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive that is offered will reasonably relate to California consumers’ personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program would require prior opt in consent, which may be revoked at any time.

Other California Privacy Rights

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits California consumers to request certain information regarding TeePublic’s disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please e-mail to [email protected].