Mann Lake Privacy Policy

Last Updated: April 14, 2026

1. Introduction

Mann Lake Ltd. hereafter referred to as “Mann Lake” (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our website, e-commerce platforms, and mobile applications (collectively, the “Services”).

If you have any questions about this Privacy Policy, please contact us using the information provided in Section 14 below.

2. Information We Collect

We collect several categories of information depending on how you interact with us.

2.1 Identifiers and Contact Information

This includes your first and last name, email address, mailing address, shipping address, and telephone number. We collect this information through our e-commerce platform, email marketing platform, enterprise ERP system, and submission form solution. We may also collect this information when you contact our customer service through our AI Chat or submit product reviews or questions through our website.

2.2 Payment and Transaction Information

When you make purchases, we collect billing information and payment details through our ecommerce platform and  payment processor. Credit card information is tokenized; we do not store complete payment card numbers on our systems. We also collect transaction-related information such as gift card amounts, tax exempt status, and promotions used (including military discounts). Tax software processes tax-related information to ensure compliance with applicable tax laws.

2.3 Demographic Information

We may collect demographic information such as age, gender, household income, and affinity categories through traffic tracking software and survey tools.

2.4 Online Activity and Device Information

When you visit our websites or use our mobile applications, we automatically collect certain information through cookies and similar technologies. This includes your IP address, device type, browser type, operating system, pages viewed, session duration, on-site behavior, events and key events, interactions with site features, and chat responses. We collect this information through traffic tracking software,  merchandising software, error tracking software (which captures session replays for error diagnosis), and AI Shoppable Chat and Voice Chat. Our mobile application collects user behavior (such as add-to-cart and engagement of Plant ID), self-identified primary use and region, device type and OS version.

2.5 Commercial Information

We collect information about your purchases, order history, shopping cart contents, viewed products, and purchasing preferences through our ecommerce platform and 3^rd party providers. For customers who purchase through Amazon, we collect order fulfillment data through Amazon’s interface.

2.6 User-Generated Content

If you submit product reviews, questions, ratings, photos, videos, or other content through our platforms, we collect this information through Reviews & Ratings, Q&A, UGC, and our Meta and Google Brand Accounts (including Social Media). This may include your name, social media handle, and the content you submit.

2.7 Communication Data

We collect information from your communications with us, including customer service chat history through AI Chat, survey responses, and form submissions.

2.8 Inferences

We may derive inferences about your preferences, characteristics, and behaviors based on the information we collect. This includes creating audience segments and lookalike audiences through paid social advertising and Search Engine shopping feeds.

3. How We Collect Information

We collect information through multiple channels.

3.1 Directly From You

We collect information when you create an account, place an order, sign up for marketing communications, submit product reviews or questions, participate in surveys, contact customer service, or otherwise communicate with us directly.

3.2 Automatically

We collect certain information automatically when you interact with our website and digital platforms through cookies, pixels, and similar tracking technologies. Our analytics tools and site optimization tools capture this information to improve site performance, diagnose errors, and enhance your experience.

3.3 From Third Parties

We may receive information from third-party platforms where you make purchases (such as Amazon), advertising partners, and analytics providers to supplement our records and optimize our services.

4. How We Use Your Information

We use the information we collect for the following purposes.

4.1 Order Processing and Fulfillment

To place, process and fulfill customer orders, manage shipping and delivery, process payments, handle returns and exchanges, and provide order-related communications. To add items to your cart and regenerate your cart upon your request. To collect and maintain order status, shipping status, gift card balances, and tracking data that enables us to automate order workflows, improve fulfillment efficiency, and provide you with timely updates about your order.

4.2 Customer Service

To respond to your inquiries, resolve issues, provide support through our chat and communication channels, and improve our customer service operations.

4.3 Marketing and Communications

To send you promotional emails, SMS messages, newsletters, push notifications, in-app messaging, and other marketing communications about products and services that may interest you. We also use your information to create lookalike audiences and deliver targeted advertising through paid social networks and search engine shopping. To showcase user-generated content such customer photos, videos, reviews, and testimonials on our marketing, Site, social media channels, and promotional materials. To analyze insights from customer service interactions to improve our marketing channels, refine our messaging, and ensure our communications better address customer needs and preferences.

4.3a Ring Central SMS Terms of Service

By opting into SMS from a web form or other medium, you are agreeing to receive SMS messages from Mann Lake. This includes SMS messages for customer care. Message frequency varies. Message and other data rates may apply. Users can message HELP for help or reply STOP to any message to opt out.

4.4 Personalization and Search Optimization

To personalize your shopping experience, provide product recommendations, optimize search results through merchandising software, and tailor content to your preferences and interests. To enable cart recovery features that allow you to easily return to your shopping cart with your selected products preserved, even if you navigate away from our Site or close your browser.

4.5 Analytics and Improvement

To understand how visitors use our Services, measure engagement, identify areas for improvement, diagnose and resolve errors, and develop new features, products, and services. To analyze form submission data to streamline internal workflows, improve response times, and generate insights that help us enhance our business processes and customer interactions.

4.6 Security and Fraud Prevention

To protect our systems and users from security threats, detect and prevent fraudulent activity, and enforce our terms of service.

4.7 Business Operations and Performance Optimization

To collect and analyze sales, inventory, order, and operational data from multiple sources to optimize our business operations, improve fulfillment efficiency, monitor performance metrics, support strategic decision-making, and enhance overall business performance.

4.8 Legal Compliance

To comply with applicable legal obligations, including tax compliance through Avalara, respond to legal requests, and protect our legal rights.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to collect information about your interactions with our websites.

5.1 Types of Technologies We Use

Web Tracking Software: We use web tracking software to understand website traffic patterns, user behavior, and engagement metrics. Web tracking software collects information including IP addresses (which are anonymized), device types, geographic location at a general level, page views, session duration, and key events.

Web Tagging Software: Web tagging software serves as a container that manages and deploys our analytics and marketing tags. Web tagging software itself does not collect personal data; it facilitates the deployment of other tools such as Web tracking software.

Ad Tagging Software: We use ad tagging software to attribute conversions and improve advertising performance across platforms including Social Media Platforms and Search Engines.

Mobile App Tracking Software: We use Mobile App Tracking Software to collect customer interaction and behavior data to optimize the customer experience on our mobile applications.

Error Tracking Software: We use error tracking software to capture session replays and diagnose customer checkout-impacting errors. Error tracking software redacts sensitive information such as names, billing addresses, and payment information.

General Site Session Cookies are used to provide the user with a personalized site experience, including for example dynamic recommendations, recently viewed, and sort and filter settings.

5.2 Your Choices

You may manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may affect website functionality. For Google Analytics specifically, you may install the Google Analytics Opt-out Browser Add-on to prevent your data from being used by GA4. We honor browser or device-based opt-out signals such as the Global Privacy Control.

You may opt out of Google Analytics by visiting the Google Analytics opt-out page https://tools.google.com/dlpage/gaoptout. Google has additional information available about their Remarketing Privacy Guidelines, and Restrictions. You may learn more at www.google.com/policies/privacy/partners/.

You may view a list of other third party service providers who collect information, and/or opt-out of such collection of information about you, by visiting http://www.networkadvertising.org/choices/ or http://www.aboutads.info/choices/.

These links are provided only for convenience. The information and functionality they provide is solely controlled by Google, NAI, and AboutAds, respectively.

6. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances.

6.1 Service Providers

We engage third-party vendors to perform services on our behalf, including: e-commerce platform services, payment processing, email and SMS marketing,  customer reviews and user-generated content , site search and merchandising , error monitoring , analytics, advertising platforms, enterprise resource planning , integration services , form processing , tax compliance , mobile applications , customer service, surveys , and business intelligence. These providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures.

6.2 Advertising Partners

We may share hashed email addresses with advertising platforms (ex. Google Ads, ) to create lookalike audiences and deliver more relevant advertising.

6.3 Marketplace Platforms

For orders fulfilled through Amazon, we share necessary order information with Amazon. Amazon maintains its own privacy policies governing the use of customer data on its platform.

6.4 Legal Requirements

We may disclose your information when required by law, regulation, legal process, or governmental request.

6.5 Protection of Rights

We may disclose information to protect our rights, privacy, safety, or property, or that of our customers or the public, and to enforce our terms and policies.

6.6 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

• Data Use and Sharing

We do not sell, share, or disclose your mobile opt-in data to third parties without your explicit consent. Your information will only be used to provide the services you have requested.

• Opt-Out Rights

You have the right to opt out of receiving marketing messages at any time by replying STOP to any message or contacting us directly. 

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data type and purpose. Customer account and order information is retained for the duration of the customer relationship and for a period thereafter as required for legal and operational purposes. Marketing preferences and communication history are retained until you unsubscribe or request deletion. Analytics data retention periods vary by platform.

8. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, and disclosure.

9. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. These rights may include the right to access your personal information, correct inaccuracies, request deletion, obtain a portable copy, and opt out of certain processing activities. To exercise your rights, please contact us using the information provided in Section 14. We will verify your identity before processing your request and respond within the timeframes required by applicable law.

10. Privacy Notice for California Residents

This California Resident Privacy Notice (“Notice”) is provided pursuant to the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, the “CCPA”) and applies only to California residents. Any terms defined in the CCPA have the same meaning when used in this Notice.

10.1 Categories of Personal Information Collected

Below is a summary for the preceding 12 months of the categories of personal information that we collected in the course of providing our products and services.

Category	Examples	Collected
A. Identifiers	Real name, postal address, unique personal identifier, online identifier, IP address, email address, account name.	Yes
B. California Customer Records (Cal. Civ. Code § 1798.80(e))	Name, address, telephone number, credit card number, debit card number, or any other financial information.	Yes
C. Protected Classification Characteristics	Age, gender, veteran or military status (for discounts).	Yes
D. Commercial Information	Records of products purchased, obtained, or considered, purchasing or consuming histories or tendencies.	Yes
E. Biometric Information	Genetic, physiological, behavioral, and biological characteristics.	No
F. Internet or Similar Network Activity	Browsing history, search history, information on interaction with website or application.	Yes
G. Geolocation Data	Physical location derived from IP address, shipping country.	Yes
H. Sensory Data	Audio, electronic, visual, or similar information (user-submitted photos/videos, chat transcripts).	Yes
I. Professional or Employment-Related Information	Current or past job history or performance evaluations.	No
J. Non-Public Education Information	Education records directly related to a student.	No
K. Inferences Drawn from  Other Personal Information	Profile reflecting preferences, characteristics, behavior, attitudes, and aptitudes.	Yes

10.2 Categories of Personal Information Disclosed

We disclose personal information in the following categories for business purposes and may share certain categories for cross-context behavioral advertising.

Category	Business Purpose Disclosures	Shared for Advertising
A. Identifiers	Yes	Yes
B. California Customer Records	Yes	No
C. Protected Classification Characteristics	Yes	No
D. Commercial Information	Yes	Yes
E. Biometric Information	No	No
F. Internet or Similar Network Activity	Yes	Yes
G. Geolocation Data	Yes	Yes
H. Sensory Data	Yes	No
I. Professional or Employment-Related Information	No	No
J. Non-Public Education Information	No	No
K. Inferences	Yes	Yes

10.3 Your Rights Under the CCPA

Right to Know and Access: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, our business or commercial purposes for collecting it, and the categories of third parties with whom we share it.

Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.

Right to Correct: You have the right to request correction of inaccurate personal information.

Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising. To exercise this right, click on “Do Not Sell or Share My Personal Information” on our website or contact us using the information in Section 14.

Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information.

Right Against Automated Decision-Making: You have the right to opt out of automated decision-making technology in certain scenarios. We may use automated decision-making technology to personalize marketing and advertising and enhance user experience on our platforms.

Data Portability: For data portability requests, we will select a data format that is readily useable and should allow you to transfer the information to another entity without difficulty.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your rights under the CCPA.

10.4 Submitting Requests

You may submit a request by contacting us through any of the methods provided in Section 14. Only you, or an individual legally authorized to act on your behalf, may make a request related to your personal information. To designate an authorized agent, please submit verification documentation. We will verify your identity before processing your request using information we already have on file or by requesting additional verification information. We will respond to your request within 45 days of receipt, with a possible extension of an additional 45 days when reasonably necessary.

10.5 Exceptions

We may decline your deletion request if retaining the information is necessary to complete a transaction, detect security incidents, comply with legal obligations, or make other lawful uses compatible with the context in which you provided the information.

10.6 Shine the Light Law

In addition to the CCPA, California’s “Shine the Light” law, Civil Code 1798.83, requires certain businesses to respond to requests from California consumers asking about the businesses’ practices relating to disclosing personal information to third parties’ direct marketing purposes during the immediately preceding calendar year. To request a copy of the information disclosure we provided, please contact us.

11. Additional Disclosures for Minnesota Residents

This section applies to Minnesota residents (also referred to as “Minnesota consumers”) and uses the same defined terms (such as “Personal Information”) as found in this Privacy Policy. It identifies rights granted under the Minnesota Consumer Data Privacy Act (MNCDPA) and specific processes we use when collecting and processing Personal Information from Minnesota residents, as required by the MNCDPA.

11.1 Data Categories, Business Purpose & Retention Schedule

Category / Sample Elements	Primary Business Purpose	Retention & Disposal Rule
Contact Information  Name, email, phone number, mailing address	Account setup, order fulfillment, customer communications, marketing analytics.	7 years after last customer interaction, then securely deleted.
Account Information  Username, password, customer ID	User authentication, service provision.	Duration of account plus 7 years, then securely deleted.
Demographic Data  Age, gender, city, zip code	Marketing analytics, personalizing user experience.	Duration of customer relationship plus 3 years, then securely deleted.
Payment Information  Card number (tokenized), billing address	Transaction processing, fraud prevention, tax compliance.	7 years after transaction, then securely deleted.
Online Identifiers  IP address, cookie IDs, device IDs	Website analytics, targeted advertising, security.	14 months (GA4), then automatically purged.
Precise Geolocation  IP-derived location, shipping country	Providing location-based services, delivery services.	30 days, then securely deleted.

11.2 Your Rights Under the MNCDPA

Minnesota consumers have the following rights: (a) Confirm and access your personal information; (b) Correct your personal information; (c) Delete your personal information; (d) Receive a copy of your data in a format that is easily migratable; (e) Opt out of targeted advertising; (f) Opt out of the sale of your personal information; (g) Opt out of profiling that drives decisions that produce legal or similarly significant effects (such as creditworthiness); and (h) Appeal a denied request relating to your personal information.

Minnesota consumers may exercise any of these rights at no charge by contacting us at beekeeper@mannlakeltd.com. We will endeavor to respond within 45 days.

If we deny a request, you may appeal by emailing us with the subject line “Minnesota Privacy Appeal.” You will receive a written decision within 45 days. We will not limit our services to you because you elected to exercise these rights.

11.3 Universal Opt-Out Signals

We honor browser or device-based opt-out signals such as the Global Privacy Control. Upon receipt, we will automatically apply the signal to your browser.

11.4 Targeted Advertising, Sale and Sharing of Personal Information

We do not sell Personal Information. We may share your Personal Information with third parties to provide you with more relevant services and advertisements, but not in a manner that allows you to be individually identified. We may also share your Personal Information with third parties at your written request. In the event we do so, all Personal Information we disclose will be subject to the privacy policies of such third parties.

11.5 Children's Data

Our Services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we may have collected information from a child, please contact us using the information in Section 14

11.6 Third-Party Processors & Disclosures

We currently use three categories of processors (payment processors, cloud hosting/IT service providers, and marketing/analytics partners) and contractually require them to process Minnesota Personal Information only as instructed and to pass through Minnesota privacy rights to any sub-processors.

11.7 Data Protection & Protection Assessments (DPPA)

Before initiating any processing that presents a heightened risk of harm to Minnesota consumers, we conduct and document a DPPA consistent with Minn. Stat. § 325O.08 and will furnish it to the Minnesota Attorney General upon request.

11.8 Non-Discrimination

We will not deny goods or services, charge different prices, or provide a different level or quality of services to Minnesota consumers who exercise their privacy rights, except as expressly permitted for voluntary loyalty programs.

12. Additional Information for Individuals in the European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, this section provides additional information about our processing of your personal data under the General Data Protection Regulation (GDPR), the UK General Data Protection Regulation, and equivalent Swiss laws.

12.1 Data Controller and EU Representative

Mann Lake is the data controller for the personal data we collect. Our contact information is provided in Section 14 of this Privacy Policy.

For all questions related to GDPR including Article 27, please contact us at beekeeper@mannlakeltd.com.

12.2 Data Protection Officer

As our core activities do not involve large-scale, regular, and systematic monitoring of individuals or large-scale processing of special categories of data or data relating to criminal convictions and offenses, we are not required to appoint a mandatory Data Protection Officer (DPO). For any inquiries related to your personal data, please contact our privacy team at beekeeper@mannlake.com.

12.3 Legal Bases for Processing

We process your personal data based on the following legal grounds, depending on the specific purpose of the processing activity:

Purpose of Processing	Legal Basis Under GDPR
Order Processing and Fulfillment  (Sec 4.1)	Performance of a Contract (Art. 6(1)(b)): Processing is necessary to fulfill our purchase agreement with you.
Customer Service (Sec 4.2)	Performance of a Contract (Art. 6(1)(b)): Processing is necessary to respond to your inquiries and provide support.
Marketing and Communications (Sec 4.3)	Legitimate Interests (Art. 6(1)(f)) for service-related communications and Consent (Art. 6(1)(a)) for marketing communications.
Personalization and Optimization (Sec 4.4)	Legitimate Interests (Art. 6(1)(f)): Processing is necessary for our legitimate interest in providing a personalized shopping experience.
Analytics and Improvement (Sec 4.5)	Legitimate Interests (Art. 6(1)(f)): Processing is necessary for our legitimate interest in understanding and improving our services.
Security and Fraud Prevention (Sec 4.6)	Legitimate Interests (Art. 6(1)(f)): Processing is necessary for protecting our systems and preventing fraud.
Legal Compliance (Sec 4.7)	Legal Obligation (Art. 6(1)(c)): Processing is necessary to comply with applicable legal requirements.

Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms and have determined that your interests do not override our legitimate interests in conducting these processing activities.

12.4 International Data Transfers

Your personal data may be transferred to, and processed in, countries outside of the EEA, UK, or Switzerland, including the United States, where our service providers operate. When we transfer your data internationally, we ensure that appropriate safeguards are in place to protect your personal data as required by the GDPR. These safeguards include the use of Standard Contractual Clauses (SCCs) approved by the European Commission. You may request a copy of the relevant safeguards by contacting us at beekeeper@mannlakeltd.com.

12.5 Data Retention Under GDPR

We retain your personal data for no longer than is necessary for the purposes for which it was collected. Customer records are retained for the duration of the customer relationship plus 7 years thereafter for legal and archival purposes. Analytics data (GA4) is retained for 14 months. Marketing engagement data is retained until you unsubscribe or request deletion.

12.6 Your Rights Under GDPR

As a data subject in the EEA, UK, or Switzerland, you have the following rights regarding your personal data: (a) The right to be informed about the collection and use of your personal data; (b) The right of access to your personal data; (c) The right to rectification of inaccurate personal data; (d) The right to erasure (“the right to be forgotten”); (e) The right to restrict processing of your personal data; (f) The right to data portability, allowing you to obtain and reuse your personal data for your own purposes across different services; (g) The right to object to processing based on legitimate interests or for direct marketing; and (h) Rights related to automated decision-making and profiling.

If you wish to exercise any of these rights, please contact us using the details in Section 14.

12.7 Right to Lodge a Complaint

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. For UK residents, the relevant supervisory authority is the Information Commissioner's Office (ICO).

12.8 Statutory and Contractual Requirements

The provision of personal data for order processing purposes is a contractual requirement. Failure to provide the necessary personal data will result in our inability to process your order and provide you with our products and services.

13. Children's Privacy

Our Services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we may have collected information from a child, please contact us using the information in Section 14. 

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, please contact us:

Mann Lake Ltd.

501 1^st St. S

Hackensack, MN 56452

Email: beekeeper@mannlakeltd.com

Phone: 1-800-880-7694

For data subjects in the EEA, UK, or Switzerland, please refer to the contact information provided in Section 12.1.

15. Access to Your Personal Information

If you are a registered user, you can access your personal information profile any time by:

• Clicking on Sign In, which is also available at the top of any page of our website.
• Clicking on Your Account, which is also available on the page header or on the “Your Account” link under Customer Support.
• Clicking on the Profile Icon in the bottom right corner to Sign In to Your Account in the Mann Lake mobile app.

16. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated Privacy Policy on our website with a revised effective date. For material changes that significantly affect how we use your information, we may provide additional notice through email or other direct communication.