Privacy policy

Last Updated: March 25, 2026

Streamtest Incorporated d/b/a Nomly ("we", "us" or "our") know that your privacy is important to you, and we want you to know that it is important to us too. When you use or interact with our Services, we may collect and process certain information about you, including information that is considered "personal information" or "personal data" under applicable law ("Information").

This Privacy Notice ("Notice") explains how we collect, use and disclose Information that we receive from or about you in connection with our Services, how we protect your Information once it is collected, and how you can exercise your rights and choices available to you regarding your Information.

This Notice applies to Information we collect from or about you when you use or interact with our websites, mobile applications or the profiles or pages we maintain on social media platforms (collectively, "Sites", each a "Site"), visit our locations, attend our promotional events, or otherwise communicate with us, including through offline channels, such as phone or mail (collectively with Sites, "Services").

What Information Do We Collect?

When you use or interact with our Services, we may collect Information about you in the following ways:

Information You Provide to Us

When you use or interact with our Services, we may collect certain Information from you. For example, we may collect Information when you make a purchase on our Site; sign up for our newsletters; enter into our sweepstakes, contests or other promotional programs; complete our surveys or questionnaires; submit a product review; apply for employment with us; create an account on our Site; or submit a complaint or question to us.

Such Information may include:

  • Name and contact information: such as your name, your company name (if applicable), and your contact information (e.g., postal addresses, email addresses or telephone numbers).
  • Account information: such as your login credentials (including your username, account ID, password, security questions and answers) and account number if you maintain an account on our Sites.
  • Demographic data: such as your age or year of birth, gender, race or nationality.
  • Payment and order/purchase information: such as your credit card (including your card number, security code and expiration date) and other payment information, records of the products you ordered or purchased.
  • Health-related information: such as your dietary preferences and other health-related information you may choose to provide if you volunteer to participate in any of our product testing or sensory surveys. In certain jurisdictions, the health-related information we collect may constitute consumer health data (as defined by applicable law). For more information about our privacy practices with respect to such data, please refer to our Consumer Health Data Supplement.
  • Professional or employment related information: such as your job history, education information, certifications, and other information you may provide in connection with your job application.
  • Government-issued identifiers: such as your driver's license number, Social Security number, or other government-issued identification numbers in connection with your job application.
  • Video and audio information: such as videos or CCTV recordings through our security cameras when you visit our locations, video recordings or photographs of our events or programs (e.g., our promotional or community events), or voicemails you may leave us.
  • Reviews and public forum comments: information you choose to provide in reviews of our products or comments you post on publicly available forums made available on our Sites. (Any information posted on these forums will be available to the public; as a result, you should exercise caution when making such posts and not post any personal or other information you would not want shared with the public.)
  • Other information: any other Information you may choose to provide, such as Information you provide when you communicate with us (e.g., contents of your email or "contact us" forms, responses to our surveys or contests, voicemails, "chat" features (if applicable) or other communications).

Automated Collection of Information

When you visit or interact with our Sites or interact with our email communications, we may collect certain Information about you and your devices by automated means, using cookies, pixel tags, web server logs and other technologies. For more information regarding such technologies, please refer to the Cookies and Other Technologies section below. The Information we collect in this manner may include:

  • Device information: such as your device ID, unique device identifier, web browser characteristics and/or type, device characteristics and/or type, operating system, domain server, and language preferences.
  • Internet or other network activity information: such as your IP address, your browsing history, search history, and your purchase or transaction history on our Sites.
  • Geolocation data: such as your general location. We do not collect precise location data.
  • Clickstream and usage data: such as information regarding your usage of or interactions with our Sites and email communications, including the referring URLs, the URLs you visit when leaving our Sites, the pages, content or ads viewed, the links clicked, items downloaded, dates and times of Site visits, account access or opening of email communications, your interactions with our "chat" feature (if applicable), or other data regarding your usage activity of our Services.

Information from Third Parties

We may receive or otherwise obtain Information about you through third parties, such as third parties that perform services for us or on our behalf, publicly available sources (where permitted by applicable law), and other third parties. Such Information may include:

  • Publicly available information: such as information from public databases, registers, media search results and other public sources.
  • Social media data: such as comments, content or details that you post on publicly available websites or social media platforms, including any information that accompanies those posts, such as your name, username, email address, your likes or preferences, or profile picture, subject to your privacy settings on these platforms and/or websites.
  • Background check information and references: such as information collected in connection with background checks or employment references.

How is Your Information Used?

We may use the Information we collect from and about you for various purposes, including:

  • Providing our offerings: The provision of our offerings, including processing and fulfilling your purchases, returns or other transactions; maintaining, managing, and administering our Sites and your accounts (including enabling users to use our Sites and their features and providing technical or other support to resolve issues).
  • Operating our business: To support our internal business functions, including performing accounting, auditing, billing, managing our databases and backups, and other similar activities; and for data analytics relating to your use of and interaction with our Services (such as analyzing the purchase of our products and usage of our Sites).
  • Communications: To communicate with you, including responding to your requests, questions and concerns; communicating with you about our products, services and events that we think might interest you; and managing our relationship with you.
  • Marketing and advertising purposes: To conduct market research; send you promotional materials that we think may be of interest to you; tailor ads displayed to you on third-party websites to your interests and interactions with our Services; and determine and manage the effectiveness of our advertising and marketing (including counting and verifying positioning and quality of ad impressions).
  • Administering our sweepstakes, contests, and other promotional programs: To administer our sweepstakes, contests or other promotional programs, including communicating with entrants and winners.
  • Product testing and sensory surveys: If you participate in our product testing or sensory surveys, to administer the relevant tests or surveys; gather feedback about our products or other offerings and understand our customers' needs and preferences; conduct market research; and improve our products or other offerings.
  • Improving our offerings: To improve our products and other offerings (including the Services), including to develop new features on our Services or new products; and to enhance your experience and provide you with a more personal and interactive experience when using or interacting with our Services.
  • Maintaining security of our systems: To verify your identity and to maintain the integrity and security of our systems and Services, including to prevent fraud, and to detect, prevent and respond to technical issues, bugs, breaches or errors within our networks and systems.
  • Talent management and recruiting purposes: To manage career opportunities; assess and/or process your job application(s); communicate with you about the recruitment process; and to make decisions about recruitment or appointment.
  • Protecting our interests: When we believe it is necessary, to take precautions against liabilities, investigate and defend ourselves against any claims or allegations; protect our rights and property; protect against and prevent fraud, unauthorized transactions, claims or other liabilities; and enforce our policies and terms (including the terms and conditions of our Sites).
  • Compliance with law: To comply with applicable legal and regulatory requirements and industry standards; detect, investigate and/or prevent fraud, crime or other illegal activities; and as otherwise required by applicable law, regulation or other governmental authority, including to comply with a subpoena or similar legal process.
  • Other purposes: For other purposes for which we provide specific notice before collection. We may also use your Information with your consent or at your direction.

Deidentified and Aggregated Information

We may aggregate and/or deidentify your Information such that it is no longer able to be linked to you or your device(s), directly or indirectly. This Notice does not limit our ability to use or disclose such aggregated or deidentified information, which we may disclose, in our sole discretion, to third parties for their own use. For example, we may use or disclose aggregated and/or deidentified Information for benchmarking, analytics and improving our offerings. We also may use or disclose such information to comply with our reporting obligations and for marketing purposes, including to assist us and others in understanding our customers' interests and habits. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

To Whom Do We Disclose Your Information?

We may disclose the Information we collect from and about you to the following affiliates and third parties in the following ways:

  • Our Affiliates: Our subsidiaries and other affiliated companies in connection with any of the uses set out in this Notice.
  • Service Providers: Third parties who provide services to us or on our behalf, such as providers that host or administer our Sites (including our online store), process payments or refunds in connection with your purchases or returns, fulfill and ship your orders, perform data analytics, administer our product testing, sensory or other surveys, conduct our email marketing, or provide IT infrastructure and related services (such as technical or other customer support).
  • Advertising Partners: Our third-party advertising partners (including advertising networks, online advertising companies, and social media platforms) who may use such Information for their own purposes, including to market products or services to you or tailor ads displayed to you on third-party websites to your interests and interactions with our Services.
  • Business Partners: Our business partners, including our co-sponsor(s) or other strategic partners who may use such Information for their own purposes. For example, if we obtain your Information in connection with a contest, sweepstakes, offering or other promotional program that is jointly offered by us and any third parties or offered on our Sites on behalf of a third party, we may share your Information with such third parties.
  • Public: If you post a review, comment or other content in a publicly available forum on our Sites, any Information you may include in this content will be available to the general public. (As noted above, you should exercise caution when posting a review, comment or other content to avoid including any personal or other information you would not want shared with the public.)
  • Legal Rights or Obligations: Where we believe disclosure is necessary to protect our rights or property, protect the safety or vital interests of you or others, investigate or prevent suspected fraud or other possible illegal activities, investigate, prevent or take action against a violation of contract, defend against a legal claim, exercise our legal rights, respond to a government, judicial or other legal request, or otherwise comply with our legal obligations.
  • Advisors: Our professional advisors, including lawyers, auditors, accountants, consultants, agents and insurers.
  • Others: Other third parties if you direct us to do so, with your permission or as otherwise permitted by law.
  • Corporate Change of Control: In the event we sell or transfer (or contemplate the sale or transfer of) all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, restructuring, bankruptcy, dissolution or liquidation).

Cookies and Other Technologies

When you visit our Sites or interact with our email communications, we collect certain Information about you and your devices by automated means, using cookies, pixel tags, web server logs and other technologies. Cookies are small data files that websites send to your computer or device to uniquely identify your browser or to store information or settings in your browser. Cookies enable us to recognize you as the same user who was at one of our Sites in the past and relate your use of our Sites to other Information about you. We may use cookies to enhance and customize your experience on our Sites (such as, by storing your username so you can log in easily, keeping you logged into the Site after you have provided your password, storing the contents of your shopping cart as you browse), collect general usage and aggregated statistical information about our Sites (such as Google Analytics to help us analyze your use of our Sites; information regarding Google Analytics can be found at support.google.com/analytics), detect and prevent fraud, and tailor the advertising you receive from us to your interests. A pixel tag (also known as a "clear gif" or "web beacon") is a tiny image that links webpages to web servers and their cookies and may be used to transmit information collected through cookies back to a web server. We may use pixel tags to help us measure the effectiveness of our content by, for example, counting the number of individuals who visited our Sites or verifying whether you've opened one of our emails. For more information about such technologies and how to communicate your choices about how they are used to collect Information about you, please refer to the Manage Your Account, Rights and Choices section below.

Cross-Context Behavioral Advertising or Targeted Advertising

On our Sites, we and our advertising partners (including ad networks, online advertising companies, and social media platforms) may collect Information about you and your online activities (through cookies and other technologies) over time and across sites to provide you with advertising about products and services tailored to your interests. Such Information may include device information, geolocation data, and clickstream data, as described in the Automated Collection of Information subsection above. We also may disclose the Information we collect about you to third parties for cross-context behavioral advertising purposes, including to serve you targeted advertising over time and across sites, and for purposes of tracking the effectiveness of our marketing efforts. For example, you may see certain ads on third-party websites based on your visits to our Sites because we participate in advertising networks administered by our third-party vendors. Such ad networks allow us to target our messaging to users considering their demographic data, inferred interests and browsing activities. For more information about how you may communicate your choices about the use and disclosure of your Information for cross-context behavioral or targeted advertising purposes, please refer to the Manage Your Account, Rights and Choices section below.

Manage Your Account, Rights and Choices

If you maintain an account with us, you may manage your account, as further detailed below. You may also have the right to opt in or opt out of certain of our uses and disclosures of your Information:

  • Manage Your Account: If you maintain an account on our Sites, you may be able to review, update or modify certain information in your account by making such changes in your user/account profile. You may also contact us as specified in the Contact Us section below to update or modify information in your account.
  • Promotional Emails: You may opt out of receiving promotional emails from us by clicking on the "unsubscribe" link at the bottom of such emails. You may also tell us that you do not want to receive our promotional emails by contacting us as specified in the Contact Us section below. Please understand that it may take us a few days to process an opt-out request and that, even if you opt out of receiving promotional emails from us, we may still contact you in connection with your account activities, transactions, and communications with us.
  • Browser and Device Settings: Most browsers can be set to detect cookies and give you an opportunity to reject them but refusing cookies may, in some cases, inhibit or preclude your use of our Sites or certain features. To learn more about how to manage cookies on different browsers, you can visit the website allaboutcookies.org. For more information about how we respond to web browser signals and other mechanisms that enable consumers to exercise their choices about online tracking, please refer to our U.S. State Supplement.
  • Cross-Context Behavioral or Targeted Advertising: Our practice is to use or disclose your Information to our advertising partners for cross-context behavioral advertising or targeted advertising purposes at your direction using our cookie preference tool. You may communicate your choices about the use and disclosure of your Information for such purposes by clicking here or the "Cookies Settings" icon on the bottom of our Sites to access our cookie preference tool and making your selection. You may change your direction as to future use and disclosure for such purposes by accessing our cookie preference tool and changing your selection. Your choice about the use and disclosure of your Information for cross-context behavioral or targeted advertising purposes will be specific to the browser and device you are using to access the Site at the time you communicate such choice. If you clear your browser, or access our Site from another browser or device, you will need to communicate your choice again.

    In addition to our cookie preference tool, there are certain third-party tools you may use to communicate your choices. You may communicate your choice as to whether advertising networks that participate in self-regulatory programs like the Digital Advertising Alliance ("DAA"), the Digital Advertising Alliance of Canada ("DAAC") and Network Advertising Initiative ("NAI") may use your Information for targeted advertising by visiting the DAA's WebChoices or NAI's Consumer Opt-Out. You may also communicate such choices by clicking on the "ad choices" icon on an advertisement and selecting the types of advertisements to which you wish to opt out. Please note that if you do not direct us to use or disclose your Information for cross-context behavioral or targeted advertising purposes, or if you later change your direction to reject this, you may continue to see our ads on our Services or third-party sites, but they will not be targeted based on Information we collected about you.

  • Individual Rights: In addition to the rights and choices noted above, depending on the laws of your country or state of residence, you may be afforded certain other rights with respect to your Information. For more information about what rights may be available to you, please refer to the U.S. State Supplement and Consumer Health Data Supplement if you reside in a U.S. state that requires additional disclosures and offers additional rights or the Canada Supplement if you are a resident of Canada. For individuals residing outside of the U.S. and Canada, to the extent you reside in a country with data protection laws that include specific requirements addressed in our International Supplement, please refer to the International Supplement for more information about what rights may be available to you.

Retention of Your Information

We will retain your Information for the time period reasonably necessary to achieve the purposes for which it was collected, to comply with our legal obligations and policies, to resolve disputes and to exercise our rights.

We consider the following criteria when determining how long to retain your Information: why we collected the Information; the nature of the Information; the sensitivity of the Information; our legal obligations related to the Information (taking into account applicable statutes of limitation and records retention requirements under applicable law, as well as our records retention requirements and policies); and the risks associated with retaining the Information.

Security of Your Information

We maintain technical, administrative and physical safeguards designed to protect your Information against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure or use. From time to time, we review our safeguards to consider appropriate new technologies and methods. While we seek to protect your Information, we cannot guarantee that any information, during transmission through the Internet or while stored on our systems or otherwise in our care, will be secure or safe from intrusion by others, such as hackers, in all circumstances.

If you create an account on our Sites, you need to help us prevent unauthorized access to your account by protecting your password appropriately and limiting access to your account. You will be solely responsible for keeping your password confidential and for all use of your password and your account, including any unauthorized use.

Children's Privacy

In general, our Services are designed for a general audience and are not directed to children. We do not knowingly collect or solicit Information from children under the age of 13 through our Sites. If we become aware that we have collected Information from a child under 13 through our Sites, we will promptly delete the information from our records. If you believe a child under 13 may have provided us with Information through our Sites, please contact us as specified in the Contact Us section of this Notice.

We may at times collect or otherwise process Information from children under the age of 13 when they participate in our product testing or sensory surveys. Where required by applicable law, we will process such Information with the consent of the child's parent or legal guardian, as applicable. Please refer to our Consumer Health Data Supplement for more information.

If we offer a child-directed Service, we will provide a supplemental privacy notice for that Service where required by law.

Our Services may contain links, banners, widgets or advertisements that lead to other websites or online services (such as social media platforms) not owned or operated by us. For example, our Sites may include features that allow you to share or publicly post content from our Sites to your profile on a third-party social media platform (e.g., Facebook, X (formerly Twitter) or Instagram). We are not responsible for these other sites or online services, and their posted privacy policies (not this Notice) will govern the collection and use of your Information on them. We encourage you to read the privacy policies of each website or online service visited after leaving our Sites to learn about how your information is treated by others.

We maintain a presence on certain social media platforms, such as the ones described above, to communicate with our customers. This Notice applies to our use of Information you submit to us on such platforms or receive about you from such platforms, but it does not apply to what those third-party platforms do with your Information. As noted above, these platforms have their own privacy policies. In accordance with those policies (and your privacy settings within your social media accounts), information about your activities on our Sites (such as "Jane 'likes' Nomly") may be published to your social media account.

Changes to this Privacy Notice

We may change this Notice (including the supplements to this Notice) from time to time. When we do, we will let you know by posting the changed Notice (and/or supplements) on this page with a new "Last Updated" date. We encourage you to revisit this Notice and its supplements often to remain fully informed of our privacy practices. For material changes, we may also tell you about changes by additional means (such as posting a notice on our website and/or contacting you directly about the changes).

Contact Us

If you have any questions or comments regarding our privacy practices, you may contact us by email at privacy@nomly.com; by telephone at 1-844-922-2874; or at the address below:

Streamtest Incorporated
PO Box 52330
Knoxville, TN 37950

U.S. STATE SUPPLEMENT

Last Updated: March 25, 2026

This U.S. State Supplement ("State Supplement") supplements the Nomly Privacy Notice and provides information required by the laws of certain U.S. states for their residents ("you"). Some U.S. states provide their residents particular rights, subject to certain legally permitted exceptions. This State Supplement applies solely to consumers residing in these states, such as our customers. Subject to applicable law, this State Supplement also applies to individual representatives of our vendors or business partners and our job applicants that reside in California. This State Supplement does not apply to our personnel in their capacity as such (but may apply when visiting our Sites, for example). You should read this Supplement in combination with our Privacy Notice to fully understand our collection, use and disclosure of your Information, and how you may exercise your rights under these laws. Any capitalized terms we do not define in this State Supplement are defined in our Privacy Notice.

Your Rights

Depending on the state where you reside, your rights may include the below (subject to certain legally permissible exceptions):

  • Access Right/Right to Know: Right to access your Information or receive certain information regarding our processing of your Information. For example, you may have the right to confirm whether we process your Information, the purposes for such processing, the categories of Information we have collected and/or disclosed about you, the categories of sources for the Information collected, and/or the categories of third parties and/or specific third parties to whom we have disclosed your Information. You may also have the right to obtain a copy of your Information that we have collected and ask for specific pieces of such Information (also known as a data portability right).
  • Correction Right: Right to request that we correct any inaccuracies in the Information we have collected about you.
  • Deletion Right: Right to request that we delete the Information we have collected about you.
  • Right to Opt Out of "Sale" or "Share"/Targeted Advertising: If applicable, right to request that we refrain from selling your Information or sharing your Information with third parties for cross-context behavioral advertising or targeted advertising purposes.
  • Right to Limit the Use or Disclosure of Sensitive Information: If applicable, right to limit certain uses or disclosures of Information defined as "sensitive personal information", "sensitive data" or a similar term under applicable law.
  • Withdrawal of Consent Right: If you provided your consent for a particular use or disclosure of your Information and such consent is required by law, you have the right to withdraw such consent.
  • Appeal Right: Right to appeal our decision if we deny your request or state we cannot fulfill it.
  • Non-Discrimination: Right not to receive discriminatory treatment if you exercise any of the rights explained in this State Supplement.

We do not use automated decision-making technologies or use or disclose your Information for profiling in furtherance of decisions that produce legal or similarly significant effects on you without either your explicit consent or where otherwise permitted by applicable law.

For Connecticut Residents Only: We do not collect, use or sell your Information for the purpose of training large language models.

How to Exercise Your Rights

To submit a request to exercise the rights applicable to you and your Information, follow the instructions detailed below. An authorized agent, subject to applicable law, may submit a request on your behalf by emailing us at privacy@nomly.com.

  • Targeted Advertising Choices: You may communicate your choices about the use and disclosure of your Information for cross-context behavioral advertising or targeted advertising purposes, as described in the Manage Your Account, Rights and Choices section of our Privacy Notice. Although our Sites do not respond to do-not-track ("DNT") signals, our Sites do recognize the global privacy control (GPC) signal, and you may communicate your preference that we not use or disclose your Information for cross-context behavioral or targeted advertising purposes by activating the GPC signal in your browser. For more information about what types of browsers support the GPC signal, please visit globalprivacycontrol.org.
  • All Other Requests: To submit any other request, you may email us at privacy@nomly.com, submit the form here, or call us at 1-844-922-2874. Please include "Appeal" in the subject line of any appeal request submitted by email.

To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your Information or complying with certain requests. If you have an account with us, we may ask you to verify your identity by requiring you to sign in to your account. If you do not have an account, we may require you to provide any of the following information: name, email address, telephone number and/or residential address (subject to the type of request you submit and your relationship or prior interactions with us). Subject to applicable law and depending on the nature of the request, we may also require you to sign a declaration under penalty of perjury that you are the individual whose Information is the subject of the request. If you designate an authorized agent to make a request on your behalf (1) we may require the authorized agent to provide signed written permission from you to do so, and (2) we may require you to verify your own identity directly with us (as described above). A valid power of attorney will constitute signed written permission, but you are not required to obtain a power of attorney to use an authorized agent. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

Section for California Residents

This section applies only to California residents. For purposes of this section, the terms "personal information", "sell", "share", "sensitive personal information" and "business purposes" have the meanings given to them in the California Consumer Privacy Act of 2018, as amended, and its implementing regulations (the "CCPA").

Personal Information We Collect

We may collect (and may have collected during the last 12 months) the following categories of personal information about you:

  • Identifiers: identifiers such as a real name, postal address, telephone number, online identifier (such as device identifier, cookie ID, etc.), IP address, email address, username, Social Security number and other similar identifiers (e.g., passport number, driver's license number, etc.).
  • Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): signature, education information, bank account number, credit card number, debit card number, other financial information, and health-related information.
  • Protected Classifications: characteristics of protected classifications under California or federal law, such as race, national origin, sex, gender, disability, citizenship status, and military and veteran status.
  • Commercial Information: commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies.
  • Internet or other Electronic Network Activity Information: Internet and other electronic network activity information, including browsing history, search history, and information regarding your interaction with our Sites or advertisements.
  • Geolocation Data.
  • Sensory Information: audio, electronic, visual, thermal, olfactory, and similar information.
  • Professional or Employment-Related Information: professional or employment-related information.
  • FERPA Information: Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).
  • Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes.

Sensitive Personal Information

Certain categories of personal information listed above may be considered "sensitive personal information" under the CCPA. We do not use or disclose (and have not used or disclosed during the last 12 months) sensitive personal information for any purpose other than those expressly permitted under the CCPA.

Sources of Personal Information

During the last 12 months, we may have obtained personal information about you from various sources, as follows:

  • Directly from you or your devices, such as through your use of our Sites or your communications with us;
  • Our subsidiaries and other affiliated companies;
  • Service providers who provide services to us or on our behalf;
  • Our advertising partners, such as advertising networks, online advertising companies, and social media platforms;
  • Our business partners and other strategic partners, such as co-sponsors of our sweepstakes, contests or other promotional programs;
  • Recruiting and talent agencies;
  • References you provide to us, such as when applying for an employment opportunity; and
  • Background and credit check providers.

Use of Personal Information

We may use (and may have used during the last 12 months) the categories of personal information listed above for the purposes described in the How is Your Information Used section of our Privacy Notice and for certain business purposes specified in the CCPA, such as:

  • Performing services, including maintaining or servicing accounts, customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, analytics services or storage services;
  • Providing advertising and marketing services to you (except that we only engage in cross-context behavioral or targeted advertising as described in our Privacy Notice);
  • Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance;
  • Short-term, transient use, including non-personalized advertising shown as part of your current interaction with us;
  • Helping to ensure security and integrity, to the extent the use of your personal information is reasonably necessary and proportionate for these purposes;
  • Debugging to identify and repair errors that impair existing intended functionality;
  • Undertaking internal research for technological development and demonstration; and
  • Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us and to improve, upgrade or enhance the service or device that is owned, manufactured, manufactured for or controlled by us.

In addition, we may use certain personal information for purposes of managing career opportunities with us or managing our relationships with current or prospective partners, corporate customers, vendors, suppliers and other business partner personnel.

Sale or Sharing of Personal Information

We do not "sell" or "share," and have not in the last 12 months "sold" or "shared" your personal information within the meaning of the CCPA. We do not have actual knowledge that we "sell" or "share" the personal information of individuals under 16 years of age.

Disclosure of Personal Information

We may disclose (and may have disclosed in the last 12 months) the following categories of personal information about you for the purposes described above: Identifiers; Personal information categories listed in the California Customer Records statute; Protected classification characteristics under California or federal law; Commercial information; Internet or other electronic network activity information; Geolocation data; Sensory information; Professional or employment-related information; FERPA Information and Inferences to the categories of third-party recipients below:

  • Our subsidiaries and other affiliated companies;
  • Service providers who provide services to us or on our behalf;
  • Our advertising partners, such as advertising networks, online advertising companies, and social media platforms;
  • Our business partners and other strategic partners, such as co-sponsors of our sweepstakes, contests or other promotional programs;
  • Background and credit check providers;
  • Our professional advisors (such as our lawyers, auditors, accountants, consultants, and insurers, including their agents); and
  • Operating systems and platforms.

We may also disclose your personal information if we are required to do so by law, regulation or legal process, such as in response to a subpoena or law enforcement authorities; when we believe disclosure is necessary or appropriate to prevent physical, financial, or other harm, injury or loss; or in connection with an investigation of suspected or actual unlawful activity.

Additionally, we may disclose your personal information to third parties in the event we sell or transfer (or contemplate the sale or transfer of) all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, restructuring, bankruptcy, dissolution or liquidation).

Shine the Light Request: California residents may also have the right to request that we provide you with (1) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (2) the identity of those third parties. To submit a Shine the Light request, contact us at privacy@nomly.com.

Changes to this State Supplement

We may change this State Supplement from time to time. When we do, we will let you know by posting the changed State Supplement on this page with a new "Last Updated" date. We encourage you to revisit this State Supplement often to remain fully informed of our privacy practices. For material changes, we may also tell you about changes by additional means (such as posting a notice on our website and/or contacting you directly about the changes).

Contact Us

If you have any questions about this State Supplement or our privacy practices, you may contact us at privacy@nomly.com.

CONSUMER HEALTH DATA SUPPLEMENT

Last Updated: March 6, 2026

This Consumer Health Data Supplement ("Health Data Supplement") supplements the Nomly Privacy Notice and applies only to individuals who participate in our product testing or sensory surveys and reside in the following U.S. states: Connecticut, Maryland, and Nevada ("you"). This Health Data Supplement describes how we may collect, use, and disclose your consumer health data, as such term is defined by the Connecticut Data Privacy Act, Maryland Online Data Privacy Act, and Nevada's Consumer Health Data Privacy Law, and the rights you have with respect to such data. Any capitalized terms we do not define in this Health Data Supplement are defined in our Privacy Notice.

Collection of Consumer Health Data

When you participate in our product testing or sensory surveys, we, or our service providers on our behalf, may collect the following categories of consumer health data about you, including:

  • Information about your health condition(s), treatments, diseases, diagnoses or health status. For example, we may collect information about your health condition(s) that impact your dietary restrictions or eating habits, such as diabetes, coronary heart disease, food allergies or celiac disease, when selecting participants and/or assessing their testing or survey responses or other feedback.
  • Reproductive health information. For example, we may collect information regarding your pregnancy (and stage of pregnancy), if applicable, when selecting participants and/or assessing their testing or survey responses or other feedback.
  • Any other information (including non-health information) that may otherwise identify your health status or could be used to infer your health status. Information about your dietary restrictions or dietary habits, or interest in certain health-related diets, brands or products that may allow us to infer, derive or extrapolate information about your health.

Sources of Consumer Health Data

We, or our service providers on our behalf, collect the categories of consumer health data above from you when you participate in our product testing and/or sensory surveys. We may also infer or derive consumer health data about you by analyzing other data we have about you.

Use and Disclosure of Consumer Health Data

We, or our service providers on our behalf, may use the categories of consumer health data above for the purposes described in the "How is Your Information Used" section of our Privacy Notice. For example, we, or our service providers on our behalf, may use your consumer health data to administer the relevant tests and/or surveys, gather feedback about our products, understand our customers' needs and preferences, conduct market research, and improve our products. Where required by applicable law, we, or our service providers on our behalf, will obtain your consent to collect and use your consumer health data.

We, or our service providers on our behalf, may disclose the categories of consumer health data described above to the parties described in the "To Whom Do We Disclose Your Information" section of our Privacy Notice. For example, we may disclose your consumer health data to our third-party service providers who analyze and assess our product testing and sensory survey results. Where required by applicable law, we will obtain your consent to disclose your consumer health data.

We do not allow third parties to collect consumer health data via cookies or other technologies on our Sites. As described above, we, or our service providers on our behalf, only collect consumer health data when administering our product testing or sensory surveys.

Your Rights

You have certain rights regarding your consumer health data. Your rights as specified by applicable law may include the following:

  • Access: The right to request that we disclose to you whether we collect, disclose or sell (as defined by applicable law) your consumer health data, each as they are applicable. You may also have the right to request access to and information about the consumer health data we have collected or disclosed about you, including a list of third parties and affiliates to whom we have disclosed or sold (as defined by applicable law) your consumer health data, and contact information for such third parties and affiliates, each as they are applicable.
  • Correct: The right to review and request changes to or update or correct inaccuracies of your consumer health data.
  • Delete: The right to request that we delete your consumer health data.
  • Withdraw Consent: The right to withdraw your consent, if you previously provided your consent to us to collect, use, disclose, or sell your consumer health data (as defined by applicable law). Please note that if you withdraw your consent, you may not be able to participate in our product testing or survey. We will explain the impact to you at the time to help you make your decision.
  • Restrict Processing: The right to request that we cease the collection, disclosure or sale of your consumer health data, each as they are applicable.

How to Exercise Your Rights

To submit a request to exercise the rights set forth above, please email us at privacy@nomly.com, submit the form here, or call us at 1-844-922-2874. You may appeal our decision with respect to a request you have submitted by calling us at 1-844-922-2874 or emailing us at privacy@nomly.com.

Under certain circumstances, we may not be able to effectuate your requests. For example, we, or our third-party service providers that administer our product testing or sensory surveys on our behalf, may delete or deidentify collected information, including your consumer health data, following completion of such testing or surveys or related analysis.

Changes to this Health Data Supplement

We may change this Health Data Supplement from time to time. When we do, we will let you know by posting the changed Health Data Supplement on this page with a new "Last Updated" date. We encourage you to revisit this Health Data Supplement often to remain fully informed of our privacy practices. For material changes, we may also tell you about changes by additional means (such as posting a notice on our website and/or contacting you directly about the changes).

Contact Us

If you have any questions about this Health Data Supplement or our privacy practices, you may contact us at privacy@nomly.com.

CANADA SUPPLEMENT

Last Updated: March 25, 2026

This Canada Supplement ("Canada Supplement") supplements the Nomly Privacy Notice. This Canada Supplement applies solely to consumers residing in Canada ("you"). Applicable privacy laws of Canada provide their residents particular rights, subject to certain legally permitted exceptions. You should read this Canada Supplement in combination with our Privacy Notice to fully understand our collection, use and disclosure of your Information, and how you may exercise your rights under Canadian law. Any capitalized terms we do not define in this Canada Supplement are defined in our Privacy Notice.

Your Rights

Subject to applicable law and certain legally permitted exceptions, you may have the following rights:

  • Access Right: Right to access your Information or receive certain information regarding our processing of your Information. For example, you may have the right to confirm what types of Information we collect about you, from what sources, with whom we share such Information, and how long we retain it. If you reside in Quebec, you may have the right to obtain a copy of the Information we maintain about you in a structured, commonly used technological format, or transfer such copy to another organization.
  • Correction Right: Right to ask us to rectify any Information that you demonstrate to be incorrect or outdated and to complete any Information that you demonstrate to be incomplete.
  • Withdrawal of Consent: You may withdraw your consent to our processing of your Information. For example, you may withdraw your permission related to cookies and other technologies by clicking here or on the "Cookies Settings" icon on the bottom of our Sites. For more information about our use of cookies and other technologies, please review the "Cookies and Other Technologies" section of our Privacy Notice.

    Please note that if you withdraw your consent, we may not be able to provide you with a particular service.

How to Exercise Your Rights

Except where otherwise noted, to exercise any of your privacy rights described above, you may submit the form here, call us at 1-844-922-2874 or email us at privacy@nomly.com.

Global Transfers of Information

We make our products available in a number of jurisdictions. As a result, your Information can be stored and processed in various other jurisdictions around the world outside of Canada or your province or territory by us and our service providers, including (but not limited to) the United States, for the purposes detailed in our Notice. When your Information is stored in a jurisdiction other than where you reside, it may be subject to the law of this foreign jurisdiction, including any law permitting or requiring disclosure of the information to the government, government agencies, courts and law enforcement in that jurisdiction.

You can obtain more information about our policies and practices with respect to the use of service providers located in other jurisdictions by contacting us as described in the "Contact Us" section below.

How We Protect Your Information

We implement the following measures to protect your Information, including:

  • Internal policies and procedures that define the roles and responsibilities of our employees, representatives, and service providers throughout the life cycle of Information and limit their access to that Information on a "need-to-know" basis;
  • Physical, electronic and procedural safeguards that comply with relevant standards to protect Information;
  • If the Information is collected or stored electronically, technical safeguards such as encryption, firewalls, passwords, anti-virus software and similar measures;
  • A designated privacy officer to monitor our compliance with applicable privacy laws;
  • Procedures for receiving, investigating, and responding to complaints or inquiries about our information handling practices; and
  • Contractual protections to ensure that service providers with whom we share Information maintain adequate protections and security standards.

Changes to this Canada Supplement

We may change this Canada Supplement from time to time. When we do, we will let you know by posting the changed Canada Supplement on this page with a new "Last Updated" date. We encourage you to revisit this Canada Supplement often to remain fully informed of our privacy practices. For material changes, we may also tell you about changes by additional means (such as posting a notice on our website and/or contacting you directly about the changes).

Contact Us

If you have any questions about this Canada Supplement or our privacy practices, or complaints regarding our privacy practices under Canada law, please contact our privacy officer at privacy@nomly.com.

INTERNATIONAL SUPPLEMENT

Last Updated: March 25, 2026

This International Supplement ("International Supplement") supplements the Nomly Privacy Notice and provides information for individuals residing outside the United States and Canada and in countries with data protection laws that include specific requirements addressed here, such as Barbados, Belize and Jamaica ("you"). This International Supplement should be read together with the Notice. Any capitalized terms we do not define in this International Supplement are defined in our Notice.

Under certain data protection laws, we can only use your Information if we have a relevant lawful basis. The most common lawful bases we rely upon are as follows:

  • where you have given consent;
  • to comply with our legal obligations;
  • for the performance of a contract with you or to take steps at your request before entering into a contract; or
  • for our legitimate interests or those of a third party.

A legitimate interest is when we or a third party have a business or commercial reason to use your Information, so long as this is not overridden by your own rights and interests.

Where we process information about a person's racial or ethnic origin, political opinions, religious or similar beliefs, trade union membership, physical or mental health or condition or sexual life, or genetic or biometric data (also known as Special Category Personal Data), we will only do so where a further condition is also met. Usually, this will mean that the processing is with your explicit consent or with respect to the defense of legal claims.

Failure to provide us with the relevant Information, in cases where you are legally or contractually required to provide it, may result in us being unable to establish or continue our relationship with you or to provide Services to you.

We will only use your Information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

Global Transfers of Information

We make our products available in a number of jurisdictions. As a result, any information that we collect, disclose or share, including your personal data, can be stored and processed in various other jurisdictions around the world ("Other Jurisdictions"), including (but not limited to) the United States, for the purposes detailed in our Notice. Where applicable, we only transfer Information to Other Jurisdictions in compliance with applicable laws, which might include ensuring there are applicable contractual arrangements with our subsidiaries, affiliates and other third parties in respect of such transfers in place.

You can obtain more information about our policies and practices with respect to the use of service providers located in other jurisdictions by contacting us as described in the "Contact Us" section below.

Your Rights and How to Exercise Your Rights

Depending on the jurisdiction in which you reside, you may have the following rights:

  • Receive confirmation as to whether or not your Information is being processed, and access your stored Information, together with supplementary information;
  • Receive a copy of the Information you directly volunteer to us in a structured, commonly used and machine-readable format;
  • Request rectification of your Information that is in our control;
  • Object to the processing of your Information by us;
  • Request to restrict processing of your Information by us;
  • Request erasure of your Information; and
  • Lodge a complaint about our processing of your Information with a supervisory authority.

These rights are not absolute and may be subject to our own legitimate interests, and regulatory and legal requirements. If you would like to exercise any of the rights mentioned in this section, please contact us as detailed below.

Additional Information

Streamtest Incorporated d/b/a Nomly will be the data controller of your Information processed by or for us in connection with our Services. In addition, certain business partners also act as data controllers for the Information that we share with them and any Information that partners may collect independent of our relationship with them. If you have any questions about the processing of your Information by a business partner, you should contact the business partner directly.

Changes to this International Supplement

We may change this International Supplement from time to time. When we do, we will let you know by posting the changed International Supplement on this page with a new "Last Updated" date. We encourage you to revisit this International Supplement often to remain fully informed of our privacy practices. For material changes, we may also tell you about changes by additional means (such as posting a notice on our website and/or contacting you directly about the changes).

Contact Us

All requests, complaints and queries about this International Supplement or our privacy practices should be addressed to us by submitting a request to our email address: privacy@nomly.com. We take our obligations seriously, and we ask that any concerns are first brought to our attention, so that we can try to resolve them. If you are unsatisfied with our response, you can lodge a complaint with the applicable data protection supervisory authority.