General Information

Meh's Privacy Commitment to You

We understand your concerns about how your personal data is used and disclosed, and we appreciate your trust in us to use your personal data carefully and sensibly. This Privacy Notice (“Notice”) describes how Meh collects and processes your personal data through Meh products, services, websites and physical location, devices, and applications that reference this Privacy Notice (together, “Meh Services”).

By using Meh Services, you are consenting to the practices described in this Privacy Notice and the collection and use of some of your personal information (“Personal Data”, “Info”) when you use our Services, which we explain more about below in this Notice. This Notice also explains your privacy rights and options regarding your Personal Data. If you have questions about our privacy practices or this Notice, please contact us using the contact information in the How to Contact Us section of this Notice.

Scope of this Privacy Notice

This Privacy Notice applies to Meh where we decide why and how to use the Personal Data we collect for sales of products, customer service, marketing or other real business uses. Under the law, this is when we act as the “Controller” of the Personal Data we collect.

This Notice does not cover personal information provided or shared with us where Meh is not the Controller, but a “Processor” or “Service Provider.” Also, our websites (“Sites”) may have links to other websites, apps or services from other places (like a payment processor or social media), where we have zero control. You will need to visit the privacy notices on those platforms to find out what they are doing with your Data.

Collection of Your Info and Its Use

Collection of Personal Data and Our Use

Meh collects information that relates to or that can identify people (again, “Info”, “Personal Data” or “Data”) from several sources. The Data we collect is usually determined by you and what you do with us, our partners, emails and other resources you use and access.

For example, Meh uses DHL, FedEx and UPS to help us ship orders to you. We use Stripe to secure payments for purchases from our Sites. We also use other technologies to provide functional features on our Site, to show us how you use our Site, what products you like to look at, and how often you visit us. Those activities are conducted to support our Site functionality and management. We want to see what you like, and what you dislike, so we can work to continue to bring you the best possible shopping experience.

Note, Personal Data does not include anonymous statistics or de-identified information, because it does not identify an individual. If you have questions about our use of Personal Data or technology on our Site, or wish to exercise any of your rights under applicable privacy laws, please reach out to us at privacy@meh.com.

How and Where Does Meh Get Data?

Meh will collect your Info if you are a job candidate, a potential customer, customer, business partner, advisor, contractor or other people who use our Services on others' behalf (“Individuals”) who:

• Visit and shop on our online Sites and in our brick-and-mortar store;
• Receive or send messages from or to us, including email, phone, texts, and mail;
• Download or engage our content or publications;
• Submit an inquiry about an order, for support or information;
• Participate as an influencer, where we collect information about social media posts;
• Engage with our customer service or employees;
• Apply to work with us, view or share job postings; or
• Work at a partner or supplier of ours and interact with our Company in the course of doing business with us.

We Collect Info from a Variety of Places, Including but Not Limited to:

• The person the Data is about;
• Publicly available sources (a voting record, your business information, social media);
• Social media personalities acting as our Influencers;
• Social media posts and interactions on our accounts;
• Service providers; and
• Business partners, suppliers, and/or vendors.

What Pieces of Personal Data Do We Collect?

Some of the Data we collect is personal to you. Other information is anonymous. For information about your choices for collection, use, and disclosure of your Personal Data, please see Section G of this Notice. Additionally, if you reside in a U.S. State with a consumer privacy law, Section E also applies to you.

Identifying Info

We collect this type of Data when you create a profile, make a purchase, take advantage of offers or sign up for membership. For example: name, address, zip code, email, telephone and cell number(s), birthdate, limited credit card information, and security question answers.

Payment Info

Meh collects Data for payment information. Our payments processor is Stripe (their privacy notice can be found here), who holds your credit card information for your purchases on this Site. We maintain limited Data to help us verify your account.

Demographic Info

We collect this when you take part in a promotion or survey, such as gender and zip code.

Device Info

We collect limited information about your device when you visit our Services. For example, the type of device you use to access our Services, IP address or mobile operating system.

Commercial Info

We collect this Data through our Services when you make a purchase, such as your purchase history.

Internet or Other Network Activity Info

This type of Data is collected when you visit our Services. This Data may be automatically collected or customer-initiated, like your browsing history, search history, and other Info about use of our Services.

Account Credentials

If you use our Services, we collect account credentials and passwords to protect our Services and your security, to the extent permitted or required by applicable law.

Other Info

If you use our Services, we may gather data about how you use them, such as pages and files viewed, operating system, searches, and date/time stamps associated with usage.

Like most websites and other places on the Internet, our Sites and Services may use cookies, web beacons, pixels and/or other technologies (collectively, “cookies”) to gather information. If you have any questions about our use of cookies on our Site, please see the Cookie Notice Section of this Notice, or please reach out to us at privacy@meh.com.

How We Use Data

Meh collects Personal Data for a number of purposes, including but not only the following:

Product and Services Fulfillment

• Complete, fulfill, manage, and communicate about purchases and related services;
• Set up and service your online account on our Sites or app;
• Provide customer service and alert you about product or shipping status; and
• Manage memberships, including order tracking, billing, and any messages with you about those memberships.

Internal Operations

• Improve our Sites, app, inventory, vendors, and customer service;
• Conduct research and analytics related to operations and Services; and
• Perform other logistics and operation activities as needed.

Credit Card Processing

• This is done by a third party who processes payments for us;
• We use one piece of a part of your credit card data to help address questions or requests about your account.

Security, Compliance, Legal Obligations and Fraud Prevention

• Protect our assets (on and offline) and prevent fraudulent activities;
• Validate credentials and authenticate customers logging into their membership accounts, application, or transacting online;
• Protect the security and integrity of our Services and data; and
• Assist law enforcement and respond to legal/regulatory inquiries.

Marketing, Promotions and Advertising

• Send you information about our Services and promotions in emails;
• Provide interactive features on our Sites, social media, and app, such as Services ratings and reviews, product reviews and flash-sales;
• Spot your item and shopping preferences;
• Identify activity on our Sites, what you are interested in, how often you visit; and
• Oversee any contests, promotions, or surveys.

Anonymized or De-Identified Uses

To the extent we anonymize or de-identify data, we will not attempt to re-identify it.

Disclosure of Personal Data

We may disclose Personal Data to third-parties for certain purposes, including the following:

• General Business Purposes: We may share Data with consultants and service providers for customer or technical support, marketing, sales, operations, and legitimate business purposes;
• Compliance With the Law: We may disclose Info to a third-party where we are legally required to comply with applicable laws, regulations or government requests;
• Protection of Our Rights: We may also disclose Info where it is needed to protect or exercise, establish or defend our legal rights;
• Business Transfers: We may share or transfer Data to support negotiations of or for a merger, sale of assets, financing, or acquisition of all or a portion of our business;
• Receiving Professional Advice: In certain instances, we may share Personal Data with professional advisers, including lawyers, auditors, and insurers who provide professional services where we are legally obliged to do so or have a legitimate interest in sharing such information;
• Publicly Shared Information: Any Personal Information or other Data you choose to submit in product reviews, communities, blogs or chat rooms on our Sites may be read, collected and used by others who visit these forums.

Sometimes Information is Vital. Where we need to collect and use Personal Data by law, to complete a transaction or to fulfill a contract with you, and you do not provide the Data required, that deficiency may prevent us from meeting our obligations.

Other People's Privacy. If you provide us with Personal Data for another person, you must first inform them you are giving Meh their Personal Data, why, and how it will be used. The other person must give their consent to you if you seek to share their Info with us. They have to consent. Please know you may not and cannot consent for them.

International Transfers, Security and Data Retention

Use of Personal Data in the US, and Elsewhere

Our Sites' servers are in the United States, and our third-party service providers and partners state they process our data in the United States. This means when we collect your Info, it is managed and used in the US. Note: MEH IS US BASED AND US CENTRIC. WE DO NOT HAVE A PRESENCE IN, DO BUSINESS IN OR SOLICIT CONSUMERS FROM OUTSIDE THE US.

Security

We use appropriate technical, organizational and administrative security measures to protect the security, confidentiality and integrity of our data.

Data Retention

Meh retains Data we collect for the time needed to complete our relationship with you, or as long as there is a legitimate business need to do so. How long we keep Data depends on the purpose for the Data, the amount, nature and sensitivity of the Data used, any potential risk from unauthorized use or disclosure of that Data, and whether we can achieve our goals through other means, as well as on other legal basis (such as a statute of limitation).

When we have no legitimate business need to use your Data, we will either delete or anonymize it, as we are able. If deletion is not feasible, we will securely store and isolate the Data from further processing until deletion is possible.

Your Privacy Rights

You may have the following privacy rights:

If you wish to access, correct, update or request deletion of your Personal Data, you can do so at any time by accessing your account and updating it or deleting it, or by contacting us in an email to privacy@meh.com or by using the contact details provided under the How to Contact Us heading below. We of course need to verify you are who you say you are before we provide access to anyone's Info.

For a privacy request, please provide us with the following:

• Your name;
• Type of request;
• Approximate date of collection of the information; and
• A valid email address to contact you.

We provide additional information below for California and residents of US states with applicable state privacy laws who wish to submit access, correction or deletion requests. We do not have a presence in the UK, EU, Switzerland or other countries in the European Economic Area (EEA) and do not market or solicit inquiry from those regions or anywhere other than North America. If as a resident of the UK, EU, Switzerland or other country in the EEA, you believe we have collected Personal Data from you, you may submit a request to privacy@meh.com to:

• Object to processing of your Personal Data;
• Ask us to restrict processing of your Personal Data; or
• Request portability of your Personal Data.

Again, you can exercise these rights by contacting us through privacy@meh.com or by using the contact details under the How to Contact Us heading below. In any such inquiry, please provide us with the following:

• Your name;
• Type of request;
• Approximate date of collection of the information; and
• A valid email address to contact you.

Meh does not use or process Personal Data which would subject a person to a decision based solely on automated processing, including profiling, which produces legal effects (“Automated Decision-Making”). Automated Decision-Making currently is not a part of our Services.

You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “Unsubscribe” link in the marketing communications we send, or by using the contact details provided under the How to Contact Us heading below. Please note opting-out of the receipt of marketing communications from us does not opt you out of receiving important business stuff related to your interaction with us, such as emails about your subscriptions, purchases, shipping, service announcements or security information.

If we collected and used your Personal Data with your consent, then you may withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of processing we conducted prior to your withdrawal, nor will it affect the use conducted in reliance on lawful processing grounds other than consent.

We respond to all requests we receive from individuals wishing to exercise their privacy rights under applicable data privacy or protection laws. If you seek to enforce any of your rights with respect to our Services, please access your account with us, use the contact details provided under the How to Contact Us heading below, contact the Meh representative with whom you have direct contact, or please email us at privacy@meh.com.

Important Information for Residents in States with Applicable Privacy Laws

This section of our Privacy Notice supplements the information above and applies to visitors, users, and others who reside in a state in the United States with an active and enforceable data privacy law (“consumers” or “you”). Such laws may include the California Consumer Privacy Act (CCPA), Colorado Privacy Act, Connecticut Data Privacy Act, Delaware Personal Data Privacy Act, Indiana Consumer Data Protection Act, Iowa Consumer Data Protection Act, Kentucky Consumer Data Protection Act, Maryland Online Data Privacy Act, Minnesota Consumer Data Privacy Act, Montana Consumer Data Privacy Act, Nebraska Data Privacy Act, New Hampshire Privacy Act, New Jersey Data Privacy Act, Oregon Consumer Privacy Act, Rhode Island Data Transparency and Privacy Protection Act, Tennessee Information Protection Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, Virginia Consumer Data Privacy Act, and other U.S. privacy law and their implementing regulations (collectively, “State Privacy Laws”). Some of these laws may not take effect until a future date.

In general, the State Privacy Laws provide their consumers (residents of those states) with rights to:

• Confirm whether we process their Personal Data and access it (the “Right to Know”);
• Delete or correct their Personal Data, taking into account the information's processing purpose (“Right to Delete”);
• Obtain a copy of their Personal Data (“Right of Data Portability”);
• Opt-out of Personal Data processing for targeted advertising or sale of Data; and
• Either limit (opt-out) or give consent prior to processing sensitive Personal Data.

The exact scope of these rights vary by state, may change, and new privacy rights may become applicable as State Privacy Laws and implementing regulations are passed or amended.

We have adopted this Notice in our best effort to comply with each enforceable privacy law at the time of publication of this Privacy Notice, as well as others in the future. The terms in this Privacy Notice will have substantially the same meanings as those in each of the State Privacy Laws, to the extent they are able to be reasonably interpreted in comity and uniformity with each other.

California Civil Code Section 1798.83 permits individuals who are California residents that have a business relationship with us to request certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes. To make such a request, please send an email to or write us using How to Contact Us section of this Notice. Make sure to state you are a California Resident.

Note: This Notice does not apply to job or employment Info collected from California-based employees, job applicants, contractors, or similar individuals.

Data We Collect

As noted in Section A, we collect Data that identifies, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular consumer or household. This Personal Data, however, does not include:

• Publicly available information.
• De-identified or aggregated consumer information.
• Information excluded from State Privacy Laws scope, where applicable, such as:
  • Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data, or other qualifying research data;
  • Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

Meh has collected the following categories of Info from consumers in the last twelve (12) months:

We collect the categories of Data listed above from the following categories of sources:

• Directly from you (through forms you complete or products you buy);
• Publicly available sources (voting records, business information, social media);
• Indirectly from you (observing actions on our Services or social media);
• From business partners or vendors (events and business contacts).

Use of Personal Data

We may use or disclose the Data we collect for one or more of the following purposes:

• To fulfill or meet the reason you provided the Data. If you share your name and contact information to ask about price or a product, we use that Data to respond. If you provide Data to purchase a product, we use the Data for payment and delivery and save it to help with new orders or returns.
• To provide, support, personalize, and develop the Services.
• To create, maintain, customize, and secure your account with us.
• To process your requests, purchases, transactions, and prevent fraud.
• To provide support and respond to inquiries, including to investigate concerns and monitor and improve our responses.
• To personalize your Site experience and deliver content, product and service offerings relevant to your interests, including offers through our Site, email or text (with consent, where required).
• To help maintain safety, security, and integrity of our Sites, products and Services, databases and other technology assets, and business.
• For testing, research and analysis, including to improve our Services.
• To respond to law enforcement, as required by law, court order, or government regulations.
• As described to you when collecting your Personal Data.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar, in which Data held by us is among the assets transferred.

Disclosure of Personal Data

We do not knowingly “sell” Personal Data nor allow our third-party recipients to do so.

We may disclose Personal Data by providing it to a third party for a valid business purpose under a written contract that describes the purposes of the Data use, requires the recipient to keep the Info confidential, and prohibits use of the Data for a purpose except performance of the contract. In the preceding twelve (12) months, Meh has disclosed Personal Data for certain business purposes to the categories of third parties identified in the chart below:

Your Rights and Choices

The State Privacy Laws provide consumers with rights regarding their Personal Data. This section describes those rights under applicable law and explains how to exercise those rights.

Right to Know and Data Portability

You have the right to request access and disclosure about our collection and use of your Personal Data over the past 12 months and to have a copy of that Data provided to you (the “right to know”). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will provide the following:

• The categories of Personal Data we collected about you.
• The categories of sources for the Data we collected about you.
• Our business or commercial purpose for collecting the Data.
• The categories of third parties we share the Data with.
• If we sold or disclosed your Info for a business purpose, two separate lists disclosing:
  1. Sales, identifying the Personal Data categories each category of recipient purchased about you; and
  2. Disclosures for a business purpose, identifying the Personal Data categories that each category of recipient got about you.
• The specific pieces of Personal Data we collected about you.
• A copy (if requested) of the Data collected and maintained in a usable format.

Right to Delete and Correct

You have the right to request that we delete or correct Data collected or maintained about you, subject to certain exceptions (together, the “right to delete”). Once we get your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will review the request to see if an exception applies. We may deny your request if keeping the Info is crucial to:

• Complete the transaction for which we collected the Data, provide a requested Service, take actions reasonably anticipated for our ongoing relationship with you, fulfill the terms of a written warranty or product recall, or perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
• Comply with a legal obligation.

We will delete or de-identify and/or correct Personal Data not subject to one of these exceptions from our records and will direct our service providers to take similar action.

Exercising Your Rights to Know or Delete

To exercise your rights to know or delete described above, please submit a request by contacting us by emailing us at privacy@meh.com.

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your Personal Data. You may submit a request twice within a 12-month period. Your request must:

1. Provide sufficient information that allows us to reasonably verify you are the person we collected Personal Data about, or an authorized representative.
2. Describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you. You do not need to create an account with us to submit a request to know or delete, however, we do consider requests made through a password protected account sufficiently verified when the request relates to Personal Data associated with that specific account.

We will only use Personal Data provided in the request to verify identity or authority to make the request.

Response Timing and Format

We will confirm receipt of your request to know or delete within ten (10) business days. We work to substantively respond to a verifiable consumer request within forty-five (45) days of receipt. If we require more time (up to another 45 days) to respond to your request, we will inform you of the extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically as appropriate to the communication. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Data that is readily usable and should allow you to transmit the Data from one entity to another entity without hindrance.

We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we determine a request warrants a fee, we will explain why we made that decision and provide a cost estimate before completing such a request.

Non-Discrimination

Non-Discrimination. We will not discriminate against you ...requires prior opt-in consent, which you may revoke at any time.

Changes to Our Privacy Notice

Changes to Our Privacy Notice. We will update and amend this Privacy Notice from time to time. We will post any changes on this page and update the effective date at the top. Your continued use of our Services after we post changes constitutes your notice and acceptance of such changes.

Children

Children. At this time, our Services and Site are not geared towards or intended to be used by children under the age of 16. We do not knowingly collect Personal Data from children under 16. If we learn that we have collected Personal Data from a child under 16, we will take steps to delete such Personal Data from our systems.

How To Contact Us

How To Contact Us. If you have questions or comments about this Privacy Notice, our privacy practices, or how Meh collects and uses the Personal Data it processes, please contact us at:

Email: privacy@meh.com

If you need to access this Notice in an alternative format due to having a disability, please contact us.

Meh Cookie Notice Section

The Cookie Notice

This Cookie Notice is part of our Privacy Notice and provides additional information about the cookies and similar technologies we use. It explains what cookies are, how we use them on our Site, and how you can control them. Please note that disabling cookies may impact the performance of our Site and prevent certain features from loading properly.

What is a Cookie?

A cookie is a small file of letters and numbers a website puts on your device (computer, phone or tablet) when you visit. Cookies are widely used to make websites work, or work more efficiently, as well as to provide reporting information. Cookies also allow a website to recognize a user's device and remember actions and preferences (such as login, language, font size and other display preferences) over a period of time, so you don't have to keep re-entering them when revisiting. Additional information about cookies is available at: .

Your Choices Regarding Cookies

Meh Services use the cookies and technology we need to operate our Site, improve it, and provide you with a better experience. You can choose whether to accept non-essential cookies and can control the collection of certain Personal Data for other purposes through your browser settings.

You may change your settings on your Internet browser to allow or block cookies or to alert you when cookies are being set. Each browser is different, so please check your browser's “options” or “preferences” menu for cookie settings. You can also use the “Help” option in your browser for more details.

Industry Programs

You can also take advantage of industry-sponsored programs that provide choices about receiving targeted advertising and certain cookies that may be of use to you, including but not limited to the following resources:

Additional information on cookies and online advertising choices are offered by:

• Adobe Marketing Cloud: If you would like more information on how Adobe may use cookies or to opt out of cookies placed by Adobe Marketing Cloud, please visit the Opt-Out page at .
• Google: For information on how Google Analytics uses data, please see “How Google uses information from sites or apps that use our services,” located at .

How Long Do Cookies Last?

The cookies we run on our Site and apps will expire as follows:

• Session cookies: They allow site operators to follow a user's actions during a single browser session. Once the browser is closed, all session cookies are deleted.
• Persistent cookies: These remain on a visitor's device for a period of time specified in the cookie. They are activated each time a user visits the site that created that cookie.

What Cookies Does Meh Use & Why?

The cookies used on our Site are categorized as follows:

• Strictly necessary
• Functional
• Analytics

Strictly Necessary Cookies

These cookies are necessary for the Site to function and cannot be switched off in our systems. They are usually only set in response to actions made by you, such as setting your privacy preferences, logging in, or filling in forms. These cookies do not store information that could specifically identify you.

We use Strictly Necessary Cookies to:

• Identify and/or authenticate a user as being logged into the Site;
• Ensure a user connects to the right service if a change is made; and
• For security purposes.

You can set your browser to block or alert you about these cookies, but some parts of the Site will not work if you do so. We cannot guarantee performance of the Site or security during a visit if these cookies are blocked.

Functional Cookies

Functional cookies are used to enable enhanced functionality and personalization, such as remembering choices you make (like your language or the region you are in). They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, certain functionality may become unavailable.

Analytics Cookies

Analytics cookies collect information about how you use our Site, such as which pages you visit most often and whether you receive error messages. These cookies help us understand and improve the performance and user experience of the Site, understand interests of our users, and measure the effectiveness of content.

Analytics cookies are used for:

• Web analytics: to provide anonymous statistics on how the Site is used; and
• Error management: to improve the Site by measuring errors.

If you do not allow these cookies, we will not know when you have visited our Site and will be less able to monitor its performance. Some analytics cookies are managed by third parties, such as Google Analytics.

Last modified November 14, 2025.