Privacy Policy

Effective: September 22, 2026

This Privacy Policy explains how Pinnacle Brand Group Inc. (“Gordon Rush,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit gordonrush.com (the “Site”), buy from us, or otherwise interact with us. It also describes the rights you have under U.S. state privacy laws and how to exercise them.

1. Who we are

The Site is operated by Pinnacle Brand Group Inc., 775 Anita Street, Suite A, Chula Vista, California 91911, United States. Questions about this policy can be sent to privacy@gordonrush.com or by mail to the address above, Attn: Privacy.

2. Notice at collection — what we collect and why

The table below is our California “notice at collection.” It lists the categories of personal information we have collected in the preceding 12 months, where it comes from, why we use it, who we disclose it to, and how long we keep it.

We do not collect sensitive personal information (such as government ID numbers, precise geolocation, biometric data, health information, or data about race, religion, or sexual orientation), and we do not use or disclose personal information for purposes that would require a “limit the use of my sensitive personal information” right. We do not use automated decision-making that produces legal or similarly significant effects.

3. Do we sell or share personal information?

We do not sell personal information for money. If you allow advertising cookies and pixels, information about your visit (identifiers, internet activity, commercial information) is made available to advertising partners so we can measure our advertising and show you relevant ads elsewhere. California law calls this “sharing” for cross-context behavioral advertising. You can opt out at any time on our Your Privacy Choices page, by turning on the Global Privacy Control signal in your browser, or by contacting us. We do not knowingly sell or share the personal information of anyone under 16.

4. Cookies, pixels, and similar technologies

We use cookies and pixels in four categories. Essential technologies (cart, checkout, login, security, fraud prevention, remembering your consent choice) always run because the Site does not work without them. Analytics, marketing, and functional technologies run only after you choose to allow them in our consent banner, and you can change your mind at any time. We do not use session-replay or screen-recording tools. Our Cookie Policy lists each technology, its provider, and its lifetime.

A note on recording and interception. Where you allow analytics or marketing technologies, third-party providers may receive information about how you interact with the Site, including pages viewed and, on forms you submit, the fact that you submitted them. Our live-chat and email support tools store the content of your conversations so that we can answer you and keep a record of the exchange; a notice to this effect appears at the start of every chat. By continuing to use the Site with these features enabled, you consent to this collection. If you do not consent, decline non-essential cookies and contact us by email or post instead of chat.

5. How we use personal information

We use personal information to take and fulfill orders; process payments, returns, and warranty claims; provide customer accounts and service; send transactional messages (order confirmations, shipping updates, return labels); send marketing email and SMS where you have opted in; run, secure, debug, and improve the Site; detect and prevent fraud and abuse; comply with law and enforce our terms; and, with your consent, measure and personalize advertising.

6. Who we disclose personal information to

We disclose personal information to service providers and contractors who act on our instructions under written contracts: our commerce platform (Shopify), payment processors, warehouse, fulfillment and returns providers, carriers, email and SMS providers, help-desk and review platforms, fraud-prevention and security providers, and professional advisers. With your consent, we disclose internet-activity information to analytics and advertising partners. We may disclose personal information to comply with law, respond to lawful requests, protect our rights and safety, or in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information.

7. Your privacy rights

Depending on where you live (including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia), you may have the right to:

• Know and access the personal information we have collected about you, including the categories, sources, purposes, and recipients, and to receive a portable copy.
• Correct inaccurate personal information.
• Delete personal information we collected from you, subject to legal exceptions (for example, records we must keep for tax or warranty purposes).
• Opt out of the sale or sharing of personal information, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects.
• Appeal a decision we make about your request, where your state provides that right.
• Not be discriminated against for exercising any of these rights. We will not deny you goods, charge different prices, or provide a different level of service because you exercised a privacy right.

How to exercise your rights

Submit a request by email to privacy@gordonrush.com, through our Your Privacy Choices page, or by mail to the address in section 1. You do not need an account to make a request.

Verification. To protect your information, we will verify your identity by matching at least two data points you provide (for example, the email address and postal code on a recent order) against our records. For requests to access specific pieces of information or to delete, we may ask for a third data point or a signed declaration. We will only use information provided in a request to verify and respond to it.

Authorized agents. You may designate an agent to make a request on your behalf. We will ask the agent for written permission signed by you (or a power of attorney) and may still ask you to verify your identity directly with us.

Timing. We will confirm receipt within 10 business days and respond within 45 days. If we need more time (up to a further 45 days) we will tell you why. Opt-out requests are honored within 15 business days. We keep a record of requests for 24 months as the law requires.

Appeals. If we decline your request, you may appeal by replying to our decision or writing to privacy@gordonrush.com with “Appeal” in the subject line. We will respond within 45 days. If you are still unsatisfied you may contact your state attorney general.

8. Global Privacy Control

We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of the sale and sharing of personal information and of targeted advertising for that browser. If you are logged in when we receive the signal, we also apply it to your account.

9. Marketing email and text messages

We send marketing email only to people who have subscribed. Every message includes an unsubscribe link and our postal address, and we honor unsubscribe requests within 10 business days. If you opt in to text messages, you will receive recurring automated marketing messages at the number you provide; consent is not a condition of purchase; message and data rates may apply; reply STOP to cancel and HELP for help. We do not share mobile opt-in information with third parties for their own marketing.

10. Children

The Site is intended for adults. We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Security

We maintain reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold, including encryption in transit, tokenized payment processing certified to PCI DSS, access controls, and vendor contracts. No method of transmission or storage is completely secure. If a breach affects your unencrypted personal information we will notify you and regulators as the law requires. To report a security vulnerability, email security@gordonrush.com.

12. Retention

We keep personal information only as long as needed for the purposes in section 2 and as required by law, then delete or de-identify it. Retention periods for each category are listed in the table above.

13. International visitors

We ship within the United States only and the Site is directed to U.S. residents. If you visit from outside the U.S., your information will be processed in the U.S. under U.S. law. Residents of the European Economic Area, the United Kingdom, and Canada may contact us at privacy@gordonrush.com to exercise the rights available to them under local law.

14. Changes to this policy

We will post any changes here with a new effective date. If a change materially reduces your rights we will give notice on the Site or by email before it takes effect. We review this policy at least once every 12 months.

15. Contact

Pinnacle Brand Group Inc.
775 Anita Street, Suite A, Chula Vista, California 91911, United States
Attn: Privacy
privacy@gordonrush.com

Accessible formats: if you need this policy in an alternative format, email accessibility@gordonrush.com.