We know you care about how your personal information is used and shared, and we take your privacy seriously. Please read the following to learn more about our Privacy Notice.

Effective date: August 26, 2025

OFS Brands Inc., dba ROOM (“Room”) provides affordable, sustainable, and flexible workplace solutions that allow you to work better. Our Privacy Notice (“Privacy Notice”) is designed to help you understand how we collect, use and share your personal information and to assist you in exercising the privacy rights available to you. For purposes of this Privacy Notice, “personal information” is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. 

For purposes of this Privacy Notice, information is not “personal information” if it cannot reasonably be used to infer information about you or be linked to you, such as if its been deidentified or aggregated, or if it is information that you have made available to the general public, such as public posts on social networks.

1. SCOPE

This Privacy Notice applies to the personal information of current or prospective customers processed by us in our business, including on our websites, via our products, and through other online or offline offerings (collectively, the “Services”). It does not apply to the personal information we collect concerning our employees or independent contractors. 

2. PERSONAL INFORMATION WE COLLECT

Categories of Personal Information We Collect

The categories of personal information we collect depend on whether you are a customer, user, applicant or visitor, and the requirements of applicable law. In the past twelve months, we have collected the following categories of personal information:

• Direct identifiers. Direct personal identifiers, such as name, online identifier, online username or social media handle.
• Contact information. Direct personal identifiers such as email address or phone number and indirect identifiers like postal address.
• Demographic Information. Indirect identifiers such as age and gender.
• Commercial Information. Products you have purchased, payment information such as credit or debit card numbers, and shipping address.
• Communication Information: Non-content information (like time of day and addressing information) and content information (the body of the message you send) through the use of chatrooms, forums, submission forms, or message boards provided by us, or through phone calls, emails, and text messages.
• Profile Information: Inferences drawn from any of the information described above to create a profile about you reflecting your preferences or characteristics.

We collect personal information automatically as you use our website. The technologies deployed through our website collect your device information, browsing actions, and patterns as follows:

• Device Identifiers. Information about the device you are using, such as device identifier of the equipment you use to access the website, hardware model, Media Access Control (MAC) address, IP address, and operating system.
• Online Identifiers. Information gathered from Online Tracking Technologies (discussed below) and your website preferences.
• Usage Information. Information about your interaction with website, such as the pages you access on the website, the frequency of access, what you click on, referring URL, traffic data, and when you accessed the website.
• Location Information. Information about your location, which may be determined through your device’s IP address, [and may include precise geolocation information].
• Clickstream Data. We may record what you have clicked while on the website. This data can tell us Device Identifiers and the address of the website from which you linked to the website. We may collect and use clickstream data as a form of aggregate information to anonymously determine how much time visitors spend on each page of the website, and how customers navigate to and on the website.
• Social Media Platforms and Networks. The website may include social media features and plugins, such as Instagram and Facebook widgets. These plugins may use Online Tracking Technologies (discussed below) to collect information about your internet activity, such as Device Identifiers and which page you are visiting on the website. Such social media features are hosted by third-parties and your interactions with those features are governed by the privacy notices of the companies that provide them. 

Information You Provide to Us.

Account Creation. When you create a user account or purchase from us, we collect your direct identifiers (name), commercial information (company name, shipping address, payment information), and contact information (email address, phone number). In some cases, such as where we are considering financing your order or extending terms, we may request financial information about you or your business.

Your Communications with Us. We collect personal information from you such as contact information (email address, phone number, mailing address), and the content of you communication when you request information about our Services (online or in person), register for our newsletter or loyalty or referral program, request customer or technical support, apply for a job, interact with our browser based communication technology ("chatbot"), or otherwise communicate with us.  

Surveys. We may contact you to participate in surveys. If you decide to participate, you may be asked to provide certain direct identifiers (name) and contact information (email address and phone number).

Social Media Content. We may offer forums, blogs, or social media pages, and you may respond to that content by reacting to it or providing communication content. 

Registration for Sweepstakes or Contests. We may run sweepstakes and contests. Contact information you provide may be used to reach you about the sweepstakes or contest and for other promotional, marketing and business purposes, if permitted by law. In some jurisdictions, we are required to publicly share information of winners.

Cookies, Pixel Tags/Web Beacons, Analytics Information, and Interest-Based Advertising Technologies. We, as well as third parties that provide content, advertising, or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies (“Technologies”) to automatically collect online identifiers, usage information, location information, and clickstream data through the Services. Technologies are essentially small data files placed on your computer, tablet, mobile phone, other devices, or your browser that allow us and these third parties to record personal information whenever you visit or interact with our Services.

Cookies, Local Storage, and Session Storage. These are small pieces of data stored in your browser to help remember preferences and improve your experience. They may include cookies (small text files), as well as data stored using localStorage or sessionStorage. Most browsers allow you to block or delete this data. However, doing so may cause some parts of the Services to not function properly.

Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded in the Services that collects information about users’ engagement on that web page. The use of a pixel allows us to record, for example, that a user has visited a particular web page or clicked on a particular advertisement.

Analytics. We may also use Google, LinkedIn, and Pinterest Analytics, HubSpot, and other service providers to collect information regarding visitor behavior and visitor demographics on our Services. To learn more about how Google uses this information, visit “How Google uses information from sites or apps that use our services.” You can opt out of Google’s collection and processing of data generated by your use of the Services by going to http://tools.google.com/dlpage/gaoptout.

3. HOW WE USE YOUR INFORMATION.
We use your information for a variety of business purposes, including to:

Fulfill our contract with you and provide you with our Services, such as:

• Managing your information and accounts and fulfilling orders;
• Providing access to certain areas, functionalities, and features of our Services;
• Communicating with you about your account, activities on our Services and policy changes;
• Undertaking activities to verify or maintain the quality or safety of a service or device;
• Processing your financial information and other payment methods for products or Services purchased;
• Providing advertising, analytics and marketing services;
• Processing applications and transactions; and
• Allowing you to register for events.

Analyze and improve our Services pursuant to our legitimate interest, such as:

• Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity;
• Measuring interest and engagement in our Services and short-term, transient use, such as contextual customization of ads;
• Undertaking research for technological development and demonstration;
• Researching and developing products, services, marketing or security procedures to improve their performance, resilience, reliability or efficiency;
• Improving, upgrading or enhancing our Services
• Developing new products and services;
• Ensuring internal quality control;
• Verifying your identity and preventing fraud;
• Debugging to identify and repair errors that impair existing intended functionality;
• Enforcing our terms and policies; and
• Complying with our legal obligations, protecting your vital interest, or as may be required for the public good.

Provide you with additional content and Services, such as:

• Furnishing you with customized materials about offers, products, and services that may be of interest, including new content or services;
• Auditing relating to interactions, transactions and other compliance activities; and
• Other purposes you consent to, are notified of, or are disclosed when you provide personal information.

Use De-identified and Aggregated Information. We may use personal information and other data about you to create de-identified and aggregated information, such as de-identified demographic information, de-identified location information, information about the computer or device from which you access our Services, or other analyses we create.

Share Content with Friends or Colleagues. Our Services may offer various tools and functionalities. For example, we may allow you to provide information about your friends or colleagues through our referral services. Our referral services may allow you to forward or share certain content with a friend or colleague, such as an email inviting your friend to use our
Services.

How We Use Automatic Collection Technologies. We, as well as third parties that provide content, advertising, or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies to automatically collect information through the Services. Our uses of these Technologies fall into the following general categories:

• Operationally Necessary. This includes Technologies that allow you access to our Services, applications, and tools that are required to identify irregular site behavior, prevent fraudulent activity and improve security or that allow you to make use of our functionality;
• Performance Related. We may use Technologies to assess the performance of our Services, including as part of our analytic practices to help us understand how our visitors use the Services;
• Functionality Related. We may use Technologies that allow us to offer you enhanced functionality when accessing or using our Services. This may include identifying you when you sign into our Services or keeping track of your specified preferences, interests, or past items viewed;
• Advertising or Targeting Related. We may use first party or third-party Technologies to deliver content, including ads relevant to your interests, on our Services or on third party sites.

Cross-Device Tracking. Your browsing activity may be tracked across different devices. For example, we may attempt to match your browsing activity on your mobile device with your browsing activity on your laptop. To do this our technology partners may share data, such as your browsing patterns, geo-location and device identifiers, and will match the information of the browser and devices that appear to be used by the same person.

Notice Regarding Third Party Websites, Social Media Platforms. The Services may contain links to other websites, and other websites may reference or link to our website or other Services. These other websites are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen or approve and are not responsible for the privacy practices or content of such other websites or applications. Visiting these other websites or applications is at your own risk.

Our Services may include publicly accessible blogs, forums, social media pages, and private messaging features. By using such Services, you assume the risk that the personal information provided by you may be viewed and used by third parties for any number of purposes. In addition, social media buttons such as Facebook, LinkedIn, Pinterest, and Instagram (that might include widgets such as the “share this” button or other interactive mini-programs) may be on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. These social media features are either hosted by a third party or hosted directly on our site. Your interactions with these features apart from your visit to our site are governed by the Privacy Notice of the company providing it.

We do not use or disclose “sensitive” personal information for any purpose other than those expressly authorized by law.  “Sensitive” personal information is information that reveals your social security, driver’s license, state ID card, or passport number; account credentials like user name and password; precise geolocation; racial or ethnic origin, citizenship or immigration status religious or philosophical beliefs, or union membership; communication content when we aren’t the intended recipient, genetic data, neural data, biometric identifiers, or health data.

4. DISCLOSING YOUR INFORMATION.
Except as provided below, we do not disclose your personal information.

Disclosures to Service Providers

Service Providers. We may disclose any personal information we collect about you with our service providers. The categories of service providers (processors) to whom we entrust personal information include: IT and related services; information and services; payment processors; customer service providers; and vendors to support the provision of the Services.

Disclosures to Third Parties

Business Partners. We may provide personal information to business partners with whom we jointly offer products or services, including our overseas fulfillment partners. In such cases, our business partner’s name will appear along with ours.

Affiliates. We may disclose personal information with our affiliated companies.

Advertising Partners. Through our Services, we may allow third parties to set Technologies and other tracking tools to collect information regarding your activities and your device (e.g., online Identifiers, device Identifiers like your IP address, mobile identifiers, usage information like page(s) visited, location, time of day). We may also combine and share such information and other information (such as demographic information and past purchase history) with third party advertising partners. These advertising partners may use this information (and similar information collected from other websites) for purposes of delivering targeted advertisements to you when you visit third party websites within their networks. This practice is commonly referred to as “interest-based advertising”, “online behavioral advertising", or “cross-context behavioral advertising.” We may allow access to other data collected by the Services to share information that may be useful, relevant, valuable or otherwise of interest to you. Depending on where you live, this may be considered a “sale” of your personal information. If you prefer not to share your personal information with third party advertising partners, you may follow the instructions below in “Your Choices.”

Disclosures to Protect Us or Others. We may access, preserve, and disclose any information we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

Disclosure in the Event of Merger, Sale, or Other Asset Transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, then your information may be sold or transferred as part of such a transaction, as permitted by law and/or contract.

International Data Transfers. You agree that all information processed by us may be transferred, processed, and stored anywhere in the world, including but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. We have taken appropriate safeguards to require that your personal information will remain protected and require our third-party service providers and partners to have appropriate safeguards as well. Further details can be provided upon request.

5. YOUR CHOICES.

General. You have certain choices about your personal information. Where you have consented to the processing of your personal information, you may withdraw that consent at any time and prevent further processing by contacting us as described below. Even if you opt out, we may still collect and use non- personal information regarding your activities on our Services and for other legal purposes as described above.

Email and Telephone Communications. If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or Services you have requested. We may also send you certain non-promotional communications regarding us and our Services, and you will not be able to opt out of those communications (e.g., communications regarding the Services or updates to our Terms or this Privacy Notice).

You may opt out of receiving text messages from us by following the instructions in the text message or by otherwise contacting us. We process requests to be placed on do-not-mail, do-not-phone and do-not-contact lists as required by applicable law.

“Do Not Track.” Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.

Cookies and Interest-Based Advertising. You may stop or restrict the placement of Technologies on your device or remove them by adjusting your preferences as your browser or device permits. The online advertising industry also provides websites from which you may opt out of receiving targeted ads from data partners and other advertising partners that participate in self-regulatory programs. You can access these and learn more about targeted advertising and consumer choice and privacy, at www.networkadvertising.org/managing/opt_out.asp, http://www.youronlinechoices.eu/, https://youradchoices.ca/choices/, and www.aboutads.info/choices. To separately make choices for mobile apps on a mobile device, you can download DAA’s AppChoices application from your device’s app store. Alternatively, for some devices you may use your device’s platform controls in your settings to exercise choice.
Please note you must separately opt out in each browser and on each device. Advertisements on third party websites that contain the AdChoices link may have been directed to you based on information collected by advertising partners over time and across websites. These advertisements provide a mechanism to opt out of the advertising partners’ use of this information for interest-based advertising purposes.

Your Privacy Rights. If you are a resident of California, Nebraska, Texas, or Tennessee, you have the right to:

Verify that we are processing your personal information.

Access/port personal information about you consistent with legal requirements. In addition, you may have the right in some cases to receive or have your electronic personal information transferred to another party.

Request Correction of your personal information where it is inaccurate or incomplete. In some cases, we may provide self-service tools that enable you to update your personal information or we may refer you to the controller of your personal information who is able to make the correction.

Request Deletion of your personal information, subject to certain exceptions prescribed by law.

Request to Opt Out of the sale of your personal information to third parties.  

Request to Opt-Out of the processing of your personal information for targeted   
advertising.

If you are a resident of California, you have the following additional right:

Right to Know what personal information the business has collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing your personal information, the categories of third parties to whom the business discloses your personal information, and the specific pieces of personal information the business has collected about you.

We do not use your personal information to build a profile  used in decisions that have a legal or similarly significant effect, so we do not respond to requests to opt-out of such processing.

If you would like to exercise any of these rights, please contact us as set forth below. We will process such requests in accordance with applicable laws. You have the right not to receive discriminatory treatment or be retaliated against by the business for the exercise of these privacy rights. You may designate an authorized agent to make a request under CCPA on your behalf by emailing us from the email address associated with your account and providing us with your name, your designated agent’s name, and your designated agent’s email address.

After we receive your request, we will evaluate it and determine our obligations in response. We will notify you concerning any action we take in response to your request. If we deny your request, you have the opportunity to appeal  that decision by contacting us as set forth below and referencing the previous decision.

You can also exercise the Right to Opt-Out of the Sale of your personal information and Targeted Advertising through the Global Privacy Control (“GPC”), which is a kind of “opt-out preference signal ” recognized under U.S. privacy law. The GPC is a website specification that allows your browser to tell us that you want to automatically exercise your Right to Opt-Out of Targeted Advertising or Right to Opt-Out of “Sale” (learn more about GPC at www.globalprivacycontrol.org). For clarity, the GPC opt-out is on a per-website basis and applies at the browser level for the device you use to opt out.  

To protect your privacy, we will take steps to verify your identity before fulfilling your privacy request, such as by asking you to log in to your account or verify your email address.

6. DATA RETENTION.
We store the personal information we receive as described in this Privacy Notice for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

7. SECURITY OF YOUR INFORMATION.
We take steps to ensure that your information is treated securely and in accordance with this Privacy Notice. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unintentional disclosure.

By using the Services or providing personal information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Services. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on the Services, by mail or by sending an e-mail to you.

8. CHILDREN’S INFORMATION.
The Services are not directed to children under 16 (or other age as required by local law), and we do not knowingly collect, sell, or share personal information from children. If you learn that your child has provided us with personal information without your consent, you may contact us as set forth below. If we learn that we have collected any personal information in violation of applicable law, we will promptly take steps to delete such information and terminate the child’s account.

9. OTHER PROVISIONS.

10. SUPERVISORY AUTHORITY.
If you are located in the European Economic Area or the UK, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

11. CHANGES TO OUR PRIVACY NOTICE.
We may revise this Privacy Notice from time to time in our sole discretion. If there are any material changes to this Privacy Notice, we will notify by updating the effective date of this policy and, if you have signed up for our mailing list, by notifying you via email at the email address you have provided.  You understand and agree that you will be deemed to have accepted the updated Privacy Notice if you continue to use the Services after the new Privacy Notice takes effect.

12. CONTACT US.

If you have any questions about our privacy practices or this Privacy Notice, or if you wish to submit a request to exercise your rights as detailed in this Privacy Notice, please contact us at:

OFS Brands Inc. dba ROOM
OFS Brands Inc.
1204 East Sixth Street
Huntingburg, IN 47542

Call toll-free at 800-521-5381

privacy@ofs.com