Bases Loaded Sporting Goods Inc Privacy Policy

Including Request of Data Stored and/or Deletion of Information or Account

June 1, 2026

Protecting your personal information is important to us. This Privacy Policy describes how Bases Loaded Sporting Goods Inc (DBA Bases Loaded, ebasesloaded.com) ("we," "us," or "our") collects, uses, shares, and protects personal information when you visit or make a purchase at www.ebasesloaded.com (the "Site"). It also describes your rights regarding your personal information, including rights available to California residents under the California Consumer Privacy Act (CCPA).

By using our Site, you agree to the terms of this Privacy Policy.

1. Information We Collect

A. Information You Provide Directly

When you create an account, place an order, contact us, or use our live chat feature, you may provide:

• First and last name
• Mailing and shipping address
• Email address
• Phone number
• Billing information and payment details (processed securely — see Section 5)
• Messages and inquiries submitted via live chat or contact forms

B. Information Collected Automatically

When you visit our Site, we and our service providers — including advertising and analytics platforms — may automatically collect:

• IP address and approximate geographic location
• Browser type, version, and device information
• Pages viewed, time spent, and referring website
• Products viewed, added to cart, and purchased
• Clickstream data and on-site behavior
• Cookie identifiers, pixel tags, and similar tracking technologies (see Sections 7 and 8)

2. Live Chat and Communications Recording

Bases Loaded Sporting Goods Inc offers live chat customer support on our website, powered by Reamaze (reamaze.com), a third-party customer communications platform.

Recording and Storage

When you initiate a live chat session, your conversation — including all messages you submit and any information you share — may be recorded, stored, and reviewed by our staff and Reamaze for the purposes of:

• Providing customer support and answering your questions
• Improving our products, services, and support quality
• Staff training and quality assurance
• Maintaining a record of your interactions with us 

Third-Party Processing

Chat transcripts and associated data (including your name, email address if provided, and message content) are transmitted to and stored by Reamaze. Reamaze is contractually prohibited from using your information for any purpose other than providing services to us. See reamaze.com/privacy for Reamaze's data practices.

Your Consent

By continuing a live chat session on our Site, you acknowledge that you have read this notice and expressly consent to the recording, storage, and processing of your chat communications as described above. Florida residents: this disclosure is intended to satisfy the all-party consent requirement of the Florida Security of Communications Act (Fla. Stat. Ch. 934). If you do not consent to recording, please contact us by email or phone instead.

Data Retention

Chat transcripts are retained for a period consistent with our legitimate business needs, then securely deleted, unless longer retention is required by law or to resolve a dispute. To request deletion, contact us at admin@ebasesloaded.com.

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders and returns
• Provide customer support, including via live chat
• Communicate with you about your orders, account, and inquiries
• Send promotional emails, special offers, and coupons via Klaviyo (you may opt out at any time — see Section 9)
• Serve targeted and retargeted advertising on Meta, TikTok, Google, and Microsoft platforms
• Measure the performance of our advertising campaigns
• Analyze usage trends and improve our Site, products, and services
• Detect, prevent, and address fraud and security incidents
• Comply with applicable laws and legal obligations

4. Sharing Information with Third Parties

Bases Loaded Sporting Goods Inc does not sell, rent, or lease your personal information to third parties for their own independent commercial use.

We share your information with the following categories of service providers and marketing platforms, each described in detail below or in Section 8:

E-Commerce Platform — BigCommerce

Our Site is built on BigCommerce (bigcommerce.com), which hosts our online store and processes order and account data on our behalf. Privacy policy: bigcommerce.com/privacy.

Payment Processing — Braintree / PayPal

Payment transactions are processed by Braintree, a PayPal service (braintreepayments.com). We do not collect, store, or have access to your full credit card number or CVV on our servers. Payment data is transmitted directly to Braintree using SSL/TLS encryption. Braintree is PCI DSS compliant. Privacy policy: braintreepayments.com/legal.

Live Chat — Reamaze

Chat communications are processed by Reamaze as described in Section 2.

Email Marketing — Klaviyo

Customer email data and purchase/behavioral information are shared with Klaviyo for email marketing purposes as described in Section 8.

Advertising Platforms — Meta, TikTok, Google, Microsoft

Browsing behavior, purchase event data, and device identifiers may be shared with Meta, TikTok, Google, and Microsoft for advertising and analytics purposes as described in detail in Section 8.

Fraud Prevention — Wyllo

Order and identity data is shared with Wyllo (wyllo.ai) for real-time fraud risk scoring and chargeback protection as described in detail in Section 8. Wyllo does not use this data for advertising and does not sell it to third parties.

Shipping and Fulfillment

We share your name, address, and order information with shipping carriers (UPS, FedEx, USPS) solely to fulfill and deliver your orders.

All service providers are contractually required to protect the confidentiality of your information and may use it only to provide services to us or as otherwise described in their own privacy policies.

We may also disclose your personal information without notice if required by law, or in the good faith belief that such action is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; or (c) protect the personal safety of our users or the public.

5. Payment Information and Security

All payment card transactions are processed by Braintree (a PayPal service). We do not store your full card number, CVV, or equivalent payment credentials on our systems. Braintree is PCI DSS compliant and all payment data is transmitted using SSL/TLS encryption. For questions about a specific transaction, refer to Braintree's privacy policy at braintreepayments.com/legal.

6. Tracking User Behavior

Bases Loaded Sporting Goods Inc tracks pages, products, and actions our users take on our Site to understand preferences, improve our offerings, and deliver relevant content and advertising. This tracking occurs both through our own systems and through the third-party marketing technologies described in Section 8.

7. Cookies and Similar Technologies

Our Site uses cookies, pixel tags, and similar tracking technologies placed by both us and our third-party partners (including Meta, TikTok, Google, Microsoft, and Klaviyo). These technologies allow us to operate our website, remember your preferences, analyze usage, and deliver targeted advertising.

• Essential cookies: Required for the website and shopping cart to function
• Preference cookies: Remember your settings and personalization choices
• Analytics cookies: Help us understand how visitors interact with our Site (Google Analytics, Microsoft Clarity)
• Marketing/advertising cookies and pixels: Used to deliver and measure targeted advertising (Meta Pixel, TikTok Pixel, Google Ads, Microsoft Advertising)
• Email tracking pixels: Embedded in marketing emails by Klaviyo to record open and click events

You may configure your browser to decline cookies, though doing so may affect your ability to use certain features of our Site. You may also opt out of specific tools using the mechanisms described in Section 8.

8. Marketing Technologies, Tracking Pixels, Analytics, and Fraud Prevention

We use a number of third-party tools on our website and in our order processing workflow. Each tool may collect or receive data about your visit, behavior, or order. We are disclosing each tool by name, what data it collects or receives, and how it is used, as required under applicable privacy laws including the Florida Security of Communications Act (FSCA), the California Consumer Privacy Act (CCPA), and related regulations.

Klaviyo — Email Marketing

Provider: Klaviyo, Inc. (klaviyo.com)

Purpose: Email marketing automation, customer segmentation, and campaign analytics

Data Collected: Email address, name, purchase history, browsing behavior on our Site (including products viewed and cart activity), email open and click events, and device/browser information

How It Works: When you place an order or sign up for our email list, your information is shared with Klaviyo so we can send you order confirmations, shipping updates, and marketing communications. Klaviyo may also place tracking pixels in our emails to record whether you opened them or clicked links.

Opt-Out: You may unsubscribe from marketing emails at any time via the UNSUBSCRIBE link in any email, or by contacting us directly. Transactional emails (order confirmations, shipping notices) cannot be opted out of as they are necessary to service your orders.

Privacy Policy: klaviyo.com/legal/privacy-notice

Meta Pixel (Facebook Pixel) — Advertising

Provider: Meta Platforms, Inc. (meta.com)

Purpose: Targeted advertising, ad performance measurement, and custom audience creation on Facebook and Instagram

Data Collected: Pages visited, products viewed, items added to cart, purchases made, IP address, browser and device information, and — if you are logged into Facebook/Instagram — your Meta user identifier. This data may be matched to your Meta profile.

How It Works: The Meta Pixel is a piece of code embedded on our Site that sends event data to Meta when you take certain actions (e.g., view a product, add to cart, complete a purchase). This allows us to measure the effectiveness of our ads, build audiences of similar customers, and retarget visitors with relevant ads on Meta platforms.

Your Choices: You can control how Meta uses data about you for advertising at facebook.com/ads/preferences. You may also opt out of interest-based advertising through the Digital Advertising Alliance at optout.aboutads.info.

Privacy Policy: meta.com/privacy

TikTok Pixel — Advertising

Provider: TikTok Inc. / ByteDance (tiktok.com)

Purpose: Targeted advertising, ad conversion tracking, and custom audience creation on TikTok

Data Collected: Pages visited, products viewed, add-to-cart and purchase events, IP address, browser and device information, and — if you are logged into TikTok — your TikTok user identifier

How It Works: The TikTok Pixel sends event data to TikTok when you interact with our Site, allowing us to measure ad performance and serve relevant ads to users on the TikTok platform, including to audiences with similar characteristics to our customers.

Your Choices: You can manage TikTok's use of your data at tiktok.com/legal/privacy-policy. You may also opt out of interest-based advertising through the Digital Advertising Alliance at optout.aboutads.info.

Privacy Policy: tiktok.com/legal/privacy-policy

Google — Analytics and Advertising

Provider: Google LLC (google.com)

Purpose: Website analytics (Google Analytics), advertising measurement, and ad targeting (Google Ads / Google Tag Manager)

Data Collected: Pages visited, session duration, traffic source, device and browser information, IP address (anonymized where applicable), and ad interaction data including clicks and conversions

How It Works: Google Analytics collects anonymized data about how visitors use our Site to help us understand traffic patterns and improve our website. Google Ads tags track conversions from our paid advertising campaigns and may be used to serve retargeted ads to past visitors through the Google Display Network and Google Search.

Your Choices: You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-On at tools.google.com/dlpage/gaoptout. You can manage Google ad personalization at adssettings.google.com.

Privacy Policy: policies.google.com/privacy

Microsoft (Bing Ads / Microsoft Clarity) — Advertising and Analytics

Provider: Microsoft Corporation (microsoft.com)

Purpose: Advertising measurement and conversion tracking via Microsoft Advertising (Bing Ads), and/or website behavior analytics via Microsoft Clarity

Data Collected: Pages visited, ad click and conversion data, IP address, browser and device information. If Microsoft Clarity is in use: mouse movements, scrolls, and clicks (session replay data) may also be collected in anonymized or pseudonymized form.

How It Works: Microsoft Advertising tags track the effectiveness of our Bing search ads and allow us to serve retargeted ads to past visitors across the Microsoft Advertising network. Microsoft Clarity (if active) records anonymized session data to help us identify usability issues on our Site.

Important Note re: FSCA: If Microsoft Clarity or any session replay functionality is active on our Site, it may capture keystroke-level or input data. This disclosure serves as notice under the Florida Security of Communications Act that such recording may occur. By using our Site, you consent to this as further described in Section 2.

Your Choices: You can opt out of Microsoft personalized advertising at account.microsoft.com/privacy. You can opt out of Microsoft Clarity at clarity.microsoft.com.

Privacy Policy: privacy.microsoft.com

Wyllo — Fraud Prevention and Risk Intelligence

Provider: Wyllo (wyllo.ai), formerly known as NoFraud

Purpose: Payment fraud detection and prevention, chargeback management, return fraud and abuse prevention, bot and reseller detection, and real-time order risk scoring

Data Shared: Name, email address, shipping and billing address, order details, payment method signals (but not full card numbers or CVV), IP address, device information, and behavioral data associated with your order and account activity

How It Works: When you place an order, transaction and identity data is shared with Wyllo in real time so that Wyllo can assess the fraud risk of the transaction and provide us with a risk score and recommendation. This helps us protect both our business and legitimate customers from fraudulent orders, chargebacks, and abuse. Wyllo may use aggregated and anonymized fraud signals across its merchant network to improve the accuracy of its fraud detection models.

Important: Wyllo's use of your data is strictly limited to fraud prevention services provided to us. Wyllo does not use your personal information for advertising purposes and does not sell your data to third parties. This data sharing does not constitute a 'sale' of personal information under the CCPA or applicable state privacy laws.

Privacy Policy: wyllo.ai/privacy

Summary of Third-Party Data Sharing

The following summarizes the personal data categories shared with each third-party service provider: 

• Klaviyo: Identifiers, commercial/purchase data, email engagement data — used for email marketing
• Meta Pixel: Identifiers, browsing/behavioral data, commercial data, device data — used for advertising
• TikTok Pixel: Identifiers, browsing/behavioral data, commercial data, device data — used for advertising
• Google Analytics/Ads: Identifiers (anonymized), behavioral data, commercial data — used for analytics and advertising
• Microsoft Advertising/Clarity: Identifiers, behavioral data, ad interaction data — used for advertising and analytics
• Wyllo: Identifiers, commercial/order data, device data, behavioral signals — used for fraud prevention only; not used for advertising

Marketing platform providers (Meta, TikTok, Google, Microsoft) may use data we share to serve advertising within their own platforms. Wyllo and other operational service providers (BigCommerce, Braintree, Reamaze, shipping carriers) use your data only to provide services to us and are contractually prohibited from using it for their own commercial purposes.

9. Email Communications

We use Klaviyo to manage our email marketing program. We may contact you to provide order confirmations, shipping updates, promotional offers, coupons, or other communications. We may receive confirmation when you open an email or click a link.

You may opt out of marketing and promotional emails at any time by clicking the UNSUBSCRIBE link in any marketing email, or by contacting us at service@ebasesloaded.com. Transactional emails (order confirmations, shipping notifications) cannot be opted out of as they are necessary to service your orders.

10. California Consumer Privacy Act (CCPA)

This section applies to California residents and supplements the rest of this Privacy Policy. References to 'CCPA' include the California Privacy Rights Act (CPRA) amendments effective January 1, 2023.

Your CCPA Rights

Right to Know. You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purpose for collecting it, and the categories of third parties with whom we share it.

Right to Delete. You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (see Section 12).

Right to Correct. You have the right to request correction of inaccurate personal information we hold about you.

Right to Opt Out of Sale or Sharing. You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. Please note: Bases Loaded does not sell your personal information for monetary consideration. However, our use of Meta Pixel, TikTok Pixel, Google Ads, and Microsoft Advertising may constitute 'sharing' of personal information for cross-context behavioral advertising under the CCPA/CPRA. You may opt out of this sharing by using the opt-out mechanisms described in Section 8 for each provider, or by submitting a request to us using the contact information in Section 14.

Right to Limit Use of Sensitive Personal Information. We do not collect sensitive personal information (as defined by the CPRA) beyond what is necessary to process your transactions.

Right to Non-Discrimination. We will not discriminate against you for exercising any CCPA rights. We will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised a privacy right.

Categories of Personal Information Collected in the Past 12 Months

• Identifiers: name, email address, IP address, billing/shipping address, phone number
• Commercial information: purchase history, products viewed, cart activity, returns
• Internet or network activity: browsing behavior on our Site, cookie and pixel data
• Geolocation data: approximate location derived from IP address
• Inferences: product preferences and interests derived from browsing and purchase history
• Customer communications: emails, live chat transcripts, and support inquiries

We do not knowingly collect Social Security numbers, financial account numbers beyond what is necessary for payment processing (handled by Braintree), health or medical information, or biometric identifiers.

Notice Regarding Automated Decision-Making Technology

As noted above, our use of advertising pixels (Meta, TikTok, Google, Microsoft) may constitute automated decision-making technology (ADMT) under California regulations effective January 1, 2026. These tools place consumers into audience groups for ad targeting purposes. We are reviewing our compliance obligations under the CPPA's ADMT regulations and will update this policy as required.

How to Submit a CCPA Request

To exercise your rights, please submit a verifiable consumer request by:

1. Email: admin@ebasesloaded.com
2. Mail: Bases Loaded Sporting Goods Inc, Attn: Marketing Manager, 11455 Folsom Blvd, Rancho Cordova, CA 95742
3. Phone: Toll-Free 866-983-0633 — ask for the Marketing Department

We will respond within 45 days as required by law. We may need to verify your identity before processing your request. Authorized agents may submit requests on your behalf with appropriate written authorization.

11. Children Under Thirteen

Bases Loaded Sporting Goods Inc does not knowingly collect personally identifiable information from children under the age of 13. If you are under 13, you must have your parent or guardian's permission to use this website. If we learn that we have inadvertently collected personal information from a child under 13, we will delete it promptly. Please contact us at admin@ebasesloaded.com if you believe we may have such information.

12. Your Rights and Data Deletion

You may request that we delete your personal information from our records. Upon receipt of a verifiable request, we will delete your information and direct our service providers to do the same, subject to the following exceptions. We may retain your information as necessary to:

• Complete a transaction you have requested or maintain our ongoing business relationship
• Fulfill a written warranty or product recall under applicable law
• Detect, investigate, or prevent fraud, security incidents, or illegal activity
• Debug or repair errors in our systems
• Comply with applicable legal obligations or respond to legal process
• Exercise or defend legal claims
• Otherwise use your information internally in a lawful manner consistent with the context in which you provided it

To submit a deletion request, contact us at admin@ebasesloaded.com.

13. Third-Party Links

Our Site may contain hyperlinks to websites controlled by parties other than us. We are not responsible for the privacy practices, content, or accuracy of information on those websites. A link to a third-party site does not constitute our endorsement or approval of that site or its content. We encourage you to review the privacy policy of any website you visit.

Bases Loaded Sporting Goods Inc shall not be liable for any direct, indirect, special, or consequential damages resulting from your use of our Site or any linked third-party website, including without limitation lost profits, business interruptions, or data loss, even if we have been advised of the possibility of such damages. 

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. We will notify you of significant changes by sending a notice to the primary email address associated with your account, posting a prominent notice on our Site, and/or updating the effective date above. Your continued use of our Site after such changes constitutes your acknowledgment and acceptance of the revised policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Bases Loaded Sporting Goods Inc

Attn: Marketing Manager

11455 Folsom Blvd

Rancho Cordova, CA 95742

General Inquiries: service@ebasesloaded.com

Privacy & Data Requests: admin@ebasesloaded.com

Toll-Free: 866-983-0633