Privacy Policy – sbfunion.com

Last updated: June 2025

Ace Brains, Inc., operating as Shape Bend Form Union (“Shape Bend Form Union,” “we,” “us,” or “our”), is committed to protecting the privacy of everyone who visits our website and uses our services. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have in relation to it.

Please read this Privacy Policy carefully. By using our website at www.sbfunion.com (the “Site”) or submitting any information to us through a contact form, quote request, or other communication, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Ace Brains, Inc.
Operating as: Shape Bend Form Union
33 Nassau Ave,
Brooklyn, NY 11222
United States

Email: privacy@sbfunion.com
Phone: +1 (929) 895-3250

For the purposes of applicable data protection laws, Ace Brains, Inc. is the data controller of the personal information described in this Privacy Policy.

2. Scope of This Policy

This Privacy Policy applies to:

Visitors to our website at www.sbfunion.com
Individuals who submit quote requests, contact forms, or other inquiries through the Site
Clients and prospective clients who communicate with us by email, telephone, or other means in connection with our services
Any individual whose personal information is shared with us in the course of a business relationship

This Policy does not apply to third-party websites linked from our Site. We are not responsible for the privacy practices of those websites and encourage you to review their policies independently.

3. Information We Collect

We collect personal information in the following ways:

3.1 Information You Provide Directly

When you interact with us — by submitting a quote request, filling out our contact form, corresponding with us by email, or communicating with us by telephone — you may provide us with:

Contact information: your name, email address, telephone number, business name, and mailing or delivery address
Project and order information: product specifications, artwork files, quantity requirements, delivery timelines, and any other details you share in the course of requesting or placing an order
Payment information: billing name, billing address, and payment details. Note that we do not store full payment card numbers — card transactions are processed through secure third-party payment processors
Communications: the content of any emails, messages, or other correspondence you send to us

3.2 Information Collected Automatically

When you visit our Site, certain information is collected automatically through cookies and similar tracking technologies, including:

Device and browser information: your device type, operating system, browser type and version, screen resolution, and device identifiers
Usage data: pages visited, time spent on each page, links clicked, referring URLs, and navigation paths through the Site
IP address: your internet protocol address, which may be used to infer your approximate geographic location (city or region level)
Cookie data: data stored in cookies placed on your device, including identifiers used by Google Analytics and Google Ads (see Section 5 for details)

3.3 Information from Third Parties

We may receive information about you from third parties in limited circumstances, including:

Google Analytics: aggregated and anonymized data about how visitors use our Site
Google Ads: data related to how users interact with our advertisements, including conversions attributed to ad clicks
Referral sources: if you were referred to us by a partner or affiliate, we may receive basic identifying information to facilitate that referral

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 To Provide Our Services

To respond to quote requests and inquiries
To prepare, issue, and administer quotes and order confirmations
To coordinate production and shipment of your orders
To communicate with you about your order status, proofs, timelines, and delivery

4.2 To Process Payments

To invoice you and process payments for confirmed orders
To manage account balances and payment records

4.3 To Operate and Improve Our Website

To analyze how visitors use our Site so we can improve its content, structure, and performance
To diagnose technical issues and ensure the Site functions correctly
To measure the effectiveness of our content and service pages

4.4 To Conduct Marketing and Advertising

To serve advertisements to users on Google and other platforms who have previously visited our Site (remarketing)
To measure the performance of our Google Ads campaigns, including tracking conversions when a quote request or contact form is submitted following an ad click
To understand which advertising campaigns and channels are most effective at reaching our target audience

4.5 To Communicate With You

To send you information relevant to your order or inquiry
To respond to questions, complaints, or requests submitted through the Site or by other means
To send you marketing communications about our services where you have consented to receive them or where we have a legitimate interest in doing so (see Section 6)

4.6 To Comply With Legal Obligations

To comply with applicable laws, regulations, court orders, and legal process
To maintain records required for tax, accounting, and commercial compliance purposes
To enforce our Terms and Conditions and protect our legal rights

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Site. Cookies are small text files placed on your device that allow us to recognize your browser and capture and store certain information.

5.1 Types of Cookies We Use

Strictly Necessary Cookies
These cookies are essential for the Site to function and cannot be disabled. They do not collect personal information for marketing purposes.

Analytics Cookies
We use Google Analytics to collect information about how visitors use our Site. Google Analytics sets cookies that collect information including:

Pages visited and time spent on each page
How you arrived at the Site (search engine, direct visit, referral link, or advertisement)
Your general geographic region (derived from IP address)
Browser and device type

Google Analytics data is aggregated and used to understand overall Site performance. We have enabled IP anonymization in our Google Analytics configuration, which means your full IP address is never stored by Google Analytics.

For more information on how Google Analytics collects and processes data, visit: https://policies.google.com/technologies/partner-sites

To opt out of Google Analytics tracking across all websites, you may install the Google Analytics Opt-Out Browser Add-On, available at: https://tools.google.com/dlpage/gaoptout

Advertising and Remarketing Cookies
We use Google Ads (formerly Google AdWords) to advertise our services online. Google Ads cookies allow us to:

Show Shape Bend Form Union advertisements to users who have previously visited our Site as they browse other websites in the Google Display Network (remarketing)
Track conversions — meaning we can identify when a visitor who clicked one of our ads subsequently completed a quote request or contact form on our Site
Measure the overall performance of our advertising campaigns

Google uses cookies such as the Google Ads conversion cookie and the DoubleClick cookie for these purposes. The information collected by these cookies is subject to Google’s Privacy Policy, available at: https://policies.google.com/privacy

To opt out of Google’s interest-based advertising, you can visit: https://adssettings.google.com

You can also opt out of interest-based advertising from participating third-party companies through the Network Advertising Initiative opt-out tool at: https://optout.networkadvertising.org or the Digital Advertising Alliance opt-out tool at: https://optout.aboutads.info

Functional Cookies
These cookies enable enhanced functionality on the Site, such as remembering your preferences or form inputs. They may be set by us or by third-party providers.

Where required by applicable law, we will request your consent before placing non-essential cookies on your device. You may withdraw or adjust your cookie preferences at any time through our Cookie Preference Center or through your browser settings.

Most browsers allow you to refuse or delete cookies through their settings. Please note that disabling certain cookies may affect the functionality of the Site. For instructions on managing cookies in your specific browser, consult your browser’s help documentation.

6. Legal Basis for Processing (EEA / UK Visitors)

If you are located in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases:

Processing Activity	Legal Basis
Responding to inquiries and providing services	Performance of a contract / pre-contractual steps
Processing payments and managing orders	Performance of a contract
Google Analytics (Site performance analysis)	Legitimate interests (improving our website and services)
Google Ads remarketing and conversion tracking	Consent (via cookie consent)
Direct marketing to existing clients	Legitimate interests
Direct marketing to new prospects	Consent
Maintaining legal and tax records	Legal obligation
Fraud prevention and security	Legitimate interests

Where we rely on legitimate interests as our legal basis, we have assessed that our interests are not overridden by your rights and interests as a data subject. You have the right to object to processing based on legitimate interests at any time (see Section 10).

We do not sell your personal information. We do not share your personal information with third parties for their own independent marketing purposes.

We may share your personal information in the following limited circumstances:

7.1 Manufacturers and Production Partners

In the course of fulfilling your order, we share relevant order specifications, artwork, delivery addresses, and contact information with our manufacturer partners in India and China solely to the extent necessary to produce and ship your order. These parties act under our instructions and are bound by confidentiality obligations.

7.2 Service Providers

We share personal information with trusted third-party service providers who assist us in operating our business, including:

Payment processors — to securely process order payments
Email and communication platforms — to manage client correspondence
Cloud storage and document management providers — to store business records securely
Google LLC — for Google Analytics and Google Ads services as described in Section 5

All service providers are required to process your personal information only on our behalf and in accordance with our instructions, and are prohibited from using it for their own purposes.

7.3 Legal and Regulatory Disclosure

We may disclose personal information if required to do so by applicable law, regulation, court order, or governmental authority, or where disclosure is necessary to protect the rights, property, or safety of Ace Brains, Inc., our clients, or others.

7.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving Ace Brains, Inc., personal information held by us may be transferred to the acquiring entity as part of that transaction. We will notify you by posting a notice on our Site if such a transfer occurs and your personal information is subject to a materially different privacy policy as a result.

8. International Data Transfers

Shape Bend Form Union is based in the United States. Our manufacturer partners are located in India and China. Our service providers, including Google, may process data in various countries around the world.

If you are located in Canada, the European Economic Area, the United Kingdom, or another jurisdiction with data transfer restrictions, please be aware that your personal information may be transferred to and processed in countries that may not provide the same level of data protection as your home jurisdiction.

Where we transfer personal information internationally, we take steps to ensure appropriate safeguards are in place, including relying on standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms as applicable.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

Specific retention periods include:

Client order records (including contact details, order specifications, correspondence, and invoices): retained for a minimum of 7 years from the date of the last transaction to comply with tax and accounting record-keeping obligations
Inquiry and quote records (for inquiries that did not result in an order): retained for up to 2 years from the date of the last communication
Website analytics data (Google Analytics): retained according to Google Analytics data retention settings, which we have configured to 26 months
Marketing communications consent records: retained for the duration of our marketing relationship with you, plus 3 years after your last interaction or opt-out
Cookie data: retained for the duration specified in our Cookie Preference Center, consistent with the cookie categories described in Section 5

When personal information is no longer required, we will delete or anonymize it securely.

10. Your Privacy Rights

Depending on your location, you may have some or all of the following rights with respect to your personal information:

10.1 All Users

Right to access: You may request a copy of the personal information we hold about you
Right to correction: You may request that inaccurate or incomplete personal information be corrected
Right to deletion: You may request that we delete your personal information, subject to our legal obligations to retain certain records
Right to withdraw consent: Where we process your personal information based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal
Right to opt out of marketing: You may opt out of receiving marketing communications from us at any time by clicking the unsubscribe link in any marketing email or by contacting us directly

10.2 California Residents (CCPA / CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purposes for which it was collected, and the categories of third parties with whom it is shared
Right to deletion: You have the right to request deletion of personal information we have collected about you, subject to certain exceptions
Right to correct: You have the right to request correction of inaccurate personal information
Right to opt out of sale or sharing: We do not sell personal information as defined under the CCPA. We do not share personal information for cross-context behavioral advertising in a manner that would constitute a “sale” or “sharing” under the CCPA, except in relation to Google Ads remarketing where cookie consent has been provided
Right to limit use of sensitive personal information: We do not collect sensitive personal information as defined under the CPRA beyond what is necessary for the purposes described in this Policy
Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights

To submit a CCPA rights request, contact us at privacy@sbfunion.com or by the methods listed in Section 13. We will respond to verifiable consumer requests within 45 days, with a possible extension of an additional 45 days where reasonably necessary.

Authorized Agents: California residents may designate an authorized agent to submit requests on their behalf. We will require written authorization or a power of attorney and may verify the identity of the requesting consumer directly.

10.3 Canadian Residents (PIPEDA / Provincial Privacy Laws)

If you are a Canadian resident, your personal information is handled in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

You have the right to:

Access the personal information we hold about you
Challenge the accuracy and completeness of your personal information and request corrections
Withdraw consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice
File a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca if you believe your privacy rights have been violated

10.4 Mexican Residents (LFPDPPP)

If you are a resident of Mexico, your personal information is handled in accordance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP).

You have the following ARCO rights:

Acceso (Access): to know what personal data we hold about you and how it is used
Rectificación (Rectification): to request correction of inaccurate or incomplete data
Cancelación (Cancellation): to request deletion of your personal data from our records, subject to applicable legal obligations
Oposición (Objection): to object to the processing of your personal data for specific purposes

To exercise your ARCO rights, please contact us at privacy@sbfunion.com. We will respond within 20 business days of receiving a verified request.

If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:

Right of access (Article 15)
Right to rectification (Article 16)
Right to erasure / “right to be forgotten” (Article 17)
Right to restriction of processing (Article 18)
Right to data portability (Article 20)
Right to object (Article 21)
Rights related to automated decision-making and profiling (Article 22)

You also have the right to lodge a complaint with your local supervisory authority. A list of EU supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en. UK residents may contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.

11. Children’s Privacy

Our website and services are directed exclusively at adults and business entities engaged in commercial retail activities. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have collected personal information from a child under 16 without verifiable parental consent, we will take immediate steps to delete that information. If you believe we may have collected information from a child, please contact us at privacy@sbfunion.com.

12. Security

We implement commercially reasonable technical and organizational security measures to protect personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

Secure encrypted transmission of data via HTTPS/TLS on our website
Access controls limiting personal data access to authorized personnel only
Secure third-party payment processing — we do not store full payment card numbers on our systems
Regular review of our data handling practices and security procedures

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and applicable regulatory authorities as required by law.

13. How to Exercise Your Rights or Contact Us

To exercise any of the privacy rights described in this Policy, submit a privacy-related inquiry, or raise a concern about how we handle your personal information, please contact us by any of the following means:

Email: privacy@sbfunion.com
Phone: +1 (929) 895-3250

We will respond to all legitimate requests within the timeframes required by applicable law. We may need to verify your identity before processing your request to ensure we do not disclose information to unauthorized parties.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or by a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Site or our services after any changes are posted constitutes your acceptance of the updated Privacy Policy.

15. Governing Law

This Privacy Policy is governed by the laws of the State of New York, United States of America. For residents of other jurisdictions, we additionally comply with applicable local privacy laws as described in Section 10.