Bandana Capital Privacy Notice
Last Updated: 11/13/2025
Ritter Wools is owned and operated by Bandana Capital. This Privacy Policy describes how Ritter Wools together with Bandana Capital and our subsidiaries and affiliated companies (collectively, "Bandana Capital" "we," "us," or "our") collects, uses, and shares personal information. This Privacy Policy applies to information we collect when you access or use our websites, mobile applications, and other online products and services (collectively, our "Services"), or when you otherwise interact with us, such as through our customer support channels or on social media pages.
We may change this Privacy Notice from time to time. If we make changes, we will notify you by revising the date at the top of this policy. We may also provide you with additional notice (such as by adding a statement to the Services (defined above) or sending you a notification), such as in connection with making material changes to this Privacy Notice. We encourage you to review this Privacy Notice regularly to stay informed about our information practices and the choices available to you.
1. PERSONAL INFORMATION WE COLLECT
The categories of personal information we collect depend on how you interact with us. We collect information that you provide to us, automatically when you use our Services, and from other sources such as organizations.
A. Information You Provide to Us Directly
We collect information that you provide directly to us. For example, we collect information directly from you when you create an account, fill out a form, submit or post content through our Services, make a purchase, communicate with us via third-party platforms, participate in a contest or promotion, request customer support, or otherwise communicate with us. The types of information that we collect include name, email address, postal address, phone number, and any other information you chose to provide. Additionally, if you make a purchase, we work with a third-party payment processor to collect and process your payment information.
B. Information Collected Automatically
We collect certain information automatically when you interact with our Services, including:
-
Device and Usage Information. We collect information about how you access our Services, including data about the device and network you use to access the Services, such as your Internet protocol (IP) address, user settings, MAC address, mobile carrier, mobile advertising and other unique identifiers, browser or device information, your approximate location as derived from IP address, and Internet service provider. We also collect information regarding your activity on our Services, such as pages that you visit before, during, and after using our Services, information about the links you click, the types of content you interact with, the frequency and duration of your activities, and other information about how you use our Services.
-
Transactional Information. When you make a purchase or return, we collect information about the transaction, such as product details, purchase price, and the date and location of the transaction.
-
Information Collected by Cookies, Pixel Tags/Web Beacons, and Similar Tracking Technologies. We, as well as third parties that provide content, advertising, or other functionality on our Services, use tracking technologies such as cookies, pixel tags, local storage, and other technologies ("Technologies") to collect information about your interaction with our Services. Cookies are small text files stored on your hard drive or in device memory that store preferences and facilitate and enhance your experience. Pixel tags (also known as "web beacons") are electronic images that we use on our Services and in our emails to help deliver cookies, count visits, and understand usage and campaign effectiveness. See "Privacy Rights and Choices" below to understand your choices regarding these Technologies.
C. Information Collected from Other Sources
We obtain information from other sources. For example, we may collect information about you from other merchants that run on the Bandana Capital platform. We may also collect information about you from third-party services and organizations such as: identity verification services, financial services providers, data brokers, advertising networks, data analytics providers, or mailing list providers. This information may include identifiers such as real name, alias, postal address, or other similar identifiers, and inferences reflecting your consumer preferences, characteristics, and predispositions. Additionally, if applicable, if you create or log into your account with us through a third-party application, such as an app store, a third-party login service, or a social networking site, we will have access to certain information from that application, such as your name, birthday, and profile picture, in accordance with the authorization procedures determined by such application.
D. Information We Derive
We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address or infer that you are interested in particular products based on your previous interactions with our Services.
2. LEGAL BASIS FOR PROCESSING (EEA, UK, AND SWITZERLAND)
If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we process your personal information under the following legal bases:
-
Contract Performance: Processing is necessary to perform our contract with you, such as processing your orders, delivering products, managing your account, and providing customer support.
-
Consent: We process certain personal information based on your consent, such as for marketing communications, certain cookies and tracking technologies, and sharing your information with other Bandana Capital merchants for their marketing purposes. You may withdraw your consent at any time.
-
Legitimate Interests: We process personal information based on our legitimate interests or those of third parties, where such interests are not overridden by your rights and interests. This includes:
- Improving and developing our Services
- Preventing fraud and enhancing security
- Analyzing and understanding our customer base
- Marketing our products and services
- Managing our business operations
-
Legal Obligation: We process personal information when necessary to comply with legal obligations, such as tax and accounting requirements, responding to lawful requests from authorities, and complying with court orders.
3. HOW WE USE YOUR INFORMATION
We use the information we collect to provide our Services and deliver the products you request, to customize your experience with us, and to improve and develop new products and services. We also use the information we collect to:
- Communicate with you about products, services, and events offered by us, other merchants that operate on the Bandana Capital platform, and others (see the "Your Privacy Rights and Choices" section below for information about how to opt out of these communications at any time);
- Evaluate potential acquisitions of new Bandana Capital merchants;
- Monitor and analyze trends, usage, and activities in connection with our products and Services;
- Target advertisements to you on third-party platforms and websites (for more information and to opt out, see the "Your Privacy Rights and Choices" section below);
- Personalize the advertisements you see when you use our Services based on information provided by our advertising partners or by other merchants that operate on the Bandana Capital platform (for more information and to opt out, see the "Your Privacy Rights and Choices" section below);
- Facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards;
- Detect, investigate, and help prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity and help protect the rights and property of Bandana Capital and others;
- Comply with our legal and financial obligations; and
- Carry out any other purpose described to you at the time the information was collected.
4. TARGETED ADVERTISING AND ANALYTICS
We engage others to provide analytics services, serve advertisements, and perform related services across the web and in mobile apps. These entities may use cookies, web beacons, device identifiers, and other technologies to collect information about your use of our Service and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in mobile apps, links clicked, and conversion information. This information may be used to analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Service and other companies' websites, and better understand your online activity. Some of our advertising partners enable us to translate your email address or phone number into an identifier that can't be used to identify you personally. Our advertising partners then use that unique identifier to show ads that are more relevant to you across the web and in mobile apps. Some of the activities described in this section may constitute "targeted advertising," "sharing," or "selling" under some laws. To learn more about the choices available to you with respect to these practices, see below. You can also learn more about interest-based ads, or opt out of having your web browsing information used for behavioral advertising purposes by companies that participate in the Digital Advertising Alliance, by visiting www.aboutads.info/choices. For visitors from the EEA, UK, and Switzerland, you can opt out via www.youronlinechoices.eu.
5. DISCLOSURE OF INFORMATION
We disclose personal information in the following circumstances or as otherwise described in this policy:
- We may disclose the personal information we collect with other merchants owned and operated by Bandana Capital.
- We disclose with vendors that access personal information to perform work for us, such as companies that assist us with IT support, web hosting, payment processing, customer service, banking and legal services, insurance, and related services.
- If you provide a product review or otherwise share content on our Services, we disclose this information publicly/with other users of our Services.
- We may disclose personal information if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.
- We may disclose personal information if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Bandana Capital, our users, the public, or others.
- We disclose personal information with our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
- We disclose personal information in connection with, or during negotiations concerning, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
- Personal information is disclosed between and among Bandana Capital's current and future parents, affiliates, and subsidiaries and other companies under common control and ownership.
- We disclose personal information with your consent or at your direction.
We also disclose aggregated or de-identified information that cannot reasonably be used to identify you.
6. INTERNATIONAL DATA TRANSFERS
We are based in the United States and the information we collect is governed by U.S. law. If you are accessing our Services from outside the United States, please be aware that information collected through our Services may be transferred to, processed, stored, and used in the United States and other jurisdictions. Data protection laws in the United States and other jurisdictions may be different from those of your country of residence. Your use of the Services or provision of any information therefore constitutes your consent to the transfer to and from, processing, usage, sharing, and storage of information about you in the United States and other jurisdictions as set out in this Privacy Notice.
Where required by law, when we transfer personal data from the EEA, UK, or Switzerland to countries that have not been deemed to provide an adequate level of protection, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to protect your personal information.
7. YOUR PRIVACY RIGHTS AND CHOICES
General Rights
-
Access, Correction, Deletion. You may have the right to (1) request to know more about and access your personal information, (2) request deletion of your personal information, and (3) request correction of inaccurate personal information. To request access, correction, or deletion of your personal information, contact us as described in the Contact Us section below. To the extent applicable, you can also access, correct, or delete certain information stored within your online account in your account dashboard. We may verify your request by asking you to provide certain information about yourself or your recent interactions with us. Note that if we deny a request you make to access, delete, or correct your information, you may have the right to appeal our decision.
-
Opting out of Targeted Advertising, Sharing, and Sales. As described in the Targeted Advertising and Analytics section above, we process personal information to understand and improve your experience with our Services and to serve you advertisements on non-Bandana Capital properties. Some of these activities may be considered "sales" or "sharing" of your personal information or "targeted advertising" under the law that applies to you. To opt out of targeted advertising, sharing, and sales of your personal information, please click here. You can also opt out of certain targeted advertising, sharing and sales by visiting our Services with a recognized universal choice signal enabled (such as the Global Privacy Control). Please note that, depending on which opt-out preference signal you use and whether you are logged into your account with us, our processing of the signal may be limited to the specific browser or device that you are using. You may need to renew your opt-out if you use a different browser or device to access our Services.
-
Non-discrimination. We will not discriminate against you for exercising your privacy rights.
-
Communication Preferences. You may opt out of receiving text messages or promotional emails from us by following the instructions in those communications. If you opt out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.
-
Other Bandana Capital Merchants. As described above, we disclose personal information to other merchants owned and operated by Bandana Capital so that they can send you promotional communications.
-
Mobile Push Notifications. With your permission, we may send push notifications to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device.
-
Cookies. Most web browsers are set to accept cookies by default. If you prefer, you can usually adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of our Service.
Additional Rights for EEA, UK, and Swiss Residents
If you are located in the EEA, UK, or Switzerland, you have the following additional rights:
-
Right to Object: You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes (including profiling).
-
Right to Restriction: You have the right to request that we restrict processing of your personal information in certain circumstances, such as when you contest the accuracy of the data or object to our processing.
-
Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller where technically feasible.
-
Right to Withdraw Consent: Where we process your personal information based on consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal.
-
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement of data protection law occurred. A list of supervisory authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en
To exercise any of these rights, please contact us using the information in the Contact Us section below.
8. DATA RETENTION
We store personal data associated with your account for as long as your account remains active. For storefronts that offer accounts as a feature, if you close your account, we will delete your account data within 90 days; otherwise, we will delete your account data after two years of inactivity. We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Privacy Notice, including to comply with our legal obligations, resolve disputes, and enforce our agreements.
The specific retention periods vary depending on the nature of the information and the purposes for which it is processed. When determining retention periods, we consider factors such as:
- The amount, nature, and sensitivity of the personal information
- The purposes for which we process the information
- Whether we can achieve those purposes through other means
- Applicable legal, regulatory, tax, accounting, or other requirements
9. SUPPLEMENTAL NOTICE FOR CALIFORNIA RESIDENTS
If you are a California resident, California law requires us to disclose the following additional information with respect to our collection, use, and disclosure of personal information. If you are a California resident, this section applies to you.
We collect, and have collected in the previous 12 months, the following categories of personal information: identifiers; categories of personal information described in Cal. Civ. Code § 1798.80(e); commercial information; Internet or other electronic network activity information; and inferences drawn from any of the categories identified above. For more information about the data points we collect and the categories of sources of such collection, please see the Collection of Personal Information section above. We collect personal information for the business and commercial purposes described in the How We Use Your Information section above. In the preceding 12 months, we have disclosed personal information for the business and commercial purposes described in the Disclosure of Information section above and we have made disclosures for business purposes to the following categories of recipients:
| Category of Personal Information |
Categories of Recipients |
| Identifiers |
• Service providers<br>• Bandana Capital Merchants<br>• Advertising partners |
| Personal information categories listed in Cal. Civ. Code § 1798.80(e) |
• Service providers<br>• Bandana Capital Merchants |
| Commercial information |
• Service providers<br>• Bandana Capital Merchants |
| Internet or other electronic network activity |
• Service providers<br>• Bandana Capital Merchants<br>• Advertising partners |
| Professional or employment-related information |
• Service providers<br>• Bandana Capital Merchants |
| Inferences drawn from other personal information to create a profile about a consumer |
• Service providers<br>• Bandana Capital Merchants<br>• Advertising partners |
We "share" and "sell" personal information for the following commercial purposes: to advertise our and other Bandana Capital merchants' products and services to you. We may share or sell the following categories of personal information to the following categories of third parties:
| Category of Personal Information |
Categories of Third Parties |
| Identifiers |
• Advertising partners |
| Internet or other electronic network activity |
• Advertising partners |
| Inferences drawn from other personal information to create a profile about a consumer |
• Advertising partners |
Additional Privacy Rights for California Residents
You have the right to opt out of sharing and sales at any time by clicking here. We do not knowingly sell or share personal information about consumers under the age of 16. Please see the Your Privacy Rights and Choices section above for more information about your privacy rights and how to exercise them.
10. SUPPLEMENTAL NOTICE FOR NEVADA RESIDENTS
If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A. If you have any questions, please contact us as set forth below.
11. CHILDREN'S INFORMATION
The Services are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has uploaded personal information to our site without your consent, you may contact us as described in "Contact Us" below. If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child's account if applicable.
12. DATA SECURITY
We implement appropriate technical and organizational measures to protect the personal information we collect and process. These measures are designed to provide a level of security appropriate to the risk of processing your personal information. However, please note that no system is ever completely secure and we cannot guarantee the security of your information.
13. OTHER PROVISIONS
Third-Party Websites/Applications. The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own risk.
14. CONTACT US
If you have any questions about our privacy practices or this Privacy Notice, or to exercise your rights as detailed in this Privacy Notice, please contact us at:
Bandana Capital
1021 N Hermitage Unit 3
Chicago, IL 60622
operations@bandanacapital.com
Data Protection Officer:
Tobias Kaplan
operations@bandanacapital.com
For residents of the EEA, UK, and Switzerland, you may also contact our Data Protection Officer at the email address above with any questions or concerns regarding the processing of your personal information.
