Privacy policy

Effective Date: July 7, 2026

The Reference Company (collectively, “Reference,” “we,” “us,” or “our”) operates the website www.enjoyreference.com and related online services, and sells products at in-person retail activations and retail partner locations (together, the “Services”). This Privacy Policy explains what personal information we collect online and in person, how we use it, who we share it with, and the choices and rights you have. It applies to visitors, account holders, customers, and activation attendees in the United States.

Please review the following to understand how we process and safeguard personal information about you. By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree with them, please do not use the Services. The Services are operated from the United States, and your information is stored and processed in the United States. This Privacy Policy may be revised from time to time, so please check it periodically to remain fully informed.

1. Information We Collect

a. Information You Provide to Us

Identity and contact details: your name, email address, phone number, billing address, and shipping address.
Order and payment information: payment card details and transaction history, whether you buy online or in person at an activation. Our store and point-of-sale systems run on Shopify, and payment card numbers are collected and processed by our payment processors; we do not store full card numbers on our systems.
Account information: username, password, purchase history, saved addresses, and preferences.
Marketing signups: email and text message signups collected on the Site or in person at retail activations, whether through a QR code, tablet, or paper form.
Contest and giveaway entries: contact information and responses you provide when entering a contest, giveaway, or sweepstakes, online or at an event.
Information about others: if you ask us to ship an order to someone else, such as a gift, we collect the recipient's name and address to deliver it, and use it only for that purpose.
Communications: messages you send us through contact forms, email, text, chat, or social media, including customer service inquiries and product reviews.

b. Information Collected Automatically

Device and connection data: IP address, browser type, device identifiers, operating system, and mobile network information.
Usage data: pages viewed, products browsed, links clicked, referring URLs, time spent on pages, and shopping cart activity.
Approximate location: general location inferred from your IP address (city and state level; we do not collect precise geolocation).
Cookies and tracking data: data collected through cookies, pixels, and similar technologies, described in Section 4.

c. Information From Other Sources

We may receive information about you from retail partners we host activations with (for example, signup or purchaser lists from a shared retail activation), payment processors, shipping carriers, fraud prevention services, analytics providers, advertising partners, and social media platforms when you interact with our content there.

We may combine information collected online with information collected in person at activations and events to maintain a single customer record. We also collect and use aggregated or de-identified data that cannot reasonably be linked to you; if such data is stored with personal information, we treat it as personal information.

2. How We Use Your Information

We use personal information to:

process, fulfill, and ship your orders, and send order confirmations and delivery updates;
create and manage your account;
provide customer support and respond to your inquiries;
send marketing emails and text messages, where you have opted in or not opted out, as applicable (you can unsubscribe or reply STOP at any time);
administer contests, giveaways, and sweepstakes, and notify winners;
plan and run in-person retail activations, including with retail partners;
personalize your experience, including product recommendations;
run analytics to understand how the Services are used and improve our products;
detect, prevent, and investigate fraud, unauthorized transactions, and security incidents;
comply with legal obligations, including tax, accounting, and consumer protection requirements; and
enforce our Terms and Conditions and protect our legal rights.

We do not use personal information for automated decision-making that produces legal or similarly significant effects without human involvement.

3. How We Share Your Information

We share personal information with:

Service providers: companies that perform services on our behalf, such as Shopify (our e-commerce and point-of-sale platform), payment processing, order fulfillment, shipping, email and SMS delivery, customer support tools, website hosting, and analytics. They may use your information only to perform those services.
Retail event partners: when we co-host a retail activation or event with a retail partner, we may share event signup lists or purchaser information with that partner, and receive the same from them, as disclosed at the point of signup. Under some state privacy laws this exchange may be considered a “sale” of personal information. You can opt out as described in Section 5, and event signup forms will identify the partner involved.
Advertising partners: cookie-based advertising and analytics partners, as described in Section 4. We may also upload hashed customer lists (such as email addresses) to ad platforms like Meta and Google to serve matched or lookalike-audience ads. Under some state privacy laws, these disclosures may be considered a “sale” of personal information or “sharing” for targeted advertising. You can opt out as described in Section 5.
Legal and safety: courts, regulators, and law enforcement when required by law, subpoena, or legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business transfers: a buyer or successor in the event of a merger, acquisition, financing, reorganization, or sale of assets, in which case personal information may be transferred as part of that transaction.

We do not sell personal information for money. However, because we exchange customer information with retail event partners and use third-party advertising cookies, some of our disclosures qualify as a “sale” or “sharing” under certain state privacy laws, and we treat them accordingly, including honoring opt-outs.

4. Cookies and Tracking Technologies

We and our partners use cookies, pixels, and similar technologies to operate the Site, remember your cart and preferences, measure site performance, and show you relevant ads on other websites and platforms.

Strictly necessary cookies: required for the Site to function (checkout, security, session management). These cannot be disabled.
Analytics cookies: help us understand Site traffic and usage patterns.
Advertising cookies: used by us and third parties to deliver ads based on your browsing activity.

You can manage cookies through your browser settings and through the cookie preferences link on the Site. The Site also recognizes the Global Privacy Control (GPC) browser signal as a valid opt-out of the sale of personal information and sharing for targeted advertising, as required by applicable state laws. Some browsers also offer a “Do Not Track” setting; because there is no industry standard for responding to Do Not Track signals, we do not respond to them, but we do honor GPC as described above.

5. Your Privacy Rights

Depending on the state you live in (including California, Colorado, Connecticut, Delaware, Indiana, Kentucky, Maryland, Minnesota, Montana, New Hampshire, New Jersey, Oregon, Rhode Island, Texas, Utah, Virginia, and others with comprehensive privacy laws), you may have the right to:

Know and access: confirm whether we process your personal information and access a copy of it;
Correct: request correction of inaccurate personal information;
Delete: request deletion of personal information we hold about you;
Portability: receive your personal information in a portable, machine-readable format;
Opt out: opt out of the sale of personal information, sharing or processing for targeted advertising, and certain profiling. This includes the exchange of event signup and purchaser lists with retail partners described in Section 3.

a. How to Exercise Your Rights

You can submit a request by emailing legal@enjoyreference.com with the subject line “Privacy Request,” or by using the “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” link on the Site. We will verify your identity using information associated with your account or order history before fulfilling a request. You may designate an authorized agent to submit a request on your behalf; we will require proof of authorization.

We respond to verified requests within 45 days, and may extend that period once by an additional 45 days where permitted, in which case we will notify you. We do not charge a fee to respond to a request unless it is excessive, repetitive, or manifestly unfounded, in which case we will explain why and provide a cost estimate before proceeding. If we decline a request, you may appeal by replying to our decision; if your appeal is denied, you may contact your state Attorney General.

We will not discriminate against you for exercising any privacy right — you will not be denied products, charged different prices, or receive a different level of service.

b. Financial Incentives

We may offer discounts, early access, or similar perks in exchange for joining our email or text lists (for example, a welcome discount for signing up). The value of the personal information you provide is reasonably related to our cost of providing the incentive. You may withdraw from any such program at any time by unsubscribing, replying STOP, or asking us to delete your information.

c. Notice to California Residents

The California Consumer Privacy Act, as amended by the CPRA, requires additional disclosures. In the preceding 12 months, we have collected the following categories of personal information, from the sources and for the purposes described in Sections 1 and 2:

Category	Examples	Business Purpose	Sold or Shared?
Identifiers	Name, email address, phone number, mailing address, IP address	Order fulfillment, accounts, marketing, security	Yes — advertising and retail event partners
Customer records	Payment details (handled by payment processors), purchase history	Order fulfillment, customer support	No
Commercial information	Products purchased or browsed, cart activity	Recommendations, analytics, advertising	Yes — advertising and retail event partners
Internet or network activity	Pages viewed, clicks, device and browser data	Analytics, personalization, advertising	Yes — advertising partners (cookies, matched ads)
Geolocation (approximate)	City and state inferred from IP address	Fraud prevention, tax calculation, localization	No
Inferences	Preferences drawn from purchases and browsing	Recommendations, marketing	No

We do not collect sensitive personal information as defined by the CPRA except payment card data handled by our payment processors, and we do not use sensitive personal information to infer characteristics. We retain personal information as described in Section 6. California residents may exercise the rights listed above, including the right to opt out of sale and sharing.

California's “Shine the Light” law (Civil Code Section 1798.83) lets California residents request, once per year, information about personal information disclosed to third parties for those parties' own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. California residents under 18 who have posted content on the Site (such as a review) may request its removal by emailing legal@enjoyreference.com; we will remove or anonymize the content, though removal may not be complete or comprehensive where the law allows content to remain.

d. Notice to Nevada Residents

Nevada residents may direct us not to sell certain personal information as defined under Nevada law, even where no such sale is occurring, by emailing legal@enjoyreference.com with the subject line “Nevada Opt-Out.”

6. Data Retention

We keep personal information for as long as needed to fulfill the purposes described in this Policy: account information for as long as your account is active plus a reasonable period afterward; order and transaction records for the period required by tax and accounting laws (generally seven years); contest entries until the promotion concludes and any required record-keeping period ends; and marketing data until you opt out. When personal information is no longer needed, we delete or de-identify it.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit, access controls, and PCI-compliant payment processing through Shopify and our payment processors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you as required by law.

8. Text Message (SMS) Program

If you opt in to our text program — online or at an event — we will use your phone number to send marketing and transactional texts. Consent to marketing texts is never a condition of purchase. Message frequency varies, and message and data rates may apply. Reply STOP to cancel at any time or HELP for help. We do not share your mobile number with third parties for their own marketing; text messaging originator opt-in data and consent are not shared with any third parties.

9. Children's Privacy

The Services are intended for adults. We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of consumers we know to be under 16. If you believe a child has provided us personal information, contact us at legal@enjoyreference.com and we will delete it.

10. Third-Party Links

The Services may link to websites and services we do not control, including social media platforms, retail partners' websites, and payment providers. Their privacy practices are governed by their own policies, which we encourage you to read. When you buy Reference products through a retail partner's register or store, that purchase is governed by the partner's privacy policy, not this one.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top reflects the latest revision. For material changes, we will post a notice on the Site or email registered customers before the changes take effect.

12. Contact Us

The Reference Company

595 Pacific Avenue, Floor 4

San Francisco, California, 94115

Privacy and legal: legal@enjoyreference.com

Customer care: hospitality@enjoyreference.com

Website: www.enjoyreference.com