Privacy Policy

This Privacy Policy describes how LxR Brands USA (“LxR,” “we,” “our,” or “us”) handles personal information through lxrbrandsusa.com, our communications, corporate services, and activities performed for businesses we own, control, operate, manage, or are authorized to support (“LxR-managed businesses”). Examples may include ONTCSA, Leaf by Ramsey, LxR Distributions CA, Epictetus Distributions MD, and LxR Imports USA. This list is illustrative and may change.

A managed business may act as the business or controller responsible for its customer information while LxR acts as its service provider or processor. Its own notice may apply in addition to this Policy. This Policy does not override a contract or a more specific privacy notice.

1. Scope and who we are

This Policy applies to personal information collected through this website, service requests, business relationships, support channels, email, telephone, text messaging, events, vendor relationships, and other interactions that link to it. It does not apply to employee or job-applicant information covered by a separate notice, or to independent third-party services that publish their own notices.

2. Categories of personal information

Depending on your interaction with us, we may collect:

• Identifiers and contact details: name, company, title, mailing address, email address, telephone number, account identifiers, and signatures.
• Commercial and relationship information: service requests, orders, transactions, projects, contracts, preferences, customer-support history, and business correspondence.
• Payment and financial information: billing details, transaction status, tax-related details, and limited payment information. Payment-card data may be handled directly by a payment processor rather than stored by LxR.
• Communications: emails, form submissions, call details, SMS/MMS content, consent records, opt-out status, attachments, and support conversations.
• Internet and device information: IP address, browser, device type, operating system, referring pages, timestamps, pages viewed, link interactions, and security logs.
• Approximate location: location inferred from an IP address, telephone country code, shipping address, or service area.
• Professional information: employer, role, industry, credentials, and information relevant to a business request.
• Inferences: service interests or communication preferences derived from the information above.

Please do not send highly sensitive information through ordinary website forms, email, or SMS unless we specifically request it through an approved secure process.

3. Sources of information

We collect information directly from you; from the company or person you represent; from LxR-managed businesses; from service providers such as hosting, communications, CRM, security, logistics, payment, and analytics providers; from business partners and vendors; from publicly available sources; and automatically from devices interacting with our services.

4. How we use personal information

We use information to:

• respond to inquiries and provide requested services;
• create and administer accounts, transactions, projects, orders, fulfillment, billing, and support;
• communicate about services, security, operations, events, and, with appropriate consent, marketing;
• operate websites, forms, communications, and internal business systems;
• authenticate users, prevent fraud and abuse, troubleshoot, and protect people and systems;
• maintain consent, suppression, audit, compliance, and business records;
• analyze and improve services, accessibility, content, and customer experience;
• perform contracts, exercise legal rights, resolve disputes, and comply with law; and
• support a merger, financing, restructuring, acquisition, sale, or similar corporate transaction.

5. How we disclose personal information

We may disclose information to LxR-managed businesses when necessary for the relevant relationship; to vendors and processors that host, secure, communicate, analyze, fulfill, bill, or support our services; to professional advisers; to transaction counterparties; to authorities when required by law; and to others at your direction or with your consent. Providers are expected to use information only for authorized purposes and subject to appropriate contractual or legal duties.

We may disclose aggregated or deidentified information that cannot reasonably identify you. We will not attempt to reidentify information maintained as deidentified except as permitted to test our deidentification practices.

6. Sale, sharing, and targeted advertising

Some privacy laws define “sale,” “sharing,” or “targeted advertising” broadly enough to include certain advertising or analytics disclosures. The current LxR corporate website does not intentionally use personal information for cross-context behavioral advertising. If our practices change, we will update this Policy and provide legally required controls, including recognition of applicable opt-out preference signals such as Global Privacy Control where required.

7. Cookies and tracking technologies

Our website and providers may use server logs, cookies, local storage, pixels, and similar technologies for security, essential functionality, preferences, performance, and analytics. See our Cookie and Tracking Technologies Notice for categories and controls.

8. Data retention

We retain personal information only as long as reasonably necessary for the purposes described here, including providing services, maintaining business and consent records, resolving disputes, enforcing agreements, protecting security, and meeting tax, accounting, regulatory, or legal obligations. Retention varies by record type, relationship, sensitivity, legal requirement, and operational need. We may retain suppression records after an opt-out so we can honor the request.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information based on its nature and risk. No transmission or storage system is completely secure. You are responsible for protecting account credentials and promptly notifying us of suspected unauthorized activity.

10. State privacy rights and choices

Depending on where you live and subject to exceptions, you may have rights to access, know, confirm, correct, delete, or obtain a copy of personal information; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive information; withdraw consent; and not receive discriminatory treatment for exercising a right. California residents may also request information about categories of collection, sources, purposes, and disclosures.

Submit a request through our Privacy Choices and Data Requests page. We will verify requests using information appropriate to the sensitivity of the request. You may use an authorized agent where permitted. If we deny a request, residents of certain states may appeal using the same contact method and writing “Privacy Appeal” in the subject line.

Communication choices

You may unsubscribe from marketing email using its unsubscribe link and opt out of recurring text messages as described in our SMS Messaging Policy. Transactional or legally required communications may continue when permitted.

11. International data transfers

LxR is based in the United States. Information may be processed in the United States and other countries where LxR-managed businesses or service providers operate. Where required, we use contractual, organizational, or other recognized safeguards appropriate to the applicable legal framework. Local law may provide different protections from those in your country.

12. Children’s privacy

Our corporate services and this website are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through this site. Services involving regulated or age-restricted products are intended only for persons meeting the applicable legal age. If you believe a child provided information improperly, contact us so we can review and delete it where required.

13. LxR-managed businesses and brands

LxR may provide shared technology, communications, customer support, compliance administration, CRM, security, operations, and other services for LxR-managed businesses. Information may be routed to the business responsible for your request and processed within LxR’s managed environment for authorized operational purposes. Consent given to one business is not automatically unrestricted marketing consent for every managed business. Cross-brand marketing requires the consent or other legal basis applicable to that communication.

14. Changes to this Policy

We may update this Policy as our services, businesses, technology, or legal obligations evolve. We will post the revised version at this URL and update the revision date. We may provide additional notice of material changes when required.

Contact us

Questions or requests concerning privacy or personal information may be directed to: