Effective Date: November 30, 2026

Last Updated: November 30, 2026

Pittman Ueckert Partners, LLC dba BrainVault (“BrainVault,” “we,” “us,” or “our”) operates this website and online store, along with all related content, features, tools, products, and services (together, the “Services”). The Services include the sale of BrainVault mouthguards and related products, our custom-fit program offered through authorized dental providers, and programs for athletes, parents, coaches, teams, and providers.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or use the Services, make a purchase or other transaction, submit a form, or otherwise communicate with us, and describes the choices and rights you have. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy to understand how we collect, use, disclose, and protect personal information and the choices available to you. Certain processing activities may require your consent under applicable law. Where required, we will request that consent separately. Your use of the Services does not replace any consent or authorization that applicable law requires us to obtain.

This Privacy Policy does not apply to information collected by third parties, including your dentist or dental provider, other websites we link to, or our service providers when they act on their own behalf. Those parties have their own privacy practices.

Privacy at a Glance

This summary is for convenience only. The full policy below controls.

• We do not sell your personal information for money. Like most online retailers, we use advertising and analytics tools that may count as “sharing” or “selling” under some state laws. You can opt out at any time (see Section 12).

• Custom-fit information is handled with extra care. Dental scans and fit information are used to make, fit, and support your product. We do not use them for advertising, and we do not sell them (see Section 6).

• We honor opt-out preference signals, including Global Privacy Control, where required by law.

• We do not knowingly sell or share the personal information of anyone under 18 for targeted advertising (see Section 8).

• You can access, correct, delete, or receive a copy of your information, and unsubscribe from marketing, by emailing info@brainvault.com or using the “Your Privacy Choices” link in our website footer.

1. Personal Information We Collect

“Personal information” means information that identifies, relates to, or can reasonably be linked to you or another person. It does not include information that has been de-identified or aggregated so that it cannot reasonably be linked to you. Depending on how you interact with the Services and where you live, we may collect or process the following categories, including inferences drawn from them:

Contact details: name, billing and shipping address, phone number, and email address.

Account information: username, password, security questions, and your preferences and settings.

Order and transaction information: items you view, add to your cart, purchase, return, exchange, or cancel; order history; and promotional codes used.

Payment information: payment method, billing address, transaction details, and payment confirmation. Payments are processed by Shopify Payments and our other payment partners. We receive limited information, such as card brand, the last four digits, and transaction status, and we do not store full card numbers on our own systems.

Athlete and product-fit information: sport, position, level of play, team or organization, size and fit preferences, and, for our custom-fit products, dental scans, impressions, bite information, and related information submitted by you or by your dental provider.

Provider, team, and business information: if you apply to become an authorized BrainVault provider or place a wholesale or team order, we collect business name, practice or organization address, your role, professional license information, tax identification and resale certificate information, and related business details.

Communications and preferences: the content of your emails, forms, chats, and calls with us, and your marketing preferences, including records of when and how you consented to email or text messages.

Reviews, surveys, and submissions: reviews, ratings, survey responses, contest or promotion entries, and any photos or videos you choose to submit.

Device and usage information: IP address, approximate location derived from your IP address, browser and device type, operating system, unique identifiers, referring pages, and information about how you use the Services, such as pages and products viewed, searches, provider searches, videos or research materials you engage with, forms started or completed, cart and checkout activity, and clicks.

Inferences: preferences, interests, and likely product needs that we derive from the information above, such as recommending products related to your purchases.

Sensitive personal information. Some laws treat certain information as “sensitive.” The sensitive information we may handle includes (a) account log-in credentials, (b) payment card numbers combined with security codes (handled by our payment processors), and (c) custom-fit scan and fit information that may be considered health-related. We use sensitive information only to provide the Services you request and for other purposes permitted by law, and where required by law we obtain your consent first. We do not collect precise geolocation, biometric identifiers, or government identification numbers from consumers.

1. Where We Get Personal Information

Directly from you, when you create an account, place an order, submit a form, sign up for messages, apply to become a provider, or communicate with us.

Automatically, from your device when you use the Services, through cookies, pixels, and similar technologies (see Section 5).

From your dentist or dental provider, when they submit scans or fit information on your behalf for a custom-fit product.

From your team, coach, or organization, if they place an order or submit information for you.

From our service providers and partners, such as payment processors, shipping carriers, analytics providers, and advertising and marketing partners.

From publicly available sources and social media, when you interact with our content or tag us.

If you give us information about another person, such as a teammate, player, or patient, you confirm that you have the authority to do so.

1. How We Use Personal Information

Depending on how you interact with us, we use personal information for the following purposes:

Provide and manage the Services. To process payments, fulfill and ship orders, manage returns, exchanges, and warranty claims, create and maintain your account, manufacture and fit custom products, connect you with an authorized provider, and enable reviews.

Tailor and improve the Services. To remember your preferences, personalize your shopping experience and product recommendations, understand how the Services are used, test features, and improve our products, website, and content.

Marketing and advertising. To send marketing and promotional communications by email, text message, or postal mail, and to show you ads for our products on the Services and other websites, including based on items you have viewed, purchased, or added to your cart. You can opt out at any time (see Sections 7 and 12).

Communicate with you. To provide customer support, respond to your questions, send order, shipping, and account notifications, and maintain our business relationship with you.

Security and fraud prevention. To authenticate accounts, secure payments and the Services, and detect, investigate, and act on fraudulent, illegal, unsafe, or malicious activity. If you register an account, you are responsible for keeping your credentials safe. Please do not share your username, password, or other access details with anyone.

Provider and team programs. To evaluate and administer provider applications, wholesale and team accounts, pricing and resale compliance, and tax documentation.

Legal and compliance. To comply with applicable law and legal process, respond to requests from law enforcement or government agencies, support civil discovery or litigation, enforce our terms and policies, and protect our rights, property, and safety and those of others.

Business operations. To perform accounting, auditing, and analytics, and to evaluate or carry out a merger, acquisition, financing, or sale of assets.

We use de-identified or aggregated information for research, reporting, and product development. Where we hold de-identified information, we will not attempt to re-identify it, except as permitted by law.

We do not use automated decision-making technology to make decisions about you that produce legal or similarly significant effects, such as decisions about credit, employment, housing, or access to essential services.

1. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients, for the purposes described in this policy:

Service providers and vendors that act on our behalf, including Shopify (hosting, checkout, payments, and analytics), payment processors, shipping carriers and fulfillment and logistics providers, shipping and order-management software, email and text messaging platforms, customer support tools, cloud storage and IT providers, website development and support firms, analytics providers, professional advisers, and our custom-fit manufacturing laboratory.

Authorized dental providers, when you request a custom-fit product or ask us to connect you with a provider, so that they can schedule your fitting and complete your order.

Advertising and marketing partners, such as Google and social media advertising platforms, to measure and deliver advertising. Information may include online identifiers, browsing and purchase activity, and hashed contact details. These partners may use the information under their own privacy policies. Depending on where you live, this may be considered “sharing” for cross-context behavioral advertising or a “sale” or “targeted advertising” under applicable law. You may opt out (see Section 12).

At your direction or with your consent, such as to ship you products, or when you use a social media feature or link.

Affiliates and related entities within our corporate group, including entities under common ownership with us, that will use the information consistent with this policy.

Legal and safety recipients, including courts, regulators, law enforcement, and other parties, to comply with legal obligations (including subpoenas and search warrants), enforce our terms, and protect the rights, property, and safety of BrainVault, our users, or others.

Business transfers, in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets.

We do not sell personal information for monetary consideration, and we do not sell or share sensitive personal information or custom-fit scan data. To make the third parties we rely on easy to see, the table below lists the main categories of tools we currently use. The list may change as we update the Services.

You may request a list of the specific third parties to whom we have disclosed your personal information, where your state’s law gives you that right, by contacting us using the details in Section 18.

1. Cookies, Pixels, and Similar Technologies

We and our partners use cookies, pixels, tags, local storage, analytics scripts, and similar technologies to operate the Services, remember your cart and preferences, keep the Services secure, measure how the Services are used, and deliver and measure advertising. These technologies collect information such as your IP address, device and browser information, pages viewed, and actions taken.

How to Submit a Request

Your choices. You can manage certain tracking technologies through your browser settings, although disabling some technologies may affect website functionality. Where available, you may also use the privacy preference controls provided on our website to exercise applicable opt-out choices.

Certain privacy laws require us to recognize supported opt-out preference signals, such as Global Privacy Control (GPC), for applicable processing activities. We will process these signals as required by applicable law. The effect of an opt-out may depend on the browser or device used and, where required by law, whether we can associate the signal with your account.

You may also be able to limit certain analytics or interest-based advertising through tools offered by the relevant providers or industry organizations. These third-party tools are governed by their own terms and may not control every tracking technology used on our Services.

Do Not Track. Browser “Do Not Track” signals are different from Global Privacy Control. We respond to opt-out signals as required by applicable law.

1. Custom-Fit Products and Our Dental Provider Network

BrainVault offers custom-fit mouthguards through authorized dental providers. Your dentist or provider may take physical impressions or digital scans and submit them to us, together with related fit and order information, so that our custom-fit laboratory can manufacture your product.

Information we receive. Depending on your order, we may receive your name and contact details, shipping information, dental scans or impressions, bite and fit information, sport-related information, and order details.

How we use it. We use this information to manufacture, fit, ship, support, remake, and provide warranty service for your product; communicate with you and your authorized provider about your order; and comply with applicable legal obligations.

How we protect its use. We do not use custom-fit dental scans, impressions, or related fit information for advertising or marketing, and we do not sell this information. We disclose it only as reasonably necessary to fulfill your order and provide the services described above, including to your authorized dental provider, our custom-fit laboratory, shipping and fulfillment providers, and service providers that support our systems, or as otherwise permitted or required by law. We do not use this information to identify you for unrelated purposes.

Your dental provider. BrainVault is a sports technology company, not a healthcare provider. Your dentist or provider is responsible for the care they provide and for the information they collect directly, subject to the privacy obligations and laws applicable to them. Their practices may be described in their own privacy notice.

If you submit a “contact me” or custom-fit request form, we use the information you provide to respond to your request and, where you ask us to do so, to connect you with an authorized provider so you can arrange a fitting.

1. Marketing Communications and Welcome Offers

Email. We may send you promotional emails. You can unsubscribe at any time using the link in any email or by contacting us. If you opt out, we may still send non-promotional messages, such as order confirmations, shipping updates, and account notices.

Text messages. If you provide your mobile number and opt in, you agree to receive recurring automated marketing text messages from BrainVault at that number. Consent is not a condition of any purchase. Message frequency varies, and message and data rates may apply. Reply STOP at any time to cancel or HELP for help. Carriers are not liable for delayed or undelivered messages. We do not share mobile phone numbers or text message opt-in data and consent with third parties or affiliates for their own marketing or promotional purposes.

Welcome Offer and Financial Incentive Notice. We may offer a discount or other benefit when you sign up to receive marketing emails or text messages. Participation is voluntary and is not required to purchase a product or use our Services. To receive the offer, you must provide the contact information requested at sign-up and, where required, consent to the relevant marketing communications. The offer's terms and any applicable restrictions will be displayed when you sign up.

We use the contact information and marketing preferences you provide to send communications and promote our products. You may withdraw from marketing communications at any time by using the unsubscribe instructions in our emails, replying STOP to marketing text messages, or contacting us. Withdrawing from marketing will not affect a purchase you have already made. Any financial incentive we offer is reasonably related to the value of the customer relationship and the information provided, as permitted by applicable law.

1. Children and Minors

Many BrainVault customers are youth athletes, and we welcome parents and guardians as customers. The Services themselves are intended for adults and for parents and guardians purchasing on behalf of minors. We do not knowingly collect personal information directly from children under 13, and we do not knowingly create accounts or send marketing messages to children under 13.

Information about a minor athlete, such as sport, size, or custom-fit information, is collected from a parent or guardian, a coach or team administrator acting with a parent’s or guardian’s authorization, or a dental provider. We use it only for the purposes described in this policy.

We do not knowingly sell or share, or use for targeted advertising, the personal information of anyone under 18. If you are a parent or guardian and believe your child has given us personal information, please contact us using the details in Section 17 and we will delete it as required by law.

1. Our Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for us. Information you submit to the Services is transmitted to and shared with Shopify and other third parties that may be located in countries other than where you live.

In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data from your interactions with our store, with other merchants, and with Shopify. For those purposes, Shopify acts as an independent controller or business and is responsible for processing that information, including responding to your requests to exercise rights over it. To learn more about how Shopify uses your personal information and the rights you may have, please see the Shopify Consumer Privacy Policy at shopify.com/legal/privacy or visit the Shopify Privacy Portal at privacy.shopify.com.

1. Third-Party Websites, Links, and Social Media

The Services may link to websites or platforms operated by third parties, including social media sites and our provider network. We do not control these sites and are not responsible for their privacy or security practices or the accuracy, completeness, or reliability of their content, so please review their policies before using them. Information you post on public or semi-public venues, including third-party social networks, may be viewable by others without limit on its use by us or others. Links to third-party sites do not imply endorsement unless we say so.

1. Data Retention and Security

Retention. We keep personal information only as long as needed for the purposes described in this policy, including to maintain your account, provide the Services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When we no longer need it, we delete or de-identify it. Typical periods are below, and they may be longer where the law requires or a dispute is pending.

Security. We use administrative, technical, and physical safeguards designed to protect personal information, such as encryption in transit, access controls, and working with vendors that maintain recognized security standards. Payment card data is handled by PCI-compliant payment processors. However, no method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Information you send to us by unsecured channels, such as ordinary email, may not be protected in transit, so please do not use them to send sensitive information. If a security incident affects your personal information, we will notify you and regulators as required by law.

1. Your Privacy Rights and Choices

Depending on where you live, including if you are a resident of Texas, California, or another state with a comprehensive privacy law, you may have some or all of the following rights. These rights are not absolute, and we may decline a request as permitted by law.

Right to know and access. To confirm whether we process your personal information and to receive the categories and specific pieces of personal information we hold about you, the categories of sources and third parties, and our purposes for processing.

Right to delete. To ask us to delete personal information we collected from you, subject to exceptions such as legal, tax, and warranty requirements.

Right to correct. To ask us to correct inaccurate personal information.

Right to portability. To receive a copy of your personal information in a portable, readily usable format, where technically feasible.

Right to opt out of sale, sharing, and targeted advertising. To direct us not to “sell” or “share” your personal information, or to process it for “targeted advertising” or certain profiling, as those terms are defined by applicable law. See below.

Right to limit use of sensitive personal information. We use sensitive personal information only for purposes permitted by law, such as providing the Services you request, so this right does not currently apply. You may withdraw consent you previously gave us for processing sensitive information at any time.

Right to a list of third parties. Where applicable, to request a list of the specific third parties to which we have disclosed your personal information.

Right to non-discrimination. We will not discriminate against you for exercising your rights. We may, however, offer financial incentives such as the welcome offer in Section 7.

Communication preferences. You can unsubscribe from marketing emails or reply STOP to text messages at any time.

How to Submit a Request

To exercise a privacy right, email info@brainvault.com with “Privacy Request” in the subject line and describe your request. Where a privacy-preferences or opt-out tool is available on our website, you may also use that tool to submit applicable opt-out choices. You do not need to create an account to submit a request.

We will review and respond to requests in accordance with the privacy laws that apply to you. We may need to verify your identity or authority to act on another person's behalf, as permitted or required by law.

Global Privacy Control and Other Opt-Out Signals

Where required by applicable law, we recognize Global Privacy Control (GPC) and other qualifying opt-out preference signals as requests to opt out of applicable sales, sharing, or targeted advertising. We apply these signals to the browser or device transmitting the signal and to an associated account where required by law and technically supported. You can learn more about GPC at globalprivacycontrol.org.

If you believe an opt-out signal has not been honored, contact info@brainvault.com with “Privacy Request” in the subject line.

Verification, Authorized Agents, Timing, and Appeals

Verification. We may need to verify your identity before acting on a request, for example by matching information you provide to information we hold, as permitted or required by law. We will not require you to create an account to submit a request, but we may use an existing account to verify you.

Authorized agents. You may designate an authorized agent to submit a request for you. We may require proof of your authorization and may need to verify your identity directly with you.

Timing. We will respond within the time required by law, generally within 45 days, and we will tell you if we need more time. If we need an extension, we will explain why.

Appeals. If we deny your request, you may appeal by emailing info@brainvault.com with “Appeal” in the subject line within a reasonable time after our response. We will respond in writing within the time required by law (generally 45 to 60 days) and explain our reasons. If you are not satisfied with the result, you may contact your state attorney general. Texas residents may contact the Texas Attorney General at texasattorneygeneral.gov.

1. State-Specific Disclosures

California

This section supplements the rest of this policy for California residents, as required by the California Consumer Privacy Act as amended (“CCPA”). In the past 12 months, we have collected, disclosed for a business purpose, and in some cases “shared” (for cross-context behavioral advertising) the following categories of personal information:

We collect and use each category for the purposes in Section 3, from the sources in Section 2, and retain it for the periods in Section 11. We do not knowingly sell or share personal information of consumers under 18. California residents may submit requests as described in Section 12, may request the specific pieces of personal information we hold about them, and may contact the California Privacy Protection Agency at cppa.ca.gov with concerns. Under California’s “Shine the Light” law (Civil Code Section 1798.83), California residents may request information about disclosures of certain categories of personal information to third parties for their direct marketing purposes; to make a request, contact us as described in Section 17. The CCPA treats a “sale” or “share” as disclosures made for monetary or other valuable consideration or for cross-context behavioral advertising, and our advertising and analytics tools may involve such disclosures.

Texas and Other U.S. States

Residents of Texas, Colorado, Connecticut, Oregon, Utah, Virginia, and other states with comprehensive privacy laws have the rights described in Section 12, including the right to appeal a denied request. We do not sell sensitive personal data. Where required, we obtain consent before processing sensitive data, including custom-fit information that may be considered health-related.

Nevada

Nevada law allows residents to opt out of the “sale” of certain covered information to third parties for monetary consideration. We do not currently sell covered information as defined by Nevada law. To submit a request, contact us as described in Section 17.

Consumer Health Data

Certain information collected through our custom-fit mouthguard program, including dental scans, impressions, bite information, and related fit information, may qualify as “consumer health data” under some state laws. Our collection, use, disclosure, and protection of such information are described in the Consumer Health Data Privacy Notice below.

You can access that notice directly at any time using the Consumer Health Data Privacy Notice link on our website. We handle information covered by these laws in accordance with applicable requirements, including any required consent, disclosure, and consumer-rights obligations.

1. Complaints

If you have a complaint about how we handle your personal information, please contact us using the details in Section 18 and we will do our best to resolve it. Depending on where you live, you may also have the right to appeal our decision (see Section 12) or to lodge a complaint with your state attorney general or your local data protection authority.

1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or legal requirements. We will post the revised policy on this website and update the “Last Updated” date at the top. If we make material changes, we will provide additional notice as required by law, such as by email or a prominent notice on the Services. We review this policy at least once every 12 months.

1. Accessibility

If you have difficulty accessing this Privacy Policy or need it in another format, please contact us and we will work with you to provide it.

1. Contact Us

If you have questions about our privacy practices or this Privacy Policy, or would like to exercise any of your rights, please contact us:

Pittman Ueckert Partners, LLC dba BrainVault

Email: info@brainvault.com

Consumer Health Data Privacy Notice

Last Updated: November 30, 2026

This notice supplements the BrainVault Privacy Policy and describes how we collect, use, disclose, and protect information that qualifies as “consumer health data” under applicable state law. It applies to the extent such laws cover our activities and the information we process.

What We Collect and Why

When you or your authorized dental provider arranges a custom-fit mouthguard, we may receive dental scans or impressions, bite and fit information, and related order and contact details. We collect this information from you or your authorized provider and use it to manufacture, fit, ship, support, remake, and provide warranty service for your product; communicate with you and your provider about your order; and comply with applicable law.

Who We Share It With

We disclose consumer health data only as reasonably necessary to provide the requested product and services, operate and secure our business, or comply with applicable law. Recipients may include the authorized dental provider you work with, our custom-fit laboratory, shipping and fulfillment providers, and service providers that support our systems. We do not sell consumer health data or use it for advertising. We do not use geofencing around healthcare facilities to collect consumer health data.

Your Rights and Choices

Depending on the law that applies to you, you may have the right to confirm whether we collect consumer health data; access that data, including information about certain third parties and affiliates to whom it has been disclosed; withdraw consent where processing is based on consent; and request deletion, subject to applicable legal exceptions.

To submit a request, email info@brainvault.com with “Consumer Health Data Request” in the subject line. We will verify and respond to requests within the time required by applicable law. If we deny a request, you may appeal by emailing us with “Appeal” in the subject line. If you are not satisfied with our response to an appeal, you may contact the appropriate state attorney general as permitted by law.