Effective Date: 07/27/2026

1. Who This Policy Covers

This Privacy Policy ("Policy") describes how the following affiliated businesses (together, "we," "us," "our," or the "Companies") collect, use, share, and protect your information:

Brand Legal Entity Primary Website Enzo Custom Enzo Custom Clothiers New York, LLC enzocustom.com Enzo Sartori [Enzo Sartori legal entity name] [enzosartori.com] Sanpari Tailors [Sanpari Tailors legal entity name] [sanparitailors.com]

This Policy applies to all of our websites, online stores, showroom and appointment-booking systems, email and SMS programs, and in-person data collection (collectively, the "Services"). When you interact with any of the brands above, the entity operating that brand is the controller of your information, and the others act as affiliated processors only where operationally necessary (for example, shared booking or CRM infrastructure).

By using our Services, you acknowledge that you have read and understood this Policy.

2. Information We Collect

We collect the following categories of information. Not every category applies to every interaction.

2.1 Information You Provide Directly

• Identifiers: name, email address, postal address, telephone/mobile number.
• Appointment and order information: showroom location, appointment date/time, measurements and fit preferences, garment specifications, order history, and notes you provide.
• Commercial and transaction information: products purchased or considered, and records of purchases.
• Payment information: processed by our third-party payment processors; we do not store full card numbers on our own systems.
• Communications: the content of messages, emails, calls, and chats you send us.

2.2 Information Collected Automatically

When you use our websites, we and our service providers automatically collect:

• Device and connection data: IP address, browser type, operating system, device identifiers, and referring/exit pages.
• Usage data: pages viewed, links clicked, time on page, and navigation paths.
• Behavioral analytics and session-activity data: mouse movements, scrolling, clicks, taps, and interactions with page elements, captured through heatmap and session-replay technologies (see Section 6).
• Cookies and similar technologies: see Section 5.

2.3 Information From Other Sources

We may receive information from advertising and analytics partners, social media platforms, and lead-generation or event partners, which we may combine with information we already hold. We do not use purchased, rented, or third-party lead lists for our SMS marketing program. All SMS marketing consent is collected directly from you through our own opt-in forms.

2.4 Sensitive Information

We do not intentionally collect sensitive personal information (such as government IDs, financial account numbers beyond payment processing, health, biometric, or precise geolocation data) for the purpose of inferring protected characteristics. Where any element we collect is classified as "sensitive" under a state law, you have the rights described in Section 9.

3. How We Use Your Information

We use your information to:

• provide, schedule, and fulfill appointments, consultations, custom orders, and purchases;
• communicate with you about your orders, appointments, and account (transactional messages);
• send marketing and promotional communications by email and, where you have opted in, by SMS (see Section 4);
• operate, maintain, secure, analyze, and improve our websites and Services;
• understand how visitors use our websites through analytics and session-replay tools (see Section 6);
• personalize your experience and present relevant offers;
• detect, prevent, and respond to fraud, abuse, security incidents, and unlawful activity;
• comply with legal obligations and enforce our Terms & Conditions.

4. Text Messaging / SMS Communications

If you have opted in to receive SMS text messages from one of our brands, we may send you appointment reminders, order updates, and marketing messages at the mobile number you provided.

• Consent: You opt in by checking the dedicated, unchecked SMS consent box on our booking or sign-up forms, or by another documented affirmative opt-in. Checking the box is optional and is not a condition of any purchase or appointment.
• Brand-specific consent: Your consent applies only to the brand whose form you opted in through. Consent given to one brand (for example, Enzo Custom) does not authorize SMS marketing from the other affiliated brands (Enzo Sartori or Sanpari Tailors) unless you separately opt in to each.
• Message frequency: Marketing messages are sent up to 4 times per month per program. Transactional messages (such as appointment reminders and order updates) vary based on your appointments and orders.
• Rates: Message and data rates may apply, depending on your carrier plan.
• Opt-out: Reply STOP, CANCEL, UNSUBSCRIBE, QUIT, END, REVOKE, or OPT OUT to any message to opt out at any time. You may also opt out by any other reasonable method, including replying to us by email, submitting our online contact form, or telling our staff. You will receive one confirmation message containing no marketing or promotional content, and then no further messages of that type. We honor opt-out requests promptly and in any event within 10 business days.
• Help: Reply HELP to any message, or contact us at [email protected] or through our online contact form at enzocustom.com/contact.
• Mobile information sharing. Mobile information, including text messaging originator opt-in data and consent, will not be sold, rented, shared, or transferred to third parties or affiliates for their marketing or promotional purposes. We may share this information with service providers solely as necessary to operate our SMS program (such as our SMS platform and messaging aggregator) to deliver the messages you have requested.
• Carriers: SMS is supported on AT&T, T-Mobile, Verizon, and other major U.S. carriers. Carrier support may vary, and carriers are not liable for delayed or undelivered messages.

Full SMS program terms are available in our SMS Terms & Conditions.

5. Cookies and Similar Tracking Technologies

We use cookies, pixels, tags, SDKs, and local storage to operate our websites, remember your preferences, measure performance, and deliver and measure advertising. We categorize them as:

• Strictly necessary — required for the site to function (cannot be switched off).
• Analytics/performance — help us understand site usage.
• Functional — remember choices and preferences.
• Advertising/targeting — used to deliver and measure relevant advertising, including cross-context behavioral advertising.

Managing cookies. Where required by law, we present a consent banner and preference center that loads before non-essential technologies fire, lets you accept or reject categories of cookies, and lets you change your choices at any time through the "Cookie Settings" link in our website footer. You can also control cookies through your browser settings.

Global Privacy Control (GPC). We honor recognized universal opt-out signals, including the Global Privacy Control browser signal, where required by applicable state law, treating them as a request to opt out of the sale/sharing of personal information and targeted advertising for that browser or device.

Third-party technologies. We use third-party analytics and advertising technologies that may include Google Analytics, Google Ads, Meta Pixel, and other providers. These providers may collect information about your online activities over time and across third-party websites. Their use of your information is governed by their own privacy policies.

6. Behavioral Analytics and Session-Replay Technologies

To understand and improve how visitors use our websites, we and our service providers use behavioral analytics, heatmap, and session-replay technologies. These technologies record and reconstruct your interactions with our websites — including page views, mouse movements, scrolling, clicks and taps, and (except for fields we mask) information entered into forms — so we can analyze usability, diagnose problems, prevent fraud, and improve our Services.

These technologies include, without limitation, Microsoft Clarity, and may also include comparable tools such as Hotjar, FullStory, Mouseflow, Crazy Egg, Smartlook, Lucky Orange, Contentsquare, LogRocket, PostHog, and other similar present or future providers (collectively, "Session Technologies").

Masking of sensitive fields. We configure Session Technologies to mask or exclude sensitive and personal fields where the tool supports it, including passwords, payment card fields, phone numbers, email addresses, postal addresses, appointment notes, and other free-text fields, unless capture of a specific field is genuinely necessary for the purpose described above.

Your consent. By using our websites after being presented with this Policy and our cookie banner, and by continuing to interact with our websites, you expressly consent to the recording, capture, transmission, storage, and analysis of your interactions with our websites by us and our Session Technology providers for the purposes described above. Where required by applicable law, we obtain this consent through our cookie consent banner before non-essential Session Technologies are activated. If you do not consent, you should not use our websites, or you may reject non-essential cookies through our preference center.

Service providers, not eavesdroppers. Session Technology providers act as our service providers/processors and are contractually limited to processing data on our behalf for the purposes above. They are not permitted to use the data for their own independent purposes.

7. Artificial Intelligence and Automated Processing

We use, or our service providers use on our behalf, artificial intelligence, machine learning, and automated processing technologies ("AI Technologies") in connection with our Services — for example, to analyze website usage, support customer service, detect fraud, personalize offers, forecast demand, assist with marketing content, and improve our products and Services.

• Data used. AI Technologies may process the categories of information described in Section 2, including identifiers, usage and behavioral data, order history, and the content of communications you send us.
• Automated decision-making. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing without human involvement. If we introduce such automated decision-making or profiling, we will update this Policy and provide any notice, opt-out, and human-review rights required by applicable law.
• Third-party AI providers. Where we use third-party AI services, those providers act as our service providers/processors and are contractually restricted from using your information to train their own models for unrelated purposes, except as permitted by law and disclosed here.
• Your rights. Subject to applicable law, you may request information about, object to, or request human review of automated processing as described in Section 9.

8. How We Share Information

We share information only as described below. We do not sell your personal information for money. We may "share" personal information for cross-context behavioral advertising as those terms are defined under California and other state laws; you can opt out (see Section 9).

We share information with:

• Affiliated brands (Enzo Custom, Enzo Sartori, Sanpari Tailors) for shared operations such as booking, fulfillment, and CRM. SMS opt-in data and consent are not shared or transferred between the affiliated brands for marketing purposes unless you have separately opted in to each brand (see Section 4).
• Service providers/processors acting on our behalf — payment processors, hosting, CRM/email/SMS platforms, analytics and Session Technology providers, advertising partners, and professional advisors — bound by contract to use the information only to provide services to us.
• Advertising and analytics partners for measurement and, subject to your choices, targeted advertising.
• Legal and safety recipients — to comply with law, respond to lawful requests, enforce our Terms, or protect rights, property, and safety.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets.

We never sell, rent, share, or transfer your mobile phone number or SMS consent data for third-party or affiliate marketing (see Section 4).

9. Your Privacy Rights

Depending on your state of residence, you may have some or all of the following rights. As a matter of company policy, we extend the core rights below to residents of all U.S. states as a baseline, subject to identity verification and to exceptions permitted by law, regardless of whether your state has enacted a privacy law.

• Right to know/access the categories and specific pieces of personal information we hold about you.
• Right to correct inaccurate personal information.
• Right to delete personal information, subject to legal exceptions.
• Right to data portability.
• Right to opt out of sale/sharing and of targeted/cross-context behavioral advertising.
• Right to limit use of sensitive personal information.
• Right to opt out of profiling/automated decision-making that produces legal or similarly significant effects, where applicable.
• Right to appeal a denial of a request (where provided by state law).
• Right to non-discrimination for exercising your rights.

9.1 California

California residents have the rights above, including the right to opt out of the sale or sharing of personal information via the "Do Not Sell or Share My Personal Information" link in our website footer. We respond to verifiable requests within 45 days (extendable once by 45 days). Authorized agents may submit requests with appropriate verification.

9.2 Other U.S. States

Residents of states that have enacted comprehensive consumer privacy laws — including, among others, Virginia, Colorado, Connecticut, Texas, Utah, Oregon, and Montana — have the applicable rights listed above, including the right to opt out of targeted advertising and, where provided, the right to appeal. We provide the core rights in this Section to residents of all U.S. states as a matter of company policy, subject to verification and to legal exceptions. Texas residents: under Texas law, certain text messages are treated as telephone solicitations requiring prior consent; our SMS program operates on an opt-in basis accordingly.

9.3 How to Exercise Your Rights

• Online: Privacy Rights Request form at enzocustom.com/privacy-request
• Email: [email protected]
• Mail:
  Privacy Office
  Enzo Custom Clothiers New York, LLC (on behalf of the affiliated brands)
  501 E Las Olas Blvd., Suite 300, Fort Lauderdale, FL 33301

We will verify your identity before responding. There is no fee unless your request is excessive or repetitive.

10. Data Retention

We keep personal information only as long as necessary for the purposes described in this Policy, then delete or de-identify it. Indicative retention periods:

Data category Indicative retention Transaction and order records [7] years (tax/accounting) Customer account information Duration of relationship + [3] years Marketing opt-in / consent records Duration of subscription + [5] years after opt-out SMS/email opt-out records Retained indefinitely to honor your opt-out Website analytics / session-replay data [up to 12] months Support communications [3] years

11. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, appropriate to its sensitivity and to the size of our business. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Breach notification. If a security incident affecting your personal information occurs, we will notify affected individuals and regulators as required by applicable state breach-notification laws.

12. Children's Privacy

Our Services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information from children under 13 (or the applicable age under state law). If you believe a child has provided us information, contact us and we will delete it.

13. International Visitors

Our Services are operated in the United States and intended for U.S. residents. If you access our Services from outside the United States, you do so on your own initiative and are responsible for compliance with local law, and you understand your information will be processed in the United States.

14. Third-Party Links

Our websites may link to third-party sites and services we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices.

15. Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date at the top reflects the most recent revision and is always displayed at the top of the published page. For material changes, we will provide additional notice as required by law and, where we have your email address, as a matter of practice by email.

16. Contact Us

Privacy Office
Enzo Custom Clothiers New York, LLC (on behalf of the affiliated brands)
501 E Las Olas Blvd., Suite 300, Fort Lauderdale, FL 33301
Email: [email protected] · Online: Privacy Rights Request form at enzocustom.com/privacy-request