Last updated: August 4, 2026

This Privacy Policy explains how JACK HENRY ("Jack Henry," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit jackhenry.co, purchase our products, visit or book services with Jack Henry Studios, apply for a wholesale, affiliate, or other business relationship, communicate with us, or otherwise interact with our services (collectively, the "Services"). It also describes the privacy choices and rights that may be available to you.

By using the Services, you acknowledge the practices described in this Privacy Policy. Our Services are hosted by Shopify. Shopify may process personal information in connection with your use of our store as described in the Shopify Consumer Privacy Policy.

This Policy does not govern information about our employees or independent contractors in their capacity as members of our workforce. Separate notices may apply where required by law.

Personal Information We Collect

The information we collect depends on how you interact with us and may include:

• Identifiers and contact information: name, email address, telephone number, billing and shipping addresses, account username, customer number, IP address, and similar identifiers.
• Account and authentication information: account credentials and information used to maintain and secure an account. Passwords are handled through our ecommerce and account-service providers.
• Order, payment, and commercial information: products or services purchased, viewed, saved, or returned; order and return history; discounts; loyalty or promotional participation; and payment-related information. Payment card information is processed by Shopify and other payment processors, and Jack Henry generally does not receive complete card numbers.
• Device and online activity information: browser and device type, operating system, IP address, cookie and advertising identifiers, pages viewed, searches, referring pages, links selected, shopping-cart activity, approximate location derived from IP address, and interactions with our website, emails, advertisements, and other digital content.
• Communications and user content: customer-service messages, emails, chat content, survey responses, product reviews, photographs or other content you submit, and records of your preferences or requests.
• Professional and business information: employer or business name, job title, business address, website and social-media information, resale or tax information, store type, professional credentials, and other information submitted in connection with wholesale, retailer, vendor, creator, affiliate, press, or partnership inquiries.
• Studio and service information: appointment details, service preferences, consultation notes, and information you choose to provide that is reasonably needed to perform or personalize a requested studio service. Please do not provide sensitive medical information unless we specifically request it and it is necessary for the service you request.
• Inferences: preferences, interests, likely product affinities, or other conclusions generated from the information described above.

How We Collect Personal Information

We may collect personal information:

• Directly from you when you place an order, create an account, contact us, submit a form, post a review, book a service, or join a marketing program.
• Automatically through cookies, pixels, software development kits, log files, and similar technologies when you use our Services.
• From Shopify and service providers that support payments, fulfillment, customer accounts, fraud prevention, customer service, reviews, analytics, advertising, email, SMS, appointments, accessibility, and website operation.
• From advertising and social-media platforms when you interact with our advertisements, profiles, or content, subject to your settings on those platforms.
• From business partners, retailers, distributors, affiliates, creators, public sources, or representatives of organizations with which we do or may do business.

How We Use Personal Information

We may use personal information to:

• Provide, operate, personalize, and improve the Services.
• Process payments, fulfill and deliver orders, manage returns or replacements, and provide order updates.
• Create and manage customer accounts, appointments, wholesale accounts, and other business relationships.
• Respond to questions, provide customer support, and communicate about products, services, transactions, policies, or account activity.
• Send email, SMS, and other marketing communications when permitted by law and consistent with your choices.
• Recommend products and display or measure advertising that may be relevant to your interests.
• Evaluate wholesale, affiliate, creator, vendor, employment, press, and partnership inquiries.
• Administer promotions, discounts, surveys, product reviews, and other programs.
• Analyze use of the Services, troubleshoot problems, test features, and improve performance and customer experience.
• Protect customers, Jack Henry, and others; authenticate users; prevent fraud, abuse, security incidents, or illegal activity; and enforce our terms and policies.
• Comply with legal, tax, accounting, recordkeeping, and regulatory obligations and establish, exercise, or defend legal claims.
• Carry out other purposes disclosed to you at the time information is collected or with your consent.

How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

• Service providers: companies that provide ecommerce hosting, payment processing, order fulfillment, shipping, customer accounts, appointment booking, wholesale-form management, customer service, communications, reviews, fraud prevention, security, cloud storage, accessibility tools, analytics, advertising support, legal, accounting, and other business services.
• Shopify and Shopify-related services: Shopify powers our online store and may process information to provide checkout, Shop Pay, customer accounts, fraud prevention, analytics, personalization, advertising, and other services. Shopify's own processing is described in its Consumer Privacy Policy.
• Advertising, analytics, and social-media partners: partners such as Google, Meta, TikTok, and similar platforms may receive online identifiers, device information, commercial activity, and other internet activity to provide analytics, measure campaigns, create audiences, or deliver advertising, subject to applicable law and your privacy choices.
• Business and professional counterparties: retailers, distributors, vendors, affiliates, creators, agencies, and other parties involved in an actual or proposed business relationship with us.
• Legal and safety recipients: courts, regulators, law enforcement, government agencies, insurers, advisers, or other parties when we believe disclosure is required or permitted by law or reasonably necessary to protect rights, property, safety, or the integrity of the Services.
• Corporate transaction recipients: prospective or actual buyers, investors, lenders, advisers, or other parties involved in a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction involving all or part of our business.
• Other recipients: parties you direct us to disclose information to or to whom you consent.

We do not exchange personal information for money. Certain privacy laws, however, define "sale," "sharing," or "targeted advertising" broadly. Under those definitions, allowing advertising and analytics partners to collect or receive identifiers and online activity for personalized advertising may be considered a sale or sharing of personal information.

Notice at Collection for California and Other U.S. Residents

During the preceding 12 months, we may have collected the categories of personal information described below. We use and disclose these categories for the business and commercial purposes described in this Policy.

Category	Examples	Disclosed for business purposes to	May be sold/shared for targeted advertising
Identifiers and customer records	Name, contact information, account information, IP address, shipping and billing details	Shopify, payment and fulfillment providers, customer-service providers, communications providers, security providers, and professional advisers	Online identifiers such as IP address or advertising IDs may be shared with advertising and analytics partners
Commercial and financial information	Orders, returns, products viewed, purchase history, payment-related information	Shopify, payment processors, fulfillment and shipping providers, fraud-prevention providers, customer-service providers, and analytics providers	Product-view and purchase activity may be shared with advertising and analytics partners
Internet or electronic activity	Browser, device, pages viewed, clicks, searches, interactions, cookies, and advertising identifiers	Hosting, security, accessibility, analytics, advertising, and technology providers	Yes, depending on your settings, location, and applicable law
Approximate geolocation	General location inferred from IP address	Hosting, security, fraud-prevention, analytics, and advertising providers	May be shared with advertising and analytics partners
Professional information	Employer, role, business type, credentials, and wholesale or partnership details	Business-software providers and parties supporting wholesale, vendor, affiliate, or partnership relationships	Generally no
Communications and user content	Messages, reviews, survey answers, photos, and support records	Customer-service, reviews, communications, security, and professional-service providers	Generally no
Inferences	Likely interests, preferences, or product affinities	Analytics, personalization, and advertising providers	May be shared with advertising and analytics partners

We do not knowingly use or disclose sensitive personal information for the purpose of inferring characteristics about an individual. We do not knowingly sell or share personal information belonging to consumers under 16 years old. We do not use personal information to make automated decisions that produce legal or similarly significant effects, such as decisions concerning credit, housing, employment, or insurance.

Cookies, Analytics, and Advertising

We and our providers use cookies, pixels, tags, local storage, and similar technologies to keep the website functioning, remember preferences, secure transactions, understand website use, measure performance, personalize content, and deliver or evaluate advertising. Some technologies are necessary to operate the Services, while others are used for analytics, personalization, or advertising.

Your browser may allow you to block or delete cookies. Blocking necessary cookies may prevent portions of the Services from working correctly. Where required, you can manage non-essential technologies through the cookie controls displayed on our website. You may also learn about advertising choices through YourAdChoices and review Google's practices in the Google Privacy Policy.

We use Shopify services that may use information from your interactions with our store, other merchants, and Shopify to provide enhanced analytics, personalization, and advertising services. Review the Shopify Consumer Privacy Policy for information about Shopify's processing and privacy choices.

Your Privacy Choices

• Email: use the unsubscribe link in a marketing email. We may still send non-marketing messages concerning orders, accounts, appointments, or other transactions.
• SMS: reply STOP to a marketing text to opt out. Message and data rates may apply. Reply HELP for assistance.
• Cookies: use available website cookie controls or your browser settings.
• Advertising: adjust your settings with the relevant advertising or social-media platform and use the opt-out options described below.

You may opt out of activities that may be considered a sale or sharing of personal information or targeted advertising by visiting Your Privacy Choices.

Where required by law, we recognize the Global Privacy Control (GPC) signal as a request to opt out for the browser and device transmitting the signal. Because there is no universally accepted standard for other "Do Not Track" signals, we do not respond to those signals unless required by law.

Email, SMS, and Promotional Programs

If you sign up for marketing, we use your contact information and engagement information to send and measure messages about products, services, launches, offers, and events. Consent to receive marketing texts is not a condition of purchase. Messaging frequency may vary, and carrier message and data rates may apply.

Mobile opt-in information and consent will not be sold or shared with third parties or affiliates for their own marketing purposes. We may provide that information to service providers solely as needed to operate our messaging program, comply with law, and protect the program from fraud or abuse.

We may offer a discount or similar benefit for joining our email or SMS program. The specific incentive and conditions are disclosed when you enroll; for example, we may offer a percentage discount on an eligible purchase. The value of the incentive is the amount of the discount you receive and is reasonably related to our anticipated value from maintaining the customer relationship, considering program administration, engagement, and purchasing activity. You may withdraw at any time by unsubscribing from email or replying STOP to SMS. Withdrawal will not affect a discount already validly used, but it may end future program benefits.

Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain business and transaction records, comply with tax and legal obligations, resolve disputes, prevent fraud, enforce agreements, and protect legal rights. Retention periods vary based on the type and sensitivity of the information, the relationship involved, applicable contractual requirements, and legal obligations. When information is no longer required, we may delete, de-identify, or aggregate it as permitted by law.

Security

We use administrative, technical, and physical safeguards designed to protect personal information. No system, transmission, or storage method is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping account credentials confidential and notifying us if you believe your account has been compromised.

Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not knowingly sell or share for targeted advertising the personal information of individuals under 16. If you believe a child has provided personal information to us, contact us so we can review and address the request.

U.S. State Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to request that we:

• Confirm whether we process your personal information and provide access to or a copy of it.
• Provide information about the categories of personal information collected, sources, purposes, and recipients.
• Correct inaccurate personal information.
• Delete personal information.
• Provide certain information in a portable format.
• Opt you out of the sale or sharing of personal information, targeted advertising, or certain profiling.
• Limit certain uses or disclosures of sensitive personal information, where applicable.
• Withdraw consent where processing is based on consent.
• Appeal a decision we make concerning a privacy request.

To submit an access, correction, deletion, portability, or other privacy request, email hello@jackhenry.co with the subject line "Privacy Request." Describe the request and the state in which you reside. We may request information reasonably necessary to verify your identity and protect against fraudulent requests. If we cannot verify a request, we may be unable to fulfill it.

An authorized agent may submit a request where permitted by law. We may ask the agent to provide proof of authorization and may ask you to verify your identity or confirm the authorization directly. If we deny a request, you may appeal by replying to our decision or emailing hello@jackhenry.co with the subject line "Privacy Appeal."

We will not discriminate against you for exercising a privacy right. We may, however, offer programs or pricing that are lawfully related to the value of personal information, subject to required disclosures.

International Visitors

If you access the Services from outside the United States, your information may be processed in the United States, Canada, and other countries where we or our service providers operate. Those countries may have data-protection laws that differ from the laws where you live. Where applicable, individuals in the European Economic Area, United Kingdom, Switzerland, and certain other jurisdictions may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal information and to lodge a complaint with a local data-protection authority.

Third-Party Services and Links

The Services may link to or integrate with websites, platforms, and services operated by others. Their privacy practices are governed by their own notices, not this Policy. We encourage you to review those notices before providing personal information.

Accessibility

If you need this Privacy Policy in another format or would like to report an accessibility barrier, contact us at hello@jackhenry.co.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, Services, or legal obligations. We will post the revised Policy and update the "Last updated" date. When appropriate, we may provide additional notice of material changes.

Contact Us

Questions or privacy requests may be sent to:

CONTACT US

Questions or privacy requests may be sent to:

Jack Henry Holdings, Inc.
Attn: Privacy
3400 S Susan St
STE A
Santa Ana, CA 92704
United States
Email: hello@jackhenry.co