Privacy Policy

Effective July 29, 2026

This Privacy Policy explains how RMB Investments, LLC, through its FORNO brand (collectively, “FORNO,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you visit EnjoyForno.com, place or manage an order, enroll in a subscription, request a large-order or Gatherings quote, communicate with us, participate in a promotion, or otherwise interact with FORNO online or offline (collectively, the “Services”). By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services.

1. Scope

This Privacy Policy applies to personal information collected through the FORNO website, online ordering and subscription tools, forms, email and text communications, customer support, local pickup or delivery interactions, special-event and large-order inquiries, social-media interactions, and other Services that link to this Policy. It does not govern third-party websites, apps, platforms, or services that maintain their own privacy notices.

2. Personal Information We Collect

Information You Provide

Contact and identity information, such as your name, email address, telephone number, billing address,

pickup or delivery address, and account credentials.

Order and transaction information, including products, flavors, quantities, pickup or delivery details, gift

messages, subscription frequency, purchase history, promotions used, refunds, and customer-service records.

Payment-related information. Payment card information is generally collected and processed by our

ecommerce and payment providers, such as Shopify and its payment partners. FORNO may receive limited payment details, such as card type, last four digits, transaction status, and billing contact information, but generally does not receive or store full payment-card numbers.

Subscription information, including plan selected, billing frequency, renewal schedule, skipped or

paused orders, cancellation requests, and communications concerning the subscription.

Gatherings and large-order information, including business or organization name, event type, date,

estimated guest count, requested quantities, product preferences, budget information, special instructions, and related communications.

Communications and content you submit, such as feedback, reviews, survey responses, photographs,

social-media messages, customer-support inquiries, flavor suggestions, and other information you choose to provide.

Marketing preferences, including whether you wish to receive promotional emails or text messages.

Information Collected Automatically

Device and browser information, such as IP address, browser type, operating system, device identifiers,

language, and approximate location derived from IP address.

Usage information, such as pages viewed, links clicked, referring pages, time spent, interactions with

forms, cart activity, and website errors.

Cookie and similar technology information collected through cookies, pixels, local storage, software

development kits, and similar tools used for website functionality, analytics, security, personalization, and advertising.

Information from Other Sources

Information from ecommerce, payment, shipping, delivery, subscription, analytics, communications,

and marketing providers that help us operate the Services.

Information from social-media platforms when you interact with FORNO or use social-sharing features,

according to your settings with those platforms.

Information from referral partners, event partners, business customers, gift purchasers, or other

persons who provide your information in connection with an order or delivery.

3. How We Use Personal Information

Provide, operate, maintain, and improve the Services.
Process and fulfill orders, subscriptions, gifts, special orders, refunds, local pickup, and delivery.
Communicate about orders, availability, pickup times, delivery, subscription renewals, payment issues,

service notices, and customer support.

Review and respond to Gatherings, catering-style, corporate gifting, wholesale, partnership, and large-

order requests.

Create and manage customer accounts and preserve order preferences.
Personalize the website and recommend products, collections, recipes, or offers that may interest you.
Send marketing communications where permitted by law and according to your choices.
Administer surveys, promotions, referral programs, and customer feedback.
Detect, prevent, investigate, and address fraud, abuse, chargebacks, unauthorized transactions,

security incidents, or violations of our Terms.

Comply with legal obligations, tax and accounting requirements, food-safety obligations, lawful

requests, and enforcement processes.

Establish, exercise, or defend legal claims and protect the rights, safety, property, and integrity of

FORNO, our customers, and others.

Create aggregated or de-identified information that does not reasonably identify you.

4. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for the business and operational purposes described in this Policy:

Service providers and contractors, including ecommerce hosting, payment processing, subscription

management, website hosting, customer support, email and text communications, analytics, fraud prevention, accounting, tax, legal, pickup, delivery, and fulfillment providers.

Business and event partners when reasonably necessary to coordinate a large order, event, delivery,

collaboration, or promotion requested by you.

Advertising and analytics partners, if enabled, to measure campaigns, understand website use, and

deliver or evaluate advertising. Certain privacy laws may treat some advertising-related disclosures as “sale,” “sharing,” or “targeted advertising,” even when no money is exchanged.

Professional advisers, such as attorneys, accountants, insurers, auditors, and consultants.
Government authorities, law enforcement, courts, regulators, or other parties when required by law or

reasonably necessary to protect rights, safety, property, or prevent fraud or harm.

Parties to a business transaction, such as an actual or proposed merger, financing, acquisition, sale,

reorganization, bankruptcy, or transfer of all or part of our business or assets.

Other parties with your direction, authorization, or consent.

FORNO does not sell personal information for money. If we use advertising technologies that are considered a “sale,” “sharing,” or targeted advertising under applicable law, you may have the right to opt out as described below.

5. Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to keep the website functioning, remember preferences, maintain carts and sessions, prevent fraud, understand traffic and performance, and support marketing. Some cookies are necessary for the website to operate; others may be optional depending on the tools enabled on the site. You may control cookies through your browser settings and, where available, through the website’s cookie- preference tool. Blocking certain cookies may cause portions of the Services to function incorrectly. Browser “Do Not Track” signals are not standardized. Where required by applicable law, we will process recognized universal opt-out preference signals as legally required.

6. Email and Text Communications

You may unsubscribe from marketing emails by using the unsubscribe link in the message. You may opt out of promotional text messages by replying STOP. Message and data rates may apply. Opting out of marketing will not prevent us from sending transactional or service-related communications, such as order confirmations, pickup notices, subscription notices, payment issues, or responses to your requests.

7. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain customer and transaction records, comply with tax, accounting, food-safety, and legal obligations, prevent fraud, resolve disputes, and enforce agreements. Retention periods vary depending on the type of information, the nature of our relationship, and applicable legal requirements. We may retain aggregated or de-identified information for longer periods where permitted by law.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no security system, transmission method, or storage technology is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of suspected unauthorized activity.

9. Your Privacy Rights and Choices

Depending on where you live and whether applicable legal thresholds are met, you may have rights to:

Confirm whether we process your personal information and request access to it.
Request correction of inaccurate personal information.
Request deletion of personal information you provided, subject to legal exceptions.
Request a portable copy of certain personal information.
Opt out of the sale of personal information or processing for targeted advertising, where applicable.
Withdraw consent where processing is based on consent.
Appeal a decision concerning a privacy request, where applicable.
Receive equal service and pricing without unlawful discrimination for exercising privacy rights.

To submit a privacy request, email hello@forno.com with the subject line “Privacy Request,” or use any privacy-request form made available on EnjoyForno.com. Please describe the right you wish to exercise and provide enough information for us to verify and respond to your request. We may request additional information to verify your identity or authority. Authorized agents may submit requests where permitted by law, subject to verification. We will respond within the time required by applicable law. Utah law generally provides covered consumers rights to access, delete, obtain a copy of personal data they provided, and opt out of sale or targeted advertising; beginning July 1, 2026, Utah law also provides a right to request correction of inaccuracies, subject to statutory applicability and exceptions.

10. State-Specific Disclosures

Utah Residents

If FORNO is subject to the Utah Consumer Privacy Act for a particular request, Utah residents may exercise the rights described above. FORNO may deny or limit a request where permitted by law, including where an exception applies or where we cannot reasonably verify the request.

Other U.S. States

Residents of other states may have additional privacy rights under applicable law. We will honor valid requests as required based on your state of residence and the law applicable to FORNO. If required, we will provide any additional state-specific notices or mechanisms through the website.

11. Children’s Privacy

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information online from children under 13. If you believe a child under 13 has provided personal information to us, contact us so we can take appropriate action.

12. Third-Party Services and Links

The Services may contain links to or integrations with third-party websites and services, including Shopify, payment providers, social-media platforms, maps, delivery providers, and other tools. Those third parties operate under their own privacy policies and practices. FORNO is not responsible for the privacy, security, or content of third-party services.

13. Business Transfers

If FORNO or RMB Investments, LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Effective” date at the top indicates when it was last revised. If changes are material, we may provide additional notice as required by law, such as by posting a prominent notice on the website or sending an email to customers for whom we have contact information.