Company: SWAGW
Filing Date: 2025-04-14
Form Type: 10-K
Source: 0001213900-25-031596
Chunk: 213

Company: Stran & Company, Inc.
Filing Date: 2025-04-14
Form: 10-K
Item: Item 1A
Chunk 213
---
 for us to eliminate this risk.

U.S. federal data privacy laws include the CAN-SPAM
Act, which, among other things, restricts data collection and use in connection with CAN-SPAM Act’s opt-out process requirements
for senders of commercial emails; and COPPA, which regulates the collection of information by operators of websites and other electronic
solutions that are directed to children under 13 years of age, although our website and app user terms of service and privacy policy expressly
prohibit children under 13 from submitting information to or on our website or app. These laws and regulations promulgated under these
laws restrict our collection, processing, storage, use and disclosure of personal information, may require us to notify individuals of
our privacy practices and provide individuals with certain rights to prevent the use and disclosure of protected information, and mandate
certain procedures with respect to safeguarding and proper description of stored information.

Moreover, certain laws and regulations of U.S.
states and the EU impose similar or greater data protection requirements and may also subject us to scrutiny or attention from regulatory
authorities. For example, the EU and California have passed comprehensive data privacy laws, the EU GDPR and the CCPA and regulations
promulgated under the CCPA, respectively, which impose data protection obligations on enterprises, including limitations on data uses
and constraints on certain uses of sensitive data. Of particular importance, the CCPA, which became effective on January 1, 2020, limits
how we may collect and use personal information, including by requiring companies that process information relating to California residents
to make disclosures to consumers about their data collection, use and sharing practices, provide consumers with rights to know and delete
personal information and allow consumers to opt out of certain data sharing with third parties. The CCPA also creates an expanded definition
of personal information, imposes special rules on the collection of consumer data from minors, and provides for civil penalties for violations,
as well as a private right of action for data breaches that is expected to increase the likelihood and cost of data breach litigation.
The potential effects of this legislation are far-reaching and may require us to modify our data processing practices and policies and
incur substantial costs and expenses in compliance and potential ligation efforts. Effective January 1, 2023, we also became subject to
the CPRA in California, which expands upon the consumer data use restrictions, penalties and enforcement provisions under the CCPA, and
the VCDPA in Virginia, another comprehensive data