Anti-Spam and Unsolicited Messaging Policy

Effective Date: August 11, 2026 | Last updated: August 11, 2026

Wellness USA ("Company," "we," "us," or "our"), operator of www.hockeyperformanceedge.com (the "Site"), maintains a strict zero-tolerance policy toward spam, unsolicited bulk or commercial messaging, and deceptive email practices. This policy governs all outbound email communications sent by or on behalf of the Company and is designed to comply with the U.S. CAN-SPAM Act, the Canadian Anti-Spam Legislation (CASL), the EU General Data Protection Regulation (GDPR), and industry best practices for sender reputation and inbox deliverability (including SURBL, Spamhaus, and other DNSBL listing criteria).

1. Definition of Spam / Unsolicited Bulk or Commercial Email (UBE/UCE)

For purposes of this policy, "spam" or "UBE/UCE" means any electronic message sent:

• In bulk, to recipients who have not provided verifiable consent or with whom the Company has no pre-existing, legitimate business relationship;
• Without a clear and accurate identification of the sender;
• Using a misleading, deceptive, or falsified subject line, "From" header, routing information, or domain;
• Without a functional and immediate means of opting out of future communications; or
• To an email address obtained through purchase, rental, scraping, harvesting, or any non-consensual method.

We do not send, authorize, or knowingly permit any third party to send such messages using our brand, domain, or infrastructure.

2. Permission-Based Messaging & Opt-In Standard

All commercial and marketing email sent by the Company relies on one of the following lawful bases:

• Verifiable express consent (opt-in). The recipient affirmatively requested communications (e.g., form submission, purchase, account creation, event registration).
• Legitimate business interest / existing relationship. The recipient is an existing customer, client, or business contact and the communication is directly related to that relationship, consistent with GDPR Article 6(1)(f) and CASL's implied-consent provisions.

We do not rely on pre-checked boxes, bundled consent, or ambiguous language to establish permission. Consent records (source, timestamp, and IP address where applicable) are retained for audit and compliance purposes.

3. Unsubscribe & Opt-Out Process

Every commercial email sent by the Company includes:

• A clear, conspicuous, and functional one-click unsubscribe link in the message body or footer;
• A valid reply-to or contact address for opt-out requests submitted directly;
• No requirement for the recipient to log in, pay a fee, provide additional personal information, or take any step beyond confirming the opt-out.

All opt-out requests — whether submitted via the unsubscribe link or by direct email to abuse@hockeyperformanceedge.com — are honored and fully processed within ten (10) business days, consistent with CAN-SPAM requirements. Recipients will not receive further commercial communications after this period unless they subsequently re-opt-in.

4. Zero Tolerance for Purchased, Rented, or Harvested Lists

The Company strictly prohibits:

• Purchasing, renting, leasing, trading, or otherwise acquiring third-party email lists;
• Scraping, harvesting, or automated collection of email addresses from websites, directories, or social platforms;
• Using co-registration, incentivized sign-up, or "opt-out list" practices that do not constitute verifiable opt-in or a legitimate existing relationship;
• Sending on behalf of, or accepting data from, any third party unable to demonstrate lawful, documented consent for each contact.

All contact data used for outbound messaging is sourced directly through Company-owned properties and relationships.

5. Sender Authentication & Technical Compliance

The Company maintains current and valid email authentication records for all sending domains and infrastructure used to deliver messages on behalf of hockeyperformanceedge.com, including:

• SPF (Sender Policy Framework) records authorizing approved sending infrastructure;
• DKIM (DomainKeys Identified Mail) signing on all outbound messages;
• DMARC (Domain-based Message Authentication, Reporting & Conformance) policy enforcement and monitoring.

Outbound sending occurs solely through verified, authenticated infrastructure and vetted email delivery providers. No messages are sent from spoofed, unauthorized, or unauthenticated domains, and any sending platform used by the Company is contractually required to maintain equivalent authentication and abuse-handling standards.

5a. Authorized Sending Domains

The Company sends outbound business development and marketing communications from the following domains, each independently secured with valid SPF, DKIM, and DMARC records:

• hockeyperformanceedge.com — primary brand and transactional/marketing domain
• allhockeyperformanceedge.com — dedicated outbound sending domain, owned and operated by Wellness USA, used to isolate cold-outreach sending reputation from the primary brand domain

No other domain is authorized to send email on behalf of Wellness USA or represent itself as affiliated with hockeyperformanceedge.com. Recipients who receive messages purporting to be from the Company using any domain not listed above should report them immediately as suspected spoofing to abuse@hockeyperformanceedge.com.

6. Prohibition on Deceptive Headers, Subject Lines, and Sender Information

The Company strictly prohibits, in any message sent on its behalf:

• Falsified, forged, or spoofed "From," "Reply-To," or routing header information;
• Subject lines that misrepresent the content, origin, or commercial nature of the message;
• Impersonation of another individual, company, or domain;
• Omission or obscuring of the sender's true identity and physical address.

Every commercial message clearly identifies the Company as the sender and includes accurate, non-deceptive subject matter and header information.

7. Data Protection & GDPR Compliance

For recipients located in the European Economic Area (EEA) or United Kingdom, the Company processes personal data used for email communications in accordance with the GDPR, including lawful basis for processing, data minimization, the right to access, correct, or erase personal data, and the right to withdraw consent at any time without affecting the lawfulness of prior processing. Requests regarding personal data may be directed to abuse@hockeyperformanceedge.com.

8. CASL Compliance (Canadian Recipients)

For recipients located in Canada, the Company sends commercial electronic messages only where express or implied consent exists under CASL, includes accurate sender identification and contact information in every message, and provides an unsubscribe mechanism that functions for at least sixty (60) days after the message is sent and is processed without delay.

9. Reporting Abuse or Policy Violations

If you believe you have received an unsolicited, deceptive, or non-compliant message from Wellness USA or hockeyperformanceedge.com, or if you wish to report a suspected policy violation (including SURBL, Spamhaus, or other blocklist concerns), please contact our abuse team immediately:

• Email: abuse@hockeyperformanceedge.com
• Mailing Address: Wellness USA, Inc., 9220 James Ave S., Bloomington, MN, 55431, US

All abuse reports are investigated promptly, and confirmed violations result in immediate suspension of the responsible sending activity and remediation of affected infrastructure.

10. Enforcement & Policy Updates

Any employee, contractor, vendor, or partner found to violate this policy is subject to immediate suspension of email sending privileges and, where applicable, termination of the business relationship. This policy is reviewed periodically and may be updated to reflect changes in law, technical standards, or industry best practice. The current version is always available at www.hockeyperformanceedge.com/anti-spam/.