LOTUS DISABILITY, INC.
PRIVACY POLICY
Last Updated: August 20, 2025
Lotus Disability, Inc., a Delaware for-profit business corporation and its affiliates and subsidiaries, (collectively, “Lotus Disability”, “we”, “us” or “our”) are committed to protecting your (“you”, “your”, or “user”) privacy and abide by this privacy policy (this “Privacy Policy”). This Privacy Policy explains how we collect, use, disclose, and apply the information collected when you (i) use or access our website, located at https://www.lotusdisability.com (“Website”), (ii) use or access the Lotus Disability platform, in its web form or its mobile application form, downloadable from the Google Play Store or Apple App Store, and its associated services, features, functionality, and content (the “Platform”), and/or (i) receive associated Lotus Disability services (the “Lotus Disability Services”, and collectively, the “Services”). Our Terms of Service (the “Terms of Service”), applicable to both Visitors and Employees, as each is defined below, as found on the Website and the Platform, and as amended from time to time, are expressly incorporated herein by reference and are an integral part hereof.
This Privacy Policy sets forth our policy with respect to information that we collect from you, on or through the Services, that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you (“Personal Information” or “Personal Data”). By using the Services, or otherwise interacting with us, you are agreeing to this Privacy Policy. Please read it carefully. If you do not agree herewith, do not access or use the Services.
For purposes of this Privacy Policy, “users” include and may be further referred to as the following: (i) a “Visitor”, meaning anyone accessing our Website or Platform, for their general informational purposes , (ii) a Lotus Disability “Customer”, meaning any enterprise customer of Lotus Disability who has entered into a formal commercial agreement with Lotus Disability to subscribe to the Platform and/or to receive Lotus Disability Services, as well as any representatives of the enterprise customer who communicate on behalf of the enterprise customer with Lotus, and (iii) a Customer’s “Employee”, meaning any employee of the Customer who is provided with access to the Platform and/or receives Lotus Disability Services, pursuant a formal commercial agreement between Lotus Disability and the Customer, for the employee’s benefit, including as a caregiver, or for the benefit of the person for which they are a caregiver.
1. Changes to this Policy. We may change this Privacy Policy from time to time by publication of an updated version on our Services, which shall become effective immediately upon publication. We encourage you to review our Privacy Policy whenever you access or otherwise use the Services. Your continued access or use of the Services constitutes your acceptance of any updated version of this Privacy Policy, as published. If you have a disability, you may access this Privacy Policy in an alternative format by contacting, legal@lotusdisability.com.
2. How We Collect Information. We may collect information about you by and/or through the following means:
(i) Directly from you, when you provide information to us or interact with us;
(ii) Automatically when you access, utilize or interact with our Services;
(iii) From social networks and other sources of publicly available data;
(iv) Directly from the Customer, when they provide information to us, including, but not limited to, regarding benefit plans, eligibility, and basic information and details regarding the Employee; or
(v) From various third parties, such as an Employee’s insurance company, where you have provided us with consent to contact such third party on your behalf.
3. What Information We Collect. The types of information we collect varies depending on whether you are a “Visitor”, “Customer” or “Employee”.
3.1 Lotus Disability Visitor. When a Visitor accesses or views our Website or otherwise interacts with us, we may collect and process the following types of Personal Data in the usual course of business:
(i) Usage Details about your interaction with our Website, such as the pages which you visited on our Website and about the features you used within the Website;
(ii) Device Information, including the IP address and other details of the device that you use to access our Website (such as the Internet Service Provider, operating system, browser type, browser activity, timestamps, and/or mobile network information);
(iii) Location information, as we may use publicly available sources to approximate your geographic region and Internet Service Provider based on your IP address;
(iv) Contact information, such as your name, e-mail address, phone number, physical address, account information and any other information you choose to include when you interact and/or communicate with us through our Website, including through any interactive feature, online contact form, by e-mail, or any other communication mechanism;
(v) Survey information in response to surveys or questionnaires that we may send, including for feedback and research purposes; and
(vi) Social Media Data, whereby when you interact with any of our pages on social media services, like Facebook, Twitter, Instagram, and LinkedIn (our “Social Media Pages”), we will collect the Personal Data that you elect to provide to us, such as your contact details. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.
3.2 Lotus Disability Customer or Employee. If you are a Lotus Disability Customer, including authorized users of such Customer, or an Employee, including authorized users of such Employee, we may collect and process the following types of Personal Data via the provision of the Services:
(i) Transactional information, including payment information and payment history if you engage in transactions through the Services or with us generally. All credit card information is stored by a third-party payment processor selected by us, from time to time, and such payment services are governed by such third-party payment processor’s terms of service and privacy policy. For the avoidance of doubt, your credit card information is never stored by Lotus Disability or on Lotus Disability’s servers.
(ii) Contact information, such as your name, company name, e-mail address, phone number, physical/mailing address, account information and any other information you choose to include when you interact and/or communicate with us through our Services, including through any interactive feature, online contact form, by e-mail, or any other communication mechanism.
(iii) Account, profile, and subscription information, such as your username and password, name, company name, e-mail address, phone number, physical/mailing address, and employee identification number, and benefit plan, when you subscribe to, register for access to the Services, and/or sign up for an account through the Services.
(iv) Customer/Employee Data, as certain features and functionalities of the Services may allow you to upload, deliver, submit, store, transmit, integrate or otherwise make available certain information, documents, text, files, images, graphics, data, and other materials and which, for the avoidance of doubt, may include certain Personal Data of the Customer’s representatives as well as Employees and, if an Employee is a caregiver, the person for which the Employee cares for.
(v) Usage Details about your access to, use of, and interaction with our Services and about the features you use within the Services as well as the amount of the Services that you use, and the amount of time spent on the Services.
(vi) Device Information, including the IP address and other details of the device that you use to access our Services (such as the Internet Service Provider, operating system, device name, browser type, browser activity, timestamps, and/or mobile network information).
(vii) Location information, as we may use publicly available sources to approximate your geographic region and Internet Service Provider based on your IP address.
(viii) Crash and Error Information, whereby if the Services crash or return an error, we may collect certain data to determine the cause of the error using first or third-party services. The crash or error information collected may include, e.g., the following: device IP address, device name, operating system version, application configurations(s), timestamps, and other statistics.
(ix) Survey information in response to surveys or questionnaires that we may send, including for feedback and research purposes.
(x) Social Media Data, whereby when you interact with our Social Media Pages, we will collect Personal Data that you elect to provide to us, such as your contact details. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.
4. Disclaimers.
(a) Lotus Disability is not a licensed health care provider, and the Services are not intended to be, and shall not be construed as, medical or health advice. The Services are provided for informational purposes only and are not a substitute for professional medical diagnosis, treatment, or advice. Always seek the guidance of a qualified health care provider with any questions you may have regarding a medical condition or treatment. Use of the Services does not create a provider-patient relationship between you and Lotus Disability.
(b) To the extent that you provide us with any information that would be considered Protected Health Information (“PHI”) as defined under applicable law, including the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), you represent and warrant that you have the legal right and authority to do so, and you expressly consent to Lotus Disability’s use, review, analysis, processing, and handling of such PHI for the purpose of providing the Lotus Disability Services. Examples of PHI may include medical records, healthcare provider documentation, or other information relating to a disability, injury, or health condition. You acknowledge that such PHI is provided voluntarily, i.e., if you do not wish to share PHI with us, you are not required to do so, and that Lotus Disability will handle the receipt and use of PHI in accordance with Lotus Disability’s privacy practices. However, please note that we are not a HIPAA “covered entity” and we do not act as a “business associate” as those terms are defined under HIPAA, unless we have explicitly agreed to do so in writing through a separate agreement.
5. Additional Information We May Obtain. We may obtain information about you from third parties who help us provide our Services to you. We may also obtain some information from our marketing partners in order to inform you about products or services that we think you might be interested in. Finally, we may obtain information that does not identify you directly, but which is later used in a way that may later directly identify you. We may combine that general information with your information to provide related services to you.
6. Cookies and Other Technologies. Our Services may use “cookies” or “other technologies” (such as “pixel tags”, “web beacons”, “clear GIFs”, links in e-mails, JavaScript, device IDs assigned by Google or Apple, or similar technologies) to collect information and support certain features of our Services. Cookies and other technologies allow us and third parties to obtain information about your visits to our Services, including analyzing your visiting patterns. Although you are not required to accept cookies when you visit our Services, you may be unable to use all of the functionality of our Services if your browser restricts our cookies. We use this information to process your requests and to deliver online and mobile advertisements, messages, and content from us and others that are specific to your interests. The information we collect from your web browser and from cookies and other technologies does not identify you personally but in some cases, we may link it to personally identifiable information.
6.1 Cookies. Below, we explain the different types of cookies that may be used on the Services.
6.1.1 Necessary Cookies. Necessary cookies are essential to enable your use of the Services, such as assisting with your account login, so we can show you the appropriate experience and features such as your account information, service/transaction history and other account settings. They may also provide authentication and site security.
6.1.2 Preference Cookies. Performance cookies are used to remember your settings and preferences, and to improve your experience on our Services.
6.1.3 Session Cookies. Session cookies are stored only temporarily during a browsing session and are deleted from your device when you close the browser. We use session cookies to support the functionality of our Services and to understand your use of thereof, which pages you visit, which links you use and how long you stay on each page.
6.1.4 Analytics Cookies. Analytics cookies help collect information about your use of our Services and enable us to improve the way it works. These cookies give us aggregated information that we use to monitor site performance, count page visits, spot technical errors, see how users reach the Services, and measure the effectiveness of marketing (including e-mails).
6.1.5 Marketing Cookies. Marketing cookies are used to show users display advertisements across websites such as those on Facebook, LinkedIn, Twitter, or the general web. The intent is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
6.1.6 Unclassified Cookies. Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.
6.2 Other Technologies. In addition to cookies, we may use other similar technologies, like pixel tags (also known as web beacons and clear GIFs), to, among other things, track the actions of users of the Services (about usage including e-mail recipients), measure the success of our marketing campaigns, and compile statistics of the Services and response rates.
7. How We Use Your Information.
7.1 For Our Legitimate Business Interests. We may use the Personal Data that we collect for our legitimate interests and the limited purpose of providing the Services and as permitted by applicable law. These purposes include circumstances where it is necessary to provide or fulfill the Services requested by or for you or where you have given us your express consent. As such, we may use your Personal Data to:
(i) To complete transactions between you and Lotus Disability;
(ii) Provide an individualized support plan and active management for Employees;
(iii) Provide the information and Services that you request;
(iv) Connect Employees, including their caregivers, to communities, resources, and tools;
(v) Contact the Customer and Employees, via phone, text message, and phone, in our provision of/for the purposes of us providing the requested Services to you;
(vi) Service your account and provide you with effective customer service;
(vii) Better understand your needs and interests, and provide you with a personalized experience when you use our Services;
(viii) Contact you with special offers and other information we believe will be of interest to you (in accordance with any privacy preferences you have expressed to us);
(ix) Contact you with information that you have requested, and notices related to your use of our Services;
(x) Send you commercial or marketing/advertising messages, including, without limitation, newsletters and e-mail communications about our offerings or Services;
(xi) Invite you to participate in surveys and to provide feedback to us (in accordance with any privacy preferences you have expressed to us);
(xii) Improve our Services, develop new services, improve our marketing and promotional efforts, and improve the content, functionality, and usability of the Services;
(xiii) Enforce our other policies or agreements, such as any agreement between us and a specific Customer or Employee with respect to such Customer’s or Employee’s subscription or ability to receive certain access to and use of the Services;
(xiv) Promote security and protect against and prevent fraud, claims, and other liabilities;
(xv) Verify the information that you provide to us as well as the representations and warranties that you make to us in a certain agreement or via the Services;
(xvi) Meet our internal and external audit obligations; and
(xviii) To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.
7.2 With Your Consent. In some cases, we will ask you for consent to use your Personal Data for specific purposes. If we do, we will make sure that you can revoke your consent in accordance with the “Your Choices” section below.
7.3 Other Purposes. If we intend to use any Personal Data in any manner that is not consistent with this Privacy Policy, you will be informed of such anticipated use prior to, or at the time that, the Personal Data is collected, or we will obtain your consent subsequent to such collection, but prior to such use.
7.4 Aggregated Personal Data. We may aggregate and/or de-identify information collected through the Services and from other sources so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). We may use Aggregate/De-Identified Information for any purpose, including, without limitation, for research, analytics, and marketing purposes.
8. How We Share and Disclose Information.
8.1 We Do Not Sell Personal Data. We do not sell or otherwise disclose Personal Data that we collect about you, except as described herein or otherwise disclosed to you at the time the Personal Data is collected.
8.2 Service Providers; Business Partners. We provide access to or share your Personal Data with select third parties, including, but not limited to, business partners, service providers, subcontractors, and sub-processors (collectively, the “Service Providers”), who perform services on our behalf. Pursuant to our instructions, these third parties will access, process, or store Personal Data in the course of performing their duties to us. We take commercially reasonable steps to ensure that our Service Providers adhere to the security standards that we apply to your Personal Data. Our Service Providers provide a variety of services to us, including, for example, billing, accounting, sales, marketing, analytics, research, community support, benefit resources, caregiver resources, data storage, payment processing, and legal services.
8.3 Customers. If you are an Employee, we may share with your employer, to the extent that your employer is a Customer through which you have access to the Services, the fact that you are utilizing or have utilized the Services and such information required to identify you to your employer, i.e., the Customer, such as your employee identification number, email, or name. Such identifying information will not include sensitive Personal Data. We will not disclose any details about the Personal Data that you provide/enter via the Services, other than as provided herein, unless otherwise authorized by you to do so.
8.4 Your Consent. We may ask for your consent to share your Personal Data with certain other third parties and your ability to use the Services may be impacted by your denial of any requested consent. We may share your information for other purposes pursuant to your consent or with your further direction.
8.5 Settings. We may share information consistent with your setting selections within the Services, as such settings functionality may be in effect from time to time.
8.6 Aggregate/De-Identified Data. From time to time, we may share Aggregate/De-Identified Information about the use of the Services, such as by publishing a report on usage trends. The sharing of such data is unrestricted.
8.7 Legal Reasons. We may also disclose your Personal Data when we, in good faith, believe disclosure is appropriate to comply with the law, a court order, or a subpoena. We may also disclose your Personal Data, e.g., to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of our Services; to enforce or apply our policies or other agreements; or to protect our own rights or property or the rights, property, or safety of our users or others. We will attempt to notify our users about legal demands for their Personal Data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague, or lack proper authority.
8.8 Sale, Merger, or Other Business Transfer. As we continue to develop our business, we may buy, merge, or partner with other companies. In such transactions (including in contemplation of such transactions), Personal Data may be among the transferred assets. If a portion or all of our assets are sold or transferred to a third party, your Personal Data would likely be one of the transferred business assets. If such transfer is subject to additional mandatory restrictions under applicable law, we will comply with such restrictions.
9. Your Choices.
(a) You can manage cookies through your web browser. Most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable existing cookies. You can find out how to do this for your particular browser by clicking “help” on your browser’s menu or by visiting www.allaboutcookies.org. Please note, however, that without cookies you may not be able to take full advantage of all our Services’ features. In addition to the browser-based controls, you can manage third-party cookies by visiting www.aboutads.info/choices/. Alternatively, for some devices, you may use your device’s platform controls in your settings to exercise choice. Please note you must separately opt-out in each browser and on each device. Advertisements on third-party websites may have been directed to you based on information collected by advertising partners over time and across various websites. These advertisements provide a mechanism to opt out of the advertising partners’ use of this information for interest-based advertising purposes.
(b) You have a choice, at any time, to stop us from sending you e-mails and/or text messages for marketing purposes by following the “unsubscribe” link included in these e-mails or by replying “STOP” to any text message. Please note that despite any indicated e-mail or text message marketing preferences, we may continue to send you administrative e-mails and text message regarding Lotus Disability and the Services, including, for example, notices of updates to our policies or this Privacy Policy if we choose to provide such notices to you in this manner.
(c) If you do not provide the information that we need to provide the Services, we may not be able to provide you with the Services or certain functionalities. We will tell you what Personal Data that you must provide in order to use the Services and its related functionalities or services.
(d) Some browsers offer a “do not track” (“DNT”) option. Since no common industry or legal standard for DNT has been adopted by industry groups, technology companies, or regulators, we do not respond to DNT signals. We will make reasonable efforts to continue to monitor developments around DNT browser technology and the implementation of a standard.
10. Data Processing and Data Transfers. By accessing or using the Services or otherwise providing information to us, you consent to the processing and transfer of information in and to the U.S. and other countries and territories, which may have different privacy laws from your country of residence. In such instances, we shall ensure that the transfer of your Personal Information is carried out in accordance with applicable privacy laws and, in particular, that appropriate contractual, technical, and organizational measures are in place.
11. Security. We take security seriously and have implemented administrative, physical, and technological measures to protect your information from unauthorized access, loss, misuse, disclosure, alteration and destruction. If you wish to report a security concern or if you have a question around security, please submit your inquiry to us in accordance with the “Contact Us” section.
12. Additional Information for Residents of Certain U.S. States. If you are a U.S. resident, we process your Personal Data in accordance with applicable U.S. state data privacy laws. Depending on where you live (including California, Colorado, Connecticut, Oregon, Nevada, Utah, Virginia, Washington, etc.), you may be entitled to certain rights with respect to your Personal Information, as further described in Exhibit A.
13. Personal Information Retention. We will retain information required to comply with privacy requests, manage active accounts, as required by law, in order to resolve disputes, or enforce our agreements. We may also retain copies of your information for disaster recovery purposes.
14. Links to Third Party Websites. The Services may contain links to other websites not operated or controlled by us, including social media services (“Third Party Websites”). The information that you share with Third Party Websites will be governed by the specific privacy policies and terms of service of the Third Party Websites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these websites. Please contact the Third Party Websites directly for information on their privacy practices and policies.
15. Privacy of Children. We are committed to protecting the privacy of children and following all laws, regulations and guidelines in respect thereof. We do not knowingly accept or solicit Personal Data from a user who is known to be under the age of thirteen (13). As such, if you are a user who is under the age of thirteen (13), please do not use our Services, including our Website, to provide, submit or transmit to us any Personal Data, and, for the avoidance of doubt, we will not be liable or responsible for any Personal Data which is provided, submitted, or transmitted to us by a user who is under the age of thirteen (13). By using the Platform or receiving Lotus Disability Services, you represent and warrant that you have not and will not provide any personal information of a child under the age of thirteen (13) if you are not such child’s legal parent or guardian, or without having obtained verifiable consent from the legal parent or guardian of such child, in full compliance with COPPA and any other applicable laws. If you have concerns regarding the privacy of children, please contact us in accordance with the “Contact Us” section.
16. Contact Us. If you have any questions or concerns about our Privacy Policy, please contact us via e-mail at, legal@lotusdisabilty.com.
[Privacy Policy Continued on Next Page]
EXHIBIT A
U.S. State-Specific Privacy Information
This Exhibit A is designed to be consistent with California, Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Minnesota, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia privacy laws, and provides you with certain U.S. State-specific disclosures and rights which may be applicable and afforded to you depending on your U.S. State of residency.
Additional Information for California Residents
If you are a resident of the State of California, you may have certain rights afforded to you under the California Consumer Privacy Act or the “CCPA”, as amended by the California Privacy Rights Act.
We collect Personal Information for the business and commercial purposes described in the “How We Use Your Information” section, and we share Personal Information with the categories of third parties described in “How We Share and Disclose Information” section. We do not ‘sell’ (as such term is defined in the CCPA) the Personal Information that we collect (and will not sell it without providing you with a right to opt-out). Please note that we may use/employ third party Cookies for our advertising purposes as further described in the “Information We Automatically Collect” section.
California law, if applicable to us, provides some California residents with the rights listed below:
(i) You may have the right to request that we disclose to you the Personal Information we collect, use, or disclose, and information about our data practices.
(ii) You may have the right to request that we delete your Personal Information that we have collected from you.
(iii) You may have the right to request that we correct your inaccurate Personal Information.
(iv) You may have the right to exercise control over our collection and processing of certain sensitive Personal Information.
(v) You have the right not to receive retaliatory or discriminatory treatment for exercising these rights.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under California law, please contact us via any method which may be specified in the “Contact Us” section. In order to verify your request, we may require you to provide us with certain information to be used solely for the purpose of verifying your identity.
Under the CCPA, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf. We may request that your authorized agent have written permission from you to make requests on your behalf and may need to verify your authorized agent’s identity.
Additional Information for Colorado Residents
The Colorado Privacy Act, if applicable to us, provides some Colorado residents with the rights listed below:
(i) You may have the right to know and see what Personal Information we have collected about you in a portable format.
(ii) You may have the right to request that we correct your inaccurate Personal Information.
(iii) You may have the right to request that we delete the Personal Information we have collected about you.
(iv) You may have the right to opt out of targeted advertising and the sale of Personal Information, as each is defined under Colorado law; however, please note that we do not currently perform or conduct any of the foregoing.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Colorado law, please contact us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account. You may designate another person to serve as your authorized agent and to exercise your opt-out right on your behalf; however, we may request certain information in order to verify your identity and the authorized agent’s authority to act on your behalf.
Additional Information for Connecticut Residents
The Connecticut Data Privacy Act, if applicable to us, provides some Connecticut residents with the rights listed below:
(i) You may have the right to know and see what Personal Information we have collected about you in a portable format.
(ii) You may have the right to request that we correct your inaccurate Personal Information.
(iii) You may have the right to request that we delete the Personal Information we have collected about you.
(iv) You may have the right to opt-out of targeted advertising, the sale of Personal Information, and automated profiling, as each is defined under Connecticut law; however, please note that we do not currently perform or conduct any of the foregoing.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Connecticut law, please contact us via any method which may be specified in the “Contact Us” section.
Additional Information for Delaware Residents
If you are a Delaware resident, pursuant to the Delaware Personal Information Privacy Act, we must share with you that:
(i) We collect Personal Information for the business and commercial purposes described in the “How We Use Your Information” section;
(ii) We may share your Personal Information to third parties as described in the “How We Share and Disclose Your Information” section; and
(iii) We collect the categories of Personal Information described in the “What Information We Collect” section.
Delaware law, if applicable to us, provides some Delaware residents with the rights listed below:
(i) You may have the right to know and see what Personal Information we have collected about you in a portable format.
(ii) You may have the right to request that we correct inaccuracies in the Personal Information we have collected about you.
(iii) You may have the right to request that we delete the Personal Information you provided or that we have collected about you.
(iv) You may have the right to opt-out of targeted advertising, the sale of Person Data, and automated profiling, as each is defined under Delaware law; however, please note that we do not currently perform or conduct any of the foregoing.
(v) You may have the right to obtain a list of the specific third parties to which the Personal Information was disclosed.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Delaware law, please contact us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account. You may designate another person to serve as your authorized agent and to exercise your opt-out right on your behalf; however, we may request certain information in order to verify your identity and the authorized agent’s authority to act on your behalf.
Additional Information for Florida Residents
If you are a Florida resident, pursuant to the Florida Digital Bill of Rights, we must share with you that:
(i) We collect Personal Information for the business and commercial purposes described in the “How We Use Your Information” section;
(ii) We may share your Personal Information to third parties as described in the “How We Share and Disclose Information” section; and
(iii) We collect the categories of Personal Information described in the “What Information We Collect” section.
Florida law, if applicable to us, provides some Florida residents with the rights listed below:
(i) You may have the right to know and see what Personal Information we have collected about you in a portable format.
(ii) You may have the right to request that we correct inaccuracies in the Personal Information we have collected about you.
(iii) You may have the right to request that we delete the Personal Information you provided or we have collected about you.
(iv) You may have the right to opt-out of targeted advertising, the sale of Personal Information, and automated profiling, as each is defined under Florida law; however, please note that we do not currently perform or conduct any of the foregoing.
(v) You may have the right to opt-out of the collection and processing of sensitive data, as defined under Florida law.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Florida law, please contact us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account.
Additional Information for Iowa Residents
If you are an Iowa resident, pursuant to the Iowa Consumer Data Protection Act, we must share with you that:
(i) We collect Personal Information for the business and commercial purposes described in the “How We Use Your Information” section;
(ii) We may share your Personal Information to third parties as described in the “How We Share and Disclose Information” section; and
(iii) We collect the categories of Personal Information described in the “What Information We Collect” section.
Iowa law, if applicable to us, provides some Iowa residents with the rights listed below:
(i) You may have the right to know and see what Personal Information we have collected about you in a portable format.
(ii) You may have the right to request that we delete the Personal Information you provided or that we have collected about you.
(iii) You may have the right to opt-out of the sale of Personal Information, as such is defined under Iowa law; however, please note that we do not currently sell Personal Information.
To request deletion of your Personal Information, or to exercise any other privacy rights under Iowa law, please contact us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account.
Additional Information for Montana Residents
If you are a Montana resident, pursuant to the Montana Consumer Data Privacy Act, we must share with you that:
(i) We collect Personal Information for the business and commercial purposes described in the “How We Use Your Information” section;
(ii) We may share your Personal Information to third parties as described in the “How We Share and Disclose Information” section; and
(iii) We collect the categories of Personal Information described in the “What Information We Collect” section.
Montana law, if applicable to us, provides some Montana residents with the rights listed below:
(i) You may have the right to know and see what Personal Information we have collected about you in a portable format.
(ii) You may have the right to request that we correct inaccuracies in the Personal Information we have collected about you.
(iii) You may have the right to request that we delete the Personal Information you provided or that we have collected about you.
(iv) You may have the right to opt out of targeted advertising, the sale of Personal Information, and automated profiling, as each is defined under Montana law; however, please note that we do not currently perform or conduct any of the foregoing.
(v) You may have the right to obtain a list of the specific third parties to which the Personal Information was disclosed.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Montana law, please contact us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account. You may designate another person to serve as your authorized agent and to exercise your opt-out right on your behalf; however, we may request certain information in order to verify your identity and the authorized agent’s authority to act on your behalf.
Additional Information for Minnesota Residents
If you are a Minnesota resident, pursuant to the Minnesota Consumer Data Privacy Act, we must share with you that:
(i) We collect and process the categories of Personal Information described in the “What Information We Collect” section;
(ii) We process Personal Information for the business and commercial purposes described in the “How We Use Your Information” section;
(iii) We may share the categories of Personal Information described in the “How We Share and Disclose Information”; and
(iv) We may retain Personal Information according to the “Personal Information Retention” section.
Minnesota law, if applicable to us, provides some Minnesota residents with the rights listed below:
(i) You may have the right to receive confirmation as to whether we are processing your Personal Information and the right to access such Personal Information.
(ii) You may have the right to request that we correct inaccuracies in the Personal Information we have collected about you; however, in deciding whether to comply with such request, we may take into account the nature of the Personal Information and the purpose(s) for processing the Personal Information.
(iii) You may have the right to request that we delete the Personal Information you provided or that we have collected about you.
(iv) If the such data is available in a digital format, you may have the right to receive a copy of your Personal Information that you previously provided to us in a portable format and, to the extent technically feasible, in a readily usable format that allows you to transmit the data to another controller without hinderance where the processing is carried out by automated means.
(v) You may have the right to opt-out from our processing of your Personal Information for any of the following purposes: (a) targeted advertising, (b) the sale of your Personal Information, or (c) profiling in furtherance of automated decisions that produce a legal or similarly significant effect concerning yourself; however, please note that we do not, at this time, process your Personal Information for any of the above-mentioned purposes.
(vi) If the right in the above (v) is exercised, you may have the right to question the result of the profiling, to be informed of the reason that the profiling resulted in the decision, and, if feasible, to be informed of what actions you might have taken to secure a different decision and the actions you might do to secure a different decision in the future. You have the right to review your Personal Information used in profiling. If the decision is determined to have been based upon inaccurate Personal Information, taking into account the nature of the Personal Information and the purpose(s) of the processing, you have the right to have the data corrected and the profiling decision reevaluated based on the corrected data.
(vii) You may have the right to obtain a list of specific third parties to which we have disclosed your Personal Information, if available, and, if not available, a list of specific third parties to which we have provided any consumer’s Personal Information.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Minnesota law, please contact us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account. You may designate another person to serve as your authorized agent and to exercise your opt-out right on your behalf concerning processing for the purposes of targeted advertising and the sale of your Personal Information; however, we may request certain information in order to verify your identity and the authorized agent’s authority to act on your behalf.
Additional Information for Nebraska Residents
If you are a Nebraska resident, pursuant to the Nebraska Data Privacy Act, we must share with you that:
(i) We collect Personal Information for the business and commercial purposes described in the “How We Use Your Information” section;
(ii) We may share your Personal Information to third parties as described in the “How We Share and Disclose Information” section; and
(iii) We collect the categories of Personal Information described in the “What Information We Collect” section.
Nebraska law, if applicable to us, provides some Nebraska residents with the rights listed below:
(i) You may have the right to know and see what Personal Information we have collected about you in a portable format.
(ii) You may have the right to request that we correct inaccuracies in the Personal Information we have collected about you.
(iii) You may have the right to request that we delete the Personal Information you provided or that we have collected about you.
(iv) You may have the right to opt-out of targeted advertising, the sale of Personal Information, and automated profiling, as each is defined under Nebraska law; however, please note that we do not currently perform or conduct any of the foregoing.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Nebraska law, please contact us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account.
Additional Information for Nevada Residents
If you are a Nevada resident, under Privacy and Security of Personal Information Chapter of the Nevada Revised Statutes Section 603A, we are required to provide you with the following:
(i) We may collect certain covered information (as defined under Nevada Law) when you use or visit our Website, including, but not limited to first and last name, home or other physical address, e-mail address, and telephone number;
(ii) We may share your covered information to third parties as described in the “How We Share and Disclose Information” section; and
(iii) Third parties may collect covered information about your online activities over time and across different internet websites or online websites when you use our Website.
Under Nevada law, certain Nevada consumers may opt-out of the sale of “personally identifiable information” for monetary consideration (as such terms are defined under Nevada law) to a person for that person to license or sell such information to additional persons. We do not engage in such activity; however, if you are a Nevada resident who has provided “personally identifiable information” to us via the Services, you may submit a request to opt-out of any potential future sales under Nevada law by contacting us via any other which may be specified in the “Contact Us” section. Please note we will take reasonable steps to verify your identity and the authenticity of the request. Once verified, we will maintain your request in the event our practices change.
Additional Information for New Hampshire Residents
If you are a New Hampshire resident, pursuant to Title LII, Chapter 507-H: Expectation of Privacy of the New Hampshire Revised Statutes Annotated, we must share with you that:
(i) We collect Personal Information for the business and commercial purposes described in the “How We Use Your Information” section;
(ii) We may share your Personal Information to third parties as described in the “How We Share and Disclose Information” section; and
(iii) We collect the categories of Personal Information described in the “What Information We Collect” section.
New Hampshire law, if applicable to us, provides some New Hampshire residents with the rights listed below:
(i) You may have the right to know and see what Personal Information we have collected about you in a portable format.
(ii) You may have the right to request that we correct inaccuracies in the Personal Information we have collected about you.
(iii) You may have the right to request that we delete the Personal Information you provided or that we have collected about you.
(iv) You may have the right to opt-out of targeted advertising, the sale of Personal Information, and automated profiling, as each is defined under New Hampshire law; however, please note that we do not currently perform or conduct any of the foregoing.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under New Hampshire law, please contact us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account.
Additional Information for New Jersey Residents
If you are a New Jersey resident, pursuant to Title 56, Chapter 266 of the New Jersey Revised Statutes, we must share with you that:
(i) We collect Personal Information for the business and commercial purposes described in the “How We Use Your Information” section;
(ii) We may share your Personal Information to third parties as described in the “How We Share and Disclose Information” section; and
(iii) We collect the categories of Personal Information described in the “What Information We Collect” section.
New Jersey law, if applicable to us, provides some New Jersey residents with the rights listed below:
(i) You may have the right to know and see what Personal Information we have collected about you in a portable format.
(ii) You may have the right to request that we correct inaccuracies in the Personal Information we have collected about you.
(iii) You may have the right to request that we delete the Personal Information you provided or that we have collected about you.
(iv) You may have the right to opt-out of targeted advertising, the sale of Personal Information, and automated profiling, as each is defined under New Jersey law; however, please note that we do not currently perform or conduct any of the foregoing.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under New Jersey law, please contact us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account.
Additional Information for Oregon Residents
If you are an Oregon resident, pursuant to the Oregon Consumer Privacy Act, we must share with you that:
(i) We collect and process the categories of Personal Information described in the “What Information We Collect” section;
(ii) We process Personal Information for the business and commercial purposes described in the “How We Use Your Information” section; and
(iii) We may share the categories of Personal Information described in the “What Information We Collect” section with the categories of third parties set forth in the “How We Share and Disclose Information” section.
Oregon Law, if applicable to us, provides some Oregon residents with the rights listed below:
(i) You may have the right to receive confirmation as to whether we are processing or have processed your Personal Information and the categories of Personal Information that we are processing or have processed.
(ii) You may have the right to receive, at our option and sole discretion, a list of specific third parties, other than natural persons, to which the we have disclosed your specific Personal Information to or any Personal Information to, generally.
(iii) You may have the right to receive a copy of all of your Personal Information that we have processed or are processing in a portable format.
(iv) You may have the right to request that we correct inaccurate Personal Information; however, in deciding whether to comply with such request, we may take into account the nature of the Personal Information and the purpose(s) for processing the Personal Information.
(v) You may have the right to request that we delete your Personal Information, including your Personal Information which you have provided to us, your Personal Information which we have obtained from another source, and derived data.
(vi) You may have the right to opt-out from our processing of your Personal Information for any of the following purposes: (a) targeted advertising, (b) selling your Personal Information, or (c) profiling in furtherance of decisions that produce legal effects or effects of similar significance; however, please note that we do not, at this time, process your Personal Information for any of the above-mentioned purposes.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Oregon law, please contact us via any method which may be specified in the “Contact Us” section. If you would like to appeal our refusal to take action on a prior submitted request, you may do so by submitting an appeal to us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account. You may designate another person to serve as your authorized agent and to act on your behalf to opt-out of the processing of your Personal Information under specifically Section (vi) above; however, we may request certain information in order to verify your identity and the authorized agent’s authority to act on your behalf.
Additional information for Tennessee Residents
If you are a Tennessee resident, pursuant to the Tennessee Information Protection Act, we must share with you that:
(i) We collect and process the categories of Personal Information described in the “What Information Do We Collect?” section;
(ii) We process Personal Information for the business and commercial purposes described in the “How Do We Use the Information That You Provide to Us?” section; and
(iii) We may share the categories of Personal Information described in the “What Information Do We Collect?” section with the categories of third parties set forth in the “External Transfer: How Do We Share Your Information?” section.
Tennessee law, if applicable to us, provides some Tennessee residents with the rights listed below:
(i) You may have the right to receive confirmation as to whether we are processing your Personal Information and the right to access such Personal Information.
(ii) You may have the right to request that we correct inaccuracies with respect to your Personal Information; however, in deciding whether to comply with such request, we may take into account the nature of the Personal Information and the purpose(s) for processing the Personal Information.
(iii) You may have the right to request that we delete your Personal Information which you provided or that we have collected about you; however, we may not delete information that we maintain or use as aggregate or de-identified data provided it is not linked to a specific consumer.
(iv) If such data is available in a digital format, you may have the right to receive a copy of your Personal Information that you previously provided to us in a portable format and, to the extent technically feasible, in a readily usable format that allows you to transmit the data to another controller without hindrance.
(v) You may have the right to opt-out from our selling of your Personal Information; however, please note that we do not currently sell Personal Information.
(vi) If we sold or disclosed your Personal Information, you may request that we share: (a) the categories of Personal Information shared, (b) the categories of third parties to which the Personal Information was sold, and (c) the categories of Personal Information we disclosed for a business purpose; however, please note that we do not currently sell Personal Information.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Tennessee law, please contact us via any method which may be specified in the “Contact Us” section. If you would like to appeal our refusal to take action on a prior submitted request, you may do so by submitting an appeal to us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account.
Additional information for Texas Residents
If you are a Texas resident, pursuant to the Texas Data and Privacy Security Act, we must share with you that:
(i) We collect and process the categories of Personal Information described in the “What Information We Collect” section;
(ii) We process Personal Information for the business and commercial purposes described in the “How We Use Your Information” section; and
(iii) We may share the categories of Personal Information described in the “What Information We Collect” section with the categories of third parties set forth in the “How We Share and Disclose Information” section.
Texas law, if applicable to us, provides some Texas residents with the rights listed below:
(i) You may have the right to receive confirmation as to whether we are processing your Personal Information and the right to access such Personal Information.
(ii) You may have the right to request that we correct inaccuracies with respect to your Personal Information; however, in deciding whether to comply with such a request, we may take into account the nature of the Personal Information and the purpose(s) for processing the Personal Information.
(iii) You may have the right to request that we delete your Personal Information which you provided or that we have collected about you.
(iv) If such data is available in a digital format, you may have the right to receive a copy of your Personal Information that you previously provided to us in a portable format and, to the extent technically feasible, in a readily usable format that allows you to transmit the data to another controller without hindrance.
(v) You may have the right to opt-out from our processing of your Personal Information for any of the following purposes: (a) targeted advertising, (b) the sale of your Personal Information, or (c) profiling in furtherance of decisions that produce a legal or similarly significant effect concerning yourself; however, please note that we do not, at this time, process your Personal Information for any of the above-mentioned purposes.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Texas law, please contact us via any method which may be specified in the “Contact Us” section. If you would like to appeal our refusal to take action on a prior submitted request, you may do so by submitting an appeal to us via any method which may be specified in the “Contact Us” section.
Please note that to respond to some rights we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account. You may designate another person to serve as your authorized agent and to act on your behalf to opt-out of the processing of your Personal Information under specifically Section (v)(a)-(b) above; however, we may request certain information in order to verify your identity and the authorized agent’s authority to act on your behalf.
Additional Information for Utah Residents
If you are a Utah resident, pursuant to the Utah Consumer Privacy Act, we must share with you that:
(i) We collect Personal Information for the business and commercial purposes described in the “How We Use Your Information” section;
(ii) We may share your Personal Information to third parties as described in the “How We Share and Disclose Information” section; and
(iii) We collect the categories of Personal Information described in the “What Information We Collect” section.
Utah law, if applicable to us, provides some Utah residents with the rights listed below:
(i) You may have the right to know and see what Personal Information we have collected about you in a portable format.
(ii) You may have the right to request that we delete the Personal Information we have collected about you.
(iii) You may have the right to opt-out of targeted advertising and the sale of Personal Information, as each is defined under Utah law; however, please note that we do not currently perform or conduct any of the foregoing.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Utah law, please contact us via any method which may be specified in the “Contact Us” section.
Additional Information for Virginia Residents
If you are a Virginia resident, pursuant to the Virginia Consumer Privacy Act, we must share with you that:
(i) We collect Personal Information for the business and commercial purposes described in the “How We Use Your Information” section;
(ii) We may share your Personal Information to third parties as described in the “How We Share and Disclose Information” section; and
(iii) We collect the categories of Personal Information described in the “What Information We Collect” section.
Virginia law, if applicable to us, provides some Virginia residents with the rights listed below:
(i) You may have the right to know and see what Personal Information we have collected about you.
(ii) You may have the right to request that we correct your inaccurate Personal Information.
(iii) You may have the right to request that we delete the Personal Information we have collected about you.
(iv) You may have the right to opt-out of targeted advertising, the sale of Personal Information, and automated profiling, as each is defined under Virginia law; however, please note that we do not currently perform or conduct any of the foregoing.
To request access to or deletion of your Personal Information, or to exercise any other privacy rights under Virginia law, please contact us via any method which may be specified in the “Contact Us” section.
[End of Exhibit A of Privacy Policy]
[End of Privacy Policy]