Your rights as a California consumer under the CCPA

Right to know

You have the right to know the following, which we will provide to you after we receive a verifiable request from you:

• The categories of personal information we have collected about you;
• The categories of sources from which the personal information is collected;
• Our business or commercial purpose for collecting personal information;
• The categories of third parties with whom we share personal information, if any; and
• The specific pieces of personal information we have collected about you.

Right to deletion

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

• • Delete your personal information from our records;

and

• Direct any service providers to delete your personal information from their records

Please note that we may not delete your personal information if it is necessary to:

• Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
• Debug to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
• Comply with the California Electronic Communications Privacy Act;
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
• Comply with an existing legal obligation; or
• Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Right to Non-Discrimination for the exercise of your privacy rights

You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things:

• Deny goods or services to you;
• Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
• Provide a different level or quality of goods or services to you; or
• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Please note that we may charge a different price or rate or provide a different level or quality of goods and/or services to you, if that difference is reasonably related to the value provided to our business by your personal information.

Right to designate an authorized agent to submit CCPA requests on your behalf

You may designate an authorized agent to make a request under the CCPA on your behalf. To do so, you need to provide the authorized agent written permission to do so and the agent will need to submit to us proof that they have been authorized by you. We will also require that you verify your own identity, as explained below.

If you would like to exercise any of your CCPA rights described above, please:

• Complete a consumer request form available on our website at 33across.com/user-data-portal/
  or
• Call us, toll-free, at 1-888-297-4094

We will ask you for additional information to confirm your identity and for security purposes, before disclosing the personal information to you, by using a two points of data verification process.

Right to Opt-Out of the Sale of Personal Information

We sell your personal information in certain instances, as explained above under “Categories of personal information we sell or disclose for a business purpose”. You have a right to opt-out of that sale. For additional information visit our privacy policy. If you would like to exercise your right to opt-out, please use the form available on our website at 33across.com/user-data-portal/