Last Updated: January 30, 2023

If you are a resident of the states of Virginia, Colorado, Utah, or Connecticut, you have certain rights under applicable data privacy laws. This privacy notice for residents of Virginia, Colorado, Utah, and Connecticut supplements the information contained in our Privacy Policy and applies solely to all visitors, users, and others who reside in the states of Virginia, Colorado, Utah and/or Connecticut (“You”).

The Right to Know / Confirm & Right to Access

You have the right to know/confirm whether we are processing your personal data and access any personal data we have processed, including:

• The categories of personal information we have collected about you
• The categories of sources from which the personal information was collected
• Our business or commercial purpose for collecting, selling, or sharing personal information
• The categories of third parties with whom we sell or share personal information, if any; and
• The specific pieces of information we have collected about you

You also have the right to obtain a copy of the personal information you have provided to us in a portable, readily usable format that can be easily transferred to a third party.

Please note that we are not required to:

• Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained;
• Re-identify, de-aggregate, or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information; or
• Provide the personal information to you more than twice in a 12-month period.

The Right to Delete or Correct

You have the right to delete or correct the information we have retained about you. Subject to certain exceptions, on receipt of a verifiable request from you, we will:

• Delete your personal information from our records;
• Direct any service providers to delete your personal information from their records; and
• Correct any inaccuracies in your personal information.

Your request to know or delete may be denied for any reason allowable under applicable state privacy law. For example, we may deny your request to delete if the personal information is necessary for us or a service provider to complete the transaction for which we collected the personal information, comply with a legal obligation, or make other internal or lawful uses of that information that are compatible with the context in which you provided.

The Right to Opt-Out

You have the right to opt-out of the following uses of your personal information:

• Targeted (behavioral) advertising, or sharing of personal data, as described in the Privacy Policy at “Third-Party Use of Cookies and Other Tracking Technologies”
• Sale of personal data, as described in the Privacy Policy “Disclosure of Your Information.”

Additionally, residents of Virginia, Connecticut, and Colorado may opt out of our processing of personal information for the purposes of profiling, as described in the Privacy Policy at “Third-Party Use of Cookies and Other Tracking Technologies.”

We will act upon your request to opt-out no later than 15 days from the date we received the request. Note that we may deny a request to opt-out if we have a good-faith, reasonable, and documented belief that the request is fraudulent or for any other reason allowable under applicable state privacy law. Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize personal information sales. However, you may change your mind and opt back in to personal information sales at any time by clicking the link at the footer of this page and following the instructions.

The Right to Non-Discriminatory Treatment

You have the right to not be discriminated against by us because you exercised any of your rights under the applicable state privacy law. This means we cannot, among other things:

• Deny goods or services to you;
• Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
• Provide a different level or quality of goods or services to you; or
• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

The Right to Limit Use of Sensitive Information

You have the right to limit our use of your Sensitive Data to only purposes necessary to perform the service or provide the goods that you request from use, with the exception of the following:

• Collection or processing of sensitive personal data for security purposes;
• Maintaining/servicing accounts; and
• Undertaking activities to verify/maintain the quality of a service

How to Exercise Your Rights

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes. If you are a resident of California, Virginia, Colorado, Utah, or Connecticut, you may exercise the rights described above, subject to limited exceptions under applicable law.

If you or an authorized representative want to review, verify, correct, or withdraw consent to the use of your personal information you may send us an email at privacy@enosix.com to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal information that we hold about you or make your requested changes. Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification. To verify a request, you will need to provide:

• Enough information to identify you;
• Proof of your identity and address; and
• A description of what right you want to exercise and the information to which your request relates.
• If your request is submitted on your behalf by an authorized representative, you may also have to provide a copy of the written authorization contract.

If we are unable to verify your request, we may deny the request or ask you for additional information that is reasonably necessary to authenticate your identity in connection with the consumer request.

Once submitted, you will receive an email within 10 days that we will use to verify your identity and provide confirmation of your request. We will respond to your request to know or delete or correct within 30 days from the day we receive the request. If necessary, we may extend the time period to a maximum of 30 additional days from the day we receive the request. In such case, you will receive an email notifying you of the extension and explaining the reason for the extension. Any disclosure in response to a request to know will cover the 12 month period preceding the business’s receipt of the request and will be delivered in a readily useable format, by mail or electronically at the consumer’s option.

Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, erased, or made your personal information anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

If you are a resident of Virginia, Colorado, or Connecticut, you also have the right to appeal our decision if we deny your consumer request. If we deny your consumer request, you can send an email to privacy@enosix.com requesting an appeal of the denial. Within 45 days of receipt of your appeal, we will inform you of the action we took or did not take in response to your appeal. If your appeal is denied, we will provide you with an online mechanism to contact the Attorney General to submit a complaint in your respective state.

We will provide access to your personal information, subject to exceptions set out in applicable privacy legislation. Examples of such exceptions include:

• Information that is aggregated or de-identified.
• Information that is part of a formal dispute resolution process.
• Information that is about another individual that would reveal their personal information or confidential commercial information.
• Information that is prohibitively expensive to provide.

If you are concerned about our response or would like to correct the information provided, you may contact our Privacy Officer at privacy@enosix.com.