Effective/Updated as of 06/30/2022

Introduction. Mainlining America (“Company”) is committed to protecting the privacy of personal information we collect when you access www.mainlining.com. This Privacy Policy (“Policy”) describes our policies and practices regarding how we collect, use and disclose information we obtain in connection with your use of this Site.

BY ACCESSING OR USING THE SITE, YOU CONSENT TO THE COLLECTION, USE, AND SHARING OF YOUR INFORMATION AS SET FORTH IN THIS PRIVACY POLICY. Please read this Policy carefully before using the Site or submitting personal information to us. This Policy is incorporated into and subject to the Terms of Use [link].

Changes to this Policy. We reserve the right to make changes to this Policy. We will provide notice through the Site of material changes. Changes will be effective immediately upon posting to the Site and will apply to your use of the Site after the “effective date” listed above. Except

to the extent we receive your authorization or as permitted or required by applicable law, we will handle your data in accordance with the terms of the Policy in effect at the time of the collection. You understand and agree that your continued use of the Site after the effective date means that the collection, use, and sharing of your personal information is subject to the updated Policy.

Information We Collect. We may collect personal information that you provide directly to us when you visit the Site or information that is automatically collected from you, such as information from your browser or device. We use this information to operate the Site, carry out our business, comply with laws and for other purposes described herein.

Information you provide:

  • Name and contact information.

You do not have to provide the above information to access or use the other sections of the Site.

Statistical Data: To monitor utilization of the Site and continuously improve its quality, we may

compile statistical information using analytics services. Examples of this information may include number of visitors to the Site or pages within the Site, traffic patterns, length of timespent on the Site, sites that refer visitors to the Site,  utilization of the browser and operating systems and versions used by visitors to the Site, methods used to browse away from the page, and location information. The analytics services we use may transfer this information to third parties in case of a legal obligation or if a third-party processes data on behalf of that service.

To compile this information, we may collect and store: your IP address, operating system and platform, browser type and version, time zone setting, browser plug-in types and versions, pages you visit within the Site, your data provider, length of time spent on Site pages, site from which you linked to ours, search terms that resulted in you linking to the Site, etc. While this information can be associated with the IP  address your computer had while you  visited the Site, it will not be associated with you as an individual or associated with any other information you may submit through the Site, or that we may store about you for any other

purposes. We may use this information to generate aggregate statistics about visitors to our Site. Please check your web browser if you want to learn what information your browser sends or how to change your settings.

Cookies and Similar Technology

 

  1. a) Cookies. We may use cookies on this Site. A cookie is a small file consisting of letters and numbers that automatically collects certain information from you. This file uniquely

identifies and recognizes your browser or device and transmits information back to the server. Depending on the cookie type, it may perform functions such as remembering the contents of a shopping cart or your user preferences, improving the quality of your visit, recording the website pages you view, remembering the name or address you entered during a visit, or delivering ads that are targeted to your interests and browsing activity. We use essential cookies on our website to make the Site function and analytics cookies to understand how you use the Site, improve its functionality and for other related purposes.

We also use advertising/marketing cookies on the Site to help us with our marketing activities.

  1. b) Embedded Content and Social Media Widgets. The Site contains embedded content (e.g., videos) and Social Media Widgets (e.g., LinkedIn). Embedded content may place third party cookies on your device that track your online activity to enhance your experience or assess

the success of their application. Social Media Widgets allow us to integrate social media functions into the Site. These widgets may place third party cookies on your device for

tracking and advertising purposes. We have no direct control over the information these cookies collect, and you should refer to their website privacy policy for additional

information.

  1. c) Controlling cookies. You may control cookies, including preventing or stopping the and storage of cookies, through your browser settings and other tools. Most

browsers will allow you to block or refuse cookies. However, you may need to manually

adjust your preferences each time you visit a site. For more information, see the Help section of your browser. Please note that if you block certain cookies, some of the services

and functionalities of our Site may not work.

IMPORTANT: By using the Site, you consent to the processing of any personal information forthe analytics  purposes and functions described above.

Do Not Track. “Do Not Track” is a privacy preference that you can set in your Internet search browser to send a signal to a website that you do not want the website operator to track certain browsing information about you. However, because our Site is not configured to detect Do Not Track signals from a user’s computer, we are unable to respond to Do Not Track requests. We do not track Site users over time and across third party websites.

How We Use Your Personal Information. In general, we will use the personal information we collect only for the purpose it was collected, for compatible purposes, as permitted or required

by law, as necessary to carry out our contractual duties and obligations, and as otherwise provided in this Policy. For example, we may use your personal information in the following ways:

  • To enable your use of the Site.
  • To provide you with information, products or services that you request from us such as quotes or samples.
  • To communicate with you, including sending messages about the availability of our Site, security, or other service-related issues. (You may change your communication

preferences at any time. Please be aware that you cannot opt-out of receiving service messages from us, including security and legal notices.)

  • For other everyday business purposes such as product development, contract management, IT and website administration and security, fulfillment, analytics, fraud

prevention, corporate governance, reporting and legal compliance.

  • To engage in marketing and advertising activities.
  • To communicate with you in social media concerning our products and services.
  • To carry out our obligations and enforce our rights including those arising from any contracts entered between you and us, including for billing, payment, and collections.
  • To review, improve, and monitor our website, applications, online services, and overallclient experience, including to provide customization to meet the specific needs, ensure

a consistent experience, and to assess trends, interests, and the demands of clients.

  • To provide customer service and engage in quality control activities concerning our products and services.
  • For testing, research, analytics and product and service development.
  • To respond to law enforcement requests and as required by applicable law, court order, governmental regulations, or other lawful processes; for public safety purposes.
  • To process applications for employment, as well as to evaluate and improve our recruiting efforts.
  • As necessary or appropriate to protect the rights, property, security, and safety of us, our employees, our consumers, our information systems, and the public.
  • To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution,

or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information

held by us is among the assets transferred.

We do not share your personal data with any third-party advertisers for their advertising.

Disclosure of Information. In general, we will not disclose your personal information exceptwith your consent  and as described in this Policy. We may disclose your data for the same reasons that we may use it as described in this Policy, which includes disclosing it to our affiliates and non-affiliated third parties, as we deem necessary to carry out those purposes.

  • Third Party Vendors or Service Providers. We may need to use or disclose this information with a member of our group partners or third-party vendors as follows:
  • With your consent or as you direct;
  • To manage, improve, analyze and optimize our Site;
  • For IT services including cloud storage;
  • To perform obligations arising from any contract we enter with you;
  • To process payments and requests for products and services;
  • To collect, review and process job applications;
  • To provide products, services, offers, promotions, news, etc.;
  • To engage in marketing activities, such as sharing personal information with our partners to deliver advertisements to our shared customers;
  • To protect against and prevent fraud, illegal activity (such as identifying and responding to incidents of hacking or misuse of our websites and mobile applications) and claims and other liabilities.

We endeavor to choose affiliates and non-affiliates with similar standards  to ours regarding the protection of data.

  • Sale representatives and distributors.

 

  • Legal Process, Security, Defense, Protection. It is possible that we may need to disclose information about you if required by law, subpoena, or other legal process.
  • Additional disclosures. We may disclose information about you if we have a good faithbelief that disclosure is necessary to demonstrate our relationship with you;

investigate, prevent, or take action regarding suspected or actual illegal activities or to assist law enforcement agencies; protect the security or integrity of the Site; protect

against or investigate fraud; protect our interests and legal rights, including responding to subpoenas and defending  litigation; or protect the rights and safety of others.

  • Change in Control or Sale. We can share, sell, assign, or license your personal information in connection with certain business transactions, such as a sale, acquisition,

merger, or change in control, or in preparation for any of these events. In such cases, we will take appropriate steps under the circumstances and to the extent possible to ensure that the recipient agrees to provide privacy protections substantially similar to those

established by this Policy. Any entity that acquires all or substantially all of the Company’s assets will have the right to  continue using your data consistent with this Policy or as  otherwise agreed to by you.

In no case will we sell or license your data to third parties, except as set forth above or as required or permitted by law

Safeguarding of Information. We employ reasonable and appropriate administrative, physical and technical measures designed to protect the security of personal information we collect from you. However, no system for safeguarding personal or other information is 100% secure

and although we have taken steps to protect your personal information from being intercepted, accessed, used or disclosed by unauthorized persons, we cannot fully eliminate security risks associated with personal information.

Your Choices Regarding Your Personal Information. You can always limit the information you provide to us, but if you choose not to provide certain requested information, you may be

unable to access some of the services, offers, and content on the Site.

Links to Third Parties’ Sites and Third-Party Integrations. We may provide links to websites or

resources outside of our Site for your informational purposes only. We may also provide links to third party integrations. Third party integrations are websites or platforms that synchronize with our Site to provide you with additional functionality, tools, or services such as maps, sending requested information, etc. You acknowledge and agree we are not responsible for the availability of third-party sites, resources, or integrations and do not endorse and are not

responsible or liable for any content, advertising, goods, services or other materials on, available through, or provided by such sites, resources, or integrations. We are not responsible for the privacy or other practices of such sites and cannot guarantee the security of personal information that you provide, or is collected by, such sites. We encourage you to review the privacy policies and terms and conditions on those linked sites.

Information on Children. The Site is not directed to children as the products and services on this Site are intended for persons 13 years of age and older. We do not  knowingly collect, use ordisclose any personal information from children. If we learn that personal information of

persons less than 13 years-of-age has been collected through our Site, we will take the appropriate steps to delete this information.

Applicable law. This Policy is governed by the internal substantive laws of [insert] without regard to its conflict of laws principles. Jurisdiction for any claims arising under or out of this Privacy Policy shall lie exclusively with the state and federal courts within [insert]. If any provision of this Policy is found to be invalid by a court having competent jurisdiction, the invalidity of such provision shall not affect the validity of the remaining provisions of this Policy,which shall remain in full force and effect.

CALIFORNIA RESIDENTS

  1. “Shine the Light Law”. If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information by certain members of the Company to third parties for the third parties’ direct marketing purposes. Requests may be made one time per calendar year. If applicable, this information would include the categories of customer information and the names and addresses of

those businesses with which we shared customer information for the immediately prior calendar year (e.g., requests made in 2018 will receive information regarding 2017 sharing activities). You may submit your request using the contact information at the end of this Policy.

  1. “Eraser Law”. If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California law permits you to request and obtain

removal of content or information you have publicly posted. You may submit your request using the contact information at the end of this Policy. Please be aware that such a request.

does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or

allow removal even if requested.

  1. California Consumer Privacy Act (“CCPA’”) Addendum. The following California Privacy Policy Addendum (“CA Addendum”) applies solely to residents of the State of California (“consumers” or “you”). This CA Addendum describes our policies and practices regarding

the collection, use, and disclosure of personal information we collect when you access or use the Site or through other channels including but not limited to visiting our locations or

though phone and email conversations.

This CA Addendum supplements and amends the information contained in the Site Policy, above. Terms defined within the CCPA have the same meaning when utilized within this CA Addendum. The other provisions of the Site Policy continue to apply except as modified in this CA Addendum.

This CA Addendum does not apply to personal information we collect about you as a job applicant to, an employee of, owner of, director of, officer of, or contractor of the

Company. This CA Addendum also does not apply to personal information we collect about you as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, non-profit, or government agency when your communications or transactions with the Company occur solely within the context of the Company conducting due diligence regarding, or providing or receiving a product or service to or from, such company, partnership, sole proprietorship, non-profit, or government agency.

Please read this CA Addendum carefully. By accessing or visiting the Site, you indicate your understanding that the collection, use, and sharing of your information is subject to the terms of this CA Addendum and our Terms of Use [insert link]. IF YOU DO NOT CONSENT TO THE COLLECTION, USE, AND SHARING OF YOUR INFORMATION AS DESCRIBED IN THIS CA

ADDENDUM, PLEASE DO NOT PROVIDE US WITH SUCH INFORMATION.

  1. Personal Information We Collect. As described below, we may collect or have collected in the preceding 12 months the following categories of personal information (“PI” or “personal information”). We may add to the categories of PI we collect and the purpose we use PI. In that case, we will inform you by posting an updated version of this CA

Addendum on the Site.

  1. Identifiers. Examples include real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, or other similar identifiers.
  2. Other elements. Examples include name, signature, characteristics or description, address, telephone number, education, employment, employment history, bank

account number, credit card number.

  1. Characteristics of protected classifications under California or federal law. Examples

include race, religion, and age.

  1. Commercial information. This includes services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
  2. Education information. This includes information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, Sec. 1232g; 34 C.F.R. Part 99).
  3. Internet or other electronic network activity. Examples include browsing history, search history, a consumer’s interaction with an internet website, application, or advertisement.
  4. Geolocation data. This might include location information while using one of our apps.
  5. Audio, electronic, visual, thermal, olfactory, or similar information. Examples of this

category including identifiable information obtained about you while speaking with our customer service representatives on the telephone.

  1. Professional or employment-related information.
  2. Consumer profile. This includes inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, and behaviors.

PI does not include publicly available information from government records, deidentified or aggregated consumer information, or information excluded from the CCPA’s scope

such as certain health or medical information and other categories of information protected by different laws.

  1. Purposes for Which We Collect Your Personal Information. We have collected your PI for the following business or commercial purposes. We may change or add to the purposes we collect PI. In that case, we will inform you and obtain your consent when required by law.
  1. To provide you with information, products or services that you request from us.
  2. To fulfill or meet the reason for which the information is provided. For example, if you place an order with us, we will collect your address for delivery/shipping purposes or to fulfill our tax collection and reporting obligations.
  3. To contact you and/or provide you with email alerts and other notices concerning our products or services, or events or news, that may be of interest to you.
  4. To engage in marketing activities, including to help design products and services appropriate for our clients.
  5. To communicate with you in social media concerning our products and services.
  6. To carry out our obligations and enforce our rights including those arising from any contracts entered between you and us, including for billing, payment, and collections.
  7. To review, improve, and monitor our website, applications, online services, and overall client experience, including to provide customization to meet the specific

needs, ensure a consistent experience, and to assess trends, interests, and the demands of clients.

  1. To provide customer service and engage in quality control activities concerning our products and services.
  2. For testing, research, analysis and product and service development.
  3. To respond to law enforcement requests and as required by applicable law, court order, governmental regulations, or other lawful processes.
  4. As described to you when collecting your personal information or as otherwise set forth in the CCPA.
  5. To process applications for employment, as well as to evaluate and improve our recruiting efforts.
  6. As necessary or appropriate to protect the rights, property, security, and safety of us, our employees, our , our information systems, and the public.
  7. To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going

concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal held by us is among the  assets transferred.

  1. Sources of Personal Information
  • You. We may collect personal information from you including when you visit our Site, contact us, or apply or inquire about employment.
  • News outlets; Social media and related services
  • Third Parties. We may collect information about you from third parties that are lawfully entitled to share your data with us.
  1. Sharing or Disclosing Personal Information. Of the categories of PI noted above, during past 12 months, we shared the following:

Categories of Personal Information

Disclosed

Categories of Third Parties to Whom Disclosed

Identifiers

Other elements

Characteristics of protected classifications
under California or federal law.

Commercial information

Education information.

Internet or other electronic network activity.

Geolocation data.

Audio, electronic, visual, thermal,

olfactory, or similar information.

Biometric Information

Professional or employment-related information

Consumer profile.

  • Third parties as directed by you. We will share your PI

with those third parties to whom you direct.

  • Our business partners. For example, we might share

your PI with one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own

privacy statements that set out the manner in which

they will collect, use, and disclose PI. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them.

  • Third parties who perform services on our behalf. For

example, we share information with certain service providers, including marketing companies, professional service providers, debt collectors, Information technology providers, and data storagecompanies. We might also authorize our service providers to collect PI on our behalf.

  • Governmental entities, legal service providers. We

may share your PI in order to comply with the law

and in the course of providing our products and

services. We may also disclose information if a

government agency or investigatory body submits a

request.

  • Successors to all or portions of our business. If all or

part of our business is sold, we may disclose PI in

preparation for or as part of that transaction.

We do not sell your PI as that term is defined in the CCPA nor do we have actual knowledge

that we have sold personal information of individuals under 16 years old.

  1. Consumer Rights. The CCPA provides California consumers with the following rights, subject to certain exceptions:
  1. Right to Request Deletion. You have the right to request that the Company delete your PI from the it’s records. Upon receipt of a verifiable consumer request (see below), and as required by the CCPA, we will delete and direct any service providers to delete your PI from its records.

The Company is not required to comply with your request to delete your PI if it is necessary for the Company (or its service provider) to maintain your PI in order to:

  1. a) Complete the transaction for which the PI was collected, provide a good or service requested by you, or reasonably anticipated within the context of the

Company’s ongoing business relationship with you, or otherwise perform a contract between the Company and you.

  1. b) Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
  2. c) Debug to identify and repair errors that impair existing intended functionality.
  3. d) Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
  4. e) Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal

Code.

  1. f) To enable solely internal uses that are reasonably aligned with your expectations based on your relationship with the Company.
  2. g) Comply with a legal obligation.
  3. h) Otherwise use your PI, internally, in a lawful manner that is compatible with the context in which you provided the information.
  1. Right to Know. You have the right to request that the Company discloses the following information from the 12-month period preceding the Company’s receipt of your

verifiable consumer request:

  1. a) The categories of PI we have collected about you.
  2. b) The categories of sources from which the PI was collected.
  3. c) The business or commercial purpose for collecting or selling PI.
  4. d) The categories of PI we disclosed or sold for a business purpose.
  5. e) The categories of third parties we disclosed or sold PI to, by the category of PI.
  6. f) The specific pieces of PI we collected about you.
  1. Right Not to be Discriminated Against. We will not discriminate against you for exercising any of your CCPA rights. For example, we generally will not provide you a

different level or quality of goods or services if you exercise your rights under the CCPA.

  1. Submitting Consumer Rights Requests. To submit a rights request as outlined in this CA Addendum, please contact us at [insert toll-free telephone number] or [insert email address or link on your website].
  1. Verifiable Requests. We reserve the right to only respond to verifiable consumer requests made by a consumer who is the subject of the request, made on behalf of the consumer’s minor child, or made by a natural person or person registered with the Secretary of State authorized to act on behalf of a consumer. In general, we may ask for

identifying information that we already maintain about you. You will need to describe your request with sufficient detail to allow us to respond. We will not use the PI we collect from an individual to determine a verifiable request for any other purpose, except as required by law.

We reserve the right to charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly  unfounded. If we determine that a request warrants a

fee, we will attempt to notify you as to why we made that decision and provide a cost estimate before completing your request. We will attempt to respond to a verifiable consumer request within forty-five (45) days of receipt, but we may require up to ninety (90) days to respond, under which circumstances we will notify you of the need for an

extension.

Any disclosures we provide will only cover the 12-month period preceding the receipt of verifiable consumer request. The response we provide will also explain the reasons

we cannot comply with a request, if applicable. To the extent permitted by the CCPA, we will respond to no more than two requests during any 12-month period.

  1. Authorized Agents. You may authorize a natural person, or a business registered with the California Secretary of State to exercise one of these rights on your behalf. When

you submit a Request to Know or a Request to Delete, unless you have provided the authorized agent with a qualifying power of attorney, you must provide your authorized

agent written permission (signed by you) to act on your behalf and verify the authorized agent’s identity with us. We reserve the right to deny requests from persons or

businesses claiming to be authorized agents that do not submit sufficient proof of their authorization.