Your privacy at a glance

Through our Site, we, directly or indirectly (through our service providers), may collect different kinds of information from or about you. More specifically:

Information You Provide. We collect information from you when you use our Site, share information through the Site, provide information through web forms, participate in surveys, subscribe to newsletters or other subscription web services or otherwise communicate with us or make information available to us, including personal information such as:

• Your name;
• Your email address;
• Your telephone number; and
• Your company.

Automated Information. When you use the Site, our systems may automatically record information (“log data”) sent from your web browser or mobile application. Such information may include: your IP address, browser type and settings, operating system used, the date and time of your access and pages you visit, any links to external sites you open, the identity of your Internet web service provider or mobile carrier, and information about the type of device you are using, including any information your device may provide, such as device settings and unique device identifiers.

Cookies and Similar Technologies. We may use cookies (small text files placed on your device) and similar technologies such as web beacons and pixel tags to help provide our Site and collect data.

Cookies allow us to keep track of and store your preferences, enable your sign-in to our Site, present interest-based advertising, track your activities across the Site (including third party websites), combat fraud and analyze performance of the Site.

Analytics Technologies. We use our own log data and third party analytic technologies to collect information about how you use our Site and monitor the performance and usefulness of our Site. Third party analytics web services may combine the information they collect in connection with our Site with information they have independently collected over time and across different web sites. Many of these third party analytics companies collect and use information under their own privacy policies.

Information from Third Parties. We may get information about you from other parties with which we have a business relationship. This information may be combined with information that you provide to us and our partners, along with information that is automatically collected through our Site.

We may use the information we collect from you to provide products and services to you, including to provide our Site, as well as to maintain, protect, and improve our products and services, and to develop new products and services. We may also use the information we collect from you for the following purposes:

• To personalize and make our Site more relevant and useful to you and others;
• To provide you with information about Zinnia or its affiliates;
• To provide you with information about changes to our Site;
• To offer to you other products or services, including third party products and services;
• To enable you to interact with us, our partners and others;
• To perform data analysis, including market research, trend analysis and demographic analysis;
• To process transactions initiated by you or to fulfill any other purposes for which you provided the information;
• To respond to court orders and legal investigations or as otherwise required or permitted by federal and state law;
• To contact you; and
• As directed by you or your representative.

We do not share with third parties information that identifies you, except as described below:

Affiliates. We may share information about you, including personal information, with our affiliates, who will use it in accordance with our privacy policy.

Our Service Providers. We may engage third parties to provide certain services offered on our behalf, such as information collection and processing, data analysis, or satisfaction surveys. We require these providers to maintain information about you as confidential, and to only use the information to perform the services specified by us in a manner consistent with this privacy policy and in compliance with applicable laws.

Corporate and Asset Transactions. If we sell all or substantially all of our business or sell or transfer all or a material part of our assets, or are otherwise involved in a merger or transfer of all or a substantial part of our business, we may transfer all information we have collected and stored, including personal information, to the party or parties involved in the transaction as part of that transaction.

Legal Disclosures. It is possible that we will need to disclose information about you when required by law, subpoena, or other legal process, or if we have a good faith belief that such disclosure is reasonably necessary to:

• Investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies;
• Protect the security or integrity of our Site;
• Investigate or defend ourselves against third party claims or allegations;
• Protect the rights, interests, safety, and security of users of our Site or members of the public;
• Protect against fraud or for risk management purposes; or
• Comply with prudent legal practice.

You may make certain choices about our collection of your information. For example:

• You may choose not to provide personal information, although that may impact your ability to register for or receive a particular product or service;
• You may choose not to receive marketing email from us by following the unsubscribe link provided in one of those emails; and
• You may also disable cookies and similar technologies as supported by your browser or device. However, our Site may not function properly if you disable these technologies.

The Site is a general audience site and it is not directed to minors under the age of 18. We do not offer products or services to minors under the age of 18 or knowingly collect personal information from users in this age group. No one under the age of 18 should submit or post personal information through our online services. We may collect information regarding individuals under 18 years of age from their parents or legal guardians, but only as necessary to provide our products and services.

We use commercially reasonable administrative, technical, personnel, and physical security measures designed to protect information we collect about you from loss, theft, and unauthorized use, disclosure, or modification. However, there is no method of transmitting, storing, or using data that is completely secure. This means that we cannot guarantee or warrant the security of information we collect about you..

We may update this privacy policy from time to time, so please review it frequently. We will post any privacy policy changes on this page and, if the changes are material, we will post the revised privacy policy to our Site as of the effective date of such changes.

If you have any questions or want to request information related to this privacy policy, please contact us by
e-mail at info@zinnia.com or write to
us at: Zinnia, LLC, 5801 S.W. 6th Avenue, Topeka, Kansas 68606,
Attention: Legal Department.

CCPA Privacy Policy

Last Updated: January 1, 2023

---

California Residents

The following disclosures are made pursuant to the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (“CCPA”). These disclosures supplement any privacy notices we previously or contemporaneously provided to you, including any California-specific privacy notice provided to you if you are an employee of Zinnia.

The CCPA guarantees certain rights to all California residents.

The Right to Know
California residents have the right to be informed of the categories and specific personal information collected about them, including sensitive personal information, the categories of sources from which that information is collected, whether any information is sold or shared, the categories of third parties to whom that information has been shared, the business or commercial purposes for collecting and using each category of personal information, and the anticipated retention period for each category of personal information. See the chart below for the details:

The Right to Limit Use and Disclosure of Sensitive Personal Information
We do not collect or process sensitive personal information for the purpose of inferring characteristics about consumers. We also do not disclose sensitive personal information for purposes other than those specified in section 7027(m) of the CCPA regulations promulgated by the California Privacy Protection Agency. Therefore, we do not offer consumers the option to limit the use of their sensitive personal information.

The Right to Opt Out of Sharing for Cross-Context Behavioral Advertising
In the past twelve months we have used data about your activities on our online properties to serve you ads on online properties owned or controlled by third parties. In the past twelve months, we have provided the following categories of information to advertising networks, social media networks, tag management platforms, and video sharing platforms for this purpose:

• Personal identifiers, such as unique personal identifier, online identifier, internet protocol address, device information and identifiers, and unique advertising identifiers and cookies; Internet and other electronic network activity information; geolocation information; inference data; characteristics of protected classifications under California or federal law; and commercial information.

If you would like to opt out of this sharing, you may exercise your right using our “Do Not Sell or Share My Personal Information” link, or by modifying your cookie settings, or, you may do so in a frictionless manner by activating Global Privacy Control (“GPC”) opt out preference signal to opt out of disclosures of your personal information through the browser you are using. To learn more about the GPC, click here.

The Right to Opt Out of Sale
While we do not sell personal information in exchange for monetary consideration, we do share personal information for other benefits that could be deemed a “sale,” as defined by the CCPA. The CCPA broadly defines “sale” in a way that may include activities such as the delivery of targeted advertising on websites or allowing third parties to receive certain information, such as cookies, IP address, and/or browsing behavior.

In the past twelve months, we have provided the following categories of information to advertising networks, data analytics providers, and social media networks in ways that could be considered a “sale” under California law:

• Personal identifiers, such as unique personal identifier, online identifier, internet protocol address, device information and identifiers, and unique advertising identifiers and cookies; Internet and other electronic network activity information; geolocation information; inference data; characteristics of protected classifications under California or federal law; and commercial information.

We disclosed these categories of information to these third parties in order to market and advertise our products and services; perform analytics; and to maintain, improve, upgrade, or enhance our products or services.

We have no actual knowledge of selling the personal information or the sensitive personal information or minors under 16 years of age.

California residents have the right to opt out of the “sale” of their personal or sensitive personal information.

If you would like to opt out of such disclosures, you may exercise your right using our “Do Not Sell or Share My Personal Information” link, or by modifying your cookie settings, or, you may do so in a frictionless manner by activating Global Privacy Control (“GPC”) opt out preference signal to opt out of disclosures of your personal information through the browser you are using. To learn more about the GPC, click here.

The Right to Delete Personal Information
You have the right to request the deletion of your personal information, subject to certain exceptions.

The Right to Correct Inaccurate Personal Information
You have the right to request the correction of any inaccurate personal information that we maintain about you.

The Right to Access
You have the right to request the categories and specific pieces of personal information we have collected about you.

The Right of Non-Retaliation and Non-Discrimination
You have the right to exercise the privacy rights conferred to you under the CCPA without receiving retaliatory or discriminatory treatment. Zinnia does not retaliate or discriminate against your for exercising the privacy rights conferred to you under the CCPA.

Exercising Your Rights
To exercise your rights, you may contact us via phone at 1.800.747.3940 or via email at risk@zinnia.com. You may also submit a request through our website via Zinnia’s Privacy Webform. Requesters will need to provide us with personal information in order to verify their identity and residency, including name, email address, and state of residence. We will compare the information you provide with our internal records. The personal information that we use to verify identity and residency will not be used for any other purpose.

You may authorize an agent to submit a request on your behalf if you provide the authorized agent with written permission signed by you. Zinnia may require you to verify your identity directly with us and confirm that you provided the authorized agent with permission to submit a request on your behalf.

Contact Information
If you have questions or concerns about our privacy practices, contact us at:

Zinnia Corporate Holdings, LLC,

Attention: Legal Department
c/o, 5801 S.W. 6th Avenue,
Topeka, Kansas 68606,
Email: risk@zinnia.com