Coric Industries, LLC Privacy Policy

Scope

This Privacy Policy applies to Personal Information we collect from or about you online through websites owned and operated by Coric that link to this Privacy Policy (referred to in this policy as the "Sites"), and to Personal Information we collect and process offline, including through in-person interactions. Throughout this Privacy Policy, we refer to the Sites (including your visits to and use of the Sites), your business interactions with Coric, and any other interactions you have with us, whether online or in-person, as the "Services".

This Privacy Policy also applies to subsidiaries, affiliates and divisions of Coric that link to this Privacy Policy. However, some Coric-owned or operated entities may have their own privacy policies, separate from this Privacy Policy (these entities, together, will be referred to as "Coric Divisions" and individually as a "Coric Division"). If this Privacy Policy applies to the Division's collection, use and disclosure of your Personal Information, it will link back to this Privacy Policy. If the Coric Division has its own privacy policy separate from this Privacy Policy, that Coric Division's privacy policy applies. We encourage you to review the applicable Coric Division's privacy policy regarding data collection when you visit their website, which you can do by clicking the link in the footer. In some circumstances, we may provide you with specific data privacy information in addition to this Privacy Policy, depending on the specific interactions you have with us (a "Specific Statement"). If the Specific Statement and this Privacy Policy conflict, the Specific Statement will prevail unless stated otherwise.

This Privacy Policy does not apply to Personal Information of employees or job applicants of Coric.

Personal Information

Personal Information is information that identifies, describes, relates to, is reasonably capable of being associated with or could reasonably be linked, directly or indirectly, with a person or household. This includes information such as (or connected with) your name, and may include things such as your email address, physical address, business address, telephone number or certain device information when it is individually identifiable or connected to individually identifiable information. Personal Information also includes information that is collected or exchanged between you and us for the business you are associated with to receive our products, services or information, when the information is individually linkable or identifies you.

Personal Information does not include "aggregated information," which is information that we collect about a group or category of people or services. It also does not include "de-identified information," which is information from which we or our agents have removed identifiers that can be used to specifically identify a person, either directly or indirectly. This Privacy Policy does not apply to our collection, use or disclosure of aggregated or de-identified information. While we use the term "Personal Information" throughout this Privacy Policy, we intend for this term to encompass "Personal Data", where that term is used by laws that are applicable to Coric.

Personal Information Collection

The Personal Information we collect depends upon the interactions you have with us, including whether you buy (or your company buys) products and how you use our Services, your location and applicable law.

We collect Personal Information when you interact with us or Coric Divisions, such as when you provide it to us directly, automatically when you visit our Sites, and from third parties. For more information about how we collect Personal Information automatically, please review the section titled “Cookies and Automatic Data Collection”.

We may collect the following types of Personal Information from you through the methods described above depending on your interactions with us:

• Contact Information, including your name, email, phone number, company, industry and address.
• Demographic Information, such as your job title and employer.
• Financial/Payment Information, such as your billing address, shipping address, credit card number or bank account information, and payment transaction and verification information.
• Analytical Information, such as information about your visit to our website, including pages and products you view on our Sites, ads that you clicked on, emails from us that you opened, browser type, operating system, Internet Protocol (“IP”) address, referring URLs, session duration and activity, preferences specific to your device (for example, the time zone that you access our Services from), and device and general geolocation information.
• Commercial Information, such as the products and services you purchase from us (including purchases you make on behalf of a business), the business you are associated with, the type of industry your business operates in, preferences regarding our product lines and geographic region.
• Unique Device Information, such as your operating system, identifiers we associate with your device(s) that visit our Sites, including through cookies, web beacons, pixel tags and similar technology, as described in more detail below in the “Cookies and Automatic Data Collection” section.
• Audio, Electronic, Visual and Similar Information, such as call and video recordings.
• Inferences, including inferences about you that we draw from other Personal Information we collect.

If you voluntarily provide us with any other type of Personal Information not indicated above, we will also collect and process that information.

The types of information we collect from you depends on your reason for interacting with us. As such, we may not collect all of the categories of information listed above from every individual who interacts with us.

As mentioned above, we may collect Personal Information about you from third parties, including our affiliates, subsidiaries and Coric Divisions. If you submit any Personal Information about another individual or business to us, you are responsible for ensuring that you have their authority to disclose the information to us and for us to use the Personal Information we collect about them from you in accordance with this Privacy Policy. We also collect Personal Information from third parties, and directly from you, when:

• You attend a trade show or event where we are a sponsor or participant, and the event organizer shares your contact information or demographic information with us as a benefit of our sponsorship or participation.
• You choose to participate in certain third-party applications or features, such as interacting with us on our social media pages or similar features on third-party websites, and they forward your Personal Information on to us.

We are not responsible for these third parties' dissemination of your Personal Information. Unless we disclose to you otherwise, the terms of this Privacy Policy will apply to all Personal Information we collect from third parties.

How We Use Your Personal Information

Coric’s primary purpose in collecting Personal Information is to provide you with information regarding products and Services offered by Coric, including Coric Divisions. As such, our legal bases for processing your Personal Information include processing with your consent, to perform our contractual obligations, to provide Services to you that you request, where it is in our legitimate interest to process such information, and where we have a legal obligation to do so.

We may use the Personal Information we collect about you for the following business purposes:

• Provide our Products and Services. We may use your Contact Information, Demographic Information, Financial/Payment Information and Commercial Information to provide you with products and Services you purchase from us, process or fulfill orders and transactions, maintain and service your account, process payments, communicate with you about orders you place from us, and products and Services you purchase or request from us, and maintain, offer and improve our website, products and Services.
• Customer Service. We may use your Contact Information, Demographic Information, and Audio, Electronic, Visual and Similar Information to provide you with customer service, respond to your inquiries and assist you when you request assistance or contact us.
• Marketing. We may use your Contact Information, Demographic Information, Commercial Information, Analytical Information, Unique Device Information and Inferences to market products and Services to you, including to target products and Services that we believe may be of interest to you based on your prior interactions with us or other third parties, to send you marketing communications, to allow various Coric Divisions to market their products and services to you, and for market research about the effectiveness of and your satisfaction with our products and Services.
• Analytics. When you interact with us in certain capacities (such as when you visit our Sites) and where permitted by applicable law, we automatically collect and use Analytical Information and Unique Device Information to continually improve your experience with our Services, to customize our products and Services to your preferences, and to monitor our website usage and performance.
• Business Purposes. We may use any of the categories of Personal Information we collect from you for our internal business purposes, in accordance with applicable law, including to protect and secure our Sites, to defend ourselves in legal proceedings, to enforce and defend our contracts, policies and terms, to facilitate the functionality of our Sites and Services, including to debug, identify and repair efforts that impair functionality, to maintain our property and our records, and to undertake quality and safety assurance measures.
• New Product Development. We may use your Commercial Information, Contact Information and Demographic Information to refine and develop new products based on feedback you share with us related to products and Services you purchase, and based on market research we conduct.
• Legal Obligations. We may use any of the categories of Personal Information we collect from you to comply with our legal obligations, including to supply information in connection with product recalls, legal proceedings, regulatory inquiries or similar forums, and to enforce and defend our rights, including those set forth in our Terms of Use, this Privacy Policy and terms of sale, and any contracts or agreements we have with you or other third parties.

The capitalized terms and phrases used in this section refer to the categories of personal information defined and described in the “Personal Information Section” described above.

Additionally, as described above in the “Marketing” and “Analytics” items, Coric may participate in behavioral-based advertising and retargeting on our Sites. This means that a third party may use technology (e.g., cookies) to collect Personal Information about your use of our Sites so that they can provide advertising about products and services tailored to your interests. This advertising may appear on our Sites, or on other websites. For more details about information collection via cookies and choices you may have to limit this information collection, please review the section below titled “Cookies and Automatic Data Collection”.

We may also use your Personal Information as otherwise set forth in a Specific Notice, as you direct us to, or as you otherwise consent to.

We may aggregate and de-identify Personal Information we collect from or about you and create reports that do not personally identify individuals.

Combination of Information

We may combine the Personal Information we receive from or about you from one source with Personal Information we receive from or about you from other sources, or across multiple interactions with you. For example, we may combine the information we receive directly from you that you provide to us, with information that we collect from you automatically when you visit the Sites, or that we collect from a third party about you.

How We Disclose Your Personal Information

We may disclose Personal Information for the following purpose and to the following categories of third parties, depending on how you interact with us. Coric has made the following disclosures in the last 12 months:

• Corporate Affiliates. We may share any or all of the categories of Personal Information we collect about you with corporate affiliates or Coric Divisions to provide and maintain our products and Services, and for administrative purposes. We disclose the following categories of Personal Data to Corporate Affiliates:
  • Contact Information, Demographic Information, Financial/Payment Information, Analytical Information, Commercial Information, Unique Device Information, Audio, Electronic, Visual and Similar Information, Inferences
• Service Providers. We may share Personal Information we collect about you for our business purposes with service providers, vendors and contractors who perform functions on our behalf. These services include but are not limited to distribution and logistics, product fulfillment, website hosting, marketing automation, analytics, site optimization and payment processing. In some circumstances, the service provider may collect data directly from you. We disclose the following categories of Personal Data to Service Providers:
  • Contact Information, Demographic Information, Financial/Payment Information, Commercial Information and Inferences.
• Social Media Platforms. When you choose to interact with us through social media, including any social media features available on the Sites, which are often referred to as "plugins," your Personal Information may be disclosed. Social media plugins typically allow the social media platforms to collect some information about you through cookies and similar tracking technologies they place on your device. In some cases, social media platforms may recognize you through their cookies even when you do not interact with their application. We encourage you to visit any social media platforms' respective privacy policies to better understand their data collection practices and controls they make available to you. We disclose the following categories of Personal Information to Social Media Platforms:
  • Contact Information, Analytical Information, Unique Device Information, Commercial Information and Inferences.
• External Marketing, Advertising and Social Networks. Where permitted under applicable law and subject to rights you exercise or preferences you express (as applicable), we may disclose your Personal Information to external marketing entities and agencies, social networks and advertising networks to assist us with our marketing efforts and to reach a broader audience who may be interested in our content, products and Services. These entities may help us refine our marketing efforts and assist with our targeting of advertisements to you. We disclose the following categories of Personal Information to External Marketing, Advertising and Social Networks:
  • Contact Information, Analytical Information, Unique Device Information, Commercial Information and Inferences.
• Business Transfers. If we sell all or part of our business, make a sale or transfer of assets, or are otherwise involved in a merger, restructuring or business transfer, including as part of the due diligence and transaction process, any or all of the categories of Personal Information we collected about you may be part of the transfer.
• As Required or Appropriate under Applicable Law. There may be instances when Coric may disclose Personal Information without providing you with a choice in order to: (1) protect the legal rights of Coric; (2) protect the safety and security of others; (3) protect against fraud or for risk management purposes; or comply with the law or legal process; and (4) enforce our Terms of Use.
• Other Purposes. We may share your Personal Information for any other purpose you direct us to or consent to.

Cookies and Automatic Data Collection

We collect information from you automatically using cookies and other similar technology, which we refer to collectively in this section as "cookies." Cookies are small data files that are stored by a user's web browser on the user's hard drive. Cookies can remember what information a user accesses on one website to simplify subsequent interactions with that website by the same user or to use the information to streamline the user's transactions on related websites. Many cookies we use last only for the duration of your web session and expire when you close your browser (i.e., session cookies). Other cookies last longer and are used to recognize your computer when you return to our Sites (i.e., persistent cookies). Cookies are designed to make your online experience easier and more personalized.

Automatic Data Collection

We use cookies to automatically collect certain types of Personal Information from you, such as your IP address, browsing history, the operating system you use and information about your general location. The categories of information we collect automatically that may be considered Personal Information include Unique Device Information, Commercial Information, Analytical Information and Inferences.

We use cookies and collect information automatically for the following purposes:

• Logging Functionality: As is true of most websites, we gather certain information automatically and store it in log files. This information may include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and/or clickstream data. We generally only use this data for purposes such as security, fraud detection and protecting our rights.
• Site Functionality, Security and Operations: Our Sites uses certain third parties who provide fonts, and who provide maps or the ability to view our locations. We also use cookies as a means of securing our Sites and Services, and to enhance the operation of our Sites, such as remembering your preferences and managing your login session.
• Preference and Personalization: We, and third parties we work with, use cookies, web beacons and similar technologies to manage our Sites and email messages and to collect and track information about you and your activities online over time and across different websites. In addition, we use local shared objects (or Flash cookies) to collect and store information about your preferences and how you interact with the Sites. These technologies help us to recognize you, customize or personalize your shopping experience, and analyze the use of our Sites and solutions to make them more useful to you.
• Analytics Tools: We use analytics providers, such as Google Analytics, to help us evaluate and measure the use and performance of our Sites. To opt out of the aggregation and analysis of data collected about you on our Sites by Google Analytics, visit https://tools.google.com/dlpage/gaoptout and download and install the Google Analytics Opt-out Browser Add-on. We also use Microsoft Clarity to help us understand how you interact with our Sites. Microsoft Clarity collects anonymized data including clicks, mouse movements, scroll behavior and session records. Microsoft Clarity is configured to mask or hide sensitive form fields such as names, emails, phone numbers and other form inputs so that it is not captured.
• Location Information: We may collect location information through the Sites so we can offer you certain location-based services (such as conducting analytics to improve the Sites).

Choices Regarding Cookies

Most Internet browsers automatically accept cookies. You can change your browser settings to notify you of the cookies being set or updated, and to block cookies. Please note that if you have turned off all cookies, some features of our website may not be available to you or otherwise function as intended. To learn more about how to manage cookies on different types of browsers, you can visit http://www.aboutcookies.org/how-to-control-cookies/. To manage Flash cookies, please visit Adobe's website.

You can also adjust your preferences with respect to necessary cookies (sometimes called "essential cookies") and performance cookies in our cookie consent tool by choosing to only accept necessary cookies. If the cookie consent tool does not pop up in your browser, you may need to clear your browser cookie cache to re-set your cookie preferences.

Depending on browser type, your browser may inform you that the website would like to collect your location and request your permission to do so. If you allow it, location information is then collected and may be stored locally on your device. If you decline the collection of location information, your location is not collected, and you must manually enter your location.

Links to Coric Division Sites

Our Sites may contain hyperlinks or embedded links to our Coric Divisions who operate throughout the United States and Canada. The links are provided as a courtesy to those who visit our Sites who do business with Coric Divisions and those who may be interested in the products or services of Coric Divisions. The privacy policy found on each Coric Division website governs and controls the type of Personal Information collected and how that Personal Information is used and shared by the Coric Division website, which may be different than this Site. Once you have left our Sites, this Privacy Policy no longer applies. While we may, from time to time, assist Coric Divisions with launching their websites, we are not responsible for the privacy policies applicable to those websites and hereby disclaim all responsibility and liability for the content on, and availability of, any such website.

Links to Third-Party Sites

Our Sites may contain hyperlinks or embedded links to websites operated by third parties. Some links may take you to third-party websites containing information that may be useful or of interest to you.

We do not control how your Personal Information is collected through third-party websites or the software used to collect it, nor do we control the security implemented by the third party that controls any third-party website. All third-party websites are operated independently from us. You understand and agree that when you follow a link to a third-party website, this Privacy Policy and the practices that we follow under this Privacy Policy cease to apply. Rather, the third-party website’s privacy policy will apply to the Personal Information collected through that third-party’s website. We encourage you to review the privacy policies listed on each third-party website that you visit.

We are not responsible for the content, accuracy or opinions expressed on any third-party website or for the privacy practices of any third party. We will not, and are under no obligation to, investigate, monitor or check the third-party website for accuracy or completeness, or for any obscene, scandalous, inflammatory, pornographic, indecent, profane, defamatory or unlawful content or materials. Inclusion of any link to a third-party website does not imply approval or endorsement of the third-party website.

Rights and Choices

Depending on where you reside and applicable law, you may have certain rights and choices regarding our processing of your Personal Information, as described below. To exercise these rights, please contact us using the information listed in the “Contact Us” section of this Privacy Policy. If you contact us via email, please write “Privacy Rights Request” and the state or country in which you reside in the subject line when making your request.

• Right to Access and Know. You may have the right to request that we disclose information to you about our collection and use of your Personal Information, and specifically, to request the following:
  • The categories of personal information we collected about you
  • The specific pieces of personal information we collected about you
  • The categories of sources for the personal information we collected about you
  • The business or commercial purpose for collecting your personal information
  • The categories of third parties with whom we have disclosed your personal information in the preceding 12 months
  • The categories of personal information we sold or shared about you, and the categories of third parties to whom the personal information was sold or shared by category of personal information

This right may be subject to time limitations, such as to information we have processed about you in the last 12 months.

• Right to Update and Correct. If your Personal Information is inaccurate or if you would like to update your Personal Information, you may have the right to update and correct the Personal Information so that it is accurate and up to date. You may also have the right to complete your Personal Information where it is incomplete by providing supplementary information.
• Right to Portability. After you make a request to access or know your Personal Information, you have the right to request to obtain a copy of this information in a portable, readily usable format that allows you to transmit the information to another party, to the extent it is technically feasible. You may also have the right to request that we transfer your data to another organization, under certain circumstances. This right may be subject to technical limitations and feasibility. We also reserve the right to charge a reasonable fee based on administrative costs for additional copies of your Personal Information. If we plan to charge a fee, we will notify you before we proceed with your request.
• Right to Deletion or Erasure. You may have the right to request that we delete any of the Personal Information that we collect or retain about you, subject to certain exceptions. After we receive and verify your request, we will delete (and direct any of our service providers that hold your Personal Information on our behalf to delete) your Personal Information from our records, unless an exception applies. We may deny your deletion request if retaining your Personal Information is necessary for us or our service providers, as permitted by law.
• Right to Object to or Restrict Certain Processing. You may have the right to restrict certain processing of your Personal Data, or to object to certain processing of your Personal Information, including where our legal basis for the processing is your consent, where the processing involves Special Category Personal Data or Sensitive Personal Information, or where it involves automated decision-making technologies. This right is subject to certain restrictions.
• Right to Withdraw Consent or Opt-Out. If you have previously consented to the use of your Personal Information for direct marketing or targeted marketing, you may withdraw your consent at any time. You may also have the right to opt-out of the sale of certain types of Personal Information under applicable law. If you would instead like to unsubscribe from our marketing communications, please select the unsubscribe link in the footer of our email communication or email us at privacy@coricind.com.
• Right to Limit Certain Uses and Disclosures of Your “Sensitive Personal Information”. If we collect “Sensitive Personal Information” or “Special Category Personal Data” (as those terms are defined in applicable statutes) from you, you have the right to limit our use and disclosure where we have collected it to use which is necessary to perform the services or provide the goods reasonably expected by you, and as otherwise authorized by the statute and regulations. We do not collect Sensitive Personal Information from or about individuals. If this changes, we will use your Sensitive Personal Information in ways that you would reasonably expect are necessary to perform the services or to provide you with the goods you request, but still afford this right.
• Right to Appeal. If you are a resident of certain jurisdictions, you may have the right to file an appeal with us if we deny your request to exercise your rights. Requests to appeal can be communicated through the same means by which your request was submitted. If we deny your appeal, you may have the right to appeal to your state regulator. We will provide you the information of the applicable regulator if we deny your appeal.
• Additional Rights. In addition to the above rights, you may also have the right to:
  • Appoint an individual to exercise your rights on your behalf
  • Access information about automated decision making (as applicable)
  • To not be discriminated against for exercising your rights

Information Retention and Security

We retain your Personal Information for the period necessary to fulfill the purpose(s) for which it was collected as outlined in this Privacy Policy, unless a longer retention period is required by law or is necessary to fulfill our legal obligations.

We have put in place reasonable physical, electronic, technical and managerial procedures to safeguard and secure Personal Information from unauthorized use or disclosure. Due to the open communication nature of the Internet, however, we cannot guarantee your Personal Information will be 100% secure and free from accidental or unauthorized use, disclosure or access. We encourage you to remain vigilant when you use the Internet, to use strong passwords and to take other measures to protect your Personal Information.

Children Under the Age of 13

This website is provided for and targeted to adults and is not intended to be used by children under thirteen (13) years of age. We do not knowingly collect Personal Information from children under the age of thirteen (13). If you believe we have been provided Personal Information from or about a child under age thirteen (13) through this website, please contact us at the email below. If we have stored any such Personal Information, we will delete it as soon as reasonably practicable after receiving notice from you.

Changes to This Privacy Policy

We will update this Privacy Policy from time to time, or as our privacy practices change, to ensure it accurately describes how we use your information. If we make any material changes to this Privacy Policy that impact the way we process your Personal Information, we will endeavor to notify you directly or by placing a notice on our website prior to the changes becoming effective, consistent with our legal obligations. Any time we make changes to this Policy, we will update the "Last Updated" date. We encourage you to periodically review this Privacy Policy to ensure you are aware of the most updated version. By using our Services, you agree to the standards and terms contained in the most recent Privacy Policy.

How to Contact Us

If you have any questions or concerns regarding the Privacy Policy, Coric's collection, use or disclosure of your Personal Information, if you wish to exercise any of the rights listed in this Privacy Policy, or if you have any other privacy or security issue, please contact us using one of the following methods:

• Calling us at 866.678.0326
• Emailing us at privacy@coricind.com
• Writing to us at:
  
  3000 Town Center, Suite 2700
  Southfield, MI 48075

California Privacy Notice

This section is intended to provide notice to consumers and residents of California pursuant to the California Consumer Privacy Act of 2018 ("CCPA") and only applies to consumers who reside in California. We refer to this section as the "CCPA Notice." This CCPA Notice does not apply to our job applicants, employees, contractors, owners, directors or officers where the Personal Information we collect about those individuals relates to their current, former or potential role at Coric. We refer to Personal Information we collect from California consumers in this CCPA Notice as "California Personal Information."

Sources of California Personal Information

We collect California Personal Information:

• Directly from you: Our interactions with you, such as through our Sites, surveys and questionnaires, emails, social media and any other online or offline interactions, such as when you contact us via phone, through a web form, or attend one of our events;
• Automatically: Through cookies and other automated technologies when you browse or visit our website;
• From third parties and other sources: including our Divisions, subsidiaries and corporate affiliates, publicly available online sources, joint marketing partners and business partners.

Categories of California Personal Information We Collect

We collect, and have collected within the preceding 12 months, the following categories of California Personal Information as listed in the CCPA:

• Category A. Identifiers, such as name, contact information, company, industry, business address, IP address and other online identifiers;
• Category B. Personal information, as defined in the California customer records law, such as name, contact information, signature, payment card number and employment information;
• Category C. Commercial information, such as transaction information and purchase history, including purchases made on behalf of businesses you are associated with, and other people associated with your company;
• Category D. Internet or network activity information, such as browsing history and interactions with our Sites;
• Category E. Audio, electronic, visual and similar information, such as call and video recordings;
• Category F. Professional or employment-related information, such as your employer and title;
• Category G. Inferences drawn from any of the Personal Information listed above to create a profile/summary about, for example, an individual's preferences and characteristics.

We may not collect each and every piece of information listed in each bullet, which are included for exemplary purposes only. We also may not collect each category of information from every individual we collect information from. For example, we collect different categories of Personal Information from individuals who visit our website, versus individuals who place orders for products on behalf of their companies.

Use of Personal Information

We use these categories of Personal Information for the purposes of operating, managing and maintaining our business, providing our products and services, and accomplishing our business purposes and objectives, as disclosed above in the "How We Use Your Personal Information" section of our Privacy Policy.

Information Retention

Coric retains the above categories of Personal Information for as long as reasonably necessary in light of the purpose for which it was collected, consistent with Coric's data retention policies and procedures. Generally, we retain information for two years, but we retain information longer where we have a legal obligation to do so.

Disclosure, Sale and Sharing of Personal Information

We have disclosed the following categories of Personal Information as listed in the CCPA to third parties for our operational business purposes within the preceding 12 months, and "sold" or "shared," as those terms are defined in the CCPA, the following categories of information related to California consumers in the preceding 12 months:

Individual Rights and Requests

If you are a California resident, you have the following rights regarding your California Personal Information:

• Right to Know. You have the right to know what personal information is being collected about you, including the categories of personal information we collect, the categories of sources from which we collect the personal information, the business or commercial purpose for collecting, selling or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected from or about you.
• Right to Access. You have the right to request that we disclose the specific pieces of personal information we have collected about you and to the extent it is technically feasible for us to do so, to provide it to you in a structured, commonly used, machine-readable format.
• Right to Delete. You have the right to instruct us to delete your personal information, subject to certain exceptions.
• Right to Correct. You have the right to correct inaccurate personal information, taking into account the nature of the personal information and purpose of the processing.
• Right to Opt-Out of Sales and Sharing of Your Personal Information. You have the right to opt-out of the "sale" or "sharing" of your Personal Information, as those terms are defined in the CCPA. Information about our practices that may constitute a "sale" or "sharing" of your Personal Information as defined by law are noted in the section of the CCPA Notice titled "Disclosure, Sale and Sharing of Personal Information". You may exercise your right to opt-out by following the instructions set forth in this section of this Privacy Notice titled "Exercising Your Rights." Please note you may also need to update your preferences in your browser, or in the cookie consent tool on our website in order to fully opt-out. We do not "sell", "share" or use for targeted advertising Personal Information of individuals we know are under 18 years old.
• Right to Limit the Use and Disclosure of Your Sensitive Personal Information. You have the right to limit our use of your sensitive personal information to that which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services, and other purposes permitted by the CCPA.
• Right Not to Be Retaliated Against for Exercising Your Rights. We will not discriminate against you for exercising any of your CCPA rights.
• Right to Appoint a Representative to Exercise Your Rights on Your Behalf. You have the right to appoint an authorized representative with your legal authority to exercise your rights on your behalf, or to exercise the rights afforded to your minor child on their behalf. If you would like to appoint a representative to exercise your rights on your behalf, they must be registered or appointed in accordance with the CCPA.

To make a request for the disclosures or deletion described above, please complete the form below. We will take steps to verify your request before processing your request. We will respond to your request consistent with applicable law. You have the right to be free from unlawful discrimination for exercising your rights under the CCPA.

Shine the Light Law

Under California Civil Code sections 1798.83-1798.84 (California's "Shine the Light" law), California residents who have an established business relationship with Coric are entitled to ask Coric for a notice describing what categories of personal customer information we share with third parties for their direct marketing purposes. This notice will identify the categories of information shared with and will include a list of the third parties with which it is shared, along with their names and addresses. If you are a California resident and would like a copy of this notice, please submit a written request to Coric at the addresses listed below under the Section titled "Contact Information".

Exercising Your Rights

If you believe you reside in a jurisdiction that affords broad consumer privacy rights to its residents and you wish to exercise any of the rights described above, please submit a request to us by one of the following methods:

• Calling us at 866.678.0326
• Emailing us at privacy@coricind.com
• Writing to us at:
  
  3000 Town Center, Suite 2700
  Southfield, MI 48075

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it.

We will take steps to verify your consumer request, including that you are the person making the request, or have authority to make the request on behalf of the individual the request relates to. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We endeavor to respond to verifiable consumer requests within 45 days of receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt, unless otherwise noted. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination

We will not discriminate against you for exercising any rights you have under applicable law. Unless permitted by applicable law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by state law that can result in different prices, rates or quality levels. Any permitted financial incentive we offer will reasonably relate to your Personal Information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

If you are visually impaired or have another disability, you may access information regarding Your Rights and Choices by emailing privacy@coricind.com or calling 866.678.0326.