CALIFORNIA PRIVACY RIGHTS ACT (CPRA) ADDENDUM

Last updated: November 25, 2025

This CPRA Addendum supplements our Privacy Policy and applies specifically to California residents. The California Privacy Rights Act (CPRA) provides California residents with specific rights regarding their personal information.

1. CATEGORIES OF PERSONAL INFORMATION

We collect the following categories of personal information:

IDENTIFIERS: • Name, alias, postal address • Email address, phone number • Online identifiers (IP address, device ID)

CALIFORNIA CUSTOMER RECORDS (Cal. Civ. Code § 1798.80(e)): • Name, signature, physical characteristics • Payment information • Telephone number, address

PROTECTED CLASSIFICATION CHARACTERISTICS: We do not collect protected classification characteristics.

COMMERCIAL INFORMATION: Not applicable to our business model.

BIOMETRIC INFORMATION: We do not collect biometric information.

INTERNET OR NETWORK ACTIVITY: • Browsing history on our website • Search history • Interaction with our website or ads • Device information and browser type

GEOLOCATION DATA: • Precise geolocation (with your consent) • Approximate location from IP address

SENSORY INFORMATION: We do not collect sensory information.

PROFESSIONAL OR EMPLOYMENT INFORMATION: Not applicable to our business model.

EDUCATION INFORMATION: We do not collect education information.

INFERENCES: We do not create inferences about consumers.

2. SENSITIVE PERSONAL INFORMATION

Under CPRA, the following is considered "sensitive personal information": We do not collect sensitive personal information.

YOUR RIGHTS REGARDING SENSITIVE INFORMATION: - You can limit our use and disclosure of sensitive personal information - We will only use sensitive information for permitted purposes under CPRA - To limit use: [Link to opt-out form]

3. SOURCES OF PERSONAL INFORMATION

We collect personal information from: - Directly from you (forms, account creation, communications) • Automatically through cookies and tracking technologies • Third-party social media platforms (if you connect accounts) • Public databases and records • Third-party data providers • Business partners and affiliates

4. BUSINESS AND COMMERCIAL PURPOSES

We use personal information for: - Providing and improving our services - Processing transactions and payments • Creating and managing accounts • Marketing and communications (with consent) • Analytics and understanding usage patterns • Security, fraud prevention, and legal compliance - Debugging and error correction - Auditing and quality assurance

5. SHARING PERSONAL INFORMATION

CATEGORIES OF THIRD PARTIES: We share personal information with: • Analytics providers • Cloud hosting and infrastructure providers - Customer service platforms • Professional advisors (legal, accounting) - Government entities (when required)

SALE AND SHARING: • We DO NOT sell your personal information • We DO NOT share your personal information for cross-context behavioral advertising

6. YOUR CPRA RIGHTS

RIGHT TO KNOW: You can request: - Categories of personal information collected - Specific pieces of personal information collected - Sources of personal information - Business purposes for collection - Categories of third parties with whom we share information

Request limit: 2 requests per 12-month period

RIGHT TO DELETE: - Request deletion of personal information we collected - Exceptions apply (legal obligations, completing transactions, security) - We will notify third parties to delete your information

RIGHT TO CORRECT: - Request correction of inaccurate personal information - We will make reasonable efforts to correct information

RIGHT TO OPT-OUT: - Opt-out of sale of personal information - Opt-out of sharing for cross-context behavioral advertising - Opt-out of automated decision-making technology - Limit use of sensitive personal information

RIGHT TO NON-DISCRIMINATION: - We will not discriminate for exercising your CPRA rights - We will not deny services, charge different prices, or provide different service levels

7. HOW TO EXERCISE YOUR RIGHTS

ONLINE REQUEST FORM: - Visit: https://www.guardianofcompliance.com//privacy-request - Complete the online form - Verification will be required

EMAIL: - Send request to: contact@guardianofcompliance.com - Include your name, email, and specific request

PHONE:

AUTHORIZED AGENT: - You may designate an authorized agent - Agent must provide proof of authorization - You must verify your identity directly with us

8. VERIFICATION PROCESS

To verify your identity, we may request: - Email verification - Account credentials (if you have an account) - Government-issued ID (for sensitive requests) - Additional information to match our records

We will respond to verified requests within 45 days (extendable to 90 days if needed).

9. DATA RETENTION

We retain personal information for: • As long as necessary to provide services • As required by law or business needs - Specific retention periods: - Transaction records: 7 years - Marketing data: Until opt-out + 2 years - Account data: Until account deletion + 30 days - Analytics data: 26 months

10. CHILDREN'S PRIVACY

- We do not knowingly sell personal information of consumers under 16 - We do not share personal information of consumers under 16 - For consumers aged 13-16, we obtain opt-in consent - For consumers under 13, we obtain parental consent

11. FINANCIAL INCENTIVES

We do not offer financial incentive programs in exchange for personal information.

12. AUTOMATED DECISION-MAKING

We do not use automated decision-making technology that produces legal or similarly significant effects.

13. CALIFORNIA SHINE THE LIGHT LAW

Under California Civil Code Section 1798.83, you may request: - Categories of personal information disclosed to third parties for direct marketing - Names and addresses of third parties

To make a Shine the Light request: contact@guardianofcompliance.com

14. CONTACT INFORMATION

PRIVACY INQUIRIES: - Email: contact@guardianofcompliance.com

15. CPRA EFFECTIVE DATE

The California Privacy Rights Act (CPRA) became effective January 1, 2023. This addendum reflects our compliance with CPRA requirements.

guardianofcompliance.com https://www.guardianofcompliance.com/

For our complete Privacy Policy, visit: https://www.guardianofcompliance.com//privacy-policy

---

QUICK LINKS: - Submit Privacy Request: https://www.guardianofcompliance.com//privacy-request - Opt-Out of Sale/Sharing: https://www.guardianofcompliance.com//do-not-sell - Limit Sensitive Information Use: https://www.guardianofcompliance.com//limit-sensitive-info - Cookie Preferences: https://www.guardianofcompliance.com//cookie-preferences