Personal Information: Privacy and Security

Last Updated: October 14, 2025

This Privacy Policy (the "Privacy Policy") describes the types of Personal Information that P.C. Richard & Son ("P.C. Richard & Son," "we," "our," or "us") collects from and about you, how we may use and disclose such information, and your choices and legal rights with respect to such information. We ask that you carefully review this Privacy Policy, as it applies to the websites (each a "Site") and mobile applications (each an "App") as well as the services owned, operated, and/or provided by P.C. Richard & Son that display or link to this Privacy Policy, including our offline locations (collectively, our "Services").

By using our Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use our Services.

For purposes of this Privacy Policy, "Personal Information" refers to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you, and includes "personal data" or similar terms as defined in applicable law.

1. NOTICE AT COLLECTION OF PERSONAL INFORMATION

The following serves as our notice at collection of Personal Information in accordance with applicable U.S. state privacy laws. We collect the categories of Personal Information identified below. We disclose each category of Personal Information for permissible business purposes pursuant to these laws with service providers, payment processors, and other entities that help us provide you with requested services. As indicated in the chart, some of these categories we "sell" or "share" (as such terms are defined by applicable law) for marketing purposes to business partners and third parties, such as data analytics providers, advertising technology vendors, and social media platforms as described in this Privacy Policy. We do not knowingly sell or share Personal Information about persons under the age of 18. Please click here to opt out of the sale or sharing of your Personal Information, including for targeted advertising. You may also choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control ("GPC"). We will process the GPC signal as a request to opt out.

B. The Business and Commercial Purposes for Which We Collect and Use Your Personal Information:

• To provide you with our Services
• To process your payments and fulfill your orders
• To create, maintain, customize, and secure your account with us
• To communicate with you, such as through bots, including to respond to your inquiries/requests and request feedback from you, and to send you important updates and messages about changes to our Services, this Privacy Policy, and/or other applicable terms and conditions
• To review the usage and maintain the operation of our Services
• To conduct analysis and develop and/or improve our products and Services
• For targeted advertising purposes
• To monitor, protect, and maintain the security and integrity of our Services and our business, such as protecting against and preventing fraud, unauthorized transactions, claims and other liabilities
• To comply with applicable laws and regulations and respond to lawful requests and communications from law enforcement and other government officials
• To carry out sales and business transactions in which information held by us is among the assets transferred or is otherwise relevant to the evaluation, negotiation, or completion of the transaction
• To protect our rights, privacy, safety, property and/or those of others
• To fulfill any other purpose for which you provide your Personal Information or as explained to you at the point of information collection
• To provide you with customized content or targeted offers
• To send you information, newsletters, and marketing/promotional material from us or on behalf of, our marketing partners and affiliates

C. Retention

We will retain your Personal Information for as long as reasonably necessary to provide you with our Services that you request, for marketing purposes unless you opt out as described in this Privacy Policy, or otherwise where permitted or required in accordance with applicable law. We will retain and use your Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. What this means in practice will vary between different types of information, and when we consider our approach we take into account ongoing business or legal needs for the information, for example in relation to tax, health and safety, and potential or actual disputes or investigations.

2. PERSONAL INFORMATION WE COLLECT

There are several ways we may obtain Personal Information about you, including through (A) information you provide to us; (B) information we automatically collect; (C) information we receive from third parties; and (D) combining information from different sources. This includes data that identifies you personally whether directly or indirectly.

A. Information You Provide

We collect Personal Information as listed in the above Notice at Collection from you as follows:

• When You Use our Services. We collect Personal Information from you when you sign up for an account with us or participate in a financial incentive program. We also collect any Personal Information you disclose in a public manner on our Services. If you choose to upload or add photos, videos, comments, reviews, or other content to our Services, your upload becomes public information. Please exercise caution when disclosing Personal Information in these public areas.
• When You Make a Purchase. If you purchase a product, subscription, or service from us, we or our third-party payment processors collect a payment card number and related financial information (such as CVV, expiration date, and billing address), or other payment method.
• When You Provide Information About a Third Party. If you send someone else a communication from our Services, such as sending a gift subscription, present, or promotion to a friend, the Personal Information you provide (e.g., name, contact information) may be used to facilitate communication with such person.
• When You Provide Information Through Social Media. If you link a social media account through our Services, we may automatically receive certain information about you based on your registration and privacy settings on those third-party services. This may include, but may not be limited to, name, username, demographic information, updated address or contact information, location, interests, and social media and online activity.

When you visit and interact with our Services, we or our third-party advertising and analytics partners and service providers may use a variety of technologies, such as cookies, tags, SDKs or scripts, to collect certain information regarding your activity.

The specific types of information that we and our partners and service providers may automatically collect when you visit and interact with our Services include:

• Device and Browser Information. This includes your device's IP address and/or other unique identifiers, browser type, device type, internet service provider, and operating system.
• Location Information. When you access our Services from a mobile device, your device's approximate location (derived from your device's IP address or other signals) may be collected.
• Usage Information. When you interact with our Services, certain information may be collected by us or our third party partners, including the date and time of your visit, the pages you view immediately before and after you access our Services, the areas or pages of our Services that you visit, the amount of time you spend viewing or using our Services, recordings of chat sessions (including with the involvement of bots), and other Site usage information. We may also collect keystrokes, mouse movements, form field entries, your use of and inputs to other AI-supported tools, and other use and overall engagement with our Website.
• Marketing Information. If you receive an email from us, information may be collected about your interactions with the message (e.g., whether you opened, forwarded, or clicked through to our Site).
• Third-party analytics technologies. We may use third-party analytics and tracking tools to better understand who is using our Services, how people are using them, and how to improve their effectiveness as well as the effectiveness of any related content.

Cookies and Other Similar Technologies. "Cookies" are text files that are placed on your browser by the websites that you visit. Cookies are used for various purposes, including to distinguish you from other users, make your site navigation more efficient, help remember your preferences, enhance your browsing experience, and improve the use and functionality of our Sites and related content. They can also enable the delivery of relevant and personalized advertisements to you across the Internet.

Please note that cookies (and other similar technologies) provided by third parties may be placed on our Sites and the providers of these technologies may combine information collected from your interaction(s) with our Services with information they collect from other sources and use the combined information for analytics and/or advertising purposes.

To learn more about your choices regarding the automatic collection and use of your information as you browse our Services, please see the Your Privacy Choices and Rights section below.

Our use of Google Analytics and Advertising technologies. Our Site uses technology provided by Google to facilitate advertising and reporting. We implement Google Analytics cookies to collect Personal Information about you when you visit our website for purposes of remarketing, impression reporting, and demographic and interest reporting. This information includes online identifiers, your IP address, and website usage data, and can be combined with other data related to you collected through Google's advertising cookie or other third-party technology. You can opt-out of the use of this technology through the Google Analytics opt-out browser add on, Google Ad Settings, and Ad Settings for mobile apps.

We may receive Personal Information from other sources. Our third-party sources may include:

• Our Business Partners, including companies that co-sponsor our promotions.
• Our Marketing/Advertising and Analytics Partners, including online advertising networks and analytics providers.
• Social Media Platforms (note that the information we receive from such platforms is dependent upon their policies and your settings on the platforms).
• Other Companies that provide Personal Information to supplement what we already know about you, including data aggregators.

Please note that we may combine Personal Information that we receive from various sources. For example, we may combine Personal Information that we collect from you offline with Personal Information we collect from you through our Site. Similarly, we may combine Personal Information that we receive from third parties with Personal Information we already have about you. We use, disclose, and protect combined Personal Information as described in this Privacy Policy.

We may disclose each category of your Personal Information to the following categories of recipients:

• Our Service Providers. We disclose your Personal Information to our service providers that provide business, professional, marketing, analytics, or technical support services to us, help us operate our business and the Services, or administer activities on our behalf. We require our service providers to only use your Personal Information in connection with providing services to P.C. Richard & Son.
• Our Affiliates. We disclose your Personal Information to our affiliates and subsidiaries for business, operational, promotional and marketing purposes.
• Our Business Partners. We disclose your Personal Information to other companies with whom we partner to provide services or other offerings to you and carry out other related activities. For example, we may disclose your Personal Information to a third party that co-sponsors a promotion.
• Our Research Partners. We disclose your Personal Information to our research partners, including those that administer surveys or conduct research projects in partnership with us or on our behalf.
• Our Analytics Partners. We disclose your Personal Information to our partners that assist us in performing analytics and help us measure the effectiveness of our Services' content and our marketing and advertising efforts.
• Our Marketing and Advertising Partners. We disclose your Personal Information to third parties for marketing and advertising purposes, including social media platforms, third-party advertising networks, and other parties that assist us in serving and optimizing our advertisements.
• Competent Governmental, Regulatory, and Public Authorities. We may disclose your Personal Information to government and law enforcement authorities, in each case to comply with legal or regulatory obligations or requests.
• Relevant Third Parties as Part of a Corporate Transaction. In the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with a bankruptcy or similar proceeding), we may disclose or transfer your Personal Information to certain third parties, such as the acquiring entity and its advisers.
• Other Third Parties. We may disclose your Personal Information to other third parties at your direction or with your consent. Additionally, we will disclose your Personal Information as we believe necessary or appropriate to: (a) comply with applicable law; (b) enforce our terms and conditions; (c) protect our operations; (d) protect our rights, privacy, safety, or property, and/or those of you or others; and (e) allow us to pursue available remedies or limit damages that we may sustain.

We may disclose your Personal Information for other reasons that we will describe at the time of information collection or prior to disclosing your information.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Certain disclosures may be considered "sales" or "shares" of Personal Information under applicable U.S. state privacy laws. Details on how to exercise your legal rights with respect to such "sales" or "shares" can be found in the "Your Privacy Choices and Rights" section below.

Please note that we may de-identify or aggregate Personal Information so that it will no longer be considered Personal Information and disclose such information to other parties for purposes consistent with those described in this Privacy Policy.

You have the ability to make certain choices about how we use your Personal Information, as follows:

Residents of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Tennessee, Utah, Virginia, or any other state with an applicable privacy law have certain rights relating to the collection, use, disclosure, and other processing of their Personal Information. The exact scope of these rights may vary by state.

• Right to Know. You may have the right to know what Personal Information we have collected about you, including the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, and the specific pieces of Personal Information we have collected about you.
• Right to Request Specific List of Third Parties. You may have the right to request a list of the specific third parties to whom we have disclosed your Personal Information.
• Right to Request List of Categories of Third Parties. You may have the right to request a list of the categories of third parties to which we have disclosed your Personal Information.
• Right to Delete. Consistent with applicable law, you may have the right, after making a verifiable request, to have your Personal Information that is maintained by us deleted.
• Right to Correct. Consistent with applicable law, you may have the right, after making a verifiable request, to correct inaccurate Personal Information, considering the nature of the data itself and the processing activities it supports. Please note that in some instances, we may delete your Personal Information to comply with your request to correct where permitted by law.
• Right to Opt Out of Certain Types of Personal Information Uses and Disclosures. We use and disclose to third parties Personal Information for analytics and advertising purposes. Accordingly, you may have the right to opt out of the "sale" or "sharing" of your Personal Information, or the use and disclosure of your Personal Information for "targeted advertising" (as these terms are defined in applicable law). You may opt out of such processing by navigating to "Your Privacy Choices" located in the footer of our site and as described below.

To exercise your right to opt out, please click here or the "Your Privacy Choices" link in the footer of our Site. Alternatively, you can use certain preference signals to exercise your sale and sharing opt-out right automatically with all businesses that you interact with online, including P.C. Richard & Son. If you enable a browser-based opt-out preference signal, such as Global Privacy Control (GPC), upon receipt or detection, we will endeavor to treat the signal as a valid request to opt out of the sale or sharing of Personal Information linked to that browser and any consumer profile we have associated with that browser where technically feasible. Please note that if you use different browsers or browser profiles, you will have to enable the signal on each browser or profile.

To exercise any of the above listed privacy rights, please submit a request by emailing us at pcrprivacy@pcrichard.com. You can also exercise these rights by contacting us at (888) 927-6056. Only you, or someone legally authorized to act on your behalf, may submit a request related to your Personal Information.

Depending on your U.S. state of residence, you may authorize someone to make a privacy rights request on your behalf (an "authorized agent"). Authorized agents will need to demonstrate that you've authorized them to act on your behalf. We retain the right to request confirmation directly from you confirming that the agent is authorized to make such a request, or to request additional information to confirm the agent's identity. If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted in this section.

For your security, we may take steps to verify your identity before responding to your request by asking you a series of questions about your previous interactions with us. Submitting a privacy rights request does not require you to create an account with us.

Please note that, where permitted under applicable law, we may decline a request (other than for opt outs) if we are unable to verify your identity (or an agent's authority to make the request) and confirm the Personal Information we maintain relates to you. We will never ask you to verify your identity to complete a request to opt-out.

Depending on your U.S. state of residence, you may have the right to appeal a decision we have made in connection with your privacy rights request. You may file an appeal by contacting us as described in this Policy.

We will not discriminate against you for exercising your privacy rights.

You may be able to opt out of receiving interest-based advertising using the browser opt-out tools and consumer choice mechanisms provided by interest-based advertising self-regulatory groups by following the links below. Please note that if you have already exercised your opt out rights pursuant to applicable state privacy laws, you do not need to do so here.

• Digital Advertising Alliance (DAA): http://www.aboutads.info/choices
• Please note that you will need to opt out separately on all of your browsers and devices, as each opt-out will apply only to the specific browser or device from which you opt out. If you delete or reset your cookies, change browsers, or use a different device, any opt-out cookie may no longer work and you will have to opt out again.

Some of our advertising partners may provide you with additional choices with respect to interest-based advertising. For example, certain social media platforms may allow you to control your advertising preferences directly through their services. Please review the privacy policies of the third-party services you use for more information.

From time to time, we may send you marketing and promotional communications, including special offers from us or our partners. If you no longer wish to receive promotional and marketing emails from us, you may opt out of such communications at any time by following the opt-out instructions included in any promotional or marketing email you receive from us.

We may offer financial incentives to promote our products and services. These may include:

• Discounts, coupons, and special offers when you sign up for our email list, participate in a marketing promotion or sweepstakes, or create an account.
• Points programs, where you earn points for certain purchases that can be redeemed for discounts or coupons.

We may ask you to provide Personal Information in connection with these promotions, including name, email address, home address, and phone number. Because these promotions involve the collection of Personal Information, they may be interpreted as "financial incentive" programs under California law or "bona fide loyalty programs" under Colorado law. We use this information for the purposes described above under the section titled "Notice at Collection of Personal Information," including for targeted advertising. We may share your Personal Information with third parties as described in our "Notice at Collection of Personal Information," including data analytics providers, advertising technology vendors, and social media platforms.

Participation in any financial incentive is optional. To enroll, please click here. From time to time, we may also announce limited contests or sweepstakes. Instructions on enrollment for these programs will be provided upon announcement. You may withdraw from the program at any time by emailing pcrprivacy@pcrichard.com. To stop receiving our coupons or discounts in your email, you may unsubscribe from our emails by clicking the "unsubscribe" button at the bottom of any such email. If you ask us to delete your Personal Information, we will not be able to provide you with access to these programs.

The value of any financial incentive we offer is reasonably related to the value of any Personal Information you provide to us. We estimate the value of your Personal Information by considering, without limitation, the expenses we incur from collecting your Personal Information and/or providing the financial incentive to you, the revenue generated by your use of the financial incentive, and any improvements we can make to our products and services based on aggregating information obtained through the financial incentive program.

Please note that we may provide additional terms that apply to a particular financial incentive. If applicable, those terms will be presented to you at sign up.

Our Services may have links to third-party services, which may have privacy policies that differ from our own. We are not responsible for the practices of such sites.

Our Services are intended for a general audience. We do not direct our Services to children under the age of eighteen (18), nor do we knowingly solicit or collect any Personal Information from children under the age of eighteen (18). If you are a parent or legal guardian and think that you or your child may have given us Personal Information about them, you can contact us in writing or by email as provided below under the section titled "How to Contact Us." Please mark your inquiries "Children's Privacy Information Request." If we learn that a minor has provided Personal Information through our Services, we will use reasonable efforts to remove such information from our files.

We have implemented physical, administrative, and technical safeguards to maintain the security, confidentiality, and integrity of your information. However, as no transmission of information over the internet is absolutely secure, we cannot guarantee the safety of your information.

We reserve the right, in our sole discretion, to change, modify, add, remove, or otherwise revise portions of this Privacy Policy at any time. When we do, we will post the change(s) to our Site. Your continued use of our Services following the posting of changes to these terms means you accept these changes. If we change the Privacy Policy in a material way, we will provide appropriate notice to you by temporarily noting "UPDATED" next to the Privacy Policy link on the footer of our Site.

The modified Privacy Policy will be effective immediately upon posting. We encourage you to periodically review this page for the latest information on our privacy practices. If you object to any modification, your sole recourse is to stop using the Site.

9. HOW TO CONTACT US

If you have any questions or concerns about this Privacy Policy or the practices described herein, you may contact us at pcrprivacy@pcrichard.com or by phone at (888) 927-6056.