CALIFORNIA CONSUMER PRIVACY RIGHTS

Your Rights and Choices

The California Consumer Privacy Act of 2018 (“CCPA”), and other California privacy laws, provide California consumers specific rights concerning their personal information, including, the right to request that we disclose what personal information we collect, use, disclose, and sell. This section describes your rights and how you may exercise those rights as well as describes how we, LifeSource Water, and third parties handle your personal information. If you choose to exercise these rights, we will not discriminate against you because of it.

You or your authorized agent can request: 1) a disclosure of your personal information we collect, use, disclose, or sell; 2) to delete your personal information we collect, or maintain; and 3) to opt-out of the sale of your personal information. If you choose to submit a request through an authorized agent, we will require proof that the authorized agent has your written permission to submit a request on your behalf. Additionally, we may require you to verify your identity with us through the verification process detailed below.

Requests to Know and Requests to Delete

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• - The specific pieces and categories of personal information we collected about you.
• - Our business or commercial purpose for collecting or selling that personal information.
• - The categories of third parties with whom we share that personal information.
• - If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
  1. sales, identifying the personal information categories that each category of recipient purchased; and
  2. disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

You also have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request to delete, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

You may submit a request to know or request to delete, free of charge, online through our interactive webform here, or through our toll-free number at LifeSource Water: (888) 997-0549. Note that for requests to delete, we will require you to separately confirm that you want your personal information deleted. To verify your identity, we require you provide your name and email and you confirm identity through a confirmation email message. Once submitted, you will receive an email within 10 days that we will use to verify your identity and provide confirmation of your request. We will respond to your request to know or request to delete within 45 days from the day we receive the request. If necessary, we may extend the time period to a maximum total of 90 days from the day we receive the request. In such case, you will receive an email notifying you of the extension and explaining the reason for the extension. Any disclosure in response to a request to know will cover the 12-month period preceding the business’s receipt of the request and will be delivered in a readily usable digital format, or by mail at your request.

Your request to know or request to delete may be denied for any reason allowable under the CCPA. For example, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• - Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• - Comply with a legal obligation.
• - Make other internal and lawful uses of that information that are compatible with the context in which you provided it or any other purpose permitted by the CCPA.

Similarly, we may deny requests:

• - For specific pieces of personal information if the disclosure creates a substantial, articulable, and unreasonable risk to the security of that personal information, your account with us, or the security of our systems or networks.
• - To access or delete information that is de-identified.
• - If your identity cannot be verified to a degree of certainty required by the CCPA.
• - From an authorized agent that does not submit proof that they have been authorized by the consumer to act on the consumer’s behalf.

Request to Opt-Out

If you are 16 years of age or older, you have the right to opt-out from a sale of your personal information. We do not sell the personal information of consumers we actually know are less than 16 years of age, unless we receive affirmative authorization (the "right to opt-in") from either the consumer who is between 13 and less than 16 years of age, or the parent or guardian of a consumer less than 13 years of age. Consumers who opt-in to personal information sales may opt-out of future sales at any time.

To exercise the right to opt-out, you may submit a request at Do Not Sell My Personal Information or through our toll-free number at LifeSource Water:(888) 997-0549.
We will act upon your request no later than 15 days from the date we received the request. Note that we may deny a request to opt-out if we have a good-faith, reasonable, and documented belief that the request is fraudulent. Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize personal information sales. However, you may change your mind and opt back in to personal information sales at any time online here.

Collection of Personal Information

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer (“personal information”). In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:

We may obtain the categories of personal information listed above from the following categories of sources:

1. Directly from you or your agent.
2. Indirectly from you or your agent. For example, through information we collect in the course of providing services.
3. Directly and indirectly from activity on our websites. For example, via signups on our Sites, such as through the creation of an account.

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following business purposes:

• - To fulfill an order.
• - To provide you with information, products or services that you request from us.
• - To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
• - To improve our website and present its contents to you.
• - For testing, research, analytics and development.
• - To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• - As described to you when collecting your personal information or as otherwise set forth in the CCPA.
• - To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

Sharing Personal Information

In the preceding 12 months, we have disclosed and/or sold personal information to third parties for a commercial or business purpose, as authorized under applicable law. When we disclose or sell personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. We do not sell the personal information of minors under 16 years of age without affirmative consent.

In the preceding twelve (12) months, we have disclosed and sold the following categories of personal information for a business purpose:

• Category A:          Identifiers.
• Category B:          California Customer Records personal information categories.
• Category C:          Protected classification characteristics.
• Category E:          Biometric Information.
• Category F:          Internet or other similar network activity.
• Category G:          Geolocation data.
• Category I:          Professional or employment-related information.

We disclose and sell your personal information for a business purpose to the following categories of third parties:

• - Our affiliates.
• - Service providers.
• - Third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.

If you have questions or concerns regarding this Policy, please direct inquiries to: info@lifesource.com.

YOUR CHOICES

To opt out of our email marketing or to unsubscribe from our email newsletters, you can contact our customer service department using the information in the “Contact” section below, or you can use the link provided at the bottom of each marketing message or newsletter. If you choose to opt out, you will continue to receive all email communications related to our transaction(s) and relationship with you.

If you would like to update your mailing information or want your name and address removed from our direct mailing list, you can contact our customer service department using the information in the “Contact” section below.

As described in this Policy, we may also make your information available to third parties for their direct marketing purposes. Pursuant to California Civil Code § 1798.83, no more than once per calendar year, California residents may request that we send you via mail or email: (1) the categories of personal information disclosed to those third parties; and (2) the names and addresses of those third parties. To request this information, please contact us at info@lifesource.com

CHILDREN’S PRIVACY

We understand the importance of protecting children’s privacy, especially in an online environment. Our Sites are not intentionally designed for or directed at children less than 13 years of age. We do not knowingly collect personal information from children under the age of 13 without the consent of the child’s parent or guardian.

UPDATING YOUR INFORMATION

You may request to view, update, or correct your personal information by contacting our privacy office at the information provided in the “Contact” section below. In order to protect your privacy, we will take steps to verify your identity before granting you access to the information or enabling you to make corrections.

SECURITY

We maintain reasonable and appropriate safeguards to help protect your personal information from loss and from unauthorized acquisition. We monitor activity on our Sites to prevent any unauthorized disclosure of information. In addition, we utilize a licensed system for credit card authorization and fraud detection.

DO NOT TRACK SIGNAL

Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no consensus among industry participants as to what “Do Not Track” means in this context. Like many online services, we currently do not alter our practices when we receive a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” you can visit http://www.allaboutdnt.com, but we are not responsible for the completeness or accuracy of this third-party information.

INTERNET-BASED ADVERTISING AND CHOICE

We may engage and work with service providers and other third parties to serve advertisements on the service and/or on third-party services. Some of these ads may be tailored to your interests based on your browsing of the service and elsewhere on the Internet, sometimes referred to as “interest-based advertising” and “online behavioral advertising” (“Interest-based Advertising”), which may include sending you an ad on a third-party service after you have left the service (i.e., “retargeting”).

You may choose whether to receive some Interest-based Advertising by submitting opt-outs. Some of the advertisers and service providers that perform advertising-related services for us and third parties may participate in the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. To learn more about how you can exercise certain choices regarding Interest-based Advertising, visit http://www.aboutads.info/choices, and http://www.aboutads.info/appchoices for information on the DAA’s opt-out program for mobile apps.

Some of these companies may also be members of the Network Advertising Initiative (“NAI”). To learn more about the NAI and your opt-out options for their members, see http://www.networkadvertising.org/choices. Please be aware that, even if you are able to opt out of certain kinds of Interest-based Advertising, you may continue to receive other types of ads.

Opting out only means that those selected members should no longer deliver certain Interest-based Advertising to you but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). Also, if your browsers are configured to reject cookies when you visit these opt-out webpages, or you subsequently erase your cookies, use a different device or web browser or use a non-browser-based method of access (e.g., mobile app), your NAI / DAA browser-based opt-out may not, or may no longer, be effective. We support the ad industry’s 2009 Self-regulatory Principles for Online Behavioral Advertising (https://www.iab.com/wp-content/uploads/2015/05/ven-principles-07-01-09.pdf) and expect that ad networks we directly engage to serve you Interest-based Advertising will do so as well, though we cannot guarantee their compliance. We are not responsible for the effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs.

TRACKING ACROSS TIME AND TECHNOLOGIES DISCLOSURE:

Some information about your use of the service and certain third-party services may be collected using tracking technologies across time and services and used by us and third parties for purposes such as to associate different devices you use and deliver relevant ads and/or other content to you on the service and certain third-party services.