California Consumer Privacy Act Addendum (“Addendum”)

LAST REVISED: Jan 2, 2024

This Addendum supplements the One Kings Lane Privacy Policy as well as any other agreements you have with us, such as the One Kings Lane Terms & Conditions.

Introduction

This Addendum applies solely to all visitors, users, and others who reside in the State of California (“Consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and any terms defined in the CCPA have the same meaning when used in this Policy.

This Policy does not apply to workforce-related Personal Information collected from California-based employees, job applicants, contractors, or similar individuals (see the California Employee Privacy Policy).

Collection and Disclosure of Personal Information

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer, household, or device (“Personal Information”). The table below describes the Personal Information that we collect from you, the sources from which we collect that Personal Information, the purposes of the collection, and our disclosures of Personal Information to third parties for business purposes, valuable consideration (“sales”), and targeted advertising (“sharing”).

PERSONAL INFORMATION	SOURCE	PURPOSE	DISCLOSURES TO THIRD PARTIES FOR BUSINESS PURPOSES	SALES AND SHARING WITH THIRD PARTI
Personal and online identifiers (such as first and last name, email address, phone number, usernames, or unique online identifiers, IDFA, AAID)	Directly from you Marketing partners	To provide and improve the Services Personalization of the Services Customer support Marketing and targeted advertising Security and fraud prevention	Customer service partners E-Commerce vendors Analytics services Marketing service providers	Marketing sponsors Ad networks
Financial Account Information (such as credit card numbers, bank account information, Paypal account information)	Directly from you Payment providers E-Commerce vendors	To provide the Services To sell you merchandise or content	E-Commerce vendors Payment providers Fraud and cybersecurity companies	N/A
Customer Profile Information (such as race, gender, age range, income range, ad demographics)	Directly from you Marketing partners Advertising networks Third party data providers	To provide and improve the Services Personalization of the Services Direct marketing Targeted advertising Analytics Research and development Security and fraud prevention	Analytics services Technology service Providers Marketing service providers	Ad networks Marketing sponsors
Transactional Information	Directly from you E-Commerce vendors	To provide and improve the Services Customer support Analytics Research and Development	Technology service providers E-Commerce vendors Analytics services Marketing service providers	Ad networks
Communications with you (such as customer support messages, emails, social media posts)	Directly from you Customer support partners	To provide and improve the Services Customer support	Analytics services Technology service Providers E-Commerce vendors Customer support vendors	N/A
Online Activity Information (such as browsing history, search history, interactions with a website, email, application, or advertisement)	Directly from you Cookies and similar technologies Marketing partners Advertising networks Third party data providers	To provide and improve the Services Personalization of the Services Direct marketing Targeted advertising	Technology service providers Analytics services Marketing service providers E-Commerce vendors	Ad networks Marketing sponsors
Non-Precise Geolocation Information (such as zip or area code, state, country)	Directly from you Cookies and similar technologies Marketing sponsors Technology service providers Ad networks	To provide and improve the Services Personalization of the Services Fraud and cybersecurity Direct marketing Targeted advertising	Technology service providers E-Commerce vendors Marketing service providers	Ad networks Marketing sponsors
Precise Geolocation Information (such as home or billing address or latitude and longitude)	Directly from you E-Commerce vendors	To provide and improve the Services Fraud and cybersecurity	Technology service providers E-Commerce vendors Fraud and cybersecurity companies	N/A
Inferences drawn from the above information about your predicted characteristics and preferences	Third party data providers Marketing sponsors	To provide and improve the Services Personalization of the Services Direct marketing Targeted advertising Analytics	Technology service providers Analytics companies	Ad networks Marketing sponsors

We do not knowingly share for targeted advertising or sell Personal Information related to individuals under the age of 16 or sensitive Personal Information. We share or sell other Personal Information for targeted advertising purposes. To opt out of sales and shares of Personal Information, click: Do Not Sell or Share My Personal Information.

Data Retention Practices

We retain your Personal Information for as long as reasonably necessary to achieve the purposes disclosed at the point of collection or in this Privacy Policy, unless a shorter retention period is required by law. We retain your Personal Information for complying with legal, regulatory, audit and tax requirements. In addition, we retain your Personal Information for the period of time that enables us to handle and respond to your questions, complaints and requests, to investigate, initiate and depend legal claims, and to protect our rights or our legal position.

Your Rights and Choices

If you are a California resident, you may have rights with respect to your Personal Information, subject to applicable exceptions. Once we receive your request and confirm your identity (see Exercising Your Rights), we will review and process your request, as discussed below.

Right to Access

You may be entitled to request that we disclose to you the specific pieces of your Personal Information that we have collected about you in a portable and, to the extent technically feasible, readily usable format (“Right to Access”).

Right to Know

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months (the “Right to Know”).

Right to Deletion

You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions (the “Right to Delete”).

Right to Correct

You may request that we correct Personal Information that we hold about you in the event that the Personal Information is inaccurate, taking into account the nature of the Personal Information and the purposes of processing the Personal Information (“Right to Correct”).

Right to Limit the Processing of Sensitive Personal Information

You may be entitled to restrict the processing of your sensitive Personal Information in certain circumstances.

Right to Opt-Out of Sales and Sharing for Targeted Advertising

You have the right to direct us to not sell your Personal Information and to not disclose your Personal Information for certain targeted advertising (the “Right to Opt-Out”). Consumers who opt-in to Personal Information sales may opt-out of future sales at any time. To exercise the Right to Opt-Out, you (or your authorized representative) may submit a request by contacting us at customercare@onekingslane.com or by calling us at (332) 333-6412.

Exercising Your Rights to Access, Know, Correct or Delete

To exercise these rights, please submit a request by contacting us at customercare@onekingslane.com or by calling us at (332) 333-6412.

Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will review your request to see if an exception allowing us to retain the information applies.

Only you, or someone legally authorized to act on your behalf, may exercise the rights related to your Personal Information.

You may only exercise the Right to Know twice within a 12-month period.

To exercise your rights, you must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative, which may include:
Your name, user account ID, password, address or email address on file.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

You do not need to create an account with us to exercise your rights. However, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Information associated with that specific account.

We will only use Personal Information provided in the request to verify the requestor’s identity or authority to make it.

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us at customercare@onekingslane.com.

We endeavor to substantively respond to a verifiable Consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your Personal Information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Changes to this Addendum

We reserve the right to amend this Addendum at our discretion and at any time. When we make changes to this Addendum, we will post the updated Addendum on this page. When we do, we will revise the “Last Revised” date at the top of this Addendum. Please check back frequently to see any updates or changes to our Addendum. Your continued use of our website at www.onekingslane.com following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this notice, the ways in which One Kings Lane collects and uses your information described here and in the One Kings Lane Privacy Policy, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Email: customercare@onekingslane.com

Postal Address: 901 E. Northfield Drive, Suite 200, Brownsburg, Indiana 46112

If you need to access this Addendum in an alternative format due to having a disability, please contact customercare@onekingslane.com.