This Website is operated by Business Gift Registry (hereinafter “Business Gift Registry”). This Privacy Policy governs your access to the Business Gift Registry website https://businessgiftregistry.com (the “Website”).

The term “you”, “your” or “User(s)” shall refer to any entity or person that accesses, views, uses our Website, and/or starts an account with us. The terms “we,” “our”, “us” shall refer to Business Gift Registry.

Since we may gather certain types of information about our users, we feel you should fully understand our policy and the terms and conditions surrounding the capture and use of that information. This Privacy Policy discloses what information we gather and how we use it. The private information you provide on the Website will be used only for its intended purpose.

BY VISITING, SIGNING UP, USING AND/OR ACCESSING THE WEBSITE, YOU CONSENT TO THE DATA PRACTICES DESCRIBED IN THIS STATEMENT. IF YOU DO NOT AGREE WITH OUT PRIVACY PRACTICES, DO NOT USE THE WEBSITE.

INFORMATION WE COLLECT We will collect information, including both Personal Information and Non-Personal Information, when you interact with us and the Website, for example when you: • Access or use the Website; • Create an account with us; • Open or respond to our e-mails; • Contact customer service; • Visit any page online that displays our ads or content; • Make a purchase on or through the Website;

PERSONAL INFORMATION

Personal Information” means information about you that specifically identifies you or, when combined with other information we have, can be used to identify you. As a general rule, we do not collect Personal Information about you when you visit and/or use the Website, unless you choose to provide such information to us. Submitting Personal Information through the Website is voluntary. By doing so, you are giving us your permission to use the information for the stated purpose.

(a) LEGAL BASIS FOR COLLECTING YOUR PERSONAL INFORMATION We collect, process and use your information for the purposes described in this Privacy Policy, based at least on one of the following legal grounds:

With your consent: We ask for your agreement to process your information for specific purposes and you have the right to withdraw your consent at any time.

When Performing this Agreement: We collect and process your Personal Information in order to provide you with the Website, following your acceptance of this Privacy Policy; to maintain and improve our Website; to develop new services and features for our Users; and to personalize the Website in order for you to get a better user experience.

Legitimate interests: We process your information for our legitimate interests while applying appropriate safeguards that protect your privacy. This means that we process your information for things like detecting, preventing, or otherwise addressing fraud, abuse, security, usability, functionality or technical issues with , protecting against harm to the rights, property or safety of our properties, or our users, or the public as required or permitted by law; enforcing legal claims, including investigation of potential violations of this Privacy Policy; in order to comply and/or fulfill our obligation under applicable laws, regulation, guidelines, industry standards and contractual requirements, legal process, subpoena or governmental request, as well as our Terms and Conditions and our billing process.

(b) INFORMATION WE COLLECT AND HOW WE COLLECT INFORMATION Through the Website, we may collect information that can identify you when you voluntarily submit it to us. Your Personal Information may include: • Your name; • Email address; • Your telephone number; • Photo ID; • Demographic Information (Gender, Ethnicity); • Business Employer Identification Number; • Business bank account; • DUNS number; • Business phone number and address; • Better Business Bureau reviews; • Business receipts; • Payment information; • Other similar information.

(c) STORAGE OF PERSONAL INFORMATION We will take reasonable precautions, as well as physical, technical, and organizational measures in accordance with industry standards, as described herein, to protect your

Personal Information from loss, misuse, unauthorized access, disclosure, alteration, or destruction.