This Privacy Notice for California Residents ("California Notice") is provided by Madwire, LLC d/b/a Marketing 360® ("Madwire," "we," "us," or "our") and applies solely to visitors, users, and others who reside in the State of California ("California consumers" or "you"). It supplements and should be read together with our Marketing 360® Privacy Policy (the "Privacy Policy"), which contains additional details about our data practices that apply to all users. In the event of a conflict between this California Notice and the Privacy Policy with respect to California consumers, this California Notice controls.

This California Notice has been adopted to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (Prop. 24), and the regulations issued by the California Privacy Protection Agency (collectively, "CCPA/CPRA"). Terms defined in the CCPA/CPRA have the same meaning when used here.

Information We Collect

The types of personal information we collect, the sources from which we collect it, and the purposes for which we use it are described in the "Information We Collect About You and How We Collect It" and "How We Use Your Information" sections of our Privacy Policy. For purposes of the CCPA/CPRA, in the preceding twelve (12) months we have collected personal information from California consumers falling into the following categories:

Identifiers, such as first and last name, username, postal address, email address, telephone number, and IP address.

Personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name, postal address, telephone number, bank account number, and payment card details.

Commercial information, such as products or services purchased, transaction history, subscription details, and billing records.

Internet or other network activity, such as browsing behavior on our Websites, search queries, interactions with our content or advertisements, cookie identifiers, and pixel data.

Geolocation data, such as approximate location derived from your IP address or time zone settings.

Inferences drawn from other personal information, such as a profile reflecting your preferences, characteristics, and likely interests derived from usage and transaction data.

We collect this information directly from you when you provide it to us, automatically as you navigate our Websites through cookies and similar tracking technologies, and from third-party service providers and business partners. For more detail on how we collect information, please see the "Information We Collect" section of our Privacy Policy.

Sensitive Personal Information

We do not collect Sensitive Personal Information as defined under CCPA/CPRA — including Social Security numbers, financial account credentials (beyond what is necessary to process payments), precise geolocation, racial or ethnic origin, religious beliefs, genetic or biometric data, health information, or information concerning sex life or sexual orientation — as part of our standard operations. Because we do not use Sensitive Personal Information for purposes beyond what is necessary to provide requested services, we do not offer a separate opt-out for its use at this time.

How We Disclose Personal Information

We share personal information with third parties as described in the "Disclosure of Your Information" section of our Privacy Policy. For California purposes, in the preceding twelve (12) months we have disclosed personal information to third parties for business purposes, including Identifiers, California Customer Records information, Commercial information, Internet or network activity, Geolocation data, and Inferences. Recipients include service providers assisting us with payment processing, cloud infrastructure, data analytics, email delivery, customer support, and advertising. All service providers are contractually required to process your personal information only on our behalf, in accordance with our instructions, and subject to appropriate confidentiality and security obligations.

Sale and Sharing of Personal Information

We do not sell your personal information in exchange for monetary compensation. However, we do share certain personal information — specifically internet or network activity data and inferences — with third-party advertising partners such as Google and Meta for purposes of cross-context behavioral advertising. Under CCPA/CPRA, this may constitute "sharing" even in the absence of monetary exchange, and you have the right to opt out. See "Your Right to Opt Out of Sale or Sharing" below.

We have not knowingly sold or shared the personal information of consumers under 16 years of age in the preceding twelve (12) months.

How Long We Retain Your Information

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, as described in the "Data Retention" section of our Privacy Policy. As a general matter:

Identifiers and contact data are retained for the duration of your account relationship and for up to seven (7) years after account closure for legal and compliance purposes. Financial and transaction data are retained for a minimum of seven (7) years to satisfy tax, accounting, and legal requirements. Technical data and internet activity — including cookie identifiers, IP addresses, and usage logs — are retained for up to twenty-six (26) months in active systems, or longer where required by law or a legitimate business need. Profile, preference, and marketing communications data are retained for the duration of your account and for up to three (3) years following account closure.

We may retain personal information for longer periods where required by applicable law or where there is an ongoing legal claim, investigation, or compliance obligation.

Your Rights as a California Resident

Subject to certain limitations and exceptions under the CCPA/CPRA, California residents have the following rights regarding their personal information.

Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, our business or commercial purposes for collecting or sharing it, and the categories of third parties with whom we have disclosed or shared it.

Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you, taking into account the nature of the information and our purposes for processing it.

Right to Delete

You have the right to request that we delete personal information we have collected from you and direct our service providers to do the same, subject to certain exceptions. We may deny a deletion request where retention is necessary to complete a transaction, detect security incidents, comply with a legal obligation, exercise free speech rights, or make other lawful uses of the information that are compatible with the context in which it was provided.

Right to Opt Out of Sale or Sharing

You have the right to direct us to stop selling or sharing your personal information with third parties for cross-context behavioral advertising. To exercise this right, click Do Not Sell or Share My Personal Information or contact us using the information in the "How to Submit a Request" section below.

Right to Limit Use of Sensitive Personal Information

To the extent we collect Sensitive Personal Information, you have the right to direct us to limit its use and disclosure to purposes specifically authorized by law. As noted above, we do not collect Sensitive Personal Information as part of our standard operations.

Right to Data Portability

As part of a Right to Know request, you may ask us to provide your personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another entity.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you a different price, provide a different level or quality of service, or suggest that you may receive different treatment because you exercised a right under this notice.

How to Submit a Request

To exercise your Right to Know, Right to Correct, Right to Delete, or Right to Data Portability, please submit a verifiable consumer request through one of the following methods:

Email: privacy@madwire.com

Phone: 855-773-8171

Postal Mail: Madwire, LLC Attn: Data Privacy Officer 3420 E. Harmony Rd. Suite #125 Fort Collins, CO 80528

Verification

To protect your personal information, we are required to verify your identity before processing your request. You must provide sufficient information to allow us to reasonably confirm that you are the person about whom we collected information, or an authorized representative of that person. We may ask you to confirm specific account details that match our records.

Authorized Agents

You may designate an authorized agent to submit a request on your behalf. The agent must provide written authorization signed by you, and we may still require you to verify your identity directly with us before processing the request.

Response Timeframe

We will acknowledge receipt of your request within ten (10) business days and respond substantively within forty-five (45) calendar days. If we require additional time, we will notify you of the extension — up to an additional forty-five (45) days — and the reason for it. You may submit up to two (2) verifiable consumer requests within any twelve-month period at no charge.

Minors

We do not knowingly collect, sell, or share the personal information of consumers under 16 years of age. If you have reason to believe we have inadvertently collected information from a minor under 16, please contact us immediately at privacy@madwire.com so that we may promptly delete that information.

Other California Privacy Rights

California Civil Code Section 1798.83 permits California residents to request information regarding our disclosure of personal information to third parties for their own direct marketing purposes. To make such a request, please contact us at privacy@madwire.com or write to us at the postal address above.

Changes to This Notice

Madwire reserves the right to amend this California Notice at any time. When we make changes, we will post the updated notice to this page and update the effective date at the top. Your continued use of our Websites or Madwire Services following the posting of changes constitutes your acceptance of those changes.

Contact and Escalation

For questions about this California Notice or to exercise your rights, please contact our Data Privacy Officer using the information in the "How to Submit a Request" section above.

If you have concerns about our privacy practices that we have not resolved to your satisfaction, you may contact the California Privacy Protection Agency (CPPA) at:

California Privacy Protection Agency 2101 Arena Blvd. Sacramento, CA 95834 https://cppa.ca.gov/