CALIFORNIA PRIVACY POLICY

Effective Date: May 1, 2019
Last update: July 1, 2020
HBX-PRODUCTS FOR LIFE, LLC DBA AS HERBAX is committed to maintaining your discretion and trust as it relates to the privacy of your information. This privacy policy is for our consumers, users and website visitors who are California residents (this “CALIFORNIA PRIVACY LAW”) and supplements the information contained in the HERBAX Online Privacy Statement at (ADD LINK) ( the “HERBAX Privacy Statement”).

Quick links:
I. OVERVIEW OF THIS CALIFORNIA PRIVACY LAW
II. HOW WE COLLECT, USE AND SHARE PERSONAL INFORMATION
III. CCPA RIGHTS FOR CALIFORNIA CONSUMERS
IV. CONTACT US; EXERCISE YOUR RIGHTS
V. UPDATE OF OUR CALIFORNIA PRIVACY LAW.

I. OVERVIEW OF THIS CALIFORNIA PRIVACY LAW
What is this California Privacy Law? The California Consumer Privacy Act of 2018 (“CCPA”) and other privacy laws in California give California consumers certain privacy rights related to their personal information. These rights are in addition to the privacy rights set forth in the Herbax Privacy Statement. This California Privacy Act describes the rights that California consumers may have under the CCPA.
To which Herbax entities does this California Privacy Law apply? This California Privacy Law only applies to those websites operated by HERBAX.
What is “personal information”? For the purposes of this California Privacy Law, “personal information” is defined as information that identifies, relates to, describes, may reasonably be associated with, or could be reasonably linked, directly or indirectly, to a consumer. California or California family in particular.

Personal information does not include:
• Publicly available information from government archives.
• Information without personal or grouped references.
• Other regulated information that is excluded from the scope of the CCPA, such as:
• medical information that is governed by the California Medical Information Confidentiality Act (CMIA);
• protected health information collected by a covered entity or associated business governed by the Health Insurance Contracting and Accountability Act of 1996 (HIPAA);
• data from clinical trials subject to the Federal Policy for the Protection of Human Subjects;
• personal information covered by certain industry-specific privacy laws, including the Fair Credit Information Act (FRCA), the Gramm-Leach-Bliley Act (GLBA), or the Fair Credit Information Act (FRCA). California Financial Information Privacy Act (FIPA).

Who are the “California consumers”? A “California consumer” is a natural person who resides in California. For the purposes of this California Privacy Act, a California consumer does not include persons to the extent that they (i) act as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, not for the purposes of profit or governmental agency that does business with HERBAX or (ii) acts as a job applicant, employee, owner, director, officer, member of the medical staff or contractor of HERBAX.

II. HOW WE COLLECT, USE AND SHARE PERSONAL INFORMATION?
HERBAX may collect personal information from you in different ways and for different purposes. It is important to note that the types of personal information we collect will depend on your interaction with us, including the types of products or services that you use.

This section contains the Categories of Personal Information that we have likely collected in the last 12 months prior to the effective date of this California Privacy Law or may collect and includes the following information for each category:
Description: Describes the category of personal information collected.
Examples: Examples of Personal Information Collected by Category.
Sources: Categories of sources from which personal information is collected.
Business objectives: Business and / or commercial objectives for which personal information is collected or used.
Third Parties: The categories of third parties with whom personal information is shared or sold for commercial purposes.

Contact information:
Description:
Includes attributes that identify the natural person.
Examples:
Consumer name, address, phone number and email, owner account information, online identifier, user ID, and site visitor information (names, addresses, etc.) and demographic information (such as, zip code, age). It can also include personal identifiers such as vehicle ownership and social media identifiers.

Sources:
• Provided by the consumer
• Dealers
• Service providers
• Online consumer activity
• Affiliated companies
• Data derived internally from HERBAX

Business objectives:
•Customer support (customer relationship management, customer service request management, customer open issue management, system logs of customer interactions through multiple points of contact)
•Telematic services (provide telematic services, electronic signatures in agreements)
Third parties:
Industry research (HERBAX does not share data with vendors of any type of industry)
Sources:
•Provided by the consumer
•Dealers
•Service providers
•Online consumer activity
•Affiliated companies
•Data derived internally from Herbax

Business Objectives:
Dealer service support (identifying and providing consumer services, improving pace during distribution center visits, and improving the overall dealer experience)
Third parties:
Marketing providers (to collect or use data on behalf of Herbax to perform marketing activities related to products or services). Employees (who provide services to distributors).
Consumer Interaction Data:
Description:
Includes consumer interaction with Herbax via phone, email, chat, text and/or mail.
Examples:
Call center logs and screen, audio and/or video recordings
Sources:
•Consumer-provided.
•Distributors.
•Service providers
•Consumer online activity
•Affiliated companies
•Data derived internally from Herbax
Business Objectives:
•Analytics (data is integrated from all other categories of data for analysis to help Herbax better understand and serve consumers, improve service levels and the consumer experience
•Studies (industrial and government studies, quality and product confidence)
•Surveys (sales, service, quality)
Third parties:
Customer Service Agents (to enrich Herbax data to better understand consumer preferences)
Consumer online activity:
Description:
Includes a consumer’s online interactions with Herbax
Examples:
Online accounts, search history, cookies, IP addresses, social media information
Sources:
•Provided by the consumer
•Dealers
•Service providers
•Online consumer activity
•Affiliated companies
•Data derived internally from Herbax
Business objectives:
•Business transactions (company sales record, services, financial records, leases, electronic signatures, negotiations, dealer validation)
•eCommerce (online commerce registry)
Third parties:
Distributor Support Sellers (use of data collected by Herbax to provide services to distributors)
Sources:
•Provided by the consumer
•Service providers
•Online consumer activity
•Affiliated companies
•Data derived internally from Herbax
Marketing:
Description:
Includes pre- and post-sale marketing interactions with a reseller.
Examples:
Information collected at events, product purchase negotiation information, product service marketing information, direct marketing information, and retention marketing information
Sources:
•Provided by the consumer
•Dealers
•Service providers
•Online consumer activity
•Affiliated companies
•Data derived internally from Herbax
Third parties:
Media agencies (to run media programs, advertisements, attributions; determine program effectiveness; and track consumer activities using internal and third-party cookies / tagging)
Research Data:
Description:
Includes personal information collected by Herbax related to consumer and product research
Examples:
Survey information, syndicated product and / or service studies, predictable behavior studies, focus group information
Sources:
•Provided by the consumer
•Dealers
•Service providers
•Online consumer activity
•Data derived internally from Herbax
Third parties:
Service vendors (to support Herbax in providing services such as surveys, service reminders, training, safety / recall programs, logistics, shipping)
Legal activity:
Description:
Includes personal information collected related to legal claims
Examples:
Dispute, claims, refunds, litigation and withdrawals
Sources:
•Provided by the consumer
•Dealers
•Service providers
•Online consumer activity
•Affiliated companies
•Data derived internally from Herbax
Business objectives:
•Dispute resolution (dispute cases, dispute case payments, government requests, arbitrations)
•Compliance with laws
Third parties:
Does not apply
In addition to the objectives and categories of third parties identified above, it is also likely that we will share your personal information with the following third parties and for the following purposes:
•With our service providers who provide services to us and process personal information on our behalf
•With regulatory authorities, credit bureaus and other government agencies, as necessary, to comply with our legal or regulatory requirements
SALE OF PERSONAL INFORMATION TO THIRD PARTIES
We may have sold the following categories of personal information about you to third parties in the preceding twelve (12) months:
•Contact information
•Data on Consumer Products and Services
•Consumer Interaction Data
•Online consumer activity
•Vehicle Originated Data
•Marketing
•Research Data
However, we do not sell the personal information of minors under 16 years of age without affirmative authorization. For more information on how to exclude yourself from this sale, please see Section III.C (Right to Exclude Yourself from the Sale of Your Personal Information) below.

III. CCPA RIGHTS FOR CALIFORNIA CONSUMERS
The CCPA gives California consumers certain rights regarding their personal information. This Section III explains those rights. If you are a California consumer and would like to exercise any of those rights, please see Section.III.E (How to Apply) below for more information on how to apply.

A. RIGHT TO KNOW AND ACCESS YOUR PERSONAL INFORMATION
If you are a California consumer, you may have the right to request that Herbax provide you with information about what personal information about you we have collected, used, disclosed or sold in the preceding twelve (12) months. Once we receive your request and verify your identity, we will disclose the following to you:
The categories of personal information that we have collected about you in the previous twelve (12) months.
2. The categories of sources from which we have collected your personal information in the previous twelve (12) months.
3. The business or commercial objectives of collecting your personal information in the previous twelve (12) months.
4. The categories of third parties with whom we have shared your personal information in the previous twelve (12) months.
5.The specific data of personal information that we have collected about you in the previous twelve (12) months.

B. RIGHT TO DELETE YOUR PERSONAL INFORMATION
If you are a California consumer, you may have the right to request that Herbax delete certain personal information that we have collected from you. However, this right to erasure does not apply to any personal information that is subject to an exception under the CCPA (as described below). Once we receive your request and verify your identity, we will remove (and instruct our dealers to remove) your personal information from our files that is not subject to any of the CCPA exceptions. Specifically, we may deny your request for deletion if your personal information is required for any of the following reasons, which we will identify in our response if we deny your request:
Complete the transaction for which we have collected personal information, provide a good or service that you requested, take reasonably anticipated actions within the context of our ongoing business relationship with you, or otherwise fulfill our contract with you.
2.To be able to comply with the terms of a written warranty or product recall made in accordance with federal law.
3.Detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, or prosecute those responsible for such activities.
4.Debug products to identify or repair bugs that affect existing desired functionality.
5.Exercise freedom of expression, ensure the right of another consumer to exercise their rights to freedom of expression or exercise another right enshrined by law.
6.Comply with the California Electronic Communications Privacy Act (California Penal Code, Section 1546 et seq.).
7.Participate in scientific, historical, or statistical research, public or peer-reviewed, in the public interest that adheres to all other applicable ethics and privacy laws, when deletion of the information is likely to render impossible or seriously affect the achievement of the research, if you have previously provided your informed consent.
8.Enables only internal uses that reasonably align with your expectations based on your relationship with us.
9.Meet a legal obligation.
10.Make other internal and legitimate use of that information that is compatible with the context in which you provided it.

C. RIGHT TO EXCLUDE YOURSELF FROM THE SALE OF YOUR PERSONAL INFORMATION
If you are a California consumer, you may have the right to request that Herbax stop selling all or part of the personal information that we have collected from you. Once we receive your request and verify your identity, we will process your request as soon as possible and we will also notify any third party to whom we have sold your personal information ninety (90) days prior to your request. You may also use an authorized representative to file an opt-out request on your behalf, provided that you give the authorized representative written permission to do so and the representative provides us with that proof when you submit your request. If you choose to opt out and subsequently enter into any transaction in which the sale of your personal information is required as a condition of completing the transaction, we will provide you with instructions for re-entry. Furthermore, your exclusion will not affect any situation in which you instructed us to transfer your personal information to a third party.

D. RIGHT NOT TO BE DISCRIMINATED
Herbax will not discriminate against any California consumer who exercises any of the rights described above. Specifically, we will not deny you goods or services; We will not charge you different prices or rates, including through the granting of discounts or other benefits, nor will we impose penalties; we will not provide you with a different level or quality of goods or services; nor will we suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

E. HOW TO SUBMIT AN APPLICATION
If you are a California consumer and would like to exercise any of the CCPA rights identified above, you can apply either by completing the online application form or by calling us at 315-975-4254.

F. SUBMISSION OF AN APPLICATION THROUGH YOUR AUTHORIZED REPRESENTATIVE
If you are a California consumer, you may choose to designate an authorized representative to submit an application on your behalf, provided that the authorized representative has your written permission to do so and you have taken steps to verify your identity directly with us. If you would like to appoint a representative, your representative must register as such with the California Secretary of State and submit a copy of this registration to us along with your consumer application. We may need to contact you directly to verify the request.

G. HOW DO WE VERIFY YOUR APPLICATION
We cannot comply with your request or provide you with your personal information if we cannot verify your identity or ability to make the request and confirm that the personal information relates to you. Filing a verifiable consumer application does not require you to create an account with us.
To verify your identity, we will request that you provide the following personal information when you submit your request:

• Name
• Last name
• Email address
• Mobile phone number
• Address
• City
• State
• Postal Code

You may need to provide additional information as part of your answers to our identity verification questions. We will only use this information to confirm your identity which may include the use of a third-party identity verification service. If we use a third-party identity verification service, our third-party identity verification tool will ask you certain identity verification questions and compare those answers with what is in its database. Depending on your type of request or the information you have requested, we may request additional information from you to verify your identity and fulfill your request.
If we are unable to verify your identity successfully, we will report this fact to you.
We will respond to your request within forty-five (45) days. However, in certain circumstances, we may require additional time to process your request, as permitted by the CCPA or other applicable law. We will inform you within forty-five (45) days of your request if the extension is necessary and why it is necessary. The disclosures we provide will only cover the 12 months before receipt of your verifiable consumer request.
If we are unable to comply with your request, our response will also explain why we are unable to comply with your request.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or unsubstantiated. If we determine that the application requires a fee, we will tell you why we made that decision and provide you with an estimated cost before completing your application.
You can only make a verifiable consumer request to learn about or access your personal information twice within 12 months
IV. CONTACT US; EXERCISE YOUR RIGHTS
If you have questions or concerns regarding this California Privacy Law or our privacy practices, please contact us using one of the methods provided below:
• By phone at: 956-618-3767
• By mail to: 809 Savannah Ave Unit A, McAllen, TX 78503

V. UPDATE OF OUR CALIFORNIA PRIVACY LAW.
This California Privacy Law was updated in July 2020.

HBX – PRODUCTS FOR LIFE, LLC 809 Savannah Ave Unit A. McAllen, TX 78503 Teléfonos: 1-315-975-4254, Fax: 1(956) 618 3767 Mail: info@herbax.us