U.S. States Privacy Notice

This U.S. States Privacy Notice (“Notice”) supplements the information in, and is part of, Totei’s Privacy Policy. This Notice discloses information related to our privacy practices required by certain U.S. State laws, which include California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, Virginia, Delaware, Iowa, New Hampshire, Nebraska, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Rhode Island, and Kentucky. Most of these laws have thresholds for applicability such as the number of consumers’ personal data processed and/or revenue thresholds for the covered business.

This Notice explains that you have a right to know what personal information has been collected about you, request its deletion, withdraw consent, correct inaccuracies and receive a portable copy of your data. It also provides Totei’s contact information that you can use to make any requests in connection with your exercise of such rights. This Notice reiterates the categories of personal information that Totei currently collects, which it may share with service providers. This Notice may be updated periodically to reflect changes in applicable law or company practices.

1. YOUR RIGHTS

Your state’s law may allow you to have certain rights, such as:

• Right to know. You may receive information regarding the categories of Personal Information we collected, the sources from which we collected Personal Information, the purposes for which we collected and shared Personal Information, the categories of Personal Information that we sold and the categories of third parties to whom the Personal Information was sold, and the categories of Personal Information that we disclosed for a business purpose in the 12 months preceding your request.
• Right to deletion. You may request that we delete the Personal Information that we have collected from you. We will use commercially reasonable efforts to honor your request, in compliance with applicable laws. Please note, however, that we may need to keep such information pursuant to applicable law.
• Right to Withdraw Consent. You may have the right to withdraw your prior consent to the collection and sharing of information.
• Rectification. You have the right to correct inaccurate information.
• Right to data portability/access. You may be entitled to receive the specific pieces of Personal Information we have collected in the twelve (12) months preceding your request, including, where applicable, in an electronic and readily usable format.

2. HOW TO CONTACT US

If you have any questions about our privacy practices, this Notice or would like to contact us you can do so by email at privacy@totei.com (opens in new window).

We are required to verify the requests we receive from you when you exercise certain rights listed above. We (or third parties we engage to assist us) may ask you to provide certain information to us in order for us to verify your request. You may also designate an authorized agent to exercise your rights on your behalf.

In addition to these rights, pursuant to California’s “Shine the Light” law, California residents who share personal information with us have the right to request and obtain from us once per year, free of charge, a list of the third parties to whom we have disclosed their Personal Information (if any) for direct marketing purposes in the prior calendar year, as well as the type of Personal Information disclosed to those parties. If you would like to exercise this right, please use the contact information listed above to contact us.

You have a right to appeal a decision made by us, as applicable in your state. We make every effort to fulfill your request, however, we reserve the right to deny requests as allowed by applicable state law, such as where we have a reasonable belief that the request is fraudulent, where your identity cannot be confirmed, or where we must retain your information consistent with applicable law. If you would like to submit an appeal, please email privacy@totei.com (opens in new window), and please explain your concerns and provide the email associated with your account so we may properly review your data rights request history. Our response to your appeal will inform you of decisions and actions in response to your appeal, including an explanation of the reasons for the decisions. You may freely exercise these rights without fear of discrimination or retaliation.

3. CATEGORIES OF PERSONAL INFORMATION WE COLLECT

The information below reflects our current practices and practices during the past twelve months.

Category	Examples of Personal Information in this Category	Collected: Yes or No	Who shared with
A. Identifiers.	A real name, alias, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.	YES	Service Providers
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	NO	N/A
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	NO	N/A
D. Commercial information.	Records of personal property, products or services purchased, obtained, or other purchasing histories.	NO	N/A
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO	N/A
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer's interaction with a website.	YES	Service Providers
G. Geolocation data.	Physical location or movements.	NO	N/A
H. Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	NO	N/A
I. Professional or employment-related information.	Current or past job history or performance evaluations.	NO	N/A
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO	N/A
K. Inferences drawn from other personal information.	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO	N/A

4. UPDATES TO THIS NOTICE

We may update this Notice from time to time. When we do, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Notice changes if and where this is required by applicable data protection laws. You can see when this Notice was last updated by checking the "last updated" date displayed at the top of this Notice.