DMI California Notice at Collection and Privacy Notice

In this privacy notice, "we", "us", "our" and "DMI" means Data Management, LLC.

This DMI California Notice at Collection and Privacy Notice ("California Privacy Notice") applies solely to individuals who reside in the State of California ("California Consumer" or "you"). It is delivered on behalf of DMI and our affiliates and governs certain personal information we collect from California Consumers on any website on which a link to this California Privacy Notice appears (collectively, the "Websites") and personal information that we purchase or receive about California Consumers to provide services to our customers and for them to use for their own business and commercial purposes.

We have adopted this California Privacy Notice to comply with the California Consumer Privacy Act of 2018, California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA"). Please take the time to read and understand this California Privacy Notice.

Scope

DMI is a Service Provider to non-profit organizations in the U.S. We are a processor of their donor data and we facilitate direct mailings to share information about the non-profit’s mission and opportunities to donate. The data we process may include personally identifiable information (PII) such as name, physical address, and email address. These non-profits may also rent lists of household resident names with whom they don’t currently have a relationship, to introduce themselves to new potential donors. These lists, owned by various list owners (not Data Management, LLC), may include PII. As a Service Provider, we cannot process any opt-out requests and you need to exercise your rights with the actual list owners, which may be either the non-profit itself or other data brokers.

The CCPA temporarily exempted employment-related data and business-to-business (B2B) data from obligations imposed under the law other than the requirement to offer an opt-out for sales of personal information and the obligation to provide “notice at collection.” These exemptions expired on January 1, 2023. Rights of California Consumers in these contexts are noted below (see “Rights of California Consumers”) and disclosures as required by CCPA are included in the DMI Privacy Notice, posted at https://www.data-management.com/company/privacy_notice.

Publicly available information and de-identified data (as those terms are used in the CCPA) are not personal information for purposes of the CCPA. This California Privacy Notice does not apply to such information.

Rights of California Consumers

Residents of California have the following rights as provided by the CCPA, as amended by the CPRA.

Right to Access/Right to Know. You have a right to request that we provide you with the following information:

• Specific pieces of personal information that we have collected about you
• Categories of personal information we have collected about you
• Categories of sources from which the personal information is collected
• Categories of personal information that we sold or shared or disclosed for a business purpose about you
• Categories of third parties to whom the personal information was sold or shared or disclosed for a business purpose
• Business or commercial purpose for collecting, sharing, or selling personal information

Right to Correct. You have a right to request that we update or correct your personal information.

Right to Delete. You have a right to request that we delete your personal information under certain circumstances, subject to several exceptions.

You can exercise these rights by sending an email to privacy@data-management.com.

Right to Opt Out of our Selling or Sharing Your Data

DMI does not sell or share your data, including any personal information, to third parties as defined under CCPA. As such, DMI will not process requests to opt out of selling or sharing data.

Please note that you may only make a CCPA/CPRA-related data access or data portability disclosure request twice within a 12-month period.

Request Verification

If you choose to contact us directly by [website/email/phone/in writing], you will need to provide us with:

• Enough information to identify you [(e.g., your full name, address and customer or matter reference number)];
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.

Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.

Protection Against Retaliation

You have the right to not be retaliated against by us because you exercised any of your rights under the CCPA/CPRA. This means we cannot, among other things:

• Deny goods or services to you;
• Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
• Provide a different level or quality of goods or services to you; or
• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.