ONLINE PRIVACY POLICY

Of the above categories of Personal Information, the following are categories of Sensitive Personal Information the Company may collect from or about consumers, independent contractors, or applicants:

1. Personal Identifiers (social security number, driver’s license or state identification card number, passport number)

2. Account Information (your Company account log-in, in combination with any required security or access code, password, or credentials allowing access to the account)

3. Protected Classifications (racial or ethnic origin, religious or philosophical beliefs, union membership, or sexual orientation)

4. Medical and Health Information

5. Geolocation Data (IP address and/or GPS location)

Personal information does not include:

• Publicly available information from government records.

• Information that a business has a reasonable basis to believe is lawfully made available to the general public by the consumer, independent contractor, or applicant, or from widely distributed media.

• Information made available by a person to whom the consumer, independent contractor, or applicant has disclosed the information if the consumer, independent contractor, or applicant has not restricted the information to a specific audience.

• Deidentified or aggregated information.

We may collect your personal information from the following sources:

• You the consumer, independent contractor, or job applicant, when you visit the website and voluntarily submit information through forms on the website or social media, when you visit any of our stores or physical locations, when you purchase or inquire about any of our products or services, when you enter into a contract to perform services for us, or when you apply for a position of employment

• Our employees and contractors when you interact with them

• Other customers and visitors when you interact with them or when they observe you

• We utilize cookies to automatically collect information about our website visitors

• The Contact Us page on this website

• Surveillance cameras at our physical locations

• Lead generators and referral sources

• Credit and consumer reporting agencies?

• Recruiters

• Social media platforms

• Company-issued computers, electronic devices, and vehicles

• Company systems, networks, software applications, and databases you log into or use

We may disclose your personal information to/with the following categories of service providers, contractors, or third parties:

1. Financial institutions

2. Lead providers

3. Product manufacturers/administrators

4. Government agencies

5. Promotional or other fulfilment vendors

6. Marketing support vendors and vendors that support managing or hosting the website

7. Transaction support vendors (e.g., check guaranty, payment processors)

8. Data analytics vendors

9. Employee tracking and talent management systems

10. Security and risk management vendors

11. Corporate customers

12. Original equipment manufacturers (OEM) (suppliers and makers of the products / equipment we sell or lease to our customers)

PrimeFlight does not sell your personal information.

We may collect your personal information for the following business purposes:

1. To fulfill or meet the purpose for which you provided the information.

2. To process and submit financing applications, including to apply for credit, or credit pre-qualification.

3. To process, complete, and maintain records on transactions.

4. To provide warranty coverage on products and services.

5. To schedule, manage and keep track of appointments.

6. To respond to consumer inquiries, including requests for information, customer support online, phone calls.

7. To improve the user experience on our website.

8. To understand the demographics of our website visitors.

9. To detect security incidents.

10. To debug, identify, and repair errors that impair existing intended functionality of our website.

11. To protect against malicious or illegal activity and prosecute those responsible.

12. To verify and respond to consumer requests.

13. To prevent identity theft.

14. JOB APPLICANT PURPOSES:

    1. To fulfill or meet the purpose for which you provided the information. For example, if you share your name and contact information to apply for a job with the Company, we will use that Personal Information in connection with your candidacy for employment.

    2. To comply with local, state, and federal law and regulations requiring employers to maintain certain records, as well as local, state, and federal law, regulations, ordinances, guidelines, and orders relating to COVID-19.

    3. To evaluate your job application and candidacy for employment.

    4. To obtain and verify background check and references.

    5. To communicate with you regarding your candidacy for employment.

    6. To reduce the risk of spreading infectious diseases in or through the workplace.

15. INDPENDENT CONTRACTOR PURPOSES:

    1. To fulfill or meet the purpose for which you provided the information.

    2. To comply with state and federal law and regulations requiring businesses to maintain certain records (accident or safety records, and tax records/1099 forms).

    3. To engage the services of independent contractors and compensate them for services.

    4. To evaluate, make, and communicate decisions regarding an independent contractor, including decisions to hire and/or terminate.

    5. To grant independent contractors access to secure Company facilities, systems, networks, computers, and equipment, and maintain information on who accessed such facilities, systems, networks, computers, and equipment, and what they did therein or thereon.

    6. To implement, monitor, and manage electronic security measures on independent contractor devices that are used to access Company networks and systems.

    7. To evaluate, assess, and manage the Company’s business relationship with vendors, service providers, and contractors that provide services to the Company.

    8. To improve user experience on Company computers, networks, devices, software applications or systems, and to debug, identify, and repair errors that impair existing intended functionality of our systems.

    9. To reduce the risk of spreading infectious diseases in or through the workplace.

We may disclose your personal information for the following business purposes as numbered above: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14(a), 14(b), 14(c), 14(d), 14(e), 14(f), 15(a), 15(b), 15(c), 15(d), 15(e), 15(f), 15(g), 15(h), and 15(i).

We do NOT and will not sell your personal information in exchange for monetary or other valuable consideration. We do not share your personal information for cross-context behavioral advertising.

We do not and will not use or disclose your sensitive personal information for purposes other than the following:

1. To perform the services reasonably expected by an average employee who requests those services.

2. To detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information.

3. To resist malicious, deceptive, fraudulent, or illegal actions directed at the business and to prosecute those responsible for those actions.

4. To ensure the physical safety of natural persons.

5. For short-term, transient use.

6. To perform services on behalf of the Company.

7. To verify or maintain the quality or safety of a product, service or device that is owned, manufactured for, or controlled by the Company, and to improve, upgrade, or enhance the service or device that is owned, manufactured for, or controlled by the Company.

8. For purposes that do not involve inferring characteristics about the consumers, contractors, and applicants.

Retention of Personal Information

We will retain each category of personal information in accordance with our established data retention schedule as indicated above. In deciding how long to retain each category of personal information that we collect, we consider many criteria, including, but not limited to: the business purposes for which the Personal Information was collected; relevant federal, state and local recordkeeping laws; applicable statutes of limitations for claims to which the information may be relevant; and legal preservation of evidence obligations.

Compliance with Law and Safety

We may disclose specific personal and/or sensitive personal information based on a good faith belief that such disclosure is necessary to comply with or conform to the law or that such disclosure is necessary to protect our employees or the public.

Use of Cookies and Other Tracking Technologies

Cookies are small files that a website may transfer to a user’s computer that reside there for either the duration of the browsing session (session cookies) or on a permanent, until deleted, basis (persistent cookies) that may be used to identify a user, a user’s machine, or a user’s behavior. We make use of cookies under the following circumstances and for the following reasons:

• Provide you with services available through the website and to enable you to use some of its features

• Authenticate users and prevent fraudulent use of user accounts

• Identify if users have accepted the use of cookies on the website

• Compile data about website traffic and how users use the website to offer a better website experience

• Understand and save visitor preferences for future visits, such as remembering your login details or language preference, to provide you with a more personal experience and to avoid you having to re-enter your preferences every time you use the website

• You may delete cookies from your web browser at any time or block cookies on your equipment, but this may affect the functioning of or even block the website. You can prevent saving of cookies (disable and delete them) by changing your browser settings accordingly at any time. It is possible that some functions will not be available on our website when use of cookies is deactivated. Check the settings of your browser. Below you can find some guidance:

  1. Safari

  2. Opera

  3. Internet Explorer

  4. Google Chrome

  5. Mozilla

Children Under the Age of 16

We do not knowingly sell or share the personal information of consumers under 16 years of age.

How We Protect the Information that We Collect

The protection of the information that we collect about visitors to this website is of the utmost importance to us and we take every reasonable measure to ensure that protection, including:

• We keep automatically collected data and voluntarily collected data separate at all times.

• We use internal encryption on all data stores that house voluntarily captured data.

• We use commercially reasonable tools and techniques to protect against unauthorized access to our systems.

• We restrict access to private information to those who need such access in the course of their duties for us.

Rights Under the CCPA and CPRA

This section of the Privacy Policy applies only to California residents who are natural persons. If you are a California resident, you have the following rights pursuant to the California Consumer Privacy (CCPA) as amended by the California Privacy Rights Act (CPRA):

1. Right to Know. The right to request, up to 2 times in a 12-month period, that we identify to you (1) the categories of personal information we have collected about you going back to January 1, 2022, unless doing so would be impossible or involve disproportionate effort, or unless you request a specific time period, (2) the categories of sources from which the personal information was collected, (3) the business or commercial purpose for collecting, selling, or sharing this information, (4) the categories of third parties with whom we share or have shared your personal information, (5) the categories of personal information that we have sold or shared about you and the categories of third parties to whom the personal information was sold or shared, by category or categories of personal information for each category of third parties to whom the personal information was sold or shared, and (6) the categories of personal information that we have disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose;

2. Right to Access. The right to request, up to 2 times in a 12-month period, that we disclose to you, free of charge, the specific pieces of personal information we have collected about you going back to January 1, 2022, unless doing so would be impossible or involve disproportionate effort, or unless you request a specific time period;

3. Right to Delete. The right to request, up to 2 times in a 12-month period, that we delete personal information that we collected from you, subject to certain exceptions;

4. Right to Correct. The right to request that we correct inaccurate personal information (to the extent such an inaccuracy exists) that we maintain about you;

5. Right to Opt-Out. The right to opt-out of the selling or sharing of your personal information to third parties;

6. Right to Limit. The right to limit the use or disclosure of your sensitive personal information;

7. The right to designate an authorized agent to submit one of the above requests on your behalf. See below for how you can designate an authorized agent; and

8. The right to not be discriminated or retaliated against for exercising any of the above rights, including an applicant’s and independent contractor’s right not to be retaliated against for exercising the above rights.

You can submit any of the above types of consumer requests through any of the 2 options below:

1. Submit an online request on our website at Online Request Form.

2. Call our privacy toll-free line at +1 833-223-4672.

Gramm-Leach-Bliley Act Exemption

Portions of our services are subject to the Gramm-Leach-Bliley Act. When we are extending credit, or providing financial advice or counseling, those activities are covered by the Gramm-Leach-Bliley Act. The CCPA does not apply to personal information to the extent that we collect, process, sell, or disclose it subject to the Gramm-Leach-Bliley Act. Therefore, certain rights under the CCPA may be limited to the extent such requests to exercise CCPA rights relate to the collection, processing, selling, or disclosure of personal information in connection with financial activities covered by the Gramm-Leach-Bliley Act.

How We Will Verify That it is Really You Submitting the Request

If you are a California resident, when you submit a Right to Know, Right to Access, Right to Delete, or Right to Correct request through one of the methods provided above, we will ask you to provide some information in order to verify your identity and respond to your request. Specifically, we will ask you to verify information that can be used to link your identity to particular records in our possession, which depends on the nature of your relationship and interaction with us. For example, we may need you to provide your name, email, phone number, IP address, and/or browser ID.