CCPA Notice

YOUR RIGHTS AS A CALIFORNIA RESIDENT

BeyondReps Inc (DBA IronRod Health) will be referred as IronRod Health.

This section applies only to California consumers. It describes how we collect, use, and share California consumers' personal information in our role as a business, and the rights applicable to such residents. For purposes of this section "personal information" has the meaning given in the California Consumer Privacy Act ("CCPA"). IronRod Health does not sell your personal information or your end users' personal information.

We process your personal information only in order to provide the services and we do not retain, use, or disclose your personal information outside of the scope of the agreement we have with you.

HOW WE COLLECT, USE, AND SHARE YOUR PERSONAL INFORMATION

We have collected the following statutory categories of personal information in the past twelve (12) months:

• Identifiers, such as name, e-mail address, mailing address, fax number and phone number. We collect this information directly from you or from third party sources.
• Information collected in connection with your use of our services, including communications usage information and the communications content processed through the services.
• Internet, Network Information, and Geolocation data, such as IP address. We collect this information from your device.
• Financial information, such as payment details or financial account numbers in the process of providing you with our services. We collect this information from you.
• Inferences based on your use of the services and browsing history.
• Other personal information, in instances when you interact with us online, by phone or e-mail in the context of receiving support from our sales and customer service teams.

YOUR CALIFORNIA RIGHTS

You have certain rights regarding the personal information we collect or maintain about you. Please note these rights are not absolute, and there may be cases when we decline your request as permitted by law.

• The right of access means that you have the right to request that we disclose what personal information we have collected, used, and disclosed about you in the past 12 months.
• The right of deletion means that you have the right to request that we delete personal information collected or maintained by us, subject to certain exceptions.
• The right to non-discrimination means that you will not receive any discriminatory treatment when you exercise one of your privacy rights.
• IronRod Health does not sell personal information to third parties (pursuant to California Civil Code §§ 1798.100–1798.199).
• "California's "Shine the Light" law, Civil Code section 1798.83, requires certain businesses to respond to requests from California consumers asking about the businesses' practices related to disclosing personal information to third parties for the third parties' direct marketing purposes. Alternately, such businesses may have in place a policy, as we do, only to disclose personal information of consumers to third parties for the third parties' direct marketing purposes if the consumer has opted into such information-sharing.

RIGHT TO KNOW

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The specific pieces of Personal Information we collected about you
• The categories of Personal Information we collected about you.
• The categories of sources from which the Personal Information is collected about you.
• Our business or commercial purpose for collecting or selling that Personal Information.
• The categories of third parties with whom we share that Personal Information.
• If we sold or disclosed your Personal Information for a business purpose

RIGHT TO DELETE

You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the rights of other consumers to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.)
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the business' deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

HOW TO EXERCISE YOUR CALIFORNIA RIGHTS

You can exercise your rights yourself or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your personal information, we will verify your identity by a method appropriate to the type of request you are making. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent's identity to protect your personal information.

Please email us at CCPA@ironrod.health if you would like to exercise your rights pursuant to CCPA or learn more about your rights or our privacy practices.

UPDATES & CHANGES TO THIS CCPA NOTICE

This CCPA notice may be updated periodically and without prior notice to you to reflect changes in our processing of your personal data and privacy practices. This notice is effective as of July 7, 2022.