{"id":1933,"date":"2025-05-09T21:26:08","date_gmt":"2025-05-09T21:26:08","guid":{"rendered":"https:\/\/acro2000.com\/NRS\/?page_id=1933"},"modified":"2025-05-12T15:44:09","modified_gmt":"2025-05-12T15:44:09","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/acro2000.com\/NRS\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"1933\" class=\"elementor elementor-1933\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e4b2837 e-flex e-con-boxed e-con e-parent\" data-id=\"e4b2837\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69d8a1d elementor-widget elementor-widget-woocommerce-breadcrumb\" data-id=\"69d8a1d\" data-element_type=\"widget\" data-widget_type=\"woocommerce-breadcrumb.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<nav class=\"woocommerce-breadcrumb\" aria-label=\"Breadcrumb\">Home<\/nav>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-22fca15 e-flex e-con-boxed e-con e-parent\" data-id=\"22fca15\" data-element_type=\"container\" id=\"privacy-policy-nrs\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f5ecf01 elementor-widget elementor-widget-heading\" data-id=\"f5ecf01\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">National Retail Solutions, Inc.\nPrivacy Policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f76cb34 elementor-widget elementor-widget-text-editor\" data-id=\"f76cb34\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Effective as of April 1, 2025<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d39ca7d elementor-widget elementor-widget-spacer\" data-id=\"d39ca7d\" data-element_type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9e6e6d9 e-con-full e-flex e-con e-child\" data-id=\"9e6e6d9\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1e2240c elementor-widget elementor-widget-text-editor\" data-id=\"1e2240c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>1.<\/strong> <strong>General<\/strong><\/p><p>National Retail Solutions, Inc. (\u201cNRS\u201d) is committed to protecting the privacy of your personal information.<\/p><p>This Privacy Policy (the \u201cPolicy\u201d) sets forth our policies and procedures regarding the collection, use and sharing of your personal information.\u00a0 We also explain the steps we take to protect your information and how you can limit the collection, use and sharing of your information.<\/p><p>This Policy applies to the following unless otherwise noted:<\/p><ul class=\"wp-block-list\"><li>users of our products and services, including our POS terminals and NRS Pay (collectively, the \u201cNRS Products\u201d);\u00a0<\/li><li>users and visitors of our websites, including nrsplus.com, nrspay.com, nrsdigitalmedia.com, nrsmarket.com, clubnrs.com, homeimprovementpos.com, nrsinsights.com and ShopBossLocal.com (collectively, the \u201cNRS Websites\u201d);\u00a0<\/li><li>members of any NRS sponsored loyalty or rewards programs (collectively, the \u201cNRS Reward Programs\u201d);<\/li><li>users of our apps, including the My NRS Store app and the BOSS Local Shopping app (collectively, the \u201cNRS Apps\u201d); and<\/li><li>users of web stores that NRS has created for retailers to sell their store\u2019s products online (collectively, the \u201cNRS Web Stores\u201d).<\/li><\/ul><p>When we use the term \u201cServices\u201d it collectively refers to the NRS Products, the NRS Websites, the NRS Reward Programs, the NRS Apps, and the NRS Web Stores.\u00a0 When we refer to NRS or \u201cus,\u201d or \u201cwe,\u201d we\u2019re talking about National Retail Solutions, Inc. and, as applicable, its affiliates, subsidiaries, parents, and other related entities.<\/p><p>You should also read the terms of service for each Service that you use, which can be found at the applicable NRS Website, NRS App or NRS Web Store.<\/p><p>We may update this Policy from time to time and you should review it periodically for changes.\u00a0 Any updated Policy will be posted at the NRS Websites, the NRS Apps and in the NRS Web Stores.<\/p><p>This Policy does not apply to any website, product, or service of any third-party companies, advertisers, partners, or service providers, even if the website links to (or is linked from) NRS Websites.\u00a0 NRS Websites may contain links to other third-party websites not owned, operated, maintained by or related to NRS (\u201cThird-Party Sites\u201d).\u00a0 Any such hyperlinks are to be accessed at the user\u2019s own risk.\u00a0 We are not responsible for the content, privacy practices, data collection, policies, or any other aspect of a Third-Party Site, even if the NRS Websites contain a link to such site.\u00a0 This Policy does not apply to Third Party Sites, and we encourage you to independently read and understand each Third-Party Site\u2019s own privacy policies.\u00a0 The presence of a link to a Third-Party Site does not necessarily indicate that such Third-Party Site is sponsored by or affiliated with NRS in any way.<\/p><p><strong>2.<\/strong> <strong>Consent for use of NRS Websites\u00a0<\/strong><\/p><p>By accessing or using the NRS Websites, you agree to this Policy and our Terms of Use, which are incorporated by reference into this Policy.\u00a0 If you do not agree with our policies and practices, you may choose not to use our Sites.\u00a0 Your use of the Services, and any dispute over privacy, is subject to this Policy and our Terms of Use, including its applicable limitations on damages and the resolution of disputes.<\/p><p>We or third parties we work with may automatically collect certain information using technologies such as cookies, web beacons, clear GIF, pixels, internet tags, web server logs, and other data collection tools, further described below.\u00a0 By using the NRS Websites, you consent to NRS and third parties obtaining data about your visits to the NRS Websites, including, but not limited, to via technologies like Meta Pixel and Google Analytics.<\/p><p>Depending on where you reside, you may have additional rights, which are described in greater detail in the exhibits below \u2013 see infra Exhibits A-H (further describing the rights of California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia residents).\u00a0 Also, if you are a California resident, please review our California Rights Notice, which further supplements this Policy and explains additional rights you may have under California law regarding our use of your Personal Information.\u00a0<\/p><p><strong>3.<\/strong> <strong>Information We Collect<\/strong><\/p><p>We may receive and collect both personal identifying and non-identifying information from you when we operate and provide you with the Services, when you install, access or use the Services and when you communicate with us.\u00a0 Personal information means information either on its own or in conjunction with other data that enables a specific person to be identified (\u201cPersonal Information\u201d), but does not include \u201cde-identified,\u201d \u201canonymous,\u201d or \u201caggregate\u201d information, which is not otherwise associated with a specific person.\u00a0 Non-identifying information means information that by itself cannot be used to identify a specific person (<em>e.g.,<\/em> zip code).<\/p><p>A. Information You Provide.\u00a0 Depending on the particular Service, you may provide the following Personal Information:<\/p><ul class=\"wp-block-list\"><li>name<\/li><li>address<\/li><li>email address<\/li><li>mobile or other phone number<\/li><li>payment information, including credit or debit card details and bank account info<\/li><li>date of birth<\/li><li>Social Security Number or EIN<\/li><li>other information necessary to verify you and\/or your account, including citizenship status<\/li><li>other information you provide to us for customer support purposes, surveys, sweepstakes or product feedback<\/li><\/ul><p>B. Information We Collect.\u00a0 Depending on the particular Service, we may automatically collect the following information:<\/p><ul class=\"wp-block-list\"><li>items purchased or redeemed through any of the Services<\/li><li>login and other credentials<\/li><li>Service related diagnostic and performance information, including how you use our Services and performance logs<\/li><li>information about your device and store, including model, browser, operating system, platform type, application software, mobile network, device identifiers and numbers, and Internet connection speed<\/li><li>browsing, searching and buying activity<\/li><li>IP address<\/li><li>logs of web portal access<\/li><li>advertisement campaign conversions<\/li><li>NRS Websites and NRS Web Stores visited and websites you come from and go to next<\/li><li>NRS App feature usage and stored content<\/li><li>personal, phone or social network contact information<\/li><li>device identification number<\/li><li>geolocation and device location information, which is derived from your IP or other data that provides a city or postal code location, if you enable location features on your devices<\/li><li>transactional information when you purchase one of our Services or certain other products<\/li><\/ul><p>C. Information Provided by Third Parties.\u00a0 When you install, access or use the Services we may obtain the following information from third party sources:<\/p><ul class=\"wp-block-list\"><li>credit information from credit reporting agencies<\/li><li>transactional information when you purchase a Service or a product through a Service, including receipts or information from app stores or other third parties processing your payment<\/li><li>aggregate information from outside companies that collect consumer information such as demographic and interest data (examples of this information include gender, age range, sports enthusiast, or pet owner)<\/li><li>unique marketing and\/or device IDs, contact and other marketing lead information from third parties, including from app stores<\/li><li>users of our Services may provide us with your email address or phone number through the purchase\/use of a Service, our refer-a-friend programs, their mobile address book or social networking platforms<\/li><li>other information from third parties that helps us operate, provide, understand, customize, support and market our Services<\/li><\/ul><p><strong>4.<\/strong> <strong>How We Use Information<\/strong><\/p><p>We may use all the Personal Information we collect or you provide to help us operate, provide, improve, understand, customize, support, and market our Services (and some third party services).\u00a0 In addition, we may use your information for general, operational and administrative purposes, including maintaining your account, authenticating you and contacting you.\u00a0 As used in this Policy, the terms \u201cuse,\u201d \u201cusing\u201d and \u201cprocessing\u201d information include using cookies or other similar technologies on a computer\/phone\/device, subjecting the information to statistical or other analysis and using or handling information in any way, including but not limited to, scanning, collecting, storing, evaluating, aggregating, modifying, deleting, using, combining, disclosing and sharing information among our affiliates both in and outside the United States and to select service providers and vendors.<\/p><p>A. Our Services.\u00a0 We analyze how our customers use our Services and use that information to evaluate and improve our Services, to research, develop, and test new services and features, and to conduct troubleshooting activities.\u00a0 For example:<\/p><ul class=\"wp-block-list\"><li>we communicate with you about our Services and features and let you know about our terms and policies and other important updates;<\/li><li>we may target particular advertisements or other content to you based information we have collected or you provided;<\/li><li>we may digitally scan content stored in the NRS Apps, including without limitation, your user information, and use this information to provide you with targeted information and advertising;<\/li><li>we use your information to respond to you when you contact us.\u00a0 Our communications with you, including phone conversations, chats and emails, may be monitored and recorded by us for quality assurance or for legal, regulatory or training purposes; and<\/li><li>we verify accounts and activity, and promote safety and security, such as by investigating suspicious activity or violations of our terms, to ensure our Services are being used legally.<\/li><\/ul><p>B. NRS Apps.\u00a0 We engage certain service providers and vendors who use mobile software development kits to passively collect information from users of the NRS Apps.\u00a0 We use this data primarily to help us deliver personalized notifications and to identify you in a unique manner across other devices or browsers for the purposes of customizing advertisements or content.<\/p><p><strong>5.<\/strong> <strong>How We Share Information<\/strong><\/p><p>We may share all the information we collect and receive with our affiliates, both in and outside the United States, and to select service providers and vendors, to help us operate, provide, improve, understand, customize, support, and market our Services (and some third party services), and for general, operational and administrative purposes, including maintaining your account, authenticating you and contacting you.\u00a0 We also share information with each NRS store with which you interact.\u00a0 When we share information with our service providers and vendors, we require them to use your information only in accordance with our instructions and terms or with express permission from you and not to sell your information.\u00a0 In addition, you share your information as you use and communicate through our Services.<\/p><p>A. Information Shared Within the NRS Family of Companies.\u00a0 We may share information within the NRS family of companies, including our affiliates both in and outside the United States (collectively, the \u201cNRS Family of Companies\u201d) primarily to operate, provide, support and market our Services.\u00a0 For example, we may share your information with various NRS affiliates in order to process your transaction.<\/p><p>B. Information Shared with our Service Providers and Vendors.\u00a0 We work with various service providers and vendors for a variety of business purposes such as to help us offer, operate, provide, improve, understand, customize, support and market our Services.\u00a0 We may share information with these service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf.\u00a0 For example, we may provide your credit card information and billing address to our payment processing company solely for the purpose of processing payment for a transaction you have requested.\u00a0 In addition, NRS shares certain information, including unique marketing identifiers, email addresses and mobile phone numbers (full or only partial), with some of our service providers and vendors, including tobacco companies, Google and Facebook, for marketing, advertising, rewards\/loyalty programs and analysis purposes, including the delivery of advertising campaigns and preparing and sharing aggregate business and marketing reports, demographic profiling and to deliver targeted advertising about products and services.\u00a0 All the foregoing categories exclude text messaging originator opt in data and consent; this information will not be shared with any third parties.\u00a0 In addition, no mobile information will be shared with third parties\/affiliates for marketing\/promotional purposes.\u00a0 When we share information with our service providers and vendors, we request that these parties protect your information and limit their use of the data to the purposes for which it was provided, and not to sell your information.\u00a0 NRS does not sell, rent or lease its customer lists to third parties.\u00a0 NRS does on occasion sell certain pieces of personal information, such as personal identifiers, of some of our stores\u2019 customers to data processors.\u00a0 Finally, if you purchase products or services offered jointly by NRS and one of our service providers or vendors, your customer information may be received by both NRS and the service provider or vendor that is providing the product or service.\u00a0 For these jointly offered products and services, you should also review the other company\u2019s privacy policy, which may include practices that are different from the practices described here.<\/p><p>C. Special Circumstances.\u00a0 We may share information in certain special circumstances.\u00a0 For example:<\/p><ul class=\"wp-block-list\"><li>to comply with valid legal process including subpoenas, court orders and search warrants, and as otherwise permitted or required by law;<\/li><li>to assist law enforcement in cases involving danger of death or serious physical injury to any person or in other emergencies;<\/li><li>to protect our rights or property, or the safety of our customers or employees;<\/li><li>to protect against fraudulent, malicious, abusive, unauthorized or unlawful use of our Services and to protect our network, Services, devices and users from such use;<\/li><li>to advance or defend against complaints or legal claims in court, administrative proceedings and elsewhere;<\/li><li>to prospective purchasers of all or part of our business or assets;<\/li><li>to outside auditors, lawyers and regulators; and<\/li><li>with your consent.<\/li><\/ul><p>D. Information Shared with Advertising Entities or Social Networks.\u00a0 You may see third party advertisements on our products and Services, the NRS Websites, the NRS Apps, and\/or the NRS Web Stores.\u00a0 Some advertisements are chosen by companies that place advertisements on behalf of advertisers.\u00a0 These companies, often called ad servers, may place and access cookies on your device to collect information about your visit.\u00a0 The information they collect from our sites is in a form that does not identify you personally.\u00a0 This information may be combined with similar data obtained from other websites to help our advertisers better reach their targeted audiences.\u00a0 Targeting may be accomplished by tailoring advertising to interests that they infer from your browsing of our sites and your interaction with other websites where these ad servers also are present.\u00a0 If you choose to interact with specific advertisers who advertise on our products and Services, the NRS Websites, the NRS Apps, or the NRS Web Stores, the information you provide to them is subject to the conditions of their specific privacy policies.\u00a0 The NRS Websites, NRS Apps and NRS Web Stores also include plug-ins and widgets that may provide information to their associated social networks or entities about the NRS page you visit, even if you do not click on or otherwise interact with the plug-in or widget.<\/p><p>E. When You Share Information.\u00a0 You share your information as you use and communicate through our Services.\u00a0 Stores with whom you communicate may store or share your information (including your phone number or messages) with others on and off our Services.<\/p><p><strong>6.<\/strong> <strong>Cookies &amp; Other Tracking Technology<\/strong><\/p><p>Our Services may use \u201ccookies,\u201d web beacons, and other tracking technologies (collectively, \u201cCookies\u201d) to automatically collect users\u2019 information (including Personal Information).\u00a0 Cookies are small data files that are transferred to users\u2019 web browsers and\/or stored on their devices as they are browsing.\u00a0 We may use Cookies to improve our Services and make your user experience online more customized and efficient.\u00a0 Among other uses, Cookies help us recognize repeat users, facilitate users\u2019 access to and use of NRS Websites, and track users\u2019 behavior on websites they visit.\u00a0 We may compile aggregate data for statistical purposes to improve the content of our Sites or to better administer the web pages available on the Sites.\u00a0\u00a0<\/p><p>Web beacons are used to tell us how and when pages in our sites are visited, by how many people, their point of origin and operating system and to monitor performance with our Services.\u00a0 Web beacons do not collect Personal Information.<\/p><p>The information collected with these technologies may include (i) your internet protocol (IP) address, unique device identifiers, location, browser type, and internet service provider information; (ii) information about when and how you access and use NRS Websites or Services, such as the domains you visit, what features you used and for how long, the website that referred you to us, and date\/time stamps associated with your usage; (iii) information about the device you use to access NRS Websites or services, such as device type, device ID, and device\/browser settings; and (iv) location of the device used to access the NRS Websites or services derived from GPS or WiFi use.<\/p><p>Cookies can be \u201cPersistent\u201d or \u201cSession\u201d Cookies. Persistent Cookies remain on your personal computer or mobile device when you go offline, while Session Cookies are deleted as soon as you close your web browser. We differentiate between Cookies that are essential for the technical features of our Sites and optional analytics and advertising Cookies, as follows:\u00a0<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Cookie Type<\/strong><\/td><td><strong>Description<\/strong><\/td><\/tr><tr><td>Essential Cookies<\/td><td>These are cookies that NRS Websites need to function, and that enable you to move around and use NRS Websites and features.\u00a0 You do not need to enable cookies to visit NRS Websites; however, some aspects of NRS Websites may be difficult or impossible to use if cookies are disabled.\u00a0 Examples of where these cookies are used include: to determine when you are signed in, to determine when your account has been inactive, and for other troubleshooting and security purposes.<\/td><\/tr><tr><td>Analytics Cookies<\/td><td>Analytics cookies allow us to understand more about how many visitors we have to NRS Websites, how many times they visit us and how many times a user viewed specific pages within NRS Websites.\u00a0 Although analytics cookies allow us to gather specific information about the sites that you visit and whether you have visited NRS Websites multiple times, we cannot use them to find out details such as your name or address.\u00a0<br \/>We use certain Google Analytics Advertising Features, including Remarketing and Demographics and Interest Reporting.\u00a0 Google Analytics is a web analysis service provided by Google that allows us to collect data about the traffic on the NRS Websites through Google cookies and other identifiers, which enables us, among other things, to create user segments based on demographic or interest data and to deliver relevant advertising.\u00a0 Google utilizes the data collected to track and examine the use of our websites and to prepare reports on the activities and share them with other Google services.\u00a0 Google may use the data collected to contextualize and personalize the ads of its own advertising network.\u00a0 You may be able to opt out of the Google Analytics Advertising Features through your browser ads settings or by visiting Google\u2019s Ads Settings page.\u00a0 For more information regarding how Google collects, uses and shares your information, please refer to \u201cHow Google Uses Information From Sites or Apps that Use Our Services,\u201d which can be found at www.google.com\/policies\/privacy\/partners\/, or any other URL Google may provide from time to time.<\/td><\/tr><\/tbody><\/table><\/figure><p>For information on how you can manage Cookies, please see the \u201cYour Rights and How To Limit Sharing Of Information\u201d section below.<\/p><p><strong>7.<\/strong> <strong>Your Rights and How To Limit Sharing Of Information<\/strong><\/p><p>You may have choices about how we use and share your information and there are additional protections that may apply with regard to certain information we collect.<\/p><p>A. Communications.<strong>\u00a0 <\/strong>If you do not wish to receive promotional communications from NRS, you can opt out at any time by following the unsubscribe instructions provided in those communications, or by contacting us as provided in the \u201cContact Us\u201d section below.\u00a0 Please note that NRS may still continue to send you non-promotional emails, such as those regarding your orders, feedback submissions, and other service-related matters.<\/p><p>B. Promotional Emails.\u00a0 You may choose to provide us with your email address for the purpose of allowing us to send free newsletters, surveys, offers, and other promotional materials to you, as well as targeted offers from third parties.\u00a0 You can opt out of receiving promotional emails by following the unsubscribe instructions in emails that you receive.\u00a0 If you decide not to receive promotional emails, we may still send you service-related communications.<\/p><p>C. Promotional Mailings.\u00a0 If at any time you do not want to receive offers and\/or circulars from us by mail, you can remove yourself from our mailing lists by emailing us (our contact information is below) with \u201cNO SNAIL MAIL\u201d in the subject line along with your name, address, and zip code. Please note that our mailings are prepared in advance of their being sent.\u00a0 Although we will remove your name from our mailing list after receiving your request, you may still receive mailings from us that had been initiated prior to your name being removed.<\/p><p>D. Promotional Text Messages.\u00a0 You can opt-out of receiving marketing text messages at any time by replying \u201cSTOP,\u201d or following the unsubscribe instructions contained in the text messages that you receive.<\/p><p>E. Cookies.\u00a0 Web browser applications (such as Microsoft Internet Explorer, Google Chrome, Firefox and Apple Safari) typically have features that prevent cookies from being sent or notify you when they are sent.\u00a0 You will need to update your browser\u2019s cookie settings in accordance with your preferences.\u00a0 Your ability to limit cookies is subject to your browser settings and limitations.\u00a0 If you use multiple browsers on your device, you will need to update each browser\u2019s settings separately. Some web browsers incorporate a \u201cDo Not Track\u201d (\u201cDNT\u201d) or similar feature that signals to websites that a user does not want to have his\/her online activity and behavior tracked.\u00a0 NRS does not respond to DNT signals or other similar mechanisms.\u00a0 If you are using a mobile device, you can reset your device settings to limit the use of information collected about you, including your location data.\u00a0 This is typically done by disabling your location settings\/permissions. Please contact Apple Support or Google for Android (as applicable) for more information on how to do this on your device.\u00a0 You can stop all collection of information via our mobile application by uninstalling the application from your device.<\/p><p>F. Analytics. \u00a0Google provides users choices on how their data is collected by Google Analytics by developing an Opt-out Browser Add-on which can be located at: http:\/\/tools.google.com\/dlpage\/gaoptout?hl=en.\u00a0 By installing this Add-on, no information is being sent to Google Analytics.<\/p><p>G. Push Notifications.\u00a0 You can opt out of receiving push notifications from us via the NRS Apps by going to your device \u201cSettings\u201d and clicking on \u201cNotifications,\u201d and then changing those settings for the applicable app.\u00a0 Please note that you cannot withdraw your consent to receive certain in app messages from us.\u00a0 Your ability to manage some of our Services could be limited if you withdraw your consent to receive text and SMS messages.\u00a0 In those cases NRS does not recommend using those Services without authorization to receive such messages.<\/p><p>H. Other Rights.\u00a0 In certain jurisdictions, such as California, you may also have the following rights regarding your Personal Information (see Section 8 and the Exhibits to this Policy for full details):<\/p><ol class=\"wp-block-list\"><li>Right to Request Access to Your Personal Information.\u00a0 You may request access to your Personal Information by contacting us at the address described below or filling out the applicable state request form at www.idt.net.\u00a0 If required by law, upon request, we will grant you reasonable access to the Personal Information that we have about you.\u00a0 Note that residents of certain jurisdictions may be entitled to ask us for a notice describing what categories of Personal Information (if any) we disclose with third parties or affiliates for direct marketing;<\/li><\/ol><ol class=\"wp-block-list\" start=\"2\"><li>Request to Request Deletion of Your Personal Information.\u00a0 Typically we retain your Personal Information for the period necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.\u00a0 You may, however, request that we delete your Personal Information by contacting us at the address described below or filling out the applicable state request form at www.idt.net.\u00a0 If you revoke your consent for the processing of Personal Information, we may no longer be able to provide you certain services.\u00a0 If required by law we will grant a request to delete information, but you should note that in many situations we must keep your Personal Information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes;<\/li><\/ol><ol class=\"wp-block-list\" start=\"3\"><li>Right to Request Correction of Your Personal Information.\u00a0 You have the right to request that we correct or supplement any inaccurate or incomplete Personal Information we process about you.\u00a0 Depending on the purposes of the processing, you may have the right to have incomplete Personal Information completed, including by means of providing a supplementary statement;<\/li><\/ol><ol class=\"wp-block-list\" start=\"4\"><li>Right to Data Portability.\u00a0 In certain circumstances you have the right to request that we provide the Personal Information which you provided to us in a structured, commonly used, and machine-readable format; and you have the right to transmit such Personal Information to another entity;<\/li><\/ol><ol class=\"wp-block-list\" start=\"5\"><li>Right of Non-Discrimination\/Retaliation.\u00a0 We do not discriminate against individuals who exercise any of their rights described in this Policy, nor do we retaliate against individuals who exercise these rights.\u00a0 However, NRS may require use of your Personal Information to provide access to the Services. Therefore, when you exercise your deletion right, in particular, you may lose access to certain aspects of the Services that require your Personal Information; and\/or<\/li><\/ol><ol class=\"wp-block-list\" start=\"6\"><li>Right to Opt Out of Our Use of Your Sensitive Personal Information (in certain instances and if permissible under applicable law).\u00a0 You have the right to request the restriction of processing of your Sensitive Personal Information.\u00a0 However, we do not use or disclose Sensitive Personal Information for purposes other than those expressed in this Policy or as otherwise permitted by applicable law, and these uses cannot be limited under applicable law.<\/li><\/ol><p>Many of the above rights are subject to exceptions and limitations.\u00a0 For example, you may be located in a jurisdiction that does not give you the right to make these requests.\u00a0 In such a case, your request may not be fulfilled.\u00a0 To the extent permitted by applicable law, we may reject requests that are unreasonably repetitive, unduly burdensome, risk the privacy of others, or would be very impractical to honor.\u00a0 If we are not able to provide the requested information or make the change you requested, you will be provided with the reasons for such decisions.\u00a0<\/p><p>To exercise these rights, your request must:\u00a0 (i) provide sufficient information that allows us to reasonably verify that you are the person about whom we collected Personal Information or an authorized representative of that person; and (ii) describe the request with sufficient detail that allows us to properly understand, evaluate, and respond to it.\u00a0 We may need additional information to confirm your identity or your authorized agent\u2019s identity (such as your name, email address and date of birth) or to obtain proof that you have given your authorized agent permission to act on your behalf.\u00a0 If our verification process is successful, we will respond to your request within the time and in the manner required by applicable law.\u00a0 If we cannot validate the identity of you and\/or your authorized agent or obtain proof that you have given your authorized agent permission to act on your behalf, we will attempt to contact you to inform you.<\/p><p>If you designate an authorized agent to submit requests to exercise certain privacy rights on your behalf, we will require verification that you provided the authorized agent permission to make a request on your behalf.\u00a0 You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us.\u00a0 If you are an authorized agent submitting a request on behalf of an individual, you must attach a copy of a completed Authorized Agent Designation Form (or equivalent form) indicating that you have authorization to act on the individual\u2019s behalf.<\/p><p>You can submit your request by contacting us at the address described below or filling out the applicable state request form at www.idt.net.<\/p><p><strong>8.<\/strong> <strong>Additional State Privacy Rights<\/strong><\/p><p>If you are a resident of any of the following states, then the additional terms in the applicable Exhibit to this Policy also apply to you:<\/p><p>California \u2013 see Exhibit A to this Privacy Policy<\/p><p>Colorado \u2013 see Exhibit B to this Privacy Policy<\/p><p>Connecticut \u2013 see Exhibit C to this Privacy Policy<\/p><p>Delaware \u2013 see Exhibit D to this Privacy Policy<\/p><p>Iowa \u2013 see Exhibit E to this Privacy Policy<\/p><p>Montana \u2013 see Exhibit F to this Privacy Policy<\/p><p>Nebraska \u2013 see Exhibit G to this Privacy Policy<\/p><p>New Hampshire \u2013 see Exhibit H to this Privacy Policy<\/p><p>New Jersey \u2013 see Exhibit I to this Privacy Policy<\/p><p>Oregon \u2013 see Exhibit J to this Privacy Policy<\/p><p>Texas \u2013 see Exhibit K to this Privacy Policy<\/p><p>Utah \u2013 see Exhibit L to this Privacy Policy<\/p><p>Virginia \u2013 see Exhibit M to this Privacy Policy<\/p><p><strong>9.<\/strong> <strong>Other Information<\/strong><\/p><p>A. Keeping Children Safe.\u00a0 NRS does not knowingly market to or collect information from children under the age of 16 without obtaining verifiable parental consent.\u00a0 If you allow a child to use your device or our Services, you should be aware that their information could be collected as described in this Policy.\u00a0 We encourage parents to be involved in the online activities of their children to ensure that no information is collected from a child without parental permission.<\/p><p>B. Security.\u00a0 NRS has technical, organizational and physical safeguards in place to help protect against unauthorized access to, use or disclosure of the information we collect and store.\u00a0 Employees are trained on the importance of protecting privacy and on the proper access to, use and disclosure of customer information.\u00a0 NRS secures information on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure.\u00a0 We use Secure Socket Layer (SSL) encrypted protection to protect the personal information transmitted to the NRS Websites and NRS Web Stores.\u00a0 The NRS Websites, NRS Apps and NRS Web Stores are PCI compliant in connection with your credit card information.\u00a0 Although we work hard to protect your information that we collect and store, no program is 100% secure and we cannot guarantee that our safeguards will prevent every unauthorized attempt to access, use or disclose Personal Information.\u00a0 By using the NRS Websites, you accept that risk.\u00a0 NRS maintains security and incident response plans to handle incidents involving unauthorized access to Personal Information we collect or store.\u00a0 In the event that we are required by law to inform you of a breach to your Personal Information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.\u00a0 If you become aware of a security issue, please contact us.<\/p><p>C. Contact Information.\u00a0 If you have questions, concerns or suggestions related to our Policy or our privacy practices you may contact us at:<\/p><p>National Retail Solutions, Inc.<\/p><p>520 Broad Street, 3<sup>rd<\/sup> floor<\/p><p>Newark, NJ 07102<\/p><p>800-215-0931<\/p><p>Email:\u00a0 support@nrsplus.com.<\/p><p>D. Social Networking.\u00a0 Some of our Services may allow you to participate in blog discussions, message boards, chat rooms, and other forms of social networking and to post reviews.\u00a0 Please be aware that these forums are accessible to others.\u00a0 We urge you to not submit any Personal Information to these forums because any information you post can be read, collected, shared, or otherwise used by anyone who accesses the forum.\u00a0 NRS is not responsible for the information you choose to submit in these forums.\u00a0 If you post content to information sharing forums, you are doing so by choice and you are providing consent to the disclosure of this information.<\/p><p>E. Changes to this Policy.\u00a0 We reserve the right to make changes to this Policy, so please check back periodically for changes.\u00a0 You will be able to see that changes have been made by checking to see the effective date posted at the beginning of the Policy.<\/p><p><strong>\u00a92025 National Retail Solutions, Inc. All rights reserved.<\/strong><\/p><p><strong>Exhibit A<\/strong><\/p><p><strong>California Consumers<\/strong><\/p><p>If you are a resident of California, then the following section also applies to you.<\/p><p>A. Personal Information.\u00a0 Personal information (as defined in the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (collectively, the \u201cCCPA\u201d)) includes information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.\u00a0 Personal information does not include publicly available information, including information lawfully made available to the general public by the consumer or from widely distributed media, and deidentified or aggregate consumer information. \u00a0NRS may collect and use the following categories of personal information regarding California residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Information Collected<\/td><td>Categories of Sources of Personal Information<\/td><td>Whether Sold, Shared<sup>(1)<\/sup> and\/or Disclosed for a Business Purpose and Categories of to Whom<\/td><td>Business or Commercial Purposes for Collection and Use of Personal Information<\/td><\/tr><tr><td>Personal Identifiers and Information, including items listed in subdivision (e) of Section 1798.80 of California Civil Code, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Consumer, consumer\u2019s device, automatic collection by NRS, credit reporting companies, financial companies, third party vendors that provide NRS with transactional services, and data resellers<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal information:\u00a0 data processorsShared \u2013 noDisclosed for a Business Purpose \u2013 yesCategories of Third Parties to whom NRS may disclose personal information for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., credit card processors); other NRS stores with which you interact; ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Consumer, consumer\u2019s device, automatic collection by NRS, credit reporting companies, financial companies, third party vendors that provide NRS with transactional services, and data resellers<\/td><td>Sold \u2013 noShared \u2013 noDisclosed for a Business Purpose \u2013 yesCategories of Third Parties to whom NRS may disclose personal information for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other electronic network activity information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Consumer, consumer\u2019s device, automatic collection by NRS, credit reporting companies, financial companies, third party vendors that provide NRS with transactional services, and data resellers<\/td><td>Sold \u2013 noShared \u2013 noDisclosed for a Business Purpose \u2013 yesCategories of Third Parties to whom NRS may disclose personal information for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation data (if you enable location features in apps), which may include the location of y our device<\/td><td>Consumer, consumer\u2019s device, and automatic collection by NRS<\/td><td>Sold \u2013 noShared \u2013 noDisclosed for a Business Purpose \u2013 yesCategories of Third Parties to whom NRS may disclose personal information for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Consumer, consumer\u2019s device, automatic collection by NRS, credit reporting companies, financial companies, third party vendors that provide NRS with transactional services, and data resellers<\/td><td>Sold \u2013 noShared \u2013 noDisclosed for a Business Purpose \u2013 yesCategories of Third Parties to whom NRS may disclose personal information for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., credit card processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>(1) Share and Shared (as defined in the CCPA) mean sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer\u2019s personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.<\/p><p>B. Sensitive Personal Information.\u00a0 NRS may collect limited sensitive personal information and limits the use of that information to those uses which are necessary for us to perform the services and provide the goods consumers have requested and for other uses as authorized by applicable California privacy laws and regulations.\u00a0 NRS may collect the following sensitive personal information:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Sensitive Personal Information Collected<\/td><td>Whether Sold or Shared<sup>(1)<\/sup><\/td><td>Business or Commercial Purposes for Collection and Use of Sensitive Personal Information<\/td><\/tr><tr><td>Account information, which may include account log-in, financial account, debit card or credit card number in combination with any required security or access code, password, or credentials allowing access to an account\u00a0<\/td><td>Sold \u2013 noShared \u2013 no<\/td><td rowspan=\"3\">To perform the services and provide the goods requested by the consumer, including to help us operate, provide, customize, bill and support our products and services.To verify consumer\u2019s age.To ensure the security and integrity of our customers\u2019 personal information, including to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information.<br \/>For short\u2010term, transient use, including but not limited to non\u2010personalized advertising shown as part of a consumer\u2019s current interaction with NRS.<br \/>To perform services on our behalf, including to maintain or service accounts, provide customer service, process or fulfill orders and transactions, verify customer information, process payments, provide financing, provide analytic services, provide storage, or provide similar services on behalf of our business.<br \/>To maintain the quality and safety of our products and services, including to improve, upgrade, and enhance our products and services.To resist malicious, deceptive, fraudulent, or illegal actions directed at our business and to prosecute those responsible for those actions.To ensure the physical safety of natural persons.<\/td><\/tr><tr><td>Personal Identifiers, which may include social security, driver\u2019s license, state identification card, or passport number<\/td><td>Sold \u2013 noShared \u2013 no<\/td><\/tr><tr><td>Precise geolocation (if you enable location features in our apps), which may include the location of your device<\/td><td>Sold \u2013 noShared \u2013 no<\/td><\/tr><\/tbody><\/table><\/figure><p>(1) Share and Shared (as defined in the CCPA) mean sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer\u2019s personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.<\/p><p>C. Your Rights.\u00a0 As a California resident you have certain additional rights regarding your personal information under the CCPA.\u00a0\u00a0<\/p><p>(i) Right to Know Personal Information Collected, Sold, Shared, or Disclosed \u2013 you have the right to request that we provide certain information about how we have handled your personal information including:\u00a0<\/p><p>(a) Categories of personal information collected;<\/p><p>(b) Categories of sources of personal information;<\/p><p>(c) Business or commercial purpose for collecting;<\/p><p>(d) Categories of personal information sold or shared with a third party;<\/p><p>(e) Categories of third parties to whom we have sold or shared personal information;<\/p><p>(f) Categories of personal information disclosed to third parties for a business purpose; and<\/p><p>(g) Categories of third parties with whom we have disclosed personal information for a business purpose.\u00a0\u00a0<\/p><p>(ii) Right to Access Personal Information Collected \u2013 you have the right to request the specific pieces of personal information that we have collected about you in a format that is easily understandable to the average consumer, and to the extent technically feasible, in a structured, commonly used, machine-readable format that may also be transmitted to another entity at the consumer\u2019s request without hindrance.<\/p><p>(iii) Right of No Retaliation \u2013 NRS does not discriminate against any California consumer who exercises any of the consumer\u2019s rights under the CCPA.\u00a0 Pursuant to the CCPA NRS is permitted to (a) charge a consumer a different price or rate and\/or provide a different level of service to the consumer if that difference is reasonably related to the value provided to the consumer by the consumer\u2019s data, (b) offer loyalty, rewards, premium features, discounts, or club card programs to its customers, and (c) offer financial incentives, including payments, as compensation for the collection, sale, sharing or retention of personal information.<\/p><p>(iv) Right to Delete \u2013 you have the right to request that NRS delete any personal information that it has collected about you.\u00a0 There are exceptions to this right and NRS does not have to delete your personal information if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided in the CCPA.\u00a0 In addition, if your personal information is deleted you may not be able to purchase or use our products and services.<\/p><p>(v) Right to Correct Inaccurate Personal Information \u2013 you have the right to request that NRS correct any inaccurate personal information that it maintains about you.<\/p><p>(vi) Right to Opt Out of Sale or Sharing of Personal Information \u2013 NRS may sell (as defined in the CCPA) certain pieces of your personal information.\u00a0 NRS does not share (as defined in the CCPA) your personal information.\u00a0 You have the right to request that NRS not sell or share your personal information to third parties.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/ccpa-do-not-sell and complete the form.\u00a0 We will also process any opt-out of sale\/sharing preference signal that meets the requirements set forth in the CCPA and its regulations.\u00a0 NRS does not intentionally collect the personal information of a consumer under the age of 16.\u00a0 NRS does not intentionally sell or share the personal information of a consumer under the age of 16 unless the consumer (if age 13-16) or the consumer\u2019s parent (for consumers under 13) affirmatively authorizes the sale or sharing.\u00a0\u00a0<\/p><p>(vii) Right to Limit Use and Disclosure of Sensitive Personal Information \u2013 NRS does not use your sensitive personal information (as defined in the CCPA) for purposes other than as set forth in the CCPA.\u00a0 Nonetheless, you have the right to direct NRS to limit its use of your sensitive personal information to that use which is necessary for NRS to perform the services and provide the goods you requested from NRS, to ensure the security and integrity of your personal information, to perform services on our behalf, including to maintain or service accounts, provide customer service, process or fulfill orders and transactions, verify customer information, process payments, provide analytic services, to maintain the quality of our products and services, and as otherwise provided in the CCPA.\u00a0 Please note that sensitive personal information that is collected or processed by NRS without the purpose of inferring characteristics about a consumer, is not subject to this section, and shall be treated as personal information. To exercise this right please go to https:\/\/www.idt.net\/ccpa-do-not-sell and complete the form.<\/p><p>(viii) California\u2019s \u201cShine the Light\u201d law (Civil Code Section \u00a7 1798.83) permits you to request certain information regarding our disclosure of your personal information to third parties for marketing purposes.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise your rights to know and access your personal information collected, sold, shared or disclosed by NRS, or to exercise your right to delete your personal information or to correct inaccurate personal information, please go to https:\/\/www.idt.net\/ccpa-request and complete the form.\u00a0 To exercise your right to opt out of the sale or sharing of your personal information, or to exercise your right to limit the use and disclosure of your sensitive personal information please go to https:\/\/www.idt.net\/ccpa-do-not-sell and complete the form.\u00a0 We will also process any opt-out of sale\/sharing preference signal that meets the requirements set forth in the CCPA and its regulations.\u00a0 In addition, you can exercise your rights by contacting us at 800-215-0931 or support@nrsplus.com.\u00a0 Your authorized agent can make these requests on your behalf using the same links and methods.<\/p><p>E. Verification of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably verify the requestor.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to verify the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, relative or representative is requesting the data on your behalf, we will verify their authority to act for you and may contact you and them to confirm you and their identity and gain your authorization prior to responding to the request.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to confirm receipt of each request by contacting the requestor either at the email or telephone number submitted, through the consumer\u2019s account or by other electronic means.\u00a0 NRS will attempt to verify each request and if it is able to verify a request will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 NRS may charge a fee or refuse to act on any request that is manifestly unfounded or excessive.\u00a0 All NRS responses shall be in writing and cover the previous 12 month period unless the consumer requests information beyond the 12 month period (only applies to personal information collected on or after January 1, 2022).\u00a0 Where possible the response shall be sent through the consumer\u2019s account.\u00a0 Otherwise, the response shall be sent by mail or electronically.\u00a0 NRS is not obligated to provide a response to a consumer more than two times in any 12 month period.\u00a0 The CCPA contains certain exemptions and exceptions to the exercise of some of these rights.\u00a0 If one or more of those exemptions or exceptions applies to your request, then we may not be able to act upon your request.\u00a0 Where possible we will inform you of the reasons for not acting upon your request.<\/p><p>G. How Long will NRS Retain Your Personal Information.\u00a0 NRS retains your personal information for only as long as is necessary to carry out the purposes described above in this privacy policy, and we have strict review and retention policies in place to meet these obligations.\u00a0 This time period may vary depending on the type of information and the services used, as detailed below, and applicable law, which may require us to maintain information for a set amount of time.\u00a0 After such time, we will either delete or anonymize your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible.\u00a0 We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our services.\u00a0 You cannot be identified from anonymized information retained or used for these purposes.\u00a0\u00a0<\/p><p>(i) Customer account information \u2013 we store your account information for as long as your account is active and a reasonable period thereafter in case you decide to re-activate your service.\u00a0 We also retain some of your information as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, to support business operations, and to continue to develop and improve our services.\u00a0 We are required under certain applicable tax laws to keep your basic personal information (name, address, contact details) for a minimum of six years after which time it will be destroyed unless required to be kept for other purposes.\u00a0\u00a0<\/p><p>(ii) Communications usage information \u2013 while you are an active customer, we retain the communications usage information generated by your use of our services until the information is no longer necessary to provide our services, and for a reasonable time thereafter as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, to support business operations, and to continue to develop and improve our services.<\/p><p>(iii) Marketing information, cookies and web beacons \u2013 where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise and\/or withdraw your consent.\u00a0 We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.\u00a0\u00a0<\/p><p>(iv) Device information \u2013 we collect device-specific information from you.\u00a0 If you do not revoke our access to this information via the privacy settings on your device, we will retain this information for as long as your account is active.<\/p><p>H. For More Info.\u00a0 For more information on your rights and our obligations under the CCPA please send an email to ccpa-idt@idt.net.\u00a0 For California residents with a disability please send an email to ccpa-idt@idt.net for information on how to access this policy in another format.<\/p><p><strong>Exhibit B<\/strong><\/p><p><strong>Colorado Consumers<\/strong><\/p><p>If you are a resident of Colorado, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the Colorado Privacy Act (the \u201cCOPA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable individual.\u00a0 Personal data does not include de-identified data or publicly available information.\u00a0 NRS may collect and process the following categories of personal data regarding Colorado residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected or Processed<\/td><td>Whether Sold, Shared with Third Parties, Processed for Targeted Advertising or Processed for Profiling in furtherance of Decisions that Produce Legal or Significant Effects and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal data:\u00a0 data processorsProcessed for Targeted Advertising \u2013 noProcessed for Profiling in furtherance of Decisions that Produce Legal or Significant Effects \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noProcessed for Profiling in furtherance of Decisions that Produce Legal or Significant Effects \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noProcessed for Profiling in furtherance of Decisions that Produce Legal or Significant Effects \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in apps), which may include the location of your device<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noProcessed for Profiling in furtherance of Decisions that Produce Legal or Significant Effects \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noProcessed for Profiling in furtherance of Decisions that Produce Legal or Significant Effects \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Your Rights.\u00a0 As a Colorado resident you have certain additional rights regarding your personal data under the COPA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Correct Inaccurate Personal Data \u2013 you have the right to request that NRS correct any inaccurate personal data that we maintain about you;<\/p><p>(iii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that it has collected about you.\u00a0 There may be exceptions to this right and NRS does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by Colorado law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iv) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that we maintain about you in a portable, and to the extent technically feasible a readily usable, format that allows you to transmit the data to another entity without hinderance;<\/p><p>(v) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising, Sale, or Profiling with Legal Effects \u2013 NRS may sell (as defined in the COPA) certain pieces of your personal data.\u00a0 NRS does not process your personal data for Targeted Advertising (as defined in the COPA) or process your personal data for Profiling (as defined in the COPA) for decisions that produce legal or similarly significant effects.\u00a0 You have the right to request that NRS not process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/copa-request and complete the form.<\/p><p>C. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please (i) go to https:\/\/www.idt.net\/copa-request and complete the form, or (ii) send an email to copa@idt.net detailing your request(s).\u00a0 The COPA applies to individuals who are Colorado residents, but does not apply to individuals acting in a commercial context.\u00a0 An authorized agent may submit an opt-out request on your behalf using the same methods listed in this section.<\/p><p>D. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, agent or representative is submitting an opt-out request on your behalf, we will verify their authority to act for you and may contact you and them to confirm your and their identity and to gain your authorization prior to taking action upon the request.<\/p><p>E. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NRS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p>F. Appeal of Refusal to Take Action.\u00a0 If NRS refuses to take action on your request you have the right to appeal that refusal within 30 days of your receipt of NRS\u2019s response by sending an email to copa@idt.net and requesting an appeal.\u00a0 Within 45 days of NRS\u2019s receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including the reasons for our decision.\u00a0 If your appeal is denied, then you may contact the Colorado Attorney General at https:\/\/coag.gov\/ or 720-508-6000.<\/p><p><strong>Exhibit C<\/strong><\/p><p><strong>Connecticut Consumers<\/strong><\/p><p>If you are a resident of Connecticut, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the Connecticut Privacy Act (the \u201cCTPA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable individual.\u00a0 Personal data does not include de-identified data or publicly available information.\u00a0 NRS may collect and process the following categories of personal data regarding Connecticut residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected or Processed<\/td><td>Whether Sold, Shared with Third Parties, or Processed for Targeted Advertising and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal data:\u00a0 data processorsProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in apps), which may include the location of your device<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Sensitive Data.\u00a0 The only sensitive data (as defined in the CTPA) that NRS may collect and process is precise geolocation data (as defined in the CTPA) from our apps primarily for transaction compliance reasons if the user enables the app\u2019s location feature.\u00a0 Users of our apps can enable or disable the app\u2019s location feature in the app.\u00a0 By enabling the location feature, you thereby consent to NRS collecting and processing your precise geolocation data for the purposes identified herein and as outlined in the chart above.<\/p><p>C. Your Rights.\u00a0 As a Connecticut resident you have certain additional rights regarding your personal data under the CTPA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Correct Inaccurate Personal Data \u2013 you have the right to request that NRS correct any inaccurate personal data that we maintain about you;<\/p><p>(iii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that it has collected about you.\u00a0 There may be exceptions to this right and NRS does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by Connecticut law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iv) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that we maintain about you in a portable, and to the extent technically feasible a readily usable, format that allows you to transmit the data to another entity without hinderance;<\/p><p>(v) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising, Sale, or Profiling with Legal Effects \u2013 NRS may sell (as defined in the CTPA) certain pieces of your personal data.\u00a0 NRS does not process your personal data for Targeted Advertising (as defined in the CTPA) or process your personal data for Profiling (as defined in the CTPA) for decisions that produce legal or similarly significant effects.\u00a0 You have the right to request that NRS not process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/ctpa-request and complete the form.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please go to https:\/\/www.idt.net\/ctpa-request and complete the form.\u00a0 The CTPA applies to individuals who are Connecticut residents, but does not apply to individuals acting in a commercial context.\u00a0 An authorized agent may submit an opt-out request on your behalf using the same method listed in this section.<\/p><p>E. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, agent or representative is submitting an opt-out request on your behalf, we will verify their authority to act for you and may contact you and them to confirm your and their identity and to gain your authorization prior to taking action upon the request.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NRS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p>G. Appeal of Refusal to Take Action.\u00a0 If NRS refuses to take action on your request you have the right to appeal that refusal within 30 days of your receipt of NRS\u2019s response by sending an email to ctpa@idt.net and requesting an appeal.\u00a0 Within 60 days of NRS\u2019s receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including the reasons for our decision.\u00a0 If your appeal is denied, then you may contact the Connecticut Attorney General by email at Attorney.General@ct.gov or by phone at 860-808-5318.<\/p><p><strong>Exhibit D<\/strong><\/p><p><strong>Delaware Consumers<\/strong><\/p><p>If you are a resident of Delaware, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the Delaware Personal Data Privacy Act (the \u201cDEPDPA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable individual.\u00a0 Personal data does not include de-identified data or publicly available information.\u00a0 NRS may collect and process the following categories of personal data regarding Delaware residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected or Processed<\/td><td>Whether Sold, Shared with Third Parties, or Processed for Targeted Advertising and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal data:\u00a0 data processorsProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in our apps), which may include the location of your device<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Sensitive Data.\u00a0 The only sensitive data (as defined in the DEPDPA) that NRS may collect and process is precise geolocation data (as defined in the DEPDPA) from our apps primarily for transaction compliance reasons if the user enables the app\u2019s location feature.\u00a0 Users of our apps can enable or disable the app\u2019s location feature in the app.\u00a0 By enabling the location feature, you thereby consent to NRS collecting and processing your precise geolocation data for the purposes identified herein and as outlined in the chart above.<\/p><p>C. Your Rights.\u00a0 As a Delaware resident you have certain additional rights regarding your personal data under the DEPDPA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Correct Inaccurate Personal Data \u2013 you have the right to request that NRS correct any inaccurate personal data that we maintain about you;<\/p><p>(iii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that it has collected about you.\u00a0 There may be exceptions to this right and IDT does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by Delaware law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iv) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that we maintain about you in a portable, and to the extent technically feasible a readily usable, format that allows you to transmit the data to another entity without hinderance;\u00a0<\/p><p>(v) Right to Obtain a List of the Categories of Third Parties to which the Controller has disclosed the Consumer\u2019s Personal Data \u2013 you have the right to request that NRS provide you with a list of the categories of third parties to whom NRS has disclosed your personal data; and<\/p><p>(vi) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising, Sale, or Profiling with Legal Effects \u2013 NRS may sell (as defined in the DEPDPA) certain pieces of your personal data.\u00a0 NRS does not process your personal data for Targeted Advertising (as defined in the DEPDPA) or process your personal data for profiling for decisions that produce legal or similarly significant effects (as defined in the DEPDPA).\u00a0 You have the right to request that NRS not process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/depa-request and complete the form.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please go to https:\/\/www.idt.net\/depa-request and complete the form.\u00a0 The DEPDPA applies to individuals who are Delaware residents, but does not apply to individuals acting in a commercial context.\u00a0 An authorized agent may submit an opt-out request on your behalf using the same method listed in this section.<\/p><p>E. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, agent or representative is submitting an opt-out request on your behalf, we will verify their authority to act for you and may contact you and them to confirm your and their identity and to gain your authorization prior to taking action upon the request.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NRS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p>G. Appeal of Refusal to Take Action.\u00a0 If NRS refuses to take action on your request you have the right to appeal that refusal within 30 days of your receipt of NRS\u2019s response by sending an email to idtprivacy@idt.net and requesting an appeal.\u00a0 Within 60 days of NRS\u2019s receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including the reasons for our decision.\u00a0 If your appeal is denied, then you may contact the Delaware Department of Justice at https:\/\/attorneygeneral.delaware.gov\/fraud\/cmu\/complaint\/ to submit a complaint.<\/p><p>H. How to Contact NRS.\u00a0 You can contact NRS by sending an email to idtprivacy@idt.net.<\/p><p><strong>Exhibit E<\/strong><\/p><p><strong>Iowa Consumers<\/strong><\/p><p>If you are a resident of Iowa, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the Iowa Consumer Data Protection Act (the \u201cIACDPA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable individual.\u00a0 Personal data does not include de-identified data or publicly available information.\u00a0 NRS may collect and process the following categories of personal data regarding Iowa residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected or Processed<\/td><td>Whether Sold, Shared with Third Parties, or Processed for Targeted Advertising and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal data:\u00a0 data processorsProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in our apps), which may include the location of your device<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Sensitive Data.\u00a0 The only sensitive data (as defined in the IACDPA) that NRS may collect and process is precise geolocation data (as defined in the IACDPA) from our apps primarily for transaction compliance reasons if the user enables the app\u2019s location feature.\u00a0 Users of our apps can enable or disable the app\u2019s location feature in the app.\u00a0 By enabling the location feature, you thereby consent to NRS collecting and processing your precise geolocation data for the purposes identified herein and as outlined in the chart above.<\/p><p>C. Your Rights.\u00a0 As a Iowa resident you have certain additional rights regarding your personal data under the IACDPA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that it has collected about you.\u00a0 There may be exceptions to this right and IDT does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by Iowa law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iii) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that we maintain about you in a portable, and to the extent technically feasible a readily usable, format that allows you to transmit the data to another entity without hinderance; and<\/p><p>(iv) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising or Sale \u2013 NRS may sell (as defined in the IACDPA) certain pieces of your personal data.\u00a0 NRS does not process your personal data for Targeted Advertising (as defined in the IACDPA).\u00a0 You have the right to request that NRS not process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/iapa-request and complete the form.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please go to https:\/\/www.idt.net\/iapa-request and complete the form.\u00a0 The IACDPA applies to individuals who are Iowa residents, but does not apply to individuals acting in a commercial context.\u00a0 An authorized agent may submit an opt-out request on your behalf using the same method listed in this section.<\/p><p>E. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, agent or representative is submitting an opt-out request on your behalf, we will verify their authority to act for you and may contact you and them to confirm your and their identity and to gain your authorization prior to taking action upon the request.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 90 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 90 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NRS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p>G. Appeal of Refusal to Take Action.\u00a0 If NRS refuses to take action on your request you have the right to appeal that refusal within 30 days of your receipt of NRS\u2019s response by sending an email to idtprivacy@idt.net and requesting an appeal.\u00a0 Within 60 days of NRS\u2019s receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including the reasons for our decision.\u00a0 If your appeal is denied, then you may contact the Iowa Attorney General at https:\/\/www.iowaattorneygeneral.gov\/for-consumers\/file-a-consumer-complaint to submit a complaint.<\/p><p><strong>Exhibit F<\/strong><\/p><p><strong>Montana Consumers<\/strong><\/p><p>If you are a resident of Montana, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the Montana Consumer Data Privacy Act (the \u201cMCDPA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable individual.\u00a0 Personal data does not include de-identified data or publicly available information.\u00a0 NRS may collect and process the following categories of personal data regarding Montana residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected or Processed<\/td><td>Whether Sold, Shared with Third Parties, or Processed for Targeted Advertising and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal data:\u00a0 data processorsProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in our apps), which may include the location of your device<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Sensitive Data.\u00a0 The only sensitive data (as defined in the MCDPA) that NRS may collect and process is precise geolocation data (as defined in the MCDPA) from our apps primarily for transaction compliance reasons if the user enables the app\u2019s location feature.\u00a0 Users of our apps can enable or disable the app\u2019s location feature in the app.\u00a0 By enabling the location feature, you thereby consent to NRS collecting and processing your precise geolocation data for the purposes identified herein and as outlined in the chart above.<\/p><p>C. Your Rights.\u00a0 As a Montana resident you have certain additional rights regarding your personal data under the MCDPA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Correct Inaccurate Personal Data \u2013 you have the right to request that NRS correct any inaccurate personal data that we maintain about you;<\/p><p>(iii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that it has collected about you.\u00a0 There may be exceptions to this right and NRS does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by Montana law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iv) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that we maintain about you in a portable, and to the extent technically feasible a readily usable, format that allows you to transmit the data to another entity without hinderance; and<\/p><p>(v) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising, Sale, or Profiling with Legal Effects \u2013 NRS may sell (as defined in the MCDPA) certain pieces of your personal data.\u00a0 NRS does not process your personal data for Targeted Advertising (as defined in the MCDPA) or process your personal data for profiling for decisions that produce legal or similarly significant effects (as defined in the MCDPA).\u00a0 You have the right to request that NRS not process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/mtpa-request and complete the form.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please go to https:\/\/www.idt.net\/mtpa-request and complete the form.\u00a0 The MCDPA applies to individuals who are Montana residents, but does not apply to individuals acting in a commercial context.\u00a0 An authorized agent may submit an opt-out request on your behalf using the same method listed in this section.<\/p><p>E. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, agent or representative is submitting an opt-out request on your behalf, we will verify their authority to act for you and may contact you and them to confirm your and their identity and to gain your authorization prior to taking action upon the request.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NRS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p>G. Appeal of Refusal to Take Action.\u00a0 If NRS refuses to take action on your request you have the right to appeal that refusal within 30 days of your receipt of NRS\u2019s response by sending an email to mtpa@idt.net and requesting an appeal.\u00a0 Within 60 days of NRS\u2019s receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including the reasons for our decision.\u00a0 If your appeal is denied, then you may contact the Montana Attorney General at https:\/\/dojmt.gov\/consumer\/consumer-complaints\/.<\/p><p><strong>Exhibit G<\/strong><\/p><p><strong>Nebraska Consumers<\/strong><\/p><p>If you are a resident of Nebraska, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the Nebraska Data Privacy Act (the \u201cNEDPA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable individual.\u00a0 Personal data does not include de-identified data or publicly available information.\u00a0 NRS may collect and process the following categories of personal data regarding Nebraska residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected or Processed<\/td><td>Whether Sold, Shared with Third Parties, or Processed for Targeted Advertising and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal data:\u00a0 data processorsProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in our apps), which may include the location of your device<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Sensitive Data.\u00a0 The only sensitive data (as defined in the NEDPA) that NRS may collect and process is precise geolocation data (as defined in the NEDPA) from our apps primarily for transaction compliance reasons if the user enables the app\u2019s location feature.\u00a0 Users of our apps can enable or disable the app\u2019s location feature in the app.\u00a0 By enabling the location feature, you thereby consent to NRS collecting and processing your precise geolocation data for the purposes identified herein and as outlined in the chart above.<\/p><p>C. Your Rights.\u00a0 As a Nebraska resident you have certain additional rights regarding your personal data under the NEDPA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Correct Inaccurate Personal Data \u2013 you have the right to request that NRS correct any inaccurate personal data that we maintain about you;<\/p><p>(iii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that it has collected about you.\u00a0 There may be exceptions to this right and IDT does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by Delaware law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iv) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that we maintain about you in a portable, and to the extent technically feasible a readily usable, format that allows you to transmit the data to another entity without hinderance; and<\/p><p>(v) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising, Sale, or Profiling with Legal Effects \u2013 NRS may sell (as defined in the NEDPA) certain pieces of your personal data.\u00a0 NRS does not process your personal data for Targeted Advertising (as defined in the NEDPA) or process your personal data for profiling for decisions that produce legal or similarly significant effects (as defined in the NEDPA).\u00a0 You have the right to request that NRS not process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/nepa-request and complete the form.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please go to https:\/\/www.idt.net\/nepa-request and complete the form.\u00a0 The DEPDPA applies to individuals who are Delaware residents, but does not apply to individuals acting in a commercial context.\u00a0 An authorized agent may submit an opt-out request on your behalf using the same method listed in this section.\u00a0 You can also make a request by sending an email to idtprivacy@idt.net and including your name, address, phone number and specific requests in the email.<\/p><p>E. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, agent or representative is submitting an opt-out request on your behalf, we will verify their authority to act for you and may contact you and them to confirm your and their identity and to gain your authorization prior to taking action upon the request.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NRS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p>G. Appeal of Refusal to Take Action.\u00a0 If NRS refuses to take action on your request you have the right to appeal that refusal within 30 days of your receipt of NRS\u2019s response by sending an email to idtprivacy@idt.net and requesting an appeal.\u00a0 Within 60 days of NRS\u2019s receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including the reasons for our decision.\u00a0 If your appeal is denied, then you may contact the Nebraska Attorney General\u2019s Office at https:\/\/www.nebraska.gov\/apps-ago-complaints\/?preSelect=CP_COMPLAINT to submit a complaint.<\/p><p>H. How to Contact NRS.\u00a0 You can contact NRS by sending an email to idtprivacy@idt.net.<\/p><p><strong>Exhibit H<\/strong><\/p><p><strong>New Hampshire Consumers<\/strong><\/p><p>If you are a resident of New Hampshire, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the New Hampshire Data Privacy Act (the \u201cNHDPA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable individual.\u00a0 Personal data does not include de-identified data or publicly available information.\u00a0 NRS may collect and process the following categories of personal data regarding New Hampshire residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected or Processed<\/td><td>Whether Sold, Shared with Third Parties, or Processed for Targeted Advertising and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal data:\u00a0 data processorsProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in our apps), which may include the location of your device<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Sensitive Data.\u00a0 The only sensitive data (as defined in the NHDPA) that NRS may collect and process is precise geolocation data (as defined in the NHDPA) from our apps primarily for transaction compliance reasons if the user enables the app\u2019s location feature.\u00a0 Users of our apps can enable or disable the app\u2019s location feature in the app.\u00a0 By enabling the location feature, you thereby consent to NRS collecting and processing your precise geolocation data for the purposes identified herein and as outlined in the chart above.<\/p><p>C. Your Rights.\u00a0 As a New Hampshire resident you have certain additional rights regarding your personal data under the NHDPA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Correct Inaccurate Personal Data \u2013 you have the right to request that NRS correct any inaccurate personal data that we maintain about you;<\/p><p>(iii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that it has collected about you.\u00a0 There may be exceptions to this right and IDT does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by New Hampshire law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iv) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that we maintain about you in a portable, and to the extent technically feasible a readily usable, format that allows you to transmit the data to another entity without hinderance; and<\/p><p>(v) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising, Sale, or Profiling with Legal Effects \u2013 NRS may sell (as defined in the NHDPA) certain pieces of your personal data.\u00a0 NRS does not process your personal data for Targeted Advertising (as defined in the NHDPA) or process your personal data for profiling for decisions that produce legal or similarly significant effects (as defined in the NHDPA).\u00a0 You have the right to request that NRS not process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/nhpa-request and complete the form.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please go to https:\/\/www.idt.net\/nhpa-request and complete the form.\u00a0 The NHDPA applies to individuals who are New Hampshire residents, but does not apply to individuals acting in a commercial context.\u00a0 An authorized agent may submit an opt-out request on your behalf using the same method listed in this section.<\/p><p>E. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, agent or representative is submitting an opt-out request on your behalf, we will verify their authority to act for you and may contact you and them to confirm your and their identity and to gain your authorization prior to taking action upon the request.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NRS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p>G. Appeal of Refusal to Take Action.\u00a0 If NRS refuses to take action on your request you have the right to appeal that refusal within 30 days of your receipt of NRS\u2019s response by sending an email to idtprivacy@idt.net and requesting an appeal.\u00a0 Within 60 days of NRS\u2019s receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including the reasons for our decision.\u00a0 If your appeal is denied, then you may contact the New Hampshire Attorney General\u2019s Office at https:\/\/www.doj.nh.gov\/citizens\/consumer-protection-antitrust-bureau\/consumer-complaints\u00a0 to submit a complaint.<\/p><p>H. How to Contact NRS.\u00a0 You can contact NRS by sending an email to idtprivacy@idt.net.<\/p><p><strong>Exhibit I<\/strong><\/p><p><strong>New Jersey Consumers<\/strong><\/p><p>If you are a resident of New Jersey, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the New Jersey Data Privacy Act (the \u201cNJDPA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable individual.\u00a0 Personal data does not include de-identified data or publicly available information.\u00a0 NRS may collect and process the following categories of personal data regarding New Jersey residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected or Processed<\/td><td>Whether Sold, Shared with Third Parties, or Processed for Targeted Advertising or Profiling in furtherance of Decisions that Produce Legal or Similarly Significant Effects and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal data:\u00a0 data processorsProcessed for Targeted Advertising or Profiling in furtherance of Decisions that Produce Legal Effect \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, call records and other traffic data, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold \u2013 noProcessed for Targeted Advertising or Profiling in furtherance of Decisions that Produce Legal Effect \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps and advertisements<\/td><td>Sold \u2013 noProcessed for Targeted Advertising or Profiling in furtherance of Decisions that Produce Legal Effect \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in BR App), which may include the location of your device<\/td><td>Sold \u2013 noProcessed for Targeted Advertising or Profiling in furtherance of Decisions that Produce Legal Effect \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s marketing preferences, and aggregate information from third parties<\/td><td>Sold \u2013 noProcessed for Targeted Advertising or Profiling in furtherance of Decisions that Produce Legal Effect \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Sensitive Data.\u00a0 The only sensitive data (as defined in the NJDPA) that NRS may collect and process is precise geolocation data (as defined in the NJDPA) from our apps primarily for transaction compliance reasons if the user enables the app\u2019s location feature.\u00a0 Users of our apps can enable or disable the app\u2019s location feature in the app.\u00a0 By enabling the location feature, you thereby consent to NRS collecting and processing your precise geolocation data for the purposes identified herein and as outlined in the chart above.<\/p><p>C. Your Rights.\u00a0 As a New Jersey resident you have certain additional rights regarding your personal data under the NJDPA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Correct Inaccurate Personal Data \u2013 you have the right to request that NRS correct any inaccurate personal data that we maintain about you;<\/p><p>(iii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that it has collected about you.\u00a0 There may be exceptions to this right and NRS does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by New Jersey law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iv) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that we maintain about you in a portable and, to the extent technically feasible, a readily usable, format that allows you to transmit the data to another entity without hinderance; and<\/p><p>(v) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising, Sale, or Profiling in Furtherance of Decisions that Produce Legal Effects \u2013 NRS may sell (as defined in the NJDPA) certain pieces of your personal data.\u00a0 NRS does not process your personal data for Targeted Advertising (as defined in the NJDPA) or process your personal data for profiling in furtherance of decisions that produce legal or similarly significant effects (as defined in the NJDPA).\u00a0 Nonetheless, you have the right to request that NRS not process your personal data for those purposes should NRS decide in the future to process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/njpa-request and complete the form.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please go to https:\/\/www.idt.net\/njpa-request and complete the form.\u00a0 The NJDPA applies to individuals who are New Jersey residents, but does not apply to individuals acting in a commercial context.\u00a0 An authorized agent may submit an opt-out request on your behalf using the same method listed in this section.<\/p><p>E. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, agent or representative is submitting an opt-out request on your behalf, we will verify their authority to act for you and may contact you and them to confirm your and their identity and to gain your authorization prior to taking action upon the request.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NRS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p>G. Appeal of Refusal to Take Action.\u00a0 If NRS refuses to take action on your request you have the right to appeal that refusal within 30 days of your receipt of NRS\u2019s response by sending an email to njpa@idt.net and requesting an appeal.\u00a0 Within 45 days of NRS\u2019s receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including the reasons for our decision.\u00a0 If your appeal is denied, then you may contact the New Jersey Division of Consumer Affairs in the Department of Law and Public Safety at https:\/\/www.njconsumeraffairs.gov\/Pages\/Consumer-Complaints.aspx.<\/p><p>H. How to Contact NRS.\u00a0 You can contact NRS by sending an email to njpa@idt.net.<\/p><p><strong>Exhibit J<\/strong><\/p><p><strong>Oregon Consumers<\/strong><\/p><p>If you are a resident of Oregon, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the Oregon Privacy Act (the \u201cORPA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable individual.\u00a0 Personal data does not include de-identified data or publicly available information.\u00a0 NRS may collect and process the following categories of personal data regarding Oregon residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected or Processed<\/td><td>Whether Sold, Shared with Third Parties, or Processed for Targeted Advertising or Profiling for Decisions that Produce Legal Effects, and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal data:\u00a0 data processorsProcessed for Targeted Advertising or Profiling for Decisions that Produce Legal Effects \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold \u2013 noProcessed for Targeted Advertising or Profiling for Decisions that Produce Legal Effects \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Sold \u2013 noProcessed for Targeted Advertising or Profiling for Decisions that Produce Legal Effects \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in apps), which may include the location of your device<\/td><td>Sold \u2013 noProcessed for Targeted Advertising or Profiling for Decisions that Produce Legal Effects \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Sold \u2013 noProcessed for Targeted Advertising or Profiling for Decisions that Produce Legal Effects \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Sensitive Data.\u00a0 The only sensitive data (as defined in the ORPA) that NRS may collect and process is precise geolocation data (as defined in the ORPA) from our apps primarily for transaction compliance reasons if the user enables the app\u2019s location feature.\u00a0 Users of our apps can enable or disable the app\u2019s location feature in the app.\u00a0 By enabling the location feature, you thereby consent to NRS collecting and processing your precise geolocation data for the purposes identified herein and as outlined in the chart above.<\/p><p>C. Your Rights.\u00a0 As an Oregon resident you have certain additional rights regarding your personal data under the ORPA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Correct Inaccurate Personal Data \u2013 you have the right to request that NRS correct any inaccurate personal data that we maintain about you;<\/p><p>(iii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that it has collected about you.\u00a0 There may be exceptions to this right and NRS does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by Oregon law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iv) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that we maintain about you in a portable, and to the extent technically feasible a readily usable, format; and<\/p><p>(v) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising, Sale, or Profiling with Legal Effects \u2013 NRS may sell (as defined in the ORPA) certain pieces of your personal data.\u00a0 NRS does not process your personal data for Targeted Advertising (as defined in the ORPA) or process your personal data for profiling for decisions that produce legal or similarly significant effects (as defined in the ORPA).\u00a0 You have the right to request that NRS not process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/orpa-request and complete the form.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please go to https:\/\/www.idt.net\/orpa-request and complete the form.\u00a0 The ORPA applies to individuals who are Oregon residents, but does not apply to individuals acting in a commercial context.\u00a0 An authorized agent may submit an opt-out request on your behalf using the same method listed in this section.<\/p><p>E. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, agent or representative is submitting an opt-out request on your behalf, we will verify their authority to act for you and may contact you and them to confirm your and their identity and to gain your authorization prior to taking action upon the request.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NTS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p>G. Appeal of Refusal to Take Action.\u00a0 If NRS refuses to take action on your request you have the right to appeal that refusal within 30 days of your receipt of NRS\u2019s response by sending an email to orpa@idt.net and requesting an appeal.\u00a0 Within 45 days of NRS\u2019s receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including the reasons for our decision.\u00a0 If your appeal is denied, then you may contact the Oregon Attorney General by email at AttorneyGeneral@doj.state.or.us or by phone at 877-877-9392.<\/p><p><strong>Exhibit K<\/strong><\/p><p><strong>Texas Consumers<\/strong><\/p><p>If you are a resident of Texas, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the Texas Data Privacy and Security Act (the \u201cTDPSA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable individual.\u00a0 Personal data does not include de-identified data or publicly available information.\u00a0 NRS may collect and process the following categories of personal data regarding Texas residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected or Processed<\/td><td>Whether Sold, Shared with Third Parties, or Processed for Targeted Advertising and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal data:\u00a0 data processorsProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in our apps), which may include the location of your device<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Sensitive Data.\u00a0 The only sensitive data (as defined in the TDPSA) that NRS may collect and process is precise geolocation data (as defined in the TDPSA) from our apps primarily for transaction compliance reasons if the user enables the app\u2019s location feature.\u00a0 Users of our apps can enable or disable the app\u2019s location feature in the app.\u00a0 By enabling the location feature, you thereby consent to NRS collecting and processing your precise geolocation data for the purposes identified herein and as outlined in the chart above.<\/p><p>C. Your Rights.\u00a0 As a Texas resident you have certain additional rights regarding your personal data under the TDPSA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Correct Inaccurate Personal Data \u2013 you have the right to request that NRS correct any inaccurate personal data that we maintain about you;<\/p><p>(iii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that it has collected about you.\u00a0 There may be exceptions to this right and NRS does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by Texas law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iv) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that we maintain about you (if available in a digital format) in a portable, and to the extent technically feasible a readily usable, format that allows you to transmit the data to another entity without hinderance; and<\/p><p>(v) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising, Sale, or Profiling with Legal Effects \u2013 NRS may sell (as defined in the TDPSA) certain pieces of your personal data.\u00a0 NRS does not process your personal data for Targeted Advertising (as defined in the TDPSA) or process your personal data for profiling for decisions that produce legal or similarly significant effects (as defined in the TDPSA).\u00a0 You have the right to request that NRS not process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/txpa-request and complete the form.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please go to https:\/\/www.idt.net\/txpa-request and complete the form.\u00a0 The TDPSA applies to individuals who are Texas residents, but does not apply to individuals acting in a commercial context.\u00a0 An authorized agent may submit an opt-out request on your behalf using the same method listed in this section.<\/p><p>E. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, agent or representative is submitting an opt-out request on your behalf, we will verify their authority to act for you and may contact you and them to confirm your and their identity and to gain your authorization prior to taking action upon the request.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NRS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p>G. Appeal of Refusal to Take Action.\u00a0 If NRS refuses to take action on your request you have the right to appeal that refusal within 30 days of your receipt of NRS\u2019s response by sending an email to txpa@idt.net and requesting an appeal.\u00a0 Within 60 days of NRS\u2019s receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including the reasons for our decision.\u00a0 If your appeal is denied, then you may contact the Texas Attorney General at https:\/\/www.texasattorneygeneral.gov\/consumer-protection\/file-consumer-complaint.<\/p><p><strong>Exhibit L<\/strong><\/p><p><strong>Utah Consumers<\/strong><\/p><p>If you are a resident of Utah, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the Utah Privacy Act (the \u201cUTPA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable individual.\u00a0 Personal data does not include de-identified data, aggregated data or publicly available information.\u00a0 NRS may collect and process the following categories of personal data regarding Utah residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected or Processed<\/td><td>Whether Sold to Third Parties, Shared with Third Parties, and\/or Processed for Targeted Advertising and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold to Third Parties \u2013 yesCategories of Third Parties to whom NRS may sell personal data:\u00a0 data processorsProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold to Third Parties \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Sold to Third Parties \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in apps), which may include the location of your device<\/td><td>Sold to Third Parties \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Sold to Third Parties \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., payment processors); ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Sensitive Data.\u00a0 The only sensitive data (as defined in the UTPA) that NRS may collect and process is specific geolocation data (as defined in the CTPA) from our apps primarily for transaction compliance reasons if the user enables the app\u2019s location feature.\u00a0 Users of our apps can enable or disable an app\u2019s location feature in the app.\u00a0 By enabling the location feature, you thereby consent to NRS collecting and processing your precise geolocation data for the purposes identified herein and as outlined in the chart above.<\/p><p>C. Your Rights.\u00a0 As a Utah resident you have certain additional rights regarding your personal data under the UTPA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Your Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that you provided to it.\u00a0 There may be exceptions to this right and NRS does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by Utah law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iii) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that you previously provided to us in a portable and readily usable format to the extent technically feasible and practicable that allows you to transmit the data to another entity without impediment; and<\/p><p>(iv) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising and\/or Sale \u2013 NRS may sell (as defined in the UTPA) certain pieces of your personal data.\u00a0 NRS does not process your personal data for Targeted Advertising (as defined in the UTPA).\u00a0 You have the right to request that NRS not process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/utpa-request and complete the form.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please go to https:\/\/www.idt.net\/utpa-request and complete the form.\u00a0 The UTPA applies to individuals who are Utah residents, but does not apply to individuals acting in a commercial context.\u00a0 An authorized agent may submit an opt-out request on your behalf using the same method listed in this section.<\/p><p>E. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.\u00a0 If a third party, agent or representative is submitting an opt-out request on your behalf, we will verify their authority to act for you and may contact you and them to confirm your and their identity and to gain your authorization prior to taking action upon the request.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NRS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p><strong>Exhibit M<\/strong><\/p><p><strong>Virginia Consumers<\/strong><\/p><p>If you are a resident of Virginia, then the following section also applies to you.<\/p><p>A. Personal Data.\u00a0 Personal data (as defined in the Virginia Consumer Data Protection Act (the \u201cVCDPA\u201d)) includes any information that is linked or reasonably linkable to an identified or identifiable natural person.\u00a0 Personal data does not include de-identified data or publicly available information. \u00a0NRS may collect and process the following categories of personal data regarding Virginia residents:<\/p><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Categories of Personal Data Collected and Processed<\/td><td>Whether Sold, Shared with Third Parties and\/or Processed for Targeted Advertising and Categories of to Whom<\/td><td>Purposes for Collection and Processing of Personal Data<\/td><\/tr><tr><td>Personal Identifiers and Information, which may include name, address, email address, phone number, birthdate, device and marketing identifiers, IP address, payment and financial information, credit\/debit card number and details, bank account number and information, personal information necessary to verify you or your account, security code and login credentials, and other personal information you provide<\/td><td>Sold \u2013 yesCategories of Third Parties to whom NRS may sell personal information:\u00a0 data processorsProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., credit card processors); other NRS stores with which you interact; ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators<\/td><td rowspan=\"5\">To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.To maintain and service your account, including to process orders and payments.To communicate with you about our terms and policies.To verify you, your account activity and your information.To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.\u00a0To provide customer service.To perform due diligence, credit and fraud prevention checks.To maintain accurate record keeping.To ensure security and integrity of our customers\u2019 personal information.To perform product, marketing and organizational analysis.To provide advertising and marketing to our customers.To measure our marketing campaigns and to audit consumer interactions.To comply with regulations and legal requirements.To comply with contractual requirements.For risk management and compliance.For legal advice and defense of claims.For general, operational and administrative purposes.<\/td><\/tr><tr><td>Commercial Information, which may include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Internet or other Electronic Network Activity Information, which may include browsing history, search history, messages, personal, phone or social network contact information, device information, device contacts, and information regarding a consumer\u2019s interaction and usage with our websites, apps, web stores and advertisements<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Geolocation Data (if you enable location features in apps), which may include the location of your device<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 see list under Personal Identifiers and Information<\/td><\/tr><tr><td>Inferences drawn from any of the information above, which may include profile reflecting the consumer\u2019s purchasing and marketing preferences, aggregate information from third parties<\/td><td>Sold \u2013 noProcessed for Targeted Advertising \u2013 noShared with Third Parties \u2013 yesCategories of Third Parties to whom NRS may share personal data for a business purpose:\u00a0 NRS family of companies, including our affiliates both in and outside the United States; our vendors and partners to the extent reasonably necessary for them to perform work on our and your behalf (e.g., credit card processors); other NRS stores with which you interact; ad networks; data analytics providers; social networks; and prospective purchasers of our business<\/td><\/tr><\/tbody><\/table><\/figure><p>B. Sensitive Data.\u00a0 The only sensitive data (as defined in the VCDPA) that NRS may collect and process is precise geolocation data (as defined in the VCDPA) from our apps primarily for transaction compliance and fulfillment reasons if the user enables the location feature in our apps.\u00a0 Users of our apps can enable or disable an app\u2019s location feature in the app.\u00a0 By enabling the location feature, you thereby consent to NRS collecting and processing your precise geolocation data for the purposes identified herein and as outlined in the chart above.<\/p><p>C. Your Rights.\u00a0 As a Virginia resident you have certain additional rights regarding your personal data under the VCDPA:<\/p><p>(i) Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data \u2013 you have the right to request that NRS confirm whether or not it has collected and processed personal data about you and to access the personal data that we have collected about you;<\/p><p>(ii) Right to Correct Inaccurate Personal Data \u2013 you have the right to request that NRS correct any inaccurate personal data that we maintain about you;<\/p><p>(iii) Right to Delete \u2013 you have the right to request that NRS delete any personal data that it has collected about you.\u00a0 There may be exceptions to this right and NRS does not have to delete your personal data if it is reasonably necessary to complete a transaction with you, to provide you with goods or services you requested, to comply with our legal obligations, and as otherwise provided by Virginia law.\u00a0 In addition, if your personal data is deleted you may not be able to purchase or use our products and services;<\/p><p>(iv) Right to Obtain Copy of Personal Data in Portable Format \u2013 you have the right to obtain from NRS a copy of the personal data that we maintain about you in a portable, and to the extent technically feasible a readily usable, format that allows you to transmit the data to another entity without hinderance;<\/p><p>(v) Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising, Sale, or Profiling with Legal Effects \u2013 NRS may sell (as defined in the VCDPA) certain items of your personal data, but NRS does not process your personal data for Targeted Advertising (as defined in the VCDPA) or process your personal data for Profiling (as defined in the VCDPA) for decisions that produce legal or similarly significant effects.\u00a0 You have the right to request that NRS not process your personal data for those purposes.\u00a0 To exercise this right please go to https:\/\/www.idt.net\/vcdpa-request and complete the form.<\/p><p>D. How to Exercise Your Rights.\u00a0 To exercise any of your rights, please go to https:\/\/www.idt.net\/vcdpa-request and complete the form.\u00a0 The VCDPA applies to individuals who are Virginia residents, but does not apply to individuals acting in a commercial context.<\/p><p>E. Authentication of Consumer Requests.\u00a0 In order to comply with a consumer request, NRS must reasonably authenticate the request.\u00a0 A record of each request is made as soon as it is received by our data protection team.\u00a0 NRS will use all reasonable measures to authenticate the identity of the individual making the request.\u00a0 We will utilize the requested data to ensure that we can verify the requestor\u2019s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request.\u00a0 This is to protect your data and rights.<\/p><p>F. Responding to Consumer Requests.\u00a0 NRS will attempt to authenticate each request and if it is able to authenticate a request it will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by NRS for an additional 45 days.\u00a0 If a delay is necessary, NRS will contact the requestor within the original 45 day period and provide the reasons for the delay.\u00a0 All NRS responses shall be in writing.\u00a0 The response shall be sent by mail or electronically.\u00a0 If NRS is not able to process your request, we will inform you of that and (where possible) of the reasons for not acting upon your request.<\/p><p>G. Appeal of Refusal to Take Action.\u00a0 If NRS refuses to take action on your request you have the right to appeal that refusal within 30 days of your receipt of NRS\u2019s response by sending an email to vcdpa@idt.net and requesting an appeal.\u00a0 Within 60 days of NRS\u2019s receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including the reasons for our decision.\u00a0 If your appeal is denied, then you may contact the Virginia Attorney General at (804)786-2071 to submit a complaint.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-66c1646 e-flex e-con-boxed e-con e-parent\" data-id=\"66c1646\" data-element_type=\"container\" id=\"canada\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0a002e5 elementor-widget elementor-widget-heading\" data-id=\"0a002e5\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Privacy Policy Canada \u2013 National Retail Solutions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-519c392 elementor-widget elementor-widget-text-editor\" data-id=\"519c392\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Effective as of August 1, 2023<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6ec25c3 elementor-widget elementor-widget-spacer\" data-id=\"6ec25c3\" data-element_type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-aaff51f e-con-full e-flex e-con e-child\" data-id=\"aaff51f\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d4be6c4 elementor-widget elementor-widget-text-editor\" data-id=\"d4be6c4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h5 class=\"p4\"><b>General<\/b><\/h5><p class=\"p5\">National Retail Solutions, Inc. (\u201c<span class=\"s1\">NRS<\/span>\u201d) is committed to protecting the privacy of your personal information.<\/p><p class=\"p5\">This Privacy Policy (the \u201c<span class=\"s1\">Policy<\/span>\u201d) sets forth our policies and procedures regarding the collection, use and sharing of your personal information.We also explain the steps we take to protect your information and how you can limit the collection, use and sharing of your information.<\/p><p class=\"p5\">This Policy applies to the following unless otherwise noted:<\/p><ul class=\"ul1\"><li class=\"li7\">our Canadian customers;<\/li><li class=\"li7\">users of any of our products and services in Canada, including our POS terminals, online merchant portal and NRS Pay (collectively, the \u201c<span class=\"s1\">NRS Products<\/span>\u201d);<\/li><li class=\"li7\">users and visitors of our websites, including <span class=\"s3\">nrsplus.com<\/span>, <span class=\"s3\">nrspay.com<\/span>, <span class=\"s3\">nrsinsights.com<\/span>, <span class=\"s3\">clubnrs.com<\/span>, <span class=\"s3\">campnrs.com<\/span>, <span class=\"s3\">nrsmarket.com<\/span>, <span class=\"s3\">nrsdigitalmedia.com<\/span>, <span class=\"s3\">homeimprovementpos.com<\/span>, <span class=\"s3\">nrs-tv.com<\/span>, <span class=\"s3\">nrsdeals.com<\/span>, <span class=\"s3\">shopbosslocal.com<\/span>, <span class=\"s3\">retailertimes.com<\/span> and <span class=\"s3\">nrsplus.ca<\/span> (collectively, the \u201c<span class=\"s1\">NRS Websites<\/span>\u201d) who originate their web viewing in Canada;<\/li><li class=\"li7\">Canadian members of any NRS sponsored loyalty or rewards programs (collectively, the \u201c<span class=\"s1\">NRS Reward Programs<\/span>\u201d);<\/li><li class=\"li7\">Canadian users of our apps, including the \u2018My NRS Store\u2019 app and the \u2018BR Club\u2019 Shopping app (collectively, the \u201c<span class=\"s1\">NRS Apps<\/span>\u201d); and<\/li><li class=\"li4\">Canadian users of web stores that NRS has created for retailers to sell their store\u2019s products online (collectively, the \u201c<span class=\"s1\">NRS Web Stores<\/span>\u201d).<\/li><\/ul><p class=\"p5\">When we use the term \u201c<span class=\"s1\">Services<\/span>\u201d it collectively refers to the NRS Products, the NRS Websites, the NRS Reward Programs, the NRS Apps, and the NRS Web Stores.When we refer to NRS or \u201cus,\u201d or \u201cwe,\u201d we\u2019re talking about National Retail Solutions, Inc.<\/p><p class=\"p5\">You should also read the terms of service for each Service that you use, which can be found at the applicable NRS Website, NRS App or NRS Web Store.<\/p><p class=\"p5\">We may update this Policy from time to time and you should review it periodically for changes.Any updated Policy will be posted at the NRS Websites, the NRS Apps and in the NRS Web Stores.<\/p><h5 class=\"p7\"><b>What is Personal Information?<\/b><\/h5><p class=\"p5\">NRS may receive and collect both personal and non-identifying information from you when we operate and provide you with the Services, when you install, access or use the Services and when you communicate with us.<span class=\"s4\">Personal information means information either on its own or in conjunction with other data that enables a specific person to be identified, but does not include \u201cde-identified,\u201d \u201canonymous,\u201d or \u201caggregate\u201d information, which is not otherwise associated with a specific person.Non-identifying information means information that by itself cannot be used to identify a specific person (<i>e.g.,<\/i> zip code).<\/span>We may collect a variety of information from our customers.This section describes the information we may collect.<\/p><p class=\"p5\">A. <span class=\"s1\">Information You Provide<\/span>.Depending on the particular Service, you may provide the following personal information:<\/p><ul class=\"ul1\"><li class=\"li4\">name<\/li><li class=\"li4\">address<\/li><li class=\"li4\">email address<\/li><li class=\"li4\">mobile or other phone number<\/li><li class=\"li4\">payment information, including credit or debit card details and bank account info<\/li><li class=\"li4\">date of birth<\/li><li class=\"li4\">Social Security Number or EIN<\/li><li class=\"li9\">other personal information necessary to verify you and\/or account, including citizenship status<\/li><li class=\"li9\">other personal information you provide to us for customer support purposes, surveys, sweepstakes or product feedback<\/li><\/ul><p class=\"p5\">B. <span class=\"s1\">Information We Collect<\/span>.Depending on the particular Service, we may automatically collect the following information:<\/p><ul class=\"ul1\"><li class=\"li4\">items purchased or redeemed through any of the Services<\/li><li class=\"li4\">login and other credentials<\/li><li class=\"li9\">Service related diagnostic and performance information, including how you use our Services and performance logs<\/li><li class=\"li9\">information about your device and store, including model, browser, operating system, platform type, application software, mobile network, device identifiers and numbers, and Internet connection speed<\/li><li class=\"li9\">browsing, searching and buying activity<\/li><li class=\"li9\">IP address<\/li><li class=\"li9\">logs of web portal access<\/li><li class=\"li9\">advertisement campaign conversions<\/li><li class=\"li9\">NRS Websites and NRS Web Stores visited and websites you come from and go to next<\/li><li class=\"li9\">NRS App feature usage and stored content<\/li><li class=\"li9\">personal, phone or social network contact information<\/li><li class=\"li9\">device identification number<\/li><li class=\"li9\">geolocation and device location information if you enable location features<\/li><li class=\"li9\">transactional information when you purchase one of our Services or certain other products<\/li><\/ul><p class=\"p5\">C. <span class=\"s1\">Information Provided by Third Parties<\/span>.When you install, access or use the Services we may obtain the following information from third party sources:<\/p><ul class=\"ul1\"><li class=\"li4\">credit information from credit reporting agencies<\/li><li class=\"li4\">transactional information when you purchase a Service or a product through a Service, including receipts or information from app stores or other third parties processing your payment<\/li><li class=\"li4\">aggregate information from outside companies that collect consumer information such as demographic and interest data (examples of this information include gender, age range, sports enthusiast, or pet owner)<\/li><li class=\"li4\">unique marketing and\/or device IDs, contact and other marketing lead information from third parties, including from app stores<\/li><li class=\"li4\">users of our Services may provide us with your email address or phone number through the purchase\/use of a Service, our refer-a-friend programs, their mobile address book or social networking platforms<\/li><li class=\"li4\">other information from third parties that helps us operate, provide, understand, customize, support and market our Services<\/li><\/ul><h5 class=\"p4\"><b>The 10 Principles of Privacy<\/b><\/h5><p class=\"p5\">The following principles, developed by the Canadian Standards Association, form the basis of NRS\u2019s information collection practices and outline NRS\u2019s commitment to protecting your privacy.<\/p><h6 class=\"p4\"><b>1. Accountability<\/b><\/h6><p class=\"p5\">Every NRS employee is responsible for maintaining the confidentiality of all information to which he\/she has access.Our employees are informed about the importance of privacy and receive ongoing updates on privacy related policies.<\/p><p class=\"p5\">In addition to establishing this Privacy Policy, we have appointed a Privacy Ombudsman who is responsible for overseeing the personal information handling practices at NRS and ensuring we are in compliance with our Privacy Policy and related policies.If you have questions, concerns or suggestions related to our Privacy Policy or our privacy practices you may contact us at:<\/p><p class=\"p10\">National Retail Solutions, Inc.<\/p><p class=\"p10\">520 Broad Street, 3<span class=\"s5\"><sup>rd<\/sup><\/span> floor<\/p><p class=\"p10\">Newark, NJ 07102<\/p><p class=\"p10\">Telephone:800-215-0931<\/p><p class=\"p10\">Attn:Privacy Ombudsman<\/p><h6 class=\"p4\"><b>2. Identifying the Purposes for Collecting Information<\/b><\/h6><p class=\"p11\">We may use all the information we collect and receive to help us operate, provide, improve, understand, customize, support, and market our Services (and some third party services).In addition, we may use your information for general, operational and administrative purposes, including maintaining your account, authenticating you and contacting you.As used in this Policy, the terms \u201cuse,\u201d \u201cusing\u201d and \u201cprocessing\u201d information include using cookies or other similar technologies on a computer\/phone\/device, subjecting the information to statistical or other analysis and using or handling information in any way, including but not limited to, scanning, collecting, storing, evaluating, aggregating, modifying, deleting, using, combining, disclosing and sharing information among our affiliates both in and outside the United States and to select service providers and vendors.<\/p><p class=\"p11\">A. <span class=\"s1\">Our Services<\/span>.We analyze how our customers use our Services and use that information to evaluate and improve our Services, to research, develop, and test new services and features, and to conduct troubleshooting activities.For example:<\/p><ul class=\"ul1\"><li class=\"li9\">we communicate with you about our Services and features and let you know about our terms and policies and other important updates;<\/li><li class=\"li9\">we may target particular advertisements or other content to you based information we have collected or you provided;<\/li><li class=\"li9\">we may digitally scan content stored in the NRS Apps, including without limitation, your user information, and use this information to provide you with targeted information and advertising;<\/li><li class=\"li9\">we use your information to respond to you when you contact us.Our communications with you, including phone conversations, chats and emails, may be monitored and recorded by us for quality assurance or for legal, regulatory or training purposes; and<\/li><li class=\"li9\">we verify accounts and activity, and promote safety and security, such as by investigating suspicious activity or violations of our terms, to ensure our Services are being used legally.<\/li><\/ul><p class=\"p11\">B. <span class=\"s1\">Web Technologies<\/span>.The NRS Websites, NRS Apps and NRS Web Stores may use certain web technologies such as \u201ccookies\u201d or \u201cweb beacons.\u201dWe use cookies, small text files stored locally on your computer or device to serve as markers, to operate, provide, improve and customize our Services and your experiences.For example, we use cookies to understand which of our FAQs are most popular and to show you relevant content related to our Services.Additionally, we may use cookies to remember your choices, such as your language preferences.Web beacons are used to tell us how and when pages in our sites are visited, by how many people, their point of origin and operating system and to monitor performance with our Services.These technologies do not collect personal information.<span class=\"s4\"> We do not honor any web browser \u201cdo not track\u201d signals or other mechanisms that provide you the ability to exercise choice regarding the collection of information about your online activities over time and across third party websites or online services.<\/span>We use and share this data and information to deliver customized content and advertising, to ensure that you see the correct product information, to manage the frequency with which you see an advertisement, to tailor advertisements to better match your interests, and to understand the effectiveness of our advertising.The content may be delivered on the NRS Websites, on non-NRS websites, on the NRS Apps, on NRS Web Stores, by our representatives, and via email, SMS, push notifications or other NRS services.In addition, if you respond to or interact with a particular advertisement, you may later receive a targeted advertisement as a result of an ad server or ad network concluding that you fit within a particular audience we are trying to reach.<\/p><p class=\"p11\">C. <span class=\"s1\">Web Analysis<\/span>.We use certain Google Analytics Advertising Features, including Remarketing and Demographics and Interest Reporting.Google Analytics is a web analysis service provided by Google that allows us to collect data about the traffic on the NRS Websites through Google cookies and other identifiers, which enables us, among other things, to create user segments based on demographic or interest data and to deliver relevant advertising.Google utilizes the data collected to track and examine the use of our websites and to prepare reports on the activities and share them with other Google services.Google may use the data collected to contextualize and personalize the ads of its own advertising network.You may be able to opt out of the Google Analytics Advertising Features through your browser ads settings or by visiting Google\u2019s Ads Settings page.<\/p><p class=\"p5\">D. <span class=\"s1\">NRS Apps<\/span>.We engage certain service providers and vendors who use mobile software development kits to passively collect information from users of the NRS Apps.We use this data primarily to help us deliver personalized notifications and to identify you in a unique manner across other devices or browsers for the purposes of customizing advertisements or content.<\/p><h6 class=\"p4\"><b>3. Consent for the Sharing and Use of Your Information<\/b><\/h6><p class=\"p5\">You have choices about how NRS shares and uses information.In general, NRS seeks your consent to collect, use or disclose your personal information at the time of collection or in advance.We have taken steps to ensure that our language is clear and understandable so that you know why we are collecting your information and how we will use it.Please note that under certain legal and medical circumstances it may be impossible or impractical to obtain an individual\u2019s consent.<\/p><p class=\"p5\">Consent may be expressed in writing or it may be implied in the circumstances.In addition to writing, your consent may also be expressed verbally or electronically.<\/p><p class=\"p5\">In deciding what form of consent is appropriate, we will consider the type of personal information we need, its use, any necessary disclosures, the type of customer contact that is involved and applicable legislation.Your choices regarding this consent will remain in effect unless you change them.<\/p><p class=\"p4\">In general, you can choose not to provide us with some or all of your personal information at any time.However, should you make this choice we may not be able to provide you with the product, service or information that you requested or that could be offered to you.Upon request we will explain your options of refusing or withdrawing consent to the collection, use, and disclosure of your personal information.<\/p><p class=\"p5\">A. <span class=\"s1\">Telemarketing<\/span>.National \u201cDo Not Call\u201d laws allow you to place residential wireline, wireless and VoIP phone numbers on the National Do Not Call Registry to prevent telemarketing calls to those numbers.If you would like to add your numbers to this list, you may do so by visiting <span class=\"s3\">https:\/\/www.lnnte-dncl.gc.ca\/<\/span>.You should be aware that even if you add your number(s) to the Do Not Call list, most telemarketing laws allow companies to contact their own customers.If you would like to be removed from NRS\u2019s telemarketing list, please contact us at 800-215-0931 or <span class=\"s3\">support@nrsplus.com<\/span>.Please allow 30 days for your telephone number to be removed from any sales programs that are currently underway.Please note that we may still call you regarding your Services and account even if you remove your number from our telemarketing list.<\/p><p class=\"p5\">B. <span class=\"s1\">Email, Text Messages and Push Notifications<\/span>.Marketing emails you receive from us will include an unsubscribe feature usually found at the bottom of the email that you may use to opt out of receiving future marketing emails.Marketing text and SMS messages from us also contain an opt-out feature that you can use to prevent future marketing text and SMS messages from us.You may refuse to consent to receive calls and texts from NRS and its affiliates that require your consent, including autodialed, pre-recorded or artificial voice telemarketing calls.You may also withdraw your previously given consent to receive such calls and texts.You can opt out of receiving push notifications from us via the NRS Apps by going to your device \u201cSettings\u201d and clicking on \u201cNotifications,\u201d and then changing those settings for the applicable app.Please note that you cannot withdraw your consent to receive certain in app messages from us.Your ability to manage some of our Services could be limited if you withdraw your consent to receive text and SMS messages.In those cases NRS does not recommend using those Services without authorization to receive such messages.<\/p><p class=\"p12\">C. <span class=\"s1\">Online Information<\/span>.You have choices about whether certain information collected on the NRS Websites, NRS Apps and NRS Web Stores is used to customize advertising based on predictions generated from your visits over time and across different websites and apps.Similarly, many mobile devices offer controls you can set to limit the advertising use of information collected across mobile apps on your device.Please note that many opt outs use browser cookies or device controls and are specific to the device and browser you are using.If you buy a new computer, change web browsers or devices or delete the cookies on your computer, you may need to opt out again.In addition, ads you receive may still be tailored using other techniques such as publisher, device or browser-enabled targeting.You should check the privacy policies of the products, sites, apps and services you use to learn more about any such techniques and your options.You also can limit the collection of certain website information by deleting or disabling cookies.Most browsers enable you to erase cookies from your computer hard drive, block all cookies, or receive a warning before a cookie is stored.Disabling cookies may prevent you from using specific features on our sites and other websites, such as ordering products or services and maintaining an online account.<\/p><h6 class=\"p4\"><b>4. Limiting Collection<\/b><\/h6><p class=\"p5\">NRS does not collect personal information indiscriminately.Rather, we limit our collection of personal information to only what is necessary for the purpose we have identified.NRS does not knowingly market to or collect information from children under the age of 16 without obtaining verifiable parental consent.<span class=\"s4\">If you allow a child to use your device or our Services, you should be aware that their information could be collected as described in this Policy.We encourage parents to be involved in the online activities of their children to ensure that no information is collected from a child without parental permission.<\/span>The NRS network may not be used by customers in any manner for the storage, transmission or dissemination of images containing child pornography or any other illegal or inappropriate activity involving children and we will report any instances of such activity of which we become aware to the appropriate law enforcement authorities.<\/p><h6 class=\"p4\"><b>5. Limiting Use, Disclosure and Retention<\/b><\/h6><p class=\"p5\">We may share all the information we collect and receive with our affiliates, both in and outside the Canada, and to select service providers and vendors, to help us operate, provide, improve, understand, customize, support, and market our Services (and some third party services), and for general, operational and administrative purposes, including maintaining your account, authenticating you and contacting you.We also share information with each NRS store with which you interact.When we share information with our service providers and vendors, we require them to use your information only in accordance with our instructions and terms or with express permission from you and not to sell your information.In addition, you share your information as you use and communicate through our Services.<\/p><p class=\"p5\">A. <span class=\"s1\">Information Shared Within the NRS Family of Companies<\/span>.We may share information within the NRS family of companies, including our affiliates both in and outside the United States (collectively, the \u201c<span class=\"s1\">NRS Family of Companies<\/span>\u201d) primarily to operate, provide, support and market our Services.For example, we may share your information with various NRS affiliates in order to process your transaction.<\/p><p class=\"p5\">B. <span class=\"s1\">Information Shared with our Service Providers and Vendors<\/span>.We work with various service providers and vendors for a variety of business purposes such as to help us offer, operate, provide, improve, understand, customize, support and market our Services.We may share information with these service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf.For example, we may provide your credit card information and billing address to our payment processing company solely for the purpose of processing payment for a transaction you have requested.In addition, NRS shares certain information, including unique marketing identifiers, email addresses and mobile phone numbers (full or only partial), with some of our service providers and vendors, including tobacco companies, Google and Facebook, for marketing, advertising, rewards\/loyalty programs and analysis purposes, including the delivery of advertising campaigns and preparing and sharing aggregate business and marketing reports, demographic profiling and to deliver targeted advertising about products and services.All the foregoing categories exclude text messaging originator opt in data and consent; this information will not be shared with any third parties.In addition, no mobile information will be shared with third parties\/affiliates for marketing\/promotional purposes.When we share information with our service providers and vendors, we request that these parties protect your information and limit their use of the data to the purposes for which it was provided, and not to sell your information.NRS does not sell, rent or lease its customer lists to third parties.NRS does on occasion sell certain pieces of personal information, such as personal identifiers, of some of our stores\u2019 customers to data processors.Finally, if you purchase products or services offered jointly by NRS and one of our service providers or vendors, your customer information may be received by both NRS and the service provider or vendor that is providing the product or service.For these jointly offered products and services, you should also review the other company\u2019s privacy policy, which may include practices that are different from the practices described here.<\/p><p class=\"p11\">C. <span class=\"s1\">Special Circumstances<\/span>.We may share information in certain special circumstances.For example:<\/p><ul class=\"ul1\"><li class=\"li9\">to comply with valid legal process including subpoenas, court orders and search warrants, and as otherwise permitted or required by law;<\/li><li class=\"li9\">to assist law enforcement in cases involving danger of death or serious physical injury to any person or in other emergencies;<\/li><li class=\"li9\">to protect our rights or property, or the safety of our customers or employees;<\/li><li class=\"li9\">to protect against fraudulent, malicious, abusive, unauthorized or unlawful use of our Services and to protect our network, Services, devices and users from such use;<\/li><li class=\"li9\">to advance or defend against complaints or legal claims in court, administrative proceedings and elsewhere;<\/li><li class=\"li9\">to prospective purchasers of all or part of our business or assets;<\/li><li class=\"li9\">to outside auditors, lawyers and regulators; and<\/li><li class=\"li9\">with your consent.<\/li><\/ul><p class=\"p5\">D. <span class=\"s1\">Information Shared with Advertising Entities or Social Networks<\/span>.You may see third party advertisements on our products and Services, the NRS Websites, the NRS Apps, and\/or the NRS Web Stores.Some advertisements are chosen by companies that place advertisements on behalf of advertisers.These companies, often called ad servers, may place and access cookies on your device to collect information about your visit.The information they collect from our sites is in a form that does not identify you personally.This information may be combined with similar data obtained from other websites to help our advertisers better reach their targeted audiences.Targeting may be accomplished by tailoring advertising to interests that they infer from your browsing of our sites and your interaction with other websites where these ad servers also are present.If you choose to interact with specific advertisers who advertise on our products and Services, the NRS Websites, the NRS Apps, or the NRS Web Stores, the information you provide to them is subject to the conditions of their specific privacy policies.The NRS Websites, NRS Apps and NRS Web Stores also include plug-ins and widgets that may provide information to their associated social networks or entities about the NRS page you visit, even if you do not click on or otherwise interact with the plug-in or widget.<\/p><p class=\"p5\">E. <span class=\"s1\">When You Share Information<\/span>.You share your information as you use and communicate through our Services.Stores with whom you communicate may store or share your information (including your phone number or messages) with others on and off our Services.<\/p><p class=\"p5\">F. <span class=\"s1\">Links to and from non-NRS Websites and Content<\/span>.The NRS Websites, NRS Apps and NRS Web Stores may contain links to non-NRS sites.In addition, NRS content may be included on websites that are not associated with NRS.We have no control over these non-NRS sites and are not responsible for the content on these sites or platforms or the privacy policies and practices employed by these sites and platforms.We recommend that you review the policies and practices of the sites you visit.<\/p><p class=\"p5\">G. <span class=\"s1\">Social Networking<\/span>.Some of our Services may allow you to participate in blog discussions, message boards, chat rooms, and other forms of social networking and to post reviews.Please be aware that these forums are accessible to others.We urge you to not submit any personal information to these forums because any information you post can be read, collected, shared, or otherwise used by anyone who accesses the forum.NRS is not responsible for the information you choose to submit in these forums.If you post content to information sharing forums, you are doing so by choice and you are providing consent to the disclosure of this information.<\/p><h6 class=\"p4\"><b>6. Accuracy<\/b><\/h6><p class=\"p5\">We strive to keep our customer records as accurate as possible.You may correct or update your customer information by calling an NRS customer service representative at 800-215-0931 or by accessing your account online and providing the updated information there.Please note that NRS is not responsible for information, content, apps or services provided by others.Before you access, use, link to or download a service or application on your computer or wireless device, you should review the associated terms of service and privacy policy.<\/p><h6 class=\"p4\"><b>7. Safeguards:Protecting your Information<\/b><\/h6><p class=\"p5\"><span class=\"s4\">NRS <\/span>has technical, organizational and physical safeguards in place to help protect against unauthorized access to, use or disclosure of the information we collect and store.Employees are trained on the importance of protecting privacy and on the proper access to, use and disclosure of customer information.NRS secures information on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure.We use Secure Socket Layer (SSL) encrypted protection to protect the personal information transmitted to the NRS Websites and NRS Web Stores.The NRS Websites, NRS Apps and NRS Web Stores are PCI compliant in connection with your credit card information.Although we work hard to protect your information that we collect and store, no program is 100% secure and we cannot guarantee that our safeguards will prevent every unauthorized attempt to access, use or disclose that information.NRS maintains security and incident response plans to handle incidents involving unauthorized access to information we collect or store.If you become aware of a security issue, please contact us.<\/p><h6 class=\"p4\"><b>8. Openness:Keeping you Informed<\/b><\/h6><p class=\"p5\">If you have questions, concerns or suggestions related to our Privacy Policy or our privacy practices you may contact us at:<\/p><p class=\"p10\">National Retail Solutions, Inc.<\/p><p class=\"p10\">520 Broad Street, 3<span class=\"s5\"><sup>rd<\/sup><\/span> floor<\/p><p class=\"p10\">Newark, NJ 07102<\/p><p class=\"p10\">Telephone:800-215-0931<\/p><p class=\"p14\"><span class=\"s8\">Email:<\/span><span class=\"s9\"><span class=\"s3\">support@nrsplus.com<\/span><\/span><span class=\"s8\">.<\/span><\/p><p class=\"p10\">Attn:Privacy Ombudsman<\/p><p class=\"p4\">We reserve the right to make changes to this Privacy Policy, so please check back periodically for changes.You will be able to see that changes have been made by checking to see the effective date posted at the beginning of the policy.<\/p><h6 class=\"p4\"><b>9. Providing Access<\/b><\/h6><p class=\"p5\">NRS will provide you with access to the information it retains about you upon receipt of a written request and satisfactory identification.We may charge you a nominal fee and if so, we will give you notice in advance of costs for processing your request.If we are unable to provide you with the information you have requested, the reason for the refusal will be explained in writing.<\/p><h6 class=\"p4\"><b>10. Providing Recourse<\/b><\/h6><p class=\"p5\">If you have any questions or concerns about the privacy of your personal information or our Privacy Policy, please contact us at the contact information listed above.Should you still have questions, you can also reach us by contacting the Privacy Ombudsman as indicated above.<\/p><p class=\"p16\"><b>\u00a92023 National Retail Solutions, Inc. All rights reserved.<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-00dc244 e-flex e-con-boxed e-con e-parent\" data-id=\"00dc244\" data-element_type=\"container\" id=\"virginia\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d399ab7 elementor-widget elementor-widget-heading\" data-id=\"d399ab7\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Privacy Notice for Virginia Consumers<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f5ac387 elementor-widget elementor-widget-spacer\" data-id=\"f5ac387\" data-element_type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5b12e4d e-con-full e-flex e-con e-child\" data-id=\"5b12e4d\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1bdd074 elementor-widget elementor-widget-text-editor\" data-id=\"1bdd074\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>IDT and its affiliates collect, use and disclose for business purposes your personal data. A summary of the categories of personal data collected and the purposes for which it is used can be found below. A full description of the categories and specific pieces of personal data collected and the purposes for which it is used can be found in the general IDT Privacy Policy located at www.idt.net\/privacy and in the specific Privacy Policy applicable to your specific IDT service or product, which specific Privacy Policy can be found by a link in the general IDT Privacy Policy. By proceeding you agree to the processing of your personal data as described in our privacy policies.<\/p><p>As a Virginia resident you have the following rights regarding your personal data under the Virginia Consumer Data Protection Act (the \u201cVCDPA\u201d) effective as of January 1, 2023:<\/p><p>Right to Confirm if a Controller is Processing Your Personal Data and to Access Personal Data;<br \/>Right to Correct Inaccurate Personal Data;<br \/>Right to Delete;<br \/>Right to Obtain Copy of Personal Data in Portable Format; and<br \/>Right to Opt-Out of the Processing of Personal Data for purposes of Targeted Advertising, Sale, or Profiling with legal or other significant effects<\/p><p>To exercise any of your rights, please go to https:\/\/www.idt.net\/vcdpa-request and complete the form. The VCDPA applies to individuals who are Virginia residents, but does not apply to individuals acting in a commercial context (i.e., as a representative of a business).<\/p><p>Depending on the specific IDT service or product you use, the categories of personal data collected may include (1) personal identifiers such as your name, address, email and payment information, (2) commercial information such as the records of the products and services you purchase and use, and (3) internet or other electronic activity such as your interaction and usage with our websites, apps and advertisements and information about and on your device. The only sensitive data (as defined in the VCDPA) that IDT may collect and process is precise geolocation data (as defined in the VCDPA) from the Boss Revolution calling app and the Boss Money app primarily for transaction compliance reasons if a user turns on the app\u2019s location feature.<\/p><p>Depending on the specific IDT service or product you use, IDT and its affiliates use your personal data for various business purposes, including (1) to provide, manage, support and improve our products and services, (2) to maintain and service your account, (3) to verify you, your account activity and your information, (4) to detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts, (5) to provide customer service, (6) to provide advertising and marketing to our customers and (7) to measure our marketing campaigns and to audit consumer interactions.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d3cf7f7 e-flex e-con-boxed e-con e-parent\" data-id=\"d3cf7f7\" data-element_type=\"container\" id=\"california\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fd204b2 elementor-widget elementor-widget-heading\" data-id=\"fd204b2\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">\u0421alifornia Consumer Privacy Notice<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7903178 elementor-widget elementor-widget-text-editor\" data-id=\"7903178\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 class=\"my-4 wp-block-heading\">Pursuant to the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (collectively, the \u201cCCPA\u201d)<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-089bde8 elementor-widget elementor-widget-spacer\" data-id=\"089bde8\" data-element_type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cd9d60a e-con-full e-flex e-con e-child\" data-id=\"cd9d60a\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e02f931 elementor-widget elementor-widget-text-editor\" data-id=\"e02f931\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>IDT and its affiliates may collect, use and disclose for business purposes your personal information. A summary of the categories of personal information collected and the purposes for which it is used can be found below. A full description of the categories of personal information collected and the purposes for which it is used can be found in the general IDT Privacy Policy located at www.idt.net\/privacy and in the specific Privacy Policy applicable to your specific IDT service or product, which specific Privacy Policy can be found by a link in the general IDT Privacy Policy. By proceeding you agree to the processing of your personal information as described in our privacy policies.<\/p><p>Depending on the specific IDT service or product you use, the categories of personal information collected may include (1) personal identifiers such as your name, address, email and payment information, (2) commercial information such as the records of the products and services you purchase and use, (3) internet or other electronic activity such as your browsing and search history and information about and on your device, (4) geolocation data (if you enable location features) such as the location of your device, and (5) inferences drawn such as a profile reflecting your preferences.<\/p><p>Depending on the specific IDT service or product you use, IDT and its affiliates may use your personal information for various business purposes, including (1) to provide, manage, support and improve our products and services, (2) to maintain and service your account, (3) to verify you, your account activity and your information, (4) to detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts, (5) to provide customer service, (6) to provide advertising and marketing to our customers and (7) to measure our marketing campaigns and to audit consumer interactions. IDT and its affiliates do not sell (as defined in the CCPA) or share (as defined in the CCPA) your personal information, except for National Retail Solutions, Inc. which may sell certain personal information.<\/p><p>Depending on the specific IDT service or product you use, the categories of sensitive personal information (as defined in the CCPA) collected may include (1) account log-in, financial account, debit card or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, (2) social security, driver\u2019s license, state identification card, or passport number and (3) precise geolocation if a user enables the location feature in one of our apps. IDT and its affiliates limit the use of your sensitive personal information to those uses which are necessary for us to perform the services and provide the goods you have requested and for other uses as authorized by the CCPA. IDT and its affiliates do not sell (as defined in the CCPA) or share (as defined in the CCPA) your sensitive personal information.<\/p><p>IDT retains your personal information, including your sensitive personal information, for only as long as is necessary to carry out the purposes described in our privacy policies, and we have strict review and retention policies in place to meet these obligations. We are required under certain applicable tax laws to keep your basic personal information (name, address, contact details) for a minimum of six years after which time it will be destroyed unless required to be kept for other purposes. Where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise and\/or withdraw your consent.<\/p><p>Under the CCPA you have privacy choices about how we use your personal information, including your sensitive personal information. California consumers can request that IDT and its affiliates (1) not sell (as defined in the CCPA) or share (as defined in the CCPA) their personal information and\/or (2) limit the use and disclosure of sensitive personal information (as defined in the CCPA) to those uses which are necessary for us to perform the services and provide the goods you have requested and for other uses as authorized by the CCPA. To exercise any of these choices, click here: Your California Privacy Choices.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>National Retail Solutions, Inc. Privacy Policy Effective as of April 1, 2025 1. General National Retail Solutions, Inc. (\u201cNRS\u201d) is committed to protecting the privacy of your personal information. This Privacy Policy (the \u201cPolicy\u201d) sets forth our policies and procedures regarding the collection, use and sharing of your personal information.\u00a0 We also explain the steps [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-1933","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/acro2000.com\/NRS\/wp-json\/wp\/v2\/pages\/1933","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/acro2000.com\/NRS\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/acro2000.com\/NRS\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/acro2000.com\/NRS\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/acro2000.com\/NRS\/wp-json\/wp\/v2\/comments?post=1933"}],"version-history":[{"count":9,"href":"https:\/\/acro2000.com\/NRS\/wp-json\/wp\/v2\/pages\/1933\/revisions"}],"predecessor-version":[{"id":2117,"href":"https:\/\/acro2000.com\/NRS\/wp-json\/wp\/v2\/pages\/1933\/revisions\/2117"}],"wp:attachment":[{"href":"https:\/\/acro2000.com\/NRS\/wp-json\/wp\/v2\/media?parent=1933"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}