Privacy Policy

OUR PRIVACY POLICY INCLUDES:

• ○ GENERAL DISCLOSURES
• ○ WHAT INFORMATION WE COLLECT AND DISCLOSE AND FOR WHAT PURPOSES
• ○ COOKIES POLICY
• ○ HOW TO RESTRICT COOKIES
• ○ THIRD-PARTY ADVERTISING AND ANALYTICS
• ○ LINKING SITES
• ○ SOCIAL MEDIA
• ○ HOW LONG WE RETAIN YOUR INFORMATION
• ○ MARKETING AND PROMOTIONAL COMMUNICATIONS
• ○ CHILDREN’S ONLINE PRIVACY PROTECTION ACT (COPPA) COMPLIANCE AND RELATED INFORMATION
• ○ SECURITY
• ○ DATA RIGHTS FOR CALIFORNIA CONSUMERS
• ○ DATA RIGHTS FOR NEVADA CONSUMERS
• ○ DATA RIGHTS FOR COLORADO, CONNECTICUT, MONTANA, OREGON, TEXAS, UTAH AND VIRGINIA CONSUMERS
• ○ LOYALTY PROGRAMS AND FINANCIAL INCENTIVES
• ○ DO NOT TRACK
• ○ CHANGES TO THIS PRIVACY POLICY
• ○ CONTACT INFORMATION

GENERAL DISCLOSURES

This site is hosted in the United States. If you are visiting the sites or using the mobile application from outside of the United States, please note that by providing your information it is being transferred to, stored or processed in the United States, where our data center and servers are located and operated, or third countries where certain of our service providers or vendors may store or process personal data on our behalf. If you are outside the United States and do not wish to allow the transfer of your personal information to the United States or other countries, you should not use these sites or the mobile application and you should opt-out of the collection of cookies. View our COOKIES POLICY for more information.

Depending on your state of residence, applicable privacy laws may provide you the ability know the information we have collected about you, to request access to, correction of or deletion of your information, and the right to opt out of the ‘sharing’ or ‘selling’ of your personal information, as defined by applicable law, and as further outlined in this Privacy Policy.

WHAT INFORMATION WE COLLECT AND DISCLOSE AND FOR WHAT PURPOSES

1. Current or Potential Customers

   If you purchase any goods or services from us, add items to your cart, engage with our social media or sign up for communications from us:

   • We may collect identifier, geolocation, social media, electronic, visual, audio information, commercial, professional and financial information about you. We generate inferences about your shopping habits based upon your information. We also may collect information that is considered “sensitive” about you, specifically your account log-in and password. While we no longer collect or maintain ethnicity and AARP membership information about you, in the past twelve months, we may have collected ethnicity and AARP membership information about you and disclosed this information to our database providers, loyalty and rewards program providers, and marketing partners.
   • We generally collect this information from you directly or from advertising agencies and networks, social media platforms or other sources as described in the below chart.
   • We may use this information to provide you with requested goods and services, advertise our products and services, perform analytics and otherwise administer and operate our business.
   • We may disclose this information to our service providers, affiliates, marketing partners, operational vendors and other entities as described in the below chart.
   • We do not “sell” or use this personal information for targeted advertising or cross-context behavioral advertising. Although, if you visit our Yelloh.com website, please review our “sale”, targeted advertising and cross-context behavioral advertising disclosures to Website Visitors.
   • Please note that if you interact with our Yelloh support chat bot, any information or messages you input will be disclosed to our chat bot service provider.
   
   

   Categories Collected The personal information we collect may include:	Sources of Collection We may collect your personal information from:	Business Purpose The purposes of our collection, use and disclosure include to:	Categories of Third Parties to Which Personal Information is Disclosed We may disclose your personal information to:
   Identifier Information (such as your include full name, unique customer ID, gender, family size and composition, postal address, email address, household income and education, mobile telephone number, member or customer number, age, social media handles, and signature)	○ you, directly ○ advertising agencies and networks ○ social media platforms ○ delivery service vendors ○ payment processing vendors ○ data processing and analytics vendors ○ IT vendors ○ communication vendors ○ law firms, insurance companies, and governmental authorities	○ provide you with requested goods and services ○ perform analytics ○ improve, enhance and develop existing or new goods and services ○ communicate with you ○ market our products and services ○ enforce our site, product or good terms of service or other applicable agreements or policies ○ verify your identity ○ administer our customer loyalty and rewards programs offered by us and select partners ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our order fulfillment vendors, payment and cost recovery providers, database providers, data and analytics providers, loyalty and rewards program providers, phone/text and email communication providers, data consent and rights management provider, survey providers and our customer support providers) ○ our affiliates ○ our marketing and advertising partners ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Geolocation Information (such as your computer and device location)	○ you, directly ○ social media platforms ○ our marketing and advertising partners	○ facilitate the delivery of requested or purchased goods and services ○ personalize our offerings through our site ○ perform analytics ○ improve, enhance and develop existing or new goods and services ○ communicate with you ○ market our products and services ○ enforce our site, product or good terms of service or other applicable agreements or policies ○ administer our customer loyalty and rewards program, promotions, discounts, incentives and rewards offered by us and select partners ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our order fulfillment vendors, database providers, loyalty and rewards program providers, usage and metrics analytics providers, phone/text and email communication providers, data consent and rights management provider and our customer support providers) ○ our affiliates ○ our marketing and advertising partners ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Social Media Information (such as information you communicate to or about us on social media or by uploading it to one of our sites or apps, including through the use of third-party social media apps)	○ you, directly ○ social media platforms ○ our marketing and advertising partners	○ personalize and facilitate your use of our goods and services ○ perform analytics ○ improve, enhance and develop existing or new goods and services ○ communicate with you ○ market our products and services ○ enforce our site, product or good terms of service or other applicable agreements or policies ○ administer our customer loyalty and rewards programs offered by us and select partners ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our database providers, loyalty and rewards program providers, data and usage analytics providers, phone/text and email communication providers, and our customer support providers) ○ our affiliates ○ our marketing and advertising partners ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Electronic Information (such as your marketing preferences (opt-ins and outs), how you interact with our marketing emails, how you interact with the listings and products on our sites, what and how you interact with our other advertisements, and chat text files when you engage with our customer service team or chatbots)	○ you, directly ○ social media platforms ○ our marketing and advertising partners ○ our phone/text and email communication providers	○ personalize and facilitate your use of our goods and services ○ track engagement and interactivity with our marketing, products and services ○ perform analytics ○ improve, enhance and develop existing or new goods and services ○ communicate with you ○ market our products and services ○ enforce our site, product or good terms of service or other applicable agreements or policies ○ administer our customer loyalty and rewards programs offered by us and select partners ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our database providers, data and usage analytics providers, loyalty and rewards providers, phone/text and email communication providers, data consent and rights management provider and our customer support providers) ○ our affiliates ○ our marketing and advertising partners ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Visual Information (such as images and videos of you, if you chose to provide them to us)	○ you, directly ○ social media entities (with your permission)	○ market our products and services ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our database providers, data and usage analytics providers, phone/text and email communication providers, and our customer support providers) ○ our affiliates ○ our marketing and advertising partners ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Audio Information (such as voicemail and call recordings when you engage with our customer service team or related mechanisms)	○ you, directly ○ our customer support providers	○ fulfill your service request or respond to your comments or questions ○ provide you with requested products and services ○ internal training, improvement and development programs perform analytics ○ improve, enhance and develop existing or new goods and services ○ enforce our site, product or good terms of service or other applicable agreements or policies ○ administer our customer loyalty and rewards offered by us and select partners ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our database providers, loyalty and rewards program providers, phone/text and email communication providers and our customer support providers) ○ our affiliates ○ our marketing and advertising partners ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Commercial Information (such as your cart, purchase and order details, history and frequency as well as information about your interests in commercial goods and services)	○ you, directly ○ our marketing and advertising partners	○ provide you with requested goods and services ○ provide you with offers, discounts and advertisements regarding products that may interest you ○ personalize and facilitate your use of our services and products ○ provide you with historical transaction information ○ enforce our site, product or good terms of service or other applicable agreements or policies ○ perform analytics ○ improve, enhance and develop existing or new goods and services ○ market our products and services ○ administer our customer loyalty and rewards programs offered by us and select partners ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our database providers, data and usage analytics providers, phone/text and email communication providers, survey providers, and our customer support providers) ○ our affiliates ○ our marketing and advertising partners ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Professional or Employment-Related Information (such as information about your household’s education)	○ you, directly ○ our marketing and advertising partners	○ provide you with offers, discounts and advertisements regarding products that may interest you ○ personalize and facilitate your use of our services and products ○ to perform analytics ○ to improve, enhance and develop ○ existing or new goods and services ○ market our products and services ○ enforce our site, product or good terms of service or other applicable agreements or policies ○ administer our customer loyalty and rewards programs offered by us and select partners ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our database providers, data and usage analytics providers, phone/text and email communication providers, survey providers, and our customer support providers) ○ our affiliates ○ our marketing and advertising partners ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Financial Information (such as your bank account information, payment card information and household income details)	○ you, directly ○ payment processing vendors	○ provide you with requested products and services ○ to fulfill and process your orders and purchases ○ enforce our site, product or good terms of service or other applicable agreements or policies ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our payment and cost recovery providers, banking institutions, database providers, and our customer support providers) ○ our affiliates ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Inferences (such as product interest predictions based upon your order history)	○ you, directly ○ our marketing and advertising partners	○ provide you with offers, discounts and advertisements regarding products that may interest you ○ personalize and facilitate your use of our services and products ○ to provide you with offers, discounts and advertisements regarding products that may interest you ○ to perform analytics ○ to improve, enhance and develop existing or new goods and services ○ enforce our site, product or good terms of service or other applicable agreements or policies ○ administer our customer loyalty and rewards programs offered by us and select partners ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our order fulfillment vendors, payment processors, database providers, data and usage analytics providers, loyalty and rewards program providers, phone/text and email communication providers and our customer support providers) ○ our affiliates ○ our marketing and advertising partners ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Sensitive Account Information (your account and password combination)	○ you, directly	○ to secure your customer account with us ○ enforce our site, product or good terms of service or other applicable agreements or policies ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our database providers and information security vendors) ○ our affiliates ○ our marketing and advertising partners ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes

2. Website Visitors

   If you browse our yelloh.com or cygnusjobs.com websites (even if you do not purchase any products or services from us or apply for a job):

   • We may collect online identifier, geolocation, internet, electronic network activity and device information relating to you.
   • We may use this information to operate our sites and provision them to you, personalize your use of our sites, measure, track and analyze trends and usage in connection with your use or the performance of our sites, and to market and advertise our products and services.
   • We generally collect this information from you directly, although we may collect information from referring websites or from our information technology, security and site hosting providers.
   • We may disclose this information to our service providers, affiliates, digital marketing partners, operational vendors and other entities.
   • If you purchase any goods or services from us through yelloh.com, add items to your cart, engage with our social media, or sign up for communications from us, we will also collect personal information from you as described in the Current and Potential Customers section. If you apply for a job through cygnusjobs.com, we will also collect personal information from you as described in the Job Applicants section.
   • Please note that if you interact with our Yelloh support chat bot, any information or messages you input may be disclosed to our chat bot provider.

   Under privacy law, disclosure of your online browsing information to certain third parties (such as social media providers, ad networks, analytics vendors, and providers of online marketing and advertising services), including via automated technologies such as cookies, pixels, and tags, for advertising or analytics purposes may be considered a “sale” or disclosure of personal information for targeted advertising or cross-context behavioral advertising.

   If you are a Website Visitor, the following types of Personal Information may be “sold” or disclosed for targeted advertising or cross-context behavioral advertising:

   • Identifier information
   • Geolocation information
   • Internet or other electronic network activity information
   • Device information

   You can opt-out of these uses of by visiting our Privacy Preference Center Privacy Preference Center and opting-out of all cookies and technologies other than Strictly Necessary Cookies. Additionally, we recognize the Global Privacy Control (GPC) browser setting that allows individuals to automatically signal their opt-out of the “sale” of their online browsing personal information or disclosure of their online browsing personal information for the purposes of targeted advertising or cross-context behavioral advertising. More information regarding GPC is available here.

   
   

   Categories Collected The personal information we collect may include:	Sources of Collection We may collect your personal information from:	Business Purpose The purposes of our collection, use and disclosure include to:	Categories of Third Parties to Which Personal Information is Disclosed We may disclose your personal information to:
   Identifier Information (such as your internet protocol (IP) address and online identifiers)	○ you, directly ○ referring websites ○ Internet service providers ○ our IT vendors ○ our site security vendors	○ personalize and facilitate your use of our sites ○ enforce any applicable terms of service or other applicable agreements or policies ○ secure our networks, systems and databases against external threats ○ market and advertise of our products and services ○ develop, maintain and enhance our sites, products and services ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our security monitoring providers, site and system providers, data analytics providers, database hosting vendors, data consent and rights management provider and our auditors) ○ our affiliates ○ other entities during a corporate transaction ○ our marketing and advertising partners ○ entities that operate plug-ins or social media features on our sites ○ courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes
   Geolocation Information (such as the general location of your device or computer)	○ you, directly ○ referring websites ○ Internet service providers ○ our IT vendors ○ our site security vendors	○ personalize and facilitate your use of our sites ○ measure, track and analyze trends and usage in connection with your use or the performance of our sites ○ market and advertise of our services ○ develop, maintain and enhance our sites, products and services ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our security monitoring providers, site and system providers, data analytics providers, database hosting vendors, data consent and rights management provider and our auditors) ○ our affiliates ○ our marketing and advertising partners ○ entities that operate plug-ins or social media features on our sites ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes
   Internet or Other Electronic Network Activity Information (such as your session replays on our sites, time zone setting, auth0 logs, pages visited, pages viewed, events and page loads, browser plug-in types and versions)	○ you, directly ○ referring websites ○ Internet service providers ○ our IT vendors ○ our site security vendors	○ personalize and facilitate your use of our sites ○ measure, track and analyze trends and usage in connection with your use or the performance of our sites ○ market and advertise of our services ○ develop, maintain and enhance our sites, products and services ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our security monitoring providers, site and system providers, data analytics providers, database hosting vendors, data consent and rights management provider and our auditors) ○ our affiliates ○ our marketing and advertising partners ○ entities that operate plug-ins or social media features on our sites ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes
   Device Information (such as your operating system, platform, device type and other information about the devices that you use to access the sites)	○ you, directly ○ referring websites ○ Internet service providers ○ our IT vendors ○ our site security vendors	○ personalize and facilitate your use of our sites ○ measure, track and analyze trends and usage in connection with your use or the performance of our sites ○ market and advertise of our services ○ develop, maintain and enhance our sites, products and services ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our security monitoring providers, site and system providers, data analytics providers, database hosting vendors, data consent and rights management provider and our auditors) ○ our marketing and advertising partners ○ our affiliates ○ entities that operate plug-ins or social media features on our sites ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

3. Mobile Application Users

   If you download and access our mobile application (even if you do not purchase any goods or services from us):

   • We may collect your account log-in and password, which is considered “sensitive” under California privacy law.
   • We generally collect this information from you directly.
   • We may use this information to administer and facilitate our relationship with you and to secure our networks, systems and databases against external threats
   • We may disclose this information to our service providers and operational vendors.
   • We do not “sell” or use this personal information for targeted advertising or cross-context behavioral advertising.
   • Please note that if you interact with our Yelloh support chat bot, any information or messages you input will be disclosed to our chat bot service provider.

   If you purchase any goods or services from us through the mobile application, add items to your cart, engage with our social media or sign up for communications from us, we will also collect personal information from you as described in the Current and Potential Customers section.

   
   

   Categories Collected The personal information we collect may include:	Sources of Collection We may collect your personal information from:	Business Purpose The purposes of our collection, use and disclosure include to:	Categories of Third Parties to Which Personal Information is Disclosed We may disclose your personal information to:
   Sensitive Identifier Information (such as your log-in account and password information)	○ you, directly	○ administer and facilitate our relationship with us ○ secure our networks, systems and databases against external threats ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our web security providers, database hosting vendors and our auditors) ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

4. Current or Prospective Business Partners

   If you are an employee of one of our customers, vendors or other entity and who is involved in our relationship with your employer, or if you engage with us as a proprietor of your own business:

   • We may collect business identifier information as well as information business account log-in and password, which is considered “sensitive” under California privacy law.
   • We may use this information to administer and facilitate our relationship with you or your employer and to secure our networks, systems and databases against external threats
   • We generally collect this information from you directly, although we may collect business identifier information from referrals or publicly available databases.
   • We may disclose this information to our service providers and operational vendors.
   • We do not “sell” or use this personal information for targeted advertising or cross-context behavioral advertising.
   
   

   Categories Collected The personal information we collect may include:	Sources of Collection We may collect your personal information from:	Business Purpose The purposes of our collection, use and disclosure include to:	Categories of Third Parties to Which Personal Information is Disclosed We may disclose your personal information to:
   Business Identifier Information (such as your name, e-mail, phone number, fax number, physical address and job position information)	○ you, directly ○ referral sources ○ publicly available sources	○ administer and facilitate our relationship with you or your employer ○ secure our networks, systems and databases against external threats ○ correspond with you ○ provide business event planning, provision and operation services ○ market and advertise our services ○ develop, maintain and enhance our sites, products and services as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our marketing services vendors, communication vendors, database hosting vendors and our auditors) ○ our affiliates ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes
   Sensitive Identifier Information (such as your log-in account and password information)	○ you, directly	○ administer and facilitate our relationship with you or your employer ○ secure our networks, systems and databases against external threats ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our web security providers, database hosting vendors and our auditors) ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

5. Employees and Contractors

   If you are a Cygnus employee or contractor:

   • We may collect identifier, electronic, background check, visual, audio, professional, education, financial, insurance information about you. We generate inferences about your work skills, attributes and performance based upon your information. We also may collect information that is considered “sensitive” about you, specifically your SSN, precise geolocation, health, disability and ethnicity information.
   • We may use this information to facilitate and administer your employment with us, provide you with benefits and pay you compensation.
   • We generally collect this information from you directly, although we may collect information through recruiting vendors and staffing agencies, referrals and our service providers.
   • We may disclose this information to our service providers, affiliates, operational vendors, insurance companies, banks and governmental institutions.
   • We do not “sell” or use this personal information for targeted advertising or cross-context behavioral advertising.
   
   

   Categories Collected The personal information we collect may include:	Sources of Collection We may collect your personal information from:	Business Purpose The purposes of our collection, use and disclosure include to:	Categories of Third Parties to Which Personal Information is Disclosed We may disclose your personal information to:
   Identifier Information (such as your include full name, employee or contractor ID, gender, postal address, date of birth, business and personal email address, mobile telephone number, and signature). This information may also relate to our contractors’ and employees’ beneficiaries and emergency contacts, to the extent provided to us.	○ you, directly ○ recruiting vendors and staffing agencies ○ service providers (our background check providers, employee credit card issuers and payroll processors) ○ from your family member or caregiver who is our employee or contractor, if you are a beneficiary or emergency contact of that employee or contractor	○ facilitate and administer your employment with us ○ provide you with benefits ○ pay you compensation ○ facilitate your use of a company credit card ○ facilitate employees’ and dependents' enrollment in available benefits, including health plans ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our HR platform provider, benefits providers and administrators, payroll providers, employee rewards providers, database provider, employee intranet platform provider, corporate credit card issuers and our auditors) ○ insurance companies, as required to facilitate coverage and claim administration ○ your financial or banking institution ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Electronic Information (such as identity and usage information relating to your Cygnus issued devices)	○ your Cygnus issued devices or devices enrolled in bring-your-own-device programs ○ our service providers (our IT and information security providers)	○ facilitate and administer your employment with us ○ administer your use of electronic equipment for work purposes ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our IT providers, information security providers, database provider, and our auditors) ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Background Check Information (such as your educational and employment background history, arrest records, conviction records, credit information, disciplinary actions and news articles about you)	○ you, directly ○ our service providers (background check providers) ○ publicly available databases	○ administer your employment with us ○ to determine your eligibility for employment, raises or promotions ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our HR platform provider, database provider, and our auditors) ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Visual Information (such images of you)	○ you, directly	○ facilitate and administer your employment with us ○ securing our physical locations and electronic systems ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our HR platform provider, database provider, our employee intranet platform provider, physical and electronic systems security providers, and our auditors) ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Audio Information (such as call recordings when you engage with our customers)	○ you, directly ○ our customer support providers	○ fulfill service request or respond to customer comments or questions ○ provide customers with requested products and services ○ internal training, improvement and development programs ○ perform analytics ○ improve, enhance and develop existing or new goods and services ○ enforce our site, product or good terms of service or other applicable agreements or policies ○ administer our customer loyalty and rewards offered by us and select partners ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our database providers, loyalty and rewards program providers, phone/text and email communication providers and our customer support providers) ○ our affiliates ○ our marketing and advertising partners ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Professional or Employment-Related Information (such as your work history and prior employers, assigned job duties, compensation information, reviews and evaluations, leave and time-off information, your work related activities and disciplinary events, training and exam results, safety meeting attendance and professional licenses and certifications. We also collect your veteran status, if you choose to provide it)	○ you, directly ○ recruiting vendors and staffing agencies ○ electronic logging device in trucks ○ service providers (our background check providers)	○ facilitate and administer your employment with us ○ track on-duty, driving, off-duty hours and breaks ○ administer our disciplinary policies and procedures ○ to determine your eligibility for employment, raises or promotions ○ facilitate your use of a company credit card ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our HR platform provider, benefits providers and administrators, database provider, employee rewards providers, employee intranet platform provider, truck telematics providers, corporate credit card issuers and our auditors) ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Education Information (such as your resume, degrees and academic achievements)	○ you, directly ○ recruiting vendors and staffing agencies ○ service providers (our background check providers)	○ facilitate and administer your employment with us ○ to determine your eligibility for employment, raises or promotions ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our HR platform provider, benefits providers and administrators, database provider, our employee intranet platform provider and our auditors) ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Financial Information (such as your compensation, financial account information, direct deposit information, financial account information, tax withholding information, 401k contribution and loan information and payment card information)	○ you, directly ○ service providers (our background check providers, financial institutions, employee credit card issuers and payroll processors)	○ facilitate and administer your employment with us ○ provide you with employee benefits ○ pay you compensation ○ to pay and withhold local, state and federal taxes ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our HR platform provider, benefits providers and administrators, financial institutions, database provider and our auditors) ○ insurance companies, as required to facilitate coverage and claim administration ○ your financial or banking institution ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Insurance Information (such as your insurance policy numbers and coverage information)	○ you, directly ○ your insurance providers ○ your medical providers ○ our services providers (our benefits providers and administrators)	○ facilitate and administer your employment with us ○ provide you with employee benefits ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our HR platform provider, benefits providers and administrators, database provider and our auditors) ○ insurance companies, as required to facilitate coverage and claim administration ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Inferences (such as your work related attributes, reviews and evaluations, performance and skills, truck driving information)	○ you, directly ○ internal evaluations ○ service providers (our telematics providers)	○ facilitate and administer your employment with us ○ to determine your eligibility for employment, raises or promotions ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our HR platform provider, database provider, our employee intranet platform provider and our auditors) ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Sensitive Identity Information (your social security number and your driver’s license number). This information may also relate to our contractors’ and employees’ beneficiaries, to the extent provided to us.	○ you, directly ○ from your family member or caregiver who is our employee or contractor, if you are a beneficiary of that employee or contractor	○ facilitate and administer your employment with us ○ to provide you or your beneficiaries with benefits ○ pay you compensation ○ facilitate your use of a company credit card ○ validate required drivers’ license issuance ○ facilitate employees’ and dependents’ enrollment in available benefits, including health plans ○ to pay and withhold local, state and federal taxes ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our HR platform provider, benefits provider and administrators, database provider, corporate credit card issuers and our auditors) ○ insurance companies, as required to facilitate coverage and claim administration ○ your financial or banking institution ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Sensitive Precise Geolocation (if you are truck operator)	○ electronic logging device in trucks	○ facilitate meeting commercial driver’s license requirements ○ evaluating route and delivery information ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our database provider, electronic logging provider and our auditors) ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Sensitive Health Information (such as your medical history, health conditions and medications and treatments). This information may also relate to our contractors’ and employees’ beneficiaries, to the extent provided to us.	○ you, directly ○ your medical providers ○ our service providers (our benefits providers and administrators)	○ administer your employment with us ○ to provide you or your beneficiaries with benefits ○ to comply with laws and guidelines from applicable federal, state and local governmental authorities and public health entities such as the Centers For Disease Control And Prevention ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our HR platform provider, benefits provider and administrators and our auditors) ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes
   Sensitive Ethnicity Information (if you choose to provide it to us)	○ you, directly	○ perform internal metrics ○ administer our diversity and inclusion programs ○ governmental reporting	○ our service providers (our HR platform provider, benefits provider and administrators and our auditors) ○ our subsidiaries and affiliates ○ other entities during a corporate transaction ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes

6. Job Applicants

   If you submit an application for an open position at Cygnus:

   • We may collect identifier, geolocation, social media, electronic, visual and audio, professional and financial information about you. We generate inferences about your work skills, attributes and performance based upon your information. We also may collect information that is considered “sensitive” about you, specifically your SSN, health, disability and ethnicity information.
   • We may use this information to assess your suitability for employment for the role for which you are applying, perform recruitment related administrative functions and perform background checks.
   • We may disclose this information to our service providers, affiliates, operational vendors and background check providers.
   • We do not “sell” or use this personal information for targeted advertising or cross-context behavioral advertising.
   
   

   Categories Collected The personal information we collect may include:	Sources of Collection We may collect your personal information from:	Business Purpose The purposes of our collection, use and disclosure include to:	Categories of Third Parties to Which Personal Information is Disclosed We may disclose your personal information to:
   Identifier Information (such as your include full name, postal address, date of birth, email address, mobile telephone number, and signature. We also collect your gender, if you choose to provide it)	○ you, directly ○ our recruiting vendors and staffing agencies ○ publicly available databases ○ your former employers or references	○ assess your suitability for employment for the role for which you are applying, as well as future roles that may become available ○ perform recruitment related administrative functions ○ to perform background checks on you ○ to communicate with you in regards to your application ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our human resource platform provider, database provider, recruiting vendors, background check provider or our auditors) ○ our subsidiaries and affiliates ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes ○ entities that acquire all or part of our business in a corporate transactions
   Background Check Information (such as your educational and employment background, history, arrest records, conviction records, credit information, disciplinary actions and news articles about you)	○ you, directly ○ our background check providers ○ publicly available databases	○ assess your suitability for employment for the role for which you are applying, as well as future roles that may become available ○ perform recruitment related administrative functions ○ to perform background checks on you ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our human resource platform provider, database provider, recruiting vendors, background check provider or our auditors) ○ our subsidiaries and affiliates ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes ○ entities that acquire all or part of our business in a corporate transactions
   Professional or Employment-Related Information (such as your resume information, professional licenses and certifications, work history and prior employers, assigned job duties and work related activities you performed. We also collect your veteran status, if you choose to provide it)	○ you, directly ○ our recruiting vendors and staffing agencies ○ publicly available databases ○ your former employers or references	○ assess your suitability for employment for the role for which you are applying, as well as future roles that may become available ○ perform recruitment related administrative functions ○ to perform background checks on you ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our human resource platform provider, database provider, recruiting vendors, background check provider or our auditors) ○ our subsidiaries and affiliates ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes ○ entities that acquire all or part of our business in a corporate transactions
   Education Information (such as your resume information, level of education, degrees and academic achievements)	○ you, directly ○ our recruiting vendors and staffing agencies ○ publicly available databases	○ assess your suitability for employment for the role for which you are applying, as well as future roles that may become available ○ perform recruitment related administrative functions ○ to perform background checks on you ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our human resource platform provider, database provider, recruiting vendors, background check provider or our auditors) ○ our subsidiaries and affiliates ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes ○ entities that acquire all or part of our business in a corporate transactions
   Inferences (such as your work related attributes and skills, work behaviors and motivations)	○ you, directly ○ your former employers or references	○ assess your suitability for employment for the role for which you are applying, as well as future roles that may become available ○ perform recruitment related administrative functions ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our human resource platform provider, database provider, recruiting vendors, background check provider or our auditors) ○ our subsidiaries and affiliates ○ individuals or entities you authorize ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes ○ entities that acquire all or part of our business in a corporate transactions
   Sensitive Identity Information (your social security number and your driver’s license number, state identification card and number)	○ you, directly	○ perform recruitment related administrative functions ○ to perform background checks on you ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our human resource platform provider, database provider, recruiting vendors, background check provider or our auditors) ○ our subsidiaries and affiliates ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes ○ entities that acquire all or part of our business in a corporate transactions
   Sensitive Immigration Information (such as your work authorization status)	○ you, directly ○ governmental sources	○ to review your eligibility to work ○ as required by law ○ to defend claims brought against us, to investigate violations of law or breaches of our own internal policies	○ our service providers (our human resource platform provider, database provider, or our auditors) ○ our subsidiaries and affiliates ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes ○ entities that acquire all or part of our business in a corporate transactions
   Sensitive Disability Information (if you choose to provide it)	○ you, directly	○ to accommodate a disability	○ our service providers (our human resource platform provider, database provider or our auditors) ○ our subsidiaries and affiliates ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes ○ entities that acquire all or part of our business in a corporate transactions
   Sensitive Ethnicity Information (if you choose to provide it to us)	○ you, directly	○ perform internal metrics ○ governmental reporting	○ our subsidiaries and affiliates ○ our service providers (our human resource platform provider, database provider or our auditors) ○ our subsidiaries and affiliates ○ governmental entities, as required by law ○ courts, litigants, regulators, arbitrators, administrative bodies, law firms or law enforcement for legal purposes ○ entities that acquire all or part of our business in a corporate transactions

COOKIES POLICY

Like many website operators, Cygnus and its analytics vendors use server logs and automated data collection tools, such as browser cookies, pixel tags, scripts and web beacons. These tools are used for analytics purposes to enable Cygnus to understand how users interact with the sites and Services. Cygnus and its analytics service providers may tie the information gathered by these means to the identity of users.

What are cookies?

Cookies are small text files placed on a computer or device while browsing the Internet. Cookies are used to collect, store and share bits of information about user activities. Cygnus uses both session cookies and persistent cookies.

Session cookies are used to identify a particular visit to Cygnus sites and collect information about your interaction with the sites. These cookies expire after a short time or when the user closes their web browser after using the sites. Cygnus uses these cookies to identify a user during a single browsing session, such as when you log into the sites. This helps Cygnus improve the sites and Services as well as improve the users’ browsing experience.

A persistent cookie will remain on a user’s device for a set period of time specified in the cookie. Cygnus uses these cookies to identify and recognize a specific user over a longer period of time. They allow Cygnus to:

• analyze usage of the sites (e.g. what links users click on) by customers and others;
• collect information about customer purchases through the sites;
• to improve our offerings and Services;
• provide targeted advertising relating to our Services;
• understand how the users interact with our sites;
• test different versions of the sites to see which particular features or content users prefer to optimize the sites;
• support communication between Cygnus and users through the sites;
• provide a more personalized experience to users with more relevant content and course recommendations;
• allow users to more easily log in to use the sites and Services.

Examples of persistent cookies include: (i) preferences cookies to remember information about a user’s browser and settings preferences, such as preferred language – preference cookies make a user’s experience more functional and customized, (ii) authentication and security cookies to enable a user to log in or stay logged in to access the sites and Services, to protect user accounts against fraudulent log-ins by others and to help detect and protect against abuse or unauthorized usage of user accounts and (iii) functional cookies to make the experience of using the sites and Services better, like remembering the sound volume level selected by the user.

Cookies and information captured through our sites are stored for a certain retention period, however you can eliminate these cookies any time before the expiration date.

To learn more about the types of cookies we use or to make updates to your preferences please visit our Privacy Preference Center Privacy Preference Center.

Third-party cookies

The sites allows third-parties to place cookies on your Internet-connected device in order to deliver advertisements based upon your web-browsing habits and history. Further, in order to provide interoperability and plug-ins from various social media websites (like Facebook), the sites allows these third-parties to place and collect cookies on your Internet-connected device. However, you can restrict the third-party collection of cookies through the instructions provided in the section How To Restrict Cookies below.

Web beacons, pixels, tags and scripts

These technologies may be used on our sites or in our emails to help us to deliver cookies, count visits, understand usage of our sites, campaign effectiveness and determine whether an email has been opened and acted upon.

HOW TO RESTRICT COOKIES

You can adjust the settings in your browser to restrict or block cookies that are set by the sites (or any other website on the Internet). Your browser may include information on how to adjust your settings. Alternatively, you may visit www.allaboutcookies.org to obtain comprehensive general information about cookies and how to adjust the cookie settings on various browsers. This site also explains how to delete cookies from your computer.

You can control and delete these cookies through your browser settings through the following:

• Google Chrome
• Mozilla Firefox
• Safari
• Opera
• Microsoft Internet Explorer
• Microsoft Edge
• Safari for iOS (iPhone and iPad)
• Chrome for Android

Please be aware that restricting cookies may impact the functionality of the Services. Most browsers allow you to refuse to accept cookies. Additional general information about cookies, including how to be notified about the placement of new cookies and how to disable cookies, can be found allaboutcookies.org.

THIRD-PARTY ADVERTISING AND ANALYTICS

We may use third-party service providers and vendors to provide site metrics and other analytics services. These third parties may use cookies, pixels, web beacons and other technologies to collect information, such as your IP address, identifiers associated with your device, other applications on your device, the browsers you use to access our sites and Services, webpages viewed, time spent on webpages, movement around webpage layout elements, links clicked and conversion information (e.g., transactions entered into). This information may be used by Cygnus and third-party service providers we engage pursuant to contracts that protect your information on behalf of Cygnus and its vendors to analyze and track usage of our sites and Services, to determine the popularity of certain content, to understand the usability and user-friendliness of our website, and to better understand how you use our sites and Services. The third-party service providers that we engage are bound by confidentiality obligations and other restrictions with respect to their use and collection of your information.

We use remarketing with our service providers to advertise online. These vendors may show our ads on websites across the internet based upon data gathered from your interaction with our sites, emails and other properties. Our sites utilize the Meta Pixel. The Meta Pixel is a snippet of code that sends data back to Meta about people who uses these sites and allows us to provide custom advertising on Meta properties (like Facebook and Instagram). The data provided to Meta may include information about how you interact with our sites, including your search queries, what you add to your online cart and your purchases.

Cygnus uses tracking technology to: (i) determine if a certain page was visited or whether an email sent by Cygnus was opened or clicked on by a user; and (ii) to customize the experience of individual users by recommending specific content, including based on user’s past searches and buying preferences.

We also use clear gifs in HTML-based emails sent to our users to track which emails are opened and clicked on by recipients. We may use the information we obtain from the cookie in the administration of the sites, to improve the usability of the sites and for our direct marketing purposes. We may also use that information to recognize your computer when you visit our sites, and to personalize our sites for you.

This Privacy Policy does not apply to, and we are not responsible for, third-party cookies, web beacons or other tracking technologies, which are covered by such third-parties’ privacy policies. For more information, we encourage you to check the privacy policies of these third parties to learn about their privacy practices. For more information about targeted advertising specifically, please visit aboutads.info/choices.

LINKING SITES

Please note that this Privacy Policy applies only to our sites, and not to other companies’ or organizations’ websites to which we link. The sites contain links to other websites. Cygnus is not responsible for the privacy practices or the content of such websites, including any websites that may indicate a special relationship or partnership with us (such as co-branded pages or “powered by” or “in cooperation with” relationships). Other linked websites, however, may collect personal information from you that is not subject to our control. To ensure protection of your privacy, always review the privacy policy of the websites you may visit by linking from the sites. For example, the sites uses chat features powered by third-party platforms. When interacting with these integrations, you should take some time to review the privacy notices contained therein. Cygnus is not responsible for the data collection practices of these third-parties.

SOCIAL MEDIA

We may collect information from other sources, such as social media platforms, that may share information and content that you create and then share with or about Cygnus on third party social networks or by uploading it to one of our sites or apps, including through the use of third-party social media apps such as Facebook. Examples include photos, videos, personal stories, or other similar media or content (collectively, “User Generated Content”). We do not control how your personal information is collected, stored or used by such third-party websites or to whom it is disclosed. You should review the privacy policies and settings on any social media website that you subscribe to so that you understand the information they collect and may be sharing. If you do not want your social media websites to share information about you, you must contact that website and determine whether it gives you the opportunity to opt-out of sharing such information. Cygnus is not responsible for how these third-party websites may use information collected from or about you.

Further, our sites may include social media features, such as the Pinterest “Save” button. Our integration of these features may allow third-party social media to collect certain information, such as your IP address, the address of and activity on the sites you visit, searches, browser type and settings, the date and time of your request, cookie data, device data and which page(s) you are visiting when using our sites and Services, and to set a cookie to enable that feature to function properly. Your interactions with these features are governed by the privacy policy of the company providing it.

HOW LONG WE RETAIN YOUR INFORMATION

We generally retain your information as long as reasonably necessary to provide you the Services, comply with applicable law or otherwise in accordance with our data retention practices. To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means and the applicable legal requirements. We may retain copies of information about you and any transactions or Services you have used for a period of time that is consistent with applicable law, applicable statute of limitations or as we believe is reasonably necessary to comply with applicable law, regulation, legal process or governmental request, to detect or prevent fraud, to collect fees owed, to resolve disputes, to address problems with our Services, to assist with investigations, to enforce other applicable agreements or policies or to take any other actions consistent with applicable law.

In some circumstances we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. This allows the specific information collected (name, email, address, phone number, etc.) to become anonymous, but allows Cygnus to keep the transaction or engagement data. For example, Cygnus will not be able to tell if John Smith purchased a particular product, but we will be able to tell that a person purchased a product and the related transactional history. This will allow Cygnus to maintain a level of information that helps us develop and improve our sites and Services.

Subject to legal requirements, we retain Employment Information for the length of employment plus an additional seven (7) years.

MARKETING AND PROMOTIONAL COMMUNICATIONS

You may unsubscribe from receiving marketing and promotional messages from Cygnus, if those messages are powered by Cygnus, by following the instructions in those messages or in your account settings. If you decide to unsubscribe, you will still receive non-promotional communications relevant to your use of our Services such as transactional messages related to requests for Services and product orders.

CHILDREN’S ONLINE PRIVACY PROTECTION ACT (COPPA) COMPLIANCE AND RELATED INFORMATION

The Children’s Online Privacy and Protection Act (COPPA) regulates online collection of information from persons under the age of 13. It is our policy to refrain from knowingly collecting or maintaining personal information relating to any person under the age of 18. If you are under the age of 18, please do not supply any personal information through the sites. If you are under the age of 18 and have already provided personal information through the sites, please have your parent or guardian contact us immediately using the information provided under CONTACT INFORMATION so that we can remove such information from our files.

SECURITY

We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. We hold information about you both at our own premises and with the assistance of third-party service providers. Further public disclosure here of our security measures could aid those who might attempt to circumvent those security measures. If you have additional questions regarding security, please feel free to contact us directly using the information provided under CONTACT INFORMATION. To ensure that our employees comply with our privacy policies, we have developed a training program that provides all employees with the tools and knowledge to protect your personal information in all aspects of their work. Any employee who violates our privacy policies is subject to disciplinary action, including possible termination and civil and/or criminal prosecution.

DATA RIGHTS FOR RESIDENTS OF CERTAIN STATES

1. DATA RIGHTS FOR CALIFORNIA CONSUMERS

   The California Consumer Privacy Act, as amended by the California Privacy Rights Act, (the “CCPA”) permits residents of California to have the following data rights. For more information, or if you have questions, you can contact us using the information provided under CONTACT INFORMATION. For your protection, Cygnus is required to collect certain information from you to compare to your Cygnus account information, to verify your identity before we respond to any request submitted by you. The information you provide to verify your identity (your name on your Cygnus account, your service address, your email and phone number on your Cygnus account) will only be used for verification purposes, and a record of your request, including certain information contained within it, will be maintained by Cygnus for its files.

   
   

   California Residents Have The Right To Request Cygnus Disclose What Information It Collects, Uses And Discloses

   • California residents have the right to request that Cygnus disclose what personal information Cygnus collects, uses and discloses about them. The general categories of personal information Cygnus collects about California residents are listed above the section titled What Information We Collect And Disclose And For What Purposes.
   • For California residents — Customers: If you are a California resident who has purchased our Services and products, and would like to request access to the personal information that Cygnus collects, uses and discloses about you, please complete this Request Form or use the information provided under CONTACT INFORMATION and contact Cygnus at the toll-free at 866-996-1550. If you have obtained Services from us but have not created an account on yelloh.com or through our mobile application, then you may request access to the information we process about you either by calling our Customer Care team at the phone number listed below in CONTACT INFORMATION, or sending an email directed to the Cygnus Privacy team at [email protected].
   • For California residents — Employment Information: If you are a California resident and have applied for a position, have been offered a position, have been employed; or been an independent contractor we have engaged, and would like to request access to the personal information that Cygnus collects, uses and discloses about you, please use the information provided under CONTACT INFORMATION, contact Cygnus toll-free at 866-996-1550, or make your request through email directed to the Cygnus privacy team at [email protected].
   
   

   California Residents Have The Right To Request The Erasure Of Their Personal Information Maintained By Cygnus

   California residents have the right to be forgotten and request that Cygnus erase the personal information Cygnus maintains about them. Cygnus will make every effort to comply with California residents’ requests to erase their personal information, however, certain laws or other legal requirements might prevent some personal information from being erased.

   • For California residents — Customers: If you are a California resident who has purchased our Services and products, and would like to request erasure of the personal information that Cygnus collects, uses and discloses about you, please complete this Request Form or use the information provided under CONTACT INFORMATION and contact Cygnus toll-free at 866-996-1550. If you have obtained Services from us but have not created an account on yelloh.com or through our mobile application, then you may request erasure to the information we process about you either by calling our Customer Care team at the phone number listed below in CONTACT INFORMATION, or sending an email directed to the Cygnus Privacy team at [email protected].
   • For California residents — Employment Information: If you are a California resident and have applied for a position, have been offered a position, have been employed; or been an independent contractor we have engaged, and would like to request erasure of the personal information that Cygnus collects, uses and discloses about you, please use the information provided under CONTACT INFORMATION, namely, you may use the toll-free number listed below, or make your request through email directed to the Cygnus privacy team at [email protected].
   
   

   California Residents Have the Right to Request The Correction of Inaccurate Personal Information

   California residents have the right to request correction of inaccurate personal information. Due to the nature of our Services model for delivery of our products to your door, it is vital that we maintain accurate information about you. Additionally, we want to ensure that applicants, employees and independent contractors have the ability to update their personal information for employment, benefit and related purposes.

   • For California residents — Customers: We provide you the ability to correct any inaccurate personal information though your account on yelloh.com. Simply log into your account and select “My Account”. You may update your personal information through this function and your changes will be updated the same day as you make them. If you have obtained Services from us but have not created an account on yelloh.com or through our mobile application, then you may request we correct information we may process about you, either by calling our Customer Care team at the phone number listed below in CONTACT INFORMATION, or sending an email directed to the Cygnus Privacy team at [email protected].
   • For California residents — Employment Information: You may access your personal information on file with us through your UKG account. Select ‘Myself’ from the UKG menu once you sign in and make your changes to personal information. Changes you make to your personal information will be updated to affected service providers and contractors in due order, typically through periodic updates. If you are an applicant and desire to update your personal information, including contact information, you may access your account through which you made your application at cygnusjobs.com.
   
   

   California Residents Have the Right to Know What Personal Information We Sell or Share and to Whom

   Under California privacy law, disclosure of your online browsing information to certain third parties (such as social media providers, ad networks, analytics vendors, and providers of online marketing and advertising services), including via automated technologies such as cookies, pixels, and tags, for advertising or analytics purposes may be considered a “sale” or “sharing” of personal information. These kinds of disclosures may constitute a “sale” when the personal information is exchanged for non-monetary consideration, or “sharing” when the personal information is disclosed for cross-context behavioral advertising purposes.

   If you are a Website Visitor, the following types of online browsing personal information may be “sold” or “shared” as we describe in this section:

   • Identifier Information
   • Geolocation Information
   • Internet or Other Electronic Network Activity Information
   • Device Information
   
   

   California Residents Have the Right to Opt Out of Sale or Sharing of Personal Information

   California residents can request that a business stop “selling” or “sharing” (which is a term used under California law to address the sharing of information for targeted advertising purposes) their personal information.

   With regards to the “selling” or “sharing” of your online browsing personal information, you can opt-out by visiting our Privacy Preference Center Privacy Preference Center and opting-out of all cookies and technologies other than Strictly Necessary Cookies. Additionally, we recognize the Global Privacy Control (GPC) browser setting that allows individuals to automatically signal their opt-out of the “sale” of their online browsing personal information or disclosure of their online browsing personal information for the purposes of targeted advertising or cross-context behavioral advertising. More information regarding GPC is available here.

   
   

   California Residents Have the Right to Opt Out of Use and Disclosure of Sensitive Information

   California residents can request that a business limit its use or disclosure of their “sensitive” personal information to that use or disclosure which is necessary to perform the services or provide the goods reasonably expected by an average consumer, or to those uses or disclosures otherwise authorized by California law in CCPA regulation § 7027(m). However, we do not offer this right to limit because we do not use or disclose your “sensitive” personal information for any purpose other than for the specific purposes described under the CCPA regulation § 7027(m) and always in a manner reasonably necessary and proportionate for these permitted purposes. For information on how we use or disclose your “sensitive” personal information, please see the applicable disclosures in the section titled: What Information We Collect And Disclose And For What Purposes.

   
   

   California Residents Have The Right To Non-Discrimination For The Exercise Of Their Privacy Rights Under The CCPA

   Under the CCPA, California residents have the right not to receive discriminatory treatment by Cygnus for the exercise of their privacy rights. However, the exercise of certain privacy rights by California residents will make it so that Cygnus is no longer able to provide those residents with certain services. For example, if, at the request of a California resident, Cygnus deletes all of the California resident’s personal information that it maintains, Cygnus will no longer be able to send marketing communications to that California resident.

   
   

   California Residents Can Designate An Authorized Agent To Make A Request Under The CCPA On Their Behalf

   California residents can designate an authorized agent to make requests under the CCPA related to the residents’ personal information. Cygnus can deny any request made by an agent who does not submit proof that he or she has been authorized by the California resident to act on the California resident’s behalf. For more information on submitting a request on behalf of a California resident as an authorized agent, you can contact us using the information provided under CONTACT INFORMATION.

2. DATA RIGHTS FOR NEVADA CONSUMERS

   Residents of the State of Nevada have the right to opt out of the sale of certain types of their information to other companies who will sell or license their information to others. At this time, Cygnus does not engage in such sales as defined by Nevada law. If you are a Nevada resident and would like more information about our data protection practices, please email [email protected].

3. DATA RIGHTS FOR COLORADO, CONNECTICUT, MONTANA, OREGON, TEXAS, UTAH, AND VIRGINIA CONSUMERS

   Various U.S. state privacy laws permit residents of each of Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia to have the following specific rights. For more information, or if you have questions, you can contact us using the information provided under CONTACT INFORMATION. For your protection, Cygnus is required to collect certain information from you to compare to your Cygnus account information, to verify your identity (your name on your Cygnus account, your service address, your email and phone number on your Cygnus account) before we respond to any request submitted by you. The information you provide to verify your identity will only be used for verification purposes, and a record of your request, including certain information contained within it, will be maintained by Cygnus for its files.

   
   

   Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia consumers may invoke the right to confirm whether or not Cygnus is processing the consumer’s personal data and to access such personal data

   If you are a Colorado, Connecticut, Montana, Oregon, Texas, Utah or Virginia resident and would like to confirm whether or not we are processing your personal information, please submit this Request Form Request Form or use the information provided under CONTACT INFORMATION or contact Cygnus toll-free at 866-996-1550.

   
   

   Oregon consumers may request additional information about the third parties to whom we have disclosed personal information.

   If you are an Oregon resident and would like information about the specific third parties (other than natural persons) to whom we disclose personal information, please submit this Request Form or use the information provided under CONTACT INFORMATION, or contact Cygnus toll-free at 866-996-1550.

   
   

   Colorado, Connecticut, Montana, Oregon, Texas, and Virginia consumers may request we correct inaccuracies in the consumer’s personal data, taking into account the nature of the personal data, and the purposes of the processing of the consumer’s personal data

   Due to the nature of our Services model for delivery of our products to your door, it is vital that we maintain accurate information about you. We provide you the ability to correct any inaccurate personal information though your account on yelloh.com. Simply log into your account and select “My Account”. You may update your personal information through this function and your changes will be updated the same day as you make them.

   
   

   Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia consumers may request we delete consumer data provided by the consumer or obtained by Cygnus about the consumer

   If you are a Colorado, Connecticut, Montana, Oregon, Texas, Utah or Virginia resident and would like to request the erasure of your personal information, please submit this Request Form or use the information provided under CONTACT INFORMATION and contact Cygnus toll-free at 866-996-1550.

   
   

   Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia consumers may obtain a copy of the consumer’s personal data that the consumer previously provided to Cygnus, in a portable, and to the extent technically feasible, readily usable format

   If you are a Colorado, Connecticut, Montana, Oregon, Texas, Utah or Virginia resident and would like to request access to the personal information that Cygnus collects, uses and discloses about you, please complete this Request Form or use the information provided under CONTACT INFORMATION or contact Cygnus toll-free at 866-996-1550.

   
   

   Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia consumers may request opt out of the processing of their personal data for purposes of (i) targeted advertising; (ii) the sale of their personal data; and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer

   With regards to the “selling” or use of your online browsing information for targeted advertising, you can opt-out by visiting our Privacy Preference Center Privacy Preference Center and opting-out of non-Strictly Necessary Cookies. Additionally, we recognize the Global Privacy Control (GPC) browser setting that allows individuals to automatically signal their opt-out of the “sale” of their online browsing personal information or disclosure of their online browsing personal information for the purposes of targeted advertising or cross-context behavioral advertising. More information regarding GPC is available here.

   We do not engage in the above described “profiling” activities and therefore do not provide you with opt-out capability.

   
   

   If Cygnus refuses to take action on or rejects a Colorado, Connecticut, Montana, Oregon, Texas, Utah or Virginia resident’s request, you may appeal our decision

   You may resubmit your original request. Within sixty (60) days of receipt of your appeal (or for Colorado, Montana or Oregon consumers, within forty-five (45) days of receipt of your appeal), we will inform you in writing of any action we take or not take in response to your appeal and include a written explanation of the reason(s) for our decision. If your appeal is denied, you may contact the Attorney General for your state of residence to submit a complaint:

   
   
   Colorado: Office of the Attorney General
   Colorado Department of Law
   Ralph L. Carr Judicial Building
   1300 Broadway, 10th Floor
   Denver, CO 80203
   (720) 508-6000
   coag.gov

   Texas: Office of the Attorney General
   PO Box 12548
   Austin, TX 78711-2548
   Privacy Complaint Portal located here.
   
   
   
   Connecticut: Office of the Attorney General
   165 Capitol Avenue
   Hartford, CT 06106
   (860) 808-5318 (phone)
   (860) 808-5387 (fax)
   https://portal.ct.gov/AG/Contact-the
   -Attorney-Generals-Office/Contact
   -the-Attorney-Generals-Office

   Oregon: Office of the Attorney General
   Oregon Department of Justice
   1162 Court St. NE
   Salem, OR 97301-4096
   1-877-877-9392 (phone)
   [email protected](email)
   Consumer Complaint Portal located here.
   
   
   Utah: Department of Commerce, Division of Consumer Protection
   Division of Consumer Protection
   State of Utah Department of Commerce
   PO Box 146704
   Salt Lake City, UT 84114-6704
   (801) 530-6601 (phone)
   (801) 530-6601 (fax)
   https://dcp.utah.gov/ucpa/

   Montana: Office of the Attorney General
   Office of the Attorney General
   Justice Building, Third Floor
   215 North Sanders
   P.O. Box 201401
   Helena, MT 59620-1401
   (406) 444-2026 (phone)
   [email protected](email)
   Consumer Complaint Portal located here.
   
   
   Virginia: Office of Attorney General, Consumer Protection Section
   202 North Ninth Street
   Richmond, VA 23219
   (800) 552-9963 (phone)
   (804) 225-4378 (fax)
   https://www.oag.state.va.us/

LOYALTY PROGRAMS AND FINANCIAL INCENTIVES

Notice of Financial Incentive Programs

Cygnus may offer you certain financial incentive programs connected to the collection of your personal information that can result in different price, rate, or service levels available to you. We offer these financial incentive programs because the benefits you receive through our programs relate to your personal information’s value to us. Participation in a financial incentive program is voluntary and requires your prior opt-in consent. The details and terms of our various programs will be presented to you in the respective documentation when you enroll in these programs. You are only enrolled in these programs with your consent, which you may revoke at any time.

We collect and use the information that we obtain through these programs to further our business in accordance with our Privacy Policy. While we do not assign a monetary value to the data that we collect, based on our current estimate, we believe that the value you receive from our financial incentive programs is reasonably related to the value Cygnus receives from your personal information related to these programs. In determining the value of your information to Cygnus, we consider the value to our business, which is reasonably correlated to the value provided to you through both monetary and nonmonetary rewards.

You can opt-out of participation in any of our financial incentive programs at any time. If you wish to opt-out, please utilize the disengagement or unenrollment mechanisms presented to you for the particular program.

DO NOT TRACK

Do Not Track (“DNT”) is an optional browser setting that allows you to express your preferences regarding tracking across websites. Most modern web browsers give you the option to send a Do Not Track signal to the websites you visit, indicating that you do not wish to be tracked. However, there is no accepted standard for how a website should respond to this signal, so we do not take any action in response to this signal. Cygnus does not have a mechanism in place to respond to DNT signals. Instead, in addition to publicly available third-party tools, we offer you the choices described in this Privacy Policy to manage the collection and use of information about you.

Cygnus does track some activity across websites (including your search terms, the website you visited before you visited or used the Services and other clickstream data) and we may continue to collect information in the manner described in this Privacy Policy from web browsers that have enabled DNT signals or similar mechanisms.

CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be revised from time to time as we add new features and Services, as laws change and as industry privacy and security best practices evolve. We display an effective date on this Privacy Policy at the top of this Privacy Policy so that it will be easier for you to know when there has been a change. If we make any material change to this Privacy Policy regarding use or disclosure of personal information, we will provide notice on our sites. Changes will apply to information collected after the change is effective. Please check this Privacy Policy periodically for changes. Small changes or changes that do not significantly affect individual privacy interests may be made at any time and without prior notice. Your use of the sites constitutes acceptance of the provisions of this Privacy Policy and your continued usage after such changes are posted constitutes acceptance of each revised Privacy Policy. If you do not agree to the terms of this Privacy Policy or any revised Privacy Policy, please exit the sites immediately. If you have any questions about this Privacy Policy, the practices of the sites or your dealings with the sites, you can contact us by using the information provided under CONTACT INFORMATION.

CONTACT INFORMATION

Please contact Cygnus with any questions or concerns regarding this Privacy Policy through written communication at: