BEYOND LIGHT CREATIONS PRIVACY POLICY

(e) How to Control the Use of Cookies

Electronic devices and software applications on these devices may offer you tools to opt out of or block advertisements on the device or in specific applications. Consult the help documentation and settings specific to your devices and applications to learn more about your options. You have the right to decide whether to accept or reject cookies. You can withdraw your consent at any time for any cookies or other tracking technologies used by us by deleting them from your device. Should you choose to remove or block cookies, some functionality of the Services may become unavailable or unreliable.

In addition, most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit http://www.aboutads.info/choices/ or http://www.youronlinechoices.com.

(f) Other Tracking Technologies

Other than the cookies listed above, we have also implemented the following tracking technologies within certain parts of the Services.

• Page Tags/Web Beacons are used for the purposes of tracking users as they navigate the Services to better understand performance of the Services, and to measure the performance of online advertising. For example, web beacons track whether an email sent through the Services was delivered and opened and whether links within the email were clicked. This information is collected for the purposes of providing email campaign performance information and measuring the performance of email messages they send and is processed according to this Privacy Policy; and
• Local and Session Storage to temporarily store information to improve user experience while interacting with the website.

(g) Cookies and CCPA

Information collected and stored by cookies and other tracking technologies will often meet the definition of personal information in the California Consumer Privacy Protection Act (“CCPA”). The CCPA defines “personal information” as “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.” Personal information collected by the cookies and related technologies described may include information about your browsing behavior on the Services or other websites, and information you provide via forms or single fields on the Services. This personal information will be used only as described by this Cookie Notice and Privacy Policy. See Section 9 , California Privacy Notice , for information pertaining to California residents.

Section 7. Advertising and Analytics Technologies

(a) Third-Party Data Collection

The Services may include links to other websites or services, such as to purchase online subscriptions or a (virtual or consumer) good or service. Personal information collected on other sites and services is subject to the privacy policy and practices of the third party providing such website or service and not this Privacy Policy.

With respect to the Services or portions of the Services we may give you the option to share with others on social media platforms, such as Instagram, Facebook or Twitter (“Social Media Links”). When you share using Social Media Links, the privacy practices of the social media platform control who has access to your information and how it is treated by the social media platform. We ask that you consult the privacy policies of any social media services (or other third party) with which you share information in this manner to learn about the social media platform’s data practices.

(h) Data Storage

We store the personal information we collect for as long as is necessary for the purpose(s) for which we originally collected it. We may also retain personal information as required by law.

(i) Analytics Technologies

We may use Google Analytics, ConvertKit, or other similar technologies (the “Analytics Technologies”) to collect and process certain information about you and your use of the Services. The information collected by the Analytics Technologies is statistical data and does not include PII, and we do not maintain it or associate it with PII we collect in other ways or receive from third parties.

Our web server and/or the Analytics Technologies may collect and store the following general information about you:

• the originating name of the domain from which you access the internet;
• the date and time you access the Services;
• the pages of the Services you visit;
• the internet address of the website from which you linked directly to us; and
• the type of device, device ID and web browser you use to access the Services.

This information is collected automatically. It is used to help us improve the Services by tabulating the number of visitors to the Services in terms of new users, origin of referrers, popularity of pages, amount of use, types of errors, and to make the Services more useful to you.

Our web server and/or the Analytics Technologies may also collect internet protocol addresses (the internet address of a device) to track a user’s session while the user remains anonymous. We analyze this data for certain trends in statistics, such as which parts of the Services users are visiting and how long they spend there.

(j) Google Analytics.

You may learn more about how Google uses the information it collects by visiting the following site: “How Google Uses Information From Sites or Apps That Use Our Services” (located at https:// https://policies.google.com/technologies/partner-sites/). Google’s ability to use and share information collected by Google Analytics about your visits to the Services is restricted by the Google privacy policy (located at https://www.google.com/policies/privacy/).

(k) ConvertKit.

ConvertKit’s ability to use and share information collected by ConvertKit about your visits to the Services is restricted by the ConvertKit privacy policy (located at https://convertkit.com/privacy/).

(l) Facebook.

You can learn more about Facebook’s interest-based advertising by visiting the “How Ads Work on Facebook” page (located at https://www.facebook.com/help/516147308587266/).

To opt-out from Facebook’s interest-based ads, follow its instructions on the page “How can I adjust how ads on Facebook are shown to me based on data about my activity from partners?” (located at https://www.facebook.com/help/568137493302217/).

Facebook adheres to the Self-Regulatory Principles for Online Behavioral Advertising established by the Digital Advertising Alliance. You can also opt-out from Facebook and other participating companies through the Digital Advertising Alliance in the USA (located at http://www.aboutads.info/choices/), the Digital Advertising Alliance of Canada in Canada (located at http://youradchoices.ca/) or the European Interactive Digital Advertising Alliance in Europe (located at http://www.youronlinechoices.eu/), or opt-out using your mobile device settings.

For more information on the privacy practices of Facebook, please visit Facebook’s Data Policy (located at https://www.facebook.com/privacy/explanation) or Facebook privacy policy (located at https://www.facebook.com/about/privacy/).

Section 8. Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the PII you provide to us. We have created mechanisms to provide you with the following control over your information:

(a) Marketing Communications

Our marketing emails tell you how to “opt out.” You may choose to opt out of receiving promotional communications from us by following the instructions in those messages. Please note, that even if you do opt out, we may still send you non-promotional communications, such as emails or text messages about your account or orders from us. We do not knowingly send marketing communications to children.

(m) By Request

You may send requests about personal information to the email in Section 13, Contact Information . You
can request to change contact choices, opt out of our sharing with others, and update your personal
information.

(n) Cookies & Other Tracking Technologies

You can typically (i) remove and reject cookies from the Services with your browser settings, (ii) set your
browser to refuse all or some browser cookies, or (iii) alert you when cookies are being sent. Many
browsers are set to accept cookies until you change your settings. If you disable, remove, or reject
cookies, it could affect how the Services works for you and some parts of the Services may be
inaccessible or not function properly. See Section 6 , Cookie Notice , for more information about cookies.

(o) Google Analytics Opt-out Option

If you do not want your information collected with Google Analytics, you can install the Google Analytics opt-out browser add-on. To opt out of Google Analytics, visit the Google Analytics opt-out page (located at https://tools.google.com/dlpage/gaoptout) and install the add-on for your browser. For more details, visit the “Google Analytics opt-out browser add-on” page (located at https://support.google.com/analytics/answer/181881?hl=en).

(p) Residents of California and Nevada

California residents may have additional personal information rights and choices. Please see Section 9, California Privacy Notice , for more information.

Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request by emailing us at optoutnv@beyondlightcreations.com with the subject line “Nevada Removal Request.” However, please know we do not currently sell data triggering that statute’s opt-out requirements.

Section 9. California Privacy Notice

If you are a California resident, you may have certain rights. For example, California law may permit you to request that we:

• provide you with the categories of (1) PII we have collected or disclosed about you in the last twelve months; (2) sources of such information; (3) third parties with whom we shared PII;
• provide you with the business or commercial purpose for collecting or selling your PII;
• provide access to and/or a copy of certain information we hold about you; and
• delete certain information we have about you.

You also have the right to receive information about the financial incentives that we offer (if any) and the right to not be discriminated against for exercising your rights. Certain information may be exempt from such requests under applicable law. For example, we need certain types of information so that we can provide the Services to you. If you ask us to delete it, you may no longer be able to access or use the Services.

Please review these additional privacy disclosures, which provide a summary of how we collect, use, and
disclose personal information from you, and explain your rights under California law.

(a) Categories of Information We Collect, Use, and Disclose for Business Purposes

We collect personal information as described in Section 2, Personal Information That We Collect. We collect this information from you, your child, third parties, or as otherwise described in this policy. We use these categories as described in Section 3, How We Use Personal Information , and disclose these categories of personal information for business purposes as described above and in Section 4, Sharing of Personal Information. In addition, we and our service providers may collect the below categories of information for the following business or commercial purposes (as those terms are defined in applicable law):

• operational purposes of us or our service providers;
• auditing your interactions on the Services, such as measuring analytics like frequency of use of links;
• detecting and protecting against, and prosecuting security incidents and fraudulent or illegal activity;
• bug detection and error reporting;
• short-term (or transient) use, such as customizing content that we or our service providers display on the Services (such as contextual ads);
• providing the Services including account servicing and maintenance, order processing and fulfillment, customer service, advertising and marketing, analytics, and communication about the Services;
• improving existing and developing new services (for example, by conducting internal research to develop new products or features);
• verifying or maintaining the quality or safety of, or upgrading or enhancing the Services;
• other uses that advance our commercial or economic interests, such as third-party advertising and communicating with you about relevant offers from third-party partners; and
• other uses about which we notify you.

(q) California Residents’ Rights

Under the California Consumer Privacy Protection Act, California residents have the right to request access to or deletion of their personal information, to request additional details about our information practices, and to not be discriminated against for exercising their rights.

You may exercise your right to access, edit or delete information we have collected about you by emailing us at optoutca@beyondlightcreations.com with the subject line “California Removal Request.” If you need further assistance regarding your rights, please contact us at privacy@beyondlightcreations.com, and we will consider your request in accordance with applicable laws. Note that even if we honor your request to delete your information, we may retain certain information as required or permitted by law.

The CCPA sets forth certain obligations for businesses that “sell” PII. Based on the definition of “sell” under the CCPA and under current regulatory guidance, we do not believe we engage in such activity. We do share certain information as stated in this Privacy Policy and allow third parties to collect certain information about your activity, for example through cookies, as explained in Section 6, Cookie Notice. We do not direct any of the Services or portion of the Services to children or where we know that the user is a child under 16 years of age. For the portions of the Services that are directed to audiences older than 16, we do not sell identifying information such as name or email address but we may share identifiers with our Affiliates and Subsidiaries for the purposes described in Section 3, How We Use Personal Information.

California residents who are under 18 years of age may request and obtain removal of any postings on the Services that they themselves post by emailing us at privacy@beyondlightcreations.com. Please also note that any requests for removal do not ensure complete or comprehensive removal of the content or information from the Services for example, content that you have posted that may be republished or reposted by another user or third party.

(r) Exercising Your Rights

If would like to exercise any of your California Contact rights, please submit a request to CCPA@beyondlightcreations.com. You will be required to verify your identity before we fulfill your request. To do so, you will need to provide us with certain account information, such as the full name and email address you used to create your account and your most recent activity with us. You can also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization for the agent to act on your behalf, however, you will still need to verify your identity directly with us.

(s) California Online Privacy Protection Act

Because we value your privacy we have taken the necessary precautions to be in compliance with the
California Online Privacy Protection Act (“CalOPPA”) and thus will not distribute your personal
information to outside parties without your consent or as specifically described above. We also agree that:

• users can visit our publicly available website anonymously;
• we will minimally notify users of any changes to this policy as noted in Section 1, Changes to This Privacy Policy;
• users will be able to change their personal information by emailing us at the email in Section 13;
• we do not honor do not track signals because the functionality of our website requires use of cookies as noted in Section 2, Personal Information That We Collect; and
• we allow third-party behavioral tracking through the use of Analytics Technologies as noted in Section 7, Advertising and Analytics Technologies.

(t) California Shine the Light.

We do not sell or disclose personal information with third parties for their direct marketing purposes.

Section 10. Protecting Children

THIS SITE IS NOT INTENDED FOR CHILDREN UNDER 18 YEARS OF AGE.

The Services are not directed to children and BLC does not knowingly collect PII from children. If you are under 18, do not use or provide any information on the Services or provide any information about yourself to us, including your name, email address, or date or place of birth as required for registration. If we learn we have collected or received PII from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at the email in “Contact Information” below.

(a) Children’s Privacy

We recognize the need to provide further privacy protections when it comes to children. The Services are intended for use by persons aged 18 and older. For the Services for which you submit personal information, we will collect, use, and disclose personal information as described in this Privacy Policy, with certain differences and specific practices as described below.

(u) Parental Control

At any time, you may review your child’s personal information maintained by us, require us to correct or delete the personal information, and/or refuse to permit us from further collecting or using the child’s information. You can also review, change, or delete your child’s personal information by either (i) logging into your child’s account and visiting his or her account profile page; or (ii) contacting us at privacy@beyondlightcreations.com. To protect your privacy and security, we may require you to take certain steps or provide additional information to verify your identity before we provide any information or make corrections. Please see the other sections of this Privacy Policy for information on the information we collect and how we use and share it.

Section 11. Access and Update Your Information

Depending on the jurisdiction in which you reside, you may have the rights to access, correct, update, port, delete, restrict, or object to our processing of your PII; the right to complain to a data protection authority about the collection and use of PII; and the right to withdraw your consent to our use of PII. You can manage your individual account and profile settings within the dashboard provided through the Services to assist you with responding to requests to access, correct, update, port or delete information that you receive from your Contacts. You can also contact us at any time to update your own marketing preferences.

Upon your request, we will provide to you the PII under our control, if any, as well as information about the ways in which that information is being used and disclosed. We use reasonable efforts to ensure that PII we may be using or disclosing is accurate and complete. If you demonstrate that your information is inaccurate or incomplete, the information will be amended as appropriate. We will use commercially reasonable efforts to respond to any request and update your PII, if necessary. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

If your PII is collected or processed on the basis of your consent, you, as a data subject, can withdraw your consent at any time. Withdrawing your consent, however, will not affect the lawfulness of any processing we conducted prior to your withdrawal nor will it affect the processing of your PII conducted in reliance on lawful processing grounds other than consent.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We may ask you to verify your identity in order to help us respond efficiently to your request.

We take reasonable steps to ensure that the data we collect is reliable for its intended use, accurate, complete and up-to-date.

Section 12. Governing Law

This Privacy Policy and any disputes related thereto shall be governed by and construed in accordance with the laws of the State of Tennessee, exclusive of its choice of law rules, whose courts shall have exclusive jurisdiction over all disputes arising in connection with this Privacy Policy and the place of performance of this Privacy Policy is agreed by you to be the State of Tennessee.

Section 13. Contact Information

If you have any questions about our information handling practices, including our practices with respect to your personal information with respect to the Services, please contact us at privacy@beyondlightcreations.com.

— End of Privacy Policy —