ONLINE ORDERING Privacy Policy Last Updated: May 1, 2021 This Privacy Policy (this “Policy”) describes how Coast Produce Company (hereinafter “we,” “our,” or “us”) collects, uses, processes, and shares the information we collect when you use coastproduce.com (“Website”) and any mobile application (“Mobile Application”) associated with the Website. By using the Website or the Mobile Application, you are consenting to the terms of this Policy. If you do not wish to accept the terms of this Policy, you should not use the Website and the Mobile Application. What Type of Information Do We Collect? We collect information you provide directly to us via the Website or the Mobile Application, such as when you register, create an account profile, shop our online store, communicate with us, or request customer support. Additionally, we or our third-party service providers may automatically collect certain information about your use of the Website or the Mobile Application, including the type of browser you use, access times, pages viewed, user preferences, your IP address, and your browsing and purchasing behavior. Such information is collected using a number of different technologies, including cookies, web beacons, and embedded scripts. Cookies are data files that are placed on a computer or other device when it is used to visit a website. Most web browsers are set to accept cookies by default. If you prefer, you may be able to set your browser to remove or reject cookies but doing so may not affect third party flash cookies used in connection with the Website or Mobile Application. Choosing to remove or reject cookies could affect the availability and functionality of the Website or Mobile Application. Web beacons are graphic images embedded in the Website or the Mobile Application that surveys your web activity on the Website or the Mobile Application. An embedded script is a programming code that is designed to collect information about your interactions with the Website or Mobile Application. It is temporarily downloaded onto your computer or other device from our web server or a third party with whom we work, is active only while you are connected to the Website or Mobile Application, and is deleted or deactivated thereafter. How Do We Use Your Information? We may use your information for various purposes, including to: Provide customer service; Process your registration with the Website or Mobile Application; Process or fulfill orders and transactions; Verify customer information; Marketing; Monitor and analyze trends, usage and activities; Product/service improvement and development; Facilitate or personalize your online experience; Internal research and development; Detect security incidents; Protect against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; Auditing related to a current interaction with a customer and concurrent transactions; Debugging to identify and repair errors that impair existing intended functionality; Administration of claims and handling of customer incidents; Comply with applicable laws, regulations, and orders; and Carry out any other purpose to the extent not prohibited by applicable law and not in violation of this Policy. How Do We Share Your Information? Our agents, vendors, consultants and other service providers (“service providers”) may have access to, or receive from us, your information to carry out work on our behalf. However, we do not authorize our service providers to use your information for any purpose other than to provide this assistance. In addition, we may share your information as follows: To the maximum extent permitted by applicable law, in response to (i) subpoenas or other legal process or if in our good faith opinion such disclosure is required or permitted by law; or (ii) at the request of governmental authorities conducting an investigation; Pursue or defend against legal actions or claims; To protect the rights, property, life, health, security and safety of us or any third party; With our affiliates for their business purposes; In connection with, or during negotiations of, any proposed or actual merger, purchase, sale (including a liquidation, realization, foreclosure or repossession), lease, consolidation or any other type of acquisition of all or any portion of our assets, financing, disposal, conveyance or transfer of all or a portion of our business to another company; and For other purposes to the extent not prohibited by applicable law and not in violation of this Policy. In our sole discretion, we may also share aggregated and other non-personal information as permitted by applicable law. We may share your personal information on your behalf or at your request. We will only do so with your specific consent. If you provide your consent to share your information, you may withdraw your consent at any time. Withdrawing your consent will not undo or reverse the lawfulness of any previous processing, and in some cases personal information may not be retrieved once shared. Contact us (as provided in Section 10 (Questions & Contact Information ) below, if you would like to withdraw your consent. Notice to Individuals in California California customers, please see the “Additional Disclosures for California Customers” below for more information about how we collect, use, and share your personal information and the rights you have with respect to your personal information. Third Party Websites. The Website or the Mobile Application may contain hyperlinks to other websites or locations, or third party applications and content made available on or via the Website or Mobile Application, that are operated by third parties (“Third Party Service(s)”). We make no representations and accept no responsibility or liability regarding the policies or business practices of such Third Party Services and encourage you to familiarize yourself with their privacy policies before accessing them or otherwise providing them with your personal information. In some cases we and Third Party Services may each post terms and policies on a Third Party Service, in which case our terms and policies govern us and the Third Party Service operator’s terms and policies govern them. What Security Measures Are Used to Protect Your Personal Information? To protect your personal information, we take reasonable precautions and follow industry standard practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. However, no data transmission over the internet can be guaranteed to be 100% secure. While we strive to protect your personal information, we cannot guarantee or warrant the security of any information collected through the Website or Mobile Application. What Are Our Policies Regarding Children’s Privacy? The Website and Mobile Application are not directed to children under 13 years of age, nor do we knowingly collect information from children under the age of 13. What Is Our Retention Policy? We generally retain your personal information as long as necessary to fulfill the purposes of collection or to comply with applicable law, regulations, and orders. Otherwise, we will delete your personal information upon your request. We will not delete any personal information that also relates to other individuals, unless such other individuals also wish to delete their personal information at the same time. Changes to this Policy This Policy will change as our business and applicable law changes. We reserve the right to modify this Policy at any time, which modifications will take effect immediately upon their posting. We will post the date this Policy was last updated at the top of this Policy. You should review any updates to this Policy before purchasing our products in the future. We will notify you of any material changes to this Policy if such changes are less protective of your personal information than under the immediately preceding version of this Policy. If you use the Website or the Mobile Application after our Policy is updated, you affirm your consent to the updated Policy. To the extent any provision of this Policy is found by a competent tribunal to be invalid or unenforceable, such provision shall be severed to the extent necessary for the remainder to be valid and enforceable. Questions & Contact Information If you have any questions, would like to request more information regarding your personal information, or have any other request, please contact us at order-support@coastproduce.com or by mail at 1791 Bay St., Los Angeles, Ca, 90021. ADDITIONAL DISCLOSURES FOR CALIFORNIA CUSTOMERS Last Updated: May 1, 2021 These “Additional Disclosures for California Customers” apply only to customers who are residents of the State of California. A. Categories of Personal Information Collected You will find below the categories of personal information that may be collected in connection with your use of the Website or the Mobile Application (including personal information collected during the preceding 12 months), and the business and commercial purposes for which the personal information may be used, and the categories of third parties to whom the personal information is disclosed for a business purpose or commercial purpose. (1) Identifiers – including account number, cookies, beacons, or similar technologies, internet protocol address, and email address. Categories of Sources:Directly from customers and from affiliates. Purposes for Collection: Providing customer service; processing or fulfilling orders and transactions; verifying customer information; marketing; data analytics; product/service improvement and development; internal research and development; detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; auditing related to a current interaction with a customer and concurrent transactions; debugging to identify and repair errors that impair existing intended functionality; and administration of claims and handling of customer incidents. Categories of Third Parties: Service providers, affiliates, law enforcement, and insurers. (2) Commercial Information –including records of products or services purchased or other purchasing or consuming histories or tendencies. Categories of Sources: Directly from customers and from affiliates. Purposes for Collection: Providing customer service; processing or fulfilling orders and transactions; marketing; data analytics; product/service improvement and development; internal research and development; detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; and administration of claims and handling of customer incidents Categories of Third Parties: Service providers, affiliates, and law enforcement (3) Internet or Other Electronic Network Activity Information– including browsing history, search history, information regarding a customer’s interaction with an website, application, or advertisement. Categories of Sources: Directly from customers. Purposes for Collection: Providing customer service; marketing; data analytics; product/service improvement and development; internal research and development; detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; auditing related to a current interaction with a customer and concurrent transactions; and debugging to identify and repair errors that impair existing intended functionality. Categories of Third Parties:Service providers and affiliates. (4) Other –Any other information a customer has provided to us in connection with a customer service request or issue, a claim or incident, or otherwise. Categories of Sources:Directly from customers Purposes for Collection: Providing customer service; administration of claims and handling of customer incidents; and any other purpose relevant to the reason that the information was provided. Categories of Third Parties: Service providers, insurers, and any other third party relevant to the reason that the information was provided. We also may use and disclose any of the personal information we collect: as necessary to comply with legal obligations; in response to subpoenas or other legal process or, if in our good faith opinion, such disclosure is required by law; at the request of governmental authorities conducting an investigation; to pursue or defend against legal actions or claims; to protect the rights, property, life, health, security, and/or safety of us or any third party; and in connection with, or during negotiations of, any proposed or actual merger, purchase, sale (including a liquidation, realization, foreclosure or repossession), lease, amalgamation or any other type of acquisition of all or any portion of our assets, financing, disposal, conveyance or transfer of all or a portion of our business to another company. B. Your Rights With Respect to Your Personal Information (1) Access/Deletion Under applicable California law, California customers have the right to request that we disclose what personal information about them that we collect, use, and disclose, including the specific pieces of the personal information about them that we have collected (referred to as an “access request” or a “request to know”); and that we delete the personal information about them collected or maintained by us (referred to as a “deletion request”). California customers may submit an access or deletion request (each, a “California Consumer Rights Request”) by contacting us as provided in Section 10 (Questions & Contact Information) above. California customers may designate an authorized agent to submit a California Consumer Rights Request on their behalf. To do so, please have the agent submit a request on your behalf by contacting us as provided in Section 10 (Questions & Contact Information) above. When submitting a request, the agent will need to provide your account number and provide the agent’s name and email address, a statement indicating that they are acting as an authorized agent to submit a request on your behalf, and, if applicable, a statement indicating that you have provided them with a power of attorney that is valid under California law. After the agent has submitted the request, you will receive an email asking you to verify your identity and your appointment of the agent. We may request additional information to validate your identity or the identity of any agent that you appoint. Once we receive a deletion request, we will delete the personal information (to the extent required by applicable law) we hold about you as of the date of your request from our records and request our service providers to do the same. In some cases, deletion may be accomplished through de-identification of the information. Your exercise of any of the foregoing rights is subject to limitations due to, among other things, requirements of applicable laws, regulations, and orders. (2) Non-Discrimination You have a right to not receive discriminatory treatment by us for the exercise of the privacy rights conferred by California law. However, if you choose to delete your personal information, you may not be able to purchase our products or access certain services. Unless the personal information is absolutely required for us to provide you certain goods or services or a certain level of goods or services or the lack of certain personal information would cause us to incur additional costs, this generally means we will not deny you goods or services, charge different prices or rates, provide a different level of service or quality of goods, or suggest that you might receive a different price or level of quality for goods. (5) Opt Out of Certain Data Sharing We may from time to time elect to share certain information about you collected by us on the Website or the Mobile Application with third parties or affiliates for those third parties’ or affiliates’ own commercial purposes. Under California law, California customers may request certain details about how their information is shared with third parties and, in some cases, affiliates, for those third parties’ and affiliates’ own commercial purposes. California law also permits California customers to opt in to, or opt out of, this type of sharing. If you are a California resident, you may opt out of such future sharing of your personal information (as defined by the California Shine the Light Act) and/or request information about our compliance with this law by contacting us as provided in Section 10 (Questions & Contact Information) above. Any such request must include “California Privacy Rights Request” in the first line of the request and include your name, street address, city, state, and ZIP code. We do not sell your personal information for monetary consideration. However, under some circumstances a transfer of personal information to a third party without monetary consideration may still be considered a “sale” under California law or other applicable law. All categories of personal information may be transferred to third parties. If you submit a request to stop the “sale” of your personal information, we will stop making such transfers to the extent required by applicable law. CONTACT US ABOUT US PRIVACY POLICY 1791 Bay Street Los Angeles, CA p: 213.955.4900__ ©2020 Coast Produce Company. All Rights Reserved.