STORY STRATEGY BRANDS LEGAL INVESTOR RELATIONS CAREERS CONTACT PRIVACY POLICY AMERICAN OUTDOOR BRANDS, INC. WEBSITE PRIVACY NOTICE AND POLICY EFFECTIVE: May 13, 2020 This Privacy Notice and Policy ("this Policy") describes how AMERICAN OUTDOOR BRANDS, INC. and its subsidiaries and corporate affiliates, ("we", "us", “our”, or "AMERICAN OUTDOOR BRANDS, INC.") collect and use personal information when you use, access, or respond to our websites as well as any online applications; mobile applications; e-mail; telephone inquiries; sweepstakes, contest and rebate submissions; product and warranty registrations; newsletters; forums; posts; comments; surveys; and the like; and the websites and applications maintained and operated by our third-party contractors (collectively, the “Services”); or when you visit our facilities and properties. INFORMATION WE COLLECT Through your use of our Services or access to our facilities or properties we collect personal information, which is information that identifies you as an individual, relates to you as an identifiable individual, or that, along with other information, could identify you. We collect the following types of personal information: INFORMATION YOU PROVIDE TO US We collect personal information from you when you use our Services. We do not require you to provide any personal information in order to navigate our websites. We collect information from you when (1) you provide it voluntarily to us in response to a request for such information, and (2) automatically by means which are part of the applications needed to provide the Services to you. For example, we may request your personal information, such as: your name, age (birthdate), gender, company name, mailing and billing addresses, e-mail addresses, phone numbers, zip codes and credit card information. We may also collect other information that you submit in connection with our Services, including product reviews, sweepstakes or contest entries, consumer rebate submissions, product or warranty registration, and other similar information. Information obtained automatically through application usage consists primarily of anonymous usage statistics, but also includes first- and third-party cookies. For proper functionality of the Services, a minimum of anonymous usage data and first-party cookies are required to be collected. We collect personal information from you when you access our facilities or properties. We require visitors to our facilities and properties to provide a valid, government-issued photo identification document. Such documents will include your likeness (photograph), and may also include your name, age (birthdate), gender, mailing address, business address, employer, identification number (such as license or passport number), biographical information (such as height, weight, eye color, hair color, fingerprints, etc.), and signature. We also require visitors to read and sign a Visitor Certification. INFORMATION WE GET FROM THIRD PARTIE We use third-party contractors (which includes, for example, service providers, licensees, and industry partners) to help us provide our Services. As part of these activities we obtain information collected by our third-party contractors such as: website or application visitor activity, eCommerce conversions, sweepstakes or contest participation, campaign tracking, consumer rebate submissions, product or warranty registration, and other similar information. We may provide links to social media platforms such as Facebook and Instagram. These third-party applications may collect information about your IP address, and they may set cookies for the purposes these third-party contractors have described in their privacy policies. Your interaction with those applications is governed by the privacy policies of the companies that provide them, and not by this Policy. INFORMATION COLLECTED AUTOMATICALLY We may, directly or indirectly (through a third party), collect information about you and your use of our Services whenever you use the Services. For example, we may collect information about your IP address, your user behavior (e.g., click activity), Services traffic statistics, operating system, and browser type. This data generally does not personally identify you and is automatically collected (as third-party cookies) when you use our Services. COOKIES AND OTHER TRACKING TECHNOLOGIES “Cookies” are small pieces of information that are stored by your web browser software on your computer’s hard drive or temporarily in your computer’s memory. We or our third-party providers place and store Internet cookies on your hard drive. Cookies can save any of the types of information noted above. Cookies enable us to personalize your viewing experience. When you revisit our website, we can recognize you by the cookie and customize your experience at this website accordingly. We, and our third-party contractors, may use technology such as cookies and web beacons/pixel tags to provide: eCommerce services within the application, advertising conversion analysis, marketing campaign analysis, user behavior and application usage analysis, user registration and authentication, and to provide a customized, more relevant user experience. HOW WE USE YOUR INFORMATION We use your personal information to provide the Services to you (including the marketing of our Services and products), to improve our Services and products, and to protect our legal rights. We limit the collection of personal information to that which is relevant for these purposes. For visitors to our facilities and properties, we use your personal information in accordance with our security procedures and facility access agreements, and to comply with applicable laws and regulations. We will not store, access, transmit, retain or otherwise use personal information in any way that is incompatible with the purposes for which it has been collected or stored as described in this Policy without your consent. We process your information for the following purposes as necessary to: provide the Services to you; to perform our contract with you; as part of our legitimate interest in the improvement and marketing of our Services and products, and in the security of our Services and facilities/properties. We apply appropriate safeguards to protect your information including as described here SECURITY, here CHOICES ABOUT YOUR INFORMATION and here RIGHTS OF RESIDENTS IN THE EU: Facilitate your orders. Communicate with you: to communicate with you about our Services (including the notifications that are part of our Services); to send you account updates or other communications regarding your account or to inform you of any changes to our Services; to send you notifications or communications about new features or information available regarding our Services or products, or that we feel might be of interest to you, such as news, legislative alerts, marketing and promotional materials or offers (including, for example, promotional materials and offers from industry partners, our third-party contractors, or programs or offers where we are a co-sponsor), surveys, and the like. You can opt-out by following the opt-out instructions provided in our communications to you. Provide Customer Support: to provide you support or other services you request. For example, we may need your information in order to provide technical support or answer questions about our Services and products. Provide Customer Support: to provide you support or other services you request. For example, we may need your information in order to provide technical support or answer questions about our Services and products. To maintain and improve our Services: We analyze how our users interact with our Services in order to maintain and improve our Services. We also use information that we collect to diagnose any problems with our Services. Benchmarking: We aggregate your information in order to gain insights into our Services. In our processing of your information, we also share your personal information to defend our rights and the rights of others, to efficiently maintain our business, and to comply with the law as described in this Policy. HOW WE SHARE INFORMATION We may share your information for a variety of purposes, including: with our third-party contractors; among our subsidiaries and corporate affiliates; in connection with a corporate restructuring; to prevent harm; to comply with the law; and to protect our legal rights. The legal basis for this is our legitimate interest in providing our Services, complying with the law, and protecting our rights and those of others. We apply appropriate safeguards for this sharing of your information including as described below and in SECURITY, CHOICES ABOUT YOUR INFORMATION, and RIGHTS OF RESIDENTS IN THE EU. Third-Party Contractors: We share information with third-party contractors that help us perform functions related to our Services and process your transactions, including, but not limited to conducting product reviews or surveys, administering sweepstakes or contests, processing consumer rebate submissions, processing product or warranty registrations, placing orders, delivering packages, analyzing and maintaining data, and other similar functions. These third-party contractors will only use your personal information for the purposes required to perform their functions. Marketing: We may share your anonymous marketing information with Internet search engines (e.g., Google Analytics) and social media platforms (e.g., Facebook and Instagram) for re-marketing purposes. Corporate Structure: We would share information if we are involved or intend to be involved in a merger, acquisition, consolidation, change of control, or sale of all or a portion of our assets or in connection with bankruptcy or liquidation proceedings. To Prevent Harm: We may share information if we believe it is necessary in order to detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person. To Protect Our Rights and As Required by Law: We will share information where we are legally required to do so, such as in response to court orders or legal process, to exercise our legal rights, to defend against legal claims or demands, or to comply with the requirements of any mandatory applicable law. We will also share information as necessary to enforce the Terms and any other terms that you have agreed to, including to protect the rights, property, or safety of AMERICAN OUTDOOR BRANDS, INC., its users, or any other person, or the copyright-protected content of the Services. Ensure authorized visitors to our facilities and properties are properly screened in accordance with our security procedures, facilities access agreements, and applicable law. With your consent: We will request your permission to use or share your personal information for a specific purpose that is not compatible with the purposes listed here. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. SECURITY The security of your personal information is important to us. We maintain reasonable physical, technical, and administrative security measures to protect and limit access to your personal information. No method of transmission over the Internet or electronic storage technology is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. CHOICES ABOUT YOUR INFORMATION Access, correct or delete your information: You may use your account to access or correct the information you provided to us and which is associated with your account by contacting us by mail at AMERICAN OUTDOOR BRANDS, INC. Legal Dept., 1800 N Route Z, Columbia, MO 65202, U.S.A., or by emailing us at dataprivacy@aob.com. Please include your name, mailing address and e-mail address when you contact us. You must describe the information that you want to access, remove, correct, or modify in sufficient detail to allow us to locate that information in our records. We may require you to verify your identity before allowing you to access, remove, correct, or modify your Personally Identifiable Information. Please note that a request to remove or modify information may prevent us from providing certain products or services to you. We will not remove or modify information associated with your prior purchase or registration of a product. Even if you terminate your account, keep in mind that deletion of your personal information by our third-party contractors may not be immediate and that deleted personal information may persist in backup copies for a reasonable period of time and as required by applicable laws and regulations. See: HOW LONG DO WE KEEP YOUR INFORMATION. In the event that we refuse a request under rights of access, we will provide the individual with a reason as to why. Individuals residing in the EU also have the rights described in RIGHTS OF RESIDENTS IN THE EU. Do Not Track: We take no action in response to “Do Not Track” requests received from user’s web browsing software. Advertising cookies: To opt out of interest based advertising or to learn more about the use of this information by our third-party contractors you can visit the Network Advertising Initiative website (http://www.networkadvertising.org/managing/opt_out.asp) or the Digital Advertising Alliance website (http://www.aboutads.info/choices/), or if you are in the EU, the EDAA (http://www.youronlinechoices.eu/). If you choose to opt out, we will place an “opt-out cookie” on your computer. The “opt-out cookie” is browser specific and device specific and only lasts until cookies are cleared from your browser or device. The opt-out cookie will not work for some cookies that are important to how our websites and mobile apps work (“essential cookies”). If the cookie is removed or deleted, if you upgrade your browser or if you visit us from a different computer, you will need to return to the applicable website to re-select your preferences. Cookies: If you would like to opt out of accepting cookies altogether, you can generally set your browser to not accept cookies or to notify you when you are sent a cookie, giving you the chance to decide whether or not to accept it. Please note that certain functions of our websites may not function properly if your web browser does not accept cookies. If you choose to opt out, we will place an “opt-out cookie” on your computer. The “opt-out cookie” is browser specific and device specific and only lasts until cookies are cleared from your browser or device. The opt-out cookie will not work for some cookies that are important to how our websites and mobile apps work (“essential cookies”). If the cookie is removed or deleted, if you upgrade your browser or if you visit us from a different computer, you will need to return and update your preferences. Marketing: If you do not want us to share your information for marketing purposes, or want additional information about our disclosures of certain categories of your information to third parties for marketing purposes, requests may be submitted by mail at AMERICAN OUTDOOR BRANDS, INC. Legal Dept., 1800 N Route Z, Columbia, MO 65202, U.S.A., or by email at dataprivacy@aob.com. Within thirty (30) days of receiving such a request, your name will be removed off of our marketing list and/or we will provide a list of the categories of Personally Identifiable Information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made by a User no more than once per calendar year. RIGHTS OF RESIDENTS OF THE EUROPEAN UNION (EU) If EU data protection laws apply to the processing of your data, we will be the data controller and you would be entitled by law to access, correct, amend, or delete personal information about you that we hold. A list of these rights is below. Please note that these rights are not absolute and certain exemptions apply. To exercise these rights please contact us by mail at AMERICAN OUTDOOR BRANDS, INC. Legal Dept., 1800 N Route Z, Columbia, MO 65202, U.S.A., or by email at dataprivacy@aob.com. For your protection, we may need to verify your identity before responding to your request, such as verifying that the email address from which you send the request matches your email address that we have on file. In the event that we refuse a request under rights of access, we will provide you a reason as to why. The right to access: You have the right to ask us for copies of your personal information. This right has some exemptions, which means you may not always receive all the information we process. When making a request, please provide an accurate description of the data you want access to. The right to rectification: You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. The right to erasure: You have the right to ask us to erase your personal information in certain circumstances, including (i) when your personal information is no longer necessary for the purposes for which it was collected or processed or (ii) your information must be erased to comply with a legal obligation in EU Union or Member State law. The right to restrict processing: You have the right to ask us to restrict the processing of your information in certain circumstances, including (i) when the accuracy of the information is brought into question or (ii) when we no longer need the information for purposes of the processing but you require such information for the establishment, exercise, or defense of a legal claim. See CHOICES ABOUT YOUR INFORMATION for some ways you can restrict processing. The right to object to processing: You have the right to object to processing if we are able to process your information because the process is in our legitimate interests. See CHOICES ABOUT YOUR INFORMATION for some ways you can object to processing. The right to data portability: This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organization to another, or give it to you. The right to lodge a complaint with the supervisory authority. A list of Supervisory Authorities is available here: http://ec.europa.eu/justice/data-protection/ bodies/authorities/index_en.htm. HOW LONG DO WE KEEP YOUR INFORMATION We will retain your personal information as long as necessary for the fulfillment of the purposes contained in this Policy and in accordance with our records retention policies. For visitors to our facilities and properties, we will retain an image of your government-issued photo identification for ninety (90) days from the date of your visit. Notwithstanding the foregoing, we will retain your personal information for longer periods for specific purposes to the extent that we are obliged to do so in accordance with applicable laws and regulations, court orders, and/or as necessary to protect our legal rights or for certain business requirements. For example, when we process your payments, we will retain this data for longer periods of time as required for tax or accounting purposes. More specifically, we will retain some information for longer periods of time for the following reasons: Security, fraud & abuse prevention: i.e. to protect you, other people, and us from fraud, abuse, and unauthorized access. Financial record-keeping: When you make a payment to us we are often required to retain this information for long periods of time for purposes of accounting, dispute resolution and compliance with tax, anti-money laundering, and other financial regulations. Complying with legal or regulatory requirements: To meet any applicable law, regulation, legal process, valid court order, valid law enforcement or enforceable or governmental request, as required to enforce our terms of service, or as necessary to investigate security incidents and other violations. Direct communications with us: If you have directly communicated with us, through a customer support channel, feedback form, or a bug report, we may retain reasonable records of those communications. Even if you delete your account, keep in mind that the deletion by our third-party contractors may not be immediate and that the deleted information may persist in backup copies for a reasonable period of time. CROSS BORDER TRANSFERS OF INFORMATION If you are a California Consumer, you have certain rights with respect to the collection, use, transfer, and processing of your “Personal Information”, as defined by the California Consumer Privacy Act (CCPA). We reserve the right to limit these rights where permitted under applicable law, including where your identity cannot be reasonably verified or to the extent your rights adversely affect the rights and freedoms of others. To exercise any of the rights below, please contact us via the contact information below. Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. COLLECTION OF PERSONAL INFORMATION We collect the following Personal Information from California Consumers. Categories of consumer’s Personal Information collected Identifiers Name Address Email Address Phone Number Gender Date of birth Commercial Information Products or service purchased, obtained or considered Purchasing or consuming histories or tendencies Internet or Electronic Network Activity Information Browsing history Search history interaction with an Internet Web site, application, or advertisement Internet Protocol address Device ID Cookies Unique Personal Identifier Online Identifier Beacons Pixel Tags Mobile Ad Identifiers Categories of sources from which that information was collected This information is collected directly from you. This information is collected directly from you or by logging our interactions with you. We collect your internet or other electronic network activity information from your interactions with our website. Categories of third parties with whom the business shares personal information This information is collected directly from you. Affiliates, analytics providers, service providers, transactions processors, IT vendors, and law enforcement (if necessary). Affiliates, analytics providers, service providers, transactions processors, IT vendors, and law enforcement (if necessary). Business or commercial purposes for which the information was collected To provide you with the products and services you request, view, engage with, or purchase; To communicate with you regarding your account or transactions with us; To send you offers and promotions for our products and services; To detect security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; To debug, to identify and repair errors that impair existing intended functionality; and To investigate and prevent activities that may violate our policies. To provide you with the products and services you request, view, engage with, or purchase; To communicate with you regarding your account or transactions with us; To send you offers and promotions for our products and services; To provide you with targeted advertising based on your activity on our sites; To operate, understand, optimize, develop, or improve our sites, applications, products, services and operations; To detect security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; To debug, to identify and repair errors that impair existing intended functionality; and To investigate and prevent activities that may violate our policies To prevent fraud; To provide you with targeted advertising based on your activity on our sites; To operate, understand, optimize, develop, or improve our sites, applications, products, services and operations; To detect security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; To debug, to identify and repair errors that impair existing intended functionality; and To investigate and prevent activities that may violate our policies In the preceding 12 months, we have not sold Personal Information about consumers. In the preceding 12 months, we have not sold Personal Information about minors. INDIVIDUAL RIGHTS Right to Know About Personal Information Collected, Disclosed, or Sold You have the right to request that we disclose the Personal Information it collects, uses, and discloses about you to third parties. There are two types of Right to Know requests you can make: 1. Right to Know (Abbreviated Request): If you make a Right to Know (Abbreviated Request), you will receive the following information about you: Category of personal information collected, Categories of sources from which that information was collected, The business or commercial purpose(s) for which the information was collected, The categories of third parties to whom AMERICAN OUTDOOR BRANDS, INC. sold or disclosed the category of personal information for a business purpose, and The business or commercial purpose for which AMERICAN OUTDOOR BRANDS, INC. sold or disclosed the category of personal information. Right to Know (Specific Pieces of Information Request): If you make a Right to Know (Specific Pieces of Information Request), you will receive the following information about you: Specific pieces of Personal Information collected about you. 2. Right to Know (Specific Pieces of Information Request): If you make a Right to Know (Specific Pieces of Information Request), you will receive the following information about you: Specific pieces of Personal Information collected about you. We do not sell any Personal Information of California consumers. This information will be provided to you free of charge, unless we determine that your request is manifestly unfounded or excessive. You may request this information twice in a 12-month period. Right of Deletion You have the right to request that AMERICAN OUTDOOR BRANDS, INC. and our service providers delete any Personal Information about yourself that we have collected from you upon receipt of a verifiable request. This right is subject to exceptions. Submitting Requests You can submit your request by calling us at (844) 363-5386 (ask the Operator to direct your call to the Legal Department). You may also submit a request by emailing us at dataprivacy@aob.com Verifying Requests We provide California Consumers with the ability to submit requests through our telephone number and our email address. We must verify that the person requesting information or deletion is the California Consumer about whom the request relates in order to process the request. To verify a California Consumer’s identity, we may request up to up to three pieces of Personal Information about you when you make a request to compare against our records. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in your request to verify your identity and will delete any information you provide after processing the request. We reserve the right to take additional steps as necessary to verify the identity of California Consumers where we have reason to believe a request is fraudulent. Authorized Agent Consumers may use an authorized agent to submit their request. The authorized agent must be registered with the California Secretary of State and be authorized to submit requests on behalf of a consumer. If you are an authorized agent and a consumer has given you signed permission to submit a request on his or her behalf, Please send a copy of your signed permission by the consumer to us. Failure to submit proof of signed permission may result in us denying the consumer’s request. We will require the consumer to verify his or her identity and directly confirm with us that the consumer has provided you with permission to submit the request. Right to Equal Service We will not discriminate against you because you exercised any of your rights, including, but not limited to, by: Denying goods or services to you. Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties. Providing a different level or quality of goods or services to you. Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services. CALIFORNIA PRIVACY RIGHTS: SHINE THE LIGHT Under California’s “Shine the Light” law, California residents who provide certain personal information in connection with obtaining products or services for personal, family or household use are entitled to request and obtain from us once a calendar year information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year. To obtain this information please contact us at the information provided below. We will provide the requested information to you pursuant to the contact information provided to us. Please be aware that not all information sharing is covered by the “Shine the Light” requirements and only information on covered sharing will be included in our response. CHILDREN’S PRIVACY Our websites and Services are not intended for use by children. We do not knowingly collect personal information from children under the age of 16 years. If we become aware that a child under 16 has provided us with personal information, we take steps to delete such personal information without undue delay. The use of our Services for purchases is intended for persons eighteen (18) years of age and older. THIRD PARTY WEBSITE LINKS This Policy applies solely to our Services. Our Services may contain links to websites owned or operated by third parties. Your use of third-party websites is done at your own risk and subject to any terms and conditions of use, privacy policies, and other practices or procedures for such websites. AMERICAN OUTDOOR BRANDS, INC. is not responsible or liable for the content of or your use of any third-party websites that you may access through links on our Services. CHANGES TO THIS PRIVACY POLICY We may update or modify this Policy from time to time. We will post the changes to this page and will indicate the date they go into effect. We encourage you to review our Policy to stay informed. If we make changes that materially affect your privacy rights we will notify you of the changes by posting a prominent notice on our website or using other methods that we select, such as sending you an email. CONTACT US Any questions or concerns about the interpretation or operation of this Policy or about what may or may not be done with regard to your information should be directed to: AMERICAN OUTDOOR BRANDS, INC., c/o Chief Compliance Officer, 1800 N Route Z, Columbia, MO 65202, U.S.A. ABOUT OUR STORY OUR STRATEGY OUR BRANDS PRIVACY POLICY TERMS OF USE VIRTUAL PATENT MARKING CONNECT CAREERS CONTACT INVENTORS LINKEDIN INVESTORS INVESTOR RELATIONS STOCK POLICIES UNILATERAL PRICING INTERNET RESELLERS *TRADEMARKS OF SMITH & WESSON INC. USED UNDER LICENSE. COPYRIGHT 2021 AMERICAN OUTDOOR BRANDS INC. ALL RIGHTS RESERVED.