BEVY+ Privacy Policy

Last Updated: July 27, 2026

Jump to the California Privacy Policy →

Introduction

BEVY+, LLC (“BEVY+,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. This Privacy Policy describes the information we may collect from you or that you may provide when you visit websites published by BEVY+, including our online client portal (together, the “Websites”), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Privacy Policy is intended for individuals located in the United States. Our Websites, including our client portal, are intended for use within the United States, and we restrict access to our portal from outside the United States.

Please read this Privacy Policy carefully to understand our policies and practices. If you do not agree with our policies and practices, your choice is to not use the Websites. By accessing or using the Websites, you agree to this Privacy Policy.

This Privacy Policy may change from time to time. We will revise the “Last Updated” date above whenever we make changes and, for material changes, will provide additional notice as appropriate. Your continued use of the Websites after we make changes is your acceptance of those changes. Check this Privacy Policy regularly for updates.

California residents should also review our separate California Privacy Policy, which describes additional rights available under California law. Residents of certain other U.S. states should review the “Additional U.S. State Privacy Rights” section below.

Children Under the Age of 13

The Websites are not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on the Websites or through any of their features. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. Some state privacy laws also restrict the sale, sharing, or use of a known teenager’s (ages 13–17) personal information for targeted advertising without consent; we do not knowingly sell, share, or use such information for targeted advertising without the consent required by law. If you believe we might have collected information from or about a child, please contact us using the information in the “Contact Us” section below.

Applicability of This Privacy Policy

This Privacy Policy applies to information we collect:

• on or through the Websites,

• in email, text, or other electronic messages between you and the Websites,

• through mobile and desktop applications you download from the Websites which provide dedicated non-browser-based interaction between you and the Websites, and

• when you interact with BEVY+ advertising and applications on third-party websites and services, if that advertising and those applications are ours and correctly link to this Privacy Policy.

We may maintain pages for our company, products, and services on third-party platforms, including social networking services. If you interact with our pages on those third-party platforms, the third party’s privacy policy governs your interactions on that platform. If the third-party platform provides us with information from your interaction with our pages, we treat that information in accordance with this Privacy Policy.

What Information We Collect

We collect several types of information from and about users of the Websites, including:

• information that may personally identify you, such as name, postal address, email address, telephone number, or any other identifier by which you may be contacted online or offline (“Personal Information”),

• sensitive Personal Information you may submit or upload to us, such as Social Security number, date of birth, and residential or business address, when you use certain features of the Websites (including our client portal),

• information from you that does not individually identify you,

• feedback and correspondence, such as information you provide when you request information from us, receive customer support, or otherwise correspond with us,

• information collected by automated means about you, your computer or mobile device, and your activity on the Websites or mobile applications, such as operating system, device identifier, browser type, IP address, general location information, and usage information, including pages or screens accessed, length of access, and navigation paths between pages or screens, and

• any other information you may provide to us on or through the Websites.

How We Collect Information

We may collect information from you:

• directly when you provide it to us, such as through search queries, website transactions, communications, and other types of contact,

• automatically as you navigate through the Websites, including information collected through cookies, web beacons, and other tracking technologies, and

• from third parties, such as our business partners.

How We Use Automatic Data Collection Technologies

As you use the Websites, we may use automated means to collect certain information about your equipment, browsing actions, and use patterns, including details of your visits to the Websites, such as traffic data, location data, logs, and other communication data and the resources you access and use on the Websites, and information about your computer and internet connection, such as IP address, operating system, and browser type.

The information we collect through automated means may include Personal Information, or we may maintain it or associate it with your Personal Information collected in other ways. This information helps us improve the Websites and deliver a better, more personalized service, including by enabling us to:

• estimate our audience size and usage patterns,

• store information about your preferences, which allows us to customize the Websites according to your individual interests,

• speed up your searches, and

• recognize you when you return to the Websites.

We may use the following technologies for automatic data collection:

• Browser cookies. The Websites may use cookies, small files placed on your computer. You can refuse to accept browser cookies by activating the appropriate setting in your browser.

• Web beacons. The Websites may contain small electronic files known as web beacons (also known as clear gifs, pixel tags, and single-pixel gifs) that allow us to track website statistics, such as the number of page visits or length of time interacting with Website content, and to verify system and server integrity.

If you disable or refuse automated technologies, some parts of the Websites may be inaccessible or not function properly.

Third-Party Cookies and Other Tracking Technologies

Some content or applications on the Websites may be served by third parties, such as content providers, application providers, and ad networks and servers. These third parties may use cookies alone or with web beacons or other tracking technologies to collect information about you when you use the Websites. They may collect information, including Personal Information, about your online activities over time and across different websites and online services.

We do not control third-party tracking technology or how it may be used. If you have any questions about targeted content, you should contact the responsible provider directly.

How We Use Your Information

We may use information that we collect about you or that you provide to us:

• to provide the Websites and their content to you,

• to provide you with information, products, or services that you request from us,

• to fulfill any other purpose for which you have provided us information,

• to verify your identity and protect against fraud, particularly for sensitive information, such as a Social Security number, submitted through our client portal,

• to provide you with notices about your account, including expiration and renewal notices,

• to carry out our obligations and enforce our rights arising from any contracts between you and us, including for billing and collection,

• to notify you about changes to the Websites and any related products or services,

• to allow you to participate in interactive features on the Websites,

• for marketing purposes,

• to develop or improve our products and services,

• to develop and create analytics, such as industry and fraud trends,

• in any other way we may describe when you provide the information, and

• for any other purpose with your consent.

How We Disclose Your Information

We may disclose your information for lawful business purposes, including:

• to our clients, where applicable,

• to create aggregate or anonymous data,

• to our subsidiaries and affiliates,

• to contractors, service providers, and other third parties we use to support our business, who are bound by contractual obligations to keep Personal Information confidential and use it only for the purposes for which we disclose it to them,

• to a buyer or other successor in the event of a merger, sale, or transfer of some or all of our assets,

• to third parties to market their products or services to you if you have not opted out of these disclosures and who are bound by contractual obligations to keep Personal Information confidential and use it only for the purposes for which we disclose it to them,

• to fulfill the purpose for which you provide it, such as your email address in a contact form,

• to comply with a court order, law, or legal process,

• to enforce our terms of use and other agreements, including for billing and collection purposes,

• if we believe it necessary or appropriate to protect our rights, property, or the safety of our customers or others,

• for any other purpose we may describe when you provide the information, and

• for any other purpose with your consent.

We are not responsible for the privacy practices of third parties, including our clients.

Sale or Sharing of Personal Information

We do not sell your personal information for monetary consideration, and we do not “share” your personal information (as that term is defined under applicable state privacy laws, generally meaning disclosure to a third party for cross-context behavioral advertising) with third parties. If this changes in the future, we will update this Privacy Policy and provide you with the choices required by law before doing so.

Opt-Out Preference Signals. Some browsers and devices allow you to send an opt-out preference signal, such as the Global Privacy Control (“GPC”), indicating that you do not want your personal information sold or shared. Although we do not currently sell or share personal information, we will honor a valid GPC or similar signal as a request to opt out of any sale or sharing to the extent we engage in such activity.

Your Choices About How We Use and Disclose Your Personal Information

We provide you with choices regarding the Personal Information we collect, or that you provide to us.

• Tracking technologies and advertising. You can set your browser to refuse all or some browser cookies. If you disable or refuse cookies, some parts of the Websites may be inaccessible or not function properly.

• Advertising and promotional offers. You can opt out of our promotional offers by checking the relevant box on the form on which we collect your data or, if we send you a promotional email, by selecting the unsubscribe link. If you opt out of receiving our advertising and promotional offers, we will continue to carry out other relevant activities using your information, including sending non-promotional messages, such as those related to any account you may have with us.

• Accessing, correcting, or deleting your information. Applicable law may provide you with the right to access, correct, or delete your personal information. Contact us to request access to, correction of, or deletion of your personal information. Be aware that we may not be able to provide access to, correct, or delete your personal information in all circumstances.

You may exercise your options by emailing your request to [email protected] or by calling us toll-free at 1 (800) 262-7995.

We do not control third-party collection or use of your information. However, these third parties may provide you with ways to choose not to have your information collected or used in this way.

• You may opt out of receiving targeted advertising on websites through members of the Network Advertising Initiative and the Digital Advertising Alliance.

• You may opt out of receiving targeted advertising in mobile applications through members of the Digital Advertising Alliance.

Do Not Track. Some browsers may be configured to send “Do Not Track” signals to online services that you visit. We currently do not respond to Do Not Track signals; however, as described above under “Sale or Sharing of Personal Information,” we do honor Global Privacy Control opt-out preference signals.

Data Security

We implement appropriate security measures to protect your Personal Information from accidental loss and unauthorized access, use, alteration, and disclosure. All Personal Information you provide to us is stored on our secure servers behind firewalls. We limit access to your Personal Information to those employees, agents, and contractors who have a business need to know.

Because certain information you may submit to us — such as a Social Security number or date of birth — is particularly sensitive, we apply additional administrative, technical, and physical safeguards to that information, including role-based access controls that limit access to authorized personnel with a business need to know, and we restrict access to our client portal from outside the United States.

Although we do our best to secure your Personal Information, we cannot guarantee its security. Any transmission of Personal Information to the Websites is at your own risk. We are not responsible for circumvention of any privacy and security measures.

You are also responsible for data security. If you have log-in credentials to access certain parts of the Websites, you are responsible for keeping those credentials confidential. You are responsible for the security of your devices and internet connections.

Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Websites and services you request, comply with our legal and contractual obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it was collected; for example, we generally retain client portal submissions, including sensitive information such as Social Security numbers, for the duration of our business relationship with you plus the period required to satisfy applicable legal, tax, or accounting requirements. When personal information is no longer needed, we securely delete or de-identify it.

Loan Portal Information Retention

If you use our loan portal, please note that 90 days after your loan has closed, all loan portal information — including your access credentials, account information, and personal documents — will be permanently deleted from the loan portal for security and privacy reasons. This automatic deletion includes:

• login credentials and access to the loan portal,

• personal documents uploaded during the loan application process, such as identification, pay stubs, and bank statements,

• loan application details and communication history, and

• account preferences and settings.

Records Retained for Compliance

While loan portal data is deleted after 90 days, we are required by law to retain certain transaction and financial records for regulatory compliance purposes. These records are stored separately from the loan portal and include:

• transaction records and payment history, retained for up to 7 years for tax and regulatory compliance,

• records required for dispute resolution or legal proceedings,

• information required by lending regulations and financial reporting requirements, and

• aggregated or anonymized data that cannot be used to identify you personally.

Early Deletion Requests

If you wish to have your loan portal information deleted before the automatic 90-day period, you may submit a written deletion request to [email protected] with the subject line “Early Data Deletion Request.” Certain compliance records may still be retained as required by law even if you request early deletion.

Other Retention Periods

• Marketing and communication preferences: retained until you opt out or unsubscribe.

• Website usage data and analytics: typically retained for 12–24 months.

• Customer support communications: retained for 3 years for quality assurance and dispute resolution.

Links to Other Websites

The Websites may link to third-party websites, mobile applications, or other content. We are not responsible for the privacy practices of any third party or for the content of any third party. We do not guarantee, approve, or endorse information, material, services, or products contained on or provided through any linked third-party website, mobile application, or content.

Mobile Applications and Progressive Web Apps

When you use our mobile applications or Progressive Web Apps (collectively, “Apps”), this Privacy Policy applies. Our Apps are available on multiple platforms:

• iOS: available on the Apple App Store for iPhone and iPad,

• Android: available on the Google Play Store for Android devices, and

• Progressive Web App (PWA): accessible through your mobile or desktop web browser with app-like functionality.

Our Apps may collect and use information differently than our Websites, as described in this section, and some features may vary by platform.

Device Permissions

Our mobile Apps (iOS and Android) may request the following permissions on your device. You can control these permissions through your device settings at any time. Denying certain permissions may limit some App features. Our PWA has more limited permission access and will only request permissions supported by your browser.

• Push notifications. On iOS and Android, we request permission to send you push notifications about your loan application status, payment reminders, account updates, and important service messages; on our PWA, your browser will ask permission to show notifications, which work similarly to native app notifications. We only send transactional notifications related to your account and loan application — we do not send marketing or promotional notifications through push notifications. You can disable notifications at any time (iOS: Settings → Notifications → BEVY+; Android: Settings → Apps → BEVY+ → Notifications; PWA: Browser settings → Site Settings → Notifications).

• Camera. We request camera access so you can photograph documents required for your loan application, such as identification, pay stubs, or bank statements; on our PWA, your browser will request camera permission when you use the photo capture feature. We only access your camera when you explicitly tap “Take Photo” or “Scan Document” — we never access it at other times. You can manage this permission at any time (iOS: Settings → Privacy & Security → Camera → BEVY+; Android: Settings → Apps → BEVY+ → Permissions → Camera; PWA: Browser settings → Site Settings → Camera).

• Photo library / media. On iOS, this is the “Photos” permission; on Android, the “Storage” or “Media” permission; on our PWA, it is standard browser file-picker access that does not require a special permission. We use this access only to let you upload existing photos or documents from your device for your loan application — we cannot browse or access other photos in your library.

• Location services. On iOS and Android, we request location access for fraud prevention and security verification and to comply with lending regulations that require location verification; our PWA's browser will request location permission for the same purposes. If you deny this permission, our branch finder and some security features will not be available. You can manage this permission at any time (iOS: Settings → Privacy & Security → Location Services → BEVY+; Android: Settings → Apps → BEVY+ → Permissions → Location; PWA: Browser settings → Site Settings → Location).

• Files and storage. On iOS, this is access to the Files app; on Android, storage permission to save documents to your device; on our PWA, your browser's standard downloads folder. We use this access to save loan documents, statements, and receipts so you can access them offline or share them with other applications, and only when you explicitly choose to download or save a document.

Platform-Specific Features

• Apple Sign In (iOS). If you choose to sign in with Apple, we receive your name and email address (or Apple's private relay email); we do not receive your Apple ID.

• Siri Shortcuts (iOS). If you create Siri shortcuts for App functions, Siri may process voice commands locally on your device; we do not receive voice data.

• Google Sign In (Android). If you sign in with Google, we receive your name, email address, and profile picture; we do not receive your Google password.

• Advertising ID (Android). Android assigns an Advertising ID (AAID) to your device, which we may collect for analytics purposes. You can reset your Advertising ID at Settings → Google → Ads → Reset advertising ID.

• PWA installation and storage. When you “install” our PWA to your home screen, it functions like a native app but runs in your browser environment. Our PWA stores some data locally in your browser — including your session, preferences, and temporary data, using browser storage APIs such as localStorage, IndexedDB, and the Cache API — to enable offline access to certain features; this data remains on your device and is not transmitted to our servers unless you are connected to the internet. You can clear this data through your browser settings. Our PWA has access to fewer device features than our native apps, so some functionality may be limited. Our PWA also uses service workers (background scripts) to enable offline functionality and fast loading; service workers run in your browser and do not transmit data without your action.

Mobile-Specific Data Collection

In addition to the information described elsewhere in this Privacy Policy, our Apps automatically collect the following categories of information, which help us improve the Apps, troubleshoot technical issues, optimize performance, prevent fraud, and provide better service. We do not sell this information to third parties.

• Device information, such as device type, model, and manufacturer; operating system and version; screen resolution and display metrics; device language and regional settings; battery level and charging status; and available storage space (for our PWA, browser type, version, and user agent string).

• App information, such as app version and build number, installation date and time, update history, and installation source, for example the App Store, Play Store, or web install (for our PWA, service worker version and installation method).

• Unique identifiers, such as Apple's Identifier for Vendors (IDFV) and, if you have not opted out through Apple's App Tracking Transparency framework, Identifier for Advertisers (IDFA); on Android, the Android ID and Google Advertising ID (AAID); for our PWA, browser-generated identifiers and an installation ID; and an app installation ID unique to each install.

• Usage data, such as the features and screens you access, actions and interactions within the App, time spent in the App and on specific screens, session duration and frequency, navigation paths, search queries and filters used, and buttons clicked or forms completed.

• Performance data, such as App crashes and error logs, API response times, screen loading times, memory and CPU usage, and network request success/failure rates.

• Location data, if you grant permission, including precise location (GPS coordinates) and approximate location (city or region based on IP address or WiFi/cellular towers). We do not track or store your location history over time.

App Stores and Platform Providers

When you download our App from an app store or use our PWA, the platform provider collects information about your downloads, updates, and app usage according to its own privacy policy — including Apple (for the Apple App Store), Google (for the Google Play Store), and your web browser provider (for our PWA), such as Safari, Chrome, Firefox, or Edge. We do not control, and are not responsible for, the data collection practices of these platform providers.

Data Storage and Security for Apps

• Server-side storage. Data collected through our Apps is stored on secure servers located in the United States. All data transmitted between the Apps and our servers is encrypted using industry-standard TLS/SSL protocols, and we use AES-256 encryption for data at rest.

• On-device storage. On iOS, data is stored in the iOS Keychain (encrypted), the app sandbox, and UserDefaults. On Android, data is stored in the Android KeyStore (encrypted), SharedPreferences, and app-private storage. On our PWA, data is stored in browser storage (localStorage, IndexedDB, Cache API). Sensitive data, such as passwords and tokens, is encrypted before storage, and data on your device is further protected by your device's security features, such as a passcode or biometrics.

• Offline functionality. Our Apps may store data temporarily on your device to enable offline access to certain features. Offline data is synchronized with our servers when you reconnect to the internet. You can clear offline data through App Settings → Storage → Clear Offline Data.

App-Specific User Controls

You have control over your data and privacy settings within our Apps.

• Permission management. You can manage device permissions at any time (iOS: Settings → Privacy & Security → [Permission Type] → BEVY+; Android: Settings → Apps → BEVY+ → Permissions; PWA: Browser settings → Site Settings → [Permission Type]).

• In-App privacy settings. You can disable analytics (App Settings → Privacy → Analytics → Off), disable push notifications (App Settings → Notifications → Off, or through your device settings), and clear cached data (App Settings → Storage → Clear Cache).

• Viewing and downloading your data. You can view the categories of data we collect (App Settings → Privacy → Data We Collect) and request a copy of your data (App Settings → Privacy → Download My Data).

Advertising and Tracking in Our Apps

• On iOS 14.5 and later, when you first launch the App you will see Apple's App Tracking Transparency prompt; choosing “Ask App Not to Track” prevents tracking across other apps and websites. You can change this later at Settings → Privacy & Security → Tracking → BEVY+, and you can reset or disable your iOS advertising identifier at Settings → Privacy & Security → Apple Advertising → Reset Identifier.

• On Android, you can reset or opt out of personalized ads using your advertising ID at Settings → Google → Ads → Reset advertising ID.

• On our PWA, you can clear your browser's cookies and site data to reset tracking identifiers.

Account and Data Deletion

You have the right to request deletion of your account and associated personal data. To request account deletion, send a written request to [email protected] with the subject line “Account Deletion Request,” including your full name, the email address associated with your account, and your phone number so we can verify your identity.

We will process your account deletion request within 30 days of receiving and verifying it. We may need to verify your identity before processing the request to protect your account's security. Once verified, we will delete your account and associated data, except where we are required to retain information by law, such as for financial compliance, tax purposes, dispute resolution, or fraud prevention.

• What's deleted: personal information (name, email, phone number, address), usage data and preferences, cached data and session information, and App-specific settings and preferences.

• What's retained: transaction records required for tax and regulatory compliance (for up to 7 years), communications related to legal disputes or regulatory inquiries, information required by law to be retained for fraud prevention or security purposes, and aggregated or anonymized data that cannot be used to identify you.

Uninstalling the App

Uninstalling the App removes all locally stored data from your device. However, data stored on our servers remains until you request account deletion as described above ([email protected]). On iOS, long-press the app icon, then choose Remove App and Delete App. On Android, long-press the app icon and choose Uninstall. For our PWA, remove it from your home screen and clear your browser data for complete removal.

App Store Privacy Compliance

This Privacy Policy aligns with the information displayed in our App Privacy section in the Apple App Store and our Data Safety section in the Google Play Store; the data practices described here match what we disclosed to Apple and Google for our respective app store listings, which you can review before downloading. If you have questions about data collection in our mobile Apps, or believe there is a discrepancy between this Privacy Policy and our app store disclosures, please contact us at [email protected].

Updates to App Privacy Practices

We may update our App data collection practices from time to time. When we do, we will revise this Privacy Policy with a new “Last Updated” date, notify you through the App, such as an in-app notification or alert, and, for material changes, may require you to review and accept the updated policy before continuing to use the App. We will also update our App Store and Play Store privacy labels to reflect any changes. Your continued use of the Apps after we make changes constitutes your acceptance of the updated practices; if you do not agree, you should stop using the Apps and uninstall them.

Additional U.S. State Privacy Rights

If you are a resident of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or another state with a comprehensive consumer privacy law, you may have some or all of the following rights, subject to the exemptions and limitations under your state’s law:

• the right to know or access the personal information we hold about you,

• the right to correct inaccurate personal information,

• the right to delete personal information we have collected from or about you,

• the right to data portability, in a readily usable format,

• the right to opt out of the sale of personal information, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects, and

• the right to appeal a decision if we decline to act on your request.

How to Exercise Your Rights

You may submit a request to exercise these rights by emailing [email protected] or by calling us toll-free at 1 (800) 262-7995. We will verify your request using information associated with your account or other reasonably available information before responding. We will respond within the time required by applicable law, generally within 45 days of receipt, extendable by an additional period (typically up to 45 or 60 days) when reasonably necessary.

Appeals

If we decline to take action on your request, you may appeal our decision by replying to our denial email, emailing [email protected] with “Privacy Appeal” in the subject line, or calling us toll-free at 1 (800) 262-7995. We will respond to your appeal within the time required by applicable state law (generally within 45 to 60 days). If your appeal is denied, we will provide information on how to contact your state Attorney General to submit a complaint.

Universal Opt-Out Mechanisms

As described above under “Sale or Sharing of Personal Information,” we honor valid opt-out preference signals, such as Global Privacy Control, as required by applicable state law.

Nevada Residents

Nevada law (NRS Chapter 603A) permits Nevada residents to submit a request directing us not to sell certain “covered information,” as defined by Nevada law. We do not currently sell covered information. You may still submit a request to [email protected], and we will honor it going forward.

Automated Decision-Making

We do not currently use automated decision-making technology to make decisions about you that produce legal or similarly significant effects without human involvement. If this changes, we will update this Privacy Policy and provide the notice, opt-out, and access rights required by applicable law.

Contact Us

If you have any questions or comments about this Privacy Policy, or would like to exercise your privacy rights, please contact us at:

BEVY+, LLC, 3286 Humphries Hill Road, Austell, GA 30106, phone: 1 (800) 262-7995, [email protected]

BEVY+ California Privacy Policy

Last Updated: July 16, 2026

← Back to the General Privacy Policy

Introduction

BEVY+, LLC (“BEVY+,” “we,” “us,” or “our”) respects the privacy of California residents. This California Privacy Policy is provided pursuant to the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its implementing regulations (collectively, the “CCPA”), and describes how we collect, use, and share personal information about California residents and the rights and choices available to you.

This California Privacy Policy describes the information we may collect from you or that you may provide when you visit websites published by BEVY+, including our online client portal (together, the “Websites”), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

Please read this California Privacy Policy carefully to understand our policies and practices. If you do not agree with our policies and practices, your choice is to not use the Websites. By accessing or using the Websites, you agree to this California Privacy Policy.

This California Privacy Policy may change from time to time. We will revise the “Last Updated” date above when we make changes. Your continued use of the Websites after we make changes is your acceptance of those changes. Check this California Privacy Policy regularly for updates.

Unless otherwise restricted by applicable California privacy law, the terms and conditions of our general Privacy Policy also apply to California residents.

Our Privacy Contact Information

BEVY+, LLC, 3286 Humphries Hill Road, Austell, GA 30106, phone: 1 (800) 262-7995, [email protected]

Applicability of This California Privacy Policy

This California Privacy Policy applies to personal information we collect from California residents:

• on or through the Websites,

• in email, text, or other electronic messages between you and the Websites,

• through mobile and desktop applications you download from the Websites which provide dedicated non-browser-based interaction between you and the Websites, and

• when you interact with BEVY+ advertising and applications on third-party websites and services, if that advertising and those applications are ours and correctly link to this California Privacy Policy.

This California Privacy Policy applies to personal information about California residents in all contexts, including personal information we collect about job applicants, employees, contractors, and individuals acting in a business-to-business capacity, such as a business contact, consistent with current CCPA requirements. (The CCPA’s prior temporary exemptions for employee and business-to-business personal information expired on January 1, 2023.)

Your California Privacy Rights

As a California resident, you have specific rights under the CCPA regarding your personal information, described below.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• the categories of personal information we collected about you,

• the categories of sources for the personal information we collected about you,

• our business or commercial purpose for collecting or selling that personal information,

• the categories of third parties with whom we share that personal information,

• the specific pieces of personal information we collected about you (also called a data portability request), and

• if we sold or disclosed your personal information for a business purpose, two separate lists disclosing: (1) sales, identifying the personal information categories that each category of recipient purchased, and (2) disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Right to Correct Inaccurate Personal Information

You have the right to request that we correct inaccurate personal information that we maintain about you. Once we receive and confirm your verifiable consumer request, we will use commercially reasonable efforts to correct the inaccurate personal information, taking into account the nature of the personal information and the purposes for which we process it.

Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you,

• detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities,

• debug products to identify and repair errors that impair existing intended functionality,

• exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law,

• comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.),

• engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent,

• enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us,

• comply with a legal obligation, and

• make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Right to Limit the Use of My Sensitive Personal Information

Certain personal information we collect is considered “sensitive personal information” under the CCPA. We collect Social Security numbers and dates of birth that you may submit to us through our client portal; we do not collect other categories of sensitive personal information, such as precise geolocation, biometric data, or health information.

We only use and disclose sensitive personal information for the limited business purposes permitted under CCPA regulations (11 Cal. Code Regs. § 7027(m)), such as to perform the services you request, verify your identity, detect and prevent security incidents and fraud, and comply with our legal obligations. We do not use sensitive personal information to infer characteristics about you, and we do not use or disclose it in a manner that triggers a right to limit its use. Because of this, California law does not currently require us to provide a “Limit the Use of My Sensitive Personal Information” link. If our practices change such that this right becomes available to you, we will update this California Privacy Policy and provide the required mechanism.

How to Access Your California Privacy Rights

You may contact us to request to exercise your right to know, access, correct, or delete your personal information by submitting a verifiable consumer request to us at [email protected] or by calling us toll-free at 1 (800) 262-7995.

California privacy law requires that we verify the identity of the individual submitting the request before providing a substantive response to the request. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

The verifiable consumer request must:

• provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or are an authorized representative of such person, or that you make the request on behalf of your child under 13, and

• describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. You may make a verifiable consumer request for access or data portability up to twice within a 12-month period.

Response Timing and Format

We try to respond to a verifiable consumer request within 45 days of receipt and verification. If we require more time, we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. Our response will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that a request warrants a fee, we will tell you why and provide a cost estimate before completing your request.

Your Personal Information Sales and Sharing Opt-Out and Opt-In Rights

The CCPA gives you the right to opt out of both the “sale” and “sharing” of your personal information. “Sharing” includes disclosing personal information to a third party for cross-context behavioral advertising, whether or not for monetary consideration.

If you are 16 years of age or older, you have the right to direct us not to sell or share your personal information at any time (the “right to opt-out”). We do not sell or share the personal information of consumers we know are less than 16 years of age, unless we receive affirmative authorization (the “right to opt-in”) from either the consumer who is at least 13 but not yet 16 years of age, or the parent or guardian of a consumer less than 13 years of age. Consumers who opt in to personal information sales or sharing may opt out of future sales or sharing at any time.

To exercise the right to opt out, you (or your authorized representative) may submit a request to us by emailing [email protected] or by calling us toll-free at 1 (800) 262-7995. Because we do not currently sell or share personal information, there is nothing for you to opt out of at this time. If that changes, we will provide the required “Do Not Sell or Share My Personal Information” mechanism and will honor opt-out preference signals, such as Global Privacy Control, as a valid opt-out request.

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize personal information sales or sharing. However, you may change your mind and opt back in at any time by emailing us at [email protected].

You do not need to create an account with us to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request.

Nondiscrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by California privacy law, we will not:

• deny you goods or services,

• charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties,

• provide you a different level or quality of goods or services, or

• suggest that you may receive a different price or rate for goods or services, or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by California privacy law that can result in different prices, rates, or quality levels. Any California privacy law-permitted financial incentive we offer will reasonably relate to the value of your personal information and will contain written terms describing the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Other California Privacy Rights

California’s “Shine the Light” law (Civil Code § 1798.83) permits California resident users of the Websites to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at:

BEVY+, LLC, 3286 Humphries Hill Road, Austell, GA 30106, phone: 1 (800) 262-7995, [email protected]

Automated Decision-Making Technology

Beginning in 2027, California law will impose new notice, access, and opt-out requirements on businesses that use automated decision-making technology (“ADMT”) to make “significant decisions” about consumers, such as decisions affecting employment, finances, housing, education, or health care. We do not currently use ADMT to make significant decisions about California residents. If this changes, we will update this California Privacy Policy and provide the notices and rights required by law before doing so.

Sale or Sharing of Personal Information

In the preceding 12 months, we have not sold or shared (as “sharing” is defined under the CCPA) personal information.

What Personal Information We Collect, Use, and Share

This chart summarizes our collection, use, and disclosure of the personal information of California residents during the last 12 months from the date of this California Privacy Policy. We generally retain each category of personal information for as long as necessary to fulfill the purposes described in this California Privacy Policy and our general Privacy Policy, and to comply with our legal, tax, and accounting obligations, after which we securely delete or de-identify it.

How We Collect Personal Information from You

We collect personal information from you directly, such as from forms you complete or products and services you purchase, or indirectly from you, such as through observing your actions on the Websites.

How We Use Your Personal Information

We may use or disclose your personal information:

• to fulfill or meet the reason you provided the information, such as to respond to a price inquiry, fulfill an order, or answer a question,

• to facilitate new product orders or process returns,

• to create, maintain, customize, and secure your account with us,

• to personalize your experience with the Websites,

• to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our website, third-party sites, and via email or text message (with your consent, where required by law),

• to verify your identity and protect against fraud when you submit sensitive information, such as a Social Security number, through our client portal,

• to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations,

• as described to you when collecting your personal information or as otherwise set forth in California privacy law, or

• to evaluate or conduct a merger, sale, or transfer of some or all of our assets, in which personal information is among the assets transferred.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing notice to you.

How We Share Your Personal Information for Business Purposes

We may disclose your personal information to a third party for a business purpose. These third parties are bound by contractual obligations to keep your personal information confidential and use it only for the purposes for which we disclose it to them. We may disclose your personal information to third-party service providers or service delivery partners related to the services we provide to you.

Contact Us

If you have any questions or comments about this California Privacy Policy, or would like to exercise your privacy rights, please contact us at:

BEVY+, LLC, 3286 Humphries Hill Road, Austell, GA 30106, phone: 1 (800) 262-7995, [email protected]