PRIVACY POLICY

CollegeSports Company (“CSC”) is committed to processing your personal information in a fair and lawful manner, while you interact with our Connect program. We have developed this Privacy Statement to inform you about how we handle personal information and about our privacy practices including for our website and any other CSC websites that direct you to this Privacy Statement (the “Covered Sites”).

I. GENERAL USES OF DATA

A. WHAT INFORMATION WE GATHER AND FROM WHOM

We may collect, use, store and transfer different kinds of personal information about you. We collect personal information directly from you and indirectly about you as described below. We may collect the following types of personal information from or about you, which we have grouped into categories as follows:

Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, job title, company name, date of birth, and gender.

Contact Data includes billing address, delivery address, email address, and telephone numbers.

Financial Data includes bank account and payment card details.

Transaction Data includes details about payments to and from you and other details of services you have purchased from us.

Technical Data includes internet protocol (“IP”) address, cookies, javascript, web beacons, clear gifs, HTTP headers, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access Covered Sites.

Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback, survey responses, and any unsolicited personal information not otherwise covered by this Privacy Statement that you choose to submit.

Usage Data includes information about how you use the Covered Sites, and/or our products and services.

Marketing and Communications Data includes your communication preferences in receiving marketing from us and third parties.

Sensitive Personal Information. Occasionally we may collect sensitive personal information that relates to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person's sex life or sexual orientation.

We may collect the categories of personal information described above either directly or indirectly from different sources, including our business partners, customers, and through your interactions with us.

Please note that our Covered Sites may contain links to other unaffiliated third-party websites. CSC is not responsible for the privacy practices, privacy statements, or content contained in or regarding these other unaffiliated third-party websites.

B. HOW WE USE PERSONAL INFORMATION

We will only use your personal information in a manner that is consistent with applicable laws. Most commonly, we will use the categories of personal information identified above for the following business purposes:

• For the provision of our products and services or the operation of our business.
• Where we need to perform a contract that we have entered into with you.
• Where we need to protect your interests (or someone else's interests).
• Where it is needed in the public interest or for official purposes.
• In connection with the sale, merger, acquisition, or other reorganization of our business.
• For compliance with legal obligations and protection of CSC and others.
• For marketing purposes.

We will only use your personal information for the purposes for which we collect it. Please note that we may process your personal information without your knowledge or consent where this is required or permitted by law.

C. WHEN, WHY, AND WITH WHOM WE SHARE PERSONAL INFORMATION

We may disclose the following categories of personal information to entities other than CSC for any of the business purposes set out above:

• Identity Data
• Contact Data
• Financial Data
• Transaction Data

D. USE OF COOKIES, OTHER TRACKING TECHNOLOGIES AND GATHERING OF STATISTICAL DATA

We use these technologies for various purposes including to provide a product or service, facilitate website use, and understand our visitors.

E. OUR SECURITY PROCEDURES

We have security measures in place to protect against the loss, misuse, and alteration of any personal information we receive from you.

F. CHANGES TO THIS PRIVACY STATEMENT

It is important that you check back often for updates to this Privacy Statement. If a material change is made, we will post a prominent notice on the Covered Sites.

G. CONTACT CSC

If you have questions about this Privacy Statement or to lodge a complaint, you may contact us at:

• Email: media@collegesportsco.com
• Phone: (646) 694-2538
• Address: 169 Madison Ave STE 15027, New York, NY 10016

II. THE GENERAL DATA PROTECTION REGULATION (GDPR) PRACTICES

Where we collect, process, use or disclose personal information that is subject to the General Data Protection Regulation (GDPR), we are committed to processing your personal information in a fair and lawful manner. This section describes our privacy practices specific to personal information covered by the GDPR and your rights in relation to your personal information.

A. THE INFORMATION WE GATHER

The information that we collect and process is described in Section I.A above. Pursuant to GDPR, we will explain the legal basis which allows us to do so.

B. PURPOSES FOR WHICH WE MAY USE YOUR PERSONAL INFORMATION

An explanation of how we may use your personal information includes delivering services, improving our services, personalizing content, responding to inquiries, fulfilling requests for products or services, and enabling our agents and service providers to perform activities on our behalf.

C. HOW LONG WE KEEP PERSONAL INFORMATION

We will only retain your personal information in identifiable form for as long as needed for the purposes for which it is gathered and processed.

D. YOUR GDPR RIGHTS

We respect the rights that you have in relation to your personal information, and we will respond to requests for information and, where applicable, will correct, amend, or delete your personal information.