HOUSE OF ANTIQUE HARDWARE PRIVACY NOTICE

1. Introduction

We at House of Antique Hardware, Inc. ("House of Antique Hardware" or "HOAH") are committed to protecting your privacy and keeping your information safe. This Privacy Notice ("Notice") describes how House of Antique Hardware handles and protects your Personal Information, our purposes for collecting Personal Information and the rights you have over it. If you have questions about this Notice or our practices, feel free to contact us at privacy@houseofantiquehardware.com.

2. Scope

This Notice applies to House of Antique Hardware websites, including all subdomains that link to this Notice ("Site") or any time you interact with us or use our services. For the purpose of this Notice, "Personal Information" means any information that identifies, relates to or can reasonably be linked to an identified or identifiable individual, as defined by applicable legislation. By using our Site or otherwise using our services, you acknowledge this Notice and agree to our Site policies.

3. What Information We Collect

House of Antique Hardware only collects Personal Information that is relevant and reasonably necessary for us to provide our products and services to you. The chart below shows what types of Personal Information we have collected in the previous 12 months, the purpose for the collection, and from whom we have collected it.

The categories of Personal Information we collect from you depend on how you interact with House of Antique Hardware.

Types of Individuals

Customers: Individuals who have created an account with us and currently use or have used our products or services. These include digital and phone customers, as well as TradePlus Program members.

Prospects: Individuals who have visited our Site or otherwise interacted with House of Antique Hardware marketing, social and networking activities, digital ads and content, emails, or other communications under our control.

Business Partners: Individuals engaging with our Site as a professional services partnership, including as participant, prospect, applicant or existing technology partner, channel partner, reseller, or other professional services partner.

Website Visitors: Individuals who visit our website and do not fall into the personas above and about whom we may collect information through tracking technologies, site analytics tools, information they may include in a webform.

4. Our Purposes and Legal Bases for Collecting Information

House of Antique Hardware only collects Personal Information that is relevant and reasonably necessary for us to provide our products and services to you. The chart below shows what types of Personal Information we have collected in the previous 12 months, the purpose for the collection, and from whom we have collected it.

Business Purposes for Processing Personal Information

House of Antique Hardware only collects Personal Information where we have identified a business purpose for the collection and we only collect information that is proportionate, relevant, and necessary for that purpose. We collect Personal Information to:

• Provide our products and services, process purchases, create and maintain user accounts;
• Communicate with you; respond to inquiries; engage with reviews on our Site; send you information on our products, services, promotions;
• Improve our Site, products or services; analyze the use of our Site to improve user experience; collect information about our products and services and your satisfaction with them;
• Create profiles that help us provide you with advertisements relevant to your interests;
• Detect, prevent, and investigate illegal activity, security vulnerabilities, and fraud;
• Comply with applicable laws and regulations;
• Enforce our terms, agreements or policies; and
• Perform any other purpose with your consent.

5. How we collect information

Information that You Provide to Us

As you interact with our Site or services, we collect Personal Information that you share directly with us. This includes any information you provide on webforms, upload to our Site, and through telephone calls, text messages, letters, emails, and other communications with you.

Information Collected Automatically

Like many businesses, we and our service providers automatically collect information about how and when you interact with our Site or services ("Usage Information"), including via cookies and other tracking technologies (see Cookies and Other Tracking Technologies section below). This Usage Information may be stored on and/or accessed from your device whenever you visit or interact with our Site. Usage Information includes:

• Your IP address, IDFA, Android/Google Advertising ID, IMEI, or another unique identifier;
• Your device functionality (including browser, browser language, settings and behavior, operating system, hardware, mobile network information);
• Referring and exit web pages and URLs;
• The areas within the Site that you visit and your activities there, including remembering you and your preferences;
• Your general device location or other location information, including the zip code, state or country from which you accessed the Site;
• Your device characteristics [such as device type (computer vs. mobile) and ID, operating system, hardware];
• Certain other device data, including the time of day you visit our Site or other information used to provide analytics or other usage information;
• Information about your engagement with our emails; and
• Statistical information about how both unregistered and registered users, collectively, use the Site and services.

Information Collected from Third Parties

We collect information from partners, vendors and other third parties. For example, we might obtain information about your use of our Site and services, information about your use of other sites, or information that can help us better communicate our products and services to you.

Information We Infer

We derive information or draw inferences about you based on the Personal Information we collect about you. For example, based on your browsing or purchasing, we may infer your interest in certain types of products, or information about your purchasing activities over time.

6. Cookies and other Tracking Technologies

We use cookies, pixels, and other tracking technologies ("Tracking Technologies") to recognize your browser or device, learn more about your interests and deliver our Site, products, and services to you. Tracking Technologies may set, change or modify settings or configurations on your device.

We may use the following types of cookies:

• Strictly necessary cookies. These cookies are essential for you to browse the Site and use its features, such as accessing secure areas of the site.
• Functionality cookies. Also known as "preference cookies," these cookies allow the Site to remember choices you made in the past, like what language you prefer, or what your username and password are so you can automatically log in.
• Analytics cookies. Also known as "performance cookies," these cookies collect information about how you use a website, like which pages you visited and which links you clicked on. Their purpose is to improve website functions. This includes cookies from third-party analytics services if the cookies are for the exclusive use of the owner of the website visited.
• Advertising cookies. These cookies track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. These cookies can share that information with other organizations or advertisers. These are persistent cookies and almost always of third-party provenance.

The Site may contain links to other websites. House of Antique Hardware is not responsible for the privacy practices of such other websites. None of the links on the Site should be deemed to imply that House of Antique Hardware endorses or has any affiliation with the links. To learn about the ways these other sites handle your Personal Information read their respective privacy notices.

Controlling Cookies

You can opt out of non-essential cookies by enabling an opt-out preference signal (like Global Privacy Control) on your browser or opting out of cookies in our Site's cookie preference center.

You can control the use of cookies on most web browsers. Use the links below to modify your web browser’s settings on the most popular browsers:

• Apple Safari
• Google Chrome
• Microsoft Edge
• Mozilla Firefox

For information on how you can opt out of Google Ad Remarketing here.

For information on how you can block Google Analytics from accessing your online activity with a browser add-on here.

For information on how you can opt out of Meta tracking here.

For information on how you can opt out of Pinterest targeted advertising here.

Learn more about cookies and similar technologies and how to opt out of targeted advertising cookies here. More resources are also available from the Digital Advertising Alliance or the Network Advertising Initiative. We do not control these opt-out links or whether any organization chooses to participate in these opt-out programs.

Note that if you turn cookies off, you may not be able to benefit from the full functionality of our Site. Please note that even if you exercise the opt-out choices above, you may continue to receive advertisements, for example, ads based on the website you are viewing (e.g., contextually based ads), or ads that are not targeted at you and may be less relevant. Also, if your browser (like some Safari browsers) is configured to reject opt-out cookies when you opt out on the DAA or NAI websites, your opt-out may not be effective.

7. Disclosures of Personal Information

In the previous 12-month period we have disclosed Personal Information as such:

We may also share Personal Information in the following circumstances:

• As part of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in bankruptcy or similar proceedings);
• Where required to do so by law or in the good faith belief that such action is appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain;
• For any other purpose with your permission or as directed by you; and
• Where the information is aggregate information that does not identify or otherwise relate to an individual, unless we are prohibited from doing so under applicable law.

8. Retention of Personal Information

House of Antique Hardware will retain your Personal Information only for as long as is necessary for the purposes it was collected as explained in this Notice or as legally obligated.

We utilize the following criteria to determine the length of time for which we retain Personal Information:

• The nature and length of our relationship with you;
• The business purposes for which the information was collected;
• Legal obligations or contractual commitments;
• To defend against potential legal claims;
• To detect or prevent potential illegal activity, secure our systems and online environment, or protect health and safety; and
• The privacy impact of ongoing retention on individuals.

9. Children's Privacy

Our Site is not intended for use by children under the age of 18. We do not request, or knowingly collect, any Personal Information from children under the age of 18. If you are the parent or guardian of a child under 18 who you believe has provided their information to us, please contact us using the information in the Contact Us section below to request the deletion of that information.

10. Visitors to the Site Outside of the United States

Our Site is not intended for visitors outside of the United States and we do not direct our activities at users outside of the United States. If you are visiting the Site from a location outside of the U.S., your Personal Information will be maintained on web servers and systems located within the U.S. The data protection laws in the United States may differ from those of the country in which you are located, and your information may be subject to access requests from governments, courts, or law enforcement in the United States according to laws of the United States.

10. Security

We incorporate commercially reasonable safeguards to help protect and secure your Personal Information. However, no data transmission over the Internet, mobile networks, wireless transmission, or electronic storage of information can be guaranteed 100% secure. As a result, we cannot guarantee or warrant the security of any information you transmit to or from the Site, and you provide us with your information at your own risk.

12. Your Privacy Rights

Certain regions provide rights ("Privacy Rights") to their residents; for example, certain U.S. states. Depending on where you reside, you may have the right to:

• Know whether we process your Personal Information;
• Know the categories of Personal Information we collect about you, the purposes for the collection, how long we retain your Personal Information, and whether that information is sold or shared or disclosed and to whom;
• Request access to your Personal Information, request a copy of your Personal Information or have your Personal information transferred to another controller;
• Request deletion of your Personal Information;
• Request correction of your Personal Information;
• Opt out of the sale or sharing of your Personal Information;
• Limit the use of your Sensitive Personal Information;
• Opt out of some types of Automated Decision-Making (ADM), including profiling, or to request human intervention or information about how ADM is conducted;
• Not be discriminated against for exercising your Privacy Rights; and
• Withhold or withdraw consent for the processing of your Personal Information

Right to Access, Know, and Portability

You may have the right to request access to your Personal Information, know how it’s being used and disclosed to third parties, and to obtain a copy of your Personal Information. In some cases, you may have the right to have your Personal Information transferred to another organization.

Right to Deletion

You may have the right to request that we delete some or all the information that we hold about you. Depending on the applicable laws, type of information and method of collection, there are exceptions to the right to deletion. For example, we may have a legal obligation to retain your Personal Information for tax or other reasons.

Right to Rectification

You may have the right to request that we correct the information we hold about you. We encourage you to regularly review your information, as we aspire to have only accurate, relevant, and up-to-date information. If you feel that the Personal Information we hold about you is inaccurate or incomplete, you may change it by logging into your account or submitting a request using the methods below.

Right to Opt Out of Sale, Sharing, Targeted Advertising, and Other Processing

You may have the right to opt out of certain uses of your Personal Information, for example, selling, sharing, direct marketing or targeted advertising. You can see what information we sell or share in the section on "Disclosures of Personal Information" above. If you are in a loyalty program, such as our TradePlus Program, and the terms allow us to sell or share your Personal Information or use it for targeted advertising, and you opt out of this type of processing, we may be limited in what we can offer you through the program. We do not engage in Automated Decision-Making. We do not sell Personal Information, but we recognize that some privacy laws define "Personal Information" in such a way that making available identifiers linked to you for a benefit may be considered a "sale" or "share." To opt-out of this, please click on this link.

Right to Limit Use of Sensitive Personal Information

We only collect and use your Sensitive Personal Information with your consent to process your payment, and we do not use it to infer characteristics about you.

Right Not to Be Discriminated Against

We will not discriminate against you for exercising any of your Privacy Rights. For example, unless the difference is reasonably related to the value of your Personal Information to House of Antique Hardware, we will not

• Deny you products or services;
• Charge you different prices or rates for products or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you with a different level or quality of products or services; and
• Suggest that you may receive a different price or rate for products or services or a different level or quality of products or services.

13. Exercising Your Privacy Rights

You or your authorized agent may make a request to exercise your rights over your Personal Information by contacting us as follows:

• Webform: Privacy Request Form
• Email Address: privacy@houseofantiquehardware.com
• Toll-Free Number: (888) 223-2545

You may use an authorized agent to submit your Privacy Rights request; however, we are obligated to ensure you have properly authorized the agent to act on your behalf and we may require proof of the written authorization.

In order to honor your Privacy Rights request, we may require you to confirm your identity and your residency. We will verify your identity by matching the information you provide your request with information we already hold about you. If we are unable to verify your identity, we may not honor your request. Where we deny a Privacy Rights request, we will notify you of the reason for the denial.

If you disagree with our decision not to honor your Privacy Rights request, you may appeal the decision using the information in the Contact Us section below or submit a complaint to your local privacy or data protection regulator.

14. Notice of Financial Incentives

We may offer you certain financial incentives and benefits when you join our House of Antique Hardware rewards program, such as our TradePlus Program. The information that we collect for enrollment in the program (listed above) allows us to tailor our communications and products and services suggestions for you. This, in turn, helps us establish a stronger relationship with you – something we at House of Antique Hardware value.

If you participate in the House of Antique Hardware rewards program, we may offer the following financial incentives:

• We may offer savings on orders, free ground shipping, direct access to our Hardware Specialists, and a 5-year limited product warranty. We may also send you promotions for discounted products and services. The value of these discounts varies and depends on the type of product you are buying. Any financial incentive we offer will reasonably relate to the value of your Personal Information to our business. We estimate the value of Personal Information we request in our House of Antique Hardware rewards program by comparing the amount spent by House of Antique Hardware rewards program members to similarly situated customers who do not participate in the program over a 12-month period.

In determining the value of this data to House of Antique Hardware, we consider the profit generated from products that include Personal Information, which is reasonably correlated to the value provided to you through personalized coupons, promotions, and other discounts or offers.

Participation in the House of Antique Hardware rewards program is voluntary and requires your prior opt-in consent, which you may revoke at any time. If you wish to leave the House of Antique Hardware Rewards program, please reach out to us using the information in the Contact Us section below.

For full program details, please visit the TradePlus Program page.

15. Changes to This Privacy Notice

We may change this Privacy Notice at any time. We will post all changes to this Notice on this page and will indicate at the top of the page the modified Notice’s effective date. We encourage you to refer to this page on an ongoing basis so that you are aware of our current privacy practices. If required by the applicable law, we will notify you of the changes.

16. Contact Us

If you have any questions or suggestions regarding this Notice, please contact us as follows:

House of Antique Hardware
Attn: Privacy
802 NE Davis Street
Portland, Oregon 97232

Email: privacy@houseofantiquehardware.com

Toll-Free Number: (888) 223-2545