Daily Drop Privacy Policy

FareDrop LLC, a Tennessee entity doing business as Daily Drop ("Daily Drop"), provides this privacy policy to describe how we collect, use, and share the information when you visit any of our websites or mobile applications that link to this privacy policy (the "Sites") or otherwise interact with our services, including our newsletters (collectively, the "Services").

Information Collection

When using our Services, you may provide information about yourself, including your name, email address, log-in information, and any other information you choose to provide. For example, we collect this information when you sign up for our newsletter, create an account, complete our surveys, indicate your travel preferences, upload a profile photo, participate in our online forums, use our chatbot, contact us, or interact with us for any other purpose. We may also collect your billing information when you sign up for Daily Drop Pro or purchase our merchandise. When you make a purchase through our Services, we collect information related to your purchase, including your billing and shipping information.

We (and other entities) automatically collect information relating to your interactions with us and our Services, including browser type, IP address, identifiers stored in cookies, pages visited and other activities on the Services, device type, and time and date of visit, and other information we collect through cookies and similar technologies. We may use this data to derive information about your general location, such as your ZIP code, city, and state. See the "Digital Advertising & Analytics" section of this privacy policy to learn more about the use of automatically collected information and the choices available to you.

In addition, we may collect information about you from third parties and combine this with information we collect through our Services.

Information Use

We may use the information we collect for any lawful purpose, including the following:

• To provide you with our Services including travel deals, news, and credit card reward tips, including through the Daily Drop newsletter;
• To fulfill your orders;
• To provide and maintain our online forums and enable you to interact with other users;
• To communicate with you, including to respond to your questions about order status and other inquiries;
• To operate, personalize, and improve the Services, including for analytics purposes;
• To promote and market our products and services, including to send updates, promotions, advertisements, and marketing materials that may be of interest to you;
• To comply with the law and to maintain the security of our Services; or
• With your consent, or as otherwise disclosed at the time information is collected.

Information Disclosure

We may disclose the information we collect with other parties, including the following:

• With third-party service providers who process information on our behalf, such as payment processors, data hosting services, chatbot services, and email services;
• With any affiliates or joint venture partners that we may have now or in the future;
• With our business partners, including those that may offer products and services that may be of interest to you;
• With advertising and marketing companies, including Advertising Providers;
• With our legal or business advisors;
• As part of a potential or actual corporate sale, merger, or acquisition, or other transfer of all or part of our assets, including as part of a bankruptcy proceeding;
• Pursuant to a subpoena, court order, governmental inquiry, or other legal process or as otherwise required by law, to protect our rights or the rights of third parties, or to protect the safety or security of any person or entity;
• With your consent or as otherwise disclosed at the time of data collection or sharing.

We may share information that has been deidentified or aggregated without limitation. Note that we maintain and use deidentified information only in deidentified form. We do not attempt to reidentify such information except as needed to determine that the information is appropriately deidentified.

The Services offer interactive features, such as the Pro Lounge, that you can use to communicate with other users or to submit and post your own content. When you have a Daily Drop account, your profile information will be available to other users unless you opt out through your settings. If you disclose information through our interactive features, this information can be viewed, collected, and used by others.

Digital Advertising & Analytics

We may partner with ad networks and other ad serving providers ("Advertising Providers") that serve ads on behalf of us and others on non-affiliated platforms. Some of those ads may be personalized, meaning that they are intended to be relevant to you based on information Advertising Providers collect about your use of the Sites and other sites or apps over time, including information about relationships among different browsers and devices. This type of advertising is known as interest-based advertising.

Daily Drop adheres to the Digital Advertising Alliance ("DAA") Self-Regulatory Principles in connection with this interest-based advertising activity. You may visit the DAA Web choices tool at http://www.aboutads.info to learn more about this type of advertising and how to opt out of this advertising on websites by companies participating in the DAA self-regulatory program. You can also exercise choices regarding interest-based advertising on your mobile device by downloading the appropriate version of the DAA's AppChoices tool at https://youradchoices.com/appchoices.

If you delete your cookies or use a different browser or mobile device, you may need to renew your opt-out choices exercised through the DAA Webchoices tool. Note that electing to opt out will not stop advertising from appearing in your browser or applications. It may make the ads you see less relevant to your interests.

We may also work with third parties that collect data about your use of the Sites and other sites or apps over time for non-advertising purposes. Daily Drop uses Google Analytics and other third-party services to improve the performance of the Sites and for analytics and marketing purposes. For more information about how Google Analytics collects and uses data when you use our Site, visit www.google.com/policies/privacy/partners, and to opt out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout.

Additionally, your browser may offer tools to limit the use of cookies or to delete cookies; however, if you use these tools, our Sites may not function as intended.

Third-Party Links and Tools

The Services may provide links to third-party websites or apps. We do not control the privacy practices of those websites or apps, and they are not covered by this privacy policy. You should review the privacy policies of other websites or apps that you use to learn about their data practices.

The Services also include integrated social media tools or "plug-ins," such as social networking tools offered by third parties. If you use these tools to share personal data or interact with these features through the Services, those companies may collect information about you and may use and share such information in accordance with your account settings, including by sharing such information with the general public.

Your interactions with third-party companies and your use of their features are governed by the privacy policies of the companies that provide those features. We encourage you to carefully read the privacy policies of any accounts you create and use.

State Privacy Rights

Privacy laws in certain states, including California, Colorado, Connecticut, Indiana, Maryland, New Jersey, Oregon, and Virginia, grant individuals rights with respect to personal data we collect. If you are a resident of one of these states, this section of the Privacy Policy contains disclosures required by law and explains rights that may be available to you.

Personal Data We Collect and Disclose

In the preceding 12 months, Daily Drop collected and disclosed the following categories of personal data:

• Personal and online identifiers (such as first and last name, email address, or unique online identifiers);
• Record keeping information (such as account credentials and information used for payment processing);
• Characteristics of legally protected classifications (such as gender);
• Commercial or transactions information (such as records of products or services purchased, obtained, or considered);
• Internet or other electronic network activity information (such as interactions with our newsletters);
• Inferences drawn from the above information about your predicted characteristics and preferences; and
• Other information about you that is linked to the personal data above.

Some of the personal data we collect, like account credentials, may be considered "sensitive" under state privacy laws.

Categories of Sources

We collect personal data from the following categories of sources:

• You;
• Our affiliates and joint venture partners;
• Our business partners, such as travel and credit card companies;
• Our service providers;
• Social media companies; and
• Advertising companies and networks.

Our Purposes for Processing Personal Data

We use and disclose the personal data we collect for our commercial and business purposes as described in the "Information Use" section of this Privacy Policy.

Recipients of Personal Data

We disclose for our business and commercial purposes each category of personal data listed above to the categories of recipients described in the "Information Disclosure" section of this Privacy Policy.

Daily Drop does not "sell" personal data for money, but we engage in social media advertising and allow some third-party advertising companies to collect data on our Sites as described in the "Digital Advertising & Analytics" section of this Privacy Policy. For these activities, we disclose the following categories of personal data to social media companies and advertising and marketing companies: personal and online identifiers, commercial or transactions information, internet or other electronic network activity information, inferences, and other information linked to personal data. We treat these advertising activities as "sales" or "sharing" for targeted advertising under state privacy laws and give you the opportunity to opt out.

We do not knowingly sell or share personal data of individuals under 16. We also do not sell or use personal data for profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

Your Rights

Residents of certain states have rights with respect to the personal data collected by Daily Drop. You may be able exercise the following rights, subject to certain exceptions and limitations:

• The right to confirm whether we are processing your personal data.
• The right to access a copy of the specific pieces of your personal data we have collected.
• The right to know the categories of your personal data we collect, use, disclose, and sell; the categories of sources from which we collected your personal data; our purposes for collecting, selling, or sharing your personal data; the categories of personal data that we have sold or disclosed for a business purpose; and the categories of third parties with which we have shared personal data.
• In Maryland, the right to obtain the categories of third parties to which we disclosed personal data.
• In Oregon, the right to obtain a list of the third parties to which we disclosed personal data.
• The right to request that we correct inaccurate personal data we maintain about you.
• The right to request that we delete the personal data we have collected about you.
• The right to opt out of "selling" and sharing of personal data for targeted advertising. Please note that if you opt out of certain practices, we may be unable to provide you with some services.
• The right not to receive discriminatory treatment for the exercise of the above privacy rights.

While some state privacy laws provide an opt-out opportunity for certain uses or disclosures of "sensitive" personal data, Daily Drop uses and discloses such data only in ways that do not require an opt-out opportunity.

To exercise any of the above rights, other than the right to opt out, please contact us:

• Online at https://www.dailydrop.com/do-not-share-or-sale-my-personal-information
• By email at privacy@dailydrop.com

To exercise the right to opt out of "sales" and sharing of personal data for targeted advertising, please visit our Sites with the Global Privacy Control ("GPC") enabled. Daily Drop has implemented mechanisms to respond to GPC signals that we receive, where required, and we treat these signals as requests to opt out of "sales" and sharing for targeted advertising. You can also opt out by visiting the "Cookie Declaration" page on our website.

For individuals subject to certain state privacy laws, if you have submitted a request that we have not reasonably fulfilled, you may contact us to appeal our decision by sending an email with the subject line "Appeal" to privacy@dailydrop.com.

Authorized Agent

Depending on your state, you may designate an authorized agent to make requests on your behalf. You can designate an agent in writing or through a power of attorney; agents are directed to submit requests through the same methods described above. As permitted by law, we will require the agent to provide us with proof that you have authorized the agent to make requests on your behalf prior to accepting requests from the agent.

Verification Process and Required Information

Note that we may need to request additional information from you to verify your identity or understand the scope of your request. You will not be required to create an account with us to submit a request or have it fulfilled. We will require you to provide, at a minimum, your name, email address, and state of residence.

Retention

We retain personal data in identifiable form only for as long as necessary to fulfill the purposes for which the personal data was provided to us or, if longer, to comply with legal obligations, to resolve disputes, to enforce agreements, or to satisfy any similar essential purposes. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data, the purposes for which we process personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. Once the retention period expires and if not otherwise required to retain information by law, we will delete or deidentify personal data.

Your Choices

To opt out of our email marketing, you can use the link provided at the bottom of each marketing message. If you opt out of our email marketing, we will still send you messages related to our transactions and relationship with you, such as order confirmations.

For choices with respect to third-party interest-based advertising activities, please see the "Digital Advertising & Analytics" section above.

Updating Your Information

When you have a Daily Drop account, you may review, change, or update your account information by logging into your account.

Changes to Our Privacy Policy

If our information practices change, we will post these changes on this page. We encourage you to visit this page periodically to learn of any updates.

Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at privacy@dailydrop.com or by mail:

FareDrop, LLC
2348 W. Andrew Johnson Hwy
Box 214
Morristown, TN 37814
United States