LONG JOHN SILVER'S PRIVACY POLICY

When you access our Sites or use the Services, LJS (or vendors acting on our behalf) may collect information about You. In many cases, we need to gather that information in order to provide the Services you requested or to meet certain legal requirements. Some of the information is personal information, or personal data, which includes information about an individual from which that person can be identified. It does not include data where the identify has been removed (anonymous data) which we can use for any purpose. LJS only uses information you share with us to give you a Sea-Worthy experience.

Specific ways that we collect information and the types of information collected include:

Information You Provide to LJS: LJS collects personally identifiable information that you may voluntarily provide in a variety of ways, which include: placing an order, completing online forms, registering and creating an account or updating that account, submitting an employment application or resume, subscribing to newsletters or marketing communications, participating in sweepstakes, contacting us with requests, commenting, completing surveys, redeeming promotions, and other activities on the Sites or in connection with the Services. This information may include the following, depending on how you interact with us:

• Identity or Contact Data, such as your name, mailing or delivery address, e-mail addresses, age, telephone numbers, birthday information or other similar contact information you provide to LJS.
• Financial information, such as your billing address and other payment-related information.
• Transaction Data, including information about the products you buy, prices, method of payment and payment details.
• Account Profile and usage information such as your username or password (or anything else that identifies you) used to access our online services to or buy or use our Services, the times that you like to utilize our Services or visit our Sites, and your history and communications with LJS including what messages and emails you open and review.
• Marketing and Communications Data such as your preferences in receiving marketing materials and communication preferences generally.
• Other personal information you choose to share when you interact with us (including through social media as discussed below).

Information Collected Through Automated Means: When you use the Sites and/or Services, our technology can collect certain types of information. For example, if you log into the website or app, certain technology may use your location to determine the closest restaurant to you. We also (along with certain vendors) use cookies. Cookies are a common part of many commercial websites that allow small text files to be sent by a website, accepted by a web browser and then placed on your hard drive as recognition for repeat visits to the Sites. You may be assigned a cookie when you log in. We may use different types of cookies, including session cookies (lasting the duration of your visit), persistent cookies (lasting the duration of a fixed period of time). We may also use local shared objects (sometimes known as Flash Cookies), web beacons (also known as clear gifs, pixel tags and single-pixel gifs), and other tracking technologies.

We use Cookies and these automatic data collection means to help us deliver a better and more personalized set of Services when you use our Sites. These technologies also allow us to improve our websites by estimating our audience size and usage patterns, speed up your searches, and recognize you when you return so we can customize your experience.

The types of information that may be collected may include:

• Internet protocol (IP) address;
• Computer and/or mobile-device system and browser type, and the settings of such device;
• Any unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device or electronic device;
• The serial numbers for your devices and components;
• Certain advertising or similar identifiers;
• Any website, page or application that has led you to one of our Sites;
• Certain online activity on other websites, applications or social media;
• Visit information when you visit a restaurant (such as our video recordings)
• Activity related to how you use our Sites and Service, such as pages you visit.

We may use Google Analytics to provide certain analytics services for us. More information about Google Analytics can be found in the Google Analytics Terms of Use and the Google Analytics Privacy Policy.

For technology concerning the exact location of your device (such as geo-location, GPS, Wi-Fi, Bluetooth, or cell tower proximity), you can generally disable the collection of this information in the device and/or browser settings. If you have questions about how to do this we recommend you first try to utilize the “help” section of the specific provider, and if you are unable to disable these features you can contact the mobile-device service provider, manufacturer, or web browser. Certain sections of our Sites or Services may not work with the location information disabled.

We do not respond to or honor “do not track” (a/k/a DNT) signals or similar mechanisms transmitted by web browsers.

Information Collected From Other Sources. Sometimes we can get information from other sources or other companies, such as through social media or third-party vendors or affiliates. If you enter into a co-branded promotion that is being sponsored by us and another party, our co-sponsor may provide us with information about you. Some of our Services or Sites may link to websites run by third parties that share information with LJS, and some social media and other websites may link back to LJS. If you click on these links and visit these third-party sites, you should read the privacy policy, terms and conditions and other policies for that site, as they may be different than LJS’s Privacy Policy. LJS is not responsible for the policies or practices of third-party websites that you may visit, and the information that you may provide to such parties is governed by the privacy policy, terms and conditions of those websites.

We may also utilize “ad networks.” These networks may track your online activities over time by collecting information through use of cookies, web beacons, and other technologies. The ad networks use this information to show you advertisements that may be of particular interest to you. The ad networks we utilize may collect information about your visits to websites that also take part in the relevant ad network, such as the pages or advertisements you view and how you use the websites. We use this information, both on our online services and on third-party websites that take part in the ad networks, to provide you with advertising tailored to you, and to help us assess how effective our marketing is. You can opt out of targeted advertising by visiting the Digital Advertising Alliance website or the Network Advertising Initiative website.

Compiling Information From Multiple Sources. Sometimes we may combine all of the information about you in an effort to improve our Site and Service, such as creating personalized experiences and targeted rewards and offers that enhance your voyage with LJS.

We use the information we collect for the following purposes, including improving LJS’s operations and our Service for You, complying with legal requirements, fraud prevention and our general analytics: All of these allow us to provide you with a ship-shape experience with LJS. Our usage may include:

• providing our products and Service to you, including payment processing and customer support;
• managing our relationship with you, including feedback management, fulfill prizes, provide rewards and offers, registering you for online ordering and other Service, customer surveys, and to process any employment applications or resumes that you may submit;
• improving our Service and Site generally;
• providing you with relevant content, advertisements and messages, including general and personalized electronic and non-electronic direct marketing information and to support our targeted advertising initiatives concerning our products and Service as well as our business partners’ products and services (including promotions, contests, prize draws, competitions, and sweepstakes);
• performing business analytics, including consumer and operations research, to assess the effectiveness of our sales, online service, marketing, and advertising, and to analyze market trends and (future) customer demand;
• securing of our online services and in-restaurant technology, including the detection, prevention, and investigation of attacks and providing you with a safe, secure and efficient experience; ;
• protecting the rights, safety, health, and security of our customers, our employees, our franchisees, and the general public, and to protect our Sites, Service and property;
• anonymizing your information for further internal and external use in a manner that does not identify you;
• obtaining parental consent from visitors under 18 years of age, when necessary and provide any necessary notices o visitors or their parent(s) or legal guardians if situations prompt such notification;
• complying with legal obligations, our policies, or our applicable codes of conduct; and
• establishing, exercising or defending a legal claim.

We may use the information we collect about you in other ways, which we will tell you about at the time we collect it or before we begin using it for those other purposes, and in any other way with your consent.

If we are established in the EU or the European Economic Area (“EEA”) or are otherwise subject to the General Data Protection Regulation (“GDPR”), we process your personal information on the basis of

• the necessity to perform a contract we have concluded with you or the necessity to take steps at your request prior to entering into such a contract (Article 6(1)(b) GDPR);
• our prevailing legitimate interest to personalize and improve your overall customer experience and achieve the purposes set out above (Article 6(1)(f) GDPR);
• the necessity to comply with legal obligations to which we are subject (Article 6(1)© GDPR); or in some cases,
• your consent for which we may ask you in a separate process (Article 6(1)(a) GDPR).

We may share non-personal information without restriction. We do not sell your personal information and only share your information as described in this Privacy Statement or as otherwise communicated to you at the time we collect your information. We may have arrangements with online advertising networks and analytics companies that may potentially be considered a sale under some state laws. In general, if we share your information with a third-party we will require them to agree to protect your privacy, comply with all applicable legal regulations, and otherwise adhere to our confidentiality requirements. Please reference our Additional Notice for California Consumers in the US Country Specific Addendum (below) for more information.

We may share your personal information with:

• Our Corporate Family. We may share your information with members of the LJS corporate group, which may include our subsidiaries, parents, and other affiliates (“LJS Entities”). This may involve sharing your information to improve our Service and our Sites, enhance fraud protection, process your resume and/or employment application, and other purposes related to our business.

Our Business Partners and Vendors. This may include vendors who help us staff and operate our business (including information technology service providers working to support the Site’s technical operations and vendors that we use as well as those who use the information to detect or prevent fraud for us, and who may use the information to provide fraud detection and prevention services to others), our advisors (such as our lawyers, accountants and other professional advisors) and business partners if they are involved in your customer experience, including product or service delivery (such as food delivery platforms).

• Our Franchisees, Licensees and Co-Sponsors. This privacy policy does not apply to data processed solely by our franchisees on their own behalf in connection with restaurants, websites, or applications they own and independently operate. Nonetheless, we do share information with our franchisees to ensure you have a seamless experience. We may also share information if we offer a co-branded promotion with our co-sponsor.

• Government and Public Law Enforcement Authorities. We may share your information as required or permitted by law, including sharing with governmental agencies, law enforcement, or authorized third parties, in response to a verified request relating to a criminal investigation or alleged illegal activity or any other activity that may expose us, you, or any other party to legal liability, or in response to a valid court order or subpoena.

• Our Transactional Partners. We may share your information with buyers or other parties involved in a corporate transaction such as a sale, merger, acquisition or other similar business transaction or combination.

• Enforcing Our Rights. We may share your information to enforce the Terms of Use or other agreements where we need to enforce our rights, including billing and collections, and to investigate any suspected violations of any law, rule, regulation, or our Terms of Service.

• Other Entities. We may disclose your information to other parties at your request or if you otherwise consent to the disclosure.

We may also share your information for any other purpose that we disclose when you provide the information, or if we obtain your consent.

Some content or applications on our websites may be served by third parties, content providers and application providers including the following:

• Plugins. Our websites make available the option for you to use “plugins” that are operated by social media companies. If you choose to use one of these plugins, then it may collect information about you and send it back to the social media company that owns it. This may happen even if you do not click on the plugin, if you are logged into the social media website that owns the plugin when you visit our website. Information collected by a plugin is subject to the privacy policy and terms of the social media company that makes it. If you do not want the social media company who owns a plugin to collect information about you when you visit our websites, sign out of the social media network before visiting. By interacting with a plugin when you are on our websites (for example, clicking the Facebook “Like” button), you are intentionally transferring information to that social media company. Further, if you are logged into a social media website when you visit our websites, then you are directing us to share your data with the social media company that owns the plugin. We may use plugins on our websites from third parties, including (but not limited to) Facebook, Twitter, Pinterest, YouTube, Instagram, SnapChat, TikTok or other social media partners. Those websites have their own privacy policies and terms and you should refer to those companies for their specific privacy policies.

• User Content. Our Sites may allow you to upload your own content to public areas of the website. Any information you submit becomes public information, and we do not control how others may use the content you submit. We are not responsible for uses that may violate our privacy policy, the law, or your intellectual property rights.

We at LJS appreciate how important it is to protect your privacy when you use our online services, including the privacy of our children who visit or use our Sites and Service. We do not direct our websites to minors and we do not knowingly collect personal information from Children under 13. If we become aware of children under the age of 13, we will delete such information in accordance with applicable law. We may offer certain features on our online services, such as games, coloring activities, and digital books, that children can use without providing any personal information.

We urge all parents and/or guardians to exercise appropriate supervision and monitor their children’s online activities. If you become aware of a child’s information being shared with us in violation of this age limitation, please contact us at Long John Silvers, LLC, 10350 Ormsby Park Pl., Suite 300, Louisville, KY 40223, Attention: Children’s Online Privacy Act - Information Request, email us at customer.privacy@ljsilvers.com or by calling Us at 502-815-6100.

To learn more about how to protect your child online, we suggest you visit www.OnGuardOnline.gov and read the helpful information provided by the FTC at https://www.consumer.ftc.gov/articles/0031-protecting-your-childs-privacy-online.

We are committed to taking appropriate measures designed to keep your personal information secure. Our technical, organizational and physical measures are designed to protect personal information from accidental, unlawful or unauthorized loss, access, disclosure, use, alteration, or destruction. While we make efforts to protect our information systems, no website, mobile application, computer system, or transmission of information over the internet or any other public network can be guaranteed to be 100% secure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to take care when providing information in public areas of our websites like message boards, which any website visitor can view.

We keep your information for the length of time needed to carry out the purposes outlined in this Privacy Statement and to adhere to our policies on keeping records (unless a longer period is needed by law). Our records policies reflect applicable laws. We will retain and use your information to the extent necessary to manage your relationship with us, personalize and improve your overall customer experience, and to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this Statement.

LJS seeks to provide you with multiple ways to control the ways that LJS collects and maintains your Personal Information. Many of these options involve how we market to you and personalize your experience with LJS, and are designed to provide you with better rewards, benefits and options when you choose to use our Services. Disabling certain features or limiting the information available may limit our ability to improve your experience through more targeted and focused advertisements for the Services you prefer.

Your rights may vary depending upon where you are located. Certain consumers, such as California, Colorado, Connecticut, and Virginia residents, may have additional legal rights as explained below. Ultimately, you always have the ability to update your communication and marketing preferences and update and change your information provided to LJS, and we have created mechanisms to provide you with the following control over your information.

Your Communication and Marketing Preferences

If you do not want us to use your email address or contact information to promote or recommend products or Services, do not opt-in to those communications. If you have subscribed or opted into our marketing communications and no longer wish to receive these communications you can opt out by following the instructions provided in those communications. You can also generally find your communication preferences in your account information, and you can change your communication preferences in most device settings. You can also opt-out by contacting us directly at the address provided in this Privacy. If you opt-out, you may still receive messages from us concerning transactions, accounts, and certain competitions or sweepstakes that you may seek to enter. Opting out of one Service or Site does not automatically opt you out of all communications, so if you opt out of email communications you may still receive text messages.

Your Rights Concerning Your Personal Information

You can always change or update your personal information by accessing your account settings. Under applicable law, you may have the rights to the following (consistent with such laws):

• to check whether and what kind of personal information we hold about you and to access or to request copies of such data;
• to request correction, supplementation, anonymization, blocking or deletion of information about you that is inaccurate, incomplete, outdated, unnecessary, excessive or processed in non-compliance with applicable requirements;
• to request the restriction of the collection, processing or use of information about you;
• in certain circumstances, to object for legitimate reasons to the processing of your information or to revoke consent previously granted for the processing while the latter does not affect the lawfulness of processing before the revocation;
• to request data portability; and
• to lodge a complaint with the competent authority.

If you would like to make a change to update or delete your Personal Information, you can contact us as set forth below or at customer.privacy@ljsilvers.com to request access to, correction of, or deletion of information you have provided us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or negatively affect the information’s accuracy.

Disabling Automated Data Collection Technologies and Cookies

As noted above, you may be able to enable or disable automated data collection technologies by adjusting the permissions on your device. Be aware that if precise location services are disabled, other means of establishing or estimating location (e.g., connecting to Wi-Fi, Bluetooth, beacons, or our networks) may persist.

We and third-party vendors may use first-party cookies or other first-party identifiers, as well as third-party cookies or other third-party identifiers, to deliver advertisements, create a profile about you, measure your interests, detect your demographics, detect your location, and personalize content. To learn more about how third-party tracking technologies manage the privacy of your information and how to opt-out of information collection by these networks, please visit: youradchoices.com, optout.networkadvertising.org, or other similar sites.

Mobile App Permissions and Uninstallation

You may be able to enable or disable certain features related to our mobile app (e.g., location tracking and push notifications) by adjusting the permissions on your device. If you do not want to continue to provide us information through the mobile app, you may uninstall our mobile app from your device.  If you want to delete your LJS account, you can do so in the settings of the mobile app or contact us.

State Privacy Laws

As noted above, if you are a resident of certain states you may have additional personal rights and choices concerning your personal information. Certain disclosures are made in this policy to certain residents of other states as set forth herein.

While LJS has franchisees and licensees in multiple countries, LJS currently only operates in the United States. To support our domestic operations, the majority of our computer systems, networks, and devices are based in the United States. Accordingly, if you are visiting our Sites, Your personal information obtained through our Sites and Services may be processed in the United States. By accessing our services, you consent to the collection and processing of your personal information in the United States.

From time to time, LJS may offer a loyalty and rewards program (the “Program”). When available, you may opt into the program by signing up for an account, which you may terminate by contacting us. Certain terms herein may be capitalized, and have the same meaning as those terms are used in the California Consumer Privacy Act and/or applicable state Privacy act that applies to your particular circumstances. If you would like to learn more about our offers and Rewards program, you can click on the Terms and Conditions here.

LJS may collect certain Personal Information in connection with the Program for the purpose of providing you with Program benefits. Some of this information may be information you provide (and as discussed above) such as your name, phone number and email account, address, and certain account information such as your log-in account username and password. When available, we provide the Program to help provide a positive, ship shape experience for You. We do not Sell or Process for Targeted Advertising the Personal Information we Collect in connection with the Program. We may disclose the Personal Information identified above to vendors who help us to administer the Program. We do not disclose the Personal Information we Collect in connection with the Program to Data Brokers.

Should you sign up and opt into the program, and later determined that you want to terminate your Program membership, we may ask you to confirm that you want to terminate your membership in accord with certain state laws such. If you choose to retain your membership following receipt of this message, we may continue to use your Personal Information to provide you with the Program and relates Services as permitted by applicable law. If you choose to delete your account following receipt of our confirmation message, please note that we will not have enough information about you to provide you with Program benefits.

We may change our Privacy Policy at any time, and the effective date above identifies the last date that a change was made. This statement is in effect as of the date at the top of this Policy. Should we change this Privacy Policy, we will post the revised version here and change the “last updated date” (the date it applies from) at the top of the statement and/or contact you directly where we deem appropriate to do so under applicable law. You should check here regularly for the most up-to-date version of the statement.

Should you need to contact us at any time about this Privacy Policy or your Personal Information you can reach us at:

Long John Silvers, LLC
Attn: Legal Department, Data Privacy Officer
10350 Ormsby Park Pl., Suite 300
Louisville, KY 40223
customer.privacy@ljsilvers.com

This part of our Privacy Statement applies to consumers who reside in the states of Connecticut, Colorado, Utah and Virginia.

1. Targeted Advertising. Like many companies, LJS processes personal information for targeted advertising. You can opt-out of targeted advertising by visiting the Digital Advertising Alliance website or the Network Advertising Initiative website. You can also opt-out of targeted advertising by (a) submitting an opt out request to us, and by (b) clicking on Cookie Settings on LJS’s website and disabling cookies, or otherwise disabling cookies on your device or in your browser.

2. Privacy Rights. Under applicable law, you may have the following rights, in each case under the conditions and to the extent set out in applicable law:

• Right of Access: A right to confirm whether LJS is processing personal information about you, and to request to access such personal information (including, if applicable, in a
  portable and readily usable format).

• Right of Correction: A right to correct inaccuracies in certain personal information LJS may hold about you; and

• Right of Deletion: A right to request that LJS delete personal information concerning you. Please note that if you have requested a service that requires the use of your
  personal information, we may not be able to provide that service if you choose to delete your personal information.

If any of the above rights are available to you under applicable law, you can submit a request to exercise your rights by contacting us above.

If your rights request is denied, applicable law may give you a right to lodge an appeal with us. The response to your rights request will inform you of any appeal rights you may have, and tell you how you can exercise them.

Effective Date: October 7, 2023
Last Reviewed: October 7, 2023

This Privacy Notice of California Residents supplements the information contained in Long John Silver’s (“LJS”, “we,” “us,” or “our”) website privacy policies and describes our privacy practices with respect to individuals who reside in the State of California (“consumers” or “you”).

The California Consumer Privacy Act (as amended by the California Privacy Rights Act and together with related regulations the “CCPA”) is a state law intended to enhance privacy rights and Consumer protection for residents of California. This California notice applies to California Consumers that visit restaurants or otherwise use our Sites or Services.

In the event of a conflict between any other LJS policy, statement, or notice and this California notice, this California notice will prevail as to California Consumers’ rights under the CCPA. Capitalized terms defined in the CCPA that are used in this California notice shall have the same meaning as in the CCPA. Unless otherwise noted, the disclosures contained within this California notice cover our activities in the prior 12 months from the Effective Date as well as our current practices.

The CCPA defines Personal Information as information that identifies, relates to, describes, is capable of being associated with or could reasonably be linked, directly or indirectly, with a particular Consumer or household. Under the CCPA, California Consumers have certain rights that they may exercise independently or through an authorized agent. CCPA rights requests are subject to an identification and verification process. We will not fulfill a CCPA request unless we have been provided sufficient information for us to reasonably verify the identity of the requestor and the validity of the request. We will not discriminate against you if you exercise any of the rights provided by the CCPA. We encourage you to take an active role in the management of your privacy.

This Privacy Notice does not apply to information we collect when:

• You are acting as a job applicant to us;
• You are acting in your capacity as a current or former employee, owner, director, officer, medical staff member, or contractor for us;
• You have been designated as an emergency contact for one of the persons listed above and your information has been collected for use solely within that context;
• We need your personal information to administer benefits obtained through one of the persons listed above.

For information on our privacy practices as they relate to any of the above persons contact us by using the contact information set forth below.

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (" personal information"). However, personal information does not include:

• Publicly available information from government records.
• Deidentified or aggregated consumer information.
• Information excluded from the CCPA’s scope, like:
• health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information
  Act (CMIA) or clinical trial data;
• personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

Specifically, we collect the following categories of personal information:

We collect and share personal information in the above categories for the following business purposes:

• To register you as a new customer.
• To verify your identity so that we can respond to a request you make under the applicable law.
• To send you products that you have ordered, including to process payment, provide you updates about the status of your order, and process product returns.
• To manage our relationship with you which may include notifying you about changes to our terms or privacy policy, providing you notices about your account, asking you to leave a review or take a survey, addressing any concerns you may have about our products or services.
• To send samples that you have requested or to contact you for market research purposes.
• To provide you with the information, products, services or support that you request form us or to fulfill any other purpose for which you provide it.
• To deliver relevant content, advertisements, and messaging to you and to measure or understand the effectiveness of such content, advertisements, and messaging.
• To allow you to enter a sweepstake, contest or promotion that we may offer. If we plan to make additional uses of data collected in connection with any sweepstake, contest, or promotion, we will inform you at the time of entry. If we offer a co-branded promotion, then our co-sponsor may have different privacy practices, which we will inform you about before you provide your information.
• To use data analytics to improve our website, products or services, marketing, customer relationships, and experiences.
• To make suggestions and recommendations to you about our own and third-parties’ products or services that may be of interest to you. If you do not want us to use your information in this way or for more information on how to adjust your preferences, see First FAQ
• To help maintain the safety, security, and integrity of our services, databases and other technology assets, and business.
• To report to regulatory authorities as required by law.
• To respond to law enforcement requests and other requests as required by applicable law, court order, or governmental regulations.
• To protect and enforce our and others’ intellectual property rights; to protect or defend our legal rights or property, our services, or other users; and to protect the health and safety of our services’ users or the general public.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about consumers is among the assets transferred.
• As described to you when collecting your personal information.
• For any purpose with your consent.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Except as otherwise permitted or required by applicable law or regulation, we will only retain your Personal Information (which includes the categories of Personal Information set forth in the charts and sections above) for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal obligations, or as necessary to resolve disputes. To determine the appropriate retention period for Personal Information, we consider applicable legal requirements, the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes we process your Personal Information for, and whether we can achieve those purposes through other means. We will maintain certain types of Personal Information for a limited duration.

We do not sell personal information of our consumers and have not sold any such personal information within the last twelve months. We Share with Third Parties for marketing and advertising our Services and Sites to customers the following categories of Personal Information, which in some cases may be considered a Sale under California law:

• Category A: Identifiers
• Category B: California Customer Records personal information categories. Internet or other electronic network activity information
• Category D: Commercial Information
• Category F. Internet or other similar network activity
• Category G. Geolocation data
• Category F. Inferences drawn from other personal information.

We Sell and/or Share this Personal Information to Third Parties solely for advertising purposes to improve our marketing efforts to You. The Third Parties to whom this Personal information was Sold and/or Shared are advertisers and analytics vendors. When we use the term Sell, Sold, or Sale we mean for valuable consideration and not monetary value.

We offer you the ability to opt-out of these Sales and Sharing as set forth in the “Opt Out” Section below.

In the last twelve (12) months, we have collected or disclosed the following categories of personal information for a business purpose:

Categories of information collected in the last 12 months

• Category A: Identifiers.
• Category B: California Customer Records personal information categories.
• Category D: Commercial information.
• Category F: Internet or other similar network activity.
• Category G: Geolocation data.
• Category K: Inferences drawn from other personal information.

How we collected this information

We collected the above categories of your personal information from the following sources:

• Directly from you. For example, from forms you complete to enter promotions, to make comments or inquiries concerning products you purchase and services you may obtain when you reach out to us online or offline.
• Indirectly from you. For example, from observing your actions as you use our Services.
• From our service providers. This includes businesses that collect your personal information on our behalf in order to help us respond to consumer inquiries, conduct market research, and comply with legally mandated disclosure requirements.
• From other third parties. For example, when you make a comment on a third-party website such as social media, we may collect your name and contact information to respond to your concern.

Why we collected personal information

We have collected and disclosed personal information in the above categories for the following business purposes:

• To register you as a new customer.
• To verify your identity so that we can respond to a request you make under the applicable law.
• To send you products that you have ordered, including to process payment, provide you updates about the status of your order, and process product returns.
• To manage our relationship with you which may include notifying you about changes to our terms or privacy policy, providing you notices about your account, asking you to leave a review or take a survey, addressing any concerns you may have about our products or services.
• To send samples that you have requested or to contact you for market research purposes.
• To provide you with the information, products, services or support that you request form us or to fulfill any other purpose for which you provide it.
• To deliver relevant content, advertisements, and messaging to you and to measure or understand the effectiveness of such content, advertisements, and messaging.
• To allow you to enter a sweepstake, contest or promotion that we may offer. If we plan to make additional uses of data collected in connection with any sweepstake, contest, or promotion, we will inform you at the time of entry. If we offer a co-branded promotion, then our co-sponsor may have different privacy practices, which we will inform you about before you provide your information.
• To use data analytics to improve our website, products or services, marketing, customer relationships, and experiences.
• To make suggestions and recommendations to you about our own and third-parties’ products or services that may be of interest to you. If you do not want us to use your information in this way or for more information on how to adjust your preferences, see Nineteen FAQ
• To help maintain the safety, security, and integrity of our services, databases and other technology assets, and business.
• To report to regulatory authorities as required by law.
• To respond to law enforcement requests and other requests as required by applicable law, court order, or governmental regulations.
• To protect and enforce our and others’ intellectual property rights; to protect or defend our legal rights or property, our services, or other users; and to protect the health and safety of our services’ users or the general public.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about consumers is among the assets transferred.
• As described to you when collecting your personal information.
• For any purpose with your consent.

Who we have shared this information with for a business purpose

For each of the above categories, we shared your personal information with the following categories of third parties:

• Service providers and vendors
• Taxing entities
• Insurance companies
• Legal counsel
• Governmental agencies
• Our parent and affiliated companies who directly support our activities

The CCPA gives California Consumers certain rights:

Right to know about Personal Information Collected, Disclosed, Shared, or Sold

You have the right to know about your Personal Information that we are currently maintaining and have Collected and disclosed in the 12-month period prior to the date you submit your request. You also have the right to obtain a transportable copy of such Personal Information. Requests of this nature may be made no more than twice in a 12-month period. Please note that we retain Personal Information for various time periods in accordance with applicable law and our internal recordkeeping policies and procedures.

Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information. The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
  • sales, identifying the personal information categories that each category of recipient purchased; and
  • disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Right to request deletion of Personal Information

You may request that we delete your Personal Information that we have Collected directly from you and are currently maintaining. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, uncles an exception applies. Please note that we may have a legal basis for retaining certain Personal Information under the CCPA, despite your request. Requests of this nature may be made no more than twice in a 12-month period.

Right to opt-out of the Sale and Sharing of Personal Information

We engage in Sales and/or Sharing via tracking technologies such as cookies and SDKs through our Services and when you visit our Sites. You have the right to opt-out of the Sale and Sharing of your Personal Information in the context of cookies or other tracking technologies. To opt out of Sale and Sharing via cookies and other tracking technologies, please click Manage cookie settings.

You may also opt out of the Sale and/or Sharing of your Personal Information via cookies and other tracking technologies through an opt-out preference signal. In order to process your request through an opt-out preference signal, you must use a browser supporting the preference signal. If you choose to use an opt-out preference signal, you will need to turn it on for each browser and each device you use.

Right to correct Personal Information

You may request that we correct Personal Information that we maintain about you if you believe such Personal Information is inaccurate. We may request documentation from you in connection with your request. We will also require you (or your agent) to be verified before honoring your correction requests. Upon receipt of a verifiable request to correct inaccurate Personal Information, we will use commercially reasonable efforts to correct the information as you direct. You can also correct certain Personal Information that we maintain about you by logging into your account when such accounts are available.

Right to limit use of your sensitive Personal Information

We do not use sensitive Personal Information for the purpose of inferring characteristics about you, or for any other reasons besides the permitted Business Purposes. For this reason, we do not treat the Sensitive Personal Information we Collect as subject to a limit use of Sensitive Personal Information request and, therefore, we do not offer a way for you to submit such a request.

Right to non-discrimination for the exercise of your privacy rights

We will not discriminate against you if you choose to exercise any of the privacy rights described above.

You may submit CCPA-related requests to LJS by contacting us at customer.privacy@ljsilvers.com, calling us at 502-815-6100 (option 1), or by sending us a written notice at Long John Silver’s, LLC, Attn: General Counsel, 10350 Ormsby Park Pl., Suite 300, Louisville, KY 40223.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may designate an authorized agent to make a request on your behalf by registering such person or entity with the California Secretary of State. You may only make a verifiable consumer request for access or data portability twice within a 12-month period.

Your request must be verifiable. The request must (1) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which may include requiring you to provide us at least two data points, depending on the type of personal information you are requesting to know or are requesting to be deleted, and (2) describe your request with enough detail that allows us to properly understand, evaluate and respond to it. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing within forty-five (45) days of receiving your verifiable consumer request. We will deliver our written response by electronically to an email address provided by you or, if no email address is available, in written form. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

California law permits customers in California to request certain details about how their personal information is shared with third parties, and in some cases affiliates, if personal information is shared for those third parties’ or affiliates’ own direct marketing purposes. We do not share personal information with third parties or affiliates for those third parties’ or affiliates’ own direct marketing purposes. Californians may request information about our compliance with this law by contacting us at customer.privacy@ljsilvers.com or by sending a letter to the address identified above. Any such request must include your name and “California Shine the Light Privacy Rights Request” in the first line of the description and, if sent by mail, must include your street address, city, state, and zip code. Please note that “Shine the Light” rights and CCPA rights are granted by different laws and must be exercised separately.

California residents under the age of 18 who have registered to use the services, and who have posted content or information on or through the services, can request that such information be removed by contacting us at customer.privacy@ljsilvers.com  or by sending a letter stating that they personally posted such content or information and detailing where the content or information is posted, to the address identified above. We will make a reasonable good faith effort to remove the content from prospective public view or anonymize it so the minor cannot be individually identified. However, this removal process cannot ensure complete or comprehensive deletion from the Internet. For instance, third parties may have republished the content or archived copies of it may be stored by search engines or other parties that we do not control.