Five & Done, LLC and its affiliates and subsidiaries (collectively, "Five & Done," "we," "us," "our") provide creative design and technology services. This Privacy Policy ("Privacy Policy") describes how Five & Done collects, uses, and discloses personal information we collect online (e.g., through our websites, like fiveanddone.com ("Websites")), through our products and services, as well as offline through in-person interactions (collectively, the "Services"). This Privacy Policy explains the types of personal information we collect, how we may use and disclose your personal information, and the privacy choices that you have with respect to how we handle your personal information.

Please note, most personal information Five & Done processes is collected on behalf of business owners or companies (each, a “Client”) that use our Services and their interactions with you through their use our Services. For more information on how a Client uses personal information, including information collected through the use of our Services, please refer to the applicable Client’s privacy policy or contact them directly. This Privacy Policy does not apply to any websites, products, or services offered by any company that we do not own or control or any individual that we do not employ or manage.

How We Collect Information

Types Of Information We Collect.

How We Use And Process Information

How We Disclose Information.

Cookies And Other Tracking Technologies

Links To Third-Party Websites

Retention

Security

Your Privacy Rights and Choices.

Minors

Changes To This Privacy Policy

Contact Information

We may collect personal information from various sources, including:

• From you. We may collect personal information and other information you provide when you use our Services, like signing up for our newsletter through our Website, and any other data that you choose to provide.
• From public or third-party sources. We may collect data from public sources including, but not limited to, social media and other websites that enable social sharing. Personal information may also be available from third party service providers or business partners. We also may combine information we have collected from multiple sources.
• Automatically when you engage with us online. We collect data through our Services and automatically from devices that you use to connect to our Services

We provide creative design and technology services. In that capacity we receive personal information from our Clients and process that information on behalf of our Clients. In other situations we receive personal information for our own use. The following provides examples of the type of information that we collect from you and how we use that information.

In addition to the information that we collect from you directly, or from our Clients, we may also receive information about you from other sources, including third parties, business partners, our affiliates, or publicly available sources. For example, if you submit a job application, or become an employee, we may conduct a background check.

We may use and share Non-Identifiable Data (e.g., non-personal, de-identified information that cannot be used to identify you) for any lawful business purpose without any obligation or accounting to you. When we do so, we will take reasonable measures to ensure that the Non-Identifiable Data is not personally identifiable and cannot later be used to identify you.

In addition to the purposes and uses described above, we use information in the following ways:

• To identify you when you visit our website or Client websites.
• To provide products and services.
• To improve our services and product offerings.
• To conduct analytics.
• To respond to inquiries related to support, employment opportunities, or other requests.
• To send marketing and promotional materials, including information relating to our products, services, sales, or promotions.
• For internal administrative purposes, as well as to manage our relationships.
• To comply with applicable law, our legal and regulatory obligations, and to participate in litigation and investigations.
• To identify, investigate, and respond to fraud and improper illegal activity (such as incidents of hacking or misuse of our Services) to protect us, you, third parties, and the public in general.

Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose. For example, if you retain us to provide consulting services we may collect your information to perform our contract with you, but we also collect your information because we have a legitimate interest in understanding who our Clients are and what services we perform on their behalf. As a result, our collection and processing of your information is based in different contexts upon your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in conducting our business.

In addition to the specific situations discussed elsewhere in this Privacy Policy, we disclose information in the following situations:

• Affiliates and Acquisitions. We may share your personal information with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). In the event we undergo a business transaction such as a merger, acquisition by another company or sale of all or a portion of our assets, your personal information may be among the assets transferred. If we engage in such a sale or transfer, we will – where required by applicable law – make reasonable efforts to direct the recipient to use your personal information in a manner that is consistent with this Privacy Policy. After such a sale or transfer, you may contact the recipient with any inquiries concerning the processing of your personal information.
• Other Disclosures with Your Consent. We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this policy.
• Compliance with Legal Obligations. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third party intermediary.
• Public. Some of our Client websites may provide the opportunity to post comments, or reviews, on a message board or in a public forum. If you decide to submit information on these pages, that information may be publicly available.
• Service Providers. We may share your information with service providers we engage to perform services on our behalf or others with whom we collaborate to provide the Services. Among other things service providers may help us to administer our website, conduct surveys, provide technical support, process payments, and assist in the fulfillment of orders.

We take reasonable steps to ensure that any third parties that process your information do so in accordance with the representations in this Privacy Policy.

We will not sell your personal information to third parties to use for their own benefit. We may also disclose Non-Identifiable Data at our discretion.

We may use cookies, beacons, tags, scripts, and other tracking technologies (e.g., Google Analytics) with our Services to help us understand your preferences and improve our Services, like saving your account settings and for authentication. Please note that if you adjust your web browser settings or opt-out of the use of certain cookies from us, some of the functions and features of our Services may not be available to you.

We may post links to third-party websites that are not owned or operated by us on our Website. Please be aware that we are not responsible or liable for any content, advertising, products, or other materials from such third-party websites or for any privacy or other practices of the third parties operating those websites.

We keep personal information as long as it is reasonably necessary for the purposes described in this Privacy Policy or otherwise in compliance with our data retention policies. Certain categories of personal information may be retained until the time limit for any legal challenges has expired or in order to comply with regulatory requirements regarding the retention of such personal information. We will take reasonable steps to delete your personal information if such information is no longer required for the purpose for which it was collected and we are not required to retain it under applicable law.

While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, no method of transmission over the Internet, or method of electronic storage, is fully secure. Accordingly, we cannot guarantee, ensure, or warrant the security of the personal information you transmit or provide to us, so you do so at your own risk.

You can make the following choices regarding your personal information:

• Promotional Emails. You may choose to provide us with your email address for the purpose of allowing us to send free newsletters, surveys, offers, and other promotional materials to you, as well as targeted offers from third parties. You can stop receiving promotional emails by following the unsubscribe instructions in e-mails that you receive. If you decide not to receive promotional emails, we may still send you administrative or Service-related communications.
• Promotional Mailings. If at any time you do not want to receive offers and/or circulars from us you can remove yourself from our mailing lists by emailing us (our contact information is below) with "NO SNAIL MAIL" in the subject line along with your name, address and zip code. Please note that our mailings are prepared in advance of their being sent. Although we will remove your name from our mailing list after receiving your request, you may still receive mailings from us that had been initiated prior to your name being removed.
• Access To Your Personal Information. For information that we collect on our own behalf we will grant you, where required by law, reasonable access to the personal information that we have about you. You may request access to your personal information by contacting us at the address described below. If we are processing your information on behalf of one of our Clients we will forward your request to that Client and await instructions on whether access should be granted.
• Changes To Your Personal Information. You can contact us at the address described below in order to request that your information be modified. If we are processing your information on behalf of one of our Clients we will forward your request to that Client and await instructions on any changes that they believe are appropriate. For information that we collect on our own behalf, we rely on you to update and correct your personal information. Most of our Websites allow you to modify or delete your account profile. If our Website does not permit you to update or correct certain information, you contact us at the address described below in order to request that your information be modified. We may keep historical information in our backup files as permitted by law and in accordance with our data retention policies.
• Deletion of Your Personal Information. We typically retain personal information that we collect on our own behalf for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. You may request information about how long we keep a specific type of information, or request that we delete your personal information, by contacting us at the address described below. If we are processing your information on behalf of one of our Clients, we will forward your request to that Client and await instructions from them on whether your information should be deleted.
• Revocation Of Consent or Objections. You may revoke consent to processing (where our processing is based upon consent), or object to our processing (where our processing is not based upon your consent) by contacting us at the address described below. If you revoke your consent / object, then we may no longer be able to provide you services. In some cases we may limit or deny your request to revoke consent / object if the law permits or requires us to do so, or if we are unable to adequately verify your identity. If we are processing your information on behalf of one of our Clients we will forward a revocation of consent to that Client and await instructions from them on whether the processing to your information should cease.
• Online Tracking. We do not currently recognize automated browser signals regarding tracking mechanisms, which may include "Do Not Track" instructions.
• Information for California Residents. California law indicates that organizations should disclose whether certain categories of information are collected, "sold" or transferred for an organization's "business purpose" (as those terms are defined under California law). You can find a list of the categories of information that we collect and share here. Please note that because this list is comprehensive it may refer to types of information that we share about people other than yourself. If you would like more information concerning the categories of personal information (if any) we share with third parties or affiliates for those parties to use for direct marketing please submit a written request to us using the information in the "Contact Information" section below. We will not restrict or deny you access to our products and services because of the choices you make in connection with your personal information, but please note, certain choices may affect our ability to deliver our Services. For example, if you ask us to delete your account, you will not be able to use of our Services.

Please address written requests and questions about your privacy rights and choices to privacy@fiveanddone.com or call us at (833) 590-2525.

Note that, as required by law, we will require you to prove your identity. We may conduct an identity verification by phone call or email. Depending on your request, we will ask for information such as your name, the last item you purchased from us, or the date of your last purchase from us. We may also ask you to provide a signed declaration confirming your identity. Following a request, we will use reasonable efforts to supply, correct or delete personal information about you in our files.

In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. We will require verification that you provided the authorized agent permission to make a request on your behalf. You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us.

There may be situations where we cannot grant your request. Where we deny your request, in whole or in part, we will take steps to inform you of the denial and provide an explanation of our actions and the reasons for the denial.

We may transfer your personal information for processing in countries other than the country in which you initially provided the information for the purposes described in this Privacy Policy. For example, if you are located outside of the United States, we typically transfer and process all personal information in the United States, where Five & Done is headquartered. The countries to which we transfer personal information may not guarantee the same level of protection for personal information as the one in which you reside. However, we will handle your personal information in accordance with this Privacy Policy regardless of where your personal information is processed.

We do not knowingly collect the personal information of minors or persons under 16 years of age through our Services. If we learn that we have collected personal information from a minor or person under 16 years of age, we will take reasonable measures to delete such information.

We may change, modify, add, or remove portions of this Privacy Policy at any time. Please refer back to this Privacy Policy periodically to review any updates. If we make material changes to this Privacy Policy, we will post notice of such changes on this page. The revised version of the Privacy Policy will be effective immediately (as indicated by the “Last Updated” date above) but will not apply retroactively.

If you have any questions, comments, or complaints concerning our privacy practices, including this Privacy Policy, please contact us at the appropriate address below.

By Email: privacy@fiveanddone.com

By Mail: Five & Done LLC26940 Aliso Viejo Parkway #110Aliso Viejo, CA 92656(833) 590-2525

In all communications to us, please include the email address used with your account (if applicable), the website address or the specific Service to which you provided personal information, and a detailed explanation of your request. We will do our best to respond to all reasonable requests in a timely manner.

If you are not satisfied with our response, and are in the European Economic Area or the United Kingdom, you may have a right to lodge a complaint with your local supervisory authority.