3. HOW EACH CATEGORY OF PERSONAL DATA IS USED

We will use the categories of Personal Data collected for the processing purposes listed below. For data subjects located in the EEA or the UK (or anywhere else where such information is required), we provide our legal basis for processing under Article 6, GDPR.

NEED DETAILS

4. CATEGORIES OF THIRD PARTIES WHO MAY RECEIVE YOUR PERSONAL DATA FROM US
We may disclose your Personal Data to various third parties. Some third parties act as our service providers with whom we have shared your Personal Data for a business purpose. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the Personal Data confidential, and prohibit using the disclosed information for any purpose except performing the contract.The table below describes the categories of third parties with whom we may disclose your Personal Data and our business purpose for that disclosure.
We do not sell Personal Data for monetary consideration, but we may share Personal Data to certain third parties for purposes of targeted advertising. We include a column in the table below that describes what categories of Personal Data are shared for purposes of targeted advertising with which categories of third party recipients.

NEED DETAILS
5. SOCIAL MEDIA, BLOGS, REVIEWS, SIMILAR SERVICES, AND OTHER TECHNOLOGIES
Any posts or comments you make to us on social media will be shared under the terms of the relevant social media platform (for example, Facebook or Twitter) on which they are made and could be made public by that platform. These platforms are controlled by third parties and not by us, so we are not responsible for this sharing. You should review the terms and conditions and privacy policies of the social media platforms you use to ensure you understand how they will use your information, what information relating to you they will place in the public domain and how you can stop them from doing so if you are unhappy about it.
Any blog, review, or other posts or comments you make about us, our products, and services on any of our blog, review, or user community services will be shared with all other members of that service and the public at large.
You should ensure that any comments you make on these services, and on social media in general, are fit to be read by the public, and in particular are not offensive or defamatory. You are responsible for ensuring that any comments you make comply with any relevant policy on acceptable use of those services.
We or one of our business partners may use web cookies, pixels, web beacons, and other standard internet technologies to track your use of the Websites. We may also include these technologies in e-mail messages or newsletters to determine whether messages have been opened and acted upon. Some of these may pass information about your interactions to our business partners.

6. SECURITY OF YOUR INFORMATION
We have generally taken reasonable measures to protect the confidentiality and integrity of your Personal Data by implementing administrative, technical, and physical controls appropriate to the type, amount, and character of Personal Data we process. For example, Personal Data provided through the Websites is stored on our secure servers, or those of third parties providing us with IT-related services or resources, and is protected and controlled through modern access control methods.
Where we have given you, or you have chosen, a password which enables you to access your account or certain parts of the Websites, you are responsible for keeping the password confidential and must not share it with anyone. You are responsible for any actions carried out using your password except where there has been fraud.

7. THIRD PARTY LINKS
The Websites may contain links to the websites of third parties. If you follow a link to any third-party website, please note that these websites will have their own privacy policies and we do not accept any responsibility or liability in respect of the same.

8. CHILDREN
The Websites are not intended for children (under 18 years of age) and we do not knowingly collect data relating to children. We will not knowingly process sensitive data or Personal Data collected from a child without obtaining parental consent. If you believe that we may have collected Personal Data relating to a child, please contact us immediately by emailing us at privacyresponse@vest.com.

9. YOUR RIGHTS AND CHOICES
You have several rights in relation to your Personal Data under applicable privacy and data protection law, which may be subject to certain limitations and restrictions. Depending on your country or state of residence or domicile, you may have other legal rights over the information we collect from you and your devices. We will honor all such rights as required by applicable law. Please see the descriptions of the data rights below and the methods for submitting such a request.
Rights Specific to Persons in the European Economic Area and United Kingdom (GDPR)
You have a right to object to the processing of your Personal Data in those cases where we are processing your Personal Data in reliance on our legitimate interests. In such a case, we will stop processing your Personal Data unless we can demonstrate compelling legitimate interests which override your interests, and you have a right to request information on the balancing test we have carried out.
You also have the right to object where we are processing your Personal Data for direct marketing purposes. We provide the means for you to stop all email and text (SMS or MMS) communications you receive from us – please see the "unsubscribe" link and "STOP" details we include in each email and text respectively. You can also contact us at any time using the details below and let us know what you would like us to change.
If we are processing your Personal Data on the legal basis of consent, you are entitled to withdraw your consent at any time. However, the withdrawal of your consent will not invalidate any processing we carried out prior to your withdrawal and based on your consent.
Rights Available to Residents of Certain US States and Persons in the European Economic Area and United Kingdom
As stated above, California residents should see our Privacy Policy for California Residents by Clicking Here.
Right to Know and Right to Data Portability (CO, VA, CT, UT + EEA/UK)
You have the right to know and access the specific pieces of Personal Data that we collect and maintain about you. Once we receive your request and confirm your identity, we will disclose to you the information that we are required to produce. However, certain exceptions may exist as to what Personal Data we are required to produce. If we are not required to produce certain Personal Data or an exception exists under applicable law then we may inform you of the categories of data that we have not produced, when required by applicable law.
When exercising your right to know, you also have the right to obtain the Personal Data in a portable readily usable format that allows you to transmit the data to another entity. However, certain exceptions may exist under applicable law to our duty to provide you with your Personal Data.
Right to Delete (CO, VA, CT, UT + EEA/UK)
You have the right to delete Personal Data that we have about you, subject to certain exceptions under applicable law. Once we receive your request and confirm your identity, we will review your request to see if any exceptions exist to your request. We will delete or anonymize Personal Data not subject to one of these exceptions from our records and we will direct our service providers to take similar action, when required by law.
Right to Correct (CO, VA, CT + EEA/UK)
You have the right to request that we correct any of your Personal Data that we collected from and/or about you, which is inaccurate. Once we receive your request and confirm your identity, we will review your request and respond accordingly.
Right to Opt-Out of Sale (CO, VA, CT, UT) and Targeted Advertising (CO, VA, CT, UT)
You have the right to opt-out of the processing of Personal Data for the purpose of targeted advertising or the sale of Personal Data.
Right to Non-Discrimination (CO, VA, CT, UT + EEA/UK)
We will not discriminate against you for exercising any of your rights. This means that we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, except that we may offer certain financial incentives (such as loyalty, rewards, premium features, discounts, or club card programs) in exchange for permission to use your Personal Data.
• Provide you a different level or quality of goods or services.

10. ADDITIONAL STATE SPECIFIC RIGHTS
Depending on your state of residence or domicile, you may have additional legal rights over the information we collect from you and your devices. We will honor all such legal rights. Please see the descriptions of these additional rights that your state may provide.
Right to Appeal (CO, CT, VA)
You have the right to appeal a decision to deny a request to exercise any of the rights that you are provided under applicable law. The request for appeal must be submitted within a reasonable time after receipt of a decision made by us on your request.
Right to Designate an Agent to Exercise Your Rights on Your Behalf (CO, CT, UT)
Generally, only you can make a request on your behalf. However, you may allow an authorized agent to make a request on your behalf. The authorized agent will confirm their status as such on the web form for the relevant rights request landing page when submitting the request. The authorized agent must be provided with written permission signed by you authorizing the authorized agent to make a request on your behalf or have some other legal authority to act on your behalf. Additionally, we may require the authorized agent to produce evidence of their authority to act on your behalf before we process a request.
A known child’s parent or legal guardian may invoke such consumer rights on behalf of their child, as allowed by applicable law.
Right to Opt-out of Profiling That Produces Legal or Significant Effects on You (CO, CT, VA)
The states of Colorado, Virginia, and Connecticut also have the right to opt-out of the processing of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers. However, we do not collect information that produces a legal or similarly significant effect regarding a decision that results in the provision or denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health-care services, or access to essential goods or services.
11. EXERCISING YOUR RIGHTS
If you need general account assistance from a customer support representative, then use one of the methods on our contact us page.
To exercise your rights described above, please submit a request by either:

• Calling the following telephone number and submit your request: +1-844-203-0366
• Sending an email to privacyresponse@vest.com, with your relevant information and a description of your request.

Right to Appeal: If your request has been denied, you may have the right to appeal such a decision. You can exercise your right to appeal by replying directly to the email you are appealing.
Online Request Form: The links below will take you to specific landing pages for each right where you can then select your state or country of residence, who is submitting the request, and attest to your residency. Once you have filled out this information then you will be sent to a fillable web form to complete.

• Request to Know/Right to Data Portability: Request Form
• Request to Delete: [Request Form](https://www.vest

Last Update: May 1, 2024