PRIVACY POLICY

This Privacy Policy ("Privacy Policy" or "Policy") explains how CGR Garage Door Group, a California corporation ("Company", "We", "Us" or "Our") may collect, use, share, disclose, or otherwise handle information about any user ("User", "You" or "Your") of Our website located at www.californiagaragerepair.com and www.cgrgaragerepair.com (the "Company Website"), of Our telephone intake line published on the Company Website, and of any other program, activity, or service We offer (together with the Company Website, the "Company Program(s)"). Capitalized terms used in this Policy have the meanings given in Our Terms of Service.

BY CONTINUING TO USE THE COMPANY WEBSITE, BY CALLING THE TELEPHONE NUMBER PUBLISHED ON THE COMPANY WEBSITE TO REQUEST SERVICES, OR BY OTHERWISE USING ANY COMPANY PROGRAM, YOU AGREE TO BE BOUND BY ALL OF THE TERMS AND CONDITIONS OF THIS PRIVACY POLICY AS PRESENTED TO YOU AS OF THE DATE OF YOUR FIRST SUCH USE.

NO CHANGES BY YOU TO THIS PRIVACY POLICY WILL BE ACCEPTED BY THE COMPANY. IF YOU DO NOT AGREE TO ALL OF THE TERMS AND CONDITIONS OF THIS PRIVACY POLICY, OR YOU DO NOT WISH YOUR PERSONAL INFORMATION TO BE USED AS DESCRIBED HERE, THEN YOU SHOULD NOT USE ANY COMPANY PROGRAM, SHOULD NOT CALL THE PUBLISHED TELEPHONE NUMBER, AND SHOULD NOT PROVIDE ANY OF YOUR PERSONAL INFORMATION TO US.

THIS IS A BINDING AGREEMENT BETWEEN YOU AND THE COMPANY. YOU SHOULD DOWNLOAD AND PRINT THIS PRIVACY POLICY FOR YOUR RECORDS.

WHO WE ARE. The Company operates a marketing and referral platform that connects consumers seeking garage door Services with independently owned, state-licensed Contractors who perform the Services (the "Referral Services"). The Company is not itself a licensed contractor and does not itself perform garage door installation, repair, or maintenance. When You call the telephone number published on the Company Website, Your call and the information You provide are routed to a centralized Remote Intake Desk operated by an Affiliate, which obtains Contractor availability, coordinates the scheduling information provided by the Contractor, and assigns Your Appointment to a Contractor using an automated methodology. That Contractor performs the Services and collects payment from You directly. CGR Garage Door Group is operated under common ownership with other garage door referral services and through a shared administrative and call-handling operation. Please read this Policy so that You understand how Your information moves through this process.

During Your use of any Company Program, We may, directly or through Our Affiliates and Our Service Providers and Contractors (as defined in Section 3), collect the categories of personal information described in Sections 1.1 through 1.3 below (Your "Personal Information").

1.1. Information You Provide to Us

The Company Website is a call-only site. It does not offer online ordering, online accounts, or online payment. The Company Website may include an optional ZIP code availability checker; the ZIP code You enter is used only to display service availability for Your area and is not submitted to or retained by Us. We collect Personal Information that You provide directly to Us, primarily by telephone when You call the number published on the Company Website to request or ask about Services. The Personal Information We collect in this way typically includes:

• Your name;
• Your service address and, if different, Your mailing address;
• Your telephone number; and
• The nature of the garage door Services You are requesting, and any details about Your request that You choose to provide during the call.

We use this information to obtain Contractor availability, to coordinate and convey the scheduling information provided by the Contractor, and to assign Your Appointment to a Contractor.

1.2. Information Automatically Collected

When You access the Company Website or call the published telephone number, We (or Our Affiliates and Our Service Providers and Contractors) may automatically collect certain information, including:

• Device Information. Information about the computer, tablet, phone, or other device You use to access the Company Website, including Internet Protocol (IP) address, device type, browser type, operating system, and similar identifiers.
• Call and Routing Information. Information generated through the Intake Systems, which include telephone numbers, call tracking numbers, caller identification, interactive voice response, and customer relationship management tools used to route, track, or manage Appointments and related Customer interactions.
• Cookies and Analytics. We use cookies and similar tracking technologies on the Company Website, together with analytics services, to understand how visitors use the Company Website and to measure and improve its performance. A cookie is a small data file stored by Your browser. You can set most browsers to refuse cookies or to alert You when cookies are being sent. See Section 5 for further information about Your choices. As of the date of this Policy, the information We collect through Our internal cookies and analytics is used by Us for Our own internal purposes and is not itself shared with the Contractors.
• Social Media Features. The Company Website may display a social media badge or icon (for example, a link to a social media page). If a badge or icon is present, the applicable social media provider may collect information such as Your IP address and the page You are visiting, and may set its own cookie, in accordance with that provider's own privacy policy. See Section 8.

1.3. Information from Other Sources

We may also receive Personal Information about You from Our Affiliates, from Our Service Providers and Contractors, and from analytics or advertising providers that help Us operate and promote the Company Website.

2. How We Use Your Information

We use Your Personal Information for the following business purposes:

• To receive, evaluate, and respond to Your request for Services;
• To route Your request to the Remote Intake Desk so that Contractor availability can be obtained and an Appointment can be assigned to a Contractor who can perform the Services;
• To contact You about Your request, including to confirm an Appointment or to convey scheduling information provided by the Contractor;
• To operate, maintain, analyze, and improve the Referral Services, the Company Website, the Company Programs, and the Intake Systems;
• To detect, prevent, and address fraud, security issues, and misuse; and
• To comply with applicable law and to enforce Our agreements.

3. Sharing of Your Information

We may share Your Personal Information as described below. As explained in Section 12 and Appendix 1, some of this sharing may constitute a "sale" or "sharing" of personal information under the California Consumer Privacy Act and similar laws, and You have the right to opt out.

• Our Affiliates. We share the Personal Information You provide by telephone (including Your name, service address, and telephone number) with an Affiliate that operates the Remote Intake Desk, which centralizes intake, obtains Contractor availability and coordinates the scheduling information provided by Contractors, and assigns Appointments to Contractors. An "Affiliate" is any entity that directly or indirectly controls, is controlled by, or is under common control with the Company.
• Contractors. The Remote Intake Desk provides Your name, service address, telephone number, and service request to the independently owned, state-licensed Contractor assigned Your Appointment, so that the Contractor can contact You, perform the Services, and collect payment from You directly. Contractors are not Our employees or agents, and they use Your information for their own purposes in performing the Services.
• Service Providers and Contractors. We share Personal Information with vendors and service providers that perform functions on Our behalf, such as website hosting, call handling and call tracking, and analytics (collectively, "Service Providers and Contractors").
• Legal and Protective Disclosures. We may disclose Personal Information if We believe in good faith that disclosure is required by law, subpoena, or other legal process, or is necessary to protect the rights, property, or safety of the Company, Our Affiliates, Our Users, or others.
• Business Transfers. If the Company is involved in a merger, acquisition, financing, reorganization, or sale of assets, Personal Information may be transferred as part of that transaction, subject to this Policy.

4. Children

The Company Programs are intended for adults and are not directed to children under the age of 13. Consistent with the Children's Online Privacy Protection Act ("COPPA"), We do not knowingly collect Personal Information from children under 13. If You believe We have collected information from a child under 13, please contact Us using the information in Section 13 so that We can delete it.

5. Your Choices

5.1. Do Not Sell or Share My Personal Information. Depending on the technologies in use and on how Our arrangements are characterized, some of Our sharing of Personal Information may be treated as a "sale" or "sharing" under applicable state privacy law. If You are a resident of a state that provides this right, You may opt out by using the "Do Not Sell or Share My Personal Information" link at the bottom of the Company Website home page, or by contacting Us as described in Appendix 1.

5.2. Cookies and Analytics. Most web browsers can be set to refuse or delete cookies, or to alert You when a cookie is being placed. If You disable cookies, some features of the Company Website may not function properly. You may also be able to opt out of certain analytics collection through tools made available by the applicable analytics provider.

5.3. Communications. If We contact You about Your request, You may ask Us to stop by telling Us during any call or by using the contact information in Section 13. Because Our contact with You is tied to a specific request for Services that You initiated, opting out may mean We are unable to fulfill that request.

6. Enforcement of This Policy

We reserve the right to enforce this Policy in Our discretion. Our failure to enforce any provision of this Policy is not a waiver of Our right to do so later.

7. You Are Responsible for Your Own Information

You are responsible for the accuracy of the Personal Information You provide to Us. Please provide accurate information and let Us know if it changes, so that We and the applicable Contractor can respond to Your request.

8. Third-Party Sites and Features

The Company Website may contain links to, or badges for, websites and services operated by third parties, including social media providers. We do not control those third parties and are not responsible for their content or privacy practices. Your use of any third-party site or feature is governed by that third party's own terms and privacy policy.

9. Information Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect Personal Information. However, no method of transmission or storage is completely secure, and We cannot guarantee absolute security.

10. Data Retention

We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Policy, to comply with Our legal obligations, to resolve disputes, and to enforce Our agreements, and thereafter We delete or de-identify it in accordance with Our retention practices.

11. Changes to This Policy

We may update this Policy from time to time. When We do, We will revise the "Last Updated" date above and post the revised Policy on the Company Website. Your continued use of any Company Program, or Your continued contact with Us, after the revised Policy is posted constitutes Your acceptance of the revised Policy.

12. State-Specific and International Notices

NOTICE TO CALIFORNIA RESIDENTS: Under the California Consumer Privacy Act, as amended (the "CCPA"), residents of California may have additional rights with respect to their Personal Information. Those rights, and the disclosures required by the CCPA, are set forth in Appendix 1 to this Policy.

13. Contact Us

If You have questions about this Policy or Our privacy practices, please contact Us at:

• CGR Garage Door Group
• 15125 Califa St, Van Nuys, CA, 91411
• Email: legal@californiagaragerepair.com
• Telephone: (888) 299-2459

This Appendix 1 applies to residents of the State of California ("California Residents") and supplements the Privacy Policy above. Capitalized terms not defined in this Appendix have the meanings given in the CCPA, in the Policy, or in Our Terms of Service.

A. Your California Privacy Rights

Subject to certain exceptions, California Residents have the right to:

• Know the categories and specific pieces of Personal Information We have collected about them, the categories of sources, the business or commercial purposes for collection, and the categories of third parties to whom We disclose it;
• Request deletion of their Personal Information;
• Correct inaccurate Personal Information;
• Opt out of the "sale" or "sharing" of their Personal Information; and
• Not receive discriminatory treatment for exercising these rights.

B. Personal Information We Collect, Use, and Disclose

The chart below describes the categories of Personal Information (using the categories enumerated in the CCPA) that We collect, the sources, the business purposes, and the categories of recipients.

C. "Sale" or "Sharing" of Personal Information

The Company's business involves routing consumer contact information to an Affiliate and, in turn, to Contractors in exchange for value. Depending on how this arrangement and the Company Website's tracking technologies are characterized, this activity may constitute a "sale" or "sharing" of Personal Information under the CCPA. California Residents may opt out at any time by using the "Do Not Sell or Share My Personal Information" link at the bottom of the Company Website home page, or by contacting Us as described below. We do not knowingly sell or share the Personal Information of consumers We know to be under 16 years of age.

D. How to Exercise Your CCPA Rights

To exercise Your right to know, delete, correct, or opt out, please submit a request to Us at legal@californiagaragerepair.com or (888) 299-2459, or use the "Do Not Sell or Share My Personal Information" link on the Company Website. We will verify Your request as required by law. You may use an authorized agent to submit a request on Your behalf.

We will not discriminate against You for exercising any of Your CCPA rights.