Effective Date: 05/19/2022

Welcome to the Sweet Ride Transportation, Inc. Data Privacy Policy for Riders

This Privacy Policy is meant to help you understand what data we collect, why we collect it and what we do with it. We hope you will take the time to read the policy carefully. And remember, you can find controls to manage your information and access and rectify your information with Sweet Ride Transportation, Inc., either through our app, or by logging in online at https://sweetridehershey.com/. Please also remember that use of the Sweet Ride platform is also subject to the Terms of Use applicable to your account.

Who we are?

Sweet Ride Transportation, Inc., more commonly known as just "Sweet Ride," is a unique ride-sharing service that provides low-cost or free short-distance transportation in environmentally friendly electric vehicles. In exchange, Riders are asked to view a short advertisement from our advertising partners.

Sweet Ride is committed to protecting the privacy of its Riders and its Drivers. Sweet Ride has developed this Data Privacy Policy to demonstrate its commitment and respect for the rules of privacy and protection of personal data. In this Data Privacy Policy, "Sweet Ride" includes all websites and places where Sweet Ride is responsible for the management of user data throughout the Sweet Ride platform, including its website and its mobile applications.

Why a Sweet Ride Data Privacy Policy?

This Data Privacy Policy discloses the general rules of privacy and the treatment of the personal data that we collect. When you share information with us, for example by registering for an account, we use this information to provide better services to you and our partners. For that purpose, we have established a data protection program to advise you as to how we collect data, for what purpose, and your options related thereto when you enter your personal data through online registration, when requesting services from the Sweet Ride platform or when you contact Sweet Ride. Additional Data Privacy information may be available on the various websites under our responsibility.

This Privacy Policy covers Sweet Ride’s treatment of personal information it may gather when you use our technology or services. Specifically, this Privacy Policy applies to personal information gathered via our website; in email, text, and other electronic messages between you and our website; through our app or other applications which provide dedicated non-browser-based interaction between you and our website; and when you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy. In order to enable Sweet Ride to provide services to you, we will need certain personal information.

What is covered by the Sweet Ride Data Privacy Policy?

Our Privacy Policy applies to the collection and processing of any personal data by Sweet Ride for services under its technical direction. This applies to both Riders and Drivers, including applicants.

Our Privacy Policy does not apply to services offered by other companies or individuals, or organizations that advertise through our website or mobile app. This Privacy Policy also does not apply to the practices of third parties that Sweet Ride does not own or control, or to individuals that Sweet Ride does not employ or manage.

What is personal data?

Personal data is information about you that you provide to Sweet Ride. It can include names, postal addresses, telephone numbers, email addresses, credit card information, driver’s license information, photographs, geolocation,and any other information relating to an individual. Personal data is also any information, including sound and image, relating to an identified or identifiable natural person taken during the course of any activity for which you registered.

Who is responsible for processing data?

Sweet Ride is responsible for the collection and processing of personal data made available by Riders, Drivers, and other users of the Sweet Ride platform. Sweet Ride always attempts to specify clearly what data is collected, the means of data processing, and the purpose for which the data will be used.

What is the purpose of processing personal data?

We use your personal information to provide an efficient, easy-to-use platform for obtaining the services we provide. In general, the data collected is intended for the management and ongoing improvement of the Sweet Ride platform, the provision of Sweet Ride services, the adaptation of services to the user’s needs and interests, improving usersupport, information, marketing actions, responding to legal proceedings and obligations, as well as the inclusion of Riders and Drivers in subscriber lists.

We also collect it for security reasons/obligations. The collection of data is necessary to verify identities of our Riders and Drivers, and to allow us to provide a secure and safe platform through which to access the services. To do this, we require various authentication, verification, and other information (described below).

When you submit the data, you will be given information on how we will use your data for a specific activity.

What kind of information do we collect?

In the course of managing and providing Services in the Sweet Ride platform, Sweet Ride collects and processes certain personal data necessary for our technology to provide the highest level of service possible. This includes the following types of information from users of our technology and services:

Information About You. When you register for any of our services, we collect a wide variety of information about you. This includes information by which you may be personally identified. Some personal data is obligatory and, in the event that the data you provide is insufficient, Sweet Ride may not be able to make Sweet Ride servicesavailable to you. In each case, Sweet Ride will inform a user of the mandatory nature of the personal data requested. In no case will the data collected be used for any purpose other than that for which the data subject has given consent.

Rider Information. When you sign up to be a Rider, we will collect the information you provide in your profile, including your name, email address, phone number, birth date, profile photo, physical address, government-issued photo identification, credit card information, and personal preferences. When using the Sweet Ride platform, we also collect your real-time location and information on your interactions with our partners’ advertisements.

We do not retain your government-issued photo ID after your identity has been verified.

Ratings; Feedback. If you provide feedback or rate Drivers, we collect all of this information you provided.

Transaction Information. To process charges for services, we may require your name, address, phone number, email address and credit card information. Such information is used primarily to process your transaction or as otherwise described herein related to the Services. We only store your credit card’s last four digits and expiration date.

Any financial transactions for Services will be processed by Stripe. For more information on how Stripe processesand secures data, see: https://stripe.com/privacy.

Communications; Emails and Telephone Calls. We require an email address from you when you register with Sweet Ride. We use your email for both transactional (e.g., ride confirmation and processing) and promotional (e.g., newsletters, new service offerings, special discounts, event notifications, special third-party offers) purposes. Email messages we send you may contain code that enables our database to track your usage of the emails, including whether the email was opened and what links (if any) were clicked. If you would rather not receive promotional emails from us, please see the section below labeled "Choice/Opt-Out." We reserve the right to send you certain communications relating to the services, such as service announcements and administrative messages, without offering you the opportunity to opt out of receiving them. We may also contact you by telephone or text message (including to any wireless number you may provide to us) solely in connection with the Services. If you would rather not receive telephone calls or text messages from us, you may change your account preferences page(s), or ask to be removed from our contact list, provided however that you cannot restrict our ability to contact you by telephone or text message(s) as necessary for the fulfillment of the Services (as stated in the Terms and Conditions). Whether you contact us, or we contact you, we collect any information that you provide, including the contents of the messages or attachments you send us.

We fully comply with the requirements of the U.S. CAN-SPAM Act.

When and how is your data collected?

Sweet Ride collects data through its website and/or mobile app, directly from and with the consent of its users. As a rule, personal data is collected when someone signs up for services as a Rider. Data may be collected by and through any of the following actions:

Log Files. We collect information about your use of the Sweet Ride Platform, including ride information like the date, time, destination, distance, route, payment, and whether you used a promotional or referral code. Any time you visit any of our websites, our servers automatically gather information from your browser (such as your IP addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks) to analyze trends, administer the site, prevent fraud, track visitor movement in the aggregate, and gather broad demographic information. For example, we may log your IP address for system administration purposes. IP addresses are logged to track a user’s session. This gives us an idea of which parts of our site users are visiting. We do not share the log files externally.

Cookies. We may use "cookies" to keep track of some types of information while you are visiting our website or using our services. Cookies are very small files placed on your computer, and they allow us to count the number of visitors to our website and distinguish repeat visitors from new visitors. They also allow us to save user preferences and track user trends. We rely on cookies for the proper operation of our website; therefore, if your browser is set to reject all cookies, the website may not function properly. Users who refuse cookies assume all responsibility for any resulting loss of functionality. We do not link the cookies to any of your personal information.

Web Beacons. "Web beacons" (also known as "clear gifs" and "pixel tags") are small transparent graphic images that are often used in conjunction with cookies in order to further personalize our website for our users and to collect a limited set of information about our visitors. We may also use web beacons in email communications in order to understand the behavior of our Users. We do not link the web beacons to any of your personal information.

Mobile Analytics. We use mobile analytics software to allow us to better understand the functionality of our mobile software on your phone. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage, performance data, and where the application was downloaded from. We do not link the information we store within the analytics software to any of the personal information you submit within the mobile application.

Mobile Device. If you use a mobile device to access our site or download any of our applications, we may collect device information from you. For example, each time when signing into the app and checking the consent box allowing you to use the mobile service on your mobile device to access our service, we collect device information (such as your mobile device ID, model, and manufacturer), operating system and version information, and IP address.

Online Survey Data. We may periodically conduct voluntary user surveys. We encourage our users to participate in such surveys because they provide us with important information regarding the improvement of our services. You may also volunteer for certain surveys that we may offer to our users, and any additional rules regarding the conduct of such surveys will be disclosed to you prior to your participation. We do not link the survey responses to any of your personal information and all responses are anonymous.

Geolocation Information. We require your consent to collect geolocational information to provide our ridesharingservices. We also use geolocation information from our Riders’ phones in order to show a Driver where a Rider is located, as well as to allow our technology to make our services as efficient as possible, including matching Riderswith the closest Drivers to them. We also use it for our internal purposes for security and legal obligations. To this end, we collect all GPS info (longitude, latitude, driving direction and speed, altitude, and general accuracy) available from a Rider’s phone and require Riders to consent to our application accessing such information or the application will not work properly. As such, the app starts logging geolocational information from the moment a user logs in to it.

Push Notifications. We send you push notifications if you choose to receive them to notify you of the status of your trip and updates regarding our services. If you wish to opt-out from receiving these types of communications you may turn them off at the device level, other than push notifications necessary to facilitate the fulfillment of services. It is not possible to turn off in-app notifications as they are used for synchronizing information. Users can, however, disable/opt-out from Mobile notifications.

Accessing, rectifying, or opposing the processing of your personal data

You are guaranteed the right to access, update, rectify or delete your personal data at any time from Sweet Rideservers, as well as the right to oppose Sweet Ride or limit the use of data provided for marketing purposes, sending information communications or inclusion in lists or information services when submitting the information for an activity. If you have not done so when submitting data, send a written request to Sweet Ride, 142 W Chocolate Ave Hershey, PA 17033, by clicking the link on our website, or through the email address legal@sweetridehershey.com.

Whenever you use our services, we aim to provide you with access to your personal information. If that information is wrong, we strive to give you ways to update it quickly or to delete it – unless we have to keep that information for legitimate business or legal purposes. When updating your personal information, we may ask you to verify your identity before we can act on your request.

Choice/Opt-Out

We respect your privacy. Sweet Ride will provide you the opportunity to "opt-out" of having your personally identifiable information used for certain purposes. For example, you may opt-out of receiving communications from Sweet Ride, remove your information from Sweet Ride’s active database, and choose to not receive future communications unrelated to our technology and services by contacting us. For communications from participating partners and advertisers, please check their respective opt-in/opt-out policies. You may exercise your right to opt-out by utilizing your mobile app or by logging into your account on our website, https://sweetridehershey.com/.

Data Retention

Because many users tend to use our service on a repeat basis, we retain your personal information for continued service and convenience purposes in accordance with our data retention policy until the user advises not to do so. Notwithstanding the foregoing, we may retain personal information in order to comply with applicable laws (including data retention laws), keep accurate records, resolve disputes, prevent fraud, enforce our Terms and Conditions of Service or other agreements, or for any other legally permissible purpose.

Sharing between Riders and Drivers

Rider information shared with Driver. Upon receiving a rideshare request, we share with the Driver the Rider’slocation, name, photo and rating, and other information a Rider includes in their Rider profile, such as a preferred pronoun. We also eventually share a Rider’s rating and feedback with the Driver. While we remove the Rider’s identity when sharing this information, it may be possible for the Driver to identify a Rider through information or feedback provided by the Rider.

NOTE: Although we provide a platform for Riders and Drivers to communicate with one another to facilitate a trip, we do not share your actual phone number or other contact information with other users. If you report a lost or found item to us, we will seek to connect you with the relevant Rider or Driver, including sharing actual contact information with your consent.

Is data transferred to third parties (third parties or subcontractors)?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information except to trusted third parties who assist us in operating our website, mobile app, for the conduct of our business, or servicing you, so long as those parties agree to keep this information confidential. Any Personal Data which may be transferred to our client or service providers for any activity shall be done via encrypted services to ensure the protection of your information. We require our third-party providers to agree to our data protection provisions in all of our service contracts.

It is usual for Sweet Ride, in the scope of its activity, to proceed with the data collection process through the engagement of contracted entities. The provision of these services implies that these entities have access to the data transmitted in the registration processes.

Sweet Ride takes precautions to ensure that entities with access to the data are reputable and offer the highest guarantees at this level and therefore the processing of the data provided will be duly safeguarded. All financial transactions related to any Services for Sweet Ride’s users will be done through Stripe. For more information on how Stripe processes and secures data, see: https://stripe.com/privacy.

Thus, any entity under contract with Sweet Ride that will collect, store, or process personal data on behalf of Sweet Ride will be required to take the necessary technical and organizational measures to protect personal data against accidental, unlawful destruction, accidental loss, alteration, dissemination, or unauthorized access and against any other form of unlawful treatment.

In any case, Sweet Ride remains responsible for the personal data made available by its Riders. Under legal terms, at all times, the Rider is able to oppose the communication of data to third parties, namely for marketing purposes.

What information do we share with Third Party service providers?

We do not share personal information with companies, organizations and individuals outside of Sweet Ride unless one of the following circumstances applies:

(a) With your consent

We will share personal information with companies, organizations, or individuals outside of Sweet Ride when we have your consent to do so. We require opt-in consent for the sharing of any personal data.

(b) Part of a Reorganization

We will share your personal information with a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Sweet Ride's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Sweet Ride about our website users is among the assets transferred.

(c) Age Restrictions

Our age restrictions for different services are set forth in each applicable Terms and Conditions of Service. We do not target our sites or services to anyone under the age of 18, including children under the age of 13, and in compliance with the Children’s Online Privacy Protection Act, any information we may receive from users we believe to be under the age of 18 will be purged from our database.

Security of Personal Data Information

We work hard to protect Sweet Ride and our users from unauthorized access to or unauthorized alteration, disclosure, or destruction of information we hold. We review our information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems. Furthermore, we utilize commercially reasonable physical, technical, and organizational measures to preserve the integrity of the personal information we collect and possess. We restrict access to personal information to Sweet Ride employees, contractors, and agents who need to know that information in order to process it for us, and who are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our website or app, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our website or app. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the website or app.

Compliance and cooperation with regulatory authorities

We regularly review our compliance with our Privacy Policy. When we receive formal written complaints, we will contact the person who made the complaint to follow up. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that we cannot resolve with our users directly.

For California Residents

This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or "CCPA."

For more details about the personal information we have collected over the last 12 months, including the categories of sources, please see below. We have collected the following categories of personal information from individualswithin the last twelve (12) months:

Category	Examples	Collected
A. Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.	YES
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	YES
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	NO
D. Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.	YES
G. Geolocation data.	Physical location or movements.	YES
H. Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	NO
I. Professional or employment-related information.	Current or past job history or performance evaluations.	YES
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO
K. Inferences drawn from other personal information.	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO

We obtain the categories of personal information listed above from the multiple categories of sources, including you directly, internet service providers, data analytic providers, and operating systems and platforms. For additional details about the methods and manner of collection, see the "When and how is your data collected" section, above.

We collect this information for the business and commercial purposes described in the "What is the purpose of processing personal data" section above.

We share this information with the categories of third parties described in the "Is data transferred to third parties (third parties or subcontractors)" and "What information do we share with Third Party service providers" sections, above. Within the preceding twelve (12) months we have shared or disclosed the following categories of personal information with our trusted service providers or third parties:

Personal Information Category	Category of Third-Party Recipients
	Business Purpose Disclosures	Sales
A: Identifiers.	Service providers and/or trusted third parties	None
B: California Customer Records personal information categories.	Service providers and/or trusted third parties	None
C: Protected classification characteristics under California or federal law.	None	None
D: Commercial information.	Service providers and/or trusted third parties	None
E: Biometric information.	None	None
F: Internet or other similar network activity.	Service providers and/or trusted third parties	None
G: Geolocation data.	Service providers and/or trusted third parties	None
H: Sensory data.	None	None
I: Professional or employment-related information.	Service providers and/or trusted third parties	None
J: Non-public education information.	None	None
K: Inferences drawn from other personal information.	None	None

Sweet Ride does not sell (as that term is defined in the CCPA) the personal information we collect (and will not sell it without providing a right to opt out). Please note that we do use third-party cookies for our advertising purposes as further described in our "Cookies" section, above.

Subject to certain limitations, the CCPA provides California consumers a right to request to know more details about the categories or specific pieces of personal information we collect (including how we use and disclose this information), to delete their personal information, to opt out of any "sales" that may be occurring, and to not be discriminated against for exercising these rights.

California consumers may make a request pursuant to their rights under the CCPA by contacting us atlegal@sweetridehershey.com. We will verify your request using the information associated with your account, including email address. Government identification may be required. Consumers can also designate an authorized agent to exercise these rights on their behalf.

Right to Know. You have the right to know and see what data we collected about you over the past 12 months. This includes:

• The categories of personal information we collected about you.• The categories of sources for the personal information we collected about you.• Our business or commercial purpose for collecting or selling that personal information.• The categories of third parties with whom we share that personal information.• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:• sales, identifying the personal information categories that each category of recipient purchased; and• disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.• The specific pieces of personal information we collected about you (also called a data portability request).

Right to Delete. You have the right to request that we delete the personal information we have collected from you (and direct our service providers to do the same), subject to certain exceptions, including when such information is necessary to complete your transaction or to provide you the requested services. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.3. Debug products to identify and repair errors that impair existing intended functionality.4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.8. Comply with a legal obligation.9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Deletion Process. Once you have submitted a deletion request, and we have received verification from you that the request is authentic, you will be provided the opportunity to agree with what personal information will deleted.

Disclosure Rights. You can request certain information about our disclosure of personal information to third parties for their own direct marketing purposes during the preceding calendar year. This request may be made once a yearfree of charge.

Non-Discrimination. You have the right not to be discriminated against for exercising any of the rights listed above. Unless permitted by the CCPA, we will not:

• Deny you goods or services.• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.• Provide you a different level or quality of goods or services.• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Exercising Your California Privacy Rights. To request access to or deletion of your personal information, or to exercise any other data rights under California law, please contact us at legal@sweetridehershey.com. You may also utilize the link on our website, https://sweetridehershey.com/.

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. You may also make a request to know or delete on behalf of your child. You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, and• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. You do not need to create an account with us to submit a request to know or delete. We will only use personal information provided in the request to verify the requestor's identity or authority to make it.

Response Timing and Format. We aim to respond to a consumer request for access or deletion within ten (10) days of receiving requests for disclosure or deletion with information on how the request will be processed. If we need additional time the reasons for that will be stated to you within the ten days. Any substantive response to the request will be given within 45 days of receiving a verified request.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

For legal reasons

We will share personal information with companies, organizations or individuals outside of Sweet Ride if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to: a) meet any applicable law, regulation, legal process or enforceable governmental request; b) enforce applicable Terms of Service, including investigation of potential violations; c) detect, prevent, or otherwise address fraud, security or technical issues and d) protect against harm to the rights, property or safety of Sweet Ride, our users, or the public as required or permitted by law.

Changes to our Privacy Policy

Our Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes). The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our website and this Privacy Policy to check for any changes.

Questions

If you have questions about this privacy policy, or your own personal information, please contact us via the legal@sweetridehershey.com email address.

Effective Date: 05/19/2022

Welcome to the Sweet Ride Transportation, Inc. Data Privacy Policy for Drivers

This Privacy Policy is meant to help you understand what data we collect, why we collect it and what we do with it. We hope you will take the time to read the policy carefully. And remember, you can find controls to manage your information and access and rectify your information with Sweet Ride Transportation, Inc., either through our app, or by logging in online at https://sweetridehershey.com/. Please also remember that use of the Sweet Ride platform is also subject to the Terms of Use applicable to your account.

Who we are?

Sweet Ride Transportation, Inc., more commonly known as just "Sweet Ride," is a unique ride-sharing service that provides low-cost or free short-distance transportation in environmentally friendly electric vehicles. In exchange, Riders are asked to view a short advertisement from our advertising partners.

Sweet Ride is committed to protecting the privacy of its Riders and its Drivers. Sweet Ride has developed this Data Privacy Policy to demonstrate its commitment and respect for the rules of privacy and protection of personal data. In this Data Privacy Policy, "Sweet Ride" includes all websites and places where Sweet Ride is responsible for the management of user data throughout the Sweet Ride platform, including its website and its mobile applications.

Why a Sweet Ride Data Privacy Policy?

This Data Privacy Policy discloses the general rules of privacy and the treatment of the personal data that we collect. When you share information with us, for example by registering for an account, we use this information to provide better services to you and our partners. For that purpose, we have established a data protection program to advise you as to how we collect data, for what purpose, and your options related thereto when you enter your personal data through online registration, when requesting services from the Sweet Ride platform or when you contact Sweet Ride. Additional Data Privacy information may be available on the various websites under our responsibility.

This Privacy Policy covers Sweet Ride’s treatment of personal information it may gather when you use our technology or services. Specifically, this Privacy Policy applies to personal information gathered via our website; in email, text, and other electronic messages between you and our website; through our app or other applications which provide dedicated non-browser-based interaction between you and our website; and when you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy. In order to enable Sweet Ride to provide services to you, we will need certain personal information.

What is covered by the Sweet Ride Data Privacy Policy?

Our Privacy Policy applies to the collection and processing of any personal data by Sweet Ride for services under its technical direction. This applies to both Riders and Drivers, including applicants.

Our Privacy Policy does not apply to services offered by other companies or individuals, or organizations that advertise through our website or mobile app. This Privacy Policy also does not apply to the practices of third parties that Sweet Ride does not own or control, or to individuals that Sweet Ride does not employ or manage.

What is personal data?

Personal data is information about you that you provide to Sweet Ride. It can include names, postal addresses, telephone numbers, email addresses, credit card information, driver’s license information, photographs, geolocation,and any other information relating to an individual. Personal data is also any information, including sound and image, relating to an identified or identifiable natural person taken during the course of any activity for which you registered.

Who is responsible for processing data?

Sweet Ride is responsible for the collection and processing of personal data made available by Riders, Drivers, and other users of the Sweet Ride platform. Sweet Ride always attempts to specify clearly what data is collected, the means of data processing, and the purpose for which the data will be used.

What is the purpose of processing personal data?

We use your personal information to provide an efficient, easy-to-use platform for obtaining the services we provide. In general, the data collected is intended for the management and ongoing improvement of the Sweet Ride platform, the provision of Sweet Ride services, the adaptation of services to the user’s needs and interests, improving usersupport, information, marketing actions, responding to legal proceedings and obligations, as well as the inclusion of Riders and Drivers in subscriber lists.

We also collect it for security reasons/obligations. The collection of data is necessary to verify identities of our Riders and Drivers, and to allow us to provide a secure and safe platform through which to access the services. To do this, we require various authentication, verification, and other information (described below).

When you submit the data, you will be given information on how we will use your data for a specific activity.

What kind of information do we collect?

In the course of managing and providing Services in the Sweet Ride platform, Sweet Ride collects and processes certain personal data necessary for our technology to provide the highest level of service possible. This includes the following types of information from users of our technology and services:

Information About You. When you register for any of our services, we collect a wide variety of information about you. This includes information by which you may be personally identified. Some personal data is obligatory and, in the event that the data you provide is insufficient, Sweet Ride may not be able to make Sweet Ride servicesavailable to you. In each case, Sweet Ride will inform a user of the mandatory nature of the personal data requested. In no case will the data collected be used for any purpose other than that for which the data subject has given consent.

Driver Information. If you apply to be a Driver, we will collect the information you provide in your application, including your name, email address, phone number, birth date, profile photo, physical address, government identification number (such as social security number), Driver’s license information, vehicle information, car insurance information, license plate, and photos of you and your vehicle. We also collect payment information you provide us, including but not limited to your bank routing and account numbers, and tax information. Depending on the market where you seek to drive, we may also seek additional information required by local regulations, such as business license or permit information. After being approved as a Driver you will be required to update this information regularly, and upon request by us.

We do not retain social security numbers after all applicable background checks and Driver screening has been completed.

Ratings; Feedback. If you provide feedback or rate Riders, we collect all of this information you provided.

Purchase Information. To process charges for services, we may require your name, address, phone number, email address and credit card information. Such information is used primarily to process your order or as otherwise described herein related to the Services.

Any financial transactions for Services will be processed by Stripe. For more information on how Stripe processesand secures data, see: https://stripe.com/privacy.

Communications; Emails and Telephone Calls. We require an email address from you when you register with Sweet Ride. We use your email for both transactional (e.g., ride confirmation and processing) and promotional (e.g., newsletters, new service offerings, special discounts, event notifications, special third-party offers) purposes. Email messages we send you may contain code that enables our database to track your usage of the emails, including whether the email was opened and what links (if any) were clicked. If you would rather not receive promotional emails from us, please see the section below labeled "Choice/Opt-Out." We reserve the right to send you certain communications relating to the services, such as service announcements and administrative messages, without offering you the opportunity to opt out of receiving them. We may also contact you by telephone or text message (including to any wireless number you may provide to us) solely in connection with the Services. If you would rather not receive telephone calls or text messages from us, you may change your account preferences page(s), or ask to be removed from our contact list, provided however that you cannot restrict our ability to contact you by telephone or text message(s) as necessary for the fulfillment of the Services (as stated in the Terms and Conditions). Whether you contact us, or we contact you, we collect any information that you provide, including the contents of the messages or attachments you send us.

We fully comply with the requirements of the U.S. CAN-SPAM Act.

When and how is your data collected?

Sweet Ride collects data through its website and/or mobile app, directly from and with the consent of its users. As a rule, personal data is collected when someone signs up for services either as a Rider or Driver. Data may be collected by and through any of the following actions:

Log Files. We collect information about your use of the Sweet Ride Platform, including ride information like the date, time, destination, distance, route, payment, and whether a promotional or referral code was used. Any time you visit any of our websites, our servers automatically gather information from your browser (such as your IP addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks) to analyze trends, administer the site, prevent fraud, track visitor movement in the aggregate, and gather broad demographic information. For example, we may log your IP address for system administration purposes. IP addresses are logged to track a user’s session. This gives us an idea of which parts of our site users are visiting. We do not share the log files externally.

Cookies. We may use "cookies" to keep track of some types of information while you are visiting our website or using our services. Cookies are very small files placed on your computer, and they allow us to count the number of visitors to our website and distinguish repeat visitors from new visitors. They also allow us to save user preferences and track user trends. We rely on cookies for the proper operation of our website; therefore, if your browser is set to reject all cookies, the website may not function properly. Users who refuse cookies assume all responsibility for any resulting loss of functionality. We do not link the cookies to any of your personal information.

Web Beacons. "Web beacons" (also known as "clear gifs" and "pixel tags") are small transparent graphic images that are often used in conjunction with cookies in order to further personalize our website for our users and to collect a limited set of information about our visitors. We may also use web beacons in email communications in order to understand the behavior of our Users. We do not link the web beacons to any of your personal information.

Mobile Analytics. We use mobile analytics software to allow us to better understand the functionality of our mobile software on your phone. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage, performance data, and where the application was downloaded from. We do not link the information we store within the analytics software to any of the personal information you submit within the mobile application.

Mobile Device. If you use a mobile device to access our site or download any of our applications, we may collect device information from you. For example, each time when signing into the app and checking the consent box allowing you to use the mobile service on your mobile device to access our service, we collect device information (such as your mobile device ID, model, and manufacturer), operating system and version information, and IP address.

Online Survey Data. We may periodically conduct voluntary user surveys. We encourage our users to participate in such surveys because they provide us with important information regarding the improvement of our services. You may also volunteer for certain surveys that we may offer to our users, and any additional rules regarding the conduct of such surveys will be disclosed to you prior to your participation. We do not link the survey responses to any of your personal information and all responses are anonymous.

Geolocation Information. We require your consent to collect geolocational information to provide our ridesharingservices. We also use geolocation information from our Drivers’ phones in order to be able to show a Rider where a Driver is located, as well as to allow our technology to make our services as efficient as possible, including matching Riders with the closest Drivers to them. We also use it for our internal purposes for security and legal obligations. To this end, we collect all GPS info (longitude, latitude, driving direction and speed, altitude, and general accuracy) available from a Driver’s phone and require Drivers to consent to our application accessing such information or the application will not work properly. As such, the app starts logging geolocational information fromthe moment a Driver logs in to it.

Push Notifications. We send you push notifications if you choose to receive them to notify you of the status of your trips and updates regarding our services. If you wish to opt-out from receiving these types of communications you may turn them off at the device level, other than push notifications necessary to facilitate the fulfillment of services. It is not possible to turn off in-app notifications as they are used for synchronizing information. Drivers can, however, disable/opt-out from Mobile notifications.

Accessing, rectifying, or opposing the processing of your personal data

You are guaranteed the right to access, update, rectify or delete your personal data at any time from Sweet Rideservers, as well as the right to oppose Sweet Ride or limit the use of data provided for marketing purposes, sending information communications or inclusion in lists or information services when submitting the information for an activity. If you have not done so when submitting data, send a written request to Sweet Ride, 142 W Chocolate Ave Hershey, PA 17033, by clicking the link on our website, or through the email address legal@sweetridehershey.com.

Whenever you use our services, we aim to provide you with access to your personal information. If that information is wrong, we strive to give you ways to update it quickly or to delete it – unless we have to keep that information for legitimate business or legal purposes. When updating your personal information, we may ask you to verify your identity before we can act on your request.

Choice/Opt-Out

We respect your privacy. Sweet Ride will provide you the opportunity to "opt-out" of having your personally identifiable information used for certain purposes. For example, you may opt-out of receiving communications from Sweet Ride, remove your information from Sweet Ride’s active database, and choose to not receive future communications unrelated to our technology and services by contacting us. For communications from participating partners and advertisers, please check their respective opt-in/opt-out policies. You may exercise your right to opt-out by utilizing your mobile app or by logging into your account on our website, https://sweetridehershey.com/.

Data Retention

Because many users tend to use our service on a repeat basis, we retain your personal information for continued service and convenience purposes in accordance with our data retention policy until the user advises not to do so. Notwithstanding the foregoing, we may retain personal information in order to comply with applicable laws (including data retention laws), keep accurate records, resolve disputes, prevent fraud, enforce our Terms and Conditions of Service or other agreements, or for any other legally permissible purpose.

Sharing between Riders and Drivers

Driver information shared with Rider. Upon a Driver accepting a trip, we share with the Rider the Driver’s name, photo, rating, and real-time location We also share the Driver’s vehicle make, model, color, and license plate, as well as a photo of the vehicle and other information in the Driver’s profile, such as information Drivers choose to add and the Driver’s statistics.

NOTE: Although we provide a platform for Riders and Drivers to communicate with one another to facilitate a trip, we do not share your actual phone number or other contact information with other users. If you report a lost or found item to us, we will seek to connect you with the relevant Rider or Driver, including sharing actual contact information with your consent.

Is data transferred to third parties (third parties or subcontractors)?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information except to trusted third parties who assist us in operating our website, mobile app, for the conduct of our business, or servicing you, so long as those parties agree to keep this information confidential. Any Personal Data which may be transferred to our client or service providers for any activity shall be done via encrypted services to ensure the protection of your information. We require our third-party providers to agree to our data protection provisions in all of our service contracts.

It is usual for Sweet Ride, in the scope of its activity, to proceed with the data collection process through the engagement of contracted entities. The provision of these services implies that these entities have access to the data transmitted in the registration processes.

Sweet Ride takes precautions to ensure that entities with access to the data are reputable and offer the highest guarantees at this level and therefore the processing of the data provided will be duly safeguarded. All financial transactions related to any Services for Sweet Ride’s users will be done through Stripe. For more information on how Stripe processes and secures data, see: https://stripe.com/privacy.

Thus, any entity under contract with Sweet Ride that will collect, store, or process personal data on behalf of Sweet Ride will be required to take the necessary technical and organizational measures to protect personal data against accidental, unlawful destruction, accidental loss, alteration, dissemination, or unauthorized access and against any other form of unlawful treatment.

In any case, Sweet Ride remains responsible for the personal data made available by its Drivers. Under legal terms, at all times, the Driver is able to oppose the communication of data to third parties, namely for marketing purposes.

What information do we share with Third Party service providers?

We do not share personal information with companies, organizations, or individuals outside of Sweet Ride unless one of the following circumstances applies:

(a) With your consent

We will share personal information with companies, organizations, or individuals outside of Sweet Ride when we have your consent to do so. We require opt-in consent for the sharing of any personal data.

(b) Part of a Reorganization

We will share your personal information with a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Sweet Ride's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Sweet Ride about our website users is among the assets transferred.

(c) Age Restrictions

Our age restrictions for different services are set forth in each applicable Terms and Conditions of Service. We do not target our sites or services to anyone under the age of 18, including children under the age of 13, and in compliance with the Children’s Online Privacy Protection Act, any information we may receive from users we believe to be under the age of 18 will be purged from our database.

Security of Personal Data Information

We work hard to protect Sweet Ride and our users from unauthorized access to or unauthorized alteration, disclosure, or destruction of information we hold. We review our information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems. Furthermore, we utilize commercially reasonable physical, technical, and organizational measures to preserve the integrity of the personal information we collect and possess. We restrict access to personal information to Sweet Ride employees, contractors, and agents who need to know that information in order to process it for us, and who are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our website or app, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our website or app. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the website or app.

Compliance and cooperation with regulatory authorities

We regularly review our compliance with our Privacy Policy. When we receive formal written complaints, we will contact the person who made the complaint to follow up. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that we cannot resolve with our users directly.

For California Residents

This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or "CCPA."

For more details about the personal information we have collected over the last 12 months, including the categories of sources, please see below. We have collected the following categories of personal information from individualswithin the last twelve (12) months:

Category	Examples	Collected
A. Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.	YES
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	YES
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	NO
D. Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.	YES
G. Geolocation data.	Physical location or movements.	YES
H. Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	NO
I. Professional or employment-related information.	Current or past job history or performance evaluations.	YES
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO
K. Inferences drawn from other personal information.	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO

We obtain the categories of personal information listed above from the multiple categories of sources, including you directly, internet service providers, data analytic providers, and operating systems and platforms. For additional details about the methods and manner of collection, see the "When and how is your data collected" section, above.

We collect this information for the business and commercial purposes described in the "What is the purpose of processing personal data" section above.

We share this information with the categories of third parties described in the "Is data transferred to third parties (third parties or subcontractors)" and "What information do we share with Third Party service providers" sections, above. Within the preceding twelve (12) months we have shared or disclosed the following categories of personal information with our trusted service providers or third parties:

Personal Information Category	Category of Third-Party Recipients
	Business Purpose Disclosures	Sales
A: Identifiers.	Service providers and/or trusted third parties	None
B: California Customer Records personal information categories.	Service providers and/or trusted third parties	None
C: Protected classification characteristics under California or federal law.	None	None
D: Commercial information.	Service providers and/or trusted third parties	None
E: Biometric information.	None	None
F: Internet or other similar network activity.	Service providers and/or trusted third parties	None
G: Geolocation data.	Service providers and/or trusted third parties	None
H: Sensory data.	None	None
I: Professional or employment-related information.	Service providers and/or trusted third parties	None
J: Non-public education information.	None	None
K: Inferences drawn from other personal information.	None	None

Sweet Ride does not sell (as that term is defined in the CCPA) the personal information we collect (and will not sell it without providing a right to opt out). Please note that we do use third-party cookies for our advertising purposes as further described in our "Cookies" section, above.

Subject to certain limitations, the CCPA provides California consumers a right to request to know more details about the categories or specific pieces of personal information we collect (including how we use and disclose this information), to delete their personal information, to opt out of any "sales" that may be occurring, and to not be discriminated against for exercising these rights.

California consumers may make a request pursuant to their rights under the CCPA by contacting us at legal@sweetridehershey.com. We will verify your request using the information associated with your account, including email address. Government identification may be required. Consumers can also designate an authorized agent to exercise these rights on their behalf.

Right to Know. You have the right to know and see what data we collected about you over the past 12 months. This includes:

• The categories of personal information we collected about you.• The categories of sources for the personal information we collected about you.• Our business or commercial purpose for collecting or selling that personal information.• The categories of third parties with whom we share that personal information.• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:• sales, identifying the personal information categories that each category of recipient purchased; and• disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.• The specific pieces of personal information we collected about you (also called a data portability request).

Right to Delete. You have the right to request that we delete the personal information we have collected from you (and direct our service providers to do the same), subject to certain exceptions, including when such information is necessary to complete your transaction or to provide you the requested services. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.3. Debug products to identify and repair errors that impair existing intended functionality.4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.8. Comply with a legal obligation.9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Deletion Process. Once you have submitted a deletion request, and we have received verification from you that the request is authentic, you will be provided the opportunity to agree with what personal information will deleted.

Disclosure Rights. You can request certain information about our disclosure of personal information to third parties for their own direct marketing purposes during the preceding calendar year. This request may be made once a yearfree of charge.

Non-Discrimination. You have the right not to be discriminated against for exercising any of the rights listed above. Unless permitted by the CCPA, we will not:

• Deny you goods or services.• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.• Provide you a different level or quality of goods or services.• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Exercising Your California Privacy Rights. To request access to or deletion of your personal information, or to exercise any other data rights under California law, please contact us at legal@sweetridehershey.com. You may also utilize the link on our website, https://sweetridehershey.com/.

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. You may also make a request to know or delete on behalf of your child. You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, and• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. You do not need to create an account with us to submit a request to know or delete. We will only use personal information provided in the request to verify the requestor's identity or authority to make it.

Response Timing and Format. We aim to respond to a consumer request for access or deletion within ten (10) days of receiving requests for disclosure or deletion with information on how the request will be processed. If we need additional time the reasons for that will be stated to you within the ten days. Any substantive response to the request will be given within 45 days of receiving a verified request.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

For legal reasons

We will share personal information with companies, organizations or individuals outside of Sweet Ride if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to: a) meet any applicable law, regulation, legal process or enforceable governmental request; b) enforce applicable Terms of Service, including investigation of potential violations; c) detect, prevent, or otherwise address fraud, security or technical issues and d) protect against harm to the rights, property or safety of Sweet Ride, our users, or the public as required or permitted by law.

Changes to our Privacy Policy

Our Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes). The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our website and this Privacy Policy to check for any changes.

Questions

If you have questions about this privacy policy, or your own personal information, please contact us via the legal@sweetridehershey.com email address.

Effective Date: 05/19/2022

Welcome to the Sweet Ride Transportation, Inc. Data Privacy Policy for Advertisers

This Privacy Policy is meant to help you understand what data we collect, why we collect it and what we do with it. We hope you will take the time to read the policy carefully. And remember, you can find controls to manage your information and access and rectify your information with Sweet Ride Transportation, Inc., either through our app, or by logging in online at https://sweetridehershey.com/. Please also remember that use of the Sweet Ride platform is also subject to the Terms of Use applicable to your account.

Who we are?

Sweet Ride Transportation, Inc., more commonly known as just "Sweet Ride," is a unique ride-sharing service that provides low-cost or free short-distance transportation in environmentally friendly electric vehicles. In exchange, Riders are asked to view a short advertisement from our advertising partners.

Sweet Ride is committed to protecting the privacy of its Riders, Drivers, and Advertisers. Sweet Ride has developed this Data Privacy Policy to demonstrate its commitment and respect for the rules of privacy and protection of personal data. In this Data Privacy Policy, "Sweet Ride" includes all websites and places where Sweet Ride is responsible for the management of user data throughout the Sweet Ride platform, including its website and its mobile applications.

Why a Sweet Ride Data Privacy Policy?

This Data Privacy Policy discloses the general rules of privacy and the treatment of the personal data that we collect. When you share information with us, for example by registering for an account, we use this information to provide better services to you and our partners. For that purpose, we have established a data protection program to advise you as to how we collect data, for what purpose, and your options related thereto when you enter your personal data through online registration, when requesting services from the Sweet Ride platform or when you contact Sweet Ride. Additional Data Privacy information may be available on the various websites under our responsibility.

This Privacy Policy covers Sweet Ride’s treatment of personal information it may gather when you use our technology or services. Specifically, this Privacy Policy applies to personal information gathered via our website; in email, text, and other electronic messages between you and our website; through our app or other applications which provide dedicated non-browser-based interaction between you and our website; and when you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy. In order to enable Sweet Ride to provide services to you, we will need certain personal information.

What is covered by the Sweet Ride Data Privacy Policy?

Our Privacy Policy applies to the collection and processing of any personal data by Sweet Ride for services under its technical direction. This applies to Riders and Drivers (including applicants), as well as our Advertisers.

Our Privacy Policy does not apply to services offered by other companies or individuals. This Privacy Policy also does not apply to the practices of third parties that Sweet Ride does not own or control, or to individuals that Sweet Ride does not employ or manage.

What is personal data?

Personal data is information about you that you provide to Sweet Ride. It can include names, postal addresses, telephone numbers, email addresses, credit card information, driver’s license information, photographs, geolocation,and any other information relating to an individual. Personal data is also any information, including sound and image, relating to an identified or identifiable natural person taken during the course of any activity for which you registered.

Who is responsible for processing data?

Sweet Ride is responsible for the collection and processing of personal data made available by Riders, Drivers, and other users of the Sweet Ride platform such as Advertisers. Sweet Ride always attempts to specify clearly what data is collected, the means of data processing, and the purpose for which the data will be used.

What is the purpose of processing personal data?

We use your personal information to provide an efficient, easy-to-use platform for obtaining the services we provide. In general, the data collected is intended for the management and ongoing improvement of the Sweet Ride platform, the provision of Sweet Ride services, the adaptation of services to the user’s needs and interests, improving usersupport, information, marketing actions, responding to legal proceedings and obligations, as well as the inclusion of Riders and Drivers in subscriber lists.

We also collect it for security reasons/obligations. The collection of data is necessary to verify identities of our Riders and Drivers, and to allow us to provide a secure and safe platform through which to access the services. To do this, we require various authentication, verification, and other information (described below).

When you submit the data, you will be given information on how we will use your data for a specific activity.

What kind of information do we collect?

In the course of managing and providing Services in the Sweet Ride platform, Sweet Ride collects and processes certain personal data necessary for our technology to provide the highest level of service possible. This includes the following types of information from users of our technology and services:

Information About You. When you register for any of our services, we collect a wide variety of information about you. This includes information by which you may be personally identified. Some personal data is obligatory and, in the event that the data you provide is insufficient, Sweet Ride may not be able to make Sweet Ride servicesavailable to you. In each case, Sweet Ride will inform a user of the mandatory nature of the personal data requested. In no case will the data collected be used for any purpose other than that for which the data subject has given consent.

Advertiser Information. If you apply to advertise with Sweet Ride, we will collect the information you provide in your application, including your name, company name, email address, phone number, physical address, and other information specific to your business as applicable. We also collect payment information you provide us, including but not limited to banking and credit card information. Depending on the market where you seek to advertise or demographic you wish to reach, we may also seek additional information required by local regulations, such as business license or permit information. After being approved as an Advertiser you will be required to update this information regularly, and upon request by us.

Any financial transactions for Services will be processed by Stripe. For more information on how Stripe processesand secures data, see: https://stripe.com/privacy.

Communications; Emails and Telephone Calls. We require an email address from you when you register with Sweet Ride. We use your email for both transactional (e.g., ride confirmation and processing) and promotional (e.g., newsletters, new service offerings, special discounts, event notifications, special third-party offers) purposes. Email messages we send you may contain code that enables our database to track your usage of the emails, including whether the email was opened and what links (if any) were clicked. If you would rather not receive promotional emails from us, please see the section below labeled "Choice/Opt-Out." We reserve the right to send you certain communications relating to the services, such as service announcements and administrative messages, without offering you the opportunity to opt out of receiving them. We may also contact you by telephone or text message (including to any wireless number you may provide to us) solely in connection with the Services. If you would rather not receive telephone calls or text messages from us, you may change your account preferences page(s), or ask to be removed from our contact list, provided however that you cannot restrict our ability to contact you by telephone or text message(s) as necessary for the fulfillment of the Services (as stated in the Terms and Conditions). Whether you contact us, or we contact you, we collect any information that you provide, including the contents of the messages or attachments you send us.

We fully comply with the requirements of the U.S. CAN-SPAM Act.

When and how is your data collected?

Sweet Ride collects data through its website and/or mobile app, directly from and with the consent of its users. As a rule, personal data is collected when someone signs up for services as an Advertiser. Data may be collected by and through any of the following actions:

Log Files. We collect information about your use of the Sweet Ride Platform. Any time you visit any of our websites, our servers automatically gather information from your browser (such as your IP addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks) to analyze trends, administer the site, prevent fraud, track visitor movement in the aggregate, and gather broad demographic information. For example, we may log your IP address for system administration purposes. IP addresses are logged to track a user’s session. This gives us an idea of which parts of our site users are visiting. We do not share the log files externally.

Cookies. We may use "cookies" to keep track of some types of information while you are visiting our website or using our services. Cookies are very small files placed on your computer, and they allow us to count the number of visitors to our website and distinguish repeat visitors from new visitors. They also allow us to save user preferences and track user trends. We rely on cookies for the proper operation of our website; therefore, if your browser is set to reject all cookies, the website may not function properly. Users who refuse cookies assume all responsibility for any resulting loss of functionality. We do not link the cookies to any of your personal information.

Web Beacons. "Web beacons" (also known as "clear gifs" and "pixel tags") are small transparent graphic images that are often used in conjunction with cookies in order to further personalize our website for our users and to collect a limited set of information about our visitors. We may also use web beacons in email communications in order to understand the behavior of our Users. We do not link the web beacons to any of your personal information.

Mobile Analytics. We use mobile analytics software to allow us to better understand the functionality of our mobile software on your phone. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage, performance data, and where the application was downloaded from. We do not link the information we store within the analytics software to any of the personal information you submit within the mobile application.

Mobile Device. If you use a mobile device to access our site or download any of our applications, we may collect device information from you. For example, each time when signing into the app and checking the consent box allowing you to use the mobile service on your mobile device to access our service, we collect device information (such as your mobile device ID, model and manufacturer), operating system and version information, and IP address.

Online Survey Data. We may periodically conduct voluntary user surveys. We encourage our users to participate in such surveys because they provide us with important information regarding the improvement of our services. You may also volunteer for certain surveys that we may offer to our users, and any additional rules regarding the conduct of such surveys will be disclosed to you prior to your participation. We do not link the survey responses to any of your personal information and all responses are anonymous.

Geolocation Information. We require your consent to collect geolocational information to provide our ridesharingservices. We also use it for our internal purposes for security and legal obligations. To this end, we collect all GPS info (longitude, latitude, driving direction and speed, altitude, and general accuracy) available from a user’s phone and require users to consent to our application accessing such information or the application will not work properly. As such, the app starts logging geolocational information from the moment a user logs in to it.

Push Notifications. We send you push notifications if you choose to receive them to notify you of the status of your transactions and updates regarding our services. If you wish to opt-out from receiving these types of communications you may turn them off at the device level, other than push notifications necessary to facilitate the fulfillment of services. It is not possible to turn off in-app notifications as they are used for synchronizing information. Users can, however, disable/opt-out from Mobile notifications.

Accessing, rectifying, or opposing the processing of your personal data

You are guaranteed the right to access, update, rectify or delete your personal data at any time from Sweet Rideservers, as well as the right to oppose Sweet Ride or limit the use of data provided for marketing purposes, sending information communications or inclusion in lists or information services when submitting the information for an activity. If you have not done so when submitting data, send a written request to Sweet Ride, 142 W Chocolate Ave Hershey, PA 17033, by clicking the link on our website, or through the email address legal@sweetridehershey.com

Whenever you use our services, we aim to provide you with access to your personal information. If that information is wrong, we strive to give you ways to update it quickly or to delete it – unless we have to keep that information for legitimate business or legal purposes. When updating your personal information, we may ask you to verify your identity before we can act on your request.

Choice/Opt-Out

We respect your privacy. Sweet Ride will provide you the opportunity to "opt-out" of having your personally identifiable information used for certain purposes. For example, you may opt-out of receiving communications from Sweet Ride, remove your information from Sweet Ride’s active database, and choose to not receive future communications unrelated to our technology and services by contacting us. For communications from participating partners and advertisers, please check their respective opt-in/opt-out policies. You may exercise your right to opt-out by utilizing your mobile app or by logging into your account on our website, https://sweetridehershey.com/.

Data Retention

Because many users tend to use our service on a repeat basis, we retain your personal information for continued service and convenience purposes in accordance with our data retention policy until the user advises us not to do so. Notwithstanding the foregoing, we may retain personal information in order to comply with applicable laws (including data retention laws), keep accurate records, resolve disputes, prevent fraud, enforce our Terms and Conditions of Service or other agreements, or for any other legally permissible purpose.

Is data transferred to third parties (third parties or subcontractors)?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information except to trusted third parties who assist us in operating our website, mobile app, for the conduct of our business, or servicing you, so long as those parties agree to keep this information confidential. Any Personal Data which may be transferred to our client or service providers for any activity shall be done via encrypted services to ensure the protection of your information. We require our third-party providers to agree to our data protection provisions in all of our service contracts.

It is usual for Sweet Ride, in the scope of its activity, to proceed with the data collection process through the engagement of contracted entities. The provision of these services implies that these entities have access to the data transmitted in the registration processes.

Sweet Ride takes precautions to ensure that entities with access to the data are reputable and offer the highest guarantees at this level and therefore the processing of the data provided will be duly safeguarded. All financial transactions related to any Services for Sweet Ride’s users will be done through Stripe. For more information on how Stripe processes and secures data, see: https://stripe.com/privacy.

Thus, any entity under contract with Sweet Ride that will collect, store, or process personal data on behalf of Sweet Ride will be required to take the necessary technical and organizational measures to protect personal data against accidental, unlawful destruction, accidental loss, alteration, dissemination, or unauthorized access and against any other form of unlawful treatment.

In any case, Sweet Ride remains responsible for the personal data made available by its users. Under legal terms, at all times, the user is able to oppose the communication of data to third parties, namely for marketing purposes.

What information do we share with Third Party service providers?

We do not share personal information with companies, organizations, or individuals outside of Sweet Ride unless one of the following circumstances applies:

(a) With your consent

We will share personal information with companies, organizations, or individuals outside of Sweet Ride when we have your consent to do so. We require opt-in consent for the sharing of any personal data.

(b) Part of a Reorganization

We will share your personal information with a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Sweet Ride's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Sweet Ride about our website users is among the assets transferred.

(c) Age Restrictions

Our age restrictions for different services are set forth in each applicable Terms and Conditions of Service. We do not target our sites or services to anyone under the age of 18, including children under the age of 13, and in compliance with the Children’s Online Privacy Protection Act, any information we may receive from users we believe to be under the age of 18 will be purged from our database.

Security of Personal Data Information

We work hard to protect Sweet Ride and our users from unauthorized access to or unauthorized alteration, disclosure, or destruction of information we hold. We review our information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems. Furthermore, we utilize commercially reasonable physical, technical, and organizational measures to preserve the integrity of the personal information we collect and possess. We restrict access to personal information to Sweet Ride employees, contractors, and agents who need to know that information in order to process it for us, and who are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our website or app, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our website or app. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the website or app.

Compliance and cooperation with regulatory authorities

We regularly review our compliance with our Privacy Policy. When we receive formal written complaints, we will contact the person who made the complaint to follow up. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that we cannot resolve with our users directly.

For California Residents

This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or "CCPA."

For more details about the personal information we have collected over the last 12 months, including the categories of sources, please see below. We have collected the following categories of personal information from individualswithin the last twelve (12) months:

Category	Examples	Collected
A. Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.	YES
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	YES
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	NO
D. Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.	YES
G. Geolocation data.	Physical location or movements.	YES
H. Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	NO
I. Professional or employment-related information.	Current or past job history or performance evaluations.	YES
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO
K. Inferences drawn from other personal information.	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO

We obtain the categories of personal information listed above from the multiple categories of sources, including you directly, internet service providers, data analytic providers, and operating systems and platforms. For additional details about the methods and manner of collection, see the "When and how is your data collected" section, above.

We collect this information for the business and commercial purposes described in the "What is the purpose of processing personal data" section above.

We share this information with the categories of third parties described in the "Is data transferred to third parties (third parties or subcontractors)" and "What information do we share with Third Party service providers" sections, above. Within the preceding twelve (12) months we have shared or disclosed the following categories of personal information with our trusted service providers or third parties:

Personal Information Category	Category of Third-Party Recipients
	Business Purpose Disclosures	Sales
A: Identifiers.	Service providers and/or trusted third parties	None
B: California Customer Records personal information categories.	Service providers and/or trusted third parties	None
C: Protected classification characteristics under California or federal law.	None	None
D: Commercial information.	Service providers and/or trusted third parties	None
E: Biometric information.	None	None
F: Internet or other similar network activity.	Service providers and/or trusted third parties	None
G: Geolocation data.	Service providers and/or trusted third parties	None
H: Sensory data.	None	None
I: Professional or employment-related information.	Service providers and/or trusted third parties	None
J: Non-public education information.	None	None
K: Inferences drawn from other personal information.	None	None

Sweet Ride does not sell (as that term is defined in the CCPA) the personal information we collect (and will not sell it without providing a right to opt out). Please note that we do use third-party cookies for our advertising purposes as further described in our "Cookies" section, above.

Subject to certain limitations, the CCPA provides California consumers a right to request to know more details about the categories or specific pieces of personal information we collect (including how we use and disclose this information), to delete their personal information, to opt out of any "sales" that may be occurring, and to not be discriminated against for exercising these rights.

California consumers may make a request pursuant to their rights under the CCPA by contacting us at legal@sweetridehershey.com. We will verify your request using the information associated with your account, including email address. Government identification may be required. Consumers can also designate an authorized agent to exercise these rights on their behalf.

Right to Know. You have the right to know and see what data we collected about you over the past 12 months. This includes:

• The categories of personal information we collected about you.• The categories of sources for the personal information we collected about you.• Our business or commercial purpose for collecting or selling that personal information.• The categories of third parties with whom we share that personal information.• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:• sales, identifying the personal information categories that each category of recipient purchased; and• disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.• The specific pieces of personal information we collected about you (also called a data portability request).

Right to Delete. You have the right to request that we delete the personal information we have collected from you (and direct our service providers to do the same), subject to certain exceptions, including when such information is necessary to complete your transaction or to provide you the requested services. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.3. Debug products to identify and repair errors that impair existing intended functionality.4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.8. Comply with a legal obligation.9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Deletion Process. Once you have submitted a deletion request, and we have received verification from you that the request is authentic, you will be provided the opportunity to agree with what personal information will deleted.

Disclosure Rights. You can request certain information about our disclosure of personal information to third parties for their own direct marketing purposes during the preceding calendar year. This request may be made once a yearfree of charge.

Non-Discrimination. You have the right not to be discriminated against for exercising any of the rights listed above. Unless permitted by the CCPA, we will not:

• Deny you goods or services.• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.• Provide you a different level or quality of goods or services.• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Exercising Your California Privacy Rights. To request access to or deletion of your personal information, or to exercise any other data rights under California law, please contact us at legal@sweetridehershey.com. You may also utilize the link on our website, https://sweetridehershey.com/.

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. You may also make a request to know or delete on behalf of your child. You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, and• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. You do not need to create an account with us to submit a request to know or delete. We will only use personal information provided in the request to verify the requestor's identity or authority to make it.

Response Timing and Format. We aim to respond to a consumer request for access or deletion within ten (10) days of receiving requests for disclosure or deletion with information on how the request will be processed. If we need additional time the reasons for that will be stated to you within the ten days. Any substantive response to the request will be given within 45 days of receiving a verified request.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

For legal reasons

We will share personal information with companies, organizations or individuals outside of Sweet Ride if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to: a) meet any applicable law, regulation, legal process or enforceable governmental request; b) enforce applicable Terms of Service, including investigation of potential violations; c) detect, prevent, or otherwise address fraud, security or technical issues and d) protect against harm to the rights, property or safety of Sweet Ride, our users, or the public as required or permitted by law.

Changes to our Privacy Policy

Our Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes). The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our website and this Privacy Policy to check for any changes.

Questions

If you have questions about this privacy policy, or your own personal information, please contact us via the legal@sweetridehershey email address.