LDC PRIVACY STATEMENT Effective Date: January 11, 2021 Laboratory Data Consultants, Inc. (LDC) cares about your privacy and wants you to be familiar with how we collect, use, and disclose data. This Privacy Statement covers the collection, use, and disclosure of data collected via lab-data.com, ldcadvantage.lab-data.com, edmsi.lab-data.com, aas360.lab-data.com, and any other LDC website where this Privacy Statement is posted or linked (collectively, this “Site”). This Privacy Statement also describes your legal rights in relation to such data. Please note that this Privacy Statement addresses the data collection and handling practices associated with this Site only. Other websites provided by LDC may be governed by their own privacy statements. Additionally, the LDC Environmental Informatics and Technical Support Group may be subject to their own statements specific to a product or service. We encourage you to review these privacy statements to understand how the Environmental Informatics and Technical Support Group may use your data. By using this Site, you are subject to the terms and conditions of this Privacy Statement. DATA COLLECTION We collect or obtain data relating to you in a variety of ways, as described below. Such data may include personal data, i.e., information that alone or in combination with other information identifies you as an individual or can be reasonably linked to your identity. Data You Provide: When you submit questions, request information, or give us feedback via this Site, we may ask you for data, like your name, postal address, telephone number, and email address so we can respond or follow up. We may also ask you to provide other data relevant to your question, request, or feedback, such as your geographical location, industry, and preferred contact method. You may also make requests to exercise your individual rights under applicable privacy laws as described below in the “Exercising Your Rights” section. We will collect and maintain data related to such requests in order to respond to you and for our audit and legal compliance purposes. We generally do not seek data that may be considered “special” or “sensitive” personal data (e.g., government-issued identification numbers or information related to an individual’s racial or ethnic origin, political opinions, religious or other beliefs, health, or criminal background) from visitors of this Site, and we ask that you do not provide such data. If we specifically require “special” or “sensitive” personal data in connection with one or more of the uses described below, we will request your consent to use the data in accordance with this Privacy Statement and/or in the ways described at the point where you were asked to disclose the data. If you voluntarily share with us or post/upload any “special” or “sensitive” personal data to this Site for any other reason, you consent that we may use such data in accordance with applicable law and this Privacy Statement. Please note that any information or materials you post or disclose on this Site via message boards, chats, profile pages, blogs, and other services (including social media services) are publicly available and will be seen by other visitors to this Site. You should consider this when deciding to disclose any personal data or any other information on this Site. Data Collected from your Use of this Site: We automatically receive certain data about the computer or device you are using when you visit this Site, including: your Internet Protocol (IP) address; information about the browser or type of device you are using; data collected through cookies, and other similar technologies as described below in the “Cookies and Other Internet Technologies” section; and the date and time of your visit. We also collect data about the content you viewed or downloaded including the name and time viewed. DATA USE We use data about you for the purpose(s) for which it was collected or provided to us (as stated at the point of collection) or as otherwise obvious from the context of collection. We may also use data to: • Administer and manage this Site, communicate with you about this Site, process your request for information, or otherwise complete a transaction or service you request or authorize; • Customize or personalize your user experience and the content we deliver to you, including to provide you with content that is more relevant to you; • Contact you about LDC products and services, or send you other communications about LDC’s business and events (including communications based on your interests, personal and business characteristics, and location) (collectively, “marketing communications”). We may provide these communications via email, postal mail, online, and other means; • Carry out our internal business purposes, such as transactions, audits, and data analysis; develop new products; improve this Site and our existing products and services; and identify usage trends; • Protect the rights, safety, property, or operations of LDC, you, or others; • Comply with applicable law and/or respond to requests and communications from law enforcement authorities or other government officials. Note that you may unsubscribe from a LDC mailing list at any time by clicking on the ‘unsubscribe’ link in any of our marketing communications to you. After you unsubscribe, we will not send you further marketing communications, but we may continue to contact you to the extent necessary for the purposes of any services you have requested. We will never use your personal data to advertise, promote, or market third-party goods or services to you. Additionally, we will not license or publish any of your personal data. We do not and will not sell any personal data to third parties for their own commercial use. BASIS FOR PROCESSING PERSONAL DATA Applicable law in certain states requires us to set out in this Privacy Statement the legal basis upon which we rely in order to process personal data. Consent: We may rely on the consent that you provide us at the point of data collection or disclosure to us to process such data for the purposes outlined herein. Legitimate interests: We may rely on our legitimate interests to process your personal data, provided that our interests are not overridden by your interests, fundamental rights, or freedoms. In particular, we may process your personal data in reliance on a legitimate interest in the effective and lawful operation of this Site and our businesses, as well as the effective delivery of information and services to you. Compliance with legal obligations: We may process your personal data if necessary for us to comply with a legal obligation arising under an applicable law to which we are subject. To the extent that we process any “special” or “sensitive” categories of personal data relating to you, we will do so because either: (i) you have given us your explicit consent to carry out such processing; (ii) the processing is necessary for the establishment, exercise, or defense of legal claims; or (iii) you have made the data manifestly public. If you have questions or concerns about the legal basis upon which we collect and use your personal data, you can contact us at technicalsupport@lab-data.com. DISCLOSURES OF PERSONAL DATA In connection with one or more of the purposes outlined in the “Data Use” section above, we may disclose your data to: • Third parties that provide services to us, such as system hosting, management, and support; data analysis; facilitation of advertisements; data backup; and data security and storage services; • Relevant third parties as part of a corporate transaction, such as a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business or assets (including in connection with a bankruptcy or similar proceeding); • Competent governmental and public authorities, in each case to comply with legal or regulatory obligations or requests; and • Other third parties as we believe necessary or appropriate: (a) under applicable law; (b) to comply with legal process; (c) to enforce our terms and conditions; (d) to protect our operations; (e) to protect our rights, privacy, safety, or property, you, or others; and (f) to allow us to pursue available remedies or limit damages that we may sustain. COOKIES AND OTHER INTERNET TECHNOLOGIES This Site uses cookies (i.e., small text files placed on your device) and similar technologies (e.g., Javascript) – including cookies and technologies from third-party providers – to enable certain features and functionality and to collect additional information that helps us to improve this Site and our services. This Site may also use persistent cookies (which remain on your device after you close your browser until you delete them or they expire). We use these technologies for session purposes, security purposes, to help you navigate this Site, to display information more effectively, to better serve you with tailored information on this Site, and to gather statistical information about how visitors use this Site in order to continually improve its design and functions. If you do not want data to be collected from your device via cookies, most browsers have a setting that allows you to decline the use of cookies. This Site will not work properly if you decline the use of cookies. To learn more about cookies, please visit https://www.allaboutcookies.org/ Google Analytics: We use Google Analytics, a web analytics tool that may set cookies in your browser, in order to help us understand how visitors engage with this Site. To learn more about Google Analytics’ data practices, please visit https://support.google.com/analytics/answer/6004245?hl=en. For opt-out options specific to Google Analytics, please visit https://tools.google.com/dlpage/gaoptout. THIRD-PARTY WEBSITES This Privacy Statement does not address, and we are not responsible for, the privacy practices of any third parties, including those that operate websites to which this Site links. The inclusion of a link on this Site does not imply that we or our affiliates endorse the practices of the linked website. DATA SECURITY We use reasonable organizational, technical, and administrative measures to protect data under our control. Unfortunately, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you feel that the security of any data that we hold about you has been compromised, please immediately notify us of the problem by contacting us in accordance with the “Contact Us” section below. EXERCISING YOUR RIGHTS You have choices about how your personal data is handled, and we are committed to providing you with reasonable access to your personal data and the ability to review and limit the use of such data in accordance with applicable law. If you no longer want to receive electronic newsletters you signed up to receive or other marketing communications from LDC, Inc, you can click on the ‘unsubscribe’ link at the bottom of such communications. Depending on your state (or country) of residence, you may also have the right to: • request confirmation that we are processing your personal data; • request a copy of the personal data we hold about you; • request that we update the personal data we hold about you or correct such data that is inaccurate or incomplete; • restrict the way in which we use your personal data (e.g., if we have no legal right to keep using it) or limit our use of your personal data (e.g., if your personal data is inaccurate or unlawfully held); • object to our processing of your personal data; • withdraw the consent that you have given us to process your personal data (where we process your personal data on the basis of your consent); • request that we delete the personal data we hold about you; and • lodge a complaint with the data protection or privacy authority in your state of residence regarding our processing of your personal data. If you are interested in exercising one or more of the rights described above, you can contact us at technicalsupport@lab-data.com. Please note that we may require proof of your identity before we can give effect to these rights. We will not discriminate against you if you decide to exercise your rights under applicable law. Because we want to avoid taking action regarding your personal data at the direction of someone other than you, only you or an “Authorized Agent” permitted to act on your behalf may submit a request. An “Authorized Agent” means a natural person or a business entity you have authorized to act on your behalf by providing your written permission. Please note, we may deny a request from an Authorized Agent if they do not submit proof that they have been authorized by you to act on your behalf. Your request must: • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal data or an Authorized Agent; and • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data we maintain relates to you. To verify your identity, we will seek to match any personal data you provide when you (or an Authorized Agent) submit your request to any personal data we already maintain. If we are unable to verify your identity based on the data we maintain, we will let you know. Special Notice to California Residents If you are a resident of the state of California, you are entitled to request information regarding the disclosure of your personal data to third parties for direct marketing purposes. Please note that we do not share your personal data with third parties for such purposes. DO NOT TRACK SIGNALS “Do Not Track” (“DNT”) is a preference you can set in your web browser to let the websites you visit know that you do not want them collecting data about you. At this time, this Site does not respond to DNT or similar signals. Please refer to the “Cookies and Other Internet Technologies” section of this Privacy Statement for more information about how you can decline the use of cookies on your device. DATA RETENTION We will retain your personal data only for those periods necessary to fulfill the various purposes outlined in this Privacy Statement, unless a longer retention period is required or allowed by law. UPDATES TO THIS PRIVACY STATEMENT We may make changes to this Privacy Statement from time to time. The “Effective Date” at the top of this page shows when this Privacy Statement was last revised. Any changes will become effective when we post a revised version of this Privacy Statement on this Site. Your use of this Site is subject to the terms in the version of this Privacy Statement that is posted on this Site at the time of your visit. We encourage you to review this Privacy Statement periodically to remain informed about how we are protecting your data. CONTACT US If you have any comments or questions regarding this Privacy Statement or our data handling practices, or wish to contact our Data Protection Officer, please contact us at technicalsupport@lab-data.com. You can also send us a letter at the following address: Laboratory Data Consultants, Inc. 2701 Loker Ave West, Suite 220 Carlsbad, CA 92010