GOLDEN BAY DRYWALL, INC. (#2026264)

Sutton Specialty Insurance Company 1855 Griffin Road, Suite B-390 Dania Beach, Florida 33004 SS Privacy 10 21 8 2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities. 3. Debug products to identify and repair errors that impair existing intended functionality. 4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law. 5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.). 6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent. 7. Enable solely internal uses that are reasonably aligned with consumer expectations based on the consumer's relationship with the business . 8. Comply with a legal obligation. 9. Make other internal and lawful uses of the information that are compatible with the context in which the consumer provided it. E. Consumer Right to Non-Discrimination. A business must not discriminate against a consumer who exercises CCPA rights. A business may charge different prices or provide a different quality of goods or services, but only if the difference is reasonably related to the value provided to the consumer by the consumer's data. A business may offer financial incentives to a consumer for the collection, sale, or deletion of personal information on a prior, opt -in consent basis. F. Consumer Right to Opt-Out. A covered business that sells Pl to third parties must provide notice to consumers and clearly inform them of the right to opt out of the sale. A business that sells Pl also must provide a "Do Not Sell My Personal Information" link on its internet homepage that links to a webpage that enables the consumer to opt out of the sale of his or her Pl. A business is prohibited from selling the Pl of a cons umer the business knows is less than 16 years of age, unless (for a child between 13 and 16 years of age) the child has affirmatively authorized the sale or (for a child less than 13 years of age) the child's parent or guardian has affirmatively authorized the sale. G. Privacy Policy Requirements. A covered business must include the following in its online privacy policy, which should be updated every 12 months: • A description of consumer CCPA rights, including the right to opt out of the sale of Pl and a separate link to a "Do Not Sell My Personal Information" internet webpage if the business sells Pl; • The method(s) by which a CCPA request can be submitted; and Docusign Envelope ID: C32ED128-E8C0-4517-B42B-471D21968944