GOLDEN BAY DRYWALL, INC. (#2026264)

Sutton Specialty Insurance Company 1855 Griffin Road, Suite B-390 Dania Beach, Florida 33004 SS Privacy 10 21 9 • A list of the categories of Pl the business has collected, sold, or disclosed for a business purpose in the preceding 12 months. VIII. How Do I Make a CCPA Request? A. Instructions for Submitting a Request. If you are a California consumer and wish to make a CCPA request to us, you may submit your request by: Fill out a Form on our Website: https://suttonnational.com/privacy-requests Call us, Toll-Free, at: 1-877-201-1125 We will confirm receipt of your request within 10 days of receiving it. The confirmation will provide a ticket number for your request, information about how we will process and attempt to verify your request, and by when you should expect to receive a response . Note that we are only required to respond to your request to know - for access or data portability - two times in any 12-month period. We are required to keep records of your CCPA request for at least 24 months, including any assigned ticket number, the request date and nature of the request, the manner in which the request was made, the date and nature of our response, and the basis for the denial of the request if the request is denied in whole or in part. B. We Need to Verify Your CCPA Request. We need to be reasonably sure that the person making the request regarding your Pl is you, or a representative that you have authorized to make a request on your behalf. We cannot respond to your request or provide you with Pl if we cannot verify your identity or your authority to make a request on behalf of another person. Accordingly, at the time you submit your request, we will request that you provide us certain information, such as your full name, date of birth, and address, that will allow us to attempt to reasonably verify you are either the person about whom we collected Pl or an authorized representative of that person. To the extent possible, we will not ask you for new Pl to verify your request but will instead attempt to use the verification data you provide to cross-check information available in existing records. If we are unable to verify your request without requesting new Pl, we will delete that new information as soon as practical after processing your CCPA request, except as may be required to comply with the CCPA's request record retention requirements. You are not required to create an account with us to verify your request. We will only use Pl you provide for verification to attempt to verify your identify or your authority to make the request for another person. Please note that certain requests require different levels of verification, depending on the sensitivity of the information at issue. For example, if you request to know the specific pieces of information we hold, and not just the categories, we will require, in addition to matching data points, your submission of a written declaration under penalty of perjury that you are the consumer whose Pl is the subject of the request. In addition, certain pieces of information, such as a social Docusign Envelope ID: C32ED128-E8C0-4517-B42B-471D21968944