Privacy Policy

Last Updated: January 1, 2023

Your privacy is important to us at Rent-A-Center Franchising International, Inc. ("RimTyme," "Company," "we," "us," or "our"), and we are committed to safeguarding, preserving, and respecting your privacy rights. This online privacy statement (the"Statement" or "Policy") describes how we collect, use, disclose, and secure the personal information we gather about you through our website https://www.rimtyme.com/ (the "Site"), our online services, and when you interact with us as a customer or otherwise (collectively, the "Services").

For purposes of this Statement, personal information means data that classifies as personal information,personal data, personally identifiable information, or similar terms under applicable data privacy and security laws and regulations. It does not include data excluded or exempted from those laws and regulations. Nothing in this Statement will constitute an admission or evidence that any particular data privacy or information security law or regulation applies to the Company generally or in any specific context.

This Policy expressly incorporates any privacy notices we may issue to supplement this Policy, for example if required by law. Depending on your residency, a supplemental privacy notice may apply to you. Unless supplemental notices expressly provide otherwise, in the event of any conflict between this Policy and additional privacy notices this Policy governs.

1. You Consent to This Statement

You should read this Statement carefully, so that you understand our privacy practices. recommend printing and retaining a copy for your future reference. By accessing, browsing, downloading, or otherwise using the Services, you confirm that you have read, understood, and agreed with this Statement. If you do not agree to this Statement, you may not use the Services.

This Statement applies regardless of how the Services are accessed and will cover any technologies or devices by which we make the Services available to you, including mobile devices.

We may provide you with additional privacy notices or terms where we believe it is appropriate to do so. It is important that you read this Statement together with any other privacy notice or terms we may provide on specific occasions, so that you are fully aware of how and why we are using your data. This Statement supplements these other notices and is not intended to override them.

If you have any questions or concerns about our personal information policies or practices, you can contact us using the methods described in the "Contact Us" section below.

2. What Types of Information Do We Collect?

We collect information you voluntarily provide to us directly, information that we collect automatically when you interact with the Services, and information collected from third parties. The categories of personal information that we collect and the purposes for which we collect that information are described below.

Categories of Personal Information We Collect

The following list describes the categories of personal information we may collect.

• Account Information includes name, zip code, country, email address, username, and password. We collect this information when you provide it directly to us.
• Analytics Information. We may collect certain analytics information automatically as you navigate our Services. This may include cookies, tracking pixels, tags or similar tools, such as session replay technologies that may log how you interact with our Services. For more information, please view the "How Do We Use "Cookies" and Other Tracking Technologies?" section below.
• Contact Information includes name, mailing address, email address, and phone number. We may also request and collect similar contact information regarding individuals you list as references. We collect this information when you provide it to us directly, such as when you make a purchase or fill out a form.
• Commercial History includes information regarding the purchases you have made through our Services such as your lease or rental agreement number, item leased, payment information, and last transaction date. We collect this information when you provide it directly to us.
• Demographic Information includes name, email address, place of employment, type of employment,industry, household income, race, age, and gender. We collect this information when you provide it directly to us, such as when you complete an application or take part in voluntary market research surveys.
• Device Information includes hardware model, screen size, language and other settings, memory capacity,plug-ins, internet service provider, internet domain, TCP configuration parameters, operating system,application version number, browser, names, versions and package IDs of software on your device, and IPaddresses. We collect this information automatically as you navigate our Services.
• Email Interaction Information includes IP address, location information, unique device identifier or characteristics, internet service provider, mobile carrier, browser, operating system, and cookies. We collect this information when you interact with our marketing emails such as by clicking on links in those emails. If you email us, we will collect your email address and any information contained in the email.
• Financial Information includes information that you provide regarding your lease or rental agreement and product interests, such as your Social Security number and information regarding your income, employment,and references.
• Geolocation Information includes information about your actual location, which may be determined from GPS and other sensors that may reveal information on or nearby devices, Wi-Fi access points, and cell towers. We collect this information automatically as you navigate our Services.
• Interests and Preferences includes products that you may be interested in and information regarding alerts you may like to receive. We collect this information when you provide it directly to us and by analyzing your interactions with our Services.
• Payment Information may include name, address, phone number, debit or credit card information, or information regarding any relevant rental or lease agreement. We collect this information when you provide it directly to us.
• RAC Digital Assistant Information includes information that you provide to us when you initiate or otherwise send a communication through the RAC Digital Assistant, our automated chat function. Please note that by using the RAC Digital Assistant, you are engaging with an automated program and not a real person, and we will record the conversation. Please also note that information relating to your communications may be shared with our service provider.
• Responses to Surveys and Questionnaires includes any information you provide to us when you voluntarily complete market research surveys such as email address, place of employment, type of employment, industry,interests, household income, race, age, and gender. We collect this information when you provide it directly to us.
• Social Media Information includes information that you post or share on a blog or other form of social media platform. We collect this information when you provide it directly to us. Please note that your comments may be visible to the public, so you should never share personal information that you would like to keep private.

Purposes for Collection of Personal Information

The following chart identifies the purposes for which we may collect your personal information, as well as information regarding our use and disclosure of that personal information. Please note that we may not collect each category of information about each user of our Services.

Other Ways We May Collect, Use, or Share the Information

We may also reserve the right to collect, use, or share personal information for the following purposes:

• Based on your consent or direction. Throughout the course of using our Services, you may be provided with additional opportunities to consent to the disclosure of your personal information with various third parties. In these circumstances, the Company will provide you with clear and specific notice of the opportunity in order to obtain your consent.
• For legal purposes. We reserve the right to cooperate with local, provincial, state,federal and international officials in any investigation requiring either personal information or reports about lawful or unlawful user activity on this site. We also reserve the right to share your personal information to establish, exercise, or defend our legal and property rights, including providing information to others for the purposes of fraud prevention. We may also share your personal information (i) if we are ordered by a legal process or government to do so, or (ii) with any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.
• Business transactions or mergers. We reserve the right to share your personal information to third parties as part of any potential business or asset sale, merger,acquisition, investment, round of funding, or similar type of transaction. Additionally, if we are entering into a corporate transaction with a third party, we may receive personal information in connection with the diligence. If we close a transaction, the third party may transfer personal information, which we would use as described in this Policy.
• Bankruptcy or insolvency. In the event of bankruptcy, insolvency,or dissolution proceedings, we may share your personal information with third parties as part of the sale or reorganization process.
• Service Providers.With service providers who perform services on our behalf. Any such service providers will be under an obligation to us to maintain the confidentiality of your personal information.
• Our partners, affiliates, and subsidiaries. We may collect information from—or share information with—our partners such as market research firms, financial services partners, and our affiliates, subsidiaries, joint ventures, or other companies under common control. We may combine that information with other information we collect about you. Furthermore, all information gathered about you by the Company may be shared with any of the Company's current or future subsidiaries or affiliates.

We will not disclose your information except as provided for in this Policy.

3. How Do We Use "Cookies" and Other Tracking Technologies?

We may send one or more cookies to your computer or other device. We may also use other similar technologies such as tracking pixels, tags, or similar tools when you visit our Services. These technologies can collect data regarding your operating system, browser type, device type, screen resolution, IPaddress, and other technical information, as well as navigation events and session information as you interact with our Services. This information allows us to understand how you use the Services.

What Are Cookies?

Cookies are small files created by websites, including our Services, that reside on your computer's hard drive and that store information about your use of a particular website. When you access our Services, we use cookies and other tracking technologies to:

• Estimate our audience size and usage patterns;
• Store information about your preferences, allowing us to customize our Services according to your individual needs;
• Contact you to provide you with information or services that you request from us;
• Advertise new content, events, and services that relate to your interests;
• Provide you with more personalized content that is most relevant to your interest areas; and
• Recognize when you return to our Services.

We set some cookies ourselves and others are set by third parties. You can manage your Cookies preference as described in the "Managing Your Cookies" section below.

What Types of Cookies Do We Use and Why?

The following chart lists the different types of cookies that we and our service providers use on the Services,examples of who serves those cookies and links to the privacy notices and opt-out information of those cookie servers.

We do not disclose information to any third party that identifies a specific person as having viewed specific video materials.

How Long Do Cookies Stay on My Device?

Some cookies operate from the time you visit the Services until the end of that particular browsing session. These cookies, which are called "session cookies," expire and are automatically deleted when you close your Internet browser.

Some cookies will stay on your device between browsing sessions and will not expire or automatically delete when you close your Internet browser. These cookies are called "persistent cookies" and the length of time they will remain on your device will vary from cookie to cookie. Persistent cookies are used for a number of purposes, such as storing your preferences so that they are available for your next visit and to keep a more accurate account of how often you visit the Services, how your use of the Services may change over time, and the effectiveness of advertising efforts.

Managing Your Cookies

It may be possible to block cookies by changing your Internet browser settings to refuse all or some cookies. If you choose to block all cookies (including Essential cookies), you may not be able to access all or parts of the Services.

You can find out more about cookies and how to manage them by visiting https://www.aboutcookies.org/.

Does the Site Respond to "Do Not Track" Signals?

There is currently no industry agreed-upon response to a Do Not Track signal. At this time, ourSite does not respond differently based on a user's Do Not Track signal. To learn more about interest-based advertising or to opt-out of this type of advertising, visit the NetworkAdvertising Initiative website and the Digital Advertising Alliance website. Options you select are browser- and device-specific.

4. Virginia Users' Rights

Virginia residents have certain rights with respect to their data. These rights are established through theVirginia Consumer Data Protection Act ("VCDPA"). To exercise any of the following rights listed in the chart below, please visit us at https://racbrandsprivacy.truyo.com/consumer/index.

Sensitive Information

Sensitive Data as defined in the VCDPA includes precise geolocation information. For the purposes of serving you relevant advertisements based on your location, we collect geolocation information to perform geo fencing. We will not collect this information from Virginia residents without first obtaining consent.

Exercising Your Rights

If you are a Virginia resident and wish to exercise one of the above rights and it applies to you, please submit a request by visiting us at https://racbrandsprivacy.truyo.com/consumer/index or call us using the phone number listed in the "Contact Us" section below.

If necessary, we may request additional information reasonably necessary to authenticate you and your request.

In certain circumstances, you may make a request on behalf of another such as if you are an authorized agent or the parent or guardian of a child on behalf of whom you wish to exercise their rights.

We will respond to verified consumer requests, if applicable, within 45 days of receipt of the request and without undue delay. If we need to extend this period, we will notify you of the delay and explain the reasonably necessary justifications for our delay.

We will provide responses to your requests free of charge unless certain exclusions apply, depending on the state in which you reside. We may charge a fee in:

• Virginia, if the request is manifestly unfounded or excessive, or repetitive in nature.

Appealing a Rights Request Decision

If you are a resident of Virginia, and we deny or reject your request to exercise your applicable consumer privacy rights, you may appeal our decision. When this happens, we will send you an email informing you of our decision. The email will include a link that you can access in order to initiate the appeals process.

We will inform you in writing within 45 days of any action taken or not taken in response to the appeal. We will also provide a written explanation of the reasons for our decisions regarding your request(s).

5. Advertising and Marketing Choice

We respect your rights in how your personal information is used and shared. If at any time you would like to unsubscribe from receiving future emails, you can follow the instructions at the bottom of each email, and we will promptly remove you from marketing correspondence. Please note,however, that we may still need to contact you regarding other matters.

6. How Long Is Your Personal Information Kept

We will retain your personal information until the personal information is no longer necessary to accomplish the purpose for which it was provided. We may retain your personal information for longer periods for specific purposes to the extent that we are obliged to do so in accordance with applicable laws and regulations, to protect you, other people, and us from fraud, abuse, an unauthorized access, as necessary to protect our legal rights, or for certain business requirements.

We will delete your personal information when it is no longer necessary for the purpose for which it was collected, or upon your request, subject to exceptions as discussed in this Statement or under applicable law,contract, or regulation.

7. Our Commitment to Data Security

The Company will use appropriate security measures to protect your information from unauthorized access,disclosure, alteration, or destruction, including sensitive information such as social security number, date of birth, and credit cardholder data, in a secure, controlled environment. The Company has made substantial investments in server, database, backup, and firewall technologies to protect the security and integrity of your information. However, we cannot and do not guarantee complete security, as it does not exist on the Internet. In the event that a security breach does occur and your information is acquired by an unauthorized person, we will take appropriate steps to contain the breach and to notify you of the unauthorized acquisition as required bylaw.

However, we cannot and do not guarantee complete security, as it does not exist on the Internet.

8. Third Party Links

Our Services may contain links to third-party websites. When we provide links, we do so only as a convenience and we are not responsible for any content of any third-party website or any links contained within. It is important to note that this Statement only applies to the Company's Services. We are not responsible and assume no responsibility for any personal information collected, stored, or used by any third party as a result of you visiting third-party websites. We also advise that you carefully read the privacy notice of any third-party websites you choose to visit.

9. Children's Privacy

Protecting the privacy of the very young is especially important. Our Services are not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13.In the event that we learn that we have collected personal information from a child under age 13 without verification or parental consent, we will immediately delete that information. If you believe that we might have any information from or about a child under 13, please contact us using the information provided in the "Contact Us" section below. If you are under the age of 18, you must ask a parent or legal guardian to order merchandise from the Company.

10. Policy Changes

This Statement may change from time to time. If we need to change this Statement at some point in the future,we will post any changes on this page. If we make a significant or material change to this Statement we will notify you via email. You should check these terms when you use the Site. Your continued use of the Site constitutes acceptance of the most current version of this Statement.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us by email at racbrandsprivacy@Rentacenter.com