This US Supplemental Privacy Notice (“Supplemental Notice”) applies only to information collected about California, Colorado, Virginia, Utah, and Connecticut consumers. It provides information required under the following laws (collectively, as amended from time to time, “US State Privacy Laws”):

• California Consumer Privacy Act of 2018 and California Privacy Rights Act of 2020 (collectively, the “CPRA”)
• Colorado Privacy Act of 2021 (the “CPA”)
• Connecticut Data Privacy Act (“CTDPA”)
• Utah Consumer Privacy Act of 2022 (the “UCPA”)
• Virginia Consumer Data Protection Act of 2021 (the “VCDPA”)

We also provide information collected about Nevada consumers under the heading “Privacy Notice for Nevada Residents” at the end of this Supplemental Notice. The other portions of this Supplemental Notice do not apply to Nevada consumers.

This Supplemental Notice describes practices carried out by Do Me A Solid, Inc. (collectively, the “Company”, “we”, “us”) regarding the collection, use, and disclosure of Personal Information and provides instructions for submitting data subject requests. This Supplemental Notice is parallel in scope to our General Privacy Policy and should be read in conjunction with our General Privacy Policy and our Terms of Service.

Some portions of this Supplemental Notice may apply only to consumers of particular states. In those instances, we have indicated that such language applies only to those consumers. For parents or guardians of minors, we do not knowingly collect Personal Information of Minors and if you ascertain that your child or ward has used our site, please contact us at suppor@domeasolid.co.

Please note that if you are an employee of the Company, a contractor to the Company or a third-party provider, your personal information may be used in connection with your employment contract or your contractual relationship, whichever applies.

Content Creators

As set forth in the Terms of Use and for purposes of this Policy, Content Creator may be defined as an individual or entity that is responsible for the ideation and creation of content that connects a brand or entity to its prospective audience, particularly in digital contexts. Content Creators who view, interact, link to or otherwise use or derive any benefit from the website are defined as “Users” or “consumers” and referred to as “you.”

The Site is a content sharing platform that enables Content Creators to connect their audiences with their most recent and relevant content as it may appear on a variety of platforms. In addition, the site allows Content Creators to create a DMS link which contains brand promotions that are offered by Content Creators to their Followers.

Followers

For purposes of the Terms and this Privacy Policy, Follower(s) may be defined as a person who subscribes to the opinions, ideas, beliefs, and teachings of another. On social media, followers like, subscribe and follow accounts and pages in order to receive notifications and see the content those creators post on their news feeds. Followers who view, interact, link to or otherwise use or derive any benefit from the website are defined as “Users”, as stated previously

The Site allows Followers to search for Content Creators, promotions, exclusive offers, and to look for savings offered by the Content Creators.

By downloading a DMS extension from a Content Creators’ landing page, the Followers may receive offers and other personalized and non-personalized pricing and product information regarding goods and services promoted by the Content Creators and/or offered by third-party merchant from whom the Follower purchases the product. These offers and product information may be provided in several ways, including as links to third-party websites or as coupons or discount codes that can be applied to purchases of products offered by third-party merchants. The personal information of Followers of Content Creators is generally anonymized and aggregated for purposes of identifying purchasing interests of Followers and recommending items to Influencers. This way the Influencer promotes what their Follower actually wants.

DMS is not involved in the Followers’ merchant product or service purchase and is not able to assist with any customer service inquiries or returns related to that service.

Likewise, the privacy policies of Third Parties are the responsibility of the Third Party, and Followers and Content Creators must look to those policies for the Third Party’s privacy practices.

A. Definitions

• “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information includes “personal data” as that term is defined in the applicable US State Privacy Law. Personal Information also includes “Sensitive Personal Information,” as defined below, except where otherwise noted. For the Company’s business purposes, PI may include all Personal Information provided to the Company by a Content Creator, including the text, graphics, videos, links, and any other materials that are added to the Content Creators’ DMS’s landing page.
• “Sensitive Personal Information” means Personal Information that reveals a consumer’s social security, driver’s license, state identification card, or passport number; account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious beliefs, or union membership; contents of email or text messages; and genetic data, if collected. Sensitive Personal Information also includes processing of biometric information for the purpose of uniquely identifying a consumer and Personal Information collected and analyzed concerning a consumer’s health, sex life, or sexual orientation, if submitted to the site. Sensitive Personal Information also includes “sensitive data” as that term is defined in the applicable US State Privacy Law. For purposes of this Policy, Sensitive Personal Information may include, links, social media links, profiles and email or text contents.
• “Third Party” has the meanings afforded to it in the applicable US State Privacy Law and specifically includes the aggregated and anonymized data of Followers of a Content Creator.
• “Vendor” means a service provider, contractor, or processor as those terms are defined in the applicable US State Privacy Law.

Examples of Personal Information and Sensitive Information are provided below at the Notice at Collection. is

To the extent other terms used in this Supplemental Notice are defined terms under the applicable US State Privacy Law, they shall have the meanings afforded to them in those statutes, whether or not capitalized herein. As there are some variations between such definitions in each of the state statutes, the definitions applicable to you are those provided in the statute for the state in which you are a consumer. For example, if you are a Virginia consumer, terms used in this Supplemental Notice that are defined terms in the VCDPA shall have the meanings afforded to them in the VCDPA as this Supplemental Notice applies to you.

B. Collection & Processing of Personal Information -Notice at Collection

As required, We, and our Vendors, state that they may have collected and processed the following categories of Personal Information about you in the preceding 12 months:

• Identifiers, such as name, alias, online identifiers, account name, physical characteristics, or description;
• If submitted to the Site, contact and financial information, including phone number, address, email address, financial information, medical information, health insurance information
• Commercial information, such as transaction information, payment information, tax withholding information and purchase history;
• Internet or other electronic network activity information, such as browsing history, search history and interactions with our websites or advertisements;
• Geolocation data, such as general device location;
• Audio, electronic, visual and similar information, such as call and video recordings;
• Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristic
• As noted previously, we do not seek to collect Sensitive Personal Information; however, if submitted by a Content Creator, then the definition of Sensitive Personal Information may include
• Information that reveals:
• Social security, driver’s license, state identification card, or passport number;
• Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account;
• Precise geolocation;
• Racial or ethnic origin, religious or philosophical beliefs, or union membership;
• Genetic data.
• Biometric data processed for the purpose of uniquely identifying a consumer;
• Personal Information collected and analyzed concerning a consumer’s health; and
• Personal Information collected and analyzed concerning a consumer’s sex life or sexual orientation.

Retention of Personal Information. We retain your Personal Information for the period reasonably necessary to provide goods and services to you and for the period reasonably necessary to support our business operational purposes listed in Section E.

C. Categories of Personal Information We May Disclose to Vendors & Third Parties

We may disclose the following categories of Personal Information to Vendors and Third Parties if collected, and will disclose to contracted social networks if submitted to DMS:

• Identifiers, such as name, alias, online identifiers, account name, physical characteristics or description;
• Contact information, including phone number, address, email address, if submitted to the site;
• If submitted to the site, commercial information, such as transaction information, payment information, and purchase history;
• If submitted to the site, Internet or other electronic network activity information, such as browsing history, search history and interactions with our websites or advertisements;
• General Geolocation data, such as general device location;
• Audio, electronic, visual and similar information, such as call and video recordings;
• Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics; and
• Do Me a Solid does not seek to collect the following Sensitive Personal Information, but if submitted by you, could include Sensitive Personal Information, including:
• Personal Information that reveals:
• Social security, driver’s license, state identification card, or passport number;
• Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account;
• Precise geolocation

Disclosure for California Consumers: Unless specifically stated, we have not sold or shared Personal Information about California consumers to third parties for their own use in the past twelve months. Relatedly, we do not have actual knowledge that we collect, sell, or share Personal Information of California consumers under 18 years of age. If you are a parent or guardian of a California consumer under 18 years of age and you become aware that a minor consumer or user has provided personal information to us, you may request to exercise your applicable access, rectification, cancellation, and/or objection rights by contacting us at support@domeasolid.co.

Generally we may use your data to share your personal information with our vendors and/or affiliates and/or trusted partners in arrangements, that may meet the broad definition of “sale” or “share” under California law, specifically including aggregated deidentified data regarding Followers. In these arrangements, use of the information we share is limited by policies, contracts, or similar restrictions, and further we seek to share or sell only aggregated anonymized data. Please use the Do Not Share link located alongside the Terms and Conditions consent on the landing page if you chose not to have any such information Shared or Sold, in which case you will not be able to use the site.

For purposes of the CPRA, a “sale” is the disclosure of Personal Information to a Third Party for monetary or other valuable consideration, and a “share” is the disclosure of Personal Information to a Third Party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.

Disclosure for Colorado, Virginia, Utah, and Connecticut Consumers: Unless specifically stated, we do not sell or share Personal Information to Third Parties for their own use. However, we may share or process one or more of the above categories of personal information with our affiliates and trusted partners in arrangements for purposes of targeted advertising, as the terms “sell,” “share,” “process,” and “targeted advertising” are defined in the CPA, VCDPA, UCPA, and CTDPA. In these arrangements, use of the information we share is limited by policies, contracts or similar restrictions.

D. Sources from Which We May Collect Personal Information

We may collect Personal Information directly from California, Colorado, Virginia, Utah, and Connecticut consumers, as well as from our affiliates, business partners, joint marketing partners, public databases, providers of demographic data, publications, professional organizations, social media platforms, caregivers, third party information providers, affiliates with whom you have a business relationship, service providers with which we have a contractual relationship and to which you have provided your personal information, cookies and other tracking technologies, and Vendors and Third Parties when they share the information with us.

E. Purposes for Processing Personal Information

We, and our Vendors, collect and process the Personal Information (excluding Sensitive Personal Information which we do not seek to collect) described in this Supplemental Notice to:

• Operate, manage, and maintain our business, including linking your Personal Information across multiple social media accounts;
• Respond to your inquiries and to fulfill your requests;
• Send you important information regarding our relationship with you or regarding this website, changes to our terms, conditions, and policies and/or other administrative information;
• Conduct audits, to verify that our internal processes function operate as intended and are compliant with legal, regulatory, or contractual requirements;
• Prevent fraud or crime, and for risk and technical security monitoring purposes;
• Facilitate the development of new products and services;
• Enhance, improve or modify our website or products and services;
• Perform research, analytics and, data analysis;
• Determine the effectiveness of our promotional campaigns, so that we can adapt our campaigns to the needs and interests of our users;
• Personalize, advertise, and market our products and services;
• Comply with law (including regulations and rules), legal process, and internal policies;
• Maintain records;
• Exercise and defend legal claims;
• For Followers, to send personalized messages to you from the Content Creator, as defined in the Terms of Service, with the sole purpose to thank you for making any purchase by using the Content Creators’ links, or to thank you for downloading the Do Me A Solid’s extension that is shared on the Content Creator’s landing page; and
• Otherwise accomplish our business purposes and objectives.

We do not seek to collect Sensitive Personal Information. To the extent that Sensitive Personal Information is volunteered by a user, We, and our Vendors, may collect and process the Sensitive Personal Information described in this Supplemental Notice for:

• Performing the services or providing the goods reasonably expected by an average consumer who requests those goods or services;
• Ensuring security and integrity to the extent the use of the consumer's Personal Information is reasonably necessary and proportionate for these purposes;
• Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on our behalf;
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us;
• Personalizing, advertising, and marketing our products and services;
• Conducting research, analytics, and data analysis;
• Performing accounting, audit, and other internal functions, such as internal investigations;
• Complying with law, legal process, and internal policies;
• Maintaining records;
• Exercising and defending legal claims; and
• Otherwise accomplishing our business purposes and objectives.

F. Categories of Entities to Whom We May Disclose Personal Information

• Affiliates & Vendors. We may disclose your Personal Information, if collected, to our affiliates and Vendors for the purposes described in Section E (“Purposes for Processing Personal Information”) above. Our Vendors provide us with services for our websites, as well as other products and services, such as web hosting and moderating, mobile application hosting, data analysis, payment processing, order fulfillment, customer service, infrastructure provision, technology services, email and direct mail delivery services, auditing, legal services, and other similar services. We grant our Vendors access to Personal Information only to the extent needed for them to perform their functions and require them to protect the confidentiality and security of such information.
• Third Parties. We may disclose your Personal Information, if collected, to the following categories of Third Parties:
• At Your Direction. We may disclose your Personal Information to any Third Party with your consent or at your direction as part of the basic service provided by the site. The site of the Third Party will be governed by its own privacy policy over which DMS has not control.
• Business Transfers or Assignments.We may disclose your Personal Information to other entities as reasonably necessary to facilitate a reorganization, merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
• Third Party Co-Branding and Co-Marketing Partners. We may share your Personal Information with our third-party partners with whom we offer a co-branded or co-marketed promotion (if any).
• Third Party Advertising Partners.To improve the effectiveness of our communication with you and our marketing campaigns, we may share your data with our third party advertising partners, including social media, medical journals and publishers; however, we seek to aggregate and deidentify such Personal Information.
• Legal and Regulatory. We may disclose your Personal Information to government authorities, including regulatory agencies and courts, as reasonably necessary for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law.

G. Data Subject Rights

• Exercising Data Subject Rights.California, Colorado, Virginia Utah, and Connecticut consumers have certain rights with respect to the collection and use of their Personal Information. Those rights vary by state. As required by the CPRA, we provide detailed information below regarding the data subject rights available to California consumers. Colorado, Virginia, Utah, and Connecticut consumers have similar rights and can find more detail by referencing the applicable US State Privacy Law.

You may exercise the data subject rights applicable to you under the applicable US State Privacy Law by contacting us at support@domeasolid.co. While we will make reasonable efforts to accommodate your request, we reserve the right to impose certain restrictions or requirements on your request, if allowed by or required by applicable law.

Consumers in some states, including California, may also authorize an agent to make data subject requests on their behalf.

• Verification of Data Subject Requests. We may ask you to provide information that will enable us to verify your identity in order to comply with your data subject request. In particular, when a California or Connecticut consumer authorizes an agent to make a request on their behalf, we may require the agent to provide proof of signed permission from the consumer to submit the request, or we may require the consumer to verify their own identity to us or confirm with us that they provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
• Non-Discrimination. We will not discriminate against you for exercising your data subject rights. For example, we will not deny goods or services to you, or charge you different prices or rates, or provide a different level of quality for products or services as a result of you exercising your data subject rights.
• Data Subject Rights Disclosure
• Right to Receive Information on Privacy Practices: You have the right to receive the following information at or before the point of collection:
• The categories of Personal Information to be collected;
• The purposes for which the categories of Personal Information are collected or used;
• Whether or not that Personal Information is sold or shared;
• If the business collects Sensitive Personal Information, the categories of Sensitive Personal Information to be collected, the purposes for which it is collected or used, and whether that information is sold or shared; and
• The length of time the business intends to retain each category of Personal Information, or if that is not possible, the criteria used to determine that period.

We have provided such information in this Supplemental Notice, and you may request further information about our privacy practices by contacting us at support@domeasolid.co.

• Right to Deletion: You may request that we delete any Personal Information about you that we collected from you.
• Right to Correction: You may request that we correct any inaccurate Personal Information we maintain about you.
• Right to Know: You may request that we provide you with the following information about how we have handled your Personal Information in the 12 months preceding your request:
• The categories of Personal Information we collected about you;
• The categories of sources from which we collected such Personal Information;
• The business or commercial purpose for collecting Personal Information about you;
• The categories of Personal Information about you that we shared or disclosed and the categories of Third Parties with whom we shared or disclosed such Personal Information; and
• The specific pieces of Personal Information we have collected about you.
• Right to Receive Information About Onward Disclosures: You may request that we disclose to you:
• The categories of Personal Information that we have collected about you;
• The categories of Personal Information that we have sold or shared about you and the categories of Third Parties to whom the Personal Information was sold or shared; and
• The categories of Personal Information we have disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
• Right to Non-Discrimination: You have the right not to be discriminated against for exercising your data subject rights. We will not discriminate against you for exercising your data subject rights.
• Right to Restrict or Limit the Use of Sensitive Personal Information: You have the right to restrict the use and disclosure of Sensitive Personal Information to certain purposes related to the offering of goods or services as listed in the CPRA. To exercise this right, you or your authorized representative may submit a request by contacting us at support@domeasolid.co or by clicking on the relevant button on the landing page of our website alongside the Consent to Terms of Service.
• Right to Opt Out of Sharing, Disclosure, or Sale of Personal Information: You have the right to direct us to not share, disclose, or sell your personal information. To exercise this right, you or your authorized representative may submit a request by contacting us at support@domeasolid.co or by clicking on the relevant button on the landing page of our website alongside the Consent to Terms of Service.

H. Other Disclosures

• California Residents Under Age 18. If you are a resident of California under the age of 18 and a registered user of our website, you may ask us to remove content or data that you have posted to the website by contacting us at support@domeasolid.co. Please note that your request does not ensure complete or comprehensive removal of the content or data, as, for example, some of your content or data may have been reposted by another user. Similarly, the parent or guardian of a minor who is believed to have accessed the site may contact us at support@domeasolid.co and upon authentication of their role can request that removal.
• Disclosure About Direct Marketing for California Residents. California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of Personal Information to other entities for their direct marketing purposes in the preceding calendar year.
• Financial Incentives for California Consumers. We may offer various types of financial incentives in exchange for your personal information, such as coupons, discounts, promotions, loyalty points, sweepstakes, contests, surveys, and other exclusive offers for California consumers who sign up to receive our marketing emails or join our loyalty program. Should we offer a financial incentive, the amount and terms of such offers will be presented to you at the time of the offer. When you participate in a financial incentive, we collect personal information from you, such as identifiers (like your email address) and commercial information (like your purchase history). Solely for purposes of California privacy law and any other state law that may adopt such a procedure, we reasonably estimate the value of the discount, coupon, or other financial incentive that we offer to you to be equal to or greater than the value we receive from a consumer’s personal information collected in connection with the offer. We reasonably estimate the value of a consumer’s data by estimating the expenses related to the provision of each incentive program per consumer. We incur a variety of expenses for providing financial incentives, such as administrative and technical expenses associated with maintaining a loyalty program and costs associated with discounts on purchases. Participation in our financial incentives is voluntary. You may opt into a financial incentive by following the sign-up or participation instructions provided, and you have the ability to opt out by unsubscribing from our emails or closing your loyalty member account.
• Changes to our Supplemental Notice. We reserve the right to amend this Supplemental Notice at our discretion and at any time. When we make material changes to this Supplemental Notice, we will notify you by posting an updated Supplemental Notice on our website and listing the effective date of such updates.

PRIVACY NOTICE FOR NEVADA RESIDENTS

This Privacy Notice for Nevada Residents adds to the information contained in the Company’s General Privacy Policy, and applies only to Nevada residents (“You,” “your” or “consumer”).

Personal Information Collection and Purposes of Use

We may collect certain personal information of Nevada consumers through our Internet websites or other online service. This information includes one or more of the following elements of personally identifiable information:

• A first and last name.
• A home or other physical address that includes the name of a street and the name of a city or town.
• An electronic mail address.
• A telephone number.
• A Social Security Number.
• An identifier that allows a specific person to be contacted either physically or online.
• Any other information concerning a person collected from the person through the Internet website or online service of the operator, and maintained by the operator in combination with an identifier in a form that makes the information personally identifiable.

We collect this personal information for the following purposes:

• To provide the services sought by you, including to respond to your inquiries and to fulfill your requests;
• to send you important information regarding our relationship with you or regarding this website, changes to our terms, conditions, and policies and/or other administrative information;
• for audits, to verify that our internal processes function as intended and are compliant with legal, regulatory, or contractual requirements;
• for fraud or crime prevention, and for technical security monitoring purposes;
• to facilitate the development of new products and services
• to enhance, improve or modify our website or products and services;
• for data analysis that will allow us to understand website usage trends;
• to determine the effectiveness of our promotional campaigns, so that we can adapt our campaigns to the needs and interests of our users.
• to better understand you, so that we can personalize our interactions with you and provide you with information and/or offers tailored to your interests.

Your Privacy Rights: Right to access and/or correct your personal information, or opt out of sale of personal information.

If you would like to opt-out, you can do so in the portal by going to Settings Data Sharing Preferences and Selecting Opt-out, by using the Opt Out option alongside the Terms of Service consent, or if you would like to review, correct, or update your personal information, you or your authorized representative may submit your request to support@domeasolid.co . We will respond to your verified request as soon as reasonably practicable, but no later than sixty (60) days after receipt. If circumstances cause any delay in our response, you will be promptly notified and provided a date for our response.

Under Nevada law, you have the right to direct us to not sell or license your personal information to third parties. To exercise this right, if applicable, you or your authorized representative may submit a request to support@domeasolid.co. We will respond to your verified request as soon as reasonably practicable, but no later than sixty (60) days after receipt. If circumstances cause any delay in our response, you will be promptly notified and provided a date for our response.

For further information please contact support@domeasolid.co.