Privacy Statement

This Privacy Statement applies to your interaction with One-Carte as a prospective, current or former One-Carte customer, visitor or business partner. It describes how One-Carte collects, uses, shares, and protects personal information from and about you, along with choices you can make about such information. This Privacy Statement is not a contract and does not create any legal rights or obligations.

What Information We Collect

We collect the following categories of personal information in order to provide products and services to you, to communicate with you, to enhance our products, services, and operations, and for other operational, legal, and compliance purposes:

• Identification information: name, alias, address, phone number, email address, payment information, login and access credentials, signatures, or other identifiers. We may also collect online identifiers such as your IP address.

• Commercial information: products or services purchased or considered purchasing.

• Online activities information: browsing history, search history, interaction with websites, apps, and ads. We may also use analytics tools to collect keystroke activity, mouse movements, scrolling, and clicks.

• Geolocation data: including precise location if you allow our application to collect it, e.g., to help you find the nearest One-Carte store or track order pickups.

• Audio, electronic, video or image information: such as calls, virtual connections, in-store monitoring, or project photos. Cameras may capture license plates where legally permitted.

• Professional or employment-related information: job title, company name, and related business data.

• Protected class information: such as age, gender, family status.

• Education information: e.g., from surveys.

• Inferences or preferences we learn about you.

• Sensitive personal information: geolocation, race/ethnicity, payment card info, or government-issued ID when required by law or to prevent fraud.

• Other personal information: such as photos you upload, or measurement/floorplan data from One-Carte measurement services.

We do not knowingly collect or disclose personal information from children under 16 without parental consent.

What Are the Sources of Your Information

• Information You Provide: e.g., setting up your One-Carte account, making a purchase, submitting surveys, or sharing demographic data.

• Information We Collect by Automated Means: cookies, device IDs, app tracking, in-store Wi-Fi usage, audio/video when contacting customer service.

• Information We Collect from Other Sources: affiliates, business partners, public sources, “Refer a Friend” programs, or delivery requests.

• Information We Generate or Derive: e.g., inferred shopping preferences to recommend products or services.

Why We Collect Your Information

• Fulfill Products, Services and Transactions: deliver orders, manage returns, process payments, verify identity, administer programs.

• Facilitate Customer Communication and Outreach: send order confirmations, newsletters, promotions, and respond to requests.

• Enhance Our Products, Services and Operations: conduct analytics, market research, customize experiences, measure ad effectiveness.

• Comply with Legal, Compliance, Law Enforcement and Security Requirements: fraud prevention, security, regulatory inquiries.

How We Share Your Information

We share your information with unaffiliated entities with proper consent, for example:

• Product or Service Providers and Business Partners: IT, marketing, data analytics, installation/repair, fraud prevention, and suppliers.

• Legal, Enforcement, Security and Investigation: disclose if required by law, regulation, subpoena, or to protect the rights and safety of One-Carte and its customers.

• Sale or Transfer of Business or Assets: in the event of reorganization, dissolution, or acquisition.

Categories of Personal Information Disclosed for Business Purposes

We may disclose all categories described above to vendors such as analytics companies, IT service providers, fraud prevention, financial institutions, and advertising partners.

Categories of Personal Information Shared with Third Parties

We share personal information with digital advertising partners for targeted marketing, campaign measurement, and with business partners for joint promotions or service offerings.