Easy Street Privacy Policy

Effective Date: October 6, 2025

1. Introduction

Welcome to Easy Street, provided by Easy Street Options, LLC ("Easy Street," "we," "our," or "us"). This privacy policy describes Easy Street's practices regarding information we collect about you and the choices available to you regarding such information. For purposes of this Privacy Policy, unless otherwise stated, "information" or "personal information" means information relating to an identified or identifiable individual.

This Privacy Policy applies to information we collect where we control the purposes and means of processing, specifically information we collect through any of our websites, apps, emails, or other online services that link to this Privacy Policy (the "Service") or other sources identified below. Please note that your use of the Service is subject to our Terms of Service.

This Privacy Policy does not apply to:

If you are a resident of the U.S., see our U.S. State-Specific Disclosures.

If you are located in the EEA, Switzerland, or the UK, see our EU Disclosures.

For our contact details, see the Contact Us section below.

2. Collection

This section describes the information we collect and how we collect it.

Information You Provide through the Service

When you use the Service, you may be asked to provide information to us, such as when you create an account or contact support. The categories of information we may collect in this context include:

Please do not provide any information that we do not request.

Information from Your Browser or Device

When you use the Service, we and third parties we work with automatically collect information from your browser or device. The categories of information we automatically collect in this context include:

This information is automatically collected through cookies and other tracking technologies incorporated into our Service, as described below:

We use these tracking technologies for a variety of purposes, including to help make our Service work, personalize your browsing experience, prevent fraud and assist with security, perform measurement and analytics, and provide advertising.

To exercise choice around tracking technologies, see Your Privacy Choices below.

Information from Other Sources

We also collect information from other sources. The categories of other sources from which we collect information include:

Information We Infer

We infer new information from other information we collect, including to generate information about your likely preferences or other characteristics.

Sensitive Information

Some of the information we collect may be considered sensitive under applicable law. See additional disclosures in your region for details.

3. Purposes for Collection and Use

Our purposes for collecting and using information include:

To exercise choice around our collection and use, see Your Privacy Choices below.

4. Disclosure

We disclose the information we collect for the purposes described in this Privacy Policy. The categories of persons to whom we disclose information include:

To exercise choice around our disclosures, see Your Privacy Choices below.

5. Third Parties

Our Service may link to, or be incorporated into, websites and online services controlled by third parties. In addition, we may integrate technologies into our Service, including those disclosed in the Collection section above, controlled by third parties. Except where third parties act as our service providers, they, and not us, control the purposes and means of processing any information they collect from you, and you should contact them directly to address any concerns you have about their processing. Third-party data practices are subject to their own policies and disclosures, including what information they collect, your choices, and whether they store information in the U.S. or elsewhere. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.

6. Your Privacy Choices

This section describes the choices available to you regarding your information.

Communications

You can opt-out of receiving certain communications from us as follows:

Accounts

If you have an account with us, you can delete your account through your account settings. We will address your request in accordance with our data retention practices.

Browser and Device Controls

Region-Specific Choice

See additional disclosures regarding your rights to exercise choice if you live in the following regions:

7. Children

The Service is not directed toward children under eighteen (18) years old, and we do not knowingly collect personal information (as that term is defined by the U.S. Children's Online Privacy Protection Act, or "COPPA") from children. If you are a parent or guardian and believe we have collected personal information from children, please contact us as set out in the Contact Us section below. We will delete the personal information in accordance with COPPA.

8. Security

We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Please note that transmission via the internet is not completely secure and we cannot guarantee the security of information about you.

9. Retention

We retain information for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

10. International Transfer

We are based in the U.S. If you are located outside the U.S., please be aware that your information may be transferred to and processed in the U.S. or another country where we operate. Where required by applicable law, we will provide appropriate safeguards for data transfers.

11. Changes to this Privacy Policy

We reserve the right to revise and reissue this Privacy Policy at any time. Any changes will be effective immediately upon posting of the revised Privacy Policy. Your continued use of our Service indicates your consent to the Privacy Policy then posted. If the changes are material, we may provide additional notice to you, such as through email or prominent notice on the Service.

12. Contact Us

The controller under this Privacy Policy is:

Easy Street Options, LLC ("Easy Street," "we," "our," or "us")
PO Box 154
Moreland, Georgia 30259
feedback@easyst.com

If you have questions about our practices regarding your information or have trouble accessing this Privacy Policy, please contact us at the postal address or email address above. To exercise choice available to you, please use the designated methods listed in this Privacy Policy.

13. US State-Specific Disclosures

California

Notice at Collection

For residents of California, at or before the time of collection of your personal information, you have the right to receive notice of our data practices. Our data practices are as follows:

Requests

You have the right to exercise choice over your personal information as follows:

Your rights are subject to exceptions and our retention practices. You have the right not to be discriminated against for exercising any of your rights. To the extent permitted by law, rights requests must be exercised through the applicable designated method listed above. You may make a rights request using an authorized agent. Except for rights requests made by opt-out preference signal, we will require written and signed proof of the agent's permission to do so and we may verify your identity directly with you.

Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Jersey, New Hampshire, Oregon, Tennessee, Texas, Utah, and Virginia

Data Practices

For residents of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia, our practices regarding the collection, use, disclosure, and retention of your personal data are set out in the main Privacy Policy above.

Some of our disclosures of personal data may be considered a "sale" under applicable law, which is often defined to include a disclosure for something of value. We do not process your personal data for purposes of targeted advertising. We do not process personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

Some of the personal data we collect may be considered sensitive personal data under applicable law. We collect sensitive personal data with your consent.

Requests

You have the right to exercise choice over your personal data as follows:

Your rights are subject to exceptions and our retention practices. You have the right not to be discriminated against for exercising any of your rights. To the extent permitted by law, rights requests must be exercised through the applicable designated method listed above. You may make a rights request using an authorized agent. Except for rights requests made by opt-out preference signal, we will require written and signed proof of the agent's permission to do so and we may verify your identity directly with you.

You have the right to appeal our decision in response to your request. To appeal, please write us at the email or postal address set out in Contact Us and specify what you wish to appeal. We will review and respond to your appeal in accordance with applicable law. If we deny your appeal, you may submit a complaint to your Attorney General as follows: Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia.

Nevada

Nevada residents have the right to opt-out of sale of their information. To make a request, please write us at the email or postal address set out in the Contact Us section above and specify that you are making a "Nevada Opt-Out of Sale Request." Your rights are subject to exceptions and our retention practices.

14. EEA, Switzerland, and the UK

Data Practices

For individuals located in the European Economic Area, Switzerland, or the United Kingdom, our practices regarding the collection, use, disclosure, and retention of your personal data are set out in the main Privacy Policy above.

Lawful Basis for Processing

Data protection laws in your region require a "lawful basis" for processing personal data. Our lawful bases include where: (a) you have given consent to the processing for one or more specific purposes, either to us or to our service providers, partners; (b) processing is necessary for the performance of a contract with you; (c) processing is necessary for compliance with a legal obligation; or (d) processing is necessary for the purposes of the legitimate interests pursued by us or a third party, and your interests and fundamental rights and freedoms do not override those interests. Where applicable, we will transfer your personal data to third countries subject to appropriate safeguards, such as standard contractual clauses.

Requests

You have the right to access, rectify, or erase any personal data we have collected about you. You also have the right to data portability and the right to restrict or object to our processing of personal data we have collected about you. In addition, you have the right to ask us not to process your personal data (or provide it to third parties to process) for marketing purposes or purposes materially different than for which it was originally collected or subsequently authorized by you. You may withdraw your consent at any time for any data processing we do based on consent you have provided to us.

To exercise any of these rights, submit a request through our form here or write us at the email or postal address set out in the Contact Us section above (specifying the rights you wish to exercise).

Complaints

You also have the right to lodge a complaint with the data protection regulator in your jurisdiction.