Your Privacy Choices (U.S. Residents)

TerraCycle processes this data to maintain our relationship with you and provide a personalized experience. For a full breakdown of the categories of data we collect, third-party sharing, and your state-specific legal rights, please refer to the TerraCycle US Privacy Notice. Please note that some services may require certain data to function. In this document, "applicable law" refers to all relevant U.S. state and federal privacy regulations. We will not discriminate against you for exercising any of your privacy rights.

Depending on your U.S. state of residence, you may have the right to opt out of certain uses of your personal information, including:

• the sale or sharing of your personal information; and
• the use of your personal information for targeted advertising (also referred to as cross-context behavioral advertising).

Targeted advertising refers to advertising that is selected based on personal information obtained from your activities over time and across different websites, services, or applications.

You can exercise these rights by submitting a request through our Data subject access request form. You may also control certain uses of your personal information for targeted advertising by adjusting your preferences in the Cookies settings available on our website.

We also recognize certain browser-based opt-out preference signals, such as Global Privacy Control (GPC), where required by applicable law. When we detect such a signal, we treat it as a valid request to opt out of the sale or sharing of personal information and targeted advertising for that browser or device.

Exercising Your Rights & Contacting Us

In accordance with our Privacy Policy and relevant local laws, you have specific rights regarding how we handle your data.

Below is a summary of your rights as a TerraCycle user:

• Right to Access & Know: You can request to see the personal information we have collected. This includes knowing what data we gather, where it comes from, why we use it, and which third parties we share it with.
• Right to Delete: You may request that we delete your personal information, though we may keep certain data if it is legally required or necessary for our operations.
• Right to Correct: You have the right to update or fix any inaccurate or incomplete information we have on file.
• Right to Limit Use: You can request that TerraCycle limit how we use and share your sensitive personal information for specific purposes, as allowed by law.
• Right to Withdraw Consent: If you previously gave us permission to use your data, you can change your mind and withdraw that consent at any time.
• Right to Portability: You can ask us to transfer your personal information to another business.
• Right to Incentive Info: You have the right to receive details about any financial incentives we offer in exchange for your data.
• Right to Opt-Out of Sale or Sharing of Personal Information (Certain States Only): Residents of certain U.S. states have the right to direct us not to sell or share their personal information, as those terms are defined under applicable law.
• Right to Opt-Out of Targeted Advertising (Certain States Only): Residents of certain U.S. states have the right to opt out of the processing of their personal information for targeted advertising purposes.
• Right to Appeal a Denied Request: If we deny your request, you may appeal our decision.

To exercise those rights, or if you have questions about our Privacy Policy, our data practices, or a potential data breach, you or your authorized agent can contact us through the following methods:

Submit a request through the Data subject access request form.

Managing Your Request

Once we receive your message, a TerraCycle representative will handle your request within a reasonable timeframe and address your questions if any. To ensure we handle your request accurately, we may follow up to:

• Verify your identity.
• Clarify specific details or the specific service your request involves.
• Ask for more information to fix any errors in your initial submission.
• Notify you if we require additional time, as allowed by law.

Important Note: To protect your privacy, please do not include sensitive personal information (such as Social Security numbers or financial details) in your initial communication.

Using an Authorized Agent

You have the right to appoint someone else to make a request for you. Because we take your data security seriously, we require signed written permission from you authorizing that person to act on your behalf. Before we release any information to an agent, we will contact you directly to confirm that you have granted them this permission.

Timing

When required by law, we will acknowledge receipt of your request within 10 days after we receive your request. You will receive our response to your request within 45 days of your request, unless we provide you with notice that it will take more than 45 days to respond (in that case, we won't take more than 90 days to respond).

Additional Rights for Certain US States Residents

In certain U.S. states, you can opt-out from the sale or sharing of personal information by using the Data subject access request form.

Similarly, exercising your right to Opt-Out of targeted advertising can be accomplished in either of the ways listed below:

• Directly in your cookie settings: http://cookie-settings,
• Via the Data subject access request form

Please Note:

• Personalization: If you opt out, we will no longer show you personalized advertisements or sell/share your data with third parties as defined by law.
• RAKUTEN/CASHBACK/LOYALTY USERS: Enable marketing cookies to ensure you receive cashback and loyalty rewards. Without accepting these cookies, your transaction will be processed, but your rewards may not be applied.
   
• Universal Opt-out Mechanism (e.g., Global Privacy Control): If you use a Universal Opt-out Mechanism or Opt-out Preference Signal (as defined in applicable law), including a web browser or extension, we will treat such signals as a valid opt out request, as required by applicable law.

How Your Opt-Out Works

We will apply your opt-out preferences (including your choice to stop personalized advertising) to the specific device and browser you are currently using. Because this preference is linked to your unique Device ID or Browser ID, please keep the following in mind:

• Multiple Devices: You must opt out on every device and browser you use (e.g., your phone, laptop, and tablet).
• Clearing Cookies: If you clear or block cookies, your opt-out settings may be deleted. If this happens, you will need to opt out again.
• Best Practice: For the most reliable results, we recommend clearing your browser cookies first, then selecting your preferences in our Privacy Center.
• What You’ll See: Even after opting out, you may still see "contextual" ads. These are not based on your personal profile but are instead related to the specific website or topic you are currently viewing.

Managing Browser Settings

While most browsers are set to accept cookies automatically, you can usually change this in your settings. If you’d like to adjust how your browser handles data for all websites, please check your specific browser’s privacy or security menu.

Your Right to Appeal

We strive to handle every request quickly and accurately. However, if we decline to take action on your privacy request or do not respond, you have the right to appeal our decision as permitted by local law. We will respond to your appeal within 45 days of receipt.

How to Submit an Appeal You can submit an appeal yourself, or have an authorized agent do so, by emailing us at dataprotection@terracycle.com . To help us review your case effectively, please include:

• The Case Ticket Number: Provide the reference number from your original request.
• A Detailed Summary: Explain your request and your concerns clearly so we can properly evaluate the situation.

Further Recourse If your appeal is denied, you have the right to contact your state’s Attorney General or the relevant regulatory agency to voice your concerns, as provided by applicable law.

Changes to Our Privacy Choices Notice

If we update this notice, we will post the revised version here with a new "Last Updated" date.

For significant changes—specifically those that materially change how you exercise your rights or as required by law—we will provide additional notice before the changes take effect. This may include:

• Sending you an email notification.
• Posting a prominent notice on our official website.
• Sharing updates via our social media channels.