Stellar Industries Privacy Policy

Last Updated: April 13, 2020

This Privacy Policy (this “Policy”) describes the practices of Stellar Industries Inc. (“Stellar”) for collecting, using, maintaining, disclosing, and otherwise processing (collectively, “Processing”) the information that we collect from you, as well as how we protect and secure your data. If you have additional questions regarding your rights under this Policy or any agreement you may have with Stellar regarding your data, please contact us at privacy@stellarindustries.com. Please read this Policy carefully to understand our Processing of your information and how we will treat it.

This Policy generally applies to the information that Stellar Processes. However, this Policy is subordinate to any specific terms and conditions set forth in any terms of use, end-user license agreements, or other agreements you may have with Stellar relating to a particular product, service, or data. Further, this Policy applies only to information Stellar Processes. It does not apply to information collected by Stellar’s business partners, which may have their own privacy policies that apply to you.

1. What information does Stellar collect?

The information Stellar collects can be described as Personal Information and Non-Personal Information, as well as Equipment and Operations Data (which may or may not be personally identifiable). We collect this information when you provide it to us or when you use our products or services.

“Personal Information” is information that can be used to identify, locate, or contact you, a natural person, as well as any other information about you that we may connect with Personal Information. For example, Personal Information that we collect includes:

  • Contact information such as your name, phone number, physical address, email address, username, and password;
  • Relationship information such as your preferences or potential interest in Stellar products and services;
  • Transactional information such as purchases, services requested, customer service inquiries, and other customer account information; and
  • Financial information such as credit card, banking, or financing information.“Non-Personal Information,” on the other hand, is information that does not identify you as a natural person and is not identifiable to you a natural person. For example, Non-Personal Information that we collect includes:
    • Cookies and other similar tracking technologies used in a non-identifiable way;
    • Information we anonymize by rendering it unidentifiable to a natural person;
    • Information we aggregate by combining it with other data in such a way that no natural personcan be identified or linked to any specific information; and
    • The name, form, contact details, transaction history, or financial information of legal persons.“Equipment and Operations Data” is data generated by, collected by, or stored in your equipment or any hardware or software integrated into your equipment that describes your operations of the equipment. Equipment and Operations data also includes data about your equipment that you provide via Stellar’s hardware, software, or web-based or mobile applications, such as Fleet View and E-Link Mobile. Types of Equipment and Operations Data include ownership details and equipment name, GPS location, usage (such as operation of the equipment by hours and activations, among other things), diagnostic information, and other equipment operation and status data, including any information you provide. Equipment and Operations Data, depending on the specific situation, may or may not be identifiable to a natural person.

2. Why does Stellar collect this information?

Stellar collects and otherwise Processes Personal Information and Equipment and Operations Data in identifiable forms for a variety of purposes, depending on the information being Processed. In particular, Stellar Processes this information to perform under its contractual obligations to you, as may be necessary to provide you and support you with Stellar’s products and services. Stellar also Processes information given its legitimate interest in improving and protecting its products and services, enhancing customer experience, and identifying and marketing certain products and services to you. Finally, Stellar may Process information as necessary to comply with its legal obligations.

To summarize, Stellar Processes Personal Information and Equipment and Operations Data in identifiable form for the following purposes:

  • To fulfill orders for Stellar products and services;
  • To operate, deliver, maintain, or otherwise provide the Stellar products and services yourequest, including Stellar’s equipment and its web-based and mobile applications, such as FleetView and E-Link Mobile;
  • To support Stellar products and services by monitoring the health of your equipment, deliveringupgrades or updates, running diagnostics and identifying necessary repairs, and ensuringproduct safety by issuing and implementing recalls as necessary;
  • To set up and maintain your customer account and allow you to interact with Stellar online;
  • To provide you with customer service by resolving disputes, addressing complaints, andtroubleshooting any technical problems encountered;
  • To measure and understand the effectiveness of Stellar products and services;
  • To improve Stellar products and services;
  • To comply with applicable laws and regulations; and
  • To communicate offers for products and services, including offers based on your interests and usage of Stellar Products and Services, administer promotional events, and engage in other marketing activities that may be of interest to you. We will provide you the opportunity to opt- out of marketing information or market research inquiries, but we will still need to gather certain information to provide our products and services to you. If we collect or process your information for any other purposes, we will disclose it to you at the time it is collected. With respect to Non-Personal Information and Equipment and Operations Data not in identifiable form, because this information does not identify a natural person Stellar may use and Process it for any purpose. Stellar expressly reserves the right to use anonymized or aggregated information to improve or develop its products and services, create and publish reports, conduct statistical analyses about customers and equipment, monitor industry trends, and otherwise engage in activities that do not result in the disclosure of identifiable information.

3. Will Stellar share this information with third parties?

To provide certain products and services, Stellar may share information with third parties who provide services to us, such as the manufacturers, distributors, and operators of hardware and software used in our equipment and operations online dashboard. Any third party with whom we share identifiable information will only have access necessary to perform specific tasks on our behalf, will only use the information for this purpose, and will protect your information at least to the same extent that we do.

Stellar may share information to comply with our legal obligations, such as to respond to lawful requests and legal processes. In the event we are asked to disclose your personal information, we will attempt to validate the request and inform you of it.

Finally, Stellar may disclose information where needed to affect the sale or transfer of its assets, enforce its rights, protect its property, or protect the rights, property, or safety of others, or as needed to support external auditing, compliance, and corporate governance functions.

If Stellar needs to share your information for a purpose not identified here, we will obtain your consent and disclose this purpose at the time of obtaining your consent. For example, Stellar may wish to use your information in demonstrations or other marketing materials and will contact you before doing so.

4. How long will Stellar keep my information?

Stellar keeps different kinds of information for different lengths of time, depending on the purpose for which it was processed and your specific situation. Thus, Stellar will retain information as long as necessary to accomplish the relevant purpose, but no longer. In any event, we will delete, anonymize, or aggregate your information after seven (7) years of your non-use of our products and services.

5. How does Stellar keep my information secure?

Taking into account the nature of the information gathered, Stellar maintains administrative, technical, and physical controls that are designed to safeguard Personal Information and Equipment and Operations Data in identifiable form.

6. What are my choices with respect to my information?

Your first choice is always to limit the information you provide. You may also opt-out of certain marketing information by visiting our website and communicating your choices to us, or by clicking “unsubscribe” at the bottom of marketing emails you might receive.

Regarding cookies and other tracking technologies, you can manage these by adjusting the settings on your browser, commonly referred to as the browser’s “Do Not Track” settings. All browsers are different, so you may need to visit the “help” section of your browser to learn more about cookie preferences and other privacy settings that may be available. You can also manage how your mobile device and mobile browser share location information with Stellar, as well as how your mobile browser handles cookies and related technologies by adjusting your mobile device privacy and security settings. Please refer to instructions provided by your mobile service provider or the manufacturer of your device to learn more. In general, Stellar will comply with your browser’s “Do Not Track” settings.

Stellar complies with applicable law regarding your ability to access, correct, and delete your identifiable information. If you have an online account, you may be able to log into your account to access and update certain information provided. For identifiable information that is not linked to an online account, please contact us directly.

Subject to the specific terms of your agreement related to the collection of Equipment and Operations Data, you may be able to opt-out of sharing this information with Stellar. If you choose to do so, you may no longer have access to this data and would no longer be able to use certain products or services that rely on this data.

Stellar does not intend to collect Personal Information from children aged 18 and under. If you believe a child is providing us Personal Information, please contact us directly so we may investigate and delete it.

For assistance with exercising your personal information choices, or if you have any questions about these choices, please contact us at privacy@stellarindustries.com.

7. For EU residents:

The General Data Protection Regulation (“GDPR”), particularly Articles 15 to 21, affords you a number of rights as a data subject. We encourage you to read and learn about those rights on your own, but the following will help you to begin to understand those rights.

  1. Access: This allows you to request from us information about your personal information, including what data we have and how and why it is being processed.
  2. Rectification: In the event that some or all of the personal information that we have concerning you is inaccurate, this gives you the right to have those inaccuracies rectified.
  3. Erasure: In some cases, you may have the right to request that we erase your personal information in our possession.
  4. Restriction of Processing: This gives you the right, in some circumstances, to have us process your personal information only with your consent.
  5. Objection to Processing: Where we are processing your personal information on the grounds of its legitimate interests, or to carry out tasks in the public interest or to exercise official authority, you have a right to object to the processing on grounds relating to your particular situation. In cases where you object to our processing of your personal data for direct marketing purposes, the processing will cease.
  6. Data Portability: This allows you to request a copy of your personal information that it has on file and to transfer that information to someone else without any interference from us. In some cases, you may be able to request that we transfer your personal information directly to a third party on your behalf.

In addition, to the extent that we process any of your personal information on the basis of your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing that was based on your consent before its withdrawal.

If you are a natural person residing in the EU and at any time you believe we have violated one of your rights listed above, or if you believe we are in violation of one or more of the provisions of the GDPR,

you have the right to lodge a complaint with a Data Protection Authority. More information about the Data Protection Authorities can be found at https://ec.europa.eu/info/law/law-topic/data- protection/reform/what-are-data-protection-authorities-dpas_en.

8. For California residents:

This notice does not apply to employment-related personal information collected from California- based employees, job applicants, contractors, or similar individuals.

The California Consumer Privacy Act (the “CCPA”) affords those who reside in the State of California certain rights as a data subject. If you are a resident of the State of California, we encourage you to read and learn about those rights on your own, but the following will help you to begin to understand them:

• Access: You have the right to request that we disclose certain information to you about our collection and use of your personal information.

• Erasure: In some cases, you may have the right to request that we erase your personal information in our possession.

• Data Portability: This allows you to request a copy of your personal information that we may have and transfer that information to someone else without any interference from us. In some cases, you may be able to request that we transfer your personal information directly to a third party on your behalf.

• The CCPA further provides California residents the right to direct us not to sell your personal information. WE DO NOT SELL YOUR PERSONAL INFORMATION.

We will not discriminate against you for exercising any of your CCPA rights.

In addition, California’s “Shine the Light” law permits you to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.

To make a request regarding any of these rights or to ask questions or provide comments about this Privacy Notice for California Residents, please contact us.

It is our policy to post any changes to this Privacy Notice on this page. We may or may not contact you directly concerning significant changes. We encourage you to visit this page periodically and check for changes. To the extent permitted by law, your continued use of our services after a change is deemed to be your consent to any such change.

9. For international residents:

Stellar is headquartered in the United States of America. It and its authorized processors may transfer your information to the United States of America and access it from the United States of America for the purposes described in this Policy. However, Stellar protects the privacy and security of Personal Information in the manner described in this Policy regardless of where it is collected, stored, accessed, or otherwise Processed.

10. Does this Policy ever change?

Stellar may post changes to this Policy on this page. Please refer to the “last updated” date above. We may or may not contact your directly concerning significant changes, and therefore we encourage you to

visit this page periodically and check. By using Stellar products and services after a change to this Policy, you are deemed to consent to any changes.

11. How can I contact Stellar with questions about this Policy?

To ask questions or provide comments about this Policy or our information security and data privacy practices generally, please contact us at privacy@stellarindustries.com. You may also write to us at:

Stellar Industries Attn: Privacy
P.O. Box 169 Garner, Iowa 50438

Or, you may contact us by phone at 800.321.3741 between the hours of 8:00 AM to 5:00 PM, Central Time, Monday through Friday, excluding holidays or other special circumstances.