This California Privacy Statement supplements the Privacy Notice. It applies solely to California residents and addresses personal information we collect online and offline. This California Privacy Statement does not apply to JAN-PRO personnel. This California Privacy Statement uses certain terms that have the meanings given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”)

The terms “JAN-PRO,” “we,” “us” or “our” mean JAN-PRO Franchising International, Inc. and JAN-PRO Enterprises, LLC. “You” means an individual who is a California resident who visits our Online Services and does not refer to a business or other entity, to individuals outside the U.S. or JAN-PRO personnel.

1. Notice of Collection and Use of Personal Information. We may collect (and may have collected during the 12-month period prior to the Last Updated date of this California Privacy Statement) the following categories of personal information about you:

• Identifiers. Identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number, passport number and other similar identifiers.
• Additional Data Subject to Cal. Civ. Code § 1798.80. Signature, physical characteristics or description, state identification card number, insurance policy number, education, bank account number, credit card number, debit card number, and other financial information, medical information and health insurance information.
• Protected Classifications. Characteristics of protected classifications under California or federal law, such as race, color, national origin, religion, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, genetic information, disability, citizenship status and military and veteran status.
• Commercial Information. Commercial information, including records of personal property, products or services purchased, obtained or considered and other purchasing or consuming histories or tendencies.
• Online Activity. Internet and other electronic network activity information, including, but not limited to, browsing history, search history and information regarding your interaction with websites, applications or advertisements.
• Sensory Information. Audio, electronic, visual and similar information.
• Employment Information. Professional or employment-related information, such as résumé information, occupation details, education details, certifications and professional associations, historical compensation details, previous employment details, emergency contact information, and pre-employment screening and background check information, including criminal records information.
• Education Information. Education information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).

We may use (and may have used during the 12-month period prior to the Last Updated date of this California Privacy Statement) the categories of personal information listed above for the purposes described in our Privacy Notice. In addition, we may use these categories of personal information for the following purposes, including the following business purposes specified in the CCPA:

• Business management.
• Performing services including maintaining or servicing accounts, providing franchisee or client service, processing or fulfilling orders and transactions, verifying franchisee or client information, processing payments, providing analytic services, providing storage, or providing similar services.
• Short-term, transient use.
• Providing advertising and marketing services.
• Database management;
• Vendor Management;
• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions and auditing compliance.
• System protection including detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity and prosecuting those responsible for that activity.
• Helping to ensure security and integrity.
• Debugging to identify and repair errors that impair existing intended functionality.
• Undertaking internal research for technological development and demonstration.
• Undertaking activities to verify or maintain the quality or safety of our services or devices and to improve, upgrade, or enhance them.
• Managing career opportunities with us.
• Managing our relationships with current or prospective franchisees, vendors and other business partner personnel.
• Compliance with law.

We do not use or disclose (and have not used or disclosed during the 12-month period prior to the Last Updated date of this California Privacy Statement) “Sensitive Personal Information” (as defined under the CCPA) for any purpose other than those expressly permitted under the CCPA. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

2. Sources of Personal Information.

During the 12- month period prior to the Last Updated date of this California Privacy Statement, we may have obtained personal information about you from the following categories of sources:

• Directly from you, such as when you visit our websites or register for an event we sponsor;
• From your devices, such as when you visit our websites;
• Your business colleagues, such as when they provide us with your contact information so we can send information that may interest you;
• Business partners;
• Our affiliates, subsidiaries or business units;
• Franchisees, service providers, contractors, vendors and other third parties who provide services on our behalf;
• Professional services organizations (such as public relations firms, auditors, tax advisors, law firms or accounting firms);
• Social networks;
• Publicly available sources;
• Government entities;
• Internet service providers (“ISPs”);
• Operating systems and platforms;
• For job applicants, recruiting and talent agencies;
• For job applicants, your job references;
• For job applicants, data brokers, such as public databases, credit bureaus, credit reporting service providers and background check services.

3. Disclosure of Personal Information.

During the 12-month period prior to the Last Updated date of this California Privacy Statement, we may have
disclosed the following categories of personal information about you for a business purpose to the following
categories of third parties:

Category of Personal Information	Categories of Third Parties
Identifiers	Our affiliates, subsidiaries or business units (collectively, “Affiliates”); Franchisees, service providers, vendors, contractors, advisors and other third parties who provide services on our behalf (collectively, “Service Providers”); Professional service organizations such as public relations firms, auditors, tax advisors, law firms or accounting firms (collectively, “Professional Advisors”); Business partners; Prospective lenders to or creditors of ours or an entity in which we have or are considering investing (collectively “Creditors”); Data analytics providers; Recruiting and talent agencies; Job references, such as your employers or teachers; Data brokers, such as public databases, credit bureaus, credit reporting service providers and background check services; and Government entities, including regulatory agencies and law enforcement (collectively, “Government Entities”).
Additional Data Subject to Cal. Civ. Code § 1798.80	Affiliates; Service Providers; Professional Advisors; and Government Entities.
Protected Classifications	Affiliates; Service Providers; Professional Advisors; Business partners; Data analytics providers; and Government entities
Commercial Information	Affiliates; Service Providers; Professional Advisors; Business partners; Data analytics providers; and Government Entities.
Online Activity	Affiliates; Service Providers; Professional Advisors; Business partners; Data analytics providers; and Government Entities.
Sensory Information	Affiliates; Service Providers; Professional Advisors; Data analytics providers; and Government Entities.
Employment Information	Affiliates; Service Providers; Professional Advisors; Business partners; Data analytics providers; and Government Entities.
Education Information	Affiliates; Service Providers; Professional Advisors; and Government Entities.

In addition to the categories of third parties identified above, during the 12-month period prior to the Last Updated date of this California Privacy Statement, we may have disclosed personal information about you to government entities and third parties in connection with corporate transactions, such as mergers, acquisitions, or divestitures.

We do not sell or share for cross-context behavioral purposes personal information and have not sold or shared personal information during the 12-month period prior to the Last Updated date of this California Privacy Statement.

Our online services and websites are not intended for use by anyone under the age of 16. We do not knowingly collect or solicit personal information of individuals under 16 years of age.

4. Retention of Personal Information.

We retain personal information for as long as is reasonably necessary in connection with the purposes for which the personal information was collected taking into account applicable law, statutes of limitation and records retention requirements under applicable law.

5. Your California Privacy Rights.

A. Your CCPA Privacy Rights. You have certain choices regarding our use and disclosure of your Personal Information, as described below.

• Know. You have the right to request, twice in a 12-month period, that we provide certain information about: (1) the categories of Personal Information we have collected about you; (2) the categories of sources from which the Personal Information is collected; (3) the business or commercial purpose for collecting your Personal Information; (4) the categories of third parties to whom we have disclosed your Personal Information; and (5) the specific pieces of Personal Information we have collected, used and disclosed about you during the past 12 months.
• Deletion. You have the right to request that we delete certain specific pieces of Personal Information we have collected from you and to tell our service providers to do the same, subject to certain exceptions.
• Correction. You have the right to request that we correct or amend certain specific pieces of Personal Information we maintain about you if it is inaccurate.
• Limit. You have the right to request that we limit the use and disclosure of Sensitive Personal Information we have collected. To the extent we collect your Sensitive Personal Information, we will not use or disclose such information for purposes other than (i) to perform services that you reasonably expect from us; (ii) to prevent, detect and investigate security incidents; (iii) to resist illegal actions directed at the business and to prosecute and defend our rights; (iv) to ensure the physical safety of others; (v) for short-term, transient use; (vi) to perform services necessary for the business; (vii) to verify and maintain the quality and safety of our product or services; and (viii) generally for purposes that do not infer characteristics about you. As such, any Sensitive Personal Information that we collect does not come within this right to limit use.
• Opt-out. You have the right to opt out of the sale of your Personal Information to third parties and/or the sharing of your Personal Information for cross-context behavioral advertising. As stated above, JAN-PRO does not sell or share any Personal Information (as such terms are defined in the CCPA).
• Non-Discrimination. You have the right to not experience discriminatory treatment and we will not discriminate against you because you have exercised any California privacy rights. We do not use the fact that you have exercised or requested to exercise any CCPA rights for any purpose other than to facilitate a response to your request.

B. How to Submit a Request

You may submit a request by using one of the following methods.
Call: (678) 336-1780
Email us: privacy@jan-pro.com

C. Verifying You Requests.

To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your Personal Information or complying with your request. If we are successful in validating your identity, we will respond to your request within the time and in the manner required by the CCPA. If we are unable to verify your identity, we will need to deny your request. We reserve the right to deny requests in certain circumstances, such as where we have a reasonable belief that the request is fraudulent.

• Individual Verification. If you request to know, access, delete, and/or correct your Personal Information, we may require you to provide any of the following information: address, date of birth, state or country of residence, telephone number, email address, or details of a transaction. In addition, if you ask us to provide you with specific pieces of Personal Information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request. We will use the information you submit and the Personal Information we have in our systems to try to verify your identity and to match the Personal Information we have collected about you, if any, to your
• Authorized Agent. If you designate an authorized agent to make an access or deletion request on your behalf, we may require you to (1) provide the authorized agent written permission (e.g., via a notarized letter) to do so, and (2) verify your own identity directly with us (as described above), and confirm with us that you provided the authorized agent permission to submit the request.

D. Additional California Privacy Disclousures.

• Do Not Track Signals. Your browser and other mechanisms may permit you to send do-not-track signals or other similar signals via your browser settings to express your preferences regarding online tracking. Due to the lack of any standard for how do-not-track signals should work on commercial websites, we do not currently respond to such signals.
• Shine the Light Notice. California residents may request and obtain from us, once a year and free of charge, information about categories of Personal Information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared Personal Information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided above.