Galileo Privacy Policy CCPA Supplement

Your Rights

California residents have the following rights:

• know what personal information We have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information the business has collected about you;
• request the deletion of certain personal information collected by Us;
• correct Inaccurate personal information;
• know/access or receive a disclosure of your personal information;
• know what personal information is sold or shared and to whom;
• opt-out of the sale or sharing of your personal information;
• in certain cases, limit the use and disclosure of sensitive personal information; and
• no retaliation for opting out or exercising any other rights, including an employee’s right not to be retaliated against for the exercise of their CCPA rights.

Exercising Your Rights

To exercise one of these rights, please provide a verifiable consumer request by calling us toll-free at 1-833-826-7792, or emailing us at privacy@galileo-ft.com. You will not need to create an account to exercise Your rights, but if You do not have an account We may require additional information to verify the authenticity of Your request.

Before We can fulfill the consumer requests noted above, We must verify Your identity. If You have a password-protected account with us, We can verify Your identity through our existing authentication procedures for Your account. However, We will require You to re-authenticate Yourself before We can disclose or delete any of Your information.

If You do not have a password-protected account with us, You may provide us with Your name, telephone number, email address, company name, Galileo account type, home address, and corporate address, together with a signed declaration under penalty of perjury that You are the consumer whose personal information is the subject of the request. We will match this information to the personal information We maintain.

You can also authorize another person, called an agent, to exercise Your rights on Your behalf. You must provide the authorized agent written and signed permission to act on Your behalf. We may deny requests from an authorized agent who does not submit proof that he or she has been authorized to act on Your behalf. Furthermore, We may require You to verify Your identity directly with us. We may also require You to directly confirm with us that You have provided the authorized agent permission to submit a request on Your behalf. An authorized agent can make a request on Your behalf by either calling us at 1-833-826-7792, or by emailing us at privacy@galileo-ft.com.

Additionally, to exercise your rights to opt-out of the sale or sharing of your personal information, you may select the “Do Not Sell or Share my Personal Information” toggle available on our Privacy Choices pages You may also set your browser to “Do Not Track” or “Send a Do Not Track Request.” Galileo processes browser opt out/do not track signals in a frictionless manner. If your browser is set to “Do Not Track” or “Send a Do Not Track Request” We will interpret this as a valid request to not sell or share the personal information for that browser or device.

We may not discriminate against You because You exercised any of Your rights under the CCPA, including, but not limited to, by:

• (A) Denying goods or services to You.
• (B) Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties.
• (C) Providing a different level or quality of goods or services to You.
• (D) Suggesting that You will receive a different price or rate for goods or services or a different level or quality of goods or services.

To the extent that anything in this CCPA Supplement conflicts with the Galileo Privacy Policy, this CCPA Supplement shall govern.

Categories of Information We Collect, Sell or Share, Disclose For A Business Purpose

We do not collect, sell, share, or disclose sensitive personal information.

For more information about our information collection practices and procedures and for more information about the rights of California residents under the CCPA, please visit our privacy policy, available at: Galileo Privacy Policy.

Sources of Personal Information

We may obtain the personal information listed above from the following categories of sources:

• Directly from You or your authorized agents. For example, from forms you complete or from communications you have with Galileo.
• Indirectly from You. For example, from your actions on our website (www.galileo-ft.com).
• Third-Parties. For example, from marketing and advertising service providers (such as joint marketing partners and event co-sponsors), data providers (such as information services and data licensors that provide demographic information, mailing addresses, and other information), and public sources (such as government agencies, public records, social media platforms, and other publicly available sources).

The Business Purposes For Which We Collect,Disclose, and/or Share Your Personal Information

We may collect, disclose, and/or share personal information for the following business purposes:

• performing the Services for business consumers, such as processing or fulfilling orders and transactions, creating, maintaining, and servicing accounts, verifying business customer information, undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by Galileo, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Galileo, providing advertising or marketing services, and providing analytics services;
• detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
• debugging to identify and repair errors that impair existing intended functionality;
• research and development purposes, including to analyze and improve the Services and our business, and for business promotion purposes.
• marketing and advertising purposes, including direct marketing and interest-based advertising:
  • direct marketing. We may send you direct marketing communications. You may opt-out of our marketing communications as described in the Opt-out of marketing section below.
  • interest-based advertising. Our third-party advertising partners may use cookies and similar technologies to collect information about your interaction with the Services, our communications and other online services over time, and use that information to serve online ads that they think will interest you. This is called interest-based advertising. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms. To opt out of this advertising, select the “Do Not Sell or Share my Personal Information” toggle available on our Privacy Choices pages or review the Global Privacy Control section on this page to learn more about options.
• collecting and processing applications for employment; and
• as required to comply with applicable laws and regulations, including responding to law enforcement requests

Global Privacy Control

Galileo recognizes the Global Privacy Control (GPC), which is a setting that allows you to communicate your privacy preferences to websites and online services that you visit. When we detect a GPC signal from a browser, we interpret this as a valid request to not sell or share the personal information for that browser or device in compliance with applicable laws. Please visit the Global Privacy Control website to learn more about the setting and how to enable it on your browser.

The Categories of Third Parties With Whom We Share Your Personal Information

Below is a list of third parties to whom we may disclose your personal information:

• Affiliates
• Services Providers and vendors who provide services such as data analytics, marketing and advertising, customer relationship management, employment recruiting, and card fulfillment
• Issuing Banks

Data Retention

We use the following factors to determine the retention period of personal information:

• to maintain an ongoing relationship with you as a customer or business contact;
• to perform under applicable terms and services to which You agreed;
• as necessary in connection with the lawful purposes set out in this CCPA Supplement;
• to comply with applicable laws; and
• to establish, exercise or defend our legal rights.

Information of Children

We do not knowingly collect, sell, share, or disclose the personal information of children under the age of 16.

Shine the Light Notice

Section 1798.83 of the California Civil Code permits California residents to request from a business, with whom the California resident has an established business relationship, certain information about the types of personal information the business has shared with third parties for those third parties’ direct marketing purposes, and the names and addresses of the third parties with whom the business has shared such information during the immediately preceding calendar year. You may make one request each year by emailing us at privacy@galileo-ft.com,or by writing us at the address listed at the end of the Galileo Privacy Policy.