CALIFORNIA CONSUMER PRIVACY ACT NOTICE FOR PRIMERICA

(English | Español)

Effective January 1, 2020; Last Updated September 2024

Primerica, Inc. and its affiliates and subsidiaries (collectively, "Primerica," "we," "us" and "our") are committed to protecting the privacy and security of personal information. We provide this California Consumer Privacy Act Notice for Primerica ("CCPA Notice" and "Notice") in accordance with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively, the "CCPA") This Notice supplements the information and policies on the Primerica Privacy Page and applies solely to Personal Information we collect from or about California residents as defined by the CCPA (referenced as "California Consumers," "you" and "your").

This Notice uses the CCPA's definition of "Personal Information," which means categories of information that identifies, relates to, describes, or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular individual or household. "Personal Information" does not include publicly available information or consumer information that is deidentified or aggregate consumer information.

This Notice provides the disclosures required by the CCPA and applies to Primerica's online and offline activities that are subject to this disclosure right. More details on how we collect information through our websites and online services is available in our Online Privacy Policy.

> When does this Notice not apply?

This CCPA Notice does not apply to personal information that is covered by certain other laws, including medical or protected health information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and personal information covered by the Fair Credit Reporting Act (FCRA), the Driver's Privacy Protection Act of 1994 (DPPA), the Gramm-Leach-Bliley Act (GLBA), and related state privacy laws and regulations. Information about how we collect, use and disclose information in other contexts, including our GLBA Privacy Notices for individuals who request or obtain our financial services products, is available on our Primerica Privacy Page.

> What categories of Personal Information do we collect?

The types of Personal Information we collect depend on your relationship or interactions with Primerica. In the 12 months preceding the last update of this Notice, we have collected the following categories of Personal Information relating to California Consumers:

• Identifiers, such as a real name, alias, and Social Security number;
• Personal information, as defined in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as contact information, signature, physical characteristics or description, and financial information;
• Characteristics of protected classifications under California or federal law, such as sex and citizenship;
• Commercial information, such as purchase history and transaction information;
• Biometric information, such as fingerprints;
• Internet or other electronic network activity information, such as browsing history, Internet Protocol address, and interactions with our websites; and
• Geolocation data, such as physical location or movements;
• Audio, electronic, visual and similar information, such as call recordings;
• Professional or employment-related information, such as work history;
• Non-public education information, such as student records;
• Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual's preferences and characteristics.
• Sensitive Personal Information:
  1. Personal Information that reveals:
     • A California resident's Social Security, driver's license, state identification card, or passport number;
     • A California resident's account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account;
     • A California resident's precise geolocation;
     • A California resident's racial or ethnic origin, religious or philosophical beliefs, or union membership;
     • The contents of a California resident's mail, email, and text messages unless the business is the intended recipient of the communication;
  2. The processing of biometric information for the purpose of uniquely identifying a California resident; and
  3. Personal information collected and analyzed concerning a California resident's health.

We obtain this information directly from you and your agents, as well as from affiliates, independent sales representatives, and third parties, including those to whom you have previously provided data and those to whom you have directed us to obtain information, service providers, and from publicly available sources, like government records, or from information you have made public.

> How do we use this Personal Information?

How we use your Personal Information depends on your relationship or interactions with Primerica. In the 12 months preceding the last update of this Notice, we have used the above categories of Personal Information to operate, manage, and maintain our business; provide products and services offered by Primerica and Primerica independent sales representatives; manage our employees, contractors, and third parties; and accomplish our business purposes and objectives. For example, we use the above categories of Personal Information to:

• Develop, personalize, and market products and services offered by Primerica and Primerica independent sales representatives;
• Debug to identify and repair errors that impair existing intended functionality;
• Conduct internal research, analytics, and data analysis;
• Maintain our facilities and infrastructure;
• Process payments;
• Operate and manage information technology and communications systems;
• Facilitate communications;
• Conduct risk and security control and monitoring;
• Detect and prevent malicious, deceptive, fraudulent, or illegal activity and prosecute those responsible for that activity;
• Perform identity verification;
• Perform accounting, audit, and other internal functions, such as internal investigations;
• Comply with laws, law enforcement and regulatory requirements, legal processes, and internal policies based on or reflecting legal or regulatory guidance, codes, or opinions;
• Maintain records; and
• Exercise and defend legal claims.

> How do we disclose this information?

How we disclose your Personal Information depends on your relationship or interactions with Primerica. In the 12 months preceding the last update of this Notice, we have disclosed the following categories of Personal Information for the purposes specified above:

• Identifiers, such as a real name, alias, and Social Security number;
• Personal information, as defined in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as contact information, signature, physical characteristics or description, and financial information;
• Characteristics of protected classifications under California or federal law, such as sex and citizenship;
• Commercial information, such as purchase history and transaction information;
• Biometric information, such as fingerprints;
• Internet or other electronic network activity information, such as browsing history, Internet Protocol address, and interactions with our websites; and
• Geolocation data, such as physical location or movements
• Audio, electronic, visual and similar information, such as call recordings
• Professional or employment-related information, such as work history;
• Non-public education information, such as student records;
• Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual's preferences and characteristics.

We have disclosed these categories of Personal Information with affiliates and independent sales representatives, service providers, law enforcement, governmental agencies, and other authorized third parties.

>How long do we retain Personal Information?

We retain Personal Information and Sensitive Personal Information subject to this Notice for as long as necessary to fulfill the purposes disclosed in this Notice. Additional criteria for the length of time this information is retained include your relationship with Primerica, any mandatory retention periods under applicable law and our records retention schedule, or where we deem necessary to establish, defend, or protect our legal rights. We may also retain this information in a deidentified or aggregated form so that it can no longer be associated with you.

> Do we sell or share this Personal Information?

No. In the 12 months preceding the last updated date of this CCPA Notice, we have not "sold" or "shared" Personal Information subject to this Notice, including Personal Information of minors under the age of 16. For purposes of this Notice: "sold" means the disclosure of Personal Information or Sensitive Personal Information to a third party for monetary or other valuable consideration; and "shared" means the disclosure of Personal Information or Sensitive Personal Information to a third party for cross-context behavioral advertising.

> What rights are provided by the CCPA?

Subject to certain exemptions, California Consumers have the right to:

1. Request we disclose to you free of charge the following information covering the 12 months preceding your request:
   1. the categories of Personal Information about you that we collected;
   2. the categories of sources from which the Personal Information was collected;
   3. the purpose for collecting Personal Information about you;
   4. the categories of third parties to whom we disclosed Personal Information about you and the categories of Personal Information that was disclosed (if applicable) and the purpose for disclosing the Personal Information about you; and
   5. the specific pieces of Personal Information we collected about you;
2. Request we delete Personal Information we collected from you, although we may not be required to delete information under certain circumstances; and
3. Request we correct inaccurate personal information that we have about you; and
4. Be free from unlawful discrimination for exercising your rights under the CCPA.

In the 12 months preceding the last updated date of this CCPA Notice, we have not "sold" or "shared" Personal Information or Sensitive Personal Information subject to this Notice, including Personal Information or Sensitive Personal Information of minors under the age of 16. For purposes of this Notice: "sold" means the disclosure of Personal Information or Sensitive Personal Information to a third party for monetary or other valuable consideration; and "shared" means the disclosure of Personal Information or Sensitive Personal Information to a third party for cross-context behavioral advertising.

Because we do not use or disclose Sensitive Personal Information for the purpose of inferring characteristics about you, and because we limit our use and disclosure of Sensitive Personal Information to those purposes specified in this Notice, you do not have the right to limit its use and disclosure.

> How can a California Consumer exercise rights under this CCPA Notice?

If you are a California Consumer and would like to exercise any of your rights under the CCPA, please ccomplete our online request form or call us at this toll-free phone number: 1-800-770-0673 (U.S.).

Upon receipt of an authorized, verifiable request to exercise one of your rights under the CCPA, we will work to honor your request within forty-five days of our receipt of your request. We will inform you during that time period if it will take longer than forty-five days to honor your request. We will also inform you during that time period if and why we are not able to honor all or part of your request, such as if it conflicts with other applicable laws or if the requested information is not subject to the CCPA's access or deletion rights.

Our response to your exercise of this right to request information will cover the above categories in the twelve-month period preceding your request. We are not obligated to fulfill more than two such requests in any twelve-month period. We will not discriminate against you for exercising any of your CCPA rights.

> How does Primerica protect your information?

We protect Personal Information from unauthorized access and use. To do this, we take security measures that comply with the law. We use computer safeguards and secured files and buildings. We share Personal Information only with those who agree to abide by our security standards. We train our employees and independent sales representatives on how to handle and protect your Personal Information.

> How does Primerica provide notification of changes to this CCPA Notice?

We may change our CCPA Notice from time to time. If we do, we will post the revised version on this page in place of this version. All new versions of this CCPA Notice automatically take effect when they are posted on this page. Checking the "Last Updated" date at the top of this CCPA Notice allows you to determine if this CCPA Notice has been revised since the last time you reviewed it.

Our collection, use and disclosure of information covered by this Notice is subject to the CCPA Notice in effect at the time such information is collected. You are responsible for periodically visiting this page to check for any changes.

> How can I request this Notice in an alternative format?

As stated in our ADA Policy Statement, Primerica is committed to compliance with the American with Disabilities Act. To request reasonable accommodations, including a copy of this Notice in an alternative form, contact us at ADA@primerica.com or write to us at: Attention: Accessibility Program, 1 Primerica Parkway, Duluth, Georgia 30099.

> How do you learn more or contact us with questions?

If you have any questions about this CCPA Notice, please complete our online request form, call us toll-free at 1-800-770-0673 (U.S.), or write to us at: Primerica Privacy Office, P.O. Box 2318, Duluth, GA 30096-0040. You can also learn more about our other privacy notices and policies on the Primerica Privacy webpage.