Hy Cite Enterprises, LLC Website Privacy Statement

The purpose of this Privacy Policy is to describe how Hy Cite Enterprises, LLC (hereinafter the "Company") collects, uses and shares information about you through hycite.com (hereinafter the "Website").

Our Website also includes links to other websites; we encourage you to be aware when you leave hycite.com and to read the privacy statements of any website you visit. For Royal Prestige^® consumers, please visit royalprestige.com and navigate to your country’s local page to read our privacy notice governing your consumer relationship with Hy Cite Enterprises, LLC or one of its subsidiaries.

Please note that the use of our Website is also subject to our Terms of Use.

1. IDENTIFICATION OF THE PERSON RESPONSIBLE FOR THE PROTECTION OF YOUR PERSONAL INFORMATION

For the purposes of this Privacy Notice, the Company, with registered office at 3252 Pleasant View Rd, Middleton, WI, USA 53562, through its Legal Department, shall be responsible under the terms of the applicable laws for the collection, disclosure, storage, use, handling and transfer of personal data collected from any natural person (hereinafter the "Data Subject" or "Data Subjects").

2. PERSONAL DATA COLLECTED

The Company collects certain information from its Data Subjects through the Company's website in two ways: directly from our web server logs and with cookies.

3. PURPOSE OF PERSONAL DATA PROCESSING

The Company shall use the personal data collected for the following purposes:

• To personalize your website experience and provide relevant content.
• To help maintain the security, safety and integrity of our website.
• To research, analyze and develop business, including developing, supporting, customizing and improving our website and our products and services.
• To respond to law enforcement requests and, as required by applicable law, a court order or governmental regulations.
• To evaluate or conduct a merger, divestment, restructuring, reorganization or dissolution, or sale or transfer of some or all of the Company’s assets, whether as an ongoing process or as part of a bankruptcy, liquidation or similar proceeding, in which personal information held by the Company about our consumers is included in the assets transferred.

4. USE OF COOKIES AND SIMILAR TECHNOLOGIES

The Company complies with local law regarding consent to use cookies. Please exercise the options available to you in the cookie banner on your screen, the privacy center located in the footer of hycite.com as "cookie settings", or review the cookies we use on Cookie List Page. You may reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of websites or services may not function properly without cookies.

The Company and our service providers use cookies, web beacons and other technologies to receive and store certain types of information whenever Data Subjects interact with hycite.com. A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you revisit the website, the cookie allows the site to recognize your browser. Cookies can store unique identifiers, user preferences and other information. We use them to improve the quality of our service, including the storing of user preferences and the tracking of user trends.

When you visit our Website, we can track information in order to administer the site and analyze site usage. Examples of the information we can track include:

• Your Internet protocol address.
• The type of web browser or computer you use.
• The number of links you click on the website.
• The state or country from which you accessed the site.
• The date and time of your visit.
• The name of your Internet service provider.
• The web page from which you connected to our website.
• The pages you viewed from the website.

5. TRANSFER OF PERSONAL DATA

The data collected may be transferred for the purposes mentioned in the PURPOSE OF PERSONAL DATA PROCESSING section.

The personal data collected may be processed and transferred to national or foreign third parties that guarantee adequate levels of personal data protection. The personal data collected may be communicated among the companies of the corporate group to which the Company belongs, for the fulfillment of legitimate purposes related to business operations; considering that such companies have the same level of protection of personal data and measures that guarantee an adequate protection of the rights of their owners during such treatment.

The Company hosts the web pages of its products on servers located in the United States of America owned by Netlify, Inc.

6. SENSITIVE DATA POLICY

The Company, as per its policy, does not request any information that is understood as sensitive data, such as: religion, sexual preferences, or political opinions, among others.

7. POLICY RELATED TO MINORS

The Company, per its policy, does not intentionally request or allow minors to provide personal data. The web functionality is intended for use by legal aged adults.

8. PROTECTION OF PERSONAL DATA

The Company adopts and implements reasonable technical, physical, and administrative security measures to protect your personal information, with internal control policies and standards relating to the handling, processing and safeguarding of personal information.

9. RETENTION

Your personal data shall be retained for the time necessary to fulfill the stated purposes. When the Company no longer needs to use your personal data to fulfill the purposes for which it was collected, or to comply with contractual or legal obligations, your personal data shall be deleted from the system and records, or we shall take the necessary measures to proceed with the anonymization of your personal data, so that you may no longer be identified with it. The right to deletion shall not apply where we need to retain your information, including your personal data, in order to comply with the company's legal or regulatory obligations.

10. CHANGES TO THE PRIVACY NOTICE

Our Privacy Policy may change at any time. We shall post any privacy policy changes on this page and, if such changes are significant, we shall provide a more visible notice. We shall also maintain previous versions of this Privacy Policy in an archive for your review.

Your continued access and/or use of the Site following such changes constitutes your acceptance of and consent to this Privacy Policy, as revised.

11. MEANS OF EXERCISING DATA SUBJECTS' RIGHTS.

If you have any questions or comments about this notice, the Company’s means of collecting and using your personal information, or your choices and rights with respect to such use, contact us by any of the following means:

United States:
Telephone: (877) 494-2289
E-mail: dpo@hycite.com
Mailing Address: Hy Cite Enterprises, LLC, 3252 Pleasant View Road, Middleton, WI 53562, Attention: Data Privacy Officer

California: If you are a California resident (or the authorized representative of a resident) and wish to exercise your rights of access, data portability, deletion, and/or opt-out of sales under the CCPA/CPRA, please complete the California Consumer Privacy Act Request Form the to send a request. You do not need to create an account on our site to exercise your rights. We shall only use the personal information provided in an opt-out request to review and fulfill the request.

We strive to respond to a verifiable consumer request within forty-five (45) days of receipt. If we need more time (up to 45 more days), we will inform you of the reason and the extension period in writing. We shall provide our written response by mail or electronically, at your own choice. Any disclosure we provide shall only cover the 12-month period prior to the receipt of the verifiable request. If we determine that the request incurs a charge, we will tell you why we made that decision and provide you with an estimated cost before completing your request.

Mexico:
Telephone: +52 (33) 37708100
E-mail: procesal@hycite.com

At any time, the Data Subject, in person or through their duly accredited legal representative, may exercise the rights of access, rectification, cancellation and opposition under the terms of the Federal Law for the Protection of Personal Data in Possession of Individuals.

The request must contain the following information: (i) Data Subject's name, (ii) address and e-mail address for notification purposes of any kind, (iii) clear and precise description of the data with respect to which the corresponding right is sought to be exercised, (iv) purpose of the request, and (v) any element that facilitates the localization of the data. The Data Subject must also attach a copy of their identification document and, if applicable, the document attesting to their legal representation.

The response period to any request will be 20 business days from the day on which the request has been received. The response shall be communicated within the aforementioned term to the address or e-mail address provided by the Data Subject. Once the notification is received, the Data Subject will have 15 business days to make it effective, if appropriate.

Colombia:
Telephone: +57 (1) 7449490
E-mail: protecciondedatos@royalprestige.com.co

Pursuant to Law No. 1581 of 2012, Decree No. 1377 of 2013, and other supplementary regulations in force in Colombia, you may exercise your right to know, update, rectify or delete your Personal Data and revoke the consent given to the Company. Any claim or request related to the processing of your Personal Data must contain the following information: (i) Data Subject's name, (ii) address and e-mail address for notification purposes of any kind, (iii) clear and precise description of the data with respect to which the corresponding right is sought to be exercised, (iv) purpose of the request, and (v) any element that facilitates the localization of the data. The Data Subject must also attach a copy of their identification document and, if applicable, the document attesting to their legal representation.

The response period to any request will be ten (10) business days from the day on which the request for access, rectification, cancellation and/or opposition has been received. The response shall be communicated within the aforementioned term to the address or e-mail address provided by the Data Subject. Should it not be possible for the Company to respond to your claim within the aforementioned term, the Company shall inform you of the situation and explain the reason for such delay. In all circumstances, the Company shall reply to you within five (5) business days from the expiration of the initial ten (10) business days.

Peru:
E-mail: derechosarco@royalprestige.com.pe, with the following subject: Personal Data Request

In compliance with the provisions of Article 18 of Law No. 29733 – Personal Data Protection Law, and its regulations approved by Supreme Decree No. 00-2013-JUS, to exercise your rights of access, rectification, cancellation or opposition to the processing of your personal data, please send a communication to the address mentioned above. If you consider that your request for the exercise of your rights has not been addressed, you may file a claim before the National Authority for the Protection of Personal Data.

Dominican Republic:
E-mail: arobles@hycite.com

At any time, the Data Subject, in person or through their duly accredited legal representative, may exercise the rights of access, rectification, cancellation and opposition under the terms of Law 172-13 on the Integral Protection of Personal Data (hereinafter the "ARCO Rights"). The exercise of an individual right does not prevent the exercise of any other right. Likewise, by virtue of the consent given for the processing of personal data, the Data Subject may revoke this consent at any time with future effect. This revocation shall not affect the lawfulness of the processing prior to the revocation of consent.

The Data Subject shall also be entitled to exercise their right to be informed, to request deletion or portability of their data, and to object to the processing of their personal data.

The request must contain the following information: (i) Data Subject's name, (ii) address and e-mail address for notification purposes of any kind, (iii) clear and precise description of the data with respect to which the corresponding right is sought to be exercised, (iv) purpose of the request, and (v) any element that facilitates the localization of the data. The Data Subject must also attach a copy of their identification document and, if applicable, the document attesting to their legal representation.

The response time to any request shall be 10 business days from the day on which the corresponding request was received, in accordance with the provisions of the Law. The response shall be communicated within the aforementioned term to the mailing or e-mail address provided by the Data Subject.

Ecuador:
E-mail: arobles@hycite.com

In accordance with the Organic Law on the Protection of Personal Data published in the Official Gazette Supplement No. 459 of May 26, 2021 (hereinafter, "LOPDP"), the Data Subject shall be entitled to exercise their right to be informed, access the information, request rectification and updating, request the suspension, deletion, and portability of their data, and to object to the processing of their personal data.

As established in the LOPDP, any dispute relating to the rights of the Personal Data Subjects may be resolved by the Data Protection Superintendence of Ecuador, which shall also hear any claim made by the Data Subjects. The exercise of an individual right does not prevent the exercise of any other right.

The request must contain the following information: (i) Data Subject's name, (ii) address and e-mail address for notification purposes of any kind, (iii) clear and precise description of the data with respect to which the corresponding right is sought to be exercised, (iv) purpose of the request, and (v) any element that facilitates the localization of the data. The Data Subject must also attach a copy of their identification document and, if applicable, the document attesting to their legal representation.

The response time to any request shall be 15 business days from the day on which the corresponding request was received, in accordance with the LOPDP provisions. The response shall be communicated within the aforementioned term to the mailing or e-mail address provided by the Data Subject.

Argentina:
E-mail: arobles@hycite.com
Mailing Address: Hy Cite BA, S.R.L., Suipacha 552, 1°, CABA (1008)

The Personal Data Subject has the right to exercise their right of access to such data free of charge at intervals of no less than six months, unless a legitimate interest is proven, as established in Article 14, paragraph 3 of the Law (Provision 10/2008, Article 1, B.O. 09/18/2008). To this end, the Personal Data Subject may request access to their data and, if necessary, request the updating, modification or deletion of the data that they consider erroneously recorded.

Brazil:
Telephone: 0800-777-2310
E-mail: dpo@hycite.com or sac@royalprestige.com.br

You can contact us to:

• Ask questions, make comments, or clarify any doubts about this Policy and our personal data protection and privacy practices;
• Lodge a complaint;
• Confirm the processing of your personal data;
• Obtain information about how to access your personal data;
• Perform the correction of incomplete, incorrect, or out-of-date personal data;
• Obtain information about the anonymization, blocking, or deletion of unnecessary, excessive, or processed data that is not in compliance with the provisions of the current legislation;
• Obtain information about the portability of your personal data to another service provider or product, by express request, in accordance with the current legislation;
• Request the deletion of personal data processed with your consent, with the exception of cases provided for in the current legislation;
• Request details of the public and private entities with which we share your personal data;
• Obtain information about the possibility of not providing consent and about the consequences of such refusal;
• Revoke consent for the processing of your personal data, with the exception of cases provided for in the current legislation;
• Find out about other rights of the personal data holder, in accordance with current legislation.

12. Download Our Policy as PDF

Download Our Privacy Policy as a PDF.