MBK Online Services Privacy Policy

Last Updated: 4/23/2024

Introduction

This Privacy Policy covers the information we collect about you when you use our online services or otherwise interact with us electronically, for example, via email or webchat (collectively, our “Online Services”). "MBK," "we" and "us" refers to MBK Real Estate, LLC, and any of our corporate affiliates. Our Privacy Policy is here to help you understand how MBK manages your personal data using our Online Services. In this policy, we detail what information we collect, how we use it, and the choices and rights you have regarding its use. Our aim is to give you the necessary insights to make informed decisions about your interactions with our services. If you do not agree with the data collection practices described in this Privacy Policy policy, do not access or use our Online Services.

2 Scope of This Policy

This Privacy Policy describes the various contexts and circumstances in which we collect personal data, including through our Online Services. These Online Services include:

Digital Interactions: This encompasses your online engagements with us, which may occur through our online services, including:
- Our Websites: Any that link to this Privacy Policy, such as MBK.com, MBKrentalliving.com; MBKindustrialproperties.com; mbkseniorliving.com, and mbkhomes.com.
- Social Media and Affiliates: Interactions on our social media pages.
- Other Digital Platforms: Includes interactions such as clicking on our ads on third-party sites and subscribing to our electronic communications.
Online Customer Services: Including communications with our service representatives or features via chat functions, email, text, or phone.
Third-Party Information Gathered in the Online Context: This policy also extends to information we may collect about you from third parties related to your use of our Online Services, even in the absence of direct interactions with us.

MBK maintains separate privacy notices for other types of data processing. For example, this Privacy Policy does not apply to personal data collected in the context of our physical properties and facilities, our business-to-business relationships, or with respect to our workforce. Depending on the context in which you interact with us, we may present you with additional notices or policies about our privacy practices. For questions regarding the scope of this Notice, please contact us as set forth in the Contact Information section.

3 How We Obtain Information

We obtain the information we collect about you through various means and sources, including:

Direct Interactions. We collect personal data when you provide it directly to us, such as when you submit forms or communicate with us via phone, email, or online chats. The information collected online may be entered into our systems and combined with other information we collect about you. We may also share this data with our service providers, affiliates, advertising and marketing partners, and others. Please see below for more information about how we share your personal data.
Automatically Using Data Collecting Tools. We use various data collecting tools, such as cookies, scripts, and pixels, to collect certain information about your use of our Online Services. These tools can help us improve site performance, understand how our services are being accessed and used, and provide customized content and advertising to you. We provide you options regarding your use of non-essential data collecting technologies. For example, you can reject our use of certain non-essential cookies. For additional details about these technologies and your privacy options, please review our Cookie Policy here.
Third-Party Sources. We collect personal data from third parties, including referral partners, social media platforms, data brokers and advertising companies, e-commerce affiliates, public forums and databases, and other relevant parties based on your interactions with us. This information may be combined with other data we collect about you to enhance our Online Services, serve you with targeted ads, and tailor our interactions with you.

4 Information Collected and How We Use It

We collect and use personal data for several purposes, including to provide our Online Services and continually improve them. The personal data we collect, and how that information is used, depends on how you interact with us, the choices you make when engaging with us, and the Services you use. Please note, we share personal information for targeted advertising purposes, and we allow users to exercise their privacy rights with respect to this sharing. This section provides an overview of the types of personal data we may collect about you and the general purposes for which they are used in particular contexts. Please note that the actual information collected and its use may vary depending on your interactions with us and the Online Services you use.

4.1 Personal Data We Collect Directly From You Online

This section describes the personal data we collect about you when you provide it directly to us through our Online Services or in an electronic communication.

4.1.1 What We Collect or Process

Contact Information (Identifiers): We collect your name, email address, telephone number, physical address, and any other personal identifier you provide in a form or online communication.
Communications Content: We collect the content of your communications with us. For example, if you engage with our online chat services, we keep transcripts of those communications. Please note that we may use a third-party to provide our chat functionality which results in your personal data being shared with them.
Submitted Content: If you upload, submit, or transmit documents or content to us using our Online Services, we will collect any personal data contained within that content. We ask that you ensure that you respect the privacy of any individuals whose personal data may be in the content you transmit to us.

4.1.2 How We Use It

To Communicate With You: We will use your personal data to facilitate our communications with you. For example, we will use your email address to respond to your email requests. The length of time we maintain your contact information and your communications varies depending on the context.
Service Fulfillment: We use your personal data to perform a variety of services essential to the customer experience or our business, such as account setup, maintenance, and support, transaction processing and fulfillment, billing and payment processing, and customer service across multiple channels.
Business Operations: We use personal data to perform business operations, such as document management and record keeping, training and development, generating business intelligence reports, strategic decision making, auditing and compliance, maintaining the security and integrity of our Online Services and offline operations, including protection against fraudulent or illegal activities. This includes validating your identity as necessary.
Quality Assurance and Improvement: We use personal data to maintain and improve the quality and safety of our Services.
Customization: To enhance your experience with our Online Services, we may use your data to personalize features, content, and recommendations, in line with applicable laws and your preferences.
Additional Uses Described: In any other way we may describe when you provide the information or any other purposes for which you provide your consent.

4.2 Personal Data Collected Using Online Data Collecting Tools

We collect, use, and disclose personal data gathered in connection with your online interactions with us, including your use of our websites and their features. We also collect personal data in connection with electronic communication services like email and electronic messaging, and our social media pages (though not the platforms on which they are maintained). When you use our Online Services, we collect some information automatically and combine it with other information we collect about you. In many cases, we utilize third parties to assist with this collection. In such cases, your personal data is made available to other entities for processing on our behalf or at our direction or to serve you with targeted advertisements.

Some of this information is collected and logged as a result of your access to our servers, but various technologies such as cookies, web beacons, scripts, tags, and other software code that store and transmit personal and other information (collectively “data collecting technologies”). Some of these data collecting technologies are used by third parties to collect or receive information from our Online Services and elsewhere on the Internet and use that information to provide measurement services and target ads.

4.2.1 What We Collect or Process Using Data Collecting Technologies

Identifiers and Contact Information: We collect identifiers associated with you or the device you are using to access our Online Services, such as IP addresses, Cookie IDs, and other similar identifiers.
Device and Browser Data: We collect information about your device and the software and systems you use to access our Online Services, such as your browser type/version, screen size/resolution, and other information contained in your browser’s communication with our website.
User Interaction Data: We collect data about how you navigate to/from our Online Services (such as the URLs that referred you to our website), browsing activity on our Online Services (such as the web pages you viewed and buttons you clicked), and other metrics associated with your access and use of our Online Services.
Electronic Communication Records: We collect records related to your electronic communications with us, including online chat transcripts, email records, call records and recordings/logs, and other electronic messages and communications.
User Preferences: We record your online preferences, such as communication preferences, language, time/zone, and general location information, and privacy choices and configurations. We do this to facilitate such preferences.
Advertising Metrics: We collect information about your interaction with our content and marketing materials. For example, we may gather information about our advertisements you have viewed on our website or elsewhere. We use third parties to do this.

4.2.2 How We Use It

To provide our Online Services in a safe and secure manner: Such as to present our website and its content to you, to communicate with you about changes to our online services, to validate your identity as necessary to ensure the security of our services and systems, and to maintain and improve the security and performance of our Online Services.
Communications and Support: Such as to review and respond to your requests or inquiries, provide updates, notices, and requested communications, send you important transactional information, request feedback, or as necessary to fulfill our obligations to you.
For our legitimate business operations: Such as to make strategic decisions concerning our business operations, enforce, and review compliance with, the legal terms that govern our offerings, comply with our legal obligations, protect the rights, safety, and property of the online services, our users, and third parties, and anonymize, aggregate, or de-identify your personal data (so it can no longer identify you) in furtherance of conducting research and analysis.
To Send You Promotional Materials: Such as updates, newsletters, surveys, or other information regarding contests, events, and/or other MBK products or services that may be of interest to you based upon information you have provided to us. Promotional materials may be conveyed in emails or, if you have provided your consent, by SMS/text message.
Advertising: We use personal data to serve you with targeted advertisements and this information is shared with third parties in order to facilitate our advertising objectives.
Analytics/Personalization: We use personal data to conduct research and analytics, including to improve our Online Services. We also use your personal data to personalize your experience, and to understand how you interact with our websites, advertisements, and communications with you.
Data Aggregation: We may aggregate your personal data with that of other users for analytical and reporting purposes. This aggregated data is anonymized or deidentified and does not identify you personally. Aggregated data may be used for various purposes, including statistical analysis, without further notice to you and without obtaining additional consent.
With Your Consent: We use information about you where you have given us consent to do so for a specific purpose not listed above.

4.2.3 Third Parties Who Provide Online Services

We may use third-party services for various purposes, including but not limited to analytics, advertising, and customer support. Below are some specific third parties that we may use. To learn more about the types of entities who deploy cookies and online tracking technologies on our websites, please review “Disclosure of Personal Data.”

Font and Content Providers: Various third parties assist us in providing content and features for our Online Services. For example, we use Google Fonts and Adobe Typekit to serve the fonts that appear on your browser. Because these services send the content to your browser on our behalf, they typically have access to information about your device and browser, including your IP address, the URL of the pages you visit, and information about your device. They use this information to ensure that the content is delivered to you in the correct format and size.

4.2.4 Your Privacy Choices Regarding Tracking Technologies

To the extent these data gathering technologies are deemed to be a “sale” / “sharing” (which includes targeted advertising, as defined under the applicable laws) under applicable U.S. state laws, you can opt-out of these online tracking technologies by submitting a request using our Privacy Widget, (for cookies and other data collecting technologies), our Privacy Request Form, or using the contact information provided below. Please note, some features of our websites may not be available to you as a result.

Cookies: You can manage how your web browser interacts with cookies. While most browsers are configured to accept cookies by default, you can modify this behavior through your browser's “Privacy” or “Security” settings. However, if you remove or reject our Cookies, it could affect how the website works for you. Please note you must separately opt out in each browser and on each device. For detailed information on our cookie practices, please see our Cookie Notice. You can also tailor your cookie preferences using our built-in cookie consent manager.

Changing Mobile Device Privacy Settings. Your mobile device may collect and share device-level information to facilitate targeted advertising. This is independent of our Services but can affect your overall privacy experience. To better understand and manage these settings, you may refer to the privacy resources provided by your device's operating system. For your convenience, we've included links to informational pages for Google’s Android and Apple’s iOS platforms.
Limiting Interest-Based Advertising. You have the option to limit the interest-based advertising you receive. Various organizations and platforms offer opt-out features that allow you to have more control over your online advertising experience. For example, the Digital Advertising Alliance (DAA) provides a consumer choice tool that lets you opt out of interest-based advertising from participating companies. You can access this tool at the DAA Opt-Out Page. Similarly, the Network Advertising Initiative (NAI) offers an opt-out tool for participating members. You can access this tool at the NAI Opt-Out Page. Please note that participation in the DAA and NAI opt-out programs is entirely optional. These are third-party services and opting out through these platforms is not a requirement for using our Services. We are not responsible for the effectiveness of any such opt-out options. Opting out of interest-based advertising does not mean you will no longer see advertisements; it simply means that the advertisements you do see will not be tailored to your interests.
“Do Not Track” Signals. Do Not Track (“DNT”) is a privacy preference that you can set in your web browsers, which allows you to opt out of tracking by websites and online services. Like many websites, we do not currently respond to ‘Do Not Track’ browser settings or signals. For more information about DNT, please see eff.org/issues/do-not-track.
“Global Privacy Control.” Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including the “sharing” of your personal data. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting.

4.3 Data Collected from Other Parties

We obtain information from businesses provide us with our business and Online Services, such as our data analytics providers, marketing or advertising service providers, fraud prevention service providers, vendors that provide services on our behalf, and publicly available sources. We also create information based on our analysis of the information we have collected from you. We use this information for our business operations purposes, including offering and improving our Services, providing customer support, measuring the effectiveness of our Services, accounting and transaction purposes, and to enforce our terms and policies. Please see “Disclosure of Your Personal Data” to learn more about how we process personal information via our business services providers.

4.4 Other Purposes for Processing Personal Data

While less frequent, there are other scenarios where we may use or disclose your personal data:

Audits Involving External Entities: Sharing data with external organizations, including those we collaborate with or those that evaluate our business operations, to ensure compliance with industry standards, certifications, or legal obligations.
Legal Obligations: Fulfilling legal obligations such as responding to subpoenas, court orders, or other binding government requests. In the rare event of litigation, we may use your data to establish, exercise, or defend legal claims.
Reorganization: In the event of a business transaction such as a sale, merger, consolidation, acquisition, change in control, transfer of substantial assets, bankruptcy, or reorganization, your personal data may be shared or transferred. This also includes any subsequent integration activities post-transaction.
Business Transfers: In the event of a divestiture, investment, or other asset transfer that is not part of a broader business transaction like a merger or acquisition, your personal data may be shared or transferred.
With Your Consent: We use information about you where you have given us consent to do so for a specific purpose not listed above.

5 Disclosure of Your Personal Data

We may disclose the above information to the following types of parties:

Other MBK Group Entities (Affiliates). We may share personal data between the MBK family of brands that are related by common ownership or control. We share personal data for our routine business purposes and to develop new and improve existing Services.
Authorized Persons and Agents. We may disclose personal data to marketing, advertising, analytics and other client services providers with whom we interact on your behalf.
Business Services Providers. These are persons or entities with whom we have a relationship to provide business operations services and support to MBK. These companies, known as “service providers,” are contractually obligated to use your data only for the service they're providing and cannot use it for anything else. These providers may include the following:
- IT Operations Providers. These include cloud computing service providers, internet service providers, data backup and security providers, functionality and infrastructure providers, and similar service providers.
- Business Operations Providers. These include service provider with whom we partner to provide day-to-day business operations, including payment processors, security vendors, business software service providers, hospitality service providers, banks, facilities management providers and similar entities.
- Professional Service Providers. These include lawyers, accountants, consultants, security professionals, and other similar parties when disclosure is reasonably necessary to comply with our legal and contractual obligations, prevent or respond to fraud or abuse, defend ourselves against attacks, or protect the rights, property, and safety of us, our customers, and the public.
Marketing and Advertising Providers. These include advertising, direct marketing, and lead generation providers, affiliate marketing program providers, retargeting platforms, data brokers, ad networks, marketing consultants, and similar services providers.
Law Enforcement/Government Agencies. Persons to whom we are required by law to provide information, such as pursuant to a subpoena or a court order.
Corporate Transaction Disclosures. Persons involved in the consideration, negotiation, completion of a business transaction, including the sale, merger, consolidation, acquisition, change in control, transfer of substantial assets, bankruptcy, or reorganization, and any subsequent integration.
Authorized Disclosures: To any party when authorized by the individual to whom it pertains to share it. Disclosures for Business Purposes

6 Data Retention

We retain your personal data only as long as needed to fulfill the purposes we collected it for, including satisfying legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider (i) the amount, nature, and sensitivity of the personal data; (ii) the potential risk of harm from unauthorized use or disclosure of your personal data; (iii) the purposes for which we process your personal data and whether we can achieve those purposes through other means; and (iv) the applicable legal requirements related to our processing activities. Additionally, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. If you have any questions about the specific retention periods for different types of your personal data, please feel free to contact us using the Contact Information provided below.

7 Your Privacy Choices

You can control the collection and use of personal data for some of our processing activities. Below are the avenues through which you can manage the types of communications you receive from us:

Email: To opt out of promotional emails, you may follow the ‘unsubscribe’ instructions located at the bottom of each email. Alternatively, you may contact us directly using the information provided in the Contact Information section. Please be advised that opting out of promotional communications will not preclude you from receiving transactional emails, such as those related to purchases or account activity.
Text Messages: To discontinue receiving automated text notifications, simply reply ‘STOP’ to any of our messages, or use any alternative opt-out keyword we may have provided.
Mail Promotions: Should you wish to be removed from our mailing list for physical promotions and solicitations, please send a written request to our customer service department using the address provided in the Contact Information section of this Privacy Policy. Ensure your full name and mailing address are included in your correspondence.

8 Your Privacy Rights

8.1 Description of Your Privacy Rights

Depending on your location and applicable laws and regulations, you may also have data privacy rights regarding MBK’s processing of your personal data. Based on the legal requirements applicable to your jurisdiction, and subject to any legal restrictions or exceptions, you may have the choices and rights described below.

Right to Access. You may request access to the personal data we hold about you. This includes the right to be informed about the categories and specific pieces of personal data we have collected, the sources from which we collected it, the purposes for collecting it, and the categories of third parties with whom we have shared it.
Right to Correct. You may request that we correct any inaccurate personal data relating to you without undue delay. In this context, taking into account the purposes of the processing, you may also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
Right to Delete. You may request the deletion of your personal data, subject to certain exceptions. In certain circumstances, it may not be possible for us to accept your request, for example, when the processing is necessary to comply with a legal obligation, or if the processing is necessary for the performance of a contract.
Right to Portability. You may request that we provide you with a copy of your personal data in a structured, commonly used, and machine-readable format. You also have the right to request that we transfer this information to another data controller, where technically feasible.
Right to Opt Out of Targeted Advertising. You may direct us not to sell or share your personal data with third parties. Request that we not disclose, disseminate, or transfer your personal data to a third party for targeted advertising or marketing purposes (also known as “cross-context behavioral advertising”). You may opt out of this activity by clicking “Your Privacy Choices[R&T1] ” in the website footer and opting out of Targeted Advertising Cookies.
Right to Restriction of Processing. You may request that we restrict processing of your personal data. In certain circumstances, it may not be possible for us to accept your request, for example, when the processing is necessary to comply with a legal obligation, or if we can demonstrate compelling legitimate grounds otherwise.
Right to Opt-Out of Certain Data Processing. You may withdraw your consent that you have previously provided for MBK’s collection, use or disclosure of your personal data, subject to reasonable notice and any contractual or legal exceptions. Note that this will not affect the lawfulness of our processing of your personal data based on consent before its withdrawal.
Right to Opt-Out of Automated Individual Decision-Making. You may have the right to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Note that this right shall not apply if such a decision is necessary as part of a contract we have with or want to conclude with you, we have your consent, or we are permitted by law to engage in such automated decision making. In these cases, we will implement measures to safeguard your rights and freedoms and legitimate interests, and you may contest the decision by contacting us as set forth below.
Right Against Non-Discrimination. You have the right not to be discriminated against for exercising any of your data protection rights. This means that we will not deny you goods or services, charge you different prices or rates, or provide you with a different level or quality of goods or services based solely on your exercise of these rights.

Residents of California may also have additional rights pertaining to their personal data, as described in "California Privacy Rights.”

8.2 Exercising Your Privacy Rights

To exercise any of the rights outlined above, please visit our web form.

To ensure the security and confidentiality of your personal data, we have established verification measures that must be completed prior to fulfilling any request to exercise your data rights. These measures may involve confirming your identity through a series of questions or requiring documentation that substantiates your identity or authority to make the request. Should we be unable to verify your identity or authority adequately, we reserve the right to decline the request and will provide an explanation for our decision. Upon receiving a verified request to exercise your data rights, we will acknowledge receipt of the request. We will aim to respond substantively to your request within time permitted under the applicable law. If we require more time to process your request, we will inform you of the reason and extend the period by the notified number of days.

Please note that not all requests will be granted. Certain legal exceptions may apply, such as if we are unable to verify your identity, or if there are legal or contractual reasons that prevent us from fulfilling a deletion request. Regardless of the outcome, you will receive a written response that either details the actions we took or explains why no action was possible. If you are dissatisfied with our initial response, you may seek further review. To initiate an appeal, please contact us within 30 days of receiving our initial response using the method provided in the response. You should include a copy of your original request, our response, and a detailed explanation of why you are seeking reconsideration. You may also attach any additional supporting information and documents that you believe are relevant. We will review your appeal and provide a final determination within 60 days.

9 Security

We implement recognized physical, technical, and organizational safeguards tailored to protect the confidentiality, integrity, and availability of the specific categories of personal data we collect and process. These safeguards are designed to prevent unauthorized or unlawful access, destruction, loss, alteration, or disclosure of your personal data. However, despite our best efforts, no controls can provide absolute protection against all security threats, and we cannot guarantee that unauthorized access or loss will never occur. We have procedures in place to deal with any suspected data security breach. We will notify you and/or any applicable regulator of a suspected data security breach where we are legally required to do so in accordance with any legally prescribed timeframes.

10 Data Transfers

MBK’s primary operations are based in the United States, and as such, the majority of data processing occurs within the United States. To facilitate our international operations for the purposes of providing our Services, we transfer of your personal data across different locations, including countries other than the one where the information was originally collected. We implement appropriate measures to ensure that your personal data remains protected and secure during these transfers, including by adopting approved certifications, codes of conduct, or contractual clauses specific to the data transfer.

11 Children’s Privacy

Our Services are not directed to children under 16 (or other age as required by local law), and we do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data, please use our Contact Information. If we become aware that we have collected the personal data of a child, we will take steps to promptly delete such information.

12 Updates to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices, services, or legal obligations. Any modifications will be effective upon the date specified in the updated Privacy Policy. If we make material changes to this Privacy Policy that significantly affect your rights or the way we use your personal data, we will notify you through the most appropriate channels. Generally, this will be done by updating the date at the top of this page. However, other notification methods may include sending an email to the address you have provided, posting a notice on our Services, or other methods as required by law. Your continued use of our Services following the posting of changes constitutes your acceptance of such changes.

We will indicate the date of the last revision at the top of this Privacy Policy. We encourage you to periodically review this Policy to stay informed about how we are protecting your personal data.

13 California Privacy Rights

This section is tailored to meet the specific requirements imposed by California law. While this section outlines state-specific rights for California residents, the preceding sections of this Privacy Policy also apply to them.

13.1 Additional Notice to California Residents

California law requires us to disclose the following additional information with respect to our privacy practices. If you are a California resident, this section applies to you in addition to the rest of the privacy policy.

Description of Information Practices Regarding CCPA-Defined Categories of Personal Information[R&T2]
Category	Examples	Collected	Disclosed for a Business Purpose	Shared for Cross-Context Behavioral Advertising
Identifiers	A real name, alias, postal address, unique personal identifier (e.g., employee ID), online identifier, Internet Protocol address, email address, driver's license number, passport number or other similar identifiers.	✔	✔	✔
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	A name, signature, Social Security number, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	✔	✔
Protected classification characteristics under California or federal law	Age (40 years or older), citizenship, marital status	✔	✔
Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	✔	✔
Biometric information	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data
Internet or other similar network activity	Browsing history, information on a consumer's interaction with a website, application, or advertisement.	✔	✔	✔
Geolocation data	Physical location or movement.	✔	✔	✔
Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information.
Professional or employment-related information	Current or past job history or performance evaluations.	✔	✔
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
Inferences drawn from other personal information	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	✔	✔	✔
Sensitive Information	Government identifiers (social security, driver's license, state identification card, or passport number); complete account access credentials (usernames, account numbers, or card numbers combined with required access/security code or password); precise geolocation; racial or ethnic origin; mail, email, or text message contents	✔	✔

For a comprehensive understanding of the types of personal information we collect, the sources from which we collect it, and the purposes for which we use it, please refer to the “Information Collected and How We Use It” section of this Privacy Policy.

Notice of Financial Incentive. We may offer our customers loyalty and other incentive programs that provides certain benefits, such as rewards and exclusive offers. We may also provide other promotional campaigns, such as sweepstakes, contests, or limited-time promotions (collectively, the “Programs”). When you sign up for one of these Programs, we typically ask you to provide your name and contact information (such as email address and/or telephone number). Because our Programs involve the collection of personal data, they might be interpreted as a “financial incentive” program under the CCPA. The value of your personal data to us is related to the value of the free or discounted products or services, or other benefits that you obtain or that are provided as part of the applicable Program, less the expense related to offering those products, services, and benefits to Program participants. Participation in a Program is governed by the applicable terms and conditions (including the Official Rules for any sweepstakes or contest or the promotional terms for any short-term promotion), which will also describe the financial incentives association with the promotion and how to participate. You are not obligated to participate in any contest, sweepstakes, or short-term promotion and may terminate your participation at any time (as described in the survey terms and conditions). You may withdraw from participating in a Program at any time by contacting us using the designated method set forth in the applicable Program terms and conditions.
Shine the Light Disclosure. California Civil Code Section § 1798.83, also known as the “Shine the Light” law, permits California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for direct marketing purposes in the preceding calendar year, as well as the type of personal information disclosed. To make such a request, please send an email with the subject “Shine the Light Request” to the email address in our Contact Information.

13.2 California-specific Privacy Rights

California law grants rights specific rights to California consumers regarding their personal information. Note that these may be duplicative of the rights described above in “Your Privacy Rights” They are as follows:

Right to Know. You can request, up to two times each year, that we disclose the categories and/or specific pieces of personal information that we collect, use, disclose, and may sell.
Right to Correction of Personal Information. You have the right to have inaccurate personal information corrected.
Right to Deletion of Personal Information. You can ask us to delete the personal information that we have collected from you, subject to certain exceptions such as to complete a transaction for you, to exercise our rights, or to comply with a legal obligation.
Sales of Personal Information. In the preceding twelve (12) months, MBK has not “sold” personal information as this term is defined in the CCPA. Therefore, we do not offer such a right.
Right to Opt Out of Sharing of Personal Information. The CCPA defines “sharing” as disclosing or making a consumer’s personal information available to a third party for cross-context behavioral advertising. In the preceding twelve (12) months, MBK has shared certain categories of personal information (identified in the above table) with third-party advertisers to tailor ads to consumers’ interests. You have the right to opt out of your personal information being shared for targeted advertising, and you may exercise this right by clicking “Your Privacy Choices[R&T3] ” in the website footer and opting out of Targeted Advertising Cookies.
Right to Limit Use and Disclosure of Sensitive Personal Information. You have the right to direct us to limit our use of your sensitive personal information to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer. MBK does not use sensitive personal information beyond the CCPA’s permissible purposes.
Right against Discrimination. You are entitled to exercise the rights described above free from retaliation as prohibited by the CCPA.

To exercise your California privacy rights, please visit this web form or use the contact methods described below. We may request specific information from you to help us confirm your identity and your rights. We will respond to your request within a reasonable period (if properly submitted) and in accordance with applicable law. If we need more time to verify your identity, process and respond to your request, we will notify you of that fact along with the reason for the delay. If we decline to act regarding your request, we will inform you of our decision and the reason for it, and, if applicable, with instructions on how you may appeal our decision.

You have the option to designate an authorized agent to submit requests on your behalf for exercising your data rights. An authorized agent can be either a person or a business entity that you have formally authorized to act on your behalf.

To use an authorized agent:

Signed Authorization: You must provide the authorized agent with a signed written authorization to act on your behalf. This document should clearly indicate that you grant them the authority to submit requests for you.
Agent Submission: The authorized agent can then submit a request via the methods outlined above. The agent should attach a copy of the written authorization you provided.
Identity Verification: We may contact you directly to confirm that you have authorized the agent to act on your behalf. This is a security measure designed to protect your personal information.

Please note that we reserve the right to deny requests from agents who do not provide proof of authorization or if we cannot verify the agent’s identity.

Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, you can reach out to us through the following means:

Toll-Free Telephone: (855) 914-1987 (U.S. only).

Email: privacy@MBK.com.

Submit Your Privacy Rights Request: Consumer Request Form.