Supplementary CCPA Privacy Disclosure

This document outlines how Amana handles personal information of California residents under the California Consumer Privacy Act (CCPA) and is intended as an addendum to Amana’s general Privacy Notice and its GDPR-compliant practices. References to the “CCPA” below are aligned with the statutory definitions and provisions under California Civil Code §1798.140 et seq.

1. California Consumer Scope

Under California law, individuals who reside in the state and engage with Amana’s products or services—whether directly or through our clients—are considered “Consumers.” Where applicable, these individuals are referred to as “Users.”

2. Personal Information Categories

Amana may process several classes of personal data as part of its services. These include:

• Identifiers: Names, contact details, unique digital identifiers, government-issued ID numbers.
• Customer Record Information: Driver’s license data, payment card details, and any personal documentation submitted for verification.
• Protected Characteristics: Legal classifications such as age or citizenship when relevant.
• Transactional Data: Records related to property ownership or service usage.
• Biometric Identifiers: Facial geometry or similar features collected for identity confirmation.
• Online Activity: Website usage metrics and behavioural data.
• Sensory Information: Photos, video footage, or voice recordings.
• Employment Information: Job-related details where provided.
• Sensitive Data: Health-related documentation in specific use cases.

3. Collection Channels

Data may be obtained through various pathways, including:

• Direct submissions by the User or Amana’s client.
• Automated interactions with Amana platforms (e.g., browsing activity).
• Forms or applications filled out during service usage or onboarding.

4. How Amana Uses Your Data

Personal information is only processed for legitimate and disclosed purposes, such as:

• Delivering verification services to business clients.
• Supporting regulatory compliance and identity validation.
• Operating digital tools, including demos and customer portals.
• Improving user interaction and monitoring performance via cookies and analytics tools (see our [https://www.AmanaSI.com/CookieNotice]).

In its role as a service provider, Amana acts on behalf of clients to verify individuals’ identities under formal contractual arrangements. In cases where Amana acts independently—e.g., during website interactions or demo testing—it assumes the role of a business under CCPA.

5. Data Disclosure

To fulfil operational and legal obligations, Amana may share personal data with contracted third parties, including:

• Technology providers.
• Compliance partners.
• Legal counsel and cloud infrastructure vendors.

Amana has not sold consumer personal information and does not plan to do so. Disclosures are limited to the categories described above and are done strictly under contractual safeguards.

6. Your Privacy Rights

California residents are entitled to exercise the following rights under the CCPA:

• Access: Request details about the data Amana has collected and how it has been used or disclosed.
• Correction: Correct inaccurate data.
• Deletion: Ask for personal information to be erased, subject to certain legal exceptions.
• Portability: Obtain a digital copy of your data in a structured, readable format.
• Non-Retaliation: Receive equal service and pricing regardless of your privacy preferences.
• Limit use of sensitive data: Limit the use of that information to that which is necessary to perform the services or provide the goods reasonably expected.
• Right to Opt-Out of the Sale or Sharing: Amana does not sell or share information for marketing and advertising purposes.

7. Exercising Your Rights

To initiate a data request, please reach out to Privacy@AmanaSI.com. You may also designate an authorised representative to act on your behalf. Note: All requests are subject to verification procedures to protect your information.

Amana will respond to valid requests within 45 days. If additional time is needed (up to 90 days), we will notify you accordingly.

8. Service Provider Support

Where Amana acts on behalf of a client, we facilitate requests related to your CCPA rights only upon the client’s written direction. In such cases, the business client is responsible for coordinating user-facing privacy obligations.

9. Notice Updates

This CCPA-specific notice is reviewed regularly to reflect evolving legal standards. Any material changes will be posted on our website, and the effective date will be updated accordingly.

10. Contact Us

For inquiries related to this document or to assert your rights under California law, please contact our Privacy Team at Privacy@AmanaSI.com. Our team is available to support your request.

‍