AVALON TEST EQUIPMENT COOKIE AND PRIVACY POLICY

Last updated: March 18, 2026

1. ABOUT THIS POLICY

1.1

Please read this Cookie and Privacy Policy (the "Policy") carefully before using the Website operated by Avalon Test Equipment, a Corporation formed in California, United States ("us," "we," "our") as this Policy contains important information regarding your privacy and how we may use the information we collect about you.

1.2

This Policy applies to your use of the Avalon Test Equipment website accessible at https://www.avalontest.com (the "Website"). It applies to everyone, including, but not limited to, visitors, users, and others who wish to access or use the Website.

1.3

Avalon Test Equipment complies with the European Union General Data Protection Regulation ("GDPR"), as applicable. For the purposes of the GDPR, to the extent applicable and relevant, Avalon Test Equipment is the "data controller."

1.4

This Policy may be updated from time to time. Please check it regularly and refer to Section 11 for information on how we handle changes.

2. INFORMATION WE COLLECT

2.1

We collect any and all information that you enter on this Website or provide to us by any other form of communication, including, but not limited to, electronic mail, regular mail, and telephone calls. We may collect the following categories of personal information about you:

2.1.1

Personal information you provide when contacting us through forms on our Website. Please note that we do not scrape or collect information from unsubmitted forms;

2.1.2

Personal information you provide when contacting us by telephone to register, subscribe, or request information on, or to have us provide, services or products;

2.1.3

Personal and payment information you provide when making a purchase or rental;

2.1.4

Personal information you provide when submitting inquiries or support requests;

2.1.5

Personal information gathered using cookies and similar tracking technologies, as further described in Section 5 of this Policy;

2.1.6

Details of your visits to our Website, including, but not limited to, traffic data, weblogs, and other similar data.

2.1.7

The following are specific examples of personal information we may collect:

• Name (first and last)
• Postal and/or shipping address, State, Province, ZIP/Postal code, City
• Billing address
• Email address
• Telephone and/or mobile number
• Driver's license number
• Social Security Number (collected only where required for financing or identity verification purposes)
• Credit card or debit card number and card expiration date
• Bank account number (collected only where required for financing or payment purposes)
• Purchase, return, and exchange information
• Registry or list information
• Internet Protocol (IP) address
• Usage data, including browser type and version, pages visited, time and date of visit, time spent on pages, and unique device identifiers
• Mobile device information, including, but not limited to, device model, operating system version, device date and time, unique device identifiers, mobile network information, system configuration information, browser type and version, hardware model, Internet service provider and/or mobile carrier, and Internet Protocol (IP) address or proxy server
• Information about how you use our Website and any mobile applications, including, but not limited to, search terms, pages visited, application performance, and related activity
• Approximate geo-location
• Social media information (e.g., ID, profile picture, gender, age range)
• Testimonials
• Account login credentials

2.1.8 Legal Basis for Processing Personal Information (GDPR)

To the extent the GDPR applies, we process your personal information on the following legal bases:

In any case, we will gladly help to clarify the specific legal basis that applies to any particular processing activity, and in particular whether the provision of personal information is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

2.1.9

Should you choose not to provide certain personal information, we may not be able to provide you with the requested products, services, or information.

3. HOW WE USE YOUR INFORMATION

3.1

We may use and process the personal information you provide for the purposes outlined below, as well as for any purposes specified at the time of collection:

3.1.1

To send you the information you have requested;

3.1.2

To fulfill orders you have placed for products and services, or to perform obligations under any applicable agreements between you and us;

3.1.3

To deal with your inquiries and manage your account;

3.1.4

To contact you by telephone, SMS, or electronic mail about offers, products, promotions, developments, or services which we think may be of interest to you, to the extent permitted by applicable law and regulation. You may opt out of such communications at any time by following the unsubscribe instructions in any communication we send, or by contacting us directly;

3.1.5

To develop, deliver, and improve our products, services, or marketing;

3.1.6

To develop and improve the Website to be more useful to you;

3.1.7

For internal research, analysis, testing, monitoring, customer communication, risk management, network security, and administrative purposes;

3.1.8

To send you important notices, including, but not limited to, security updates;

3.1.9

To prevent fraudulent transactions, monitor against theft or misuse of our services or products, and otherwise protect our interests and those of our customers;

3.1.10

To respond to law enforcement requests, and as required by applicable law, court order, or governmental regulations;

3.1.11

For any other legitimate interest allowable under applicable law, including, but not limited to, the GDPR and CCPA/CPRA, which applies to our business and your data.

3A. HOW LONG WE RETAIN YOUR INFORMATION

3A.1

We will retain your personal information only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law. We retain different categories of personal information for different periods based on the following criteria:

Where retention is required by applicable law or for the purposes of legal claims, we may retain data beyond these periods. Should you inform us of your desire for us to restrict or delete your personal information, we will do so unless we have a different legitimate purpose for retaining that information.

4. HOW WE SHARE YOUR INFORMATION

4.1

We may disclose your personal information to our selected third-party business partners, including, but not limited to, Google Analytics, Constant Contact, and Google reCAPTCHA, to fulfill orders, process payments, respond to inquiries, perform market analysis, improve your experience on the Website, and protect the security of our network and services. We share your information only to the extent necessary for the specific business purposes described in this Policy.

4.2

We may also disclose your personal information in the following circumstances:

4.2.1

With Service Providers: To third-party companies or individuals who process data on our behalf in order to enable us to carry out our business practices or the purposes described in this Policy;

4.2.2

With Affiliates: To our parent company and any other subsidiaries or joint venture partners under common control with us, in which case we will require those affiliates to honor this Policy;

4.2.3

With Business Partners: To our business partners in order to offer you certain products, services, or promotions;

4.2.4

For Business Transfers: In connection with, or during negotiations of, any merger, acquisition, sale of company assets, financing, or other transfer of all or a portion of our business to another company. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy;

4.2.5

For Legal Compliance: To conform to legal requirements or comply with legal process; to assist in the investigation of suspected illegal or wrongful activity; to protect and defend our rights or property; to deal with any misuse of the Website; or to enforce our Terms of Use and other agreements;

4.2.6

With Your Consent: For any other purpose with your explicit prior consent.

4.3

We do not sell your personal information for monetary compensation in the traditional sense. However, as described in Section 15, certain data-sharing activities with advertising and analytics partners may constitute a "sale" or "sharing" of personal information under California law. California residents may opt out of these activities as described in Section 15 of this Policy.

5. COOKIES AND OTHER TRACKING TECHNOLOGIES

5.1 What Are Cookies?

A cookie is a small piece of data sent from a website and stored on your device by your web browser. Cookies allow websites to recognize your device, remember your preferences, and generally improve your user experience. They can also help to ensure that advertisements you see online are more relevant to your interests. You can find more information about cookies at www.allaboutcookies.org.

5.2 Which Cookies Do We Use?

The cookies used on this Website are categorized as follows:

5.3 Third-Party Analytics — Google Analytics

We use Google Analytics, a web analytics service provided by Google, to compile reports on Website traffic and usage. These cookies collect information in an aggregated form, including the number of visitors to the Website, where visitors have come from, and the pages they visit.

For more information on Google's privacy practices, please visit: https://policies.google.com/privacy

To opt out of Google Analytics, please visit: https://tools.google.com/dlpage/gaoptout

5.4 Email Marketing — Constant Contact

We may use Constant Contact, an email marketing service provided by Constant Contact, Inc., to manage and send email communications to you.

You may opt out of receiving any or all of these communications by following the unsubscribe link or instructions included in any email we send, or by contacting us directly.

For more information on Constant Contact’s privacy practices, please visit: https://www.constantcontact.com/forward/privacy-center

5.5 Security — Google reCAPTCHA

We use an invisible CAPTCHA service known as reCAPTCHA, operated by Google, to help protect our Website from spam and abuse.

This service may collect information from you and your device for security purposes. The information collected is processed in accordance with Google’s Privacy Policy:

https://policies.google.com/privacy

5.6 How to Manage or Remove Cookies

You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. Please be aware, however, that blocking cookies may hamper the Website's functionality or restrict how much of the Website you can access. To opt out of interest-based advertising, please visit any of the following:

• NAI opt-out platform: http://www.networkadvertising.org/choices/
• DAA opt-out platform: http://optout.aboutads.info/?c=2&lang=EN
• EDAA opt-out platform: http://www.youronlinechoices.com/

On mobile devices, you may opt out via "Opt out of Interest-Based Ads" or "Opt out of Ads Personalization" on Android devices, or "Limit Ad Tracking" on iOS devices.

5.7 Social Media

We engage with customers on multiple social media platforms, including, but not limited to, Facebook, LinkedIn, and Twitter/X. If you contact us on one of our social media platforms, request customer service via social media, or otherwise direct us to communicate with you via social media, we may contact you via direct message or use other social media tools to interact with you. In these instances, your interactions with us are governed by this Policy as well as the privacy policy of the applicable social media platform.

5.8 Social Media Widgets

Our Website may include social media features, such as the Facebook Like button, LinkedIn share button, and Twitter/X widgets. These features may collect information about you, including, but not limited to, your IP address and which page you are visiting on our Website. They may set a cookie or employ other tracking technologies to accomplish this. Social media features and widgets may be hosted by a third party. Your interactions with those features are governed by the privacy policies of the companies that provide them.

5.9 Social Media Advertising

We may display targeted advertisements to you through social media platforms. These advertisements are directed to groups of people who share traits such as likely commercial interests and demographics, such as customers who have expressed an interest in test and measurement equipment or related services. Please see the policies of each social media platform for additional information about these types of advertisements.

5.10 Do Not Track

Do Not Track is a preference you can set on your browser to inform websites that you do not want to be tracked. At this time, our Website does not respond to Do Not Track ("DNT") signals. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your browser. You may also opt out of interest-based advertising as described in Section 5.6 above.

6. YOUR PRIVACY CHOICES AND RIGHTS

6.1

As a user of our Website, you have rights and choices about how to limit or protect the collection, use, and disclosure of your personal information. Depending upon where you reside, you may have some or all of the following rights with regard to your personal information:

6.1.1

The right to access and update certain information we hold about you;

6.1.2

The right to request the deletion of your personal information, unless we are required to retain it by applicable law or for legitimate business purposes;

6.1.3

The right to be informed about the categories of information being collected, the purposes for which it is collected, and your rights regarding your personal information;

6.1.4

The right to object to, or opt out of, the processing or sale of your personal information, where applicable;

6.1.5

The right not to be discriminated against for the exercise of any of your privacy rights;

6.1.6

The right to data portability — to receive your personal information in a structured, commonly used, and machine-readable format.

Residents subject to the GDPR and residents of California, Nevada, and Canada have additional rights described in Sections 14 through 18 of this Policy.

7. INTERNATIONAL DATA TRANSFERS

7.1

Your personal information may be transferred to, processed in, and/or stored in a country other than the one in which it was collected. All data processing activities undertaken by us currently take place in California, United States. It is possible that in the future, such personal information may be transferred, stored, and/or processed outside of the United States. We will only allow such transfer of personal information if we have a legally permissible method in place and we have implemented procedures to ensure that appropriate safeguards are in place to protect your personal information, regardless of where it is being transferred.

7.2

In connection with the sale or transfer of some or all of our business assets, we may transfer corresponding customer information to the acquiring party. We also may retain a copy of that information. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

7.3 EU and UK Representatives

As a company established in the United States, to the extent we are subject to the GDPR by virtue of offering goods or services to residents of the European Economic Area ("EEA") or the United Kingdom, we have appointed the following representatives pursuant to Article 27 of the GDPR and UK GDPR:

• EU Representative (GDPR Art. 27): Katie Ryan, info@avalontest.com
• UK Representative (UK GDPR Art. 27): Katie Ryan, info@avalontest.com

8. DATA SECURITY

8.1

We have implemented the following measures to protect and safeguard your personal information, including, but not limited to:

• Limiting the amount of personal information we collect to what is strictly necessary;
• Using SSL or other secure connection technologies when transmitting personal information;
• Destroying personal information that we no longer require;
• Performing regular risk assessments and following a risk treatment plan;
• Maintaining comprehensive security policies and procedures;
• Screening all employees with access to personal information;
• Training our employees and requiring them to sign confidentiality agreements;
• Encrypting laptops, USBs, and other portable media;
• Implementing and monitoring intrusion prevention and detection systems;
• Maintaining up-to-date software and security safeguards;
• Performing regular due diligence of vendors;
• Implementing physical security measures; and
• Physically and/or logically separating systems containing personal information from public networks such as the Internet.

Please note, however, that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

8.2 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by Article 33 of the GDPR. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

9. CHILDREN'S PRIVACY

9.1

This Website does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at info@avalontest.com. If we become aware that we have collected personal information from anyone under the age of 13 without verification of parental consent, we will take steps to remove that information from our records.

9.2

California Business and Professions Code Section 22581 allows California residents under the age of 18 who are registered users of online sites, services, or applications to request and obtain removal of content or information they have publicly posted. To request removal of such data, and if you are a California resident, you may contact us at info@avalontest.com, and include the email address associated with your account. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online, and that the law may not permit or require removal in certain circumstances.

10. THIRD-PARTY WEBSITES

10.1

This Policy only applies to this Website. This Website may contain hyperlinks to websites operated by parties other than us. We provide such hyperlinks for your reference only. We do not control such websites and are not responsible for their contents or the privacy or other practices of such websites. It is up to you to read and fully understand their privacy policies. Our inclusion of hyperlinks to such websites does not imply any endorsement of the material on such websites or any association with their operators.

11. POLICY UPDATES

11.1

We reserve the right to amend this Policy at any time. When we change this Policy in a material way, we will notify you by posting the updated Policy on this page and, where we have your contact information, by sending you notice by electronic mail prior to the change becoming effective. We will update the "Last updated" date at the top of this Policy upon each revision. You are advised to review this Policy periodically for any changes.

11.2

For changes that require your consent as a matter of applicable law, we will seek that consent before the change takes effect.

12. HOW TO REACH US

12.1

If you have any questions about this Policy, please contact us at:

• Email: info@avalontest.com
• Toll-free phone: 760.536.0191
• Mail: Avalon Test Equipment, 3194 Lionshead Ave, Carlsbad, CA 92010

12.2

The following person is accountable and responsible for our privacy practices and procedures:

Katie Ryan, VP of Operations Avalon Test Equipment 3194 Lionshead Ave, Carlsbad, CA 92010 (760) 536-0191 info@avalontest.com

13. ARTIFICIAL INTELLIGENCE

13.1

As part of our services, we may use or offer tools that incorporate artificial intelligence, machine learning, or similar features (collectively, "AI Tools"). These tools are designed to enhance your experience, provide innovative solutions, and process and protect personal information consistent with this Policy.

13.2

We do not use automated decision-making, including profiling, that produces legal effects or similarly significant effects on you without human review. If you have questions about our use of automated processing, or wish to request human review of any automated decision, please contact us at info@avalontest.com.

14. PRIVACY RIGHTS UNDER THE GDPR

14.1

This section applies to individuals located in the European Economic Area ("EEA") or the United Kingdom. In addition to the general rights set forth in Section 6 of this Policy, residents of the EEA and United Kingdom have the following rights under the GDPR.

14.2

You may have the right to:

14.2.1

Access: Request access to, and a copy of, the personal information we hold about you, subject to applicable exemptions;

14.2.2

Rectification: Request that we correct or update any personal information we hold about you that you believe to be inaccurate, incomplete, or out of date;

14.2.3

Erasure: Request that we delete any personal information we hold about you in certain circumstances;

14.2.4

Restriction: Request that we restrict the processing of your personal information in certain circumstances;

14.2.5

Object: Object to the processing of your personal information where we are relying on legitimate interests as the legal basis for processing, or where we are processing your personal information for direct marketing purposes;

14.2.6

Portability: Request that we transfer the personal information you have provided to us to another organization of your choice, or directly to you, in a structured, commonly used, machine-readable format. Please note that this right applies only where processing is based on your consent or on the performance of a contract with you;

14.2.7

Withdraw Consent: Where we rely on your consent as the legal basis for processing your personal information, you have the right to withdraw that consent at any time. If you withdraw your consent, we may not be able to provide you with access to certain features of the Service. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal;

14.2.8

Lodge a Complaint: You have the right to lodge a complaint regarding our collection, use, and processing of your personal information with the data protection authority in your country of residence, place of work, or place of the alleged infringement. A list of EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en. Residents of the United Kingdom may lodge a complaint with the Information Commissioner's Office at https://ico.org.uk.

14.3

You may exercise the rights described above by contacting us at info@avalontest.com. Please note that we may ask you to verify your identity before responding to such requests. We will respond to your request within 30 days of receipt. We have the ability to deny your request if certain exceptions under applicable law apply. If we deny your request, we will provide you with the reasons for such denial. We do not normally charge a fee to process or respond to a request; however, we reserve the right to charge a reasonable fee if a request is excessive, repetitive, or manifestly unfounded.

15. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

15.1

This section applies only to residents of the State of California and supplements the information contained in this Policy. This notice to California residents is provided under California law and provides our "Notice at Collection."

The California Code of Regulations defines a "resident" as: (1) every individual who is in the State of California for other than a temporary or transitory purpose; and (2) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose.

15.2 Categories of Personal Information Collected

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device. The following is a list of categories of personal information which we may collect or may have been collected from California residents within the last twelve (12) months:

Please note that the following categories of information are excluded from the scope of the CCPA/CPRA: publicly available information from government records; deidentified or aggregated consumer information; health or medical information covered by HIPAA or CMIA; and personal information covered by sector-specific privacy laws, including the FCRA, GLBA, FIPA, and the Driver's Privacy Protection Act of 1994.

15.3 Sources of Personal Information

We obtain the categories of personal information listed above from the following categories of sources: directly from you, for example from the forms you complete on our Website or preferences you express; indirectly from you, for example from observing your activity on our Website; automatically from you, for example through cookies we or our Service Providers set on your device as you navigate through our Website; and from Service Providers, for example third-party vendors we use to provide the Service to you.

15.4 Use of Personal Information

We may use or disclose personal information we collect for the following business or commercial purposes, including, but not limited to: operating our Website and providing you with our Service; providing you with support and responding to your inquiries; fulfilling or meeting the reason you provided the information; responding to law enforcement requests and as required by applicable law; for internal administrative and auditing purposes; to detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity; and as otherwise described in Section 3 of this Policy.

15.5 Disclosure of Personal Information

We may have used or disclosed, in the last twelve (12) months, the following categories of personal information for business or commercial purposes:

• Category A: Identifiers
• Category B: CA Customer Records
• Category D: Commercial Information
• Category F: Internet or Other Network Activity

When we disclose personal information for a business or commercial purpose, we enter into a contract that describes the purpose and requires the recipient to keep that personal information confidential and not use it for any purpose except performing the contract.

15.6 Sale and Sharing of Personal Information

As defined in the CCPA/CPRA, "sell," "sale," and "share" include disclosing personal information to a third party for valuable consideration or for cross-context behavioral advertising. We do not sell personal information as the term "sell" is commonly understood. We do allow Service Providers to use your personal information for business purposes described in this Policy, including activities such as advertising, marketing, and analytics, and these activities may be deemed a "sale" or "sharing" under the CCPA/CPRA.

We may have sold or shared, in the last twelve (12) months, the following categories of personal information:

• Category A: Identifiers
• Category B: CA Customer Records
• Category F: Internet or Other Network Activity

Please note that the categories listed above are those defined in the CCPA/CPRA. This does not mean that all examples of that category were in fact sold or shared, but reflects our good faith belief that some of that information from the applicable category may have been shared for value in return.

15.7 Sale of Personal Information of Minors Under 16 Years of Age

We do not knowingly collect or sell personal information from consumers we actually know to be under the age of 16. If you have reason to believe that a child under the age of 13 has provided us with personal information, please contact us at info@avalontest.com with sufficient detail to enable us to delete that information.

15.8 Your Rights under the CCPA/CPRA

If you are a resident of California, you have the following rights regarding your personal information:

• Right to Notice: You have the right to be notified which categories of personal information are being collected and the purposes for which that personal information is being used;
• Right to Know/Access: You have the right to request that we disclose information to you about our collection, use, sale, disclosure for business purposes, and sharing of personal information. Once we receive and confirm your verifiable consumer request, we will disclose to you: (i) the categories of personal information we collected about you; (ii) the categories of sources from which that personal information was collected; (iii) our business or commercial purposes for collecting or selling that personal information; (iv) the categories of third parties with whom we share that personal information; and (v) the specific pieces of personal information we collected about you. If we sold or disclosed your personal information for a business purpose, we will also identify the categories of personal information sold and the categories of personal information disclosed;
• Right to Opt-Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information. To submit an opt-out request, please click "Do Not Sell or Share My Personal Information" on our Website, or contact us using the information provided in Section 15.9;
• Right to Correct: You have the right to request that we correct inaccurate personal information we have collected about you;
• Right to Limit Use of Sensitive Personal Information: You have the right to request that we limit the use and disclosure of your sensitive personal information to that which is necessary to perform the services or provide the goods reasonably expected by an average consumer. To submit such a request, please contact us using the information in Section 15.9;
• Right to Delete: You have the right to request the deletion of your personal information under certain circumstances, subject to the exceptions set forth in Section 15.9;
• Right Not to Be Discriminated Against: You have the right not to be discriminated against for exercising any of your rights under the CCPA/CPRA, including by being denied goods or services, being charged different prices or rates, or being provided a different level or quality of goods or services.

15.9 Exceptions to the Right to Delete

We may deny your request to delete personal information if retaining that information is necessary for us or our Service Providers to:

• Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
• Debug products to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.);
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent;
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
• Comply with a legal obligation; or
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

15.10 Exercising Your CCPA/CPRA Rights

In order to exercise any of your rights under the CCPA/CPRA, and if you are a California resident, you may contact us by any of the following methods:

• Email: info@avalontest.com
• Toll-free phone: 760.536.0191
• Mail: Avalon Test Equipment, 3194 Lionshead Ave, Carlsbad, CA 92010
• Online: avalontest.com/privacy-request

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. To designate an authorized agent, you must provide us with a valid power of attorney or signed written authorization confirming that agent's authority to submit requests on your behalf. We may contact you directly to verify the authorization.

Your request to us must: (i) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and (ii) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. To verify your identity, you will need to provide us with your name, postal/shipping address, billing address, phone number, and email address. We cannot respond to your request or provide you with the required information if we cannot verify your identity or authority to make the request.

We will disclose and deliver the required information free of charge within 45 days of receiving your verifiable consumer request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary and with prior notice. We have the ability to deny your request if certain exceptions in the law apply. If we deny your request, we will provide you with the reasons for such denial. Normally, we do not charge a fee to process or respond to consumer requests; however, we may charge a fee if the request is excessive, repetitive, or manifestly unfounded.

For data portability requests, we will provide your personal information in a format that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance. Any disclosures we provide will cover the 12-month period preceding our receipt of your verifiable consumer request.

15.11 California Shine the Light

Under California Civil Code Section 1798 (California's Shine the Light law), California residents with an established business relationship with us can request information once a year about sharing their personal information with third parties for the third parties' direct marketing purposes. If you would like to request more information under the California Shine the Light law, and if you are a California resident, you may contact us at info@avalontest.com or 760.536.0191.

16. SMS COMMUNICATIONS

16.1

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of information described in this Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. If you receive SMS communications from us and wish to opt out, please reply STOP to any such message or contact us at info@avalontest.com.

17. NEVADA PRIVACY RIGHTS

17.1

Nevada residents have the right to opt out of the sale of certain covered information as defined under Nevada SB 220 and its amendments. We do not currently sell covered information as defined under Nevada law. However, if you are a Nevada resident and wish to submit an opt-out request, you may do so by contacting us at info@avalontest.com or 760.536.0191.

18. CANADIAN PRIVACY RIGHTS (PIPEDA)

18.1

This section applies to residents of Canada. Avalon Test Equipment complies with the Personal Information Protection and Electronic Documents Act ("PIPEDA") and applicable provincial privacy laws with respect to the collection, use, and disclosure of personal information of Canadian residents.

18.2

The following person is accountable and responsible for our compliance with PIPEDA and our privacy practices and policies as they relate to Canadian residents:

Katie Ryan, VP of Operations
Avalon Test Equipment
3194 Lionshead Ave, Carlsbad, CA 92010
(760) 536-0191
info@avalontest.com

18.3

Canadian residents have the following rights with respect to their personal information:

18.3.1

Right to Access: The right to request access to personal information we hold about you, subject to applicable exemptions, which means you may not always receive all of the information we process;

18.3.2

Right to Rectification: The right to request that we correct any inaccurate or incomplete personal information we hold about you;

18.3.3

Right to Withdraw Consent: The right to withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Please note that withdrawal of consent may affect our ability to provide you with certain products or services;

18.3.4

Right to Lodge a Complaint: The right to lodge a complaint with us or with the Office of the Privacy Commissioner of Canada by visiting www.priv.gc.ca or calling 1-800-282-1376.

18.4

To exercise any of the rights described in this Section, please contact the accountable person identified in Section 18.2. We will respond to most requests within 30 days of receipt. We will notify you in writing if we require additional time to respond (up to an additional 30 days). We have the ability to deny your request if certain exceptions under applicable law apply. If we deny your request, we will provide you with the reasons for such denial.

This Policy is effective as of March 18, 2026.