Effective Date: June 15, 2026

Last Reviewed on: June 11, 2026

Introduction.

• Transocean Resources Management, Inc. d/b/a Yamibuy or Yami (“Yami” or “we” or “us”) respects your privacy and are committed to protecting it through our compliance with this privacy notice.

This Privacy Notice (our “Privacy Notice”) describes the types of information we may collect, use, maintain, protect, disclose, or otherwise process about you when you visit the website Yami.com (the “Website”) or install and use our mobile applications that you download from an authorized distribution site, such as the Apple App Store® or the Google Play Store® (each, an “Application”), and our practices for collecting, using, maintaining, protecting, disclosing, or otherwise processing that information.

This policy applies to information we collect:

• on our Website;
• on or through our Applications;
• in email, text, and other electronic messages between you and Yami through any medium;
• when you subscribe to our YouTube channel and/or other social media accounts on Facebook, Instagram, X (formerly Twitter), Reddit, or elsewhere;
• when you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy.

It does not apply to information collected by:

• us through any other means, including on any other website operated by Yami, Transocean Resources Management, or any third-party (including our affiliates and subsidiaries);
• us or any of our affiliates or subsidiaries related to your or any other individual’s employment or potential employment with us;
• us or any of our affiliates or subsidiaries related to your or any other individual’s role as a supplier to Yami;
• any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or on the Website.

Please read this Privacy Notice carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website and Applications. By accessing or using our Website or Applications, you agree to this Privacy Notice. This Privacy Notice may change from time to time (see Changes to Our Privacy Notice). Your continued use of our Website and Applications after we make changes is deemed to be acceptance of those changes, so please check this Privacy Notice periodically for updates.

Children Under the Age of 13.

• Our Website and Applications are not intended for children under 13 years of age. No one under age 13 may provide any information to or on the Website or Applications. We do not knowingly collect Personal Data from children under 13. If you are under 13, do not use or provide any information on our Website or Applications or on or through any of their respective features, make any purchases through the Website or Applications, use any of the interactive or public comment features of our Website or Applications, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Data from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information directly from a child under 13, please contact us at privacy@yami.com.

Information We Collect About You and How We Collect It.

• Throughout this Privacy Notice, the term “Personal Data” means any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual. However, Personal Data does not include any deidentified or aggregated information.

Generally

We collect Personal Data from various sources, including:

• directly from you when you provide it to us;
• automatically as you navigate through or otherwise use the Website and Applications;
• information that we create about you as you use our Website and Applications; and
• From third parties, for example, our business partners.

Information You Provide to Us

We collect the following types of Personal Data directly from you when you access or use our Website or Applications: real name, alias, home/work postal address, home/work email address, home/work telephone number, credit or debit card number (tokenized), financial (bank) information, and any other identifier by which you may be contacted online or offline. In addition, we also collect other types of information that you may provide when you fill out a form or through your correspondence with us.

The Personal Data we collect on or through our Website and Applications through:

• information that you provide by filling in forms on our Website or Applications. This includes information provided at the time of registering to use our Website and Applications, registering for our rewards program, making a purchase, using our AI-driven photo search tool, posting material, or requesting further services. We may also ask you for information when you enter a contest or promotion sponsored by us, and when you report a problem with our Website or Applications;
• if you contact us, records and copies of your correspondence (including email addresses);
• your responses to surveys that we might ask you to complete for research purposes;
• details of transactions you carry out through our Website and Applications and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Website and Applications;
• when you join or use our rewards program; and
• your search queries on the Website and Applications.

You also may provide information to be published or displayed (hereinafter, “posted”) on public areas of the Website and Applications or transmitted to other users of the Website or Applications or third parties (collectively, “User Contributions”). Your User Contributions are posted on and transmitted to others at your own risk. Although we limit access to certain pages, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Website with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website or Applications, we may use automatic data collection technologies to collect certain Personal Data about your interaction with our Website or Applications, including information about your equipment, browsing actions, and patterns. This includes:

• details of your visits to, and use of, our Website and Applications. This includes: browsing history, search history, traffic data, location data, logs, referring/exit pages, date and time of your visit to our Website, error information, clickstream data, and other communication data and the resources that you access, use, or otherwise interact with on or through the Website or Applications;
• your physical location and movements (when you allow us to when this option is made available to you);
• Information about your computing device and internet connection, i.e., your IP address, operating system, device make and model, and browser type.

The information we collect automatically may include Personal Data, or we may maintain it or associate it with Personal Data we collect in other ways or receive from third parties. It helps us to improve our Website and Applications and to deliver a better and more personalized service by enabling us to:

• estimate our audience size and usage patterns;
• store information about your preferences;
• provide you with targeted advertising, which is based on your activities on the Website and other online activities;
• record your activities on our Websites and Applications for analytics and debugging purposes;
• customize our Website and Applications according to your individual interests;
• speed up your searches; and
• recognize you when you return to our Website and Applications.

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. Unless you have adjusted your browser setting so that it will refuse cookies, or our cookie consent manager so we will send you certain types of cookies, our system will issue cookies when you direct your browser to our Website or otherwise use our Applications. Our Website and Applications may use both session cookies and persistent cookies:
  • Session Cookies. Each time you access the Website or the Applications, a session cookie containing an encrypted, unique identifier is placed on your device. These session cookies allow us to uniquely identify you when you use the Website and Applications and allow us to maintain your login session and allow us to maintain your shopping cart and process your transactions. Session cookies are required to use the Website and Applications and are removed when you logout or close your browser window to the Website.
  • Persistent Cookies. Persistent cookies that may contain a unique identifier are placed on your device when you access the Website and Applications. These cookies are used to track aggregate and statistical information about user activity, maintain your preferences, and provide you with targeted or behavioral advertising based on your activities on the Website and Applications. The amount of time these cookies remain on your device may vary, depending on the cookie.

You can set your browser or mobile device to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you do not consent to our use of cookies or select this setting you may be unable to access certain parts of our Website or Applications. You can find more information about cookies at http://www.allaboutcookies.org and http://youronlinechoices.eu. More information about our use of specific cookies and how long they remain on your device can be found by clicking the “Cookies” link on our Website and reviewing the specific cookies listed under each category of cookies.

• Web Beacons. Pages of our Website, screens of our Applications, and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit Yami, for example, to count users who have visited those pages or screens or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
• Website Interaction and Performance Monitoring Tools. Our Website may also use interaction and/or performance monitoring tools (sometimes call tracking scripts, analytics tools, session replay tools, or heatmap tools). These tools execute code in your web browser to help us collect data about your use of and interactions with the pages and content on our Website. This may include recording your mouse movements, keystrokes, navigation pathways, other actions that you take our Website, and information automatically transmitted from your web browser to our Website such as information about your operating system, computer hardware, and browser preferences.

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including products and advertisements, on the Website or Applications are served by third-parties, including advertisers, ad networks and servers, content providers, analytics providers, social media companies, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Website or Applications. The information they collect may be associated with your Personal Data or they may collect information, including Personal Data, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see Choices About How We Use and Disclose Your Information.

By continuing to allow us to use any of the above described technologies, you hereby consent to our recording your mouse movements, keystrokes, navigation pathways, use and communications you may have with our Website (including information related to your access to any audio-visual materials available on or through the website or the applications), and other actions that you take on or through the website and our disclosure of such recorded information to third-party providers of such tools.

Information We Create About You

We may also create certain information about you. When we associate this information with other Personal Data about you, we consider this information to be Personal Data. This information includes: records of personal property, products, or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies and profile reflecting your preferences.

How We Use Your Information.

• We use information that we collect about you or that you provide to us, including any Personal Data:
• to provide and personalize our Website and Applications and their content to you;
• to provide you with information or services that you request from us;
• to support, develop, troubleshoot, and debug our Website, products, and services;
• to create, maintain, customize, and secure your account with us;
• to process your requests, purchases, transactions, and payments and prevent transactional fraud;
• to provide you with notices about your account, including expiration and renewal notices;
• to provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses;
• to personalize your Website and Applications experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and advertisements through our Website, third-party sites, and via email or text message (with your consent, where required by law);
• to help maintain the safety, security, and integrity of our Website, Applications, products and services, databases and other technology assets, and business;
• for internal testing, research, analysis, and product development, including to develop and improve our Website and Applications, and to develop, improve, or demonstrate our products and services;
• auditing relating to a current interaction with you and concurrent transactions, including, but not limited to, counting advertising impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with any applicable specification and other standards;
• detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
• debugging to identify and repair errors that impair existing intended functionality;
• to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
• to notify you about changes to our Website, Applications, or any products or services we offer or provide though them;
• to allow you to participate in interactive features on our Website or Applications;
• to train and/or re-train our artificial intelligence and/or machine learning models used on our Website and the products and services we provide through them (currently specifically the photo search application)
• in any other way we may describe when you provide the information;
• to fulfill any other purpose for which we have collected it; and
• for any other purpose with your consent.

We may further anonymize or aggregate your Personal Data in accordance with applicable law such that it can no longer reasonably be used to identify you and use it without restriction.

We may also use your Personal Data to contact you about our own and third-parties’ goods and services that may be of interest to you. If you do not want us to use your Personal Data in this way, please check the relevant box located on the form on which we collect your Personal Data. If you wish to change your choice, you may do so at any time by logging into the Website or Applications and adjusting our user preferences in your account profile by checking or unchecking the relevant boxes or by sending us an email stating your request at privacy@yami.com. For more information, see Choices About How We Use and Disclose Your Information.

We may use the information we have collected from you to enable us to display advertisements to our advertisers’ target audiences. Even though we do not disclose your Personal Data for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.

Disclosure of Your Personal Data.

• We do not share, sell, or otherwise disclose your Personal Data for purposes other than those outlined in this Privacy Notice. However, we may disclose anonymized or aggregated information about our users, and information that does not reasonably identify any individual, without restriction.

We may disclose Personal Data that we collect or you provide as described in this Privacy Notice:

• to our subsidiaries and affiliates;
• to contractors, service providers, and other third parties we use to support our business. These entities provide IT and infrastructure support services, payment processing services, shipping and receiving services, and other similar services. Our payment processors’ privacy policies may be found at http://stripe.com/us/privacy (for Stripe), https://www.paypal.com/us/webapps/mpp/ua/privacy-full (for PayPal), and https://www.citcon.com/privacy-policy (for Citcon). Please review what payment processor is being used for your transaction if you would like more information about their privacy practices;
• to a potential or actual buyer or other successor in the event of a planned or actual merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Yami’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Yami about our Website’s and Applications’ users is among the assets transferred;
• to third parties to market their products or services to you if you have not opted out of these disclosures. For more information, see Choices About How We Use and Disclose Your Information;
• to third-party cookie and other tracking technology providers for the purpose of providing analytics and cross-context behavioral advertising services to us;
• to fulfill the purpose for which you provide it;
• for any other purpose disclosed by us when you provide the information; and
• with your consent.

We may also disclose your Personal Data:

• to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
• to enforce or apply our Terms of Use, return policy, and other agreements, including for billing and collection purposes; and
• if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Yami, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Choices About How We Use and Disclose Your Information.

• We do not control the collection and use of your information collected by third parties described above in Disclosure of Your Information. When possible, these organizations are under contractual obligations to use this data only for providing the services to us and to maintain this information strictly confidential. These third parties may, however, aggregate the information they collect with information from their other customers for their own purposes.

In addition, we strive to provide you with choices regarding the Personal Data we have collected about you. We have created mechanisms to provide you with control over your Personal Data:

• Tracking Technologies. We may use certain tracking technologies that may record your activities on our Website and Applications and your other online activities, and such recordings may be disclosed and processed by third-parties who provide such technologies. This helps us understand our users and the use of our Website and Applications. You may disable these technologies through our cookie consent manager, which you may access by clicking the “Cookies” link on the bottom of any page of our Website. You may also set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent, and/or by changing the settings on your mobile device to disable our use of analytics cookies and similar technologies. However, if you disable or refuse cookies in this manner, please note that some parts of our Website and Applications may then be inaccessible or not function properly. If you do not disable these technologies, you hereby consent to our use of your Personal Data and our recording and disclosure to third-party cookie providers of your activities on our Website and Applications in this way.
• Targeted and Behavioral Advertising. Our Website and Applications may use certain technologies, including cookies, to display advertising to you based on your activities of our Website and other online activities. You may disable these technologies through our cookie consent manager, which you may access by clicking the “Cookies” link on the bottom of any page of our Website and disabling our use of advertising cookies and similar technologies. You may also set your browser or mobile device to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies in this manner, please note that some parts of our Website and Applications may then be inaccessible or not function properly.
• Disclosure of Your Information for Third-Party Advertising. We will only share your Personal Data with unaffiliated or non-agent third parties for promotional purposes with your express consent. If you wish to consent to such use, you can check the relevant box located on the form on which we collect your Personal Data or otherwise seek such consent. If you wish to change your choice, you may do so at any time by logging into the Website and adjusting your user preferences in your account profile by checking or unchecking the relevant boxes or by sending us an email stating your request to privacy@yami.com.
• Promotional Offers from Yami. If you do not want us to use your contact information to promote our own or third parties’ products and services, you can opt-out by checking the relevant box located on the form on which we collect your Personal Data. If you wish to change your choice, you may do so at any time by logging into the Website and Applications and adjusting your user preferences in your account profile by checking or unchecking the relevant boxes or by sending us an email stating your request to privacy@yami.com. If we have sent you a promotional email, you may click the unsubscribe link in the body of that email to be omitted from future email distributions. This opt out does not apply to information provided to Yami as a result of a product purchase, warranty registration, product service experience or other transactions.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can learn more about interest-based advertisements and your opt-out rights and options from members of the Network Advertising Initiative (“NAI”) on its website (www.networkadvertising.org) and from members of the Digital Advertising Alliance on its website (www.aboutads.info).

Accessing, Correcting, and Deleting Your Personal Data.

• You can review and change your Personal Data by logging into the Website or Applications and visiting your account profile page.

You may also send us an email at privacy@yami.com to request access to, correct or delete any Personal Data that we have collected about you. We cannot delete your Personal Data except by also deleting your user account. We may not accommodate a request to change or delete your Personal Data if we believe the change or deletion would violate any law or legal requirement or cause the information to be incorrect.

If you delete your User Contributions from the Website, copies of your User Contributions may remain viewable in cached and archived pages, or might have been copied or stored by other Website users. Proper access and use of information provided on the Website, including User Contributions, is governed by our Terms of Use.

The jurisdiction in which you are a resident or are located may provide you with additional rights and choices regarding your Personal Data. Please see Jurisdiction-Specific Privacy Rights for more Information.

Jurisdiction-Specific Privacy Rights.

• The law in some jurisdictions may provide you with additional rights regarding our use of Personal Data. To learn more about any additional rights that may be applicable to you as a resident of one of these jurisdictions or if you are located in one of these jurisdictions, please see the privacy addendum for your jurisdiction that is attached to this Privacy Notice.

Your Specific U.S. State Privacy Rights

If you are a resident of certain states in the United States, you have the additional rights described in the Multi-State Privacy Addendum.

Your Canada Privacy Rights

If you are a resident of Canada, you have the additional rights described in the Canada Privacy Addendum.

Your California Privacy Rights.

Shine the Light

• California Civil Code Section 1798.83 (California’s “Shine the Light” law) permits users of our Website that are California residents and who provide Personal Data in obtaining products and services for personal, family, or household use to request certain information regarding our disclosure of Personal Data to third parties for their own direct marketing purposes. If applicable, this information would include the categories of Personal Data and the names and addresses of those businesses with which we shared your Personal Data with for the immediately prior calendar year (e.g., requests made in 2025 will receive information regarding such activities in 2024). You may request this information once per calendar year. To make such a request, please send an email to privacy@yami.com or write us at the contact information listed below

California Eraser Law

California law permits minors under the age of 18 to request the removal of your User Contributions, subject to certain exceptions. If you are under the age of 18 in California, you may contact us using the Contact Information below (if you contact us via email, please use the subject “California Eraser Law Request”). We may not remove your User Contributions that we are required to retain under any federal or state law, or that have been provided to a third party. While we will do our best to remove a minor’s information upon a valid request, we cannot ensure the complete or comprehensive removal of your User Contributions from our Website or any information that has been republished, copied, downloaded, or reposted by any third party, and we cannot guarantee that any such information may not be accessible to users of the Internet in the future. We do not advertise or market any of the products or services identified in California Business and Professionals Code Section 22580(i) to users who we have actual knowledge are under 18 years of age.

Do Not Track Signals and Global Privacy Control Signals.

• We also may use automated data collection technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).

Some web browsers permit you to broadcast a signal to websites and online services indicating a preference that they “do not track” your online activities. At this time, we do not honor such signals and we do not modify what information we collect or how we use that information based upon whether such a signal is broadcast or received by us.

Some web browsers and browser extensions permit you to broadcast the Global Privacy Control signal (“GPC Signal”) as specified https://www.globalprivacycontrol.org. Our Website is designed to honor the GPC Signal and/or we may limit the Personal Data or other information we collect and how we use your Personal Data or other information based upon whether such a signal is transmitted by your browser or device and received by us.

Data Security.

• We have implemented measures designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website or Applications, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Website like message boards. The information you share in public areas may be viewed by any user of the Website.

Unfortunately, the transmission of information via the internet is not completely secure. Although we have implemented measures to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to our Website or through our Applications. Any transmission of Personal Data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures deployed on the Website or through our Applications.

Consent to Processing of Personal Data in the United States.

• In order to provide our Website and Applications to you, we may send and store your Personal Data outside of the country where you reside or are located, including to countries that may not or do not provide an equivalent level of protection for your Personal Data. Your Personal Data may be processed and stored in the United States and federal, state, and local governments, courts, or law enforcement or regulatory agencies in the United States may be able to obtain disclosure of your information through the laws of the United States. By using our Website or Applications, you represent that you have read and understood the above and hereby consent to the storage and processing of Personal Data outside the country where you reside or are located, including in the United States.

Your Personal Data is transferred by Yami to another country only if it is required or permitted under applicable data protection law and provided, however, that there are appropriate safeguards in place to protect your Personal Data. To ensure your Personal Data is treated in accordance with this Privacy Notice when we transfer it to a third party, Yami uses Data Protection Agreements between Yami and all other recipients of your Personal Data.

Changes to Our Privacy Notice.

• We may change this Privacy Notice at any time. It is our policy to post any changes we make to our Privacy Notice on this page with a notice that the Privacy Notice has been updated on the Website’ home page and the application’s home screen. If we make material changes to how we treat our users’ Personal Data, we will notify you by email to the primary email address specified in your account and/or through a notice on the Website’ home page or the Applications home screen. The date this Privacy Notice was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this Privacy Notice to check for any changes.

Your continued use of our Website or Applications following the posting of changes constitutes your acceptance to such changes.

Contact Information.

• If you have any questions, concerns, complaints, or suggestions regarding our Privacy Notice or the ways in which we collect and use your Personal Data described in this Privacy Notice, have any requests related to your Personal Data pursuant to applicable laws, or otherwise need to contact us, you may contact us at the contact information below or through the “Contact” page on our Website or in our Applications.

Transocean Resources Management D/B/A Yami.

14969 Summit Drive

Eastvale, CA 92880

(800) 407-9710

privacy@yami.com

Yami Multi-State Privacy Notice Addendum

Effective Date: June 15, 2026

Last Reviewed on: June 11, 2026

Introduction.

This Multi-State Privacy Notice Addendum (the “Multi-State Privacy Addendum”) supplements the information contained in Transocean Resources Management, Inc. d/b/a Yamin (“Yami”) Privacy Notice (the “Privacy Notice”) and describes our collection and use of Personal Data (as defined below). This Multi-State Privacy Addendum applies solely to all visitors, users, and others who reside in one of the following states: California, Colorado, Connecticut, Maryland, Nebraska, New Jersey, Texas, and Virginia (collectively, the “Applicable States”). If you are not a resident of an Applicable State, this Multi-State Privacy Addendum does not apply to you. We adopt this notice to comply with general privacy laws in the Applicable States (we refer to these privacy laws as “State Privacy Laws”).

Scope of this Multi-State Privacy Addendum.

This Multi-State Privacy Addendum applies to information that we collect on our Website and/or through our Applications that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“Personal Data”).

Publicly available information and aggregated and/or deidentified information (when aggregated and/or deidentified in accordance with applicable State Privacy Laws) may be excluded under one or more State Privacy Laws.

This Multi-State Privacy Addendum does not apply to employment-related Personal Data collected from our applicable employees, job applicants, contractors, or similar individuals (“Personnel”) or to Personal Data reflecting a written or verbal business-to-business communication (“B2B Personal Data”). When State Privacy Laws cover these types of information, we have developed specific separate addendums that describe our collection and use of such information. Please contact us for more information about the applicability of these State Privacy Laws and for information on any applicable addendums for this type of information.

Information We Collect About You and How We Collect It.

Yami collects the following categories of Personal Data about Consumers (in California, this also includes Personal Data collected in the preceding twelve (12) months):

Yami will not collect additional categories of Personal Data without providing you notice. As further described in To Whom Do We Sell Your Personal Data, we may “sell” (as defined by State Privacy Laws) any categories of Personal Data for monetary or other valuable consideration.

Consent Regarding our Processing of Your Sensitive Personal Data.

This section only applies to residents of Connecticut, Nebraska, New Jersey, and Texas

We will only process your Sensitive Personal Data for specific purposes with your explicit, affirmative consent. You may withdraw your consent by contacting us at the contact information below, however we may not be able to provide you with the products you order if you refuse to provide or otherwise withdraw your consent.

Sources of Personal Data.

We collect Personal Data about you from the sources described in our Privacy Notice.

Purposes for Our Collection of Your Personal Data.

We only use your Personal Data for the purposes described in our Privacy Notice.

We may also use your Personal Data to contact you about our own and third-parties’ goods and services that may be of interest to you. If you do not want us to use your Personal Data in this way, please check the relevant box located on the form on which we collect your Personal Data. If you wish to change your choice, you may do so at any time by logging into the Website or Applications and adjusting our user preferences in your account profile by checking or unchecking the relevant boxes or by sending us an email stating your request at privacy@yami.com. If we have sent you a promotional email, you may click the unsubscribe link in the body of that email to be omitted from future email distributions. This opt out does not apply to information provided to Yami as a result of a product purchase, warranty registration, product service experience or other transactions. For more information, see our Privacy Notice.

We may use the information we have collected from you to enable us to display advertisements to our advertisers’ target audiences. Even though we do not disclose your Personal Data for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.

Yami will not use the Personal Data we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Third Parties to Whom Do We Disclose Your Personal Data for Business Purposes.

Yami may disclose the following categories of Personal Data to the following categories of third parties:

To Whom Do We Sell Your Personal Data or Do We Disclose for the Purpose of Cross-Context Behavioral (Targeted) Advertising.

“Sale” of Your Personal Data for Monetary or Other Valuable Consideration

As noted in our Privacy Notice, we do not sell Personal Data as the term “sell” is commonly understood to require an exchange for money. However, the use of advertising and analytics cookies on our Website and Applications are considered a “sale” of Personal Data as the term “sale” is broadly defined in some State Privacy Laws to include both monetary and other valuable consideration. Using this broad definition, our “sale” is limited to our use of third-party advertising and analytics cookies and their use in providing behavioral advertising and their use in understanding how people use and interact with our Website and Applications. Our “sales” of your Personal Data in this manner is subject to your right to opt-out of those sales (see Your Choices Regarding our “Sale” of Personal Data for Monetary or Other Valuable Consideration and/or Processing for Cross-Context Behavioral Advertising of Your Personal Data).

Special Notices for Residents of Texas

NOTICE: We may sell your sensitive Personal Data. See below for more information about our sale of your sensitive personal data.

Processing of Your Personal Data for Cross-Context Behavioral (targeted) Advertising

Yami may process your Personal Data for the purpose of cross-context behavioral (targeted) advertising, subject to your right to opt-out of that sale (see Your Choices Regarding our “Sale” of Personal Data for Monetary or Other Valuable Consideration and/or Processing for Cross-Context Behavioral Advertising of Your Personal Data). Our processing for the purpose of cross-context behavioral (targeted) advertising is limited to our use of third-party advertising cookies and their use in providing you cross-context behavioral (targeted) advertising (i.e., advertising on or other mediums based on your browsing history and other patterns). When the recipients of your Personal Data who receive it for the purpose of cross-context behavioral advertising are also permitted to use your Personal Data to provide advertising to others, we also consider this disclosure as a “sale” for monetary or other valuable consideration under some State Privacy Laws.

In the preceding twelve (12) months, Yami has “sold” for monetary or other valuable consideration, or disclosed for the purpose of cross-context behavioral (targeted) advertising, the following categories of Personal Data to the following categories of third parties:

[

Special Notice for Residents of California and Maryland

Reselling Personal Data

The State Privacy Law in California and Maryland prohibits a third party from reselling or resharing for cross-context behavioral advertising your Personal Data unless you have received explicit notice and an opportunity to opt-out of further sales and disclosures. We “sell” your Personal Data for monetary or other valuable consideration or “share” your Personal Data for cross-context behavioral advertising to the following third parties who may resell or reshare that information. To opt-out of these sales or disclosures, please contact the applicable third-party cookie provider or see our privacy notice for your options to refuse cookies or opt-out of the use of your Personal Data through advertising networks.

Sales and Disclosures for the Purpose of Cross-Context Behavioral (Targeted) Advertising to Minors)

We do not have any actual knowledge that we offer any online service, product, or feature to consumers under the age of 18.

Please see Your Choices Regarding our “Sale” of Personal Data for Monetary or Other Valuable Consideration and/or Processing for Cross-Context Behavioral Advertising of Your Personal Data for more information on how children (or their parents or guardians, as applicable) may change their choice regarding the sale of their Personal Data or disclosure or use for cross-context behavioral advertising.

Consumer Data Requests and Rights.

The State Privacy Laws provide residents of the Applicable States with specific rights regarding their Personal Data. This section describes your rights under applicable law and explains how to exercise those rights. In some Applicable States, you may exercise one or more of these rights yourself or through your Authorized Agent. For more information on how you or your Authorized Agent can exercise these rights, please see Exercising your State Privacy Law Rights.

• Right to Know. You have the right to request that Yami confirm that it is processing Personal Data about you and disclose certain information to you about our collection, use, processing, and disclosure of your Personal Data (a “Right to Know” Consumer Request).
  • In California: this also includes: (a) the categories of Personal Data we have collected about you; (b) the categories of sources from which that Personal Data came from; (c) our purposes for collecting this Personal Data; (d) the categories of third parties with whom we have shared your Personal Data; and (e) if we have “sold” or “shared” or disclosed your Personal Data, a list of categories of third parties to whom we “sold” or “shared” your Personal Data, and a separate list of the categories of third parties to whom we disclosed your Personal Data.
  • In Connecticut: this includes: any inferences about you derived from your Personal Data and whether we or our service providers process your Personal Data for the purposes of profiling to make a decision that produces any legal or similarly significant effect concerning you.
  • In Maryland: this includes: a list of the categories of third parties to which we have disclosed your Personal Data or a list of the categories of third parties to which we have disclosed any consumer’s Personal Data if we do not maintain this information in a format specific to you.

In California, Connecticut, New Jersey, and Virginia, you must specifically describe if you are making a Right to Know request or a Data Portability request and, if you would like to make both a Right to Know request and a Data Portability request you must make both requests clear in your request. If it is not reasonably clear from your request, we will only process your request as a Right to Know request. In all other Applicable States, we will automatically include a Data Portability request with a Right to Know Request.

You may make a Right to Know or a Data Portability Consumer Request a total of two (2) times within a 12-month period at no charge.

• Access to Specific Pieces of Information (Data Portability). You also have the right to request that Yami provide you with a copy of the specific pieces of Personal Data that we have collected about you, including any Personal Data that we have created or otherwise received from a third-party about you (a “Data Portability” Consumer Request).

If you make a Data Portability Consumer Request electronically, we will provide you with a copy of your Personal Data in a portable and, to the extent technically feasible, readily reusable format that allows you to transmit the Personal Data to another third party.

In California, Connecticut, New Jersey, and Virginia you must specifically describe if you are making a Right to Know request or a Data Portability request and, if you would like to make both a Right to Know request and a Data Portability request you must make both requests clear in your request. If it is not reasonably clear from your request, we will only process your request as a Right to Know request. In all other Applicable States, we will automatically include a Right to Know Request with a Data Portability request.

In response to a Data Portability Consumer Request, we will not disclose your financial account number or your account password or security question or answers. We will also not provide this information if the disclosure would create a substantial, articulable, and unreasonable risk to your Personal Data, your account with Yami, or the security of our systems or networks. We will also not disclose any Personal Data that may be subject to another exception under the applicable State Privacy Laws. If we are unable to disclose certain pieces of your Personal Data, we will describe generally the types of personal Data that we were unable to disclose and provide you a description of the reason we are unable to disclose it as required by applicable State Privacy Laws.

You may make a Right to Know or a Data Portability Consumer Request (or a combined request) a total of two (2) times within a 12-month period at no charge.

• Right to Correction. You have the right to request that we correct any incorrect Personal Data about you to ensure that it is complete, accurate, and as current as possible. You may review and correct some Personal Data about yourself by logging into the Website or Applications and visiting your “Account” page. You may also request that we correct the Personal Data we have about you by contacting us as described below. In some cases, we may require you to provide reasonable documentation to show that the Personal Data we have about you is incorrect and what the correct Personal Data may be. We may also not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect or if the Personal Data is subject to another exception under the applicable State Privacy Laws.
• Right to Deletion. You have the right to request that Yami delete any of your Personal Data that we collected from or about you and retained, subject to certain exceptions (Note: In California, this is limited to information that we have collected directly from you). Once we receive and confirm your Consumer Request (see Exercising Your State Privacy Law Rights), we will delete (and direct our service providers to delete) your Personal Data from our records, unless an exception applies pursuant to the applicable State Privacy Laws. Some exceptions to your right to delete may include, but are not limited to, if we are required to retain your Personal Data to complete the transaction or provide you the goods and services for which we collected the Personal Data or otherwise perform under our contract with you, to detect security incidents or protect against other malicious activities, and to comply with legal obligations. We may also retain your Personal Data for other internal and lawful uses that are compatible with the context in which we collected it.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your state privacy rights. Unless permitted by the applicable state privacy law, we will not do any of the following as a result of you exercising your state privacy rights: (a) deny you goods or services; (b) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (c) provide you a different level or quality of goods or services. However, we may offer you certain financial incentives permitted by the applicable state privacy law that can result in different prices, rates, quality levels, or selection of goods and services (including the possibility of offering our Services for no fee), if you have exercised your rights to opt-out of certain processes as described above or if the offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.

Exercising Your State Privacy Law Rights

To exercise the rights described above, please submit a request (a “Consumer Request”) to us by either:

• Calling us at (800) 407-9710.
• Emailing us at privacy@yami.com.

If you fail to make your Consumer Request in accordance with the ways described above, we may either treat your request as if it had been submitted with our methods described above or provide you with information on how to submit the request or remedy any deficiencies with your request.

Only you, or your Authorized Agent that you authorize to act on your behalf (when permitted by State Privacy Laws), may make a Consumer Request related to your Personal Data. To designate an Authorized Agent when permitted by State Privacy Laws, see Authorized Agents below.

All Consumer Requests must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Data or an Authorized Agent of such a person. This may include:
  • Comparing information you provide to information (or a portion of information) we may have on file about you, either from your account (including rewards program) or an order.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm which Personal Data relates to you or the individual for whom you are making the request as their Authorized Agent.

Making a Consumer Request does not require you to create an account with us. However, we may require you to use an existing account (if applicable) and we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Data associated with that specific account.

We will only use Personal Data provided in a Consumer Request to verify the requestor’s identity or authority to make the request.

For instructions on exercising sale opt-out rights, see Your Choices Regarding our “Sale” of Personal Data for Monetary or Other Valuable Consideration and/or Processing for Cross-Context Behavioral Advertising of Your Personal Data.

Authorized Agents

When permitted by State Privacy Laws, you may authorize your agent to exercise some or all of your rights under the applicable State Privacy Laws on your behalf by providing them with written authorization or with power of attorney to exercise your rights in accordance with applicable laws, or through other technology that we may provide for this purpose (an “Authorized Agent”). We may request that your Authorized Agent submit proof of identity and that they have been authorized exercise your rights on your behalf. We may deny a request from your Authorized Agent to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights.

Response Timing and Format

We will generally process these requests within forty-five (45) calendar days of its receipt. If we require more time (up to an additional 45 calendar days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

In response to a Right to Know or Access, or Data Portability Consumer Request, we will provide you with all relevant information we have collected or maintained about you, unless an exception applies. The response we provide will also explain the reasons we cannot comply with a Consumer Request, if applicable. For Data Portability Consumer Request, we will select a format to provide your Personal Data that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your Consumer Request unless it is excessive, repetitive, or manifestly unfounded (and under some State Privacy Laws, abusive or fraudulent). Under some State Privacy Laws, we reserve the right to consider more than two (2) total Right to Know or Data Portability Consumer Requests (or combination of the two) in a twelve (12) month period to be repetitive and/or excessive and require a fee. If we determine that your Consumer Request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Right to Appeal

If we decline to take action on your Consumer Request, we will inform you of our reasons for doing so and provide instructions for how to appeal the decision. In Connecticut, Maryland, Nebraska, New Jersey, Texas, and Virginia, you have the right to appeal our decision to decline your Consumer Request. To appeal, you may submit your appeal by emailing us at privacy@yami.com or contact us using the contact information below within a reasonable period after receiving our decision. We will respond to your appeal within forty-five (45) days of receipt. In your appeal, please include the reason you disagree with our decision and any supporting information. If your appeal is denied, we will provide you with information on how to contact the applicable state attorney general to submit a complaint.

Your Choices Regarding our “Sale” of Personal Data for Monetary or Other Valuable Consideration and/or Processing for Cross-Context Behavioral Advertising of Your Personal Data.

“Sale” of Your Personal Data

If you are not considered a child under the applicable State Privacy Law (under 13 in Connecticut, Nebraska, Texas, and Virginia) (under 16 in California) (under 17 in New Jersey) (under 18 in Maryland), you have the right to direct us to not sell your Personal Data for monetary or other valuable consideration at any time (the “right to opt-out”).

In California, we do not sell the Personal Data of Consumers we actually know are less than 16 years of age, unless we receive affirmative authorization (the “right to opt-in”) from the Consumer who is between 13 and 16 years of age. For children under the age of 13, this authorization must be provided by the Consumer’s parent or guardian.

In all other jurisdictions, we do not sell the Personal Data of Consumers we actually know are children unless we receive affirmative authorization from the parent or guardian of such Consumer. Consumers who opt-in to Personal Data sales (or fail to opt-out) may opt-out of future “selling” of their Personal Data at any time.

Processing of Your Personal Data for Cross-Context Behavioral (Targeted) Advertising

If you are not considered a child under the applicable State Privacy Law (under 13 in Connecticut, Nebraska, Texas, and Virginia) (under 16 in California) (under 17 in New Jersey) (under 18 in Maryland), you have the right to direct us to not disclose your Personal Data for the purposes of cross-context behavioral (targeted) advertising (called “sharing” in California), which is showing advertising based on your Personal Data obtained from your activities over time and across non-affiliated websites or online applications (the “right to opt-out”).

In California, we do not “share” the Personal Data of Consumers we actually know are less than 16 years of age, unless we receive affirmative authorization (the “right to opt-in”) from the Consumer who is between 13 and 16 years of age. For children under the age of 13, this authorization must be provided by the Consumer’s parent or guardian.

In all other jurisdictions, we do not disclose the Personal Data of Consumers we actually know are children for the purposes of cross-context behavioral (targeted) advertising unless we receive affirmative authorization from the parent or guardian of such Consumer.

Consumers who opt-in to the disclosure of Personal Data for the purposes of cross-context behavioral (targeted) advertising (or fail to opt-out) may opt-out of future disclosures of their Personal Data for the purposes of cross-context behavioral (targeted) advertising at any time by following the instructions below.

How You May Opt-Out of Our Sale of Your Personal Data

To exercise the right to opt-out of the “sale” of your Personal Data for monetary or other valuable consideration and of processing your Personal Data for the purposes of cross-context behavioral advertising, you (or your Authorized Agent) may by visiting the Internet Web page link on our home page entitled “Do Not Sell or Share My Personal Information,” by configuring your browser to send us a privacy signal as described in more detail below, or by setting your browser or device to refuse all or some cookies as described in our Privacy Notice, or to alert you when cookies are being sent. However, if you do not consent to our use of cookies or select this setting you may be unable to access certain parts of our Websites, Applications, or other websites. You can find more information about cookies at http://www.allaboutcookies.org and http://youronlinechoices.eu.

You may change your mind and opt back into the “sale” and disclosures of Personal Data for the purposes of cross-context behavioral (targeted) advertising at any time by cookie preferences or by setting your browser to permit all or some browser cookies as described in our Privacy Notice.

You do not need to create an account with us to exercise your opt-out rights. You may be required to provide us with additional contact information so that we may verify your request to opt-in to the sale of your Personal Data. We will only use Personal Data provided in an opt-out request to review and comply with the request.

Special Notices for Residents of California

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize our “sale” and “sharing” of your Personal Data.

If you (or your Authorized Agent) submit a request to opt-in to our “sale” or “sharing” of your Personal Data, we will use a two-step process in order to confirm that you want to opt-in for such “sale” or “sharing” of your Personal Data. This process may include verifying your request through your email address on record sending you a text message and requesting that you text us a confirmation (which may be through the use of an automated dialer). By making a Consumer Request, you consent to us contacting you in one or more of these ways.

Browser Privacy Control Signals

You may also exercise your right to opt-out of the “sale” of your Personal Data for monetary or other valuable consideration and the processing of your Personal Data for the purposes of cross-context behavioral advertising or targeted advertising by setting the privacy control signal on your browser, if your browser supports it. We currently recognize and support the following privacy signals sent by browsers:

• Global privacy control (for more information on how to configure your browser to send this signal, please see https://globalprivacycontrol.org/).

When we receive one of these privacy control signals, we will opt you out of any further “sale” of your Personal Data, use of your Personal Data for cross-context behavioral advertising, and processing of your Personal Data for targeted advertising when you interact with our Website or Applications through that browser and on that device. We will only be able to propagate your choice to opt-out to your account if you are currently logged in when we receive the privacy control signal from your browser. When we are able to propagate your choice to your account, you will be opted out of “sale” for monetary or other valuable consideration, processing of your Personal Data for the purpose of cross-context behavioral advertising, and processing for the purpose of targeted advertising on all browsers and devices on which you are logged in, and for both online and offline “sales” of any kind. In the event you have affirmatively opted-in to our “sale” of your Personal Data and/or processing of your Personal Data for the purpose of cross-context behavioral advertising or targeted advertising as described above and we receive a privacy control signal from your browser, we will request further instructions from you before you are opted out of any further such “sales” or processing.

Your Right to Limit the Use and Disclosure of Your Sensitive Personal Data (for residents of California Only).

You have the right to direct us to limit our use and disclosure of your Sensitive Personal Data to only that use which is necessary to perform the services or provide the goods you reasonably expect when you request those goods or services, and to certain other limited purposes permitted by law. Our purposes for collecting Sensitive Personal Data are:

• Financial Account Information: We collect this information to allow you to pay for and us to provide the goods you request and for our payment processor to process payments for your purchases on behalf of Yami. We may also use this information to resist malicious, deceptive, fraudulent, or illegal actions directed at Yami or our other customers, and to prosecute those responsible for those actions.
• Precise Geolocation Information: We only collect this information to determine the appropriate service region for you (including what warehouse may service your region), inventory availability, shipping feasibility, and to determine if same-day delivery is feasible. This information may be incorrect if you request shipping to another location. We do not use this information to build a profile about you or to alter your experience outside of your then-current interaction with Yami. This is permitted under applicable State Privacy Laws as short-term, transient use. We may also use your precise geolocation information for us to maintain or service your account, provide customer service, process or fulfill orders and transactions, verify customer information, and similar services.

Because we only use your Sensitive Personal Data for the limited purposes permitted by law, we do not, and are not required to, provide you with the ability to limit the use of your Sensitive Personal Data for these purposes.

Financial Incentives (for residents of California only).

We may offer you certain financial incentives permitted by the California State Privacy Laws that can result in different prices, rates, or quality levels. Any permitted financial incentive we offer will reasonably relate to your Personal Data’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time. We currently provide the following financial incentives:

• Yami Rewards (see https://www.yami.com/en/article/474098 and https://www.yami.com/en/article/1065505 for more details).

In determining the value of your Personal Data we collect as part of your participation in our financial incentives, we consider:

• The difference in gross margin to Yami of the sale, collection, or deletion of our customers’ Personal Data, which we have calculated to be $25.00 on average across all Yami Rewards tiers.

Personal Data Retention Periods.

Yami will retain your Personal Data for the entire time that you keep your account open. After this period, we generally may retain your Personal Data for three (3) years. However, we may retain any or all categories of Personal Data for a longer period when your information is subject to one of the following exceptions:

• when stored in our backup and disaster recovery systems. Your Personal Data will be deleted when the backup media your Personal Data is stored on expires or when our disaster recovery systems are updated;
• when necessary for us to exercise or defend legal claims;
• when necessary to comply with a legal obligation;
• when stored in the same document or record with other Personal Data that needs to be kept longer. Your Personal Data will be deleted upon the expiration of the last exception that applies to such document or record; or
• when necessary to help ensure the security and integrity of our Website, Applications, and IT systems.

Your Personal Data will be deleted when we no longer require your Personal Data for any of the above purposes.

Changes to This Multi-State Privacy Addendum.

Yami reserves the right to amend this Multi-State Privacy Addendum at our discretion and at any time. When we make material changes to this Multi-State Privacy Addendum, we will post the updated addendum on the Website, update the addendum’s effective date, and notify affected consumers of the material change. Your continued use of our Website or Applications following the posting of changes constitutes your acceptance of such changes.

Contact Information.

If you have any questions or comments about this Multi-State Privacy Addendum, the ways in which Yami collects and uses your information described above and in the Privacy Notice, your choices and rights regarding such use, or wish to exercise your rights under applicable State Privacy Law, please do not hesitate to contact us at:

Postal Address: Transocean Resources Management D/B/A Yami

14969 Summit Drive

Eastvale, CA 92880

Attn: Legal / Privacy

Phone: (800) 407-9710

Email: privacy@yami.com

Yami Privacy Notice Addendum for Canada Residents

Effective Date: June 15, 2026

Last Reviewed on: June 11, 2026

Introduction

This Privacy Notice Addendum for Canada Residents (the “Canada Privacy Addendum”) supplements the information contained in Transocean Resources Management’s (d/b/a Yami, “Yami” or “we” or “us”) Privacy Notice and describes our collection and use of Personal Information (as defined below). This Canada Privacy Addendum applies solely to all visitors, users, and others who reside in Canada or any of its provinces (“you”) who access and use our Website our Applications. We adopt this notice to comply with the Canadian Personal Information Protection and Electronic Documents Act (“PIPEDA”) and substantially similar provincial privacy legislation in Alberta, British Columbia, and Quebec (each, a “PIPA”, and collectively with PIPEDA, the “Canadian Privacy Laws”) and any terms defined in the Canadian Privacy Laws have the same meaning when used in this notice.

Scope of this Canada Privacy Addendum

This Canada Privacy Addendum applies to information that we collect on or through our Website or Applications that relates to you and allows you to be identified, directly or indirectly (“Personal Information”). It also includes certain Personal Information which generally has a high level of reasonable expectation of privacy either due to: (a) its nature, including information that is medical, biometric, or otherwise intimate; or (b) the context of its use or communication.

However, this Canada Privacy Addendum does not apply to employment-related Personal Information collected from our Canada-based employees, job applicants, contractors, or similar individuals (“Personnel”). Please contact your local human resources department if you are part of our Canada Personnel and would like additional information about how we process your Personal Information.

This Canada Privacy Addendum also does not apply to certain Personal Information that is excluded from the scope of the Canadian Privacy Laws, like: (a) journalistic, historical, or genealogical material that is collected, held, used, or communicated for the legitimate information of the public, or (b) certain Personal Information related to your business duties, including certain business contact information.

Person Responsible for Protecting Personal Information

Yami has appointed its Chief Technology Officer to be responsible for protecting Personal Information in Yami’s possession in compliance with the Canada Privacy Laws in some provinces. Yami and/or this responsible person may be contacted in any manner set forth below in the “Contact Information” Section of this Canada Privacy Addendum.

Information We Collect About You and How We Collect It

We collect the Personal Information about you and from the sources described in our Privacy Notice.

Yami will not collect additional categories of Personal Information without providing you notice. To the extent we collect Personal Information about you from the categories of third-parties described in our Privacy Notice, by using our Website or Applications, you hereby consent to such collection.

Purposes for Our Collection of Your Personal Information

We only use your Personal Information for the purposes described in our Privacy Notice.

We may also use your Personal Information to contact you about our own and third-parties’ goods and services that may be of interest to you. If you do not want us to use your Personal Information in this way, please check the relevant box located on the form on which we collect your Personal Information. If you wish to change your choice, you may do so at any time by logging into the Website or Applications and adjusting our user preferences in your account profile by checking or unchecking the relevant boxes or by sending us an email stating your request at privacy@yami.com. If we have sent you a promotional email, you may click the unsubscribe link in the body of that email to be omitted from future email distributions. This opt out does not apply to information provided to Yami as a result of a product purchase, warranty registration, product service experience or other transactions. For more information, see our Privacy Notice.

We may use the information we have collected from you to enable us to display advertisements to our advertisers’ target audiences. Even though we do not disclose your Personal Information for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.

Yami will not use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Disclosure of Your Personal Information

We may disclose the Personal Information that we have collected about you to the categories of third-parties described in our Privacy Notice.

• We do not share, sell, or otherwise disclose your Personal Information for purposes other than those outlined in our Privacy Notice. However, we may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

Automated Decision Making

Yami may use automated decision making processes to show you items when you use our photo search functionality in our Applications. However, while our photo search functionality may collect Personal Information for recordkeeping and to provide you results of your search, this functionality does not use your Personal Information to make any decision about you. Yami does not use your Personal Information with any automated decision making process, including profiling.

Technology that Includes Functions Allowing You to Be Identified, Located, or Profiled

Yami may use technology that may be allow you to be located to determine the appropriate service region for you (including what warehouse may service your region), inventory availability, shipping feasibility, and to determine if same-day delivery is feasible. This technology is activated automatically when you use the Website, but only if you consent to your operating system and browser prompts to allow Yami to collect your location information.

Privacy Requests

The Canadian Privacy Laws provides Canada residents with specific rights regarding their Personal Information. This section describes your Canadian Privacy Laws rights and explains how to exercise those rights. You may exercise these rights yourself or through your Authorized Agent. For more information on how you or your Authorized Agent can exercise your rights, please see Exercising Your Canadian Privacy Laws Privacy Rights.

• Right to Know. You have the right to request that Yami disclose certain information to you about our collection and use of your Personal Information (a “Right to Know” Privacy Request). This includes details about: (a) the collected Personal Information; (b) the categories of people within the organization with access. The amount of time that we will retain your Personal Information and the contact information for the person within Yami who is responsible for protecting Personal Information are each described below.
• Access to Specific Pieces of Information. You have the right to request that Yami confirm that we have collected Personal Information concerning you and provide you with a copy of the specific pieces of such Personal Information that we have collected (a “Data Portability” Privacy Request). You may also request that we provide you a copy of this Personal Information in a structured, commonly used, and machine-readable format. We may not comply with a Data Portability Privacy Request when the disclosure would be likely to reveal personal information about a third person (unless the third person consents or in the case of emergency that threatens the life, health, or safety of the person concerned).
• Correction. You have the right to request that we correct any incorrect Personal Information about you to ensure that it is complete, accurate, and as current as possible. You may review and correct some Personal Information about yourself by logging into the Websites or Applications and visiting your “Account” page or screen. You may also request that we correct the Personal Information we have about you as described below under Exercising Your Canadian Privacy Laws Privacy Rights. In some cases, we may require you to provide reasonable documentation to show that the Personal Information we have about you is incorrect and what the correct Personal Information may be. We may also not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect or if the Personal Information is subject to another exception under the Canadian Privacy Laws.
• Deletion. You have the right to request that Yami delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. This includes the right to request that we stop disseminating your Personal Information or de-index any hyperlink attached to your name that gives access to your Personal Information if such dissemination causes you harm or contravenes the law or a court order. Once we receive and confirm your Privacy Request (see Exercising Your Canadian Privacy Laws Privacy Rights), we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies pursuant to the Canadian Privacy Laws. However, we cannot completely delete your Personal Information as some data may rest in previous backups. These will be retained for the periods set forth in our disaster recovery policies.
• Withdrawal of Consent. To the extent that our processing of your Personal Information is based on your consent, you may withdraw your consent at any time by closing your account. Withdrawing your consent will not, however, affect the lawfulness of the processing based on your consent before its withdrawal, and will not affect the lawfulness of our continued processing that is based on any other lawful basis for processing your Personal Information.

Exercising Your Canadian Privacy Laws Privacy Rights

To exercise the rights described above, please submit a request (a “Privacy Request”) to us by contacting us through any of the methods listed under Contact Information below. Only you, or your representative, heir or successor, liquidator of your estate, or a beneficiary of life insurance or death benefit (each, a “Representative”), may make a Privacy Request related to your Personal Information. If you contact us to exercise any of the foregoing rights, we may ask you for additional information to verify your or your Representative’s identity. We reserve the right to limit or deny your request if you have failed to provide sufficient information to verify your identity or to satisfy our legal and business requirements.

Response Timing and Format

We will generally process these requests within thirty (30) calendar days of its receipt.

We do not charge a fee to process or respond to your Privacy Request.

Storage of Your Personal Information; Consent to Processing of Personal Information in Other Countries Outside of Canada

We may store your Personal Information on servers and computing systems that are under our possession, custody, or control, or that we otherwise license (such as through Amazon AWS® or Microsoft Azure®).

In order to provide our Websites and Applications to you, we may send and store your Personal Information outside of Canada, including to the United States. Accordingly, your Personal Information may be transferred outside Canada and the province where you reside or are located, including to countries that may not or do not provide an equivalent level of protection for your Personal Information. Your information may be processed and stored in the United States and federal, state, and local governments, courts, or law enforcement or regulatory agencies in United States may be able to obtain disclosure of your information through the respective laws of that country. By using our Websites and Applications, you represent that you have read and understood the above and hereby consent to the storage and processing of Personal Information outside the country where you reside or are located, including in the United States.

Your Personal Information is transferred by Yami to another country only after we have completed a Privacy Impact Assessment (“PIA”), and only if such PIA shows that the Personal Information can be adequately protected in compliance with generally accepted data protection principles, our Privacy Notice, and this Canada Privacy Addendum. To ensure your Personal Information is treated in accordance with our Privacy Notice and this Canada Privacy Addendum when we transfer your Personal Information to a third-party, Yami uses written data protection agreements between Yami and all other recipients of your data in other countries to mitigate the risks identified in the PIA.

The purposes for which we have authorized the third-party service providers outside of Canada to collect, use, or disclose your Personal Information on our behalf are:

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
• Helping to ensure security and integrity of our services and IT infrastructure to the extent the use of the Personal Information is reasonably necessary and proportionate for these purposes.
• Debugging to identify and repair errors that impair existing intended functionality.
• Short–term, transient use, including, but not limited to, nonpersonalized advertising shown as part of your current interaction with us. Our agreements with third parties prohibit your Personal Information from disclosure to another third-party and from using your Personal Information to build a profile about the you or otherwise alter your experience outside your current interaction with us.
• Performing services on behalf of us, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of us.
• Providing advertising and marketing services, except for cross-context behavioral advertising, to individuals.
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us.

In addition to the above, we may disclose any or all categories of Personal Information to any third-party outside of Canada (including government entities and/or law enforcement entities) as necessary to:

• comply with federal, provincial, or local laws, or to comply with a court order or subpoena to provide information;
• comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, or local authorities;
• cooperate with law enforcement agencies concerning conduct or activities that we (or one of our service providers’) believe may violate federal, state, or local law;
• comply with certain government agency requests for emergency access to your Personal Information if you are at risk or danger of death or serious physical injury; or
• exercise or defend legal claims.

Personal Information Retention Periods

Yami will retain your Personal Information for the entire time that you keep your account. After this period, we may retain your Personal Information for at least three (3) years. However, we may retain any or all categories of Personal Information when your information is subject to one of the following exceptions:

• when stored in our backup and disaster recovery systems. Your Personal Information will be deleted when the backup media your Personal Information is stored on expires or when our disaster recovery systems are updated;
• when necessary for us to exercise or defend legal claims;
• when necessary to comply with a legal obligation;
• when stored in the same document or record with other Personal Information. Your Personal Information will be deleted upon the expiration of the last exception that applies to such document or record; or
• when necessary to help ensure the security and integrity of our Website and IT systems.

Your Personal Information will be deleted when we no longer require your Personal Information for any of the above purposes.

Changes to This Canada Privacy Addendum

Yami reserves the right to amend this Canada Privacy Addendum at our discretion and at any time. When we make changes to this Canada Privacy Addendum, we will post the updated addendum on the Website and update the addendum’s effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this Canada Privacy Addendum, the ways in which Yami collects and uses your information described above and in the Privacy Notice, your choices and rights regarding such use, or wish to exercise your rights under Canada law, please do not hesitate to contact us at the contact information below:

To Contact Yami

Transocean Resources Management D/B/A Yami

14969 Summit Drive

Eastvale, CA 92880

Attn: Legal / Privacy

(800) 407-9710

privacy@yami.com

Person Responsible for our Privacy Program

Chief Technology Officer

14969 Summit Drive

Eastvale, CA 92880

Attn: Legal / Privacy

(800) 407-9710

privacy@yami.com

Consents

Your consent is required to use our Website and Applications, and for Yami to provide you with our product and services. If you refuse to provide these consents (or withdraw your consent) to our processing of your Personal Information (when appropriate), then in some cases we may not be able to provide access to our Website or Applications, or provide you with the products and services available on or through our Website or Applications. We do not knowingly process the Personal Information about a child under the age of fourteen (14).

• I have read, understood, and agree to the Privacy Notice and this Canada Privacy Addendum
• I hereby consent to the collection and use of my Personal Information as described in the Privacy Notice and this Canada Privacy Addendum
• To the extent any Personal Information about me is provided by third-parties as described in the Privacy Notice and this Canada Privacy Addendum, I hereby consent to Yami’s collection of such Personal Information from such third-parties.
• To the extent my Personal Information is transferred outside of Canada as described in the Privacy Notice and this Canada Privacy Addendum, I hereby consent to such transfer.

Each of the above consents are only valid for the time necessary to achieve the stated purpose for which consent is being requested.