Effective Date: November 11, 2025
This Privacy Notice Addendum for Oregon Residents (the "Oregon Privacy Notice") supplements the information contained in the Newfold Digital, Inc. Privacy Notice (the "Privacy Notice"), and appliessolely to residents of Oregon ("consumers" or "you"). This Oregon Privacy Notice does not apply to the personal data collected or disclosed by users who manage the data of others while using our Services.
Information We Collect Under Oregon Privacy Laws
We collect personal data, meaning data or any unique identifier, which links to a consumer or to a device. For the purposes of this Oregon Privacy Notice, personal data does not include:
Publicly available information from government records.
Deidentified, aggregated or anonymized information that is maintained in a form that is not capable of being associated with or linked to a consumer.
Categories and Examples of Personal Data Collected
We collect this information from you when you attend conferences, visit our websites or establish an account. We use this information to stay in contact with you for business purposes, confirm your identity and authenticate you, and to satisfy regulatory requirements.
| Categories of Personal Data Collected | Examples |
| Personal Identifiers | Name, alias, date of birth, driver's license or Oregon identification card number or passport number. |
| Contact Information | home, postal or mailing address, home phone number, cell phone number, email address, or other similar identifiers. |
| Commercial Information |
Services purchased and information relating to your use of our Services. |
| Internet/ Network |
IP address, browser, or device information |
| Geolocation Data | City of residence, approximate location derived from IP address. Note: We do NOT collect precise geolocation data that identifies your location within a radius of 1,750 feet. |
| Audio, Electronic, or Visual Information | Phone recordings when you call customer service. |
| Other Personal Data | Information you provide to us when you register for or attend an event organized or hosted by us, information you permit usto see when interacting with us through social media, or comments and opinions you provide to us such as when you post on messageboards, blogs or complete an online form. |
| Government Identification and Financial Personal Data | Certain information such as social security, driver's license, state identification card, or passport number may be collected to confirm your identity or facilitate payment. We will only collect such data when required by law or contract, or confirmation of your identity is necessary to prevent fraud. However, we do not use or disclose the information for any reason except as necessary to perform the Service requested or meet our legal obligations. |
| Biometric data | We do collect biometrics, like facial recognition, with your consent to confirm identity to prevent fraud. |
We do not collect sensitive data as defined by applicable Oregon law unless otherwise described in this notice. Specifically:
We do not collect precise geolocation data within 1,750 feet.
We do not knowingly collect children's personal data.
We do not collect data revealing racial/ethnic background, religious beliefs, health diagnoses, sexual orientation, transgender/nonbinary status, victim of crime status, or citizenship/immigration status.
We do collect biometrics, like facial recognition, with your consent to confirm identity to prevent fraud.
We do not create profiles about you for the purpose of making decisions that produce legal effects or effects of similar significance concerning you.
Where We Obtain Personal Data
We obtain the categories of personal data listed above from the following sources:
We may collect, use or disclose personal information about you for one or more of the following business and/or commercial purposes:
To provide the requested Services to you;
To provide you with useful content;
To ensure the proper functioning of our Services;
To offer and improve our Services;
To provide you with requested information or technical support;
To facilitate your movement through our websites or your use of our Services;
To do a better job of advertising and marketing our Services (subject to your consent where required by applicable law);
To advertise and market third party products and Services (subject to your consent where required by applicable law);
To diagnose problems with our servers or our Services;
In connection with our security and compliance programs;
To administer our websites;
To communicate with you;
To target current or prospective customers with our Services through online advertisements served on third-party sites by third-party vendors, such as Google (subject to your consent where required by applicable law); and
To assist us in offering you a personalized experience or otherwise tailor our Services to you.
In the previous 12 months, we have disclosed the categories of personal data we collect to the following third parties for the business purposes.
Identifiers: Service providers and vendors, partners, authorized users within your organization and other members our corporate family.
Commercial Information: Service providers and vendors, partners, authorized users within your organization and other members of our
corporate family.
Internet/Network Information: Partners and other members of our corporate family.
Other Personal Information: Third party service providers, vendors and partners.
In addition to the third party service providers listed here, https://www.newfold.com/privacy-center/third-party-data you have the right to request a list of specific third parties, other than natural persons, to which we have disclosed your personal data.
Targeted Advertising:
We engage in targeted advertising, which means selecting advertisements for display to you based on personal data obtained from your activities over time and across unaffiliated websites, devices or online applications to predict your preferences or interests.
Profiling:
We DO NOT engage in profiling for the purpose of making decisionsthat produce legal effects or effects of similar significance concerning you. This means we do not use automated processing of your personal data to evaluate, analyze, or predict factors about you. If our practices change in the future, we will update this notice and provide you with the opportunity to opt out before engaging in such profiling activities.
Sale of Personal Data
When you interact with our websites, we may use, or authorize third-party partners and service providers to use, cookies, web beacons, and similar technologies to improve your experience with us. These technologies can collect personal data about you that can be used by us and/or our authorized third-party partners and service providers. Using your personal data in this way may constitute a "sale" under Oregon privacy laws.
If you'd like to opt out of the sale of your personal data, please go to the site page of your account, or brand, and click on the Cookie Settings link in the footer of that page to update your Cookie Settings.
Except as provided above, we do notsell personal data to third parties.
Communicating Personal Data
We do not use personal data for new or secondary purposes beyond the reasons it was collected with your consent or otherwise described in this notice. When our practices change, we will provide you with notice and the opportunity to opt out.
We have disclosed the following categories of personal data for the purpose ofshowing you ads about products and services offered by the Newfold family:
Identifiers; and
Internet or other similar network activity
Verifying Your Identity
We will need to verify youridentity before processing yourrequest. In orderto verify your identity, we will generally require the matching of sufficient information you provide to compare it with information we maintain about you in oursystems to authenticate your identity. If you are using an authorized agent, please note that you will be required to verify your identity and provide written confirmation that you have authorized the agent to make a request on your behalf. For requests to access or delete, we may require you to verify your identity directly with us, and directly confirm with usthat you provided the authorized agent permission to submit the request.
If you'd prefer a hard copy of this Oregon Privacy Notice or to access it as a PDF, this site permits you to print it to a PDF or to a printer.
Oregon Privacy Rights
As a resident of Oregon you may exercise the following rights with respect to your personal data that we have collected, subject to certain exceptions and after we take reasonable steps to confirm your identity.
The right to receive an electronic copy of all of your personal data that the we collected about you and obtain the copy in a format technically feasible portable and commonly used.
The right to correct inaccuracies in your personal data, considering the nature of the personal data and the controller's purposes of the processing of your personal data.
The right to delete personal data about you, including personal data you provided to the controller, personal data the controller obtained from another source, and derived data, subject to certain exceptions.
The right to opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data now or in the future, or profiling in furtherance of a decision that produces a legal or similarly significant effect concerning a consumer. We do not presently engage in profiling. To the extent our use of cookies constitutes a sale of personal data or targeted advertising under the Oregon Privacy Act, you have the right to opt out.
The right to receive a list of specific third parties to which we have disclosed personal data.
Where we process your personal data based on your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
We will not discriminate against you for exercising any of the above rights.
How to Exercise Oregon Privacy Rights
To exercise your Oregon Privacy Rights, please submit a request to us by:
Submitting a request through our DSAR portal here https://www.newfold.com/privacy-center/requests;
Visiting our Privacy Center here https://www.newfold.com/privacy-center;
Sending an email to [email protected].
If you'd like to opt out of the sale of personal data ortargeted advertising, you have the following options:
We will treat it as a valid request to opt out.
You do not need to take additional action.
The opt out will apply to the specific browser or device sending the signal
If you would like to appeal our decision to refuse to act on a privacy right request, you may do so by contacting us through one of the methods above and including your request reference number. We will respond to your appeal within 45 days.
Newfold acts as a service provider to its customers. When acting in this capacity, we process personal data on behalf of our customer, and we have no direct relationship with the end-users who use our customers' Services or products or visit our customers' websites.
If you are an end-user of one of our customers whose personal data we process and you are seeking to exercise your rights under Oregon privacy laws, you should contact our customer directly.
We maintain reasonable administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and accessibility of personal data we collect and process. These safeguards are appropriate for the volume and nature of the personal data we handle and comply with the requirements are described https://www.newfold.com/privacy-center/information-security-policy.
Questions? Contact us at [email protected]
CONTROLLER IDENTIFICATION
For Oregon residents, the controller of your personal data is:
Newfold Digital, Inc., 5335 Gate Parkway, Jacksonville, FL 32256
For inquiries specific to Oregon privacy rights, contact: [email protected]