We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, UniFirst has collected the following categories of personal information from its consumers within the last twelve (12) months:

• Identifiers – Identifiers, such as real name, alias, or other similar identifiers, are collected directly or indirectly from you for the purpose of performance of a contract or for our legitimate business interests.
• Personal Information – Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as a name, signature, physical characteristics, or description, are collected directly or indirectly from you for the purpose of performance of a contract or for our legitimate business interests.
• Protected Classifications – Protected classification characteristics under California or federal law, such as national origin (which includes, but is not limited to, national origin groups and aspects of national origin, such as height, weight, etc.) or any other category or activity protected by federal, state, or local laws, ordinances, or regulations.
• Geolocation Data – Geolocation data, such as physical location or movements.

Personal information does not include:

• Publicly available information from government records.
• Deidentified or aggregated consumer information.
• Information excluded from the CCPA’s scope, like:
  • Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data.
  • Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

UniFirst obtains the categories of personal information listed above from the following categories of sources:

• Directly from you. For example, from forms you complete or through our interactions with you by phone or over email.
• Indirectly from you. For example, from observing your actions on our website, products and services.

• To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to submit an inquiry about our products or services, we will use that personal information to respond to your inquiry.
• To provide, support, personalize, and develop our website, products, and services.
• To create, maintain, customize, and secure your business account with us.
• To process your requests, purchases, transactions, and payments and prevent transactional fraud.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To help maintain the safety, security, and integrity of our website, products and services, databases and other technology assets, and business.
• For testing, research, analysis, and product development, including to develop and improve our website, products, and services.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information or as otherwise set forth in the CCPA.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of UniFirst’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by UniFirst about our website users is among the assets transferred.