CCPA Privacy Policy – TOK America

PRIVACY POLICY FOR CALIFORNIA RESIDENTS

Effective Date: June 10, 2026

Last Updated: June 10, 2026

This Privacy Policy for California Residents (this “Policy”) supplements the information contained in the Website Privacy Policy [https://www.tokamerica.com/website-privacy-policy/] of Tokyo Ohka Kogyo America, Inc. (the “Company”, “we”, or “us”) and applies solely to all visitors, users, and others who reside in the State of California (“consumers” or “you“). We adopt this Policy to comply with the California Consumer Privacy Act of 2018 (the “CCPA”), as amended, and any terms defined in the CCPA have the same meaning when used in this Policy.

Notice at Collection: At or before the time of collection, you have the right to receive notice of our practices, including the categories of personal information to be collected, the purposes for which such information is collected or used, whether such information is sold or shared, and how long such information is retained. You can find those details in this statement by clicking on the foregoing links.

PERSONAL INFORMATION WE COLLECT

Personal Information: Information that identifies, relates to, or could reasonably be linked directly or indirectly with a particular California resident constitutes “Personal Information”. In the past 12 months, we have collected the following categories of Personal Information:

Category	Examples	Collected
A. Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.	YES
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some Personal Information included in this category may overlap with other categories.	YES
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	YES
D. Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	YES
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer’s interactions with websites, applications such as email, or advertisement.	YES
G. Geolocation data.	Physical location or movements.	YES
H. Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	NO
I. Professional or employment-related information.	Current or past job history or performance evaluations.	YES
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	YES
K. Inferences drawn from other personal information.	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO

Sensitive Personal Information: Personal Information that reveals any of the information listed in the categories in the table below constitutes “Sensitive Personal Information”. In the past 12 months, we have collected the following categories of Sensitive Personal Information:

Category	Collected
A. Social security, driver’s license, state identification card, or passport number.	YES
B. Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.	YES
C. Precise geolocation.	NO
D. Racial or ethnic origin, religious or philosophical beliefs, or union membership.	YES (Only if the employee chooses to disclose this information on the employment application in the EEO section which is fully optional).
E. Contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication.	YES
F. Genetic data.	NO
G. The processing of biometric information for the purpose of uniquely identifying a consumer.	YES
H. Personal Information collected and analyzed concerning a consumer’s health.	YES (Only if an employee elects to send this information in via doctor’s note, due to a medical accommodation need, or if they are applying for a form of protected leave related to FMLA).
I. Personal Information collected and analyzed concerning a consumer’s sex life or sexual orientation.	NO

PERSONAL INFORMATION SOURCES

The categories of sources from whom we collected the Personal Information and Sensitive Personal Information listed above include the following:

Directly from you or an authorized agent or family member, through direct interactions and forms.
Service Providers and other third parties (e.g., credit bureaus or mortgage brokers).
Directly and indirectly from activity on our website, directly from our human resources information system.
Through passive collection of information about your interactions, including page clicks, time spent, or other automatically collected meta-data.
Internet cookies.
Government Agencies and other publicly available sources.

USE OF PERSONAL INFORMATION

We may use the Personal Information we collect for purposes of providing you with our services, including to:

Fulfill or meet the reason you provided the Personal Information.
Support, personalize, and develop our website, products, and services.
Process your requests, purchases, transactions, and payments and prevent transactional fraud.
Answer requests for customer support.
Communicate with you about our services and policy changes.
Help maintain the safety, security, and integrity of our website, products and services, databases and other technology assets, and business.
Maintain, improve, upgrade, or enhance our products and services.
Process your financial information and other payment methods for products or services purchased.

We may also use the Personal Information we collect for administrative purposes, including to:

Detect security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
Carry out our obligations and enforce our rights arising from any contracts entered between you and us, including billing and collections.
Provide employees with access to company systems and networks.
Support the operation of company provided tools and equipment.
Recruit and process employment applications, including verifying eligibility for employment and conducting background and related checks.
Conduct employee onboarding.
Maintain and administer payroll and employee benefit plans, including enrollment and claims handling.
Maintain personnel records and complying with record retention requirements.
Provide employees with human resources management services and employee data maintenance and support services.
Communicate with employees and their emergency contacts and plan beneficiaries.
Comply with applicable state and federal labor, employment, tax benefits, workers’ compensation, disability, equal employment opportunity, workplace safety, and related laws.
Design, implement, and promote the Company’s diversity and inclusion programs.
Perform workforce analytics, data analytics, and benchmarking.
Prevent unauthorized access to or use of the Company property, including information systems, electronic devices, network, and data.
Ensure employee productivity and adherence to Company policies.
Conduct internal audits and investigate complaints, grievances, and suspected violations of Company policy.
Comply with laws and regulations and to comply with other legal process and law enforcement requirements (including any internal policy based on or reflecting legal or regulatory guidance, codes, or opinions).
As described to you when collecting your Personal Information or as otherwise set forth in the CCPA.

SHARING PERSONAL INFORMATION

We do not sell Personal Information. We do not share Personal Information for the purpose of cross-context behavioral advertising.

RETENTION OF PERSONAL INFORMATION

We determine how long to retain your Personal Information by taking into account various criteria, such as the type of services provided to you, the nature and length of our relationship with you, the impact on our services we provide to you if we delete some information from or about you, and our obligations under applicable law.

We will retain your Personal Information until the Personal Information is no longer necessary to accomplish the purpose for which it was provided. We may retain your Personal Information for longer periods for specific purposes to the extent that we are obliged to do so in accordance with applicable laws and regulations, to protect you, other people, and us from fraud, abuse, and unauthorized access, as necessary to protect our legal rights, or for certain business requirements.

We will delete your Personal Information when it is no longer necessary for the purpose for which it was collected, or upon your request, subject to exceptions as discussed in this Policy or under applicable law, contract, or regulation.

YOUR RIGHTS UNDER THE CCPA

The CCPA provides California residents with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights.

Right to Know You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive your request and confirm your identity (see Exercising Your Rights to Know, Delete, and Correct), we will disclose to you:

The specific pieces of Personal Information we collected about you (also called a data portability request).
The categories of Personal Information we collected about you.
The categories of sources for the Personal Information we collected about you.
The Personal Information categories sold or shared, if any, and the categories of third parties purchasing or receiving that Personal Information.
The Personal Information categories disclosed for a business purpose, if any, and the categories of persons receiving the Personal Information.
Our business or commercial purpose for collecting, selling, or sharing that Personal Information.

Right to Delete You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive your request and confirm your identity (see Exercising Your Rights to Know, Delete, and Correct), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

Complete the transaction for which the Personal Information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated by you within the context of our ongoing business relationship with you, or otherwise perform a contract you have entered into with us.
Help ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for those purposes.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
Comply with a legal obligation.

Right to Correct You have the right to request that we correct any inaccuracies in your Personal Information we hold about you, considering both the Personal Information’s nature and processing purposes. Upon receiving your request (see Exercising Your Rights to Know, Delete, and Correct), we will use commercially reasonable efforts to:

Correct the Personal Information on our existing systems or alternatively, delete the contested Personal Information if the deletion does not negatively impact you or if you consent to such deletion.

Right to Limit Sensitive Personal Information You have the right to limit how we use and disclose your Sensitive Personal Information by requesting that we restrict our use and disclosure of such Sensitive Personal Information to the “Permitted Sensitive Personal Information Purposes”, which allow us to collect, use, and disclose Sensitive Personal Information for the following purposes, even after you exercise your limitation rights:

To perform services or provide goods that an average consumer requesting those goods or services would reasonably expect.
To prevent, detect, and investigate security incidents compromising Personal Information.
To resist malicious, deceptive, fraudulent, or illegal actions directed our business and to prosecute those responsible for those actions.
To ensure individuals’ physical safety.
For short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with that us, so long as we do not:
disclose your Sensitive Personal Information to another third party; or
use it to build a profile about you or otherwise alter your experience outside your current interaction with us.
To perform services for the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing, storage, or providing similar services for the business.
For products, services, or devices that we own, manufactures (directly or indirectly), or control, to:
verify or maintain the quality or safety of the product, service, or device; or
improve, upgrade, or enhance the service or device.
For purposes that do not infer characteristics about you.

Right to Non-Discrimination We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.

EXERCISING YOUR RIGHTS

Exercising Your Rights to Know, Delete, or Correct To exercise your rights under the CCPA, such as the right to know, delete, or correct described above, please submit a request by either:

Calling us at 1-888-815-2504
Completing a form online at: https://www.tokamerica.com/contact/

Submission and Response

Once you have submitted a request, we will acknowledge receipt of your request and advise you how long we expect it will take to respond if we are able to verify your identity. Also, we may ask you to describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. Only you or a person that you authorize to act on your behalf, may make a Verifiable Consumer Request, as defined in the CCPA, related to your Personal Information. You may also make a Verifiable Consumer Request on behalf of your minor child.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Additionally, we will not honor your request where an exception applies, such as where the disclosure of Personal Information would adversely affect the rights and freedoms of another consumer or where the Personal Information that we maintain about you is not subject to the CCPA’s access or deletion rights. We will advise you in our response if we are not able to honor your request. We will not provide social security numbers, driver’s license numbers or government issued identification numbers, financial account numbers, account passwords or security questions and answers, or any specific pieces of information if the disclosure presents the possibility of unauthorized access that could result in identity theft or fraud or unreasonable risk to data or systems and network security.

Making a Verifiable Consumer Request does not require you to create an account with us. We will only use Personal Information provided in a Verifiable Consumer Request to verify the requestor’s identity or authority to make the request.

We commit to respond to a Verifiable Consumer Request within 45 days of its receipt. If we require more time (up to a total of ninety (90) days), we will inform you of the reason and extension period in writing.

Authorized Agent

You may authorize an agent to exercise your rights on your behalf. When a request is submitted by an authorized agent, the Company will require the requestor to: (i) provide the authorized agent’s written permission to do so; and (ii) will require the requestor to verify their own identity directly with the Company. If the Company is unable to verify the identity of the requestor or does not receive proof from the authorized agent that the requestor authorized the agent to act on the requestor’s behalf, the request will be denied.

CHANGES TO THIS POLICY

The Company may make periodic changes to this Policy. When these changes occur, we will post the new Policy on our website and change the “Last Updated” date accordingly. When appropriate, we may notify you through other means.

CONTACT FOR MORE INFORMATION

If you have any questions or concerns regarding the policies and practices described in this Policy, please contact us at 1-888-815-2504.