Privacy Policy - Gilmore Music

GILMORE MUSIC PRIVACY POLICY

This Privacy Policy (“Policy“) describes how Gilmore Music (“Gilmore Music,” “we” or “us“) collects, uses, and discloses information related to our customers and prospective customers,
visitors to Gilmore Music retail stores, and users of our websites and mobile applications, as well as associated services (collectively, the “Services“). Your use of our Sites is subject to the Gilmore Music Terms of Use, available
at gilmoremusicstore.com/terms-and-conditions, which includes applicable terms governing limitations on liability and the resolution of disputes.

Overview of Our Collection and Use of Personal Information

This overview summarizes key information about our information practices, which are further explained below. Our collection and our use of your personal information varies depending upon the nature of our relationship and interactions. The table below
provides a general overview of the categories of personal information we collect and the purposes for which we use such information.

Categories of personal information we collect	How we use personal information
Name, contact information and other identifiers: identifiers such as a name, username, account name, address, phone number, email address, online identifier, IP address, government-issued identification numbers or other similar identifiers.	Providing support and services and operating our websites Analyzing and improving our business Personalizing content and experiences Advertising, marketing and promotional purposes Securing and protecting our business For the safety and protection of students and teachers and quality monitoring purposes. Defending our legal rights
Customer records: paper and electronic customer records containing personal information.
Protected classifications: characteristics of protected classifications under California or federal law such as race, sex, age, religion, national origin, disability and citizenship.
Commercial Information: including records of real property, products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.
Usage data: internet or other electronic network activity Information including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.
Geolocation data: precise location information about a particular individual or device.
Audio, video and other electronic data: audio, electronic, visual, thermal, olfactory, or similar information such as, CCTV footage, photographs, audiovisual recordings, and call recordings.
Employment history: professional or employment-related information.
Education information: education information and records.
Profiles and inferences: Inferences drawn from any of the information identified above to create a profile reflecting a resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.
Individual rights. Please see the Your Rights and Choices section below for a description of the choices we provide and the rights you have regarding your personal information. If you are a California resident, please be sure to review the Important Additional Information for California Residents section below for important information about the categories of personal information we collect and disclose and your rights under California privacy laws.

Scope

This Policy applies to our collection, use and disclosure of personal information related to:

Users of our website www.guitarcenter.com, as well as any mobile applications, other websites, applications and online services that display or link to this Policy (collectively, the “Site“);
Customers and prospective customers, including individuals who purchase our products through affiliate and other third party retailers;
Visitors to Gilmore Music stores (each, a “Store“); and
Individuals who otherwise interact or communicate with us related to our Services.

Personal Information. In general, personal information includes any information that identifies, relates to, describes, or is reasonably capable of being associated, linked or linkable with a particular individual.

Not Covered by this Notice. This Privacy Policy does not apply to job applicants or to Gilmore Music employees and non-employee workers, whose personal information is subject to different privacy notices.

By disclosing your personal information to us, interacting with us or using our Services, you understand and agree that Gilmore Music may collect, use and disclose your personal information in accordance with this Privacy Policy. If required by applicable law, we will obtain your consent to our collection, use, transfer and disclosure of your personal information.

Collection of Personal Information

The personal information we collect varies depending upon the nature of the Services provided or used and our interactions with individuals.

Categories of personal Information. Certain privacy laws, such as the California Consumer Privacy Act (“CCPA“) require that we disclose the categories of personal information that we collect about individuals.
While the personal information we collect varies depending upon the circumstances, we may collect the following categories of personal information (subject to applicable legal requirements and restrictions):

Name, contact information and other identifiers: identifiers such as a name, username, account name, address, phone number, email address, online identifier, IP address, government-issued identification numbers or other similar identifiers.
Customer records: paper and electronic customer records containing personal information.
Protected classifications: characteristics of protected classifications under California or federal law such as race, sex, age, religion, national origin, disability and citizenship.
Commercial Information: including records of real property, products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.
Usage data: internet or other electronic network activity Information including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.
Geolocation data: precise location information about a particular individual or device.
Audio, video and other electronic data: audio, electronic, visual, thermal, olfactory, or similar information such as, CCTV footage, photographs, audiovisual recordings, and call recordings.
Employment history: professional or employment-related information.
Education information: education information and records.
Profiles and inferences: Inferences drawn from any of the information identified above to create a profile reflecting a resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence,
abilities, or aptitudes.

Sources of Personal Information. We may collect personal information about individuals:

Directly from you: such as when you create an online account with us, make a purchase, participate in contests and promotions we offer, attend our events, or register to receive marketing and other communications from us, or contact us
for customer support purposes.
From third parties: such as affiliate and other third party retailers that sell our products, public records, third party providers of services to us (e.g., fraud detection, identity verification and security), consumer data resellers,
social networks, joint marketing partners and affiliate companies.
Related to your use of our Services: including information we collect automatically when you use our Sites, visit a Store, or interact with us, or information we derive about you and your preferences or interests based on the personal
information we collect and our interactions with you.

Information We Collect From You. We may collect personal information from you related to:

Registration, accounts and profiles: when you register for an account with we collect your name and email and password; we may also collect additional information such as your preferences, location and payment details.
Purchases, orders and payments: : if you make a purchase, submit and order, return items, or sign up for certain Services, we collect information in order to process your payment, order or refund, fulfill your or order, including name,
billing and shipping address and details, payment type, as well as credit card number or other payment account details (e.g., PayPal).
Marketing, surveys and events: : if you sign up to receive news, updates, offers and other marketing communications from us, we may collect name, contact information about your preferences. We may also collect name, age, email address,
and other information when you participate in contests, sweepstakes, events or activities offered by us (collectively, “events”) or submit surveys or feedback to us.
Your communications and requests: when you email us, call us, or otherwise send us communications, we collect and maintain a record of your contact details, communications and our responses.
User content: if you post content or submit reviews and comments to us (“User Content”), we may maintain a record of your User Content, including the location, date and time of submission.
Mobile applications: if you use our mobile applications, we collect information on and/or through these mobile applications, which may include (with your permission) access to your location, camera, photos and contacts, as well as permission
to send you push notifications.

Information We Collect from Third Parties. We may collect personal information about you from third party sources (which may be combined other personal information we have collected about you), such as:

Third party retailers: if you purchase our products from a third-party retailer, we receive information from that third party for order processing and fulfilment, returns and refunds processing, warranty and related purposes, which may
include name, contact information, shipping and other order details.
Social media: if you choose to link, create, or log in to your Services account with a social media service (e.g., Twitter, Facebook, Instagram, etc.), we collect your permission to access certain information from your profile with that
social media service. If you post or if you engage with a separate social media service or interact with us on our page with any social media service, we may collect personal information about you related to those interactions.
Other: we may obtain personal information, such as demographic information or updated contact details, from third parties; we may also collect information from public records.

Information We Collect or Derive About You. We may collect or derive personal information about you your use of our Sites and Apps, visits to our Stores, or other interactions with us.

Sites and Apps: We and our third party providers may use cookies, pixels, tags, log-files, and other technologies to collect information about a user from their browser or device, including, without limitation, your browser type, device
type, operating system, software version, phone model, phone operating system, platform-dependent information, requested document, referring URL, date and time of your visit, clickstream data (e.g. about the pages you view, links you click
and date and time stamps for your activities on our Sites) and the IP address associated with your transactions in the system. This information that we collect automatically may be linked with other personal information we have collected.
For more information, see the Cookies and Tracking section below.
Stores: In addition, when you visit a Store, we may collect personal information about you automatically through CCTV footage. If you contact us by phone, we may record our calls with you for quality, training and protection purposes and to increase our understanding of our customers and for other research and analytical purposes.
Audiovisual recordings of lessons: We record all of our lessons for the safety and protection of our students and instructors, to monitor for quality control, and to assist us in the defense of any legal claims.
Profile and Interests: we may create profiles relating to you in order to show you the content that we think you might be interested in and reach you with more relevant ads and marketing.

Use of Personal Information

Gilmore Music may use personal information collected from you and other information collected automatically for a variety of purposes, including, without limitation, to:

Providing support and services: including to provide our Services, operate our Sites, Apps and online services, and interact with you in our Stores; to communicate with you about your access to and use of our Services; to respond to your
inquiries; to provide troubleshooting, fulfill your orders and requests, process your payments and provide technical support; and for other customer service and support purposes.
Analyzing and improving our business: including to better understand how users access and use our Services and Sites, to evaluate and improve our Sites, Services and business operations, and to develop new features, offerings and services;
to conduct surveys and other evaluations (such as customer satisfaction surveys); to monitor consumer interest in our products and Services; to troubleshoot problems that may arise on the Sites; to improve the accuracy of our customer database;
to increase our understanding of our customer database; to increase our understanding of our customers; and for other research and analytical purposes.
Personalizing content and experiences: including to tailor content we send or display on our Sites and other Services; to offer location customization and personalized help and instructions; and to otherwise personalize your experiences.
To assist in these purposes, as well as the other purposes identified in this Policy, at certain times, we create a profile relating to you in order to show you the content that we think you might be interested in and to display the content
according to your preferences.
Advertising, marketing and promotional purposes: including to reach you with more relevant ads and to evaluate, measure and improve the effectiveness of our ad campaigns; to send you newsletters, offers or other information we think may
interest you; to contact you about our Services, products, or other information we think may interest you; to identify potential new customers; and to administer promotions, sweepstakes, contests or other special promotions.
Securing and protecting our business: including to protect and secure our business operations, assets, Services, network and information and technology resources; to investigate, prevent, detect and take action regarding fraud, unauthorized
access, situations involving potential threats to the rights or safety of any person or third party, or other unauthorized activities or misconduct. With regard to audiovisual recordings of online lessons, we use the recordings for the safety
and protection of students and teachers and quality monitoring purposes, and to defend any legal rights.
Defending our legal rights: including to manage and respond to actual and potential legal disputes and claims, and to otherwise establish, defend or protect our rights or interests, including in the context of anticipated or actual litigation
with third parties.
Auditing, reporting, corporate governance, and internal operations: including relating to financial, tax and accounting audits; audits and assessments of our operations, privacy, security and financial controls, risk, and compliance with
legal obligations; our general business, accounting, record keeping and legal functions; and related to any actual or contemplated merger, acquisition, asset sale or transfer, financing, bankruptcy or restructuring of all or part of our business.
Complying with legal obligations: including to comply with the law, our legal obligations and legal process, such warrants, subpoenas, court orders, and regulatory or law enforcement requests.

Aggregate and De-identified Data. We may de-identify information and create anonymous and aggregated data sets and reports to assess, improve and develop our business, products and services, prepare benchmarking reports on
our industry and for other research, marketing and analytics purposes.

Disclosure of Personal Information

We may share or disclose the personal information we collect as follows:

Service providers:We may disclose personal information with third-party service providers who use this information to perform services for us, such as hosting providers, auditors, advisors, consultants, customer service and/or support
providers.
Third parties: We may share personal information with third parties that provide advertising, campaign measurement, online and/or mobile analytics, and related services. These third parties may receive or access browsing and/or other data about your use of the Services, in order to help us better reach individuals with relevant ads and/or measure our ad campaigns, and/or to better understand how individuals interact with our Sites and Services overtime and across devices.
We may also transfer and/or sell personal information we collect and/or join together with other businesses to bring selected opportunities to customers or potential customers.
Subsidiaries and affiliates: We may share your personal information with our affiliated companies (i.e., our parent company and other companies under common ownership, control or management with us); they may use such personal information for the purposes set out in this Policy.
Legal compliance: We may be required to share personal information in response to a valid court order, subpoena, government investigation, or as otherwise required by law. We also reserve the right to report to law enforcement agencies any activities that we, in good faith, believe to be unlawful. In addition, we may share certain personal information when we believe that doing so is reasonably necessary to protect the rights, property and safety of our company and/or others.
Business transfers: We may disclose and/or transfer personal information as part of any actual or contemplated merger, sale, transfer of assets, acquisition, financing and/or restructuring of all or part of our business, bankruptcy or similar event, including related to due diligence conducted prior to such event where permitted by law.
Protect our rights: We may disclose personal information where we believe it necessary to respond to claims asserted against us, to enforce or administer our agreements and terms, for fraud prevention, risk assessment, investigation and/or to protect the rights, property or safety of Gilmore Music or our affiliates, clients, customers and/or others. With regard to audiovisual recordings of online lessons, the recordings are accessible only by approved Gilmore Music employee administrators and may be shared with legal counsel to protect our rights.

Aggregated and De-identified Data. We may share aggregate or de-identified information with third parties for research, marketing, advertising, analytics and/or other purposes.

Cookies and Analytics

We use cookies, pixels, tags, and other technologies, which may be provided by third parties, on our Sites to enable certain functionality and for security and fraud detection and prevention, as well as to collect usage information about our Sites and the emails that we send and to personalize content and provide more relevant ads and information. We may combine the information we collect via these technologies with other information, including personal information, that we collect.

Cookies. Cookies are alphanumeric identifiers that are transferred to your computer through your web browser for record-keeping purposes. Some cookies enable you to log-in to our Sites or save certain settings and preferences, while others, allow us to track usage and activities on our Sites, personalize content on our Sites, or deliver more relevant ads on our Sites and third party sites. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. The “Help” tab on the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. If you block cookies, however, certain features on our Sites may not be available or function properly.

Log files. Most browsers collect certain information, such as your IP address, device type, screen resolution, operating system version and internet browser type and version. This information is gathered automatically and stored in log files.

Pixel tags and embedded script (aka clear GIFs and web beacons). Pixel tags are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, pixel tags are embedded invisibly on web pages. We may use these, in connection with our Sites to, among other things, track the activities users of our Services, improve ads, personalize and manage content, and gather usage information about our Sites. We may also use these in HTML emails to, to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.

Third Party Analytics Tools. Our Sites use automated devices and applications operated by third parties, such as Google Analytics, which uses cookies and similar technologies to collect and analyze information about use of the Sites and report on activities and trends. This service may also collect information regarding the use of other websites, apps and online resources. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners/, and you can opt out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

Do-Not-Track Signals. Please note that our Sites do not recognize or respond to any signal which your browser might transmit through the so-called ‘Do Not Track’ feature your browser might have. If you wish to disable cookies on our Services, you should not rely on any ‘Do Not Track’ feature your browser might have.

Interest-based Advertising:

We work with third party ad networks, channel partners, affiliates, measurement services, analytics and others (“third party ad companies“) to display advertising on our Services, and to manage or measure our advertising on third party sites, social media platforms, mobile apps and online services, as well as to send you promotional materials or offers via email or direct mail. We and these third party ad companies may use cookies, pixels tags, and other tools to collect activity information on our Services (as well as on third party sites and services), as well as IP address, device ID, cookie and advertising IDs, and other identifiers, general location information, and, with your consent, your device’s geolocation information; we and these third party ad companies use this information to provide you more relevant ads and content and to evaluate the success of such ads and content.

Custom Lists and Matching. We may create and disclose hashed customer list information (such as name and email address) with third parties—such as Facebook and Twitter—so that we can better target ads and content to you and
others with similar interests, within these third-party services. These third parties use the personal information we provide to help us target ads and to enforce their terms, but we do not permit them to use or share the data we submit with other third-party advertisers.

Opt out of targeted ads. You may control how participating third party ad companies use the information that they collect about your visits to our Sites, and those of third parties, in order to display more relevant targeted
advertising to you; for more information and to opt-out go to:

www.networkadvertising.org/optout_nonppii.asp (Network Advertising Initiative)
www.aboutads.info/choices (Digital Advertising Alliance)

Opting out of participating ad networks does not opt you out of being served advertising. You may continue to receive generic or “contextual” ads on our Services. You may also continue to receive targeted ads on other websites, from companies that
do not participate in the above programs.

Collection of Children’s Personal Information

Our Sites are not directed to children under the age of 13, and Gilmore Music does not knowingly collect or maintain personal information online from children we actually know at the time of collection are under the age of 13. Should we discover that we have collected personal information online from a child who is under 13, we will promptly delete that personal information. If you have concerns over the collection of children’s personal information on the Sites, please contact us at the information provided in the Contact Us section below. Although our Sites are not directed to children under the age of 13, if your child is engaged in lessons with us and you wish to review or have deleted your child’s personal information included in the recordings of those lessons, you may so request by contacting us at the location or email address set forth below under ‘Contact Us.’ We only use the recordings for the safety and protection of students and teachers and quality monitoring purposes, and to defend any legal rights. Recordings will not be used for marketing purposes or any other use. Only approved Gilmore Music employee administrators and our legal counsel have access to the recordings.

CARU Safe Harbor. This privacy policy and the CARU icon shown on our websites confirm that Gilmore Music is a valid licensee and participating member in the CARU Safe Harbor Program (“CARU Safe Harbor”). To protect your privacy, we have voluntarily undertaken this privacy initiative. CARU has reviewed and certified that we meet established online information collection and use practices on all Gilmore Music properties where this privacy policy is posted.
As part of the CARU Safe Harbor, we are subject to audits and frequent monitoring of our websites and other enforcement and accountability mechanisms administered independently by CARU.

If you believe that we have not responded to your inquiry or your inquiry has not been satisfactorily addressed, please contact CARU at:

CARU Safe Harbor
Attn: Director
1676 International Drive, Suite 550
McLean, VA 22102
info@caru.bbb.org

Security

The security of your personal information is important to us. We have put in place safeguards to protect the personal information we protect from unauthorized access, use and disclosure. However, we cannot guarantee that unauthorized access, hacking, data loss, or other breaches will never occur. We urge you to take steps to keep your personal information safe, such as choosing a strong password and logging out of your User account and closing your web browser when finished using the Services.

Links to Third Party Sites

The Sites provide links to various websites operated by third parties including, but not limited to, third party sites that display the Gilmore Music trademarks. This Privacy Policy does not apply to third party websites that are accessible through the Gilmore Music Sites, unless such website directs users or visitors to this Privacy Policy. When you click on one of these links, you will be transferred out of the Sites and connected to the website of the organization or company that maintains that website. Even if an affiliation exists between the Sites and a third-party website, we exercise no control over linked websites. Each of these linked websites maintains its own independent privacy and data collection policies and procedures. We encourage you to read the privacy policies of those other websites to learn how they collect, use, share and secure your information before providing any personal information.

Your Rights and Choices

If you need to update your contact details or other personal information provided to us, please contact us as set forth in the Contact Us section below. California residents have certain rights, under California privacy laws, regarding their personal information, which are set forth below, in the Additional Information for California Residents section below.

Marketing Choices. You can control your marketing preferences as set forth below:

Email opt out: From time to time, Gilmore Music may notify you by email of special promotions, changes to the Sites, new product lines or products or service offerings that we think may be of special interest to you. If you decide you no longer want to receive emails notifying you of this information, click here to unsubscribe, or follow the instructions in the promotional message. Email Opt Out requests will be processed within ten (10) days.
Mailing list: Gilmore Music may occasionally share its postal mailing list or a part of its mailing list with other organizations. If you do not want your name and address shared with other organizations, or do not wish to receive
our mailings, please contact us at 562-542-0524. Please note that requested changes to our postal mailing list may take up to eight (8) weeks to take effect.

Sites Preferences. You may control how we collect and manage certain information through our Sites:

Targeted advertising: To opt-out of certain targeted advertising by participating advertisers, go to:
www.networkadvertising.org/optout_nonppii.asp (Network Advertising Initiative)
www.aboutads.info/choices (Digital Advertising Alliance)

You can also adjust your browser cookies settings to block or delete third party cookies, as explained in the Cookies and Analytics section above. If you block cookies, certain features on our Sites may not be available or function properly.
Mobile applications: You can manage your preferences for push notifications, and access to your device location, camera, photos, and contacts by our App, through the device settings of your mobile device. In some cases, you may not
be able to use certain features of the App if you decline certain permissions. For example, you must permit the App to access your device’s camera or saved photos in order to use certain features such as the scan barcode feature.

Changes to this Privacy Policy

When we make changes to the Privacy Policy, we will change the “Last Updated” date above. If a material change is made to this Privacy Policy, we will endeavor to provide notice in advance of such change, such as by posting notice of that change
on the first page of this Privacy Policy or on our homepage, or by emailing your email address of record with us. You are responsible for reviewing this Privacy Policy periodically to ensure that you are aware of any changes to it. Your continued use of the Services constitutes your consent to any changes to this Privacy Policy.

Contact Us

If you have any questions or concerns about this Privacy Policy and/or if you want to exercise any of the rights that you are given under this Privacy Policy, please contact us at:

Gilmore Music
1935 E 7th Street
Long Beach, CA 90813
Attention: Legal Department
Phone: 562-542-0524
Email us using this link

IMPORTANT ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS

California privacy laws, including the CCPA, require that we provide California residents certain specific information about how we handle their personal information, whether collected online or offline. This section does not address or apply
to our handling of publicly available information made lawfully available by state or federal governments or other personal information that is subject to an exemption under Section 1798.145(c) – (f) of the CCPA.

Categories of Personal Information We Collect and Disclose

Our collection, use and disclosure of personal information about a California resident will vary depending upon the circumstances and nature of our interactions or relationship with such resident. The table below sets out generally the categories
of personal information about California residents that we collect, sell and disclose to others for a business purpose. We collect these categories of personal information from the sources described in the Collection of Personal Information section above, and for the purposes described in the Use of Personal information section above.

Categories of personal information	Collected	Disclosed for business purposes
Name, contact information and other identifiers: identifiers such as a name, username, account name, address, phone number, email address, online identifier, IP address, government-issued identification numbers or other similar identifiers.	Yes	Yes
Customer records: paper and electronic customer records containing personal information.	Yes	Yes
Protected classifications: characteristics of protected classifications under California or federal law such as race, sex, age, religion, national origin, disability and citizenship.	Yes	Yes
Commercial Information: including records of real property, products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.	Yes	Yes
Usage data: internet or other electronic network activity Information including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.	Yes	Yes
Geolocation data: precise location information about a particular individual or device.	Yes	Yes
Audio, video and other electronic data: audio, electronic, visual, thermal, olfactory, or similar information such as, CCTV footage, photographs, audiovisual recordings, and call recordings.	Yes	Yes
Employment history: professional or employment-related information.	Yes	Yes
Education information: education information and records.	Yes	Yes
Profiles and inferences: Inferences drawn from any of the information identified above to create a profile reflecting a resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.	Yes	Yes

Categories of Personal Information Sold. The CCPA defines a “sale” as disclosing or making available to a third party personal information in exchange for monetary or other valuable consideration. While we do not disclose
personal information to third parties in exchange for monetary compensation from such third parties, we do disclose or make available personal information to our affiliated companies and other third parties, in order to receive certain services
or benefits from them, such as when we allow third party tags to collect information such as browsing history on our Sites, in order to improve and measure our ad campaigns. Pursuant to the CCPA, the categories of personal information that
we may “sell” include:

Name, contact information and other identifiers
Usage data
Profiles and inferences
Customer Records
Commercial Information
Profiles and inferences

California Residents’ Rights
California law grants California residents certain rights and imposes restrictions on particular business practices as set forth below.

Do-Not-Sell. California residents have the right to opt-out of our sale of their personal information. Opt-out rights can be exercised by submitting a request here. We do
not sell personal information about residents who we know are younger than 16 years old without opt-in consent.

Initial Notice.We are required to notify California residents, at or before the point of collection of their personal information, the categories of personal information collected and the purposes for which such information
is used. This Policy constitutes such notice.

Requests to Delete.Subject to certain exceptions, California residents have the right to, at no charge, request deletion of their personal information that we have collected about them and to have such personal information
deleted, except where an exemption applies.

Request to Know. California residents have the right to request and, subject to certain exemptions, receive a copy of the specific pieces of personal information that we have collected about them in the prior 12 months
and to have this delivered, free of charge, either (a) by mail or (b) electronically in a portable and, to the extent technically feasible, readily useable format that allows the individual to transmit this information to another entity without
hindrance. California residents also have the right to request that we provide them certain information about how we have handled their personal information in the prior 12 months, including the:

categories of personal information collected;
categories of sources of personal information;
business and/or commercial purposes for collecting and selling their personal information;
categories of third parties/with whom we have disclosed or shared their personal information;
categories of personal information that we have disclosed or shared with a third party for a business purpose;
categories of personal information collected; and
categories of third parties to whom the residents’ personal information has been sold and the specific categories of personal information sold to each category of third party.

California residents may make a Request to Know up to twice every 12 months.

Right to Non-discrimination. The CCPA prohibits discrimination against California residents for exercising their rights under the CCPA. Discrimination may exist where a business denies or provides a different level or
quality of goods or services, or charges (or suggests that it will charge) different prices, rates, or penalties on residents who exercise their CCPA rights, unless doing so is reasonably related to the value provided to the business by the
residents’ data.

Financial Incentives. A business may offer financial incentives for the collection, sale or deletion of California residents’ personal information, provided it is not unjust, unreasonable, coercive or usurious, and is
made available in compliance with applicable transparency, informed consent, and opt-out requirements. California residents have the right to be notified of any financial incentives offers and their material terms, the right to opt-out of
such incentives at any time, and may not be included in such incentives without their prior informed opt-in consent.

Your Rights Under California’s Shine-the-Light Law. Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain
from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use. Such requests may be made once per calendar year for information about any relevant third party
sharing in the prior calendar year. California residents who would like to make such a request may submit a request online at https://gilmoremusicstore.com. The request should attest
to the fact that the requester is a California resident, and provide a current California address.

Submitting Requests. Do-Not-Sell (Opt-out) Requests, Requests to Know, and Requests to Delete may be submitted:

Online at https://gilmoremusicstore.com
By phone at (562) 542-0524

We will respond to verifiable requests received from California residents as required by law

For more information about our privacy practices, you may contact us as set forth in the Contact Us section above.