U.S. Privacy Notice

U.S. Privacy Notice

Corin, Inc. (“Corin” or “we”) provides this U.S. Privacy Notice (“Notice”) as a supplement to Corin’s Global Privacy Notice.

This Notice applies to all visitors, users, and others who reside in states that have enacted comprehensive consumer privacy laws, currently including California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Texas, Florida, Maryland, Minnesota, Montana, Oregon, Delaware, New Hampshire, New Jersey, Kentucky, Nebraska, and Rhode Island, as well as any other U.S. state that later enacts a substantially similar comprehensive privacy law.

This Notice supplements the Corin Global Privacy Notice and any product or service specific privacy notice published by Corin.

For California residents, this Notice is intended to fully satisfy Corin’s obligations under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (“CCPA/CPRA”), and replaces any separate California specific privacy notice previously published by Corin.

If there is any conflict between this Notice and the Global Privacy Notice or a product or service specific notice, the notice that grants you stronger privacy protection under the law applicable to you will govern our processing of your Personal Data.

Where this Notice uses the term “Personal Data,” it is intended to cover “personal information,” “personal data,” or similar terms as defined under applicable state privacy laws.

Personal Data We Collect

Our website collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, with a particular consumer or device (“Personal Data”). Corin may obtain Personal Data directly from you (i.e., when you submit Personal Data to us) or indirectly from you (ie, through cookies and other tracking technologies used when you interact with our Site).

Corin may collect the following categories of Personal Data about you:

• Personal Identifiers includes Personal Data that can be used to identify an individual, such as name, address, email address or other similar identifiers
• Personal Information includes Personal Data that is not publicly available and can be used to identify an individual, such as employment information, education information and other similar information
• Commercial Information includes Personal Data that is related to an individual’s transactions, purchases and other commercial interactions with businesses, such as product preferences and other similar information
• Internet or other electronic network activity information includes information about an individual’s online activities, such as browsing history, search history and interactions with our websites, applications or advertisements

Personal Data does not include:

• Publicly available information made available from government records, widely distributed media or by individuals.
• De-identified or aggregated consumer information.
• Information excluded from the CCPA scope, which may include:
• Health or medical information covered by the Health Insurance Portability and Accountability Act (“HIPAA”) of 1996 and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data.
• Personal Data covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach Billy Act (GLBA), California Financial Information Privacy Act (CFIPA and the Driver’s Privacy Protection Act of 1994).

Purposes for Processing Personal Data

Corin may use your Personal Data for reasons referenced in the “How We Use Personal Data” section of the Global Privacy Notice. In particular, Corin may use your Personal Data for one of the following:

• To fulfill or meet the reason you provided the Personal Data (i.e., if you share your name and contact information to ask a question about an Corin product or service, we will use that Personal Data to respond to your inquiry).
• To provide, support, personalize and develop our Website, products and services.
• To provide you with marketing material.
• To provide and analyze our services.
• To help maintain the safety, security and integrity of our Website, products, services, databases and other technology assets, and business.
• Improve customer experience with surveys, polls and online research to deliver content and product and service offerings relevant to your interests.
• To create, maintain, customize and secure your account with us.
• For testing, research, analysis and product development, including to develop and improve our Website, products, and services.
• As described to you when collecting your Personal Data or as otherwise set forth in the CCPA.

Corin does not engage in automated decision-making or profiling based solely on automated processing that produces legal or similarly significant effects concerning you, such as decisions regarding eligibility for employment, credit or healthcare. Corin complies with any applicable state-law rights to opt out of automated decision-making.

How We Share Personal Data

Corin may disclose your Personal Data to Corin affiliates, service providers, to support business operations and to a third party for a business purpose. When such Personal Data is disclosed, Corin will enter into a contract that describes the purpose and requires the receipt to keep the Personal Data confidential and not use it for any purpose except as to perform the obligations of the contract.

We may disclose your Personal Data with the following categories of third parties:

• Business partners
• Consultants
• Service providers
• Law enforcement, government agencies, courts or other parties to protect ourselves, employees, to investigate fraud or as required by law, such as to comply with a subpoena or similar legal process
• Any other third party with your prior consent

Corin does not sell your Personal Data for monetary consideration and does not sell or share Personal Data for cross context behavioral advertising as those concepts are defined in CCPA/CPRA and comparable state laws.

Retention of Personal Data

Corin retains Personal Data for as long as your account or relationship with Corin is active or as needed to provide products, services, or relevant information, and thereafter as necessary to:

• Comply with legal obligations and retention requirements.
• Maintain appropriate business records.
• Resolve disputes and enforce agreements.
• Conduct internal research and improve products and services.

Specific retention periods may vary based on data category, processing purpose, and applicable law. Corin applies applicable state-specific requirements related to data minimization and Personal Data retention where required.

Your Rights Under U.S. State Privacy Laws

Residents of states with comprehensive consumer privacy laws have certain rights regarding their Personal Data. While the exact set of rights and terminology differ by state, this Notice is designed to reflect and operationalize the common rights across those laws, including:

• Right to Know / Access: To request information about the Personal Data Corin collects, uses, and discloses about you, including the categories and specific pieces of Personal Data, the categories of sources, the purposes for processing, and the categories of third parties to whom we disclose Personal Data.
• Right to Deletion: To request deletion of Personal Data collected from you, subject to legal, contractual, and operational exceptions (e.g., to comply with law, maintain records, or complete transactions).
• Right to Correction: To request correction of inaccurate Personal Data that we maintain about you.
• Right to Data Portability: To receive certain Personal Data in a portable and, where technically feasible, readily usable format.
• Right to Restrict Processing of Sensitive Data: In some states, to limit certain uses or disclosures of sensitive data, including precise geolocation, biometric identifiers, health data, and children’s data.

• Right to Opt Out of Certain Processing: You may opt out of certain processing activities, including the sale of Personal Data, targeted advertising, and profiling used to make decisions that produce legal or similarly significant effects. Corin does not sell Personal Data or share Personal Data for cross-context behavioral advertising. Where applicable, you may have the right to opt-out of disclosures of Personal Data to third parties for targeted advertising purposes.

• Right to Non Discrimination: To not receive discriminatory treatment for exercising your privacy rights, such as being denied products or services or charged different prices solely because you exercised those rights.
• Right to Appeal: In several states (e.g., Virginia, Colorado, Connecticut, Indiana, Kentucky, Rhode Island), you have the right to appeal Corin’s decision, if we decline to act on your request.

If a state law grants additional rights beyond those listed above, Corin will honor those rights for residents of that state and update this Notice, as needed.

California residents are covered by this Notice, which incorporates all disclosures required by CCPA/CPRA. In particular, Corin provides California residents with information about:

• The categories of Personal Data we collect, the categories of sources, the business or commercial purposes for which Personal Data is collected, used, or disclosed, and the categories of third parties to whom we disclose Personal Data.
• The rights to know, access, delete, correct, and obtain a copy of Personal Data; to limit the use and disclosure of certain sensitive Personal Data; and to opt out of “sale” and “sharing” of Personal Data, as defined in CCPA/CPRA.
• The right to be free from discrimination for exercising CCPA/CPRA rights.

Corin does not sell Personal Data for monetary consideration and does not share Personal Data for cross context behavioral advertising.

California residents may exercise their CCPA/CPRA rights using the mechanisms described in the “Exercising Your Rights” section below, including our toll-free number and email address, which are designed to meet CCPA/CPRA requirements for submitting and verifying consumer requests.

Residents of Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Texas, Florida, Maryland, Minnesota, Montana, Oregon, Delaware, New Hampshire, New Jersey, Kentucky, Nebraska, Rhode Island, and other states with comprehensive privacy laws have rights similar to those described above, including opt-outs for targeted advertising and sale of Personal Data, and in many cases, appeal rights.

Where a particular state law imposes additional obligations, such as universal opt-out signals for targeted advertising and the sale of Personal Data (e.g., Colorado), heightened protections for minors (e.g., Maryland, Nebraska, Oregon), or special rules for automated decision making (e.g., Virginia, Minnesota, Texas), Corin will incorporate those requirements into its practices for residents of that state.

Exercising Your Rights

You may exercise your privacy rights by using the methods provided in the “Contact Information” section below.

You may also designate an authorized agent or representative to submit requests on your behalf, subject to any authentication or documentation requirements under applicable law (e.g., written authorization, proof of identity, or confirmation of agency).

When you submit a request, we will take steps to verify your identity, and, where applicable, the identity and authority of your representative consistent with state law requirements. This may include matching information you provide with data we maintain or requesting additional information if needed.

Corin aims to respond to verified requests within the timeframe required by applicable law (e.g., generally 45 days under CCPA/CPRA, with possible extension where permitted) and will inform you if we need additional time to respond.

If we decline to act on a request, where permitted by law (e.g., where an exception applies or the request is unfounded or excessive), we will provide our reasons, and where state law provides an appeal right, you may appeal by contacting us along with your state of residence and relevant details.

Corin will not discriminate against you for exercising any of your privacy rights under state privacy laws, including CCPA/CPRA, such as by denying products or services, charging different prices, or providing a different level of quality of service solely because you exercised those rights. Corin may, however, offer price or service differences that are reasonably related to the value of your Personal Data, as permitted under CCPA/CPRA and similar state laws (e.g., loyalty programs), and will explain such offerings in a clear, transparent manner, where they apply.

Changes to Our Notice

Corin periodically evaluates its privacy policies and procedures to implement improvements and refinements. Therefore, Corin reserves the right to modify or amend this Notice at any time and for any reason. When this Privacy Notice is amended, Corin will revise the “last updated” date at the bottom of this page.

Please review this Notice periodically and especially before you provide personally identifiable information to us. Your continued use of the Site after any changes to this Notice indicates your agreement with the terms of the revised Notice.

If you would like to receive a copy of this Notice in an alternate format or language, please contact us at DPO@coringroup.com.

Contact Information

If you have any questions or comments about this Notice, the ways in which Corin collects, uses and discloses your Personal Data as described above, your choices and rights regarding such use, or wish to exercise your rights under California law, please contact:

Email: DPO@coringroup.com

Address:           

Corin International Limited

The Corinium Centre, Cirencester

Gloucestershire, United Kingdom

Last Updated: September 2026