Effective Date: October 23, 2025

This Privacy Policy applies to any users of Knox Company's website at knoxbox.com and all other online virtual properties we own or maintain, including without limitation websites and webpages, mobile applications, social media channels, and our KnoxConnect^® Management System (collectively, our "Site"). In this Privacy Policy we explain the privacy and data security principles we follow regarding your personal information. This Privacy Policy will help you understand how we collect and use the personal information we obtain about you, and it explains choices available to you and your rights regarding, among other things, the use, access, correction and deletion of that personal information.

This Privacy Policy does not apply to third-party websites, or products or services provided by third parties, even if they link to our Site, and you should consider the privacy practices of those third parties carefully. By using our Site, products and related services, you authorize the collection, use, storage, sharing, and disclosure of your information as described in this Privacy Policy and any applicable updates. If you do not agree with the data practices described in this Privacy Policy, you should not use our Site, products or related services (collectively, the "Services").

For purposes of this Privacy Policy, "Knox," "Company," "we," "us" and "our" refer to Knox Company. "You" and "your" refers to you, as a visitor or user of the Site and as a Knox customer.

Information Collection

Knox collects personal and non-personal information from you in various ways as described below.

What Personal Information is Collected

When using our Site and our product you may be asked to, or will automatically provide, personal information such as:

Name and/or business name
Home address and/or business address
Home, business, and/or mobile phone numbers
Email address
Credit, debit, or other payment method information
Social security number
Emergency contact information
Sales tax exemption certificates
Personal security or system code

Personal Information We Collect From You

In many cases, you give personal information to us directly such as when:

Registering for our Knox Rapid Access Program
Registering and the KnoxConnect^® Management System
Purchasing and activating our products
Using our mobile applications
Submitting your debit, credit card or other payment information
Submitting a paper form or transmitting information to us online or over the telephone
Speaking to our sales representatives to discuss product options, or our customer service center (some of which conversations may be recorded to ensure quality of our products and services and to maintain a record of our communications with you)
Subscribing to our newsletter
Responding to a survey or filling out a form
Providing us with feedback on our products or services

Personal Information We Collect Automatically

We may also automatically collect personal information from you and your devices when you use our Services, including when you visit our Site. For choices you may have on what information we automatically collect see Tracking Tools, Advertising, and Opt-Out of this Privacy Notice.

We collect personal information about how you use our Services and the devices (e.g. computers, mobile phones, etc.) you use to access our Services and Site. This may include, but is not limited to the following:

Through Cookies (defined in the "Tracking Tools, Ads, Advertising and Opt-Out" section below).
If you visit or use our Website, we may receive information about your location via your IP address, and may receive and collect information transmitted from your computing device for the purpose of providing you the relevant Services, such as information regarding when you are logged on and available to receive updates or alert notices. Like most websites, our Site automatically collects and uses the data contained in log files. Information in log files may include your computer’s IP address, your ISP, the web browser you used to visit our Site, the time you visited, which web pages you visited, and other anonymous Site usage data. Every computer with internet capability is given a number that serves as that computer’s IP address. When you request a page from our Site, our web servers automatically recognize your IP address. The domain name and IP address reveal nothing personal about you other than the IP address from which you have accessed our Site.
Third Parties Information from third party services. From time to time, we may receive personal information about you from third party sources (e.g. sales and marketing database and data enrichment platforms), but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us. The types of information we collect from third parties include account and/or contact information and we use the information we receive from these third parties to, including but not limited to, market and sell to you, and/or maintain and improve the accuracy of the records we hold about you, etc.

If you are using our mobile application, we may also receive unique device identifiers and other information about your mobile device(s) and mobile operating systems. We may request permission to collect certain information from or about you, for example, if you use any Knox mobile application, we may request permission to access and store your location from the mobile devices used to access the Site.

Disclosure of Personal Information We Collect

We may use your personal information to the following categories of recipients:

Service Providers
These parties help us provide the Services or perform business functions on our behalf. They include:
- Hosting, technology and communication providers.
- Security and fraud prevention consultants.
- Support and customer service vendors.
- Product fulfillment and delivery providers.
- Payment processors.
  - Our credit card payment processing partner Versapay collects your voluntarily-provided payment card information necessary to process your payment.
  - Please see https://www.versapay.com/terms-of-use terms of service and https://www.versapay.com/privacy-policy privacy policy for information on its use and storage of your personal information.

Advertising Partners
These parties help us market our services and provide you with other offers that may be of interest to you. They include:
- Ad networks.
- Data brokers.
- Marketing providers.

Analytics Partners
These parties provide analytics on web traffic or usage of the Services. They include:
- Companies that track how users found or were referred to the Services.
- Companies that track how users interact with the Services.

Business Partners
These parties partner with us in offering various services. They include:
- Businesses that you have a relationship with.
- Companies that we partner with to offer joint promotional offers or opportunities.

Parties You Authorize, Access or Authenticate
- Third parties you access through the services.
- Social media services.
- Other users.

In addition, we may disclose information about you for the following purposes:

Legal Obligations

We may share any personal information that we collect with third parties in conjunction with any of the activities set forth under "Meeting Legal Requirements and Enforcing Legal Terms" in the "Our Commercial or Business Purposes for Collecting personal information" section above.

Business Transfers

All of your personal information that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy or other transaction in which that third party assumes control of our business (in whole or in part). Should one of these events occur, we will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies and practices.

Data that is Not Personal Information

We may create aggregated, de-identified or anonymized data from the personal information we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymized data and share it with third parties for our lawful business purposes, including to analyze, build and improve the Services and promote our business, provided that we will not share such data in a manner that could identify you.

Our Commercial or Business Purposes for Collecting or Disclosing Personal Information

This section describes how we may use your Personal Information:

Providing, Customizing and Improving the Services
- Creating and managing your account or other user profiles.
- Processing orders or other transactions; billing.
- Providing you with the products, services or information you request.
- Meeting or fulfilling the reason you provided the information to us.
- Providing support and assistance for the Services.
- Improving the Services, including testing, research, internal analytics and product development.
- Personalizing the Services, website content and communications based on your preferences.
- Doing fraud protection, security and debugging.
- Carrying out other business purposes stated when collecting your personal information or as otherwise set forth in applicable data privacy laws, such as the California Consumer Privacy Act as amended by the California Privacy Rights Act of 2020 (the "CCPA").

Marketing the Services
- Marketing and selling the Services.
- Showing you advertisements, including interest-based or online behavioral advertising.

Corresponding with You
- Responding to correspondence that we receive from you, contacting you when necessary or requested, and sending you information about Split or our Services.
- Sending emails and other communications according to your preferences or that display content that we think will interest you.

Meeting Legal Requirements and Enforcing Legal Terms
- Fulfilling our legal obligations under applicable law, regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities.
- Protecting the rights, property or safety of you, Split or another party.
- Enforcing any agreements with you.
- Responding to claims that any posting or other content violates third-party rights.
- Resolving disputes.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated or incompatible purposes without providing you notice.

Tracking Tools, Advertising, and Opt-Out

As mentioned above, we use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, "Cookies") to enable our servers to recognize your web browser, tell us how and when you visit and use our Services, analyze trends, learn about our user base and operate and improve our Services. Cookies are small pieces of data– usually text files – placed on your computer, tablet, phone or similar device when you use that device to access our Services. You can decide whether or not to accept Cookies through your internet browser's settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You can also delete all Cookies that are already on your device. If you do this, however, you may have to manually adjust some preferences every time you visit our website and some of the Services and functionalities may not work. To explore what Cookie settings are available to you, or to modify your preferences with respect to Cookies, you can access your Cookie management settings by contacting us via Email at info@knoxbox.com. To find out more information about Cookies generally, including information about how to manage and delete Cookies, please visit http://www.allaboutcookies.org/.

We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own Cookies on your device(s). Please note that your browser may offer you a "Do Not Track" option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities over time and across different websites. We do not support Do Not Track requests at this time. To find out more about "Do Not Track," you can visit www.allaboutdnt.com.

Information about Interest-Based Advertisements

You may see advertisements for our Services on third party websites. These advertisements may be targeted to users who fit certain general profile categories or display certain preferences or behaviors ("Interest-Based Ads"). Information for Interest-Based Ads (including personal information) may be provided to us or third-parties by you, or derived from the usage patterns of particular users on the Services and/or services of third parties. Such information may be gathered through tracking users' activities across time and unaffiliated properties, including when you leave the Services. To accomplish this, we or our service providers may deliver Cookies, including a file (known as a "web beacon") from an ad network to you through the Services. Web beacons allow ad networks to provide anonymized, aggregated auditing, research and reporting for us and for advertisers. Web beacons also enable ad networks to serve targeted advertisements to you when you visit other websites. Web beacons allow ad networks to view, edit or set their own Cookies on your browser, just as if you had requested a web page from their site. Most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit https://www.aboutads.info/choices/. You may also opt out of behaviorally targeted ads by clicking here: https://preferences.truste.com/. Please note this does not opt you out of being served advertising. You will continue to receive generic advertisements.

Notice to California Residents

In addition to the other information and rights described in this Privacy Policy, California residents are also entitled to certain additional information and have certain additional rights under the California Consumer Privacy Act ("CCPA") with respect to their personal information. If you are a resident of California (a "Consumer" as defined by the CCPA), this section of the Privacy Policy applies to you.

Please note this section does not apply to information we collect for job applicants, employees, or contractors. If you are a job applicant, employee, or contractor, please contact info@knoxbox.com for more information about your privacy rights.

Information We Collect and How We Use and Disclose It

Below is a summary of the categories of personal information – including sensitive personal information – that we have collected in the past 12 months, as well as the purposes for which we use the information and the categories of third parties to whom we disclose or "sell/share" the information.

Categories of Personal Information	Purpose of Use (as set forth in detail above)	Categories of Parties to Whom Data is Disclosed for Business Purposes
Identifiers (e.g., name, email address, physical address, phone number, electronic signature, device identifiers)	Providing, Customizing and Improving the Services Marketing the Services Corresponding with You Meeting Legal Requirements and Enforcing Legal Terms	Service providers Payment processors Entities for legal and security purposes Entities for sales or transfer of business or assets Others with your consent
Commercial information, including financial or payment information and transaction information	Providing, Customizing and Improving the Services Marketing the Services Corresponding with You Meeting Legal Requirements and Enforcing Legal Terms	Service providers Payment processors Affiliates Entities for legal and security purposes Entities for sales or transfer of business or assets Other parties to the transaction (transaction history information
Customer service information (e.g., questions and other messages you address to us directly through online forms, by email, over the phone, or by post)	Providing, Customizing and Improving the Services Marketing the Services Corresponding with You Meeting Legal Requirements and Enforcing Legal Terms	Service providers Payment processors Entities for legal and security purposes Entities for sales or transfer of business or assets Other parties to the transaction (transaction history information only
Internet or other electronic network activity information (e.g., IP address, device identifiers, and device attributes, cookie IDs, data about how you interact with the Services)	Providing, Customizing and Improving the Services Marketing the Services Meeting Legal Requirements and Enforcing Legal Terms	Service providers Entities for legal and security purposes Entities for sales or transfer of business or assets Others with your consent
Geolocation data, including your approximate location based on IP address (non-specific) or wifi triangulation or precise GPS location with your consent and consistent with your device settings	Providing, Customizing and Improving the Services Marketing the Services Meeting Legal Requirements and Enforcing Legal Terms	Service providers Entities for legal and security purposes Entities for sales or transfer of business or assets Others with your consent
Information about others, such as if you submit information about other parties to a transaction (including emergency contacts)	Providing, Customizing and Improving the Services	Service providers Entities for legal and security purposes Entities for sales or transfer of business or assets Others with your consent
Sensory Information, audio recordings of customer service center conversations	Providing, Customizing and Improving the Services Corresponding	Service providers
Inferences drawn from the above information	Providing, Customizing and Improving the Services Marketing the Services Meeting Legal Requirements and Enforcing Legal Terms	Service providers Entities for legal and security purposes Entities for sales or transfer of business or assets Others with your consent
Sensitive personal information: Social Security Number and username/password and credit card or financial account number	Providing, Customizing and Improving the Services Meeting Legal Requirements and Enforcing Legal Terms	Service providers, Payment processors (credit card and financial account number only), Others with your consent

The Right to Opt-Out of Sales/Sharing of Personal Information; Limit the Use of My Sensitive Personal Information

Consumers have the right to opt out of "sales" of their personal information or "sharing" of their personal information for cross-context behavioral advertising purposes under the CCPA. As explained in our Privacy Notice above, we may allow third-party advertising and marketing technologies and parties that support our advertising and marketing efforts (e.g., ad networks, ad measurement services, advertising analytics providers, remarketing providers, etc.) on our Services that use cookies and similar technologies to deliver relevant and targeted content and advertising to you on the Services and other websites you visit and applications you use. This type of information collection and disclosure can be considered to be a "sale" or "sharing" for cross-context behavioral advertising purposes under the CCPA.

If you would like to opt out of such "sales" or "processing" for targeted advertising purposes through cookies and similar online technologies, please click on the link in our website footer.

Please note that we do not knowingly sell the personal information of minors under 16 years of age.

We use Sensitive Personal Information only as permitted by the CCPA for essential business purposes, such as providing our services, ensuring security, and complying with legal obligations, Since we don't use this information for any other purposes, we don’t offer a separate option to limit its use.

Information Rights

Consumers have other rights with respect to their Personal Information under the CCPA. This includes the right to request that we:

Provide you the categories of personal information we have collected or disclosed about you in the last 12 months; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categories of third parties with whom we shared personal information.
Provide access to and/or a copy of specific pieces of information we hold about you.
Delete certain information we have about you.
Correct inaccurate personal information we have about you.

You may have the right to receive information about the financial incentives that we offer to you (if any). You have the right not to be discriminated against for exercising your CCPA rights. We will not deny, charge different prices for, or provide a different level of quality of goods or services with respect to Consumers who choose to exercise their CCPA rights.

Consumers may submit requests to access, delete, or correct their personal information using any of the following methods:

You may contact us via email at: info@knoxbox.com.
You may contact us by mail at the address indicated below.

For security purposes, we will attempt to verify your identity prior to fulfilling your request. If you have an account with us, we may verify your identity through your login to your account. If you do not have an account with us, we may need to respond to your request or otherwise contact you to request additional information from you to verify your identity (including, but not limited to your name, email address, or telephone number).

If we can verify your identity, we will respond to your request to the extent we are able to and as required by law. If we cannot verify your identity, we may request additional information from you or we may deny your request. If we are unable to fulfill your request in its entirety, we will provide further information to you about the reasons that we could not comply with your request.

Certain personal information may be exempt from such requests under applicable law. In addition, we need certain types of personal information so that we can provide the product and Services to you. If you ask us to delete it, you may no longer be able to access or use our product and Services.

Authorized Agents

Consumers may designate an agent to make CCPA requests on their behalf. For Consumers who do so, we will take steps to verify both the identity of the consumer seeking to exercise their rights as described above, and to verify that the consumer's agent has been authorized by them to make a request on their behalf by requesting a signed written authorization or a copy of a power of attorney.

"Shine the Light"

California residents may ask for a list of third parties that have received your personal information for direct marketing purposes during the previous calendar year. This list also contains the types of personal information shared. We provide this list at no cost. If you are a California resident and would like to request this information, please contact us via email at: mailto:info@knoxbox.com

Personal Information of Children

As noted, we do not knowingly collect or solicit personal information about children under 16 years of age; if you are a child under the age of 16, please do not attempt to register for or otherwise use the Services or send us any personal information. If we are informed that we have collected personal information from a child under 16 years of age, we will delete that information as quickly as possible. If you believe that a child under 16 years of age may have provided personal information to us, please contact us at mailto:info@knoxbox.com.

International Data Transfer

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.

Specifically, our Site servers are located in the United States and our third party service providers and partners operate around the world but with our data stored in the United States. The Services are hosted and operated in the United States ("U.S.") through Knox and its service providers, and if you do not reside in the U.S., laws in the U.S. may differ from the laws where you reside. By using the Services, you acknowledge that any personal information about you, regardless of whether provided by you or obtained from a third party, is being provided to us in the U.S. and will be hosted on U.S. servers, and you authorize us to transfer, store and process your information to and in the U.S., and possibly other countries. In some circumstances, your personal information may be transferred to the U.S. pursuant to a data processing agreement incorporating standard data protection clauses.

Data Security

We seek to protect your personal data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of personal information and how we are processing that data. You should also help protect your data by appropriately selecting and protecting your password and/or other sign-on mechanism; limiting access to your computer or device and browser; and signing off after you have finished accessing your account. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure.

Data Retention

We keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). Actual retention periods vary depending on particular services and products. We use the following criteria to determine retention periods:

As needed to provide our services and products (e.g., while you are still receiving services from us), and
As needed for auditing purposes, troubleshooting problems or to assist with investigations, enforcing our policies; and to comply with any legal requirements.

In addition, if any relevant legal claims are anticipated/brought, we may continue to retain your personal information for such additional periods as are necessary in connection with that claim. To the extent applicable or permitted by applicable law, we will after the above considerations, we will (a) permanently delete or destroy the relevant personal information, or (b) archive your personal information so that it is beyond use; or (c) anonymize the relevant personal information.

Updates to this Privacy Policy

Knox reserves the right to change this Privacy Policy from time to time. If we make changes, we notify you by revising the date at the top of the policy, and in some cases, we may provide additional notice (such as adding a statement to Site homepage or send you a notification). We will notify you regarding material changes as required by applicable law. We encourage you to periodically review this Privacy Policy to be informed how Knox is protecting your information. Your use of the Site after any changes will constitute acceptance by you of such changes.

Additional Information

This Privacy Policy is available in alternative formats upon request via at info@knoxbox.com

Contact

If you have any questions or concerns about this Privacy Policy, your rights, our use of your personal information, please contact us at info@knoxbox.com, or via mail:

www.knoxbox.com

1601 W. Deer Valley Road
Phoenix, AZ 85027
United States

Phone: 800-552-5669