WA State Transit Association 4/18/2023

collecting substantially new types of personal or financial information in a way that materially impacts how SRECTrade handles SRECTrade Participants’ data, SRECTrade may seek to amend this Privacy Policy with Participant. (g) Cookies. SRECTrade uses “Cookies” (small files placed on Participant’s hard drive) and similar technologies, including mobile application identifiers, to help SRECTrade recognize Participants across different Technologies; analyze SRECTrade website flow; cu stomize SRECTrade Technologies and content; measure promotional effectiveness; improve Participant experience; increase security; and more. Participants can control Cookies through web browser settings and other tools. However by using SRECTrade Technologi es Participant consents to the placement of Cookies and beacons in its web browser and HTML -based emails in accordance with this Privacy Policy. A few important things Participants should know about SRECTrade use of Cookies are that: • SRECTrade may offer ce rtain Technologies that are only available using Cookies; • SRECTrade uses Cookies to help identify Participant and maintain Participant’s sign -in status; • Most Cookies are “Session Cookies” that are automatically deleted from the hard drive at the session’s end; • Participant is free to decline Cookies if its web browser permits, although doing so may interfere with Participant’s use of some of Technologies, including Participant’s access to its SRECTrade account; • Participant may encounter third-party Cookies on sites that are not controlled by SRECTrade. (h) Information Collected from Participants’ Devices and Networks. When Participant visits or leaves SRECTrade.com, SRECTrade may receive the URL of the site from which Participant comes or the one to which Participant is directed as well as the internet protocol (“IP”) address of Participant’s company or the proxy server used to access the web, Participant’s computer operating system details, type of web browser, mobile device identification, operating system, and the name of Participant’s ISP or mobile carrier. SRECTrade may also receive location data passed to SRECTrade from a third-party service provider or GPS-enabled devices that Participant has set up, which SRECTrade may use to show Participant’s local infor mation and for fraud prevention and security purposes. Participant understands that most mobile devices have settings to disable the sharing of real-time location data, and that Participant should enable these settings if it does not wish to share this information with SRECTrade. (i) Social Media Widgets. A “Widget” is a stand -alone application used on SRECTrade sites to display information or to invite Participants to interact with Technologies in a variety of ways. These Widgets may collect Participant’s IP address, which page Participant is visiting on SRECTrade sites, and may set a Cookie to enable the feature to function properly. Participant understands that social media features and Widgets are hosted by a third party or directly on SRECTrade sites. Irr espective of host, Participant understands that these features are governed by the privacy policies of the company providing the feature. D.3 Use of Participant Data (a) SRECTrade collects personal and financial information to provide Participant with a safe, smooth, efficient, and customized experience. Participant understands, accepts, and consents that SRECTrade is authorized to use Participant’s personal and financial information in several ways. (b) General. SRECTrade is authorized to use Participant’s personal and financial information to: • Provide the Technologies and Services support requested by Participant; • Resolve disputes, collect Fees, and troubleshoot problems; • Enforce this Privacy Policy; • Customize, measure, and improve its Technologies and co ntent;