AU ENERGY, LLC GROUP PRIVACY POLICY

Category of Personal Information

Identifiers Examples: real name; alias; postal address; telephone numbers; unique personal identifier; online identifier; Internet Protocol Address; email address; account name, social security number, driver’s license number, passport number and other similar identifiers.

Categories of Sources of Information

Directly from consumers (online or offline) Information collected through the use of our Services (e.g., through cookies or our App) Social Media Companies

Business/Commercial Purposes for Collection

Verify your identityProcess payments for goods or servicesProvide, support, personalize, and develop our websites, products, and ServicesProcess and fulfill a request or other transaction submitted to usTo complete contracts as well as any disclosures or other documents required by lawTo create, maintain, customize, enroll in, register for, and secure your customer account or loyalty program accountAdminister and support participation in loyalty programs, sweepstakes, events, special offers, special pricing, discounts, and promotionsCommunicate with you (e.g., for customer service purposes)Marketing and advertising our products and ServicesResearch and analytical purposes (e.g., identifying trends and effectiveness of marketing campaigns) For our business operations (e.g., auditing and reporting)Comply with our legal obligations Promote safety, integrity and security, including to prevent fraudAssist us with legal claims, compliance, regulatory and investigative purposes as necessary (including in connection with law enforcement investigations, legal process, or litigation)Protecting our legitimate business interests and legal rights

Categories of Third Parties with Whom Information Was Shared

Services Providers (including DMS Companies, Marketing Companies, Computer Software Companies, Professional Service Firms, Website and Application Development Companies, Information Technology Services Companies, Data Storage Companies, Data Analytics Companies, and Management Companies); Government Agencies; and Authorized Third Parties.

Category of Personal Information

Any categories of personal information described in subdivision (e) of Section 1798.80 Examples: name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information.

Categories of Sources of Information

Directly from consumers (online or offline) Information collected through the use of our Services (e.g., through cookies or our App) Social Media Companies

Business/Commercial Purposes for Collection

Verify your identityProcess payments for goods or servicesTo provide, support, personalize, and develop our websites, products, and ServicesProcess and fulfill a request or other transaction submitted to usTo complete contracts as well as any disclosures or other documents required by lawTo create, maintain, customize, enroll in, register for, and secure your customer account or loyalty program accountAdminister and support participation in loyalty programs, sweepstakes, events, special offers, special pricing, discounts, and promotionsCommunicate with you (e.g., for customer service purposes)Marketing and advertising our products and ServicesResearch and analytical purposes (e.g., identifying trends and effectiveness of marketing campaigns) For our business operations (e.g., auditing and reporting)Comply with our legal obligations Promote safety, integrity and security, including to prevent fraudAssist us with legal claims, compliance, regulatory and investigative purposes as necessary (including in connection with law enforcement investigations, legal process, or litigation)Protecting our legitimate business interests and legal rights

Categories of Third Parties with Whom Information Was Shared

Services Providers (including DMS Companies, Marketing Companies, Computer Software Companies, Professional Service Firms, Website and Application Development Companies, Information Technology Services Companies, Data Storage Companies, Data Analytics Companies, and Management Companies); Government Agencies; and Authorized Third Parties.

Category of Personal Information

Characteristics of protected classifications under California or federal law Examples: age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information)

Categories of Sources of Information

Directly from consumers (online or offline) Information collected through the use of our Services (e.g., through cookies or our App) Social Media Companies

Business/Commercial Purposes for Collection

Verify your identityTo provide, support, personalize, and develop our websites, products, and ServicesProcess and fulfill a request or other transaction submitted to usTo complete contracts as well as any disclosures or other documents required by lawTo create, maintain, customize, enroll in, register for, and secure your customer account or loyalty program accountAdminister and support participation in loyalty programs, sweepstakes, events, special offers, special pricing, discounts, and promotions Communicate with you (e.g., for customer service purposes)Marketing and advertising our products and ServicesResearch and analytical purposes (e.g., identifying trends and effectiveness of marketing campaigns) For our business operations (e.g., auditing and reporting)Comply with our legal obligations Promote safety, integrity and security, including to prevent fraudAssist us with legal claims, compliance, regulatory and investigative purposes as necessary (including in connection with law enforcement investigations, legal process, or litigation)Protecting our legitimate business interests and legal rights

Categories of Third Parties with Whom Information Was Shared

Services Providers (including DMS Companies, Marketing Companies, Computer Software Companies, Professional Service Firms, Website and Application Development Companies, Information Technology Services Companies, Data Storage Companies, Data Analytics Companies, and Management Companies); Government Agencies; and Authorized Third Parties.

Category of Personal Information

Commercial Information Examples: records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies

Categories of Sources of Information

Directly from consumers (online or offline) Information collected through the use of our Services (e.g., through cookies or our App) Social Media Companies

Business/Commercial Purposes for Collection

Process payments for goods or servicesTo provide, support, personalize, and develop our websites, products, and ServicesProcess and fulfill a request or other transaction submitted to usTo complete contracts as well as any disclosures or other documents required by lawTo create, maintain, customize, enroll in, register for, and secure your customer account or loyalty program accountAdminister and support participation in loyalty programs, sweepstakes, events, special offers, special pricing, discounts, and promotionsCommunicate with you (e.g., for customer service purposes)Marketing and advertising our products and ServicesResearch and analytical purposes (e.g., identifying trends and effectiveness of marketing campaigns) For our business operations (e.g., auditing and reporting)Comply with our legal obligations Promote safety, integrity and security, including to prevent fraudAssist us with legal claims, compliance, regulatory and investigative purposes as necessary (including in connection with law enforcement investigations, legal process, or litigation)Protecting our legitimate business interests and legal rights

Categories of Third Parties with Whom Information Was Shared

Services Providers (including DMS Companies, Marketing Companies, Computer Software Companies, Professional Service Firms, Website and Application Development Companies, Information Technology Services Companies, Data Storage Companies, Data Analytics Companies, and Management Companies); Government Agencies; and Authorized Third Parties.

Category of Personal Information

Internet or other electronic network activity information Examples: browsing history; search history; and information regarding a consumer’s interaction with an internet website, application, or advertisement.

Categories of Sources of Information

Directly from consumers (online or offline) Information collected through the use of our Services (e.g., through cookies or our App) Social Media Companies

Business/Commercial Purposes for Collection

To provide, support, personalize, and develop our websites, products, and ServicesProcess and fulfill a request or other transaction submitted to usTo complete contracts as well as any disclosures or other documents required by lawTo create, maintain, customize, enroll in, register for, and secure your customer account or loyalty program accountAdminister and support participation in loyalty programs, sweepstakes, events, special offers, special pricing, discounts, and promotionsMarketing and advertising our products and ServicesResearch and analytical purposes (e.g., identifying trends and effectiveness of marketing campaigns) For our business operations (e.g., auditing and reporting)Comply with our legal obligations Promote safety, integrity and security, including to prevent fraudAssist us with legal claims, compliance, regulatory and investigative purposes as necessary (including in connection with law enforcement investigations, legal process, or litigation)Protecting our legitimate business interests and legal rights

Categories of Third Parties with Whom Information Was Shared

Service Providers (including Computer Software Companies, Website and Application Development Companies, Information Technology Services Companies, Data Storage Companies, and Data Analytics Companies)

Category of Personal Information

Geolocation data Examples: the geographic location (latitude and longitude) of an internet-connected device such as a cell phone, tablet or computer or any other device connected to the internet and used to visit our websites or use our applications.

Categories of Sources of Information

Information collected through the use of our Services (e.g., through cookies or our App)

Business/Commercial Purposes for Collection

To provide, support, personalize, and develop our websites, products, and ServicesTo assist you in locating gas stations and to provide the price of gasoline at the stations near youProcess and fulfill a request or other transaction submitted to usTo create, maintain, customize, enroll in, register for, and secure your customer account or loyalty program accountAdminister and support participation in loyalty programs, sweepstakes, events, special offers, special pricing, discounts, and promotionsMarketing and advertising our products and ServicesResearch and analytical purposes (e.g., identifying trends and effectiveness of marketing campaigns) For our business operations (e.g., auditing and reporting)Promote safety, integrity and security, including to prevent fraudAssist us with legal claims, compliance, regulatory and investigative purposes as necessary (including in connection with law enforcement investigations, legal process, or litigation)Protecting our legitimate business interests and legal rights

Categories of Third Parties with Whom Information Was Shared

Service Providers (including Computer Software Companies, Website and Application Development Companies, Information Technology Services Companies, Data Storage Companies, and Data Analytics Companies)

Category of Personal Information

Audio, electronic visual, thermal, olfactory of similar information Examples: information from voicemail messages and/or recorded phone calls, and video surveillance at our stores

Categories of Sources of Information

Directly from consumers (online or offline) Automatically when you visit our stores or call our customer service line

Business/Commercial Purposes for Collection

Verify your identityTo provide, support, personalize, and develop our websites, products, and ServicesAdminister and support participation in loyalty programs, sweepstakes, events, special offers, special pricing, discounts, and promotionsCommunicate with you (e.g., for customer service purposes)For our business operations (e.g., auditing and reporting)Comply with our legal obligations Promote safety, integrity and security, including to prevent fraudAssist us with legal claims, compliance, regulatory and investigative purposes as necessary (including in connection with law enforcement investigations, legal process, or litigation)Protecting our legitimate business interests and legal rights

Categories of Third Parties with Whom Information Was Shared

Services Providers (including DMS Companies, Marketing Companies, Computer Software Companies, Professional Service Firms, Website and Application Development Companies, Information Technology Services Companies, Data Storage Companies, Data Analytics Companies, and Management Companies); and Government Agencies

Category of Personal Information

Inferences drawn from other personal information Examples: information used to create a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Categories of Sources of Information

Directly from consumers (online or offline) Information collected through the use of our Services (e.g., through cookies or our App) Social Media Companies

Business/Commercial Purposes for Collection

Verify your identityTo provide, support, personalize, and develop our websites, products, and ServicesTo create, maintain, customize, enroll in, register for, and secure your customer account or loyalty program accountMarketing and advertising our products and ServicesResearch and analytical purposes (e.g., identifying trends and effectiveness of marketing campaigns) For our business operations (e.g., auditing and reporting)Promote safety, integrity and security, including to prevent fraudAssist us with legal claims, compliance, regulatory and investigative purposes as necessary (including in connection with law enforcement investigations, legal process, or litigation)Protecting our legitimate business interests and legal rights Services Providers (including DMS Companies, Marketing Companies, Computer Software Companies, Professional Service Firms, Website and Application Development Companies, Information Technology Services Companies, Data Storage Companies, Data Analytics Companies, and Management Companies); Government Agencies; and Authorized Third Parties.

Categories of Third Parties with Whom Information Was Shared

Services Providers (including DMS Companies, Marketing Companies, Computer Software Companies, Professional Service Firms, Website and Application Development Companies, Information Technology Services Companies, Data Storage Companies, Data Analytics Companies, and Management Companies); Government Agencies; and Authorized Third Parties.