PRIVACY POLICY

Last Modified: Nov. 1, 2022

The Oklahoma Rural Water Association (“ORWA”) is committed to protecting your privacy and
safety rights while using ORWA’s website.

1. What This Privacy Policy Covers

This Privacy Policy discloses the privacy practices for the ORWA on its website and various
related services (together referred to as “The Website”). The ORWA, the provider of The
Website (referred to as “us” or “we”), is committed to protecting your privacy online. Please read
the information below to learn about your use of The Website.

This privacy policy does not apply to the practices of companies or third parties the ORWA does
not own or control or to people The ORWA does not employ or manage.

This privacy policy does not apply to the practices of our third-party website platform and
services provider, Rural Water Impact. This privacy policy does not address the use or
disclosure of information Rural Water Impact collects from you. Please contact them directly if
you have any questions about the information they collect and how they use that information.
You acknowledge this Privacy Policy is part of The Website Terms of Use, and by accessing or
using The Website, you agree to be bound by all of its terms and conditions. If you do not agree
to these terms, please do not access or use The Website.

We reserve the right to change this Privacy Policy at any time. Such changes, modifications,
additions or deletions shall be effective immediately upon notice thereof, which may be given by
means including, but not limited to issuing an email to the email address listed by registered
users and posting the revised Policy on this page. You acknowledge and agree it is your
responsibility to maintain a valid email address as a registered user, review The Website and
this Policy periodically and to be aware of any modifications. Your continued use of The Website
after such modifications will constitute your: (a) acknowledgment of the modified Policy; and (b)
agreement to abide and be bound by the modified Policy.

2. Types of Information Collected

We collect two types of information about our users: Personally Identifiable Information and
Nonpersonally Identifiable Information. Our primary goal in collecting information from you is to
provide you with a smooth, efficient, and customized experience while using The Website.
Personally Identifiable Information: This refers to information that lets us know the specifics
of who you are. When you engage in certain activities on The Website, such as registering for a
membership, ordering a product or service, submitting content and/or posting content in
discussion forums or other public areas, entering a contest or sweepstakes, filling out a survey,
or sending us feedback, we may ask you to provide certain information about yourself by filling
out and submitting an online form. It is completely optional for you to engage in these activities.
If you elect to engage in these activities, however, we may ask that you provide us personal
information, such as your first and last name, mailing address (including zip code), email
address, employer, job title and department, telephone and facsimile numbers, and other

personal identifying information. When ordering products or services on The Website, you may
be asked to provide a credit card number. Depending upon the activity, some of the information
we ask you to provide is identified as mandatory and some as voluntary. If you do not provide
the mandatory data with respect to a particular activity, you will not be able to engage in that
activity.

Nonpersonally Identifiable Information: This refers to information that does not by itself
identify a specific individual. We gather certain information about you based upon where you
visit on The Website in several ways. This information is compiled and analyzed on both a
personal and an aggregated basis. We may collect, use, transfer, and disclose nonpersonal
information for any lawful purpose.

This information may include the Web site’s Uniform Resource Locator (“URL”) that you just
came from, which URL you next go to, what browser you are using, and your Internet Protocol
(“IP”) address. A URL is the global address of documents and other resources on the World
Wide Web. An IP address is an identifier for a computer or device on a Transmission Control
Protocol/Internet Protocol (“TCP/IP”) network, such as the World Wide Web. Networks like the
Web use the TCP/IP protocol to route information based on the IP address of the destination. In
other words, an IP address is a number that is automatically assigned to your computer
whenever you are surfing the web, allowing web servers to locate and identify your computer.
Computers require IP addresses in order for users to communicate on the Internet.

3. Collection Methods and Use of Information

We do not collect any Personally Identifiable Information about you unless you voluntarily
provide it to us. You provide certain Personally Identifiable Information to us when you use The
Website. This information includes your name, organization, title, postal address, e-mail
address, telephone number, fax number, social media account ID, credit or debit card number
and other information including but not limited to dietary preferences, interests, opinions,
activities, age, gender, education, occupation and photographs shared via The Website
including any geographical information connected to the photo.

In addition, we may also collect, or our third-party ad server and/or content server may collect,
certain Nonpersonally Identifiable Information. This information is ultimately stored in the form of
store categories, and, in some cases, specific URLs. We use your IP address to diagnose
problems with our servers, software, to administer The Website and to gather demographic
information. Our third-party ad servers will also provide us with summary, but not individual,
reports that will tell us how many ads were presented and clicked upon The Website.

We will primarily use your Personally Identifiable Information to provide our services to you, as
required by our agreements with you. We will also use Personally Identifiable Information to
enhance the operation of The Website, fill orders, improve our marketing and promotional
efforts, statistically analyze use, improve our product and service offerings, and customize The
Website’s content, layout, and services. We may use Personally Identifiable Information to
deliver information to you and contact you regarding administrative notices. We may also use
Personally Identifiable Information to resolve disputes, troubleshoot problems and enforce our
agreements with you, including The Website Terms of Use, Sales Terms and Conditions, and
this Privacy Policy.

Location information: When you use The Website’s services, we may collect information
about your location. With your permission, we may also collect information about your precise
location using methods that include GPS, wireless networks, mobile towers, Wi-Fi access point
and other sensors, such as gyroscopes, accelerometers and compasses.
As part of the License of User Content to The ORWA, as granted in the Terms and Conditions
of Use in paragraph 5, you allow The ORWA to use the necessary data. This data may include
personally identifiable information such as your name and occupation accompanying your
photo, caption, and geographical information, if connected to the photo. This data will never be
used to compromise your private personally identifiable information, such as postal address, e-
mail address, telephone number, fax number, social media account ID, credit or debit card
number, dietary preferences, interests, opinions, activities, age, gender, or education, unless
ascertainable by the photo.

Log Files

ORWA follows a standard procedure of using log files. These files log visitors when they visit
websites. All hosting companies do this and a part of hosting services’ analytics. The
information collected by log files include internet protocol (IP) addresses, browser type, Internet
Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of
clicks. These are not linked to any information that is personally identifiable. The purpose of the
information is for analyzing trends, administering the site, tracking users’ movement on the
website, and gathering demographic information.

Rural Water Passport

Your basic information (Name, Phone, Email and Address) will be encrypted and tokenized
using industry standard JSON Web Tokens and shared using OAuth 2.0 protocol as authorized
by you in a confirmation popup allowing 1-click/Single Sign-On (SSO), allowing you to easily
sign in to participating Rural Water Services Applications.

4. Release of Information

We do not sell, trade, or rent your Personally Identifiable Information to others. We do provide
some of our services through contractual arrangements with affiliates, services providers,
partners, and other third parties. We and our service partners use your Personally Identifiable
Information to operate The Website and to deliver its services. For example, we must release
your credit card information to the card-issuing bank to confirm payment for products and
services purchased on The Website; release your address information to the delivery service to
deliver products that you ordered; release information and photo(s) to a connected social media
account, if applicable; and provide order information to third parties that help us provide
customer service.

We will encourage our service partners to adopt and post privacy policies. However, the use of
your Personally Identifiable Information by our service partners is governed by the privacy
policies of those service partners and is not subject to our control.

Occasionally we may be required by law enforcement or judicial authorities to provide
Personally Identifiable Information to the appropriate governmental authorities. We will disclose
Personally Identifiable Information upon receipt of a court order, subpoena, or to cooperate with
a law enforcement investigation. We fully cooperate with law enforcement agencies in identifying
those who use our services for illegal activities. We reserve the right to report to law enforcement
agencies any activities that we, in good faith, believe to be unlawful.

We may also provide Nonpersonally Identifiable Information about our customers’ sales, traffic
patterns, and related Website information to third-party advertisers, but these statistics do not
include any Personally Identifiable Information.

5. Updating and Correcting Information

We believe you should have the ability to access and edit the Personally Identifiable Information
that you have provided to us. You may change any of your Personally Identifiable Information in
your account online at any time by linking to your account in accordance with instructions
posted elsewhere on The Website. You may also access and correct your personal information
and privacy preferences by writing us at:

ORWA
1410 SE 15th St.
Oklahoma City, OK 73129

Please include your name, address, and/or email address when you contact us.
We encourage you to promptly update your Personally Identifiable Information if it changes. You
may ask to have the information on your account deleted or removed; however, because we
keep track of past transactions, you cannot delete information associated with past transactions
on The Website. In addition, it may be impossible to completely delete your information without
some residual information because of backups.

6. User Choices on Collection and Use of Information

We may, from time to time, send you emails regarding our products and services. In addition, if
you indicated upon registration that you are interested in receiving offers or information from us
and our partners, we may occasionally send you direct mail about products and services that we
feel may be of interest to you. Only The ORWA (or agents working on behalf of The ORWA and
under confidentiality agreements) will send you these direct mailings and only if you indicated
that you do not object to these offers. If you do not want to receive such mailings, simply tell us
when you give us your personal information. Or, at any time you can easily edit your account
information to no longer receive such offers and mailings.
You also have choices with respect to cookies, as described below. By modifying your browser
preferences, you have the choice to accept all cookies, to be notified when a cookie is set, or to
reject all cookies. If you choose to reject all cookies some parts of The Website may not work
properly in your case.

7. Security of Information

On The Website, you can be assured that your Personally Identifiable Information is secure and
consistent with current industry standards. The importance of security for all Personally
Identifiable Information associated with our user is of utmost concern to us. Your Personally
Identifiable Information is protected in several ways. Access by you to your Personally
Identifiable Information is available through a password and unique customer ID selected by
you. This password is encrypted. We recommend that you do not divulge your password to
anyone. In addition, your Personally Identifiable Information resides on a secure server that only
selected ORWA personnel and contractors have access to via password. We encrypt your

Personally Identifiable Information and thereby prevent unauthorized parties from viewing such
information when it is transmitted to us.
Personal information that you provide that is not Personally Identifiable Information also resides
on a secure server and is only accessible via password. Since this information is not accessible
from outside ORWA, you will not be asked to select a password in order to view or modify such
information.
In order to most efficiently serve you, credit card transactions and order fulfillment are handled
by established third party banking, processing agents and distribution institutions. They receive
the information needed to verify and authorize your credit card or other payment information and
to process and ship your order.
Unfortunately, no data transmission over the Internet or any wireless network can be
guaranteed to be 100% secure. As a result, while we strive to protect your Personally
Identifiable Information, you acknowledge that: (a) there are security and privacy limitations of
the Internet which are beyond our control; (b) the security, integrity and privacy of any and all
information and data exchanged between you and us through The Website cannot be
guaranteed; and (c) any such information and data may be viewed or tampered with in transit by
a third party.

8. Cookies and Web Beacons

When you use The Website we will store cookies or similar automatic data collection
technologies on your computer or mobile device in order to facilitate and customize your use of
The Website. A cookie is a small data text file, which a Web site stores on your computer's hard
drive (if your Web browser permits) that can later be retrieved to identify you to us. Our cookies
store randomly assigned user identification numbers, the country where you are located, and
your first name to welcome you back to The Website. The cookies make your use of The
Website easier, The Website run more smoothly and help us to maintain a secure website. You
are always free to decline our cookies if your browser permits, but some parts of The Website
may not work properly in that case.

We may use an outside ad serving company to display banner advertisements on The Website.
As part of their service, they will place a separate cookie on your computer. We will not provide
any third-party ad server with any of your Personally Identifiable Information or information
about your purchases. We and our third-party ad server will collect and use Nonpersonally
Identifiable Information about you, such as your IP address, browser type, the server your
computer is logged onto, the area code and zip code associated with your server and whether
you responded to a particular ad. Other advertisers may also place banner ads on The Website
in the same manner as above, but we will not disclose any Personally Identifiable Information to
them.

9. Privacy Policies of Third-Parties

Except as otherwise discussed in this Privacy Policy, this document only addresses the use and
disclosure of information we collect from you. Other sites and Apps accessible through The
Website have their own privacy policies and data collection, use and disclosure practices. Our
third-party mobile platform and services provider, Rural Water Impact, has its own privacy
policies and data collection use and disclosure practices.

Please consult each site/App’s privacy policy. We are not responsible for the policies or
practices of third parties. Additionally, other companies which place advertising on The Website
may collect information about you when you view or click on their advertising through the use of
cookies. We cannot control this collection of information. You should contact these advertisers
directly if you have any questions about their use of the information that they collect.

10. Miscellaneous Privacy Issues

You must be at least 18-years-old to have our permission to use The Website. Our policy is that
we do not knowingly collect, use or disclose Personally Identifiable Information about visitors
that are under 18 years of age.

You should also be aware that when Personally Identifiable Information is voluntarily disclosed
(i.e. your name, email address, etc.) in the discussion forums or other public areas on this site,
that information, along with any information disclosed in your communication, can be collected
and used by third parties and may result in unsolicited messages from third parties. Such
activities are beyond our control and this Policy does not apply to such information. Any
submissions to chat rooms or other public areas on The Website are accepted with the
understanding that they are accessible to all third parties. If you do not want your comments to
be viewed by third parties, you are advised not to make any submissions. Ultimately, you are
solely responsible for maintaining the secrecy of your password and/or account information.
Please be careful and responsible whenever you’re online.

If you have any questions about this Privacy Policy, the practices of The Website, or your
dealings with The Website, please contact us by sending a letter to:

The ORWA
Attn: Privacy Compliance Officer
1410 SE 15th St.
Oklahoma City, OK 73129

You may also contact us by email at ccordell@orwa.org..

11. For California Users

The California Civil Code requires a business with whom a California resident has an
established business relationship to disclose to such residents, upon their request: (1) the types
of personal information the business shares with third parties for the third party’s marketing
purposes, and (2) the identities of the third parties with whom the business has shared this
information during the immediately preceding calendar year.

If you are a California resident, and would like to make such a request, please submit your
request via email to ccordell@orwa.org.