Privacy Policy:

Blackfish Companies provides services for use by our residential Clients, which are typically prospective and current renters of our apartments and homes. Our Clients use our websites for many purposes, such as applying for rental status, background and credit screening, lease execution, rent and fee payments, and all forms of communication regarding the above listed services.

If you have any questions or concerns about the data handling practices of how Blackfish Companies processes and stores your personal information, please contact our office directly.

Our website may contain links to other third-party websites. The information practices and content of such third-party websites are governed by their own privacy notices. We encourage you to review the privacy notices of such third-party websites to understand their information practices.

Blackfish Companies are committed to protecting individual privacy and maintaining the trust of our Clients, and visitors to our websites ("Visitors") (collectively, "you," "your"). It is important to us that we provide transparency regarding our collection, use, and disclosure of information that can be reasonably linked with you ("Personal Information").

To help us meet this commitment to you, we have created this Privacy Notice ("Privacy Notice"). This Privacy Notice governs data protection matters across the websites we control.

Please Note: This Privacy Notice only governs our processing of Personal Information in the United States.

Application of Policy:

This Privacy Notice describes how we use, share, and protect the Personal Information of Clients, Client Staff, and Visitors who visit the Blackfish Sites. It also describes the rights and choices regarding use, access to, and correction of Personal Information available.

What Information We Collect and Why

We and our service providers collect Personal Information in various ways, such as when you: enter into a transaction or contractual arrangement with us; provide us with your Personal Information via the Services; participate in our programs or activities (e.g., our contests, social media posts, specials); provide Personal Information at Property events; visit our facilities; contact our customer service; or make any inquiries and communications with us. More information is set out below. We also collect Personal Information from other sources, including publicly-accessible databases and joint marketing partners.

Personal data includes:

• Contact information: First and last name, email address, employer, phone number (work), physical address (work), job title.

• Marketing preferences and customer service interactions: Marketing preferences; responses to voluntary surveys.

• Operational data: Transactions, sales, purchases, uses, supplier information, credentials to online services and platforms, and electronic content produced by individuals using company systems (including online interactive and voice communications such as blog, chat, webcam use, and network sessions).

We will indicate which information is mandatory and must be provided in order for us to provide the requested Services to you at the point of collection. If you do not provide the information requested, we may not be able to provide the Services. If you disclose any Personal Information relating to other people, to us or to our service providers in connection with the Services, you represent that you have the authority to do so.

We also collect data through our websites, such as browser and device information, application usage data, information collected through cookies, pixel tags and other similar technologies, and IP addresses.

"Do Not Track" Notice: "Do Not Track" is a preference that you can set in your browser to let websites you visit know that you do not want them collecting certain information about you. Entrata does not currently respond to, or honor, Do Not Track signals or requests from your browser.

What Information We Collect and Why

We and our service providers collect Personal Information in various ways, such as when you: enter into a transaction or contractual arrangement with us; provide us with your Personal Information via the Services; participate in our programs or activities (e.g., our contests, social media posts, specials); provide Personal Information at Property events; visit our facilities; contact our customer service; or make any inquiries and communications with us. More information is set out below. We also collect Personal Information from other sources, including publicly-accessible databases and joint marketing partners.

Personal data includes:

• Contact information: First and last name, email address, employer, phone number (work), physical address (work), job title.

• Marketing preferences and customer service interactions: Marketing preferences; responses to voluntary surveys.

• Operational data: Transactions, sales, purchases, uses, supplier information, credentials to online services and platforms, and electronic content produced by individuals using company systems (including online interactive and voice communications such as blog, chat, webcam use, and network sessions).

We will indicate which information is mandatory and must be provided in order for us to provide the requested Services to you at the point of collection. If you do not provide the information requested, we may not be able to provide the Services. If you disclose any Personal Information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so.

We also collect data through our Entrata Sites, such as browser and device information, application usage data, information collected through cookies, pixel tags and other similar technologies, and IP addresses. We also use cookies and similar technologies on our Entrata Sites.

"Do Not Track" Notice: "Do Not Track" is a preference that you can set in your browser to let websites you visit know that you do not want them collecting certain information about you. Entrata does not currently respond to, or honor, Do Not Track signals or requests from your browser.

How We Disclose Personal Data

We will not disclose any Personal Information that we collect from you to any external parties except as indicated below:

• Our Affiliates. We may disclose Personal Information to any of our subsidiaries and affiliates within the Entrata corporate group. Specifically, if our Clients utilize our applicant screening service, we will share Personal Information with our subsidiary ResidentVerify, LLC. Additionally, if you utilize our renters insurance agent, we will share Personal Information with our subsidiary Homebody Insurance Agency, LLC . We do not share any SMS or other contact information of End Users with Entrata affiliates or subsidiaries. Any opt-in collected by Entrata is collected on behalf of the Client, and therefore the sharing of such opt-in or the underlying contact information is only done at the direction of Entrata's Client.

• Service Providers. We may disclose Personal Information to our service providers who perform certain services necessary to run our business (for example, data hosting and development, data analysis, customer service, auditing and other services), provided that these service providers have entered into legally binding agreements with us to protect the Personal Information shared, limit their use, retention, and disclosure of the Personal Information, and assist us with our compliance requirements.

• Legal Request. We may disclose Personal Information to comply with applicable law and our regulatory monitoring and reporting obligations (which may include laws outside your country of residence), to respond to requests from public and government authorities (which may include authorities outside your country of residence), to cooperate with law enforcement, or for other legal reasons.

• Business Transfer. We may disclose Personal Information to a third party in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Blackfish Companies’ assets, business, or stock, whether as a going concern or as part of bankruptcy, liquidation, receivership, or similar proceeding in which Personal Information held by Entrata are among the assets to be transferred.

• API Transfer. We may disclose Client Data, at the direction of our Clients, through API to third parties. All API transfers are governed by a separate agreement between our subsidiaries; Entrata and the third party requesting API access, and all data usage and processing is governed by our agreements with such third parties.

• Enforcement of Our or Others' Rights. We may disclose Personal Information to external parties the extent that this is necessary to enforce or protect our rights, privacy, safety or property, and/or that of our affiliates, you, or others, including enforcing our Terms of Use and any other agreements (such as for billing and collection purposes and fraud prevention).

Children

We do not knowingly collect Personal Information from children under the age of sixteen (18) without authorization by a holder of parental responsibility. If you believe that we may have collected Personal Information from or about a child under the age of sixteen (18), please send an email to marketing@blackfish-co.com with the subject line "Personal Information of a Minor."

How We Protect Your Personal Information

We seek to use commercially reasonable organizational, technical and administrative measures to protect Personal Information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the "Contact Us" section below.

Where we collect your payment card information, we will comply with all applicable Payment Card Industry Data Security Standards (PCI-DSS).

Retaining Your Personal Information

We retain personal information for as long as needed or permitted in light of the purpose(s) for which they were obtained and consistent with applicable law. The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide the use of our Platforms to you (for example, for as long as you have an account with us or keep using the Platforms);

• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or

• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

Choices Regarding Your Information

We give you choices regarding our use and disclosure of your Personal Information for marketing purposes. You may opt out from:

• Receiving marketing-related emails from us. If you no longer want to receive marketing related emails from us on a going-forward basis, you may opt out by following the "unsubscribe" option contained in any such email.

• Receiving other promotional text communications, like SMS. If you no longer want to receive marketing related texts, you may opt out by replying "STOP" to any message you may receive from us.

• You may initially opt out of receiving SMS text messages on our contact page of our website prior to submitting a communication request.

Keeping Your Information Updated

It is up to you to keep your Personal Information on our Services up to date. You can update your Personal Information by logging into your account. If you are unable to update your Personal Information, you can contact us in accordance with the "Contact Us" section below.

End Users should contact our relevant Client with which they have a primary relationship. If our Client is unable to assist the End User, we will endeavor to assist our Client with updating the End User’s information.

Information For California Consumers

In this section of the Privacy Policy, we provide supplemental information to California residents about our collection, use, disclosure and other processing of their Personal Information.

This section details which categories of Personal Information we collect and process, as well as which categories of Personal Information we disclose to third parties for our operational business purposes, including within the twelve (12) months preceding the date this Privacy Notice was last updated.

We do not sell Personal Information, and we do not share or otherwise process Personal Information for purposes of cross-context behavioral, as defined under applicable law. We have not engaged in such activities in the 12 months preceding the date this Privacy Policy was last updated. Without limiting the foregoing, we do not sell or share the Personal Information of minors under 18 years of age.

California consumers have the right to:

• Identifiers, such as name, address, IP address that can reasonably be linked or associated with a particular consumer or household, email address, account name, online identifiers.

• Disclosed to affiliates; service providers; contest sponsors; legal authorities; other parties in litigation for operational business purposes.

• Personal information as defined in the California customer records law, such as name, contact information; financial account number; employment insurance, and financial information.

• Disclosed to affiliates; service providers; contest sponsors; legal authorities; other parties in litigation for operational business purposes.

• Commercial Information, such as transaction, sales, information and purchase history, including purchases considered, consuming histories or tendencies, supplier information.

• Disclosed to affiliates; service providers; contest sponsors; legal authorities; other parties in litigation for operational business purposes.

• Biometric Information, such as voiceprints and faceprints.

• Disclosed to affiliates; service providers for operational business purposes.

• Internet or network activity information, such as interactions with our online properties or marketing communications.

• Disclosed to affiliates; service providers for operational business purposes.

• Audio/Video Data. Audio, electronic, visual, and similar information, such as call and video recordings.

• Disclosed to affiliates; service providers for operational business purposes.

• Employment Information. Professional or employment-related information, such as employer and job title.

• Disclosed to affiliates; service providers for operational business purposes.

• Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences, characteristics.

• Disclosed to affiliates; service providers for operational business purposes.

Individual Requests

Note: To the extent your request relates to information collected through the Platforms, please contact our Clients and review their privacy notices.

• Request disclosure of the categories and specific pieces of Personal Information that a business has collected about you;

• Request disclosure of the categories of sources from which a business has collected Personal Information about you;

• Disclosure of the business or commercial purpose(s) for which your Personal Information has been collected;

• Receive a list of the categories of third parties to which a business has disclosed your Personal Information;

• Request that a business delete any Personal Information that it has collected from you (subject to exceptions).

• Request that a business correct inaccuracies in your Personal Information.

• Not be discriminated against by a business (e.g. charged different rates, provided different levels of service, denied goods or services, or suggested any of the preceding) for exercising any of the individual rights granted above.

• Designate an authorized agent to exercise any of the individual rights granted above, on your behalf.

We will not unlawfully discriminate against you exercising your rights under California law. To exercise any of your rights as a California resident, you should contact our office directly at marketing@blackfish-co.com or contacting us in accordance with the "Contact Us" section below.

If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the same submission method noted in this section. Before complying with your request, we may need to verify that it is you that is making the request. To accomplish this, you (or your authorized agent) may be requested to (1) confirm specific pieces of Personal Information that we already know about you, or (2) provide us with appropriate identification depending on the sensitivity of the information requested. As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an authorized agent. In addition, we may require that you confirm that you provided the agent permission to submit the request. If you make a request to delete, we may ask you to confirm your request before we delete your Personal Information. California residents are limited to two requests for Personal Information per twelve-month period. In some instances, we may decline to honor your request where the law or right you are invoking does not apply or where an exception applies.

Blackfish Companies does not disclose Personal Information to third parties, except to its wholly owned subsidiaries, for their direct marketing purposes. California residents who wish to opt-out of the sharing on a go-forward basis may contact us in accordance with the "Contact Us" section below. California residents may request further information about our compliance with this law by emailing us at marketing@blackfish-co.com

Updates to This Privacy Notice

It is our policy to post any changes we make to our Privacy Notice on this page, with a notice that it has been updated on our main homepage. If we make material changes to how we treat your Personal Information, we will notify you through a notice on the homepage. The date that this Privacy Notice was last revised is listed at the top of the page ("Effective Date"). You are responsible for visiting our site and this Privacy Notice to check for any changes.

Contact Us

If you have any questions or complaints related to our practices with respect to the collection, use, or disclosure of Personal Information, please feel free to contact us at marketing@blackfish-co.com, or call 801-342-4800.

SMS opt-in or phone numbers for the purpose of SMS are not shared with any third parties or affiliate companies for marketing purposes.

Terms and Conditions
1. Introduction
Welcome to Blackfish Companies. By accessing or using our services, including receiving SMS communications, you agree to comply with and be bound by these Terms and Conditions. If you do not agree with these terms, please do not engage with our services.
2. Consent for SMS Communication
By providing your consent to receive SMS communications, you acknowledge and agree to receive text messages from Blackfish Companies at the phone number you provide. Information obtained as part of the SMS consent process will not be shared with third parties.
3. Types of SMS Communications
If you have consented to receive text messages, you may receive SMS communications related to the following:

• Customers and Guests: Updates regarding your orders, deliveries, or other relevant information.

• Job Applicants: Information about your application status, onboarding materials, or other employment-related updates.

4. Standard Messaging Disclosures

• Message Frequency: Frequency of messages may vary depending on your interactions with us.

• Standard messaging rates will be charged by your mobile service provider.

• You can opt-out of receiving SMS messages at any time by texting "STOP" to the number from which you received the message.

For assistance, text "HELP" to any text message or contact us directly at (801) 342-4800 , you can email us at admin@blackfish-co.com or visit our https://www.blackfish-co.com/privacy-policy .