D. Right to Non-Discrimination

You have the right not to receive discriminatory treatment by us for the exercise of any of your rights.

Disclosures for Residents of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Jersey, New Hampshire, Oregon, Tennessee, Texas, Utah, and Virginia.

Data Practices

For residents of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia, our practices regarding the collection, use, disclosure, and retention of your personal data are set out in the main Privacy Policy above.

We do not sell your personal data as that term is defined under applicable law or process your personal data for purposes of targeted advertising. We do not process personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

Requests

You have the right to exercise choice over your personal data as follows:

• Verifiable Requests: You have the right to:
  • Confirm whether or not we are processing your personal data, and in some regions, confirm the categories of personal data we have processed;
  • Access your personal data;
  • Correct inaccuracies in your personal data;
  • Delete your personal data;
  • Obtain a copy of your personal data that you previously provided to us in a portable and readily usable format.

If you are a Minnesota or Oregon resident, you also have the right to obtain a list of the specific third parties to which we have disclosed personal data.

If you are a Delaware or Maryland resident, you also have the right to obtain a list of categories of third parties to which we have disclosed your personal data.

If you are a Connecticut resident, you also have the right to obtain a list of the specific third parties to which we have sold personal information.

These rights are verifiable rights, meaning that we need to verify your identity before fulfilling them. To exercise any of these rights, please email us at info@aracapital.com.

If you have an account with us, we may require you to use the account to submit the request. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 business days and respond to your request within 45 days. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your request.

• Consent: You have the right to revoke consent previously given to us for the processing of your personal data. To revoke consent, write us at the email or postal address set out in the Contact Us section above (specifying the consent you wish to withdraw). If you withdraw consent, you may not be able to receive certain services related to that consent.

Your rights are subject to exceptions and our retention practices. You have the right not to be discriminated against for exercising any of your rights. To the extent permitted by law, rights requests must be exercised through the applicable designated method listed above. You may make a rights request using an authorized agent. Except for rights requests made by opt-out preference signal, we will require written and signed proof of the agent’s permission to do so and we may verify your identity directly with you.

You have the right to appeal our decision in response to your request. To appeal, please write us at the email or postal address set out in the Contact Us section above and specify what you wish to appeal. We will review and respond to your appeal in accordance with applicable law. If we deny your appeal, you may submit a complaint to your Attorney General as follows: Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia.