Biometric Policy

Last updated: June 15, 2025

Consent to Collection and Storage of Biometric Data

By using the Services, you consent to EzyLocal’s collection, storage, and use of your Biometric Data in accordance with the terms of this Biometric Data Policy.

What is Biometric Data?

When you sign up for a EzyLocal account, you will provide certain Biometric Data at a EzyLocal kiosk or mobile apps. EzyLocal collects that Biometric Data and then encrypts and stores it on EzyLocal’s data servers, which EzyLocal will use to identify you when you want to use the Services. EzyLocal does not collect, capture, receive or otherwise obtain your Biometric Data without notifying you in writing in advance or without your consent or without the consent of your legally authorized representative. You may decline to provide your Biometric Data.

However, if you decline to provide Biometric Data, certain Services that require the use of such data will be unavailable to you. You may also experience a loss of functionality of some or all the Services that we provide.

Is your Biometric Data secure?

EzyLocal takes your Biometric Data security seriously. EzyLocal implements industry- standard data security technology to ensure that your Biometric Data is as secure as possible. We implement access controls and monitoring tools to ensure that only authorized personnel have access to sensitive data. Our commitment to safeguarding your information is reflected in our use of third-party secure data storage providers with a proven record of robust and reliable infrastructure adhering to industry-leading security standards. You can read our privacy policy here if you would like to see how we protect your Biometric Data.

How does EzyLocal use your Biometric Data?

To use the Services, for example when making a purchase at a point of sale, you will use an input device or kiosk designed to collect your Biometric Data, which will be encrypted and sent to EzyLocal. When you scan your palm at a device or kiosk, your scan will be compared with the Biometric Data you provided when you enrolled and signed up for your EzyLocal account. If it is a match, your transaction will be approved and your account will be charged for the purchase. Similarly, if you are seeking to check-in to membership places through the Services, or show proof of ID at designated places, you will scan your palm at a device or kiosk at such places.

Will EzyLocal use your Biometric Data to enhance its services?

EzyLocal may use your Biometric Data to enhance its accuracy, services and products. This includes developing technologies and algorithms that work with images, video, and depth data. These technologies involve things like machine learning, algorithms, and other tools for things like focusing, color, contrast, classification, recognition, image processing, and immersive multi-media. By using EzyLocal’s services, you agree to let EzyLocal use your Biometric Data for these purposes. You consent to such use of your Biometric Data, but EzyLocal does not sell, lease, or trade your Biometric Data to any third parties or derive any profit in such a manner.

Does EzyLocal share or sell your Biometric Data?

EzyLocal does not sell, lease, or trade your Biometric Data to any third parties or derive any profit in such a manner. EzyLocal may work with certain third parties to provide the Services to you, but only as necessary to provide you with such Services. EzyLocal has agreements with third parties that will receive your Biometric Data where the third party has a legitimate need to deliver the Services to you. These third parties are required to keep your Biometric Data secret and secure. We do not disclose, re-disclose or otherwise disseminate your Biometric Data without your request or consent or without the request or consent of your legally authorized representative. However, in certain specific instances, we may be compelled to disclose your Biometric Data in cases where such disclosure or re-disclosure is required by State or federal law, or municipal ordinance, or when required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction.

How long does EzyLocal keep your Biometric Data?

In order to deliver the Services to you, EzyLocal stores and uses your Biometric Data as long as you have an active account with EzyLocal. Your account is considered “active” so long as not more than one year has elapsed since your most recent access (unless you explicitly request an earlier closure of your account). Occasionally your biometric data may not be readable or recognized when you scan your palm on a EzyLocal device. The attempted scan will be immediately discarded on those occasions and you will be required to register your palm again.

How do I delete my Biometric Data from EzyLocal?

You may request that we delete your Biometric Data by notifying us at support@ezylocal.co. We reserve the right to maintain certain, limited non- biometric Personal Data that you provide for a period of up to five (5) years for purposes of maintaining legally required records for your various consents and authorizations.

What happens to your Biometric Data after you close your account?

After you close your account (or your account automatically closes, when it is deemed inactive), EzyLocal will keep your Biometric Data on file for a reasonable time of up to one year, for reasons including fraud prevention. EzyLocal will permanently destroy your Biometric Data on or before the one-year anniversary of the date that you cancel your account (or the one-year anniversary after the date that you last used your EzyLocal account). After your account is closed, you will need to re-enroll and provide your Biometric Data to EzyLocal again before you can use the Services.

Authorization for Electronic Signature and Consent

If you consent to the terms in this Biometric Policy, you agree that the Federal E- Sign Act (the “Federal Act”) and the California Uniform Electronic Transactions Act (CETA) controls with respect to any requirement of your consent in the form of a valid electronic signature.

You agree, understand, and give your consent by clicking the consent box to the Biometric Policy that your electronic signature is the legal equivalent of your manual/handwritten signature. You also give your consent to the use of your electronic signature.

In order to access and retain electronic communications, You will need a computer with an Internet connection; current “web browser” that includes 128-bit encryption with cookies enabled; a current version of Adobe Acrobat Reader to open documents in pdf format; a valid email address; and sufficient storage space to save past Communications or an installed printer to print them.

ARKANSAS DISCLOSURE

The Personal Information Protection Act, Arkansas Code §4-110-103(7) (2019 Amendment) includes Biometric Data which it defines as “Fingerprints; Faceprint; A retinal or iris scan; Hand geometry; Voiceprint analysis; Deoxyribonucleic acid (DNA); or Any other unique biological characteristics.”

CALIFORNIA DISCLOSURE

Under the California Consumer Privacy Act (CCPA), Biometric Data is defined to include, among other things, physiological, biological or behavioral characteristics, including imagery of the hand, palm, and vein patterns from which identifying information can be extracted,

NEW YORK DISCLOSURE

The Stop Hacks and Improve Electronic Data Security (SHIELD) Act (2019) provides that certain biometric information is private information and defines biometric information to include fingerprints, voiceprints, retina or iris images, or other unique physical characteristics.

You may contact EzyLocal, Co. by emailing support@ezylocal.co or by mail to:

EzyLocal, Co.

555 Bryant Street, Suite 454
Palo Alto, CA 94301

Last updated: June 15, 2025