POOL RENTAL NEAR ME

PRIVACY POLICY

Effective Date: May 6, 2026 Last Reviewed: May 6, 2026 Policy Version: PRNM-2026.1 (supersedes all prior versions, including PRNM-2025.02)

---

Plain-Language Summary (for layered notice; the full policy below is the controlling text)

We collect information you give us, information your device sends us when you use the Platform, and limited information from trusted third parties — so we can run bookings, pay Hosts, keep the Platform safe, comply with the law, and (only if you opt in) send you marketing. We do not sell your personal information for money. Some of our advertising partners may treat certain non-essential cookies as a "share" for cross-context behavioral advertising in some U.S. states; you can opt out at any time. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. You can access, correct, delete, or port your data and opt out of marketing or "sale/share." Email privacy@poolrentalnearme.com with questions or to exercise any right.

---

1. WHO WE ARE

This Privacy Policy (" Policy") explains how Pool Rental Near Me LLC (a wholly-owned subsidiary of 10,000 Solutions LLC), doing business as " Pool Rental Near Me" (" PRNM," " Company," " we," " us," " our"), collects, uses, shares, protects, and retains personal information when you use:

• Our website at poolrentalnearme.com and any subdomains;
• Our mobile applications (current and future);
• Our Learning Academy and educational modules;
• Our communication channels (email, SMS, in-app chat, phone, and social-media interactions); and
• Our APIs, integrations, and related services.

These are collectively the " Services." By using the Services you accept this Policy. If you do not agree, do not use the Services.

---

2. SCOPE AND ROLES

• U.S. Privacy Laws — "Business" / "Controller": PRNM is a "business" under the California Consumer Privacy Act as amended (" CCPA/CPRA") and a "controller" under the Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, Texas Data Privacy and Security Act, Oregon Consumer Privacy Act, Montana Consumer Data Privacy Act, Iowa Consumer Data Protection Act, Delaware Personal Data Privacy Act, New Jersey Data Privacy Act, Maryland Online Data Privacy Act, Minnesota Consumer Data Privacy Act, Tennessee Information Protection Act, Indiana Consumer Data Protection Act, Kentucky Consumer Data Protection Act, Rhode Island Data Transparency and Privacy Protection Act, New Hampshire Privacy Act, Nebraska Data Privacy Act, Utah Consumer Privacy Act, and Florida Digital Bill of Rights, where applicable.
• EU/UK Context: PRNM is the "controller" of personal data processed under the GDPR/UK GDPR for users in the European Economic Area, the United Kingdom, and Switzerland to the extent the Services are offered to those users.
• Processor Role: In limited cases (enterprise integrations, white-label partners), PRNM may act as a processor on behalf of another controller; that relationship is governed by a separate data-processing agreement.
• Hosts and Renters: Information you choose to publish in a Listing or review (photos, descriptions, ratings) is visible to other Users and the public.

---

3. PERSONAL INFORMATION WE COLLECT — STATUTORY CATEGORIES

In the past twelve months, we have collected the following categories of personal information (using the categories required by Cal. Civ. Code § 1798.140):

| Statutory Category | Examples | |---|---| | A. Identifiers | Name, username, email, phone number, mailing address, IP address, device identifier, account ID | | B. Customer Records (Cal. Civ. Code § 1798.80(e)) | Billing address, payment-method token, transaction history, signature on waivers | | C. Protected Classifications under Cal./Federal Law | Age (to verify 18+), language preference (optional). We do not collect race, religion, citizenship, disability, or marital status. | | D. Commercial Information | Booking history, Host earnings, premium feature purchases, cancellation history | | E. Internet/Network Activity | Browser type, pages viewed, referring URL, session timestamps, click and scroll events, error logs | | F. Geolocation | Approximate location from IP; precise geolocation only with explicit permission | | G. Sensory Data | Photos and video uploaded to Listings; voice recordings only if you contact phone support and consent | | H. Professional / Employment | Limited Host business-license or property-management info (only for Hosts) | | I. Education | Learning Academy enrollment, module progress, course feedback | | J. Inferences | Booking propensity, category interests, Host-quality scores, fraud-risk signals | | K. Sensitive Personal Information (CPRA) | Account credentials (hashed); precise geolocation (with consent); government-ID verification fragments (when required for fraud or compliance); payment-account references (tokenized). We do not use SPI to infer characteristics; SPI is used only as needed to deliver the Service, prevent fraud, and comply with the law — within the exemptions in 11 C.C.R. § 7027(m). |

We do not knowingly collect:

• Biometric data (fingerprints, facial-recognition templates);
• Genetic data;
• Mental- or physical-health condition data;
• Sex-life or sexual-orientation data;
• Citizenship or immigration status;
• Union membership; or
• Religious or philosophical beliefs.

We do not store full payment card numbers; our PCI-compliant payment processor handles tokenization.

---

4. SOURCES OF PERSONAL INFORMATION

We obtain personal information from:

• You directly: Registration, Listing creation, Bookings, support communications, surveys, reviews, and Learning Academy enrollment.
• Automatic collection: Cookies, pixels, SDKs, analytics scripts, and server logs when you use the Services.
• Third parties: Payment processors (Stripe and similar), analytics providers (Google Analytics 4 and similar, with IP-anonymization where applicable), identity-verification and anti-fraud vendors, marketing and advertising networks (subject to your opt-out rights), referral and affiliate partners, and social-media platforms if you connect an account.
• Public sources: Public records or public web information (e.g., to validate a Host's stated property address).
• Other Users: Reviews, ratings, and dispute information about you submitted by another User.

---

5. PURPOSES OF PROCESSING

We process personal information for the following purposes:

1. Provide and operate the Services — accounts, Listings, Bookings, Host payouts, messaging, customer support.
2. Personalize the experience — search results, recommendations, dashboards.
3. Process payments and payouts — including 1099-K and other tax-form generation.
4. Communicate with you — transactional notices, service changes, security alerts, and (only if you opt in) marketing.
5. Operate the Learning Academy — course delivery, progress tracking, certificates.
6. Security and fraud prevention — detect, investigate, and prevent fraud, abuse, and security incidents.
7. Analytics and product development — usage trends, feature testing, performance metrics.
8. Compliance, legal process, and dispute resolution — including responses to subpoenas, court orders, and lawful requests.
9. Corporate transactions — due diligence and integration in connection with mergers, acquisitions, financings, and reorganizations.
10. Automated tools and profiling — non-determinative scoring with human oversight available (see Section 14).

We will not use your personal information for materially different purposes without giving you notice and, where required, obtaining your consent.

---

6. LAWFUL BASES (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on:

• Contract (Art. 6(1)(b)): To deliver the Services you request.
• Legitimate interests (Art. 6(1)(f)): To improve the Platform, ensure security, prevent fraud, and analyze usage — balanced against your rights.
• Consent (Art. 6(1)(a)): For marketing emails/SMS where required, non-essential cookies, and precise geolocation.
• Legal obligation (Art. 6(1)(c)): For tax, audit, AML, and lawful-request compliance.
• Vital interests (Art. 6(1)(d)): To address urgent safety or medical incidents.

You may withdraw consent at any time where consent is the lawful basis; withdrawal does not affect the lawfulness of prior processing.

---

7. SMS / MOBILE INFORMATION — REQUIRED 10DLC AND CARRIER DISCLOSURES

This Section governs PRNM's collection and use of mobile-phone numbers and SMS opt-in data and is also incorporated into Section 16 of our Terms of Service.

Program Name. Pool Rental Near Me Alerts.

Information Collected. When you opt in to receive SMS messages, we collect: your mobile phone number, your express written consent, the date and time of the consent, the URL or location at which consent was given, and any text-messaging activity (deliveries, replies, opt-outs).

Use. We use this information solely to send the SMS message types disclosed in Section 16 of the Terms of Service (booking confirmations, modifications, reminders, host-renter notifications, account and security alerts, and — if separately opted in — marketing) and to comply with our legal obligations.

No Sharing of Mobile Information — Required Disclosure. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All categories of data sharing described in this Privacy Policy exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties under any circumstances. SMS opt-in data is shared only with our messaging-service providers (such as Twilio) acting as our service providers/processors and bound by contractual confidentiality and use restrictions, and only to the extent necessary to deliver the messages you have requested.

Frequency, Costs, HELP, STOP. See Terms of Service Section 16 for full disclosures. Reply HELP for help and STOP (or any other recognized opt-out keyword) to cancel. Carrier message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

Revocation. Consistent with 47 C.F.R. § 64.1200(a)(10)–(11), you may revoke consent by any reasonable means, and we will honor revocation within ten (10) business days.

Retention. SMS opt-in/opt-out logs are retained as required by the TCPA and the FCC's recordkeeping rules (currently four (4) years from the date of the most recent consent or revocation event).

---

8. COOKIES AND TRACKING TECHNOLOGIES

We use the following types of cookies and similar technologies. Detail and your controls are in our Cookie Policy at poolrentalnearme.com/cookies.

• Strictly Necessary: Authentication, security, load balancing. Cannot be disabled if you wish to use the Services.
• Functional: Remember preferences and saved filters.
• Performance / Analytics: Measure traffic, feature use, and errors (Google Analytics 4 and similar). IP-anonymization applied where required.
• Advertising / Retargeting: Interest-based advertising (Google Ads, Meta Pixel, and similar). Some of these technologies may constitute a "sale" or "share" under U.S. state privacy laws; you can opt out as described in Section 13.
• Embedded Media: Map tiles, video embeds, social-share scripts.

Universal Opt-Out Mechanisms (UOOMs). PRNM honors Global Privacy Control (GPC) signals as an opt-out of "sale" and "share" (and equivalent rights) for users in: California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas — and any other state that requires recognition. When we detect a GPC signal we display an "Opt-Out Request Honored" indicator as required by California's amended CPPA regulations.

---

9. HOW WE SHARE PERSONAL INFORMATION

9.1 Categories of Recipients

• Service providers / processors: Hosting, payment processing, email/SMS delivery, analytics, identity verification, image moderation, customer support, fraud and security tools, tax-form generation. Each is bound by a written agreement restricting their use of your data to the services they provide to us.
• Other Users: Hosts and Renters see information necessary to complete the Booking (e.g., name, profile photo, message content). Public Listing content (photos, approximate location, reviews) is visible to all Platform visitors.
• Advertising partners (subject to your opt-out): Google, Meta, and similar networks for measurement and interest-based advertising. Excluded entirely from advertising sharing: SMS opt-in data, mobile phone numbers used for SMS, and government-ID verification data.
• Payment and payout partners: For settlement, fraud checks, and tax reporting.
• Legal / regulatory: When required by law, subpoena, court order, or in response to a lawful government request, and when we believe disclosure is necessary to protect our rights, the safety of any person, or the security of the Platform.
• Corporate transactions: A successor or acquirer in a merger, acquisition, financing, reorganization, or asset sale, with notice to you where required by law.
• With your consent: Any other disclosures you specifically authorize.

9.2 We Do Not Sell Personal Information for Money

PRNM does not sell personal information in exchange for monetary consideration.

9.3 "Share" for Cross-Context Behavioral Advertising

Use of certain advertising cookies and pixels may constitute a "share" under the CPRA and similar state laws. You can opt out at any time using the " Do Not Sell or Share My Personal Information" link in the website footer or by sending a GPC signal.

9.4 No Sale or Sharing of Minors' Data

We do not knowingly sell or share the personal information of consumers under age 16 without affirmative authorization (opt-in). The Platform is not directed to consumers under 18.

---

10. INTERNATIONAL DATA TRANSFERS

PRNM is based in the United States, and personal information is processed in the United States and other jurisdictions where our service providers operate. For transfers from the EEA, UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (2021/914), the UK International Data Transfer Addendum, and supplementary technical and organizational measures (encryption in transit and at rest, access controls, transfer-impact assessments) consistent with Schrems II. To request a copy of our SCCs (subject to redaction), email privacy@poolrentalnearme.com.

---

11. DATA SECURITY

We employ administrative, technical, and physical safeguards reasonably designed to protect personal information, including:

• TLS 1.2+ encryption in transit; AES-256 (or equivalent) encryption at rest for sensitive data;
• Role-based access controls and least-privilege principles;
• Hashed and salted password storage;
• Network segmentation, secrets management, and credential rotation;
• Vulnerability management, patching, logging, and intrusion monitoring;
• Vendor risk-management reviews;
• An incident response and breach-notification plan tested at least annually; and
• Employee security and privacy training.

California Cybersecurity Audits and Risk Assessments. Once PRNM meets the applicable revenue thresholds (the CPPA's phased schedule beginning April 1, 2030 for businesses with under $50M in gross revenue), we will conduct annual cybersecurity audits and document privacy risk assessments under the California Privacy Protection Agency's regulations finalized September 23, 2025.

No method of transmission or storage is 100% secure. You are responsible for keeping your password confidential and using strong, unique credentials.

---

12. DATA RETENTION

We retain personal information only as long as necessary for the purposes for which it was collected and to comply with legal obligations. Indicative retention periods (each "or longer if required by law"):

| Data Category | Indicative Retention | |---|---| | Active Account profile | Duration of Account + up to 24 months after closure | | Booking and transaction records | 7 years (federal and state tax) | | Host payout / 1099-K records | 7–10 years | | Identity verification fragments | Minimized after verification; verification metadata 24 months | | Support tickets | 3–5 years | | Marketing preferences and opt-out logs | Indefinitely (compliance evidence) | | SMS consent and opt-out logs | 4 years (TCPA recordkeeping) | | Security and fraud logs | 3–7 years | | Analytics (pseudonymized/aggregated) | 14–36 months | | De-identified data | Indefinitely (not reasonably re-identifiable) | | Reviews and Listing content | Until removal request (subject to public-record exception in Terms) | | Legal-hold materials | Duration of the matter + applicable limitations period |

Upon a verified deletion request, we will delete, de-identify, or anonymize personal information unless retention is required by law, necessary for fraud prevention, dispute resolution, or to enforce our agreements.

---

13. YOUR PRIVACY RIGHTS

13.1 Rights Available Where the Law Provides Them

Depending on where you live, you may have the right to:

• Know / Access — confirm whether we process your personal information and obtain a copy.
• Correct — fix inaccurate or incomplete information.
• Delete — request deletion (subject to legal exceptions).
• Portability — receive your data in a structured, commonly used, machine-readable format.
• Opt out of "Sale" / "Share" — including cross-context behavioral advertising.
• Limit Use of Sensitive Personal Information — restrict the use of SPI beyond the limited purposes permitted by 11 C.C.R. § 7027.
• Opt out of certain Profiling and Automated Decision-Making Technology (ADMT) — see Section 14.
• Appeal — appeal a denied request (CO, CT, VA, IN, KY, RI, MD, NJ, MN, MT, NH, OR, TN, TX, DE, NE, NH).
• Withdraw consent — where consent is the lawful basis.
• Non-discrimination — we will not discriminate against you for exercising your rights.

13.2 How to Exercise Your Rights

• Email (recommended): privacy@poolrentalnearme.com
• Toll-free phone (CCPA right): (909) 272-8096
• Webform: poolrentalnearme.com/privacy-request
• GPC signal: Send a Global Privacy Control signal from your browser; we honor it automatically.
• Cookie banner / "Do Not Sell or Share": Footer link on every page.

13.3 Verification

We will verify your identity using a confirmation link to your registered email plus, where the request is sensitive (e.g., access to identifiers), recent Booking metadata. We will not require government-issued ID unless reasonably necessary for the request.

13.4 Authorized Agents

You may designate an authorized agent to make a request on your behalf, supported by a signed permission, an attached power of attorney, or proof of probate.

13.5 Response Timing

• CCPA / state laws: Acknowledge within 10 business days; substantively respond within 45 days (extensions up to 45 additional days where reasonably necessary).
• GDPR / UK GDPR: Respond within 1 month (extensions up to 2 additional months for complex requests).

13.6 Appeals

If we deny your request, we will explain the reason and your right to appeal. To appeal, reply to our denial email or send a new request to privacy-appeal@poolrentalnearme.com. We will respond within 60 days. If we deny the appeal, you may contact your state attorney general or supervisory authority.

13.7 EU/UK Lodging Complaint

EEA, UK, and Swiss residents have the right to lodge a complaint with their supervisory authority (e.g., the UK ICO at ico.org.uk).

---

14. AUTOMATED DECISION-MAKING AND PROFILING

PRNM uses limited automated tools — including fraud-risk scoring, Host-quality signals, and algorithmic search ranking — to operate the Platform. These tools generally do not make decisions producing legal or similarly significant effects without human review. Where a fully automated decision could materially affect you (e.g., automatic Account suspension for fraud), you have the right to:

• Be informed that ADMT is in use, the categories of data inputs, and the logic involved at a general level;
• Request human review of the decision; and
• Opt out of ADMT for "significant decisions" once California's ADMT consumer rights become operative (compliance January 1, 2027 under the CCPA regulations finalized September 23, 2025) and similarly under Colorado, Texas, and other state laws.

Submit ADMT requests to privacy@poolrentalnearme.com.

We do not sell or share personal information for purposes of training third-party generative-AI models.

---

15. CHILDREN'S PRIVACY

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 in violation of COPPA (15 U.S.C. §§ 6501–6506; 16 C.F.R. Part 312). Users between 13 and 17 may not create Accounts. Hosts must comply with all applicable laws regarding minors visiting their pools, including supervision, waivers, and parental consent.

If you believe we have inadvertently collected information from a child under 13, contact privacy@poolrentalnearme.com and we will delete it promptly.

---

16. NOTICE OF FINANCIAL INCENTIVE

We do not currently offer any financial incentive in exchange for the collection, sale, or sharing of personal information. If we do in the future, we will publish a Notice of Financial Incentive consistent with 11 C.C.R. § 7016.

---

17. CALIFORNIA "SHINE THE LIGHT" (Cal. Civ. Code § 1798.83)

We do not share personal information with third parties for those parties' own direct marketing purposes in a manner that would trigger separate disclosure under § 1798.83. If that changes, we will update this Policy and provide the disclosures required.

---

18. NEVADA, FLORIDA, AND OTHER STATE-SPECIFIC NOTICES

• Nevada (NRS Ch. 603A): Nevada residents may opt out of any future sale of "covered information" by emailing privacy@poolrentalnearme.com. We do not currently sell covered information.
• Florida (Florida Digital Bill of Rights): Florida residents who qualify under FDBR's narrow scope may exercise rights as described in Section 13.
• Washington (My Health My Data Act): PRNM does not knowingly collect "consumer health data." If we begin to do so, we will publish a Consumer Health Data Privacy Policy as required.
• Texas, Connecticut, Colorado, Virginia, Utah, Oregon, Montana, Iowa, Delaware, New Jersey, New Hampshire, Nebraska, Maryland, Minnesota, Tennessee, Kentucky, Indiana, Rhode Island: Rights are exercised as described in Section 13. The right to appeal is available where the law provides.

---

19. EU/UK USERS — ADDITIONAL DISCLOSURES

• Controller: Pool Rental Near Me LLC (address in Section 22).
• EU/UK Representative: Not currently appointed; if and when required (e.g., regular monitoring of EEA/UK users at scale), we will appoint and disclose one in this Section.
• Data Protection Officer: Not currently mandatory; if and when required, we will appoint and disclose contact details here.

---

20. USER-GENERATED CONTENT

Information you choose to publish — Listings, photos, reviews, public Q&A — is publicly visible. Do not include sensitive personal information in public fields (e.g., full Social Security numbers, government IDs, medical information). We may moderate or remove Content that violates our policies or applicable law.

---

21. THIRD-PARTY LINKS AND SERVICES

The Services may contain links to or embed third-party websites, payment processors, or social-media platforms. Those third parties have their own privacy practices and policies, which we do not control. Review their policies before sharing information.

---

22. SECURITY INCIDENTS AND BREACH NOTIFICATION

If a security incident materially affects your personal information, we will notify you and applicable regulators as required by law (e.g., Cal. Civ. Code § 1798.82, GDPR Art. 33–34, state breach-notification statutes in all 50 states and DC). Notice may include the nature of the incident, the categories of information affected, the steps we have taken, and recommended protective measures.

---

23. ACCESSIBILITY OF THIS POLICY

This Policy is available in plain-language summary form at the top of this page and in alternative accessible formats on request. Email privacy@poolrentalnearme.com for an alternative format. Our Platform aims to conform substantially with WCAG 2.2 Level AA.

---

24. CHANGES TO THIS POLICY

We may update this Policy. For material changes, we will provide notice at least thirty (30) days in advance by email and on-Platform banner before the changes take effect. The "Effective Date" and "Policy Version" at the top reflect the latest revision. Continued use of the Services after the Effective Date constitutes acceptance.

---

25. CONTACT INFORMATION

Pool Rental Near Me LLC A subsidiary of 10,000 Solutions LLC Attn: Privacy Office [HQ address — Los Angeles, CA]

• Privacy / Rights Requests: privacy@poolrentalnearme.com
• Privacy Appeals: privacy-appeal@poolrentalnearme.com
• Data Subject / SAR (EU/UK): privacy@poolrentalnearme.com
• General Support: support@poolrentalnearme.com
• Legal Notices: legal@poolrentalnearme.com
• Phone: (909) 272-8096

---

26. RELATIONSHIP TO TERMS OF SERVICE

This Policy is incorporated into and supplements the Pool Rental Near Me Terms of Service at poolrentalnearme.com/terms. Privacy-related disputes are subject to the dispute-resolution provisions of the Terms (including the binding individual arbitration provision and the EFAA carve-out), except as prohibited by law. Nothing in this Policy waives any non-waivable right under applicable law.

— End of Privacy Policy —