Online Privacy Statement

Applicability

If you do not agree to the terms of this Online Privacy Statement, please do not provide us with any information and do not use Oregon's website to open or access an account(s) with the Oregon ABLE Savings Plan (the "Site"). By using the Site and voluntarily providing your personally identifiable information to us, you consent to the collection and use of such personally identifiable information as set forth in this Online Privacy Statement. The terms of this Online Privacy Statement are in addition to any other agreements between you and Oregon, including the Plan Disclosure Booklet and Participation Agreement, and other agreements that govern your use account(s) with the Oregon ABLE Savings Plan (the "Plan") provided to you by Oregon through the Site.

Modifications

This Privacy Statement is effective as of the date listed above. We may revise this Privacy Statement at any time so please check from time to time for such revisions. Any changes to this Privacy Statement will be effective as of the date they are posted. If you have specific questions regarding this statement or any information you have submitted via the Site, please do not hesitate to contact us at 844-999-ABLE or 844-888-ABLE (TTY).

Collection and Use Of Your Information (Including via Cookies)

We, on behalf of Oregon, may collect personal information from you to service and maintain your Plan account(s), process your transactions, as well as provide you with Plan documents, account statements and other information about the Plan. This information may be collected when you initially enroll in the Plan, complete Plan documents/forms, utilize the Site, conduct Plan transactions, or communicate with us or the Plan.

We also use cookies, web beacons and similar technologies (collectively "Cookies") to track and store information, including your IP address (a number assigned to your computer when you use the Internet), the operating system installed on your device, the browser types used on your device and your activity while using the Site, which is provided to us by your browser and by our software application when you use the Site. Some of our third party service providers also track and store your information via Cookies when you visit or use the Site. Such service providers have agreed to confidentiality restrictions and only use the personal information they collect on our behalf and solely for the purpose of providing the contract service to us.

A Cookie is a small piece of information that a website stores on the web browser on your device and can later retrieve. "Session" Cookies are temporary and will expire at the end of a browser session; that is, when you leave a website. Session Cookies allow a website to recognize you and carry information as you navigate between pages during a single browser session and allow you to use the website more efficiently. "Persistent" Cookies remain in the Cookie file of your browser even after you leave a website and after the browser is closed. They enable a website to recognize you on your return, remember your preferences and provide tailored services to you. A Cookie will not contain information that will enable us to contact you via telephone, e-mail, or other means.

Cookies on the Site are used to:

• Remember your preferences,
• Enable us to provide the services you requested on the Site, including (where relevant to secure areas of the Site) by identifying and authenticating you as a registered user,
• Measure your use of the Site so that we can improve it, enhancing your overall experience,
• Diagnose problems with the Site, and
• Allow you to share certain information on the Site via social media bookmarking buttons (Cookies from third parties may be used to do this).

Most browsers are initially set to accept Cookies. However, you have the ability to change your internet browser settings. It may also be possible to configure your browser settings to enable acceptance of specific Cookies or to notify you each time a new Cookie is about to be stored on your device enabling you to decide whether to accept or reject the Cookie. You can also disable Cookies by configuring your browser setting to reject Cookies. Please refer to the help section of your browser for instructions on disabling Cookies. For more information about Cookies, how they work, why they are so useful and how to disable them, please visit www.allaboutcookies.org.

If you do not wish to accept Cookies from this Site please either disable them or refrain from using this Site. You should be aware that that disabling Cookies may affect the appearance of the Site on your device and limit your browsing experience (including reduced functionality) and you may be prevented from using some or all of the Site.

In addition to the above uses, we may use your information to comply with applicable laws and requests of relevant regulatory and law enforcement and/or other governmental agencies; to enforce our Terms of Use; and/or to protect the rights, property, or safety of Sumday, our users, and others.

Sharing of Your Information 

We do not sell or rent your personally identifiable information to third parties. We share your information only with our (i) affiliates and service providers that have agreed to confidentiality restrictions and use any personal information they collect on our behalf solely for the purpose of providing the contracted service to us; (ii) as otherwise described herein in order to provide you with the Site and access to the services provided to you on behalf of the Plan; and (iii) to comply with all applicable laws, regulations and rules, and requests of law enforcement, regulatory and other governmental agencies. Also, we may share in aggregate, statistical form, non-personal information regarding the visitors to the Site, traffic patterns, and Site usage with our partners or affiliates.

Third Party Websites

The Site may reference or provide links to third party websites (including social media bookmarking buttons that enable you to share certain content on our Site). We are not responsible for the third party websites, and you should review the terms of use, cookie policies and privacy policies posted on such sites. Please be aware that Sumday does not control, nor are we responsible for, the privacy policies or information practices of third parties or their websites. When you use the third party links provided on the Site these third parties may collect personal information about you, or your online activities over time and across different websites.

Security of Personal Information

We utilize reasonable security technologies to protect sensitive information in accordance with industry and regulatory standards, which may include monitoring and recording all transactions to help detect potential fraudulent activity, and utilizing encryption, two-factor authentication, automatic logout after a specified period of inactivity, or other controls to help protect your sensitive information. However, the security of this information depends in part on the security of the computer you use to communicate with us and the security provided by your internet access services provider. We are not responsible for the security of your internet access services provider; you should review the security and privacy policies of your internet access services provider carefully. Information that you access via this Site may be stored on your computer during your session for your convenience. If others have access to your computer they may be able to access this information. We are not responsible for the security or privacy of information communicated to or from such a computer. Finally, you should keep any correspondence you receive relating to this Site or the Services confidential and in a safe place.

Children's Information (Children's Online Privacy Protection Act)

We respect the privacy of your children and do not knowingly collect or retain personally identifiable information from children under the age of 13 through this web site.

Notice To California Response Required By State Law

On behalf of the Oregon, we collect, use, retain and share with third parties information we receive in connection with the Plan in accordance with the above sections entitled Collection And Use Of Your Information (Including via Cookies) and Sharing of Your Information. The Site currently does not respond to "do not track" signals or similar mechanisms. For information about whether third parties may collect personal information about you, or your online activities over time and across different websites see the above section entitled Third Party Websites. If you have specific questions regarding this Online Privacy Statement or any information you have sent via the Site, please do not hesitate to contact us at 844-999-ABLE or 844-888-ABLE (TTY). This Online Privacy Statement was last updated on the date listed at the top.