PRIVACY POLICY

Food Handler Solutions, LLC

Effective Date: September 1, 2026     |     Last Updated: September 1, 2026

Food Handler Solutions, LLC ("Company," "Food Handler Solutions," "we," "us," or "our") respects your privacy and is committed to protecting it through compliance with this Privacy Policy ("Policy") and all applicable laws. This Policy explains how we collect, use, disclose, retain, and protect information when you visit https://foodhandlersolutions.com and any related websites, domains, mobile applications, or online services we operate (collectively, the "Sites"), or when you use any of the services, courses, training, certifications, or content we offer through the Sites (collectively, the "Services").

Food Handler Solutions provides online food safety training, food handler certification courses, food manager courses, allergen awareness training, and related compliance content and services for individuals, employers, foodservice operators, and their employees. This Policy describes the types of information we may collect from you or that you may provide, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

Please read this Policy carefully. By accessing or using the Sites or Services, you acknowledge that you have read and understood this Policy. If you do not agree with our policies and practices, please do not use our Sites or Services. This Policy may change from time to time (see "Changes to Our Privacy Policy" below); your continued use of the Sites or Services after we post changes indicates acceptance of the updated Policy.

1. Scope of This Policy

This Policy applies to information we collect:

• On the Sites and through the Services;
• Through email, text messages, chat, and other electronic communications between you and us;
• Through mobile or desktop applications you download from us or that connect to the Services;
• From third-party partners, vendors, and service providers who share information with us in accordance with applicable law; and
• When you attend, register for, or interact with our webinars, events, marketing campaigns, or social media pages.

This Policy does not apply to information collected by any third party, including through any third-party website, application, or service that may link to or be accessible from the Sites. We are not responsible for the privacy practices of those third parties.

Business customer agreements. If your training is provided to you through an employer, school, district, franchisor, or other organization ("Business Customer") that has entered into a separate written agreement with Food Handler Solutions, that agreement governs how we handle personal information we process on that Business Customer's behalf. Where the terms of a Business Customer agreement are more specific or more protective than this Policy with respect to that Business Customer's data, the Business Customer agreement controls.

2. Age Requirement — Adults Only

The Sites and Services are intended for adults 18 years of age or older. We do not knowingly market to, solicit information from, or collect personal information from anyone under the age of 18. If you are under 18, you may not use the Sites or Services, register for an account, purchase a course, or submit any information about yourself.

We do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act ("COPPA"). If we learn that we have collected personal information from a child under 13 without verified parental consent, or from any individual under 18, we will promptly delete that information. If you believe we may have information from or about a person under 18, please contact us at legal@foodhandlersolutions.com.

3. Information We Collect

We collect several categories of information from and about users of our Sites and Services:

A. Information You Provide Directly

• Identifiers and contact information — name, postal address, email address, telephone number, username, and account credentials.
• Employer, workplace, and professional information — company or facility name, job title, food handler card number, jurisdiction where you work, and the reason you are taking a course (e.g., new-hire training, renewal, employer requirement).
• Payment and transaction information — billing name and address, purchase details, order history, and information necessary to complete a purchase. Card numbers are collected and processed by our PCI-compliant payment processors; we do not store full payment card numbers on our systems.
• Course, training, and certification data — courses purchased, progress, quiz and exam answers, scores, completion status, certificates issued, and identifiers used to verify your identity during proctored or attestation-based courses.
• Communications and correspondence — emails, chat messages, support tickets, survey responses, and feedback you send to us.
• User-generated content — reviews, forum posts, comments, or other content you choose to post on public or interactive areas of the Sites ("Interactive Content").

B. Information Collected Automatically

When you interact with the Sites or Services, we and our service providers may automatically collect:

• Device and connection data — IP address, device type, operating system, browser type and version, language settings, and mobile device identifiers.
• Usage data — pages viewed, links clicked, referring/exit pages, features used, dates and times of access, session duration, course progress events, and search queries on the Sites.
• Approximate location data — general geographic location derived from your IP address (we do not collect precise GPS location without your consent).
• Log data — server logs and diagnostic data used for security, fraud prevention, and troubleshooting.

C. Information From Third Parties

We may receive information about you from:

• Employers, sponsors, Business Customers, or other purchasers who buy training on your behalf and provide us with your name, email, and course assignment;
• Payment processors who confirm successful transactions;
• Analytics providers, advertising partners, and marketing platforms;
• Public sources and social media platforms when you interact with our pages;
• Regulatory or health department databases where certification reciprocity or verification is required.

D. Sensitive Personal Information

In the ordinary course of business we do not intentionally collect sensitive categories of personal information (such as government-issued identification numbers, health information, race, religion, or precise geolocation). If a course or jurisdiction requires collection of a government-issued identifier (for example, a food handler card ID or state-issued permit number), we will collect only what is necessary and will handle it in accordance with applicable law.

4. Cookies and Similar Tracking Technologies

We and our service providers use cookies, pixels, web beacons, software development kits (SDKs), local storage, and similar technologies to operate the Sites, remember your preferences, analyze usage, and improve the Services.

Types of cookies and technologies we use

• Strictly necessary cookies — required for the Sites to function, including authentication, security, load balancing, and shopping cart functionality. These cannot be disabled.
• Functional cookies — remember your preferences (language, saved forms, course progress) to personalize your experience.
• Analytics cookies — help us understand how visitors use the Sites (e.g., Google Analytics). Data is generally aggregated and used to improve the Services.
• Marketing and advertising technologies — used to measure the effectiveness of our marketing and, where applicable, to show you relevant advertising on other sites.

Your cookie choices

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse or delete cookies, or to alert you when cookies are being sent. Disabling cookies may cause some parts of the Sites to malfunction. To learn more, visit allaboutcookies.org. For mobile device identifiers, you can manage advertising choices in your device settings ("Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).

Global Privacy Control (GPC). We honor recognized universal opt-out mechanisms, including the Global Privacy Control browser signal, where required by law. When we detect a GPC signal from your browser, we treat it as a valid request to opt out of the "sale" or "sharing" of your personal information (as those terms are defined under applicable state law), even though, as described below, we do not currently sell or share personal information for cross-context behavioral advertising.

Do Not Track. Because there is no consistent industry standard for how to respond to "Do Not Track" signals, our Sites do not respond to Do Not Track signals at this time. We do honor Global Privacy Control (GPC) signals as described above.

5. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Sites and Services, including delivering courses, tracking progress, scoring exams, and issuing certificates of completion.
• To create and manage your account, authenticate you, and provide customer support.
• To process transactions and send you invoices, receipts, renewal reminders, and other account communications.
• To verify your identity where required by law or by the course or certification standard.
• To communicate with you about the Services, including sending service announcements, security alerts, and administrative messages.
• To send you marketing emails about our products, courses, promotions, and events, where permitted by law and subject to your ability to opt out at any time.
• To personalize content, remember your preferences, and improve your experience.
• To analyze usage, monitor performance, conduct research, develop new features, and improve the Sites and Services.
• To detect, investigate, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service or applicable law.
• To comply with legal obligations, respond to lawful requests, enforce our agreements, and protect our rights, property, and safety and those of our users and third parties.
• For any other purpose disclosed to you at the time we collect the information or with your consent.

We do not sell your personal information. We do not "sell" or "share" your personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA), the Texas Data Privacy and Security Act (TDPSA), or other U.S. state privacy laws. We have not sold personal information of any consumer in the preceding twelve (12) months.

No advertising or profiling uses of Business Customer data. For personal information we process on behalf of a Business Customer, we do not use that information to inform, influence, or enable targeted advertising; do not share or integrate it with social media platforms or third-party advertising networks; do not use it to develop a profile of a learner or their family; do not use it to train, develop, or improve artificial intelligence or machine-learning models without the Business Customer's prior written authorization; and do not employ behavioral tracking, cross-platform tracking, or device fingerprinting to track those learners across websites or services.

6. How We Disclose Your Information

We may disclose your information in the following circumstances:

A. Service Providers and Vendors

We share information with third-party service providers and processors who perform services on our behalf and are bound by written contract to use the information only as directed by us. These include:

• Cloud hosting, storage, and infrastructure providers;
• Learning management, course delivery, and certificate issuance platforms;
• Payment processors and fraud-prevention providers;
• Email delivery, marketing automation, and customer relationship management (CRM) tools;
• Customer support and helpdesk platforms;
• Analytics providers such as Google Analytics;
• Professional advisors including lawyers, accountants, and auditors.

Each service provider that processes personal information on our behalf is engaged under a written agreement that obligates the provider to protect the information on terms no less stringent than those we owe our users and customers. A current list of the sub-processors we engage — including entity name, function, categories of personal information accessed, processing location, and contractual protections — is maintained in our Sub-Processor Schedule, available at foodhandlersolutions.com/subprocessors or on request by emailing privacy@foodhandlersolutions.com.

B. Employers, Sponsors, and Business Customers

If your training is purchased or assigned by an employer, school, district, franchisor, sponsor, or other Business Customer, we may share your account information, course progress, exam scores, and completion status with that party. Where required by law, regulation, or the terms of a specific certification program, we may share completion data with state or local health departments or accrediting bodies.

C. Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, your information may be transferred as part of that transaction. We will notify you of any such transfer where required by law.

D. Legal Requirements and Protection of Rights

We may disclose your information when we believe in good faith that disclosure is necessary to:

• Comply with a subpoena, court order, or other legal process;
• Cooperate with law enforcement or governmental authorities conducting an investigation;
• Enforce our Terms of Service or other agreements;
• Detect, prevent, or address fraud, security, or technical issues;
• Protect the rights, property, safety, or security of Food Handler Solutions, our users, or others.

Where personal information is provided to us by a Business Customer under a written agreement, we will handle law-enforcement or government requests for that information in accordance with the terms of that agreement, including any customer-notification and cooperation obligations set out in it.

E. With Your Consent

We may disclose your information for any other purpose disclosed to you at the time we collect it or with your consent or direction.

F. Aggregated or De-Identified Information

We may share aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you for any purpose, including for research, benchmarking, marketing, and improvement of the Services.

7. Your U.S. State Privacy Rights

Depending on where you reside, you may have specific rights regarding your personal information under state privacy laws, including but not limited to the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the Virginia Consumer Data Protection Act ("VCDPA"), the Colorado Privacy Act ("CPA"), the Connecticut Data Privacy Act ("CTDPA"), the Utah Consumer Privacy Act ("UCPA"), the Texas Data Privacy and Security Act ("TDPSA"), and comparable laws in Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and other states.

A. Rights That May Be Available to You

• Right to know / access — to request confirmation of whether we process your personal information and access to the personal information we hold about you.
• Right to portability — to receive a copy of your personal information in a portable, readily usable format.
• Right to correction — to request that we correct inaccurate personal information we maintain about you.
• Right to deletion — to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to opt out of sale or sharing — to opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising. As stated above, we do not sell or share personal information.
• Right to opt out of targeted advertising and profiling — to opt out of the processing of your personal information for targeted advertising or for profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in such profiling.
• Right to limit use of sensitive personal information — to limit the use and disclosure of sensitive personal information, where applicable.
• Right to non-discrimination — you will not receive discriminatory treatment for exercising any of your privacy rights.
• Right to appeal — if we deny your request, residents of certain states (including Virginia, Colorado, Connecticut, Texas, and others) have the right to appeal our decision. Instructions for appeal will be provided in our response.

B. How to Exercise Your Rights

To exercise any of these rights, please submit a request by:

• Email — privacy@foodhandlersolutions.com (or legal@foodhandlersolutions.com);
• Mail — Food Handler Solutions, LLC, Attn: Privacy Requests, 2931 Ridge Rd Ste 101 #537, Rockwall, TX 75032; or
• Logging into your account and updating your profile or preferences (for access and correction of basic account information).

We will need to verify your identity before responding to your request. We may ask you to provide information that matches information we already have on file (such as the email address associated with your account) or, for more sensitive requests, additional verification. We will respond to verifiable requests within the time period required by applicable law (generally 45 days, with a possible extension).

You may designate an authorized agent to make a request on your behalf. We will require the agent to provide proof of authorization signed by you and may still require you to verify your own identity directly.

Requests involving Business Customer data. If your personal information was provided to us by a Business Customer (for example, an employer or school that assigned you a course), the Business Customer typically acts as the controller of that information. In those cases, we will refer your request to the Business Customer and cooperate with them to respond in accordance with applicable law and our written agreement with them.

C. California "Shine the Light" Law

California Civil Code § 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes. To submit a "Shine the Light" request, please contact us at privacy@foodhandlersolutions.com.

D. Notice of Financial Incentives

We do not offer financial incentives or price/service differences in exchange for the collection, sale, or retention of personal information.

8. International Users

Our Sites and Services are operated in the United States and are directed to users in the United States. If you access the Sites or Services from outside the United States, you understand and consent to the transfer, storage, and processing of your information in the United States, which may have data-protection laws that differ from those of your country of residence. If you are located in the European Economic Area, United Kingdom, or Switzerland, please do not provide personal information to us unless you consent to this transfer.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to:

• Provide the Services and maintain your account;
• Comply with legal, tax, accounting, and recordkeeping obligations (for example, food handler certification records that regulators or employers may require us to retain for defined periods);
• Resolve disputes and enforce our agreements; and
• Protect against, investigate, and deter fraudulent, harmful, unauthorized, or illegal activity.

When we no longer need to retain your personal information, we will securely delete, destroy, or de-identify it in accordance with our data-retention schedule and applicable law. Certification records and course completion history may be retained for the period required by the applicable jurisdiction or accrediting body, even after account closure.

10. Data Security

We have implemented administrative, technical, and physical safeguards designed to protect your personal information against accidental loss and unauthorized access, use, alteration, and disclosure. These safeguards are designed to be no less rigorous than accepted industry cybersecurity frameworks and include:

• Encryption of data in transit using industry-standard TLS/SSL;
• Encryption of sensitive data at rest;
• Role-based access controls, least-privilege access, authentication, and periodic access reviews;
• Regular security reviews, monitoring, and vendor assessments;
• Storage of payment card information exclusively with PCI-DSS compliant payment processors.

The security of your information also depends on you. If you have an account password, you are responsible for keeping it confidential. Do not share your password with anyone. Please notify us immediately at help@foodhandlersolutions.com if you believe your account or credentials have been compromised.

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. Any transmission of personal information is at your own risk.

11. Data Breach Notification

If we discover a security incident affecting your personal information, we will investigate and notify you and applicable regulators as required by law. Where required, notification will include the nature of the incident, the categories of information involved, steps you can take to protect yourself, and steps we are taking in response. For personal information provided to us by a Business Customer, breach notification will also be handled in accordance with the terms of our written agreement with that customer.

12. Third-Party Websites and Services

The Sites may contain links to third-party websites, plug-ins, or applications, including social media platforms and payment processors. Clicking on those links or enabling those connections may allow third parties to collect or share information about you. We do not control these third parties and are not responsible for their privacy practices. We encourage you to read the privacy policies of every website you visit.

13. Your Choices

Marketing Communications

You may opt out of marketing emails at any time by clicking the "unsubscribe" link in any marketing email, adjusting your preferences in your account, or emailing us at privacy@foodhandlersolutions.com. Even if you opt out of marketing, we will continue to send you non-promotional, transactional communications relating to your account, courses, certificates, purchases, and legal notices.

SMS and Text Messages

If we send you SMS or text messages, you may opt out at any time by replying "STOP" to any message or by contacting us. Message and data rates may apply.

Account Information

You can review and update your account information at any time by logging into the Sites. If you would like to delete your account, contact us at help@foodhandlersolutions.com. Please note that some information, such as records of completed certifications, transaction records, or content already disclosed to third parties (e.g., an employer who purchased your training), may need to be retained to meet legal obligations or fulfill our contractual commitments.

Cookie Choices

Refer to Section 4 above for information about managing cookies and similar technologies, including our recognition of Global Privacy Control signals.

14. User Content and Public Areas

If you post reviews, comments, forum posts, or other content in public or interactive areas of the Sites ("Interactive Content"), that content may be viewed by other users and the general public. We cannot control the actions of other users with whom you may choose to share your Interactive Content. Post at your own risk and do not include personal information that you do not want made public.

If you remove your Interactive Content, copies may remain in cached or archived pages or may have been saved by other users. Please review our Terms of Service for restrictions on the content you may post.

15. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this Policy. If we make material changes, we will provide additional notice, such as by email to the address associated with your account or by a prominent notice on the Sites, before the changes take effect. Please review this Policy periodically. Your continued use of the Sites or Services after the effective date of any changes constitutes your acceptance of the updated Policy.

16. Contact Us

If you have any questions, comments, or concerns about this Policy or our privacy practices, or if you would like to exercise your rights, please contact us:

Food Handler Solutions, LLC

Attn: Privacy Officer

2931 Ridge Rd Ste 101 #537

Rockwall, TX 75032

United States

Privacy inquiries: privacy@foodhandlersolutions.com

Legal inquiries: legal@foodhandlersolutions.com

Customer support: help@foodhandlersolutions.com

Website: https://foodhandlersolutions.com