CALIFORNIA RESIDENT PRIVACY REQUEST FORM

Under the California Consumer Privacy Act ("CCPA"), consumers who are California residents ("Consumers") have the following rights with respect to their personal information:

• Right to Know – The Consumer may request that a business disclose personal information that the business has about the Consumer during the preceding twelve (12) months. A Consumer may request such disclosures up to two (2) times in a twelve (12) month period.
• Right to Delete – The Consumer may request that a business delete personal information that the business has about the Consumer.
• Right to Opt Out – The Consumer may request that a business not sell personal information that the business has about the Consumer. To exercise the Right to Opt Out, visit carvel.truyo.com/consumer/donotsell.

If you are a Consumer, or the authorized agent of a Consumer, and you wish to exercise the Right to Know or Right to Delete under the CCPA, please fill out this form and click Submit, which will automatically submit the form to Carvel for processing.

1. Consumer Details

   The CCPA requires that businesses verify Consumer requests to a reasonable degree or a reasonably high degree of certainty, depending on the nature of the request. We will use the information you provide in this Section 1 to verify your identity by matching it with any personal information we retain for the Consumer.

   You must, at a minimum, provide the information marked with an asterisk.

   *I declare under penalty of perjury that I am a California resident:

   Yes No
   *I hereby certify under penalty of perjury that I am the Consumer whose personal information is the subject of this request:

   Yes No
   (If you are not the Consumer but you are the authorized agent of the Consumer, please complete Section 1 for the Consumer and Section 3 for the Authorized Agent.)
   
   

   
   *First Name(s)

   
   *Last Name(s)

   
   Postal Code

   
   *Email

   *Your Relationship with Us (select all that apply)

   • I receive marketing emails from Carvel.
     (If you want to unsubscribe from marketing emails instead of making a request to know or a request to delete, please submit your request here. If you unsubscribe from marketing emails then you may miss out on valuable offers that Carvel sends through marketing emails.)
   • I am a member of Carvel's rewards program.
     (Warning: If you exercise your Right to Delete then your Carvel rewards account will be deleted and you will lose your rewards points. To update your rewards account instead of exercising the Right to Delete, please log into your rewards account. To unsubscribe from marketing emails instead of exercising the Right to Delete, please submit your request here.)
   • I shop at Carvel stores.
   • I order products on Carvel's website.
   • I purchase Carvel products from third parties, such as Ubereats, Postmates, Doordash, and Grubhub.
     (Note, you will need to contact the third party to exercise your Right to Know or Delete any personal information the third party has collected about you.)
   • I am a Carvel employee.
   • I requested information on Carvel franchising.
   • I am a Carvel franchisee or have a business relationship with Carvel.
   • Other. (In the area below, please provide any further details on your relationship with us to help us identify you - 100 character limit)

   
   Other Relationship

2. Request (Only one rights request per form)

   Please check the relevant box below to indicate the right you are exercising today.

   Right to Know

    

   Right to Delete
   (Warning, if you make a Right to Delete Request, your Carvel rewards account will be deleted and you will lose your rewards points. You will not be able to receive valuable coupons, invitations to great promotions, and other important news and information related to Carvel.)
3. Authorized Agent Details

   If you are an authorized agent acting on the behalf of a Consumer in making this request, you must submit proof that the Consumer has provided you written permission to submit this request, either in the form of a power of attorney or a written authorization signed by the Consumer along with proof of the Consumer's identity. If you are an authorized agent, please check the box below, complete this Section 3 and follow the instructions for providing proof of authorization and proof of the Consumer's identity. You must, at a minimum, provide the information marked with an asterisk.

   *I hereby certify under penalty of perjury that I am the authorized agent for the consumer whose personal information is the subject of this request:

   
   Yes No

   Please provide the information below:

   
   *Agent Name

   
   *Agent Contact Number

   
   *Agent Email

   Instructions: Within seven (7) days of submitting this request, email proof of authorization and proof of the Consumer's identify to privacy@carvel.com. Include "Proof of Authorization" in the subject line of your email. If you do not provide the signed authorization, we cannot honor any request you submit on behalf of the Consumer.

4. Process and Timing

   After you click Submit below, we will send an email to the Consumer, requesting verification of the email address entered in Section 1 above. For requests submitted directly by the Consumer, if the Consumer does not click on the link in the email within seven (7) days to verify the email address, we will cancel the request. For requests submitted by an authorized agent on behalf of the Consumer, if the authorized agent does not provide proof of authorization and proof of the Consumer's identify within seven (7) days after submitting the request, we will cancel the request. We will provide a response to your request within forty-five (45) days after receiving the request. We may take up to an additional forty-five (45) days, for a total of ninety (90) days, if necessary, to respond to the request. You will be notified by email if we will need an additional forty-five (45) days to respond.