Effective as of January 1, 2026

This disclosure page supplements the Tyndale House Publishers privacy policy, which outlines how we collect personal information, who we collect it from, the purposes for which we use it, and the limited instances in which we may share that information.

According to the California Consumer Privacy Act (CCPA), California consumers have the right to knowledge, access, and deletion of their personal information. This section applies if you are a natural person who is a resident of California (“California Consumer”) and uses our services. Additional states may have similar privacy rights, which are addressed below.

In compliance with the CCPA, we are required to present these additional disclosures:

Purpose Limitation and Data Minimization. We are committed to limiting our collection, use, retention, and sharing of your personal information to what is reasonably necessary and proportionate to achieve the purposes for which we collect it, as we describe in this Notice. We collect, use, retain, and share personal information only for disclosed purposes that are compatible with the context in which it was collected, and we do not process personal information in a manner that is incompatible with those purposes. We retain personal information only for as long as reasonably necessary to fulfill such purposes, unless required or permitted by law.

Categories of personal information collected. We may have been collecting personal information about you and how you interact with us. This information falls into the following categories as established by the CCPA:

• Identifiers such as your name, alias, address, phone number, or unique personal identifiers such as IP address, cookies, wireless device ID, including employee and business-to-business personal information.
• Financial information such as a credit card number. We collect this information only temporarily during transaction processing then pass the data securely to our payment gateway. We do not store your financial information.
• Age, gender, or other protected classifications to help create a consumer profile through a survey.
• Commercial information such as transactional data, purchase history, or delivery information.
• Internet or network activity such as browsing history, browser type and language, content interaction information, content downloads, streams, and playback details
• Geolocation data such as city, state, and zip code associated with your IP address, and with your mobile device settings that help determine the location of your device or computer.
• Sensitive personal information: this may include the financial information and geolocation data, as described above, for the purposes noted above. We do not use sensitive personal information for other purposes.

Business or Commercial Purposes for which We Collected or Disclosed Personal Information. Personal information that Tyndale disclosed about customers for a business purpose fall into the following categories as established by the CCPA:

• Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, and providing analytical services.
• Auditing related to a current interaction with you and concurrent transactions such as counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance.
• Short-term use including customization of ads shown as part of an interaction
• Data security and fraud prevention for detecting security incidents, protecting against malicious or illegal activity, and prosecuting that activity.
• Repairs and debugging required to improve existing functionality.
• Research and Development initiatives necessary for technological development and demonstration.
• Quality and Safety activities the help us verify or maintain a service or device that is owned, manufactured, or controlled by us to improve, upgrade, or enhance that service.
• Commercial transactions that help us advance the economic interests of Tyndale through inducing another to buy, join, subscribe to, donate, exchange information, or engage directly or indirectly in a commercial transaction.
• We do not use automated decision-making technology or profiling that produces legal or similarly significant effects concerning you.

Categories of Sources from which We Collected Personal Information.

• Directly from you
• From other sources (such as company affiliates and/or business partners; advertising providers; analytics providers; marketers; public databases; consumer data resellers; social media networks; in accordance with your privacy preferences on such services; researchers; payments processors; and surveys).
• Through your use of the services we provide.

Retention. We keep your information for the length of time needed to carry out the purposes outlined in this Notice or and to adhere to our policies on keeping records (unless a longer period is needed by law). We will retain and use your information to the extent necessary to manage your relationship with us, personalize and improve your overall customer experience, and to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this Notice. This link describes the retention of personal information.

How We Share and Disclose your Information. We will share the personal information collected from and about you for various business purposes. We do not share personal information for advertising purposes of any person we reasonably believe to be under the age of sixteen without consent from either the parent/guardian (for consumers under the age of thirteen) or the consumer. You may request that we stop sharing your personal information with third parties for advertising purposes, subject to certain exceptions (such as our legal requirement to share the information). This link describes the categories of information we may share with third parties.

Right to access and disclosure. California consumers have the right to request twice during a twelve-month period, free of charge, the following information:

• Categories and specific pieces of personal information we have collected about you
• Categories of sources from which we collected the personal information
• Business or commercial purpose for which we collected the personal information
• Categories of third parties with whom we shared the personal information
• Categories of information we sell or disclose to third parties (as noted below, Tyndale does not sell consumer personal information).

Right to correction and deletion. California residents (or their authorized agent) can request that we correct inaccurate personal information we have collected from you or delete personal information we have collected from you, and tell our service providers to do the same, subject to certain exceptions (such as our legal requirement to keep the information).

Right to limit use and disclosure of sensitive personal information. California residents (or their authorized agent) can request that we only use your sensitive personal information, for example your precise geolocation data or racial or ethnic origin, for limited purposes, such as providing you with the services you requested.

Exercising CCPA Rights. Our main privacy policy provides options for exercising rights related to personal information which California residents may also use, including use of our contact form to make requests. Additionally, you may exercise your CCPA rights by sending an email to CCPA@tyndale.com, or by contacting us at 1-800-668-8300. For security purposes, we will verify your identity by requesting certain information from you such as your name and email address. We may need to ask for additional information to verify your identity if we feel your account has been compromised. Once we have verified your identity, we will address your request within 30 days, providing the requested disclosure, opt-out, or correction except where prohibited by law or exempted by CCPA. If we deny your request, you have the right to appeal. We honor Global Privacy Control signals.

No sale of personal information. Tyndale does not sell any personal information of consumers or share for cross-context behavior advertising.

No Discrimination. Tyndale will not discriminate against any consumer for exercising their rights under the CCPA.

Additional States. Residents of other states including Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, Oregon, Tennessee, Texas, Utah and Virginia may have similar privacy rights under state consumer privacy law, including the right to:

• Access and obtain a copy of your personal information
• Correct inaccurate personal information
• Delete personal information we collected from you
• Opt out of the sale of personal information or targeted advertising (Note: We do not engage in these practices)
• Not be discriminated against for exercising these rights

Consumers may exercise data privacy rights using the contact methods listed above, or in our main privacy policy.