LEGAL INFORMATION

TERMS OF USE
BY ACCESSING THIS WEB SITE, YOU AGREE TO BE BOUND BY THE TERMS AND CONDITIONS BELOW. IF YOU DO NOT AGREE TO THE TERMS AND CONDITIONS BELOW, DO NOT ACCESS THIS WEB SITE OR ANY PAGES THEREOF.

COPYRIGHTS
Copyrights in the page content or display screens, and in the information and material within including their arrangement, are owned by Flores & Associates, LLC. unless otherwise indicated. No information or content except as otherwise expressly stated herein, may be copied, transmitted, displayed, performed, distributed, or otherwise used in whole or in part in any manner without Flores' prior written consent, except to the extent permitted by the Copyright Act of 1976, as amended, and then, only for your personal nonbusiness use.

CONTENT
The information, services, products, data, and materials contained in this web site are provided on an "as is" basis without warranty and Flores, to the maximum extent permitted by law, does not assume responsibility or guarantee the accuracy, timeliness, or completeness of the content. The content is provided to enhance your understanding and is for illustrative purposes only—use the information at your own risk. Content may contain explicit health and/or medical materials. If you find these materials offensive, do not use this web site.

APPLICABLE LAW, PERSONAL JURISDICTION, AND VENUE
These Terms of Use shall be governed by, and construed and enforced in accordance with the laws of the State of North Carolina (excluding conflicts of law principles). By using this web site, you agree to submit to the exclusive personal jurisdiction and venue of the federal and state courts located in Mecklenburg County, North Carolina, with respect to all matters.

UNAUTHORIZED USE
Unauthorized use of Flores' web site(s) and systems, including but not limited to unauthorized entry, misuse of passwords, or misuse of any information posted to a site, is strictly prohibited.

CHANGES TO TERMS
Flores reserves the right to update these Terms of Use at any time. Continued use of the Flores web site and/or services, signifies your acceptance of any changes.

Flores does not warrant the accuracy, adequacy, or completeness of the information and materials contained herein. Flores disclaims all warranties and representations of any kind with regard to the web site, including any implied warranties of merchantability or fitness for any particular purpose. Under no circumstance will Flores be liable for any indirect, consequential, incidental, special, punitive, or exemplary damages arising out of any use of or inability to use the web site or any portion thereof, regardless of whether Flores has been apprised of the likelihood of such damages occurring and regardless of the form of action, whether in contract, warranty, tort (including negligence). strict liability, or otherwise.

SECURITY
At Flores, protecting your privacy and security is our top priority. We understand the importance of security when managing your information online and over the phone. Flores will never ask for your login password through email or phone call, but we may ask for the last four digits of your Flores debit card, your Payroll ID number, or other identifying information to verify you on a phone call. Some tips to prevent fraud and identity theft include:

• Use unique passwords for each of your online logins. If you have trouble remembering them all, consider using a well-reviewed password manager.
• Never give out your password for your Flores login or your email account.
• Never give out your Flores debit card number or Social Security number to solicitors or callers that you have not contacted.
• Check your Flores Account frequently using Flores247.com or Flores Mobile and by reviewing notifications we send to your registered email (e.g., account updates, profile changes).
• Be suspicious of all e-mail hyperlinks to your Flores account and especially ones that ask for you to login after you click the link. Navigate to our web site directly by using a bookmark or typing https://Flores247.com/ in your browser's address bar.
• Avoid logging into your Flores or email account on public computers.
• Activate two-factor-authentication for additional security
• Report any suspicious activity including automated messages inquiring about your account or calls from sources you cannot identify. If you feel that you have become a victim of suspicious activity, report the information immediately to Flores 800.532.3327.

PRIVACY STATEMENT

OUR COMMITMENT TO PRIVACY
Your privacy is important to us. As part of providing our services to you, you understand that we will obtain personal information about you. We take the responsibility of maintaining the confidentiality of this information seriously. This privacy notice is provided so that you will be aware of the measures we take to protect your privacy. It also describes information we collect and how we use this information to conduct our business. We do not sell our customer lists or individual customer information. By using our site you consent to terms of this Privacy Statement, including your consent to our use and disclosure of information about you in the manner described in this Privacy Statement.

INFORMATION WE COLLECT
The following is a nonexhaustive list of information we collect about you in order to provide services to you:

Name Physical Address Social Security Number Date of Birth Email Address Phone Number
HOW WE USE INFORMATION
We retain your personal information in order to provide products and services and may, from time to time, provide such information to nonaffiliated third party service providers to perform services for or functions on behalf of us, to effect, administer, or enforce transactions authorized by you; for example,

To verify your identity under the USA PATRIOT Act

To open and administer your accounts

To help us protect you and us from financial loss

To prepare account statements

To prepare annual tax reporting information, if applicable

We may also exchange information with reputable reference sources or reporting agencies for risk management, and verification, in order to maximize the accuracy, and security of your personal information. Only information needed to service your account or protect against fraud will be used or provided, in accordance with standard industry practice, unless we are required or allowed to do so by law. We will not market additional products or services to you if you advise us that you do not wish for us to do so.

In addition, we will collect and store the following:

• Names of the dependents (and other identification or "ID") that are covered by your account
• Names and ID of people authorized by you to use your account
• Names and ID of people authorized by you to access your account information
• Transactions with us such as your account balance, fees, payments, deposits and the identity of persons to whom you make payments, including health care providers
• The information can come from one or more of the following sources:
  • On account forms, or in communications with us
  • From your employer, health plan, or enrollment provider
  • Information from public sources such as government records
  • From information you provide us on our website

OUR INFORMATION SECURITY STANDARDS
We have developed policies and procedures to keep your personal information confidential and secure. We restrict access to those employees and other persons who must use that information to provide services on our behalf. We maintain physical, electronic and procedural safeguards, in compliance with applicable laws, regulations and industry standards, to protect the confidentiality of the personal information we obtain.

We require our service providers to maintain the same level of confidentiality and security that we do. We continually update and improve our security standards and procedures to help protect against anyone gaining unauthorized access to your confidential information and to prevent fraud.

ONLINE PRIVACY AND SECURITY
We collect and use the information you provide us online to respond to your needs and administer your accounts.

USE OF "COOKIES" ON Flores'S WEB SITES
While visitors to our web site(s) remain anonymous, we do occasionally utilize "cookies" to provide a more valuable experience. Such cookies are used only to enhance the customer's experience. We do not use cookies for marketing or tracking purposes. (A cookie is a small text file sent by a Web server and stored on your hard drive in your browser. Cookies cannot "read" information about you from your computer or be used to "steal" information about you; cookies do not carry viruses and are not programs that can perform functions on your computer. Most browsers will allow you to disable cookies, or can be set to notify you when you receive a cookie, thus giving you the opportunity to decide whether or not to accept it.) If you choose to disable cookies certain functionality on the website may be impaired or may not work at all.

IDS AND PASSWORDS
To access certain online services, you will need a User ID and a Password. This information may either be provided to you or you will be allowed to choose your own. The User ID and Password are designed to protect you by confirming your identity to our computer network systems, and are to be kept confidential. Our employees do not have access to your password. It is very important that you not share this information or allow a computer to "remember" your password, particularly if you are using a computer with public access such as one located in a library. For additional security, you may be required to change your password from time to time. It is strongly recommended that you turn on two factor authentication to further secure your account.

ENCRYPTION AND SECURITY
Information provided via our web portal is submitted within a secure session. These sessions utilize Transport Layer Security (TLS, formerly known as SSL) technology in order to ensure that the information is encrypted while in transit. Your browser must be able to support this technology in order to use our web services.

E-MAIL
E-mail, by nature, is not secure and may be intercepted and viewed by others. Therefore, you should refrain from sending email that contains any confidential or private information, such as your social security or credit card number. We will not send you any email that contains confidential information that would allow identity theft (such as SSN) or contains protected information (such as your health information).

DATA SHARING ARRANGEMENTS
Your employer, for your convenience, may have enabled functionality that would permit you to view your Flores account information on another party's website or for other purposes that support the data sharing arrangement. If you have such an arrangement, we will share the information defined in the arrangement (such as account balance) that is necessary to provide the service, which may be stored on their servers or systems. We are not responsible for the privacy and security practices of third party systems and do not control their use or further disclosure of information.

CALIFORNIA AND VERMONT PRIVACY NOTICE
For California and Vermont residents, the information sharing practices described above are in accordance with federal law. California and Vermont law places additional restrictions on sharing information about their residents, and our policies comply with such restrictions.

California Civil Code Section 1798.83 permits you, if you are a California resident, to request certain information regarding disclosure of personal information to third parties for their direct marketing purposes. Flores does not provide third parties with personal information for marketing purposes. If you have a question concerning this, please send an e-mail to privacy@Flores247.com or write us at Privacy Officer, Flores & Associates, LLC., PO Box 31397, Charlotte, NC 28231-1397.

Cal. Bus. And Prof. Code Section 22575 also requires us to notify you how we deal with the "Do Not Track" settings in your browser. Currently, Flores247 does not respond to the Do Not Track settings.

CALIFORNIA CONSUMER PRIVACY ACT SUPPLEMENTAL NOTICE
This California Privacy Notice is intended to supplement our Privacy Policy and applies solely to visitors, users, and others who are California residents.

To understand our privacy practices, you should refer to both our Privacy Policy and this supplemental notice.

The California Consumer Privacy Act ("CCPA") is intended to apply to personal information we collect in the course of our business. This notice does not apply to our products that are excepted from CCPA, such as those that are subject to HIPAA and ERISA.

The CCPA defines "Personal information" as information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a consumer or device.

Below are the categories of Personal Information and the CCPA Information that we may collect, as permitted by law:

Category	Examples of Information We Collect
A.	Identifiers. Real name, postal address, email address, account numbers.
B.	Personal information categories listed in the California Customer Records statute (Cal. Civ. Code 1798.80(e)). Name, address, email address, account number, health insurance information
C.	Protected classification characteristics under California or federal law. Age, marital status, gender
D.	Commercial information. Products or services purchased, consumer history
E.	Biometric information. Medical information related to claims for reimbursement
F.	Internet or other similar network activity. website useage history
G.	Geolocation data. Physical location, such as location of website access
H.	Sensory data. Audio recordings of calls, medical information related to claims for reimbursement.
I.	Professional or employment-related information. Employer and employment history
J.	Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Where applicable, student information related to eligibility for benefits
K.	Inferences drawn from other personal information. Profile based on preferences, such as website opt-ins or claims for reimbursement

Categories of Sources
The CCPA information we collect comes directly from you when you inquire about our products and services via our website or by telephone or when you file a claim for reimbursement or view our website; from your employer (where applicable) where your employer is providing benefits; and from third parties that assist us in providing these benefits.

How We Use Information
We may use or disclose the personal information listed above for the following purposes, as permitted by CCPA and other applicable law:

• To provide you with information about our products and services
• To administer the products and services that we offer, including to determine eligibility or to review and pay claims
• To review product performance to evaluate benefits to be offered
• To engage service providers to assist us in administering and providing our products and services
• To consult with you or others designated by you, or as allowed by law, regarding your benefits
• To provide data analytics to allow us to assess product performance or enhance our products or website
• To comply with administrative or legal requests, subpoenas, or otherwise required by law
• For any purpose that would be permitted under HIPAA.

Selling your Personal Information
We do not sell your CCPA information.

Your Rights
In the future, where the CCPA applies to the product or service we offer, you may have the right to request access, data portability, and deletion rights.

Non-Discrimination
We will not discriminate against you for exercising your CCPA rights.

Changes to Our Privacy Notice
We reserve the right to amend this privacy notice at our discretion and at any time.

Requesting Notice in Alternative Format/Language
You may be able to request this notice in another language where we provide such notices in the ordinary course of business or in an alternative format if you have a disability. Please see our contact information below to request an alternative format.

Contact Information
If you have any questions or comments about this notice, our Privacy Policy, the ways in which we collect and use your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Phone: 1.800.532.3327
Email: Privacy@Flores247.com
Postal Address: Flores & Associates, LLC.
Attn: Privacy Officer
PO Box 31397
Charlotte, NC 28231-1397

NEVADA PRIVACY NOTICE
Nevada law requires that we also provide Nevada residents with the following contact information: Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E Washington St., Suite 3900, Las Vegas, NV 89101; phone: 702.486.3132; e-mail: BCPINFO@ag.state.nv.us.

We hope our Privacy Notice will help you understand how we collect and share information. If you have any questions, please contact us. We are required by federal and state law to provide you with a copy of our Privacy Notice every twelve months. We reserve the right to change this Privacy Notice, in whole or in part, by providing notice in accordance with applicable law.

GDPR
The General Data Protection Regulation ("GDPR") is an EU data protection and privacy regulation. Our services are outside the scope of GDPR as we are providing services related only to U.S. employee benefits.

ENTITIES COVERED BY THIS PRIVACY STATEMENT
This privacy statement applies to Flores & Associates, LLC. and any subsidiaries unless otherwise indicated.