Privacy at McBride's

1

Information we may collect

Information you provide

McBride's may receive information that a person chooses to provide by phone, text message, email, in person or through another customer-service interaction. This may include a name, phone number, email address, vehicle information, storage preferences, move-in timing and the content of the request.

Messaging information

When a person uses the text-messaging service, McBride's may receive the phone number, messaging history and information included in the messages. The existing messaging policy identifies Sakari as the service provider used to deliver the messaging program.

Website interaction information

The current contact-page email helper prepares a message in the visitor's own email application. The form is designed not to submit or store the entered information on the website. A hosting provider, analytics service or other website technology may separately process technical information if those services are enabled.

Other voluntary information

If McBride's offers a survey, contest, research activity or similar program, McBride's may receive the contact information and other details a participant chooses to provide.

3

How information may be disclosed

McBride's may disclose information in the following circumstances:

• Service providers: Vendors that support communications, hosting, payment, business systems or other operations may process information for McBride's.
• Legal and safety reasons: Information may be disclosed when McBride's believes disclosure is necessary to comply with law, legal process or government requests; enforce an agreement; or protect rights, safety, privacy or property.
• Business changes: Information may be transferred as part of a merger, sale, financing, reorganization or similar business transaction, subject to applicable law.
• At the person's direction: Information may be disclosed when a person requests or authorizes the disclosure.

The existing messaging policy states that mobile information will not be shared with third parties or affiliates for their marketing or promotional purposes. Text-message opt-in data and consent will not be shared with third parties for their own marketing.

5

Website technology, hosting and analytics

Web servers commonly process technical data needed to deliver pages, such as an IP address, browser type, device information, referring page, requested URL and date or time of access. McBride's should confirm which technical data its actual hosting provider records.

If analytics, advertising technology or cookies are added, this policy and any required notice or consent mechanism should be updated before or when those technologies begin collecting information. The present draft does not claim that a particular analytics or advertising vendor is active.

Links to third-party websites, maps, email applications or telephone services are governed by the privacy practices of those third parties after the visitor leaves the McBride's website.

7

Privacy choices and requests

A person may contact McBride's to ask about personal information associated with an inquiry, request correction or deletion, or ask questions about privacy practices. The ability to fulfill a request may depend on identity verification, applicable law and record-retention obligations.

California law provides specific rights to consumers when a business is subject to the California Consumer Privacy Act. Those rights can include requests to know, delete or correct personal information; opt out of the sale or sharing of personal information; limit certain uses of sensitive personal information; and receive non-discriminatory treatment for exercising applicable rights.

This draft does not represent that McBride's is or is not subject to every CCPA requirement. Applicability depends on facts that should be reviewed with qualified counsel. If CCPA applies, the final policy and point-of-collection notices should include the required disclosures and request methods.

9

Changes to this policy

McBride's may update this policy when website features, vendors, business practices or legal obligations change. The published page should display an effective date and should be reviewed whenever a new collection point, analytics tool, chatbot, availability database, payment process or AI-agent rental feature is introduced.

Draft date

October 27, 2026

Effective date

To be assigned after legal and operational review