Privacy Policy

PoolRentalNearMe.com / 10,000 Solutions LLC

Effective Date: 08/24/2025

Last Reviewed: 09/01/2024

Policy Version: PRNM-2025.02 (supersedes prior versions, including 855527-EX)

WHO WE ARE This Privacy Policy explains how 10,000 Solutions LLC (doing business as “Pool Rental Near Me,” “PRNM,” “Company,” “we,” “us,” “our”) collects, uses, shares, protects, and retains personal information related to: The website PoolRentalNearMe.com and any subdomains Mobile applications (current and future) The Learning Academy or educational modules Communication channels (email, SMS, chat, phone, social media) APIs, integrations, and related services Collectively referred to as the “Services.” By using the Services you accept this Privacy Policy. If you do not agree, do not use the Services. SCOPE AND ROLES Data Controller (GDPR context): 10,000 Solutions LLC for core Service operations. Data Processor: In limited cases when acting on behalf of certain enterprise or integration partners (if applicable). Hosts and Guests: Host-selected listing data (e.g., pool photos) may appear publicly once approved. Recruiters / Acquisition Partners / Affiliates: Treated as business users with additional compliance expectations. DEFINITIONS (PLAIN LANGUAGE) Personal Information / Personal Data: Information that identifies or can reasonably be linked to an individual. Sell (CCPA/CPRA): Transferring personal information for monetary or other valuable consideration. Share (CPRA): Disclosure of personal information for cross-context behavioral advertising. Sensitive Personal Information (SPI): Government IDs, precise geolocation, financial account numbers, certain verification documents. Global Privacy Control (GPC): A browser or device signal we treat as an opt-out where required. CATEGORIES OF PERSONAL INFORMATION WE COLLECT We may collect some or all of the following categories (examples included). Where a purpose is stated it is illustrative rather than exhaustive. Identifiers: Name, username, display name, email address, phone number, IP address. Used for account creation, login, communication, security. Contact and Profile Details: Address (billing or approximate location), profile photo, biography. Used for listings, trust, and support. Account Credentials: Password (hashed), authentication tokens, session data. Used for secure access. Payment and Payout Data: Billing address, transaction history, partial card or payment token (stored by processor), payout details. Used for bookings, host payouts, accounting, tax compliance. Demographic Information: Age (to validate eligibility), optional gender or language preferences if provided. Used for eligibility and platform localization. Commercial / Transactional Information: Booking history, host earnings, items purchased (e.g., premium features). Used for analytics, service delivery, payouts. Internet / Network Activity: Log data, browser type, device type, referral URLs, pages viewed, session timestamps. Used for performance, security, analytics. Device and Technical Data: Operating system, app version, unique device identifiers. Used for troubleshooting, feature optimization. Location Data: Approximate location (IP-based). Optional precise geolocation if you grant permission. Used for search relevance, fraud prevention. User-Generated Content: Listing descriptions, pool images, capacity info, pricing, reviews, ratings, messages (where stored), course feedback. Used to power the marketplace and educational offerings. Communication Records: Support tickets, emails, chat transcripts, phone logs (where legally permissible). Used for customer service and quality assurance. Education / Learning Data: Course enrollments, module completion status. Used to deliver Learning Academy functionality. Inferences and Preference Segments: Booking propensity, category interests, host performance indicators. Used for personalization and product improvement. Identity Verification Data (if implemented): Government ID confirmation details or verification tokens. Used for fraud prevention and trust. Sensitive Personal Information (limited and only if necessary): Identity verification fragments, payment token reference, precise geolocation (only with explicit permission). Used strictly for security, compliance, or core functionality. We do not knowingly collect biometric data. We do not store full payment card numbers (our payment processor handles secure tokenization).

SOURCES OF PERSONAL INFORMATION Direct Submission: Registration forms, booking forms, host listing creation, support communications, surveys, feedback forms. Automatic Collection: Cookies, pixels, SDKs, analytics scripts, server logs. Third Parties: Payment processors, analytics providers, identity verification and anti-fraud vendors, marketing or advertising networks, referral and affiliate partners, social platforms if you connect accounts. Publicly Available Information: Public records or publicly posted pool-related details used to validate accuracy or legitimacy. Referral / Recruiter Partners: Host lead data or contact information submitted under partner agreements. LAWFUL BASES FOR PROCESSING (GDPR / UK GDPR / SIMILAR FRAMEWORKS) We rely on one or more of the following lawful bases: Contract: To provide requested Services (accounts, bookings, payouts). Legitimate Interests: Improve platform, ensure security, prevent fraud, analyze usage, enhance user experience (balanced against individual rights). Consent: Marketing emails/SMS where required, non-essential cookies, precise geolocation, certain promotions. Legal Obligation: Tax reporting, responding to lawful requests, maintaining financial records. Vital Interests / Safety: Addressing urgent safety incidents or emergencies. Public Interest (rare): Only if mandated by binding legal authority. You may withdraw consent at any time where consent is the lawful basis.

HOW WE USE PERSONAL INFORMATION Provide and operate the Services (accounts, bookings, payouts, messaging). Display and facilitate host listings and guest discovery. Personalize search results, recommendations, notifications, dashboards. Process payments, issue refunds, manage host payouts, prepare tax documents. Communicate: Transactional notifications, service changes, support responses. Marketing (if permitted): Offers, promotions, platform updates. Learning Academy delivery (courses, progress tracking). Security and Fraud Prevention: Monitor suspicious activity, block abusive conduct. Analytics and Product Development: Usage trends, performance metrics, feature testing. Compliance and Dispute Resolution: Investigate disputes, enforce terms, respond to lawful requests. Corporate Transactions: Due diligence for mergers, acquisitions, reorganizations, or asset sales. AI / Automated Assistance (non-determinative): Score trust or quality signals with human oversight available. COOKIES AND SIMILAR TECHNOLOGIES We may use: Strictly Necessary Cookies: Authentication, security, core navigation. Functional Cookies: User preferences, saved filters. Performance / Analytics Tools: Traffic measurement, feature effectiveness, error tracking. Advertising / Retargeting Technologies: Interest-based ads (only where permitted and after opt-in/opt-out compliance). Social / Embedded Media Scripts: Map tiles, video embeds, social sharing. Controls you have:

Regional cookie consent banner (for EU/UK/EEA and certain US states). Browser or device settings to clear or block cookies. Opt-out of certain analytics or ads where mechanisms exist. Global Privacy Control signal honored as an opt-out of “sale” / “share” where required. DATA SHARING AND DISCLOSURE We do not sell personal information for monetary consideration. We may “share” identifiers and usage data for cross-context behavioral advertising unless you opt out. Potential disclosures: Service Providers / Processors: Hosting, payments, email/SMS delivery, analytics, identity verification, image moderation, customer support, security tools. Advertising / Marketing Partners: Only for permitted and consented ad use. Payment and Payout Partners: Transaction settlement, fraud checks, tax reporting. Legal / Regulatory: To comply with applicable law, lawful requests, and to protect rights. Corporate Transactions: Transfer to successor entity during mergers, acquisitions, reorganizations, asset sales (with notice). Other Users: Host listing content (photos, approximate location, description), reviews, usernames or display names. Aggregated or De-Identified Data: Market analysis, trends, platform performance. With Consent: Any additional disclosures you explicitly authorize. INTERNATIONAL DATA TRANSFERS

Data may be processed in the United States and other jurisdictions. Safeguards may include Standard Contractual Clauses (SCCs), UK Addendum, or equivalent legal mechanisms. Additional technical and organizational measures are applied to protect data. You can request more details (subject to redactions).

DATA SECURITY

We use organizational, technical, and administrative safeguards including:

Encryption at rest and in transit (TLS) Role-based access controls and least privilege approaches Segmented infrastructure and credential management Vulnerability management, patching, and monitoring Incident response plan and breach notification protocols Despite safeguards, no method of transmission or storage is 100% secure; user diligence (strong password, avoiding credential reuse) is encouraged.

DATA RETENTION We retain personal information only as long as necessary for stated purposes or legal obligations. Illustrative retention patterns: Account Profile Data: Retained while account is active plus a reasonable period (e.g., up to 2 years) for reactivation or dispute resolution. Transaction and Financial Records: Typically 7 years (or longer if required) for tax/audit/legal obligations. Booking and Messaging Records: Duration of account plus a limited period for support, fraud, and dispute handling. Support Tickets: Generally 3–5 years for quality assurance and reference. Marketing Preferences and Opt-Out Logs: Retained to demonstrate compliance. Host Payout and Tax Documentation: 7–10 years depending on jurisdictional requirements. Security / Fraud Logs: Retained for extended periods (e.g., 3–7 years) to detect patterns. Analytics Data (pseudonymized or aggregated): Typically 12–36 months. De-Identified Data Sets: May be retained indefinitely (not reasonably re-identifiable). Upon verified deletion request and eligibility, we will delete, de-identify, or anonymize unless retention is mandated by law or necessary for legitimate defense.

YOUR RIGHTS AND CHOICES Rights vary based on jurisdiction but may include: Access: Request confirmation and a copy of personal data. Correction (Rectification): Update inaccurate or incomplete data. Deletion (Erasure): Request deletion; exceptions apply (legal obligations, disputes). Restrict Processing: Limit certain processing where legally available. Object: Object to processing based on legitimate interests or direct marketing. Data Portability: Receive certain data in a structured, commonly used, machine-readable format. Withdraw Consent: For activities relying solely on consent (e.g., certain marketing or geolocation). Opt-Out of Marketing: Use unsubscribe links, STOP for SMS (where implemented), or settings. Opt-Out of Sale/Sharing (California and similar states): Use the “Do Not Sell or Share My Personal Information” link or a recognized GPC signal. Limit Use of Sensitive Personal Information (CPRA): Where SPI use exceeds allowable scope (we currently restrict SPI to essential operations). Appeal (Colorado / Connecticut / Virginia / etc.): Appeal denied rights requests by emailing privacy contact; unresolved issues may be escalated to the state Attorney General. EU/UK Specific: Right to lodge a complaint with a supervisory authority, and right not to be subject to a decision based solely on automated processing producing legal or similarly significant effects (we do not currently engage in such processing). How to exercise rights:

Email (recommended): privacy@poolrentalnearme.com (proposed address) Provide sufficient information for verification. We generally respond within 30–45 days (extensions may apply under applicable law). CHILDREN’S PRIVACY

Services are not directed to children under 13 (US) or the minimum digital consent age in their jurisdiction (13–16 in the EU/UK depending on country). We do not knowingly collect data from minors under these thresholds. If you believe we inadvertently collected such data, contact us for deletion. Hosts must follow all laws regarding minors attending events.

MARKETING COMMUNICATIONS

Transactional Emails: Booking confirmations, security alerts, account notices (cannot generally be opted out). Promotional Emails / SMS / Push: You can opt out via unsubscribe link, STOP reply (SMS), device settings (push), or account settings. Learning Academy Notifications: May be managed separately once platform settings allow. USER-GENERATED CONTENT

Content you submit (listings, photos, reviews, public Q&A) may be displayed publicly. Avoid providing sensitive data in public fields. We may moderate or remove content that violates policies.

THIRD-PARTY SERVICES AND LINKS

External websites, integrated widgets, payment processors, or social media platforms have independent privacy practices. Review their policies. We are not responsible for third-party handling outside our control.

SECURITY INCIDENTS AND BREACH NOTIFICATION

If a data breach materially impacts your personal information, we will provide notifications as required by law, which may include recommended protective steps (e.g., password reset vigilance).

INTERNATIONAL USERS

By using the Services outside the United States you consent to transferring and processing your data in the United States and other jurisdictions, subject to safeguards described in this Policy.

AUTOMATED TOOLS AND PROFILING

We may apply non-sensitive scoring (e.g., host quality indicators, trust signals) to improve platform safety and performance. These do not produce decisions with legal or similarly significant effects without human involvement. You may request explanation or review.

FINANCIAL AND TAX COMPLIANCE

We process host payout information and may produce required tax forms (e.g., 1099-K or similar) and share with tax authorities where mandated.

CHANGES TO THIS POLICY

We may update this Policy periodically. Material changes may be highlighted via banner, email, or dashboard notice. Revised versions are effective on the posted Effective Date. Continued use after changes signifies acceptance.

CONTACT INFORMATION

Primary Privacy Contact:

10,000 Solutions LLC (Pool Rental Near Me)

Attn: Privacy Office

7785 Halbrook Terrace

Riverside, CA 92509 USA

General Support: hello@10000solutions.com

Privacy / Rights Requests: privacy@poolrentalnearme.com (proposed – create before publishing)

Phone (choose and standardize ONE before publishing): [Insert final chosen number]

If an EU/UK representative or Data Protection Officer becomes required, we will update this section.

CALIFORNIA AND OTHER STATE DISCLOSURES

We do not sell personal information for money. We may “share” data for cross-context behavioral advertising; you can opt out. No financial incentive programs are active (if introduced, we will provide a required notice). We do not knowingly sell or share data of individuals under 16. California Shine the Light: We do not share personal information with third parties for their own direct marketing in a manner triggering separate disclosure; if that changes, we will revise this Policy. Nevada: We do not sell covered information under Nevada law; requests may be sent to the privacy email. Colorado / Connecticut / Virginia / Utah: Your rights are detailed in Section 13; appeals are accepted via the privacy contact. DATA MINIMIZATION AND QUALITY

We collect only data reasonably necessary for stated purposes. We take steps to maintain accuracy (user-editable profile fields, correction workflows).

DE-IDENTIFICATION PRACTICES

Where feasible we de-identify or aggregate data by: removing direct identifiers, hashing or tokenizing linkage keys, and applying access controls. We will not attempt to re-identify de-identified data except internally to test anonymization effectiveness.

REQUEST VERIFICATION

We may verify identity by:

Sending a confirmation link to the registered email Requesting recent booking details or limited account metadata Requesting government ID only if strictly necessary (deleted or minimized after verification) ACCESSIBILITY

We aim to provide accessible formats (plain-language summary, large print) upon request. Contact us if you need an alternative accessible version or another language variant.

DISPUTE RESOLUTION (REFERENCE TO TERMS)

Any privacy-related disputes may also be governed by the Terms of Service dispute resolution clause. This Policy does not waive any mandatory rights.

DISCLAIMER

This Privacy Policy is for transparency and does not create additional contractual rights beyond those in the Terms of Service or applicable law.

PLAIN-LANGUAGE SUMMARY (OPTIONAL LAYERED DESCRIPTION – YOU MAY PUBLISH THIS SEPARATELY)

We collect information you give us plus data about how you use the site so we can run bookings, pay hosts, keep things secure, improve features, and (if you allow) send marketing or personalized ads. You can opt out of marketing and targeted advertising. We don’t sell your data for money. You can request to see it, fix it, or ask us to delete it. Contact privacy@poolrentalnearme.com with questions.