Nebraska Privacy Supplement

Last Updated: September 4, 2025

This supplement offers extra details for people residing in Nebraska in accordance with the Nebraska Data Privacy Act (NDPA). All phrasing in this part reflects the definitions established in the NDPA. It does not cover details outside the category of "personal data," including anonymized content or publicly obtainable information as specified under the NDPA.

Should you have inquiries or need to reach us about this privacy supplement, please email compliance@xendurance.com.

Data Transfers and Personalized Marketing

Our organization conducts "sales" of specific personal data to external entities, as defined by the NDPA, encompassing categories such as unique individual indicators, online behavior records, and geographic details.

We manage personal data to facilitate tailored promotions, per the NDPA, involving elements like individual indicators, online behaviors, purchasing history, and geographic information. This enables the delivery of promotions that better match your interests.

You can choose to exclude yourself from these activities through this email, compliance@xendurance.com.

Automated Assessments

Our practices do not encompass automated evaluations resulting in determinations with notable legal or comparable implications.

Your Safeguards Under NDPA

The protections provided by the NDPA are outlined below. To initiate a privacy inquiry, use this email, compliance@xendurance.com.

Access Privileges

You can confirm if we are handling your personal data and retrieve that information. In cases of automated handling, you qualify to receive a copy in a movable and convenient format that supports sharing with another entity.

If you submit an access inquiry more than twice within a 12-month timeframe, a minor charge may be imposed.

Erasure Privileges

You may direct us to remove any personal data we have gathered from or about you. We will completely erase such data from our systems and instruct our vendors to do the same, though we might retain it if required for particular lawful objectives.

Any retained information for these objectives will not undergo handling for alternative purposes.

Protection from Unfair Treatment

Invoking your NDPA privacy safeguards will not lead to biased actions from us, such as altered pricing or reduced service levels.

We will avoid any form of reprisal against you in roles like employee, job applicant, or freelance contributor for utilizing these safeguards.

Withdrawal Options

For data transfers: Activate your withdrawal choice via compliance@xendurance.com.

For personalized marketing: Activate your withdrawal choice via compliance@xendurance.com.

For automated assessments: Our operations omit assessments connected to decisions with legal or similarly vital impacts.

Designated Representative

You can appoint a representative to file a withdrawal request on your behalf, potentially using mechanisms like a site link, browser option, or universal device preference. We will adhere to these if we verify your identity and the representative's permission to proceed for you.

Automatic Withdrawal Indicators

Certain browser configurations enable the automatic sending of a withdrawal marker, such as the Global Privacy Control (GPC), to platforms you access. Upon detection, we set a U.S.-oriented privacy marker in your browser, prompting compliant external parties to halt monitoring your site behavior. This withdrawal links solely to your browser's distinct marker, not to profile data, due to our lack of insight into browser-profile associations. GPC works with specific browsers or extensions; discover enabling instructions here.

Rectification Privileges

You can request adjustments to errors in your personal data, considering the information's characteristics and our handling goals.

Validating Your Inquiry

After receiving your inquiry, we will match the supplied details against our collected records for validation. If we cannot confirm it, we may seek further details. Failure to provide more or to confirm via standard methods could result in rejection. Validation is not needed for withdrawal requests, but rejection may occur if we reasonably and documentedly suspect fraud.

Challenge Mechanism

Should we refuse to fulfill any privacy inquiry, you can contest that refusal in a timely manner, no more than 90 days after our notification. To lodge a challenge, utilize this email, compliance@xendurance.com and note "Appeal a Decision" in the title.

If you feel your safeguards have been breached and cannot resolve it directly with us, you may submit a grievance to the Nebraska Attorney General’s Office.