HAUL, CO. – PRIVACY POLICY

Your Privacy at HaulCo — Quick Summary:

✅ We collect only what we need to provide and improve your move
🔒 We protect your info with encryption
❌ We don't sell your data
✉️ You can ask us to delete or correct your info anytime
♿ Accessible versions of this Policy available on request
🍪 We only set non-essential cookies with consent where required

( Note - This summary is provided for convenience. Please read the full Privacy Policy below for all details, definitions, and legally binding terms)

This Privacy Policy ("Policy") is adopted by Haul, Co., a Utah corporation, together with its wholly owned subsidiaries including Hauling Authority, LLC (collectively, "Haul," "we," "us," or "our"), and governs the collection, use, disclosure, and protection of Personal Information (as defined herein) obtained from or about individuals ("you" or "your") in connection with your access to or use of Haul's websites, mobile applications, proprietary software platforms, AI-powered tools, and related services, including household goods moving, quoting, dispatch, and booking (collectively, the "Services"). Certain services booked through the Haul platform are fulfilled and billed by Hauling Authority, LLC, our wholly owned subsidiary and federally licensed motor carrier of record.

BY USING THIS WEBSITE YOU EXPRESSLY CONSENT TO THE COLLECTION, USE, DISCLOSURE, AND PROCESSING OF PERSONAL INFORMATION AS DESCRIBED HEREIN. YOUR USE OF THE SERVICES WITHOUT SUCH AFFIRMATIVE CONSENT IS PROHIBITED.

1. SCOPE AND APPLICABILITY
1.1 This Policy applies to all Personal Information collected by Haul in connection with:
(a) visitors to our websites or mobile applications;
(b) customers who request quotes, schedule or book Services, or otherwise interact with us; and
(c) sub-haulers, vendors, agents, and other third parties who access or use our proprietary software platform or otherwise engage with us in connection with the Services.

1.2 This Policy applies to both online and offline collection of Personal Information and extends to individuals located in jurisdictions granting additional privacy rights (e.g., the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA/CPRA"). For residents of certain U.S. states additional rights may apply under applicable state privacy laws. This Policy is effective as of September 8, 2025 and was last updated on September 8, 2025.

1.3 Territorial Scope. The Services are directed to individuals in the United States. We do not offer goods or services to, or intentionally monitor the behavior of, individuals located in the EU or the United Kingdom.

1.4 Notice at Collection. At or before the point of collection, Haul provides this Privacy Policy, including Section 5.4 below, as its Notice at Collection under applicable law.

1.5 Employment-Related Data. If you are a job applicant, employee, or contractor, your Personal Information may be governed by a separate workforce privacy notice provided at or before the time of collection.

2. DEFINITIONS
For purposes of this Policy:
(a) "Personal Information" shall mean any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable natural person, as further defined under applicable law.
(b) "Processing" shall mean any operation or set of operations performed on Personal Information, including but not limited to collection, storage, use, disclosure, transfer, and deletion.
(c) "AI Processing" shall mean any automated or semi-automated processing of Personal Information by artificial intelligence or machine learning systems to generate outputs including but not limited to price estimates, routing instructions, and operational recommendations. Haul shall not use AI Processing to make solely automated decisions that produce legal or similarly significant effects unless such Processing is (i) necessary for the performance of a contract, (ii) authorized by applicable law, or (iii) based on your explicit consent.

3. PERSONAL INFORMATION
3.1 Information You Provide Directly.
(a) Contact details: name, email address, telephone number, physical address.
(b) Booking details: move origin and destination, inventory descriptions, requested dates, valuation elections, special instructions.
(c) Payment details: credit/debit card information and billing address (processed by PCI DSS-compliant third-party payment processors; Haul does not store raw card numbers).
(d) Account credentials for any Haul account.
(e) Communications: emails, chat logs, call recordings, and other correspondence.

3.2 Information Collected Automatically .
We use cookies, pixels, analytics tools (such as Google Analytics), and other tracking technologies to enhance user experience, monitor usage, and deliver targeted advertisements. You may disable cookies through your browser settings, but certain features of the Services may not function properly. In jurisdictions where required, we obtain your consent to non-essential cookies through Cookie Settings. You can change or withdraw your cookie consent at any time via the "Cookie Settings" link at the bottom of our website.
(a) Device and usage data, including IP address, browser type, operating system, device identifiers, and interaction logs.
(b) Geolocation data, if location services are enabled.
(c) Cookies, tracking pixels, and similar technologies.

In jurisdictions where required (e.g., the EU), we do not set non-essential cookies or similar tracking technologies unless you provide consent.

3.3 Information Obtained from Third Parties.
(a) Public databases, FMCSA carrier and safety records, commercial data providers, marketing partners, and social media platforms (where social account linkage is enabled).

4. DATA PROCESSING
Haul's lawful bases for Processing Personal Information include: (i) your consent; (ii) the performance of a contract to which you are a party; (iii) compliance with a legal obligation; (iv) protection of vital interests; (v) performance of a task carried out in the public interest; and (vi) Haul's legitimate interests, provided such interests are not overridden by your fundamental rights and freedoms. Personal Information may be Processed for the following purposes:
(a) to provide, schedule, and manage Services;
(b) to generate quotes and facilitate bookings, including through AI Processing;
(c) to verify the compliance and qualification of sub-haulers and carriers;
(d) to process payments and prevent fraud;
(e) to communicate updates, marketing, promotions, and policy changes;
(f) to comply with applicable laws, regulations, and lawful requests; and
(g) to enforce our agreements, protect our rights, and prevent misuse of the Services.
(h) to maintain safety, security, and integrity of the Services, systems, and assets.
Where we rely on legitimate interests, they include securing and improving the Services, preventing fraud and abuse, and ensuring network and information security. In some cases, providing certain Personal Information is a legal or contractual requirement; if you choose not to provide such information, we may be unable to provide some or all of the Services to you. Where required by law, we obtain your opt-in consent before processing Sensitive Personal Information (for example, precise geolocation).

5. DATA DISCLOSURE
5.1 Personal Information Disclosure. Haul may disclose Personal Information to:
(a) Service Providers engaged to perform functions on our behalf, including payment processing, cloud hosting, AI services, marketing, and compliance verification;
(b) Sub-Haulers and Carriers for the limited purpose of fulfilling booked moves;
(c) Regulatory and Legal Authorities as required to comply with applicable laws, including FMCSA and DOT regulations; and
(d) Successors-in-Interest in the event of a merger, acquisition, reorganization, financing, or sale of all or substantially all assets.

All such disclosures are made pursuant to written agreements requiring the recipient to maintain the confidentiality of the Personal Information, implement appropriate security measures, and use the information solely for the purposes specified by Haul. Where required by law, Haul will enter into data processing agreements with Service Providers that include instructions for processing, confidentiality obligations, and security requirements. We have disclosed the following categories of Personal Information to service providers and contractors for business purposes: identifiers; commercial information; internet or electronic activity; geolocation data (if enabled); audio/visual communications; professional or employment-related information; and inferences.

In the last 12 months, we have not sold or shared Personal Information for cross-context behavioral advertising.

5.2 Sale or Sharing of Personal Information. Haul does not "sell" Personal Information as defined by the CCPA/CPRA. Haul does not "share" Personal Information for cross-context behavioral advertising without your consent where such consent is required by law. You may exercise applicable "Do Not Sell or Share" rights via the "Do Not Sell or Share My Personal Information" link at the bottom of our website.

5.3 Do Not Sell or Share My Personal Information.

1) Right to Opt-Out. You have the right to direct Haul not to "sell" or "share" your Personal Information. "Sell" means disclosing Personal Information to a third party for monetary or other valuable consideration. "Share" means disclosing Personal Information to a third party for cross-context behavioral advertising, regardless of monetary consideration.
2) How to Exercise. You may exercise your "Do Not Sell or Share" rights at any time by: (i) emailing privacy@haulco.com with the subject "Do Not Sell or Share My Personal Information."
3) Global Privacy Control. If you enable a legally recognized browser-based opt-out preference signal (such as Global Privacy Control), Haul will treat that signal as a valid request to opt-out of sale or sharing for the browser or device in use.
4) Authorized Agents. You may designate an authorized agent to submit an opt-out request on your behalf. We will require proof of the agent's authority and may ask you to verify your identity directly.
5) Scope of Opt-Out. When you opt out, Haul will stop selling or sharing your Personal Information for cross-context behavioral advertising. This opt-out does not restrict our ability to disclose Personal Information to service providers or contractors for business purposes, as permitted by law.
6) We do not sell or share the Personal Information of consumers we know are under 16 years of age.

5.4 Notice at Collection. At or before the point of collection, Haul provides this Notice at Collection, which describes:

1) Categories of Personal Information Collected:
1) Identifiers (e.g., name, email address, phone number, physical address).
2) Commercial information (e.g., booking details, move origin/destination, valuation elections, special instructions).
3) Payment information (processed by PCI DSS-compliant third-party processors).
4) Internet or electronic activity (e.g., device data, IP address, interaction logs, cookies).
5) Audio/visual communications (e.g., call recordings, chat logs).
6) Professional or employment-related information (sub-hauler/vendor qualification data).
7) Inferences drawn from the above categories to generate quotes or service recommendations.
8) Account log-in credentials for your Haul account (username/email plus password or similar);
9) Precise geolocation (if device-based location services are enabled)
2) Purposes of Collection and Use:
1) To provide, schedule, and manage Services.
2) To generate quotes and facilitate bookings (including via AI Processing).
3) To process payments and prevent fraud.
4) To verify compliance and qualifications of sub-haulers and independent labor providers.
5) To communicate updates, marketing, promotions, and policy changes.
6) To comply with legal/regulatory obligations (e.g., FMCSA, DOT).
7) To enforce agreements, protect rights, and maintain security and integrity of systems.
3) Retention:
1) Financial transaction records: up to seven (7) years.
2) FMCSA-required move documentation: up to three (3) years.
3) Geolocation data: up to one (1) year.
4) Other Personal Information: retained as long as reasonably necessary for the purposes above, or as otherwise required/permitted by law.
4) Sale/Share Disclosure:
1) For the categories listed above, Haul does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising.

5.5 Targeted Advertising. You may opt out of the processing of Personal Information for targeted advertising. You may exercise this right by:(i) emailing privacy@haulco.com with the subject "Targeted Advertising Opt-Out"; or (iii) enabling a legally recognized opt-out signal where required by law.

5.6 Sale Opt-Out. Haul does not sell Personal Information for monetary consideration as defined under Nevada or Utah law. Nevada or Utah residents may nonetheless submit a sale opt-out request by: (i) emailing privacy@haulco.com with the subject "Sale Opt-Out"; or (ii) mailing a written request to Haul, Co., 1575 South River Road, St. George, Utah 84790.

6. DATA RETENTION
Haul retains Personal Information for the period necessary to fulfill the purposes outlined in this Policy, comply with legal or regulatory obligations, resolve disputes, and enforce agreements. In no event will Personal Information be retained longer than (i) seven (7) years for financial transaction records; (ii) three (3) years for FMCSA-required move documentation; and (iii) one (1) year for geolocation data. We may retain certain data for longer periods where necessary for Haul's legitimate business needs, to protect legal rights, resolve disputes, enforce agreements, prevent fraud or abuse, and for business continuity and disaster recovery purposes. Other Personal Information is retained as long as reasonably necessary for the purposes above, or as otherwise required or permitted under applicable law.

7. DATA RIGHTS
7.1 California Residents (CCPA/CPRA). You may, subject to verification, exercise the right to:
(a) know the categories and specific pieces of Personal Information we have collected;
(b) request deletion of Personal Information (subject to lawful exceptions);
(c) opt-out of any sale or sharing of Personal Information (Haul does not sell);
(d) correct inaccurate Personal Information; and
(e) limit the use and disclosure of Sensitive Personal Information. Where applicable, you may direct Haul to limit its use and disclosure of Sensitive Personal Information (e.g., to provide requested services, ensure security and integrity, prevent fraud, maintain quality and safety, and perform short-term transient uses). You may exercise this right by:(i) contacting privacy@haulco.com.

7.2 Submission of Requests. You may submit privacy-related requests by: (i) emailing privacy@haulco.com or by (ii) calling +1-601-691-4285. We will respond within the timelines prescribed by applicable law.

7.3 Identity Verification. Haul will verify your identity prior to responding to a request by matching the identifying information provided with your request to information maintained by Haul or by using other reasonable verification methods as permitted under applicable law. If we cannot verify your identity, we may deny the request and will explain the reason in writing.

7.4 Appeals. You may appeal our decision regarding a privacy rights request by emailing privacy@haulco.com with the subject line "Privacy Request Appeal." We will respond to your appeal within the period required by applicable law (generally 45 days, extendable where permitted).

7.5 Authorized Agents. Where permitted by law, you may designate an authorized agent to make a privacy rights request (including access, deletion, correction, portability, sale/opt-out, targeted advertising opt-out, or limit requests) on your behalf. We will require proof of the agent's authority and may also ask you to verify your identity directly.

7.6 Non-Discrimination. We will not discriminate against you for exercising your privacy rights, consistent with applicable law.

7.7 Appeal Denied. If your appeal is denied, you may contact your state attorney general as permitted by law. Colorado residents may contact the Colorado Attorney General at https://coag.gov/file-complaint/

Your Right	What It Means	How to Use It
Access	See the data we have about you	Email us
Delete	Ask us to erase your info	Email us
Correct	Fix wrong details	Update in your account or email us
Opt-Out	Stop marketing emails	Click unsubscribe

8. SECURITY
Haul employs commercially reasonable technical, administrative, and physical safeguards to protect Personal Information, including encryption in transit and at rest, role-based access controls, and regular security testing. Haul disclaims liability for unauthorized access not caused by its gross negligence or willful misconduct, to the fullest extent permitted by applicable law. Nothing herein shall limit non-waivable rights under applicable data protection law. While no system can be 100% secure, Haul regularly reviews and updates its security practices and implements commercially reasonable measures, including encryption and role-based access controls, to protect Personal Information. In the event of a data breach affecting your Personal Information, Haul will notify you as required by applicable law.

9. CHILDREN'S PRIVACY:
Our Services are not directed to children under 13 years of age (or 16 where required by law). We do not knowingly collect Personal Information from children. If we become aware that a child has provided us with Personal Information without parental consent, we will delete such information immediately, except to the extent retention is required for compliance with applicable law or for the establishment, exercise, or defense of legal claims.

10. DO NOT TRACK DISCLOSURE:
Our websites and applications do not currently respond to 'Do Not Track' signals, but we honor legally recognized opt-out signals where required.

11. CHANGES TO THIS POLICY
Haul reserves the right to amend this Policy at any time. Any material changes shall be posted on our website with an updated "Effective Date," and such changes shall become effective upon posting unless otherwise required by law. Immaterial changes (such as stylistic edits or organizational updates) may take effect without notice. We review and update this Privacy Policy at least once every 12 months.

12. CONTACT
For questions regarding this Policy or Haul's data practices, contact:
Haul, Co.
1575 South River Road, St. George, Utah 84790
Email: privacy@haulco.com
Phone: +1-601-691-4285