Global Privacy Policy

This Global Privacy Policy applies when you access or use Century’s websites, including www.centurysc.com (the “Website”), and Century’s proprietary supply chain management platforms available at viziv.centurysc.com (“VIZIV®”) and centuryvms.com (“VMS®” or “Visibility Management System®”) (collectively, the “Services”). Century may continue to use its original domain name, cds-net.com, for email communications and related business purposes.

By conducting business with Century or using the Services, you acknowledge that your personal information will be collected, used, disclosed, and processed as described in this Global Privacy Policy, as updated from time to time. If you do not agree with the practices described in this policy, you should discontinue use of the Services.

You acknowledge that you will only provide information to Century acting in your capacity as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, nonprofit or other legal entity, and that your communications and transactions with Century occur solely within the context of the business relationship between Century and the entity that you represent.

Jurisdiction-Specific Privacy Rights
Individuals in certain jurisdictions, including California, the European Economic Area (“EEA”), and the United Kingdom (“UK”), may have additional privacy rights. Please see the “Disclosures for Specific Jurisdictions” section below for more information.

What Information We Collect

We collect personal information in connection with business operations, to provide our Services, respond to inquiries, provide customer support, and fulfill legal and contractual obligations. You may provide some of this data directly, such as when you complete a form on our Website, sign up to receive email and other communications from us, contract with us for services, or contact customer support.

We also collect personal information through your interaction with our Website and Services, including using cookies, analytics tools, and other embedded product technologies. In addition, we may obtain personal information from third-party sources, including business partners, service providers, publicly available sources, and other authorized third parties.

Information You Provide Directly To Us

We collect information that you provide to us through the Services, as well as information generated through your use of the Services. For example, when you subscribe to a newsletter, create an account, request information, or otherwise interact with our Services, we may collect the following personal information:

• Contact Data and Business Contact Information: such as your name, company details, postal address, email address, and business payment information (including business bank account and routing numbers), as necessary to establish and maintain our business relationship with you.
• Comments and Other Feedback: such as information you choose to submit through forms, forums, or other interactive features available on our Website.

Some of the information we collect may be considered “sensitive personal information” under applicable laws in certain jurisdictions, such as financial account information. Whether information is considered sensitive will depend on applicable law.

Information We Collect Automatically

When you visit our Website, facilities, or use our Services, we may automatically collect the following information:

• Internet or Other Network Activity Information: such as browser type, device type, operating system, IP address (an IP address is a number that is automatically assigned to a computer), date and time of your visit, pages viewed, content accessed or downloaded, and general usage patterns on our Services, including time spent on pages.
• Audio and Visual Information: We may use CCTV or video recording systems at our facilities for security and safety purposes. Certain third-party locations or independently operated offices may also use their own security or access-control systems, including biometric technologies, which are operated and controlled by those third parties in accordance with their own policies and applicable local laws.
• Cookies and Tracking Technologies: For more information, please refer to the “Cookies and Tracking Technologies” section below.

Information Collected from VIZIV® / VMS (Visibility Management System)®

When you access and conduct business through our proprietary systems as a registered user, we collect certain information necessary to authenticate users, maintain system security, and provide our services. This may include:

• Device and system information (such as device type, operating system, and access timestamps)
• Browser type and version
• IP address and general geographic location (e.g., country)
• User ID
• Name
• Company email address
• Business telephone number

This information is used for account administration, system functionality, security monitoring, fraud prevention, and service improvement.

Users are responsible for maintaining the confidentiality of their Century-issued credentials, including User IDs and passwords.

Century may deactivate user accounts that remain inactive for an extended period, in accordance with our security policies.

Registered VIZIV®/VMS® users may review and update their account information directly within the system or request updates through their local Century representative.

Automated Tools and Artificial Intelligence

We may use automated tools, including artificial intelligence (AI), within our VIZIV® platforms to assist users in locating information, responding to inquiries, and improving overall system functionality. These tools are designed to support user experience and operational efficiency and do not make decisions that produce legal or similarly significant effects on individuals.

Customer data and any user-submitted information used by these tools are only used to provide the VIZIV® service. Century does not use customer data or user inputs to train AI models or for any purpose other than service provision. All AI-related processing is subject to the same security, access controls, and confidentiality standards that apply to other data within the VIZIV® platform.

How We Use Your Information

We use the categories of personal information described above for lawful business purposes related to operating, managing, securing, and improving our business and Services, while respecting your privacy rights. These purposes include:

To Communicate With You

We use your information to communicate with you regarding our Services, your account (including any account registration, access requirements, or banking information necessary for accounting purposes), system access, transactional matters, and customer support inquiries. This includes responding to requests, providing updates, and sending service-related notices.

Please note that standard email communications can be intercepted. We will never request sensitive personal information (such as Social Security numbers, bank account numbers, credit card information, or passwords) via email. You should not transmit such information through unsecured channels.

Where permitted by law and with your consent when required, we may send you business updates or newsletters. You may opt out of marketing communications at any time (see “Opt-Out Options”).

To Send Marketing and Promotional Communications

We may use your contact information to provide information about new services, system enhancements, industry insights, or promotional materials, where permitted by applicable law.

To Recruit and Evaluate Candidates

We use personal information submitted in connection with employment opportunities to evaluate qualifications, manage recruitment processes, and communicate with applicants.

To Manage Access and Security

We use personal information to:

• Authenticate users
• Manage access to our Services, systems, facilities, and offices
• Monitor system usage
• Detect and prevent fraud, misuse, or unauthorized activity
• Maintain the integrity and security of our networks and platforms

To Operate and Improve Our Business

We use personal information to:

• Provide and maintain our Services
• Fulfill contractual obligations
• Process transactions
• Support accounting and financial operations
• Improve system functionality and user experience
• Develop new services and enhancements

To Ensure Website and Platform Functionality

We use collected information to:

• Maintain website and platform functionality
• Authenticate users during login
• Enable access to system features
• Conduct security monitoring and risk management
• Manage anti-corruption, anti-fraud activities, and conduct risk management and compliance activities to protect our business operations, assets, and reputation.

To Personalize User Experience

We may use certain information to tailor system functionality and improve user interactions within our platforms.

To Verify Compliance With Terms

We may monitor use of our Website and systems to ensure compliance with applicable terms of use, including communications submitted to Century through the Website.

To Carry Out Corporate Transactions

We may use or disclose personal information in connection with a merger, acquisition, divestiture, restructuring, reorganization, dissolution, financing, bankruptcy, or other business transaction involving some or all of our assets, in which personal information held by us is among the assets transferred or is otherwise relevant to the evaluation, negotiation, or completion of the transaction.

To Comply With Legal Obligations

We use your information as necessary to comply with applicable laws, regulations, legal processes, court orders, or governmental requests.

To Protect Rights and Interests

We may use personal information as permitted, necessary, or appropriate to protect the rights, property, safety, and security of Century, our employees, customers, business partners, and others.

Cookies and Similar Technologies

A cookie is a small text file containing an identifier (a string of letters and numbers) that is sent by a web server to your web browser and stored on your device. The identifier is sent back to the server each time the browser requests a page, enabling the website to recognize your browser and maintain certain information.

Cookies may be:

• Session cookies, which are deleted when you close your browser; or
• Persistent cookies, which remain on your device until they expire or are deleted.

How We Use Cookies. We use cookies and similar technologies for the following purposes:

Strictly Necessary and Security Cookies

These cookies are required for the operation and security of our Website and platforms.

For VIZIV® and VMS®, we use authentication cookies, including cookies that remember trusted devices when you select the “remember me” option for two-factor authentication (2FA). These cookies:

• Authenticate users
• Maintain secure sessions
• Help prevent unauthorized access
• Remember trusted devices for 2FA purposes

These cookies are used solely for security and account access purposes and are necessary for the proper functioning of our systems. Because they are essential, they cannot be disabled through our systems.

Error Monitoring and Performance Cookies

We use Sentry.io to monitor application performance and detect errors or exceptions in our VIZIV® / VMS® platform.

When application errors occur, limited technical information (such as browser type, device information, and error diagnostics) may be collected to help us:

• Identify system issues
• Troubleshoot errors
• Improve application stability and performance

Sentry.io uses cookies and related technologies primarily for application performance and error monitoring.

Analytics Cookies

We use Google Analytics to understand how visitors interact with our Website. These cookies may collect information such as:

• Pages visited
• Time spent on pages
• Referring websites
• General geographic region
• Device and browser type

The information collected is aggregated and used to improve Website functionality and performance.

Where required by applicable law (including in the EEA and UK), analytics cookies are deployed only after obtaining your consent.

Business Intelligence and Marketing Cookies

We may use services such as ZoomInfo to better understand business visitor engagement on our Website and support our sales and marketing efforts.

These technologies may collect business contact information and interaction data consistent with their respective privacy practices.

Where required by applicable law, these cookies are used only with your consent.

Managing Cookies

You may control or delete cookies through your browser settings. Most browsers allow you to:

• Refuse new cookies
• Delete existing cookies
• Receive notifications when cookies are set

For more information about managing cookies, visit your browser’s help section or https://www.allaboutcookies.org/.

Please note that disabling certain cookies may impact the functionality and security of our Website and platforms.

Where required by law, we provide a cookie consent mechanism that allows you to manage your cookie preferences.

Who We Share Your Information With

We may disclose your information to our employees, officers, agents, suppliers, and subcontractors to the extent reasonably necessary for the purposes described in this Global Privacy Policy. Our contracts with suppliers and subcontractors include provisions designed to protect personal information and limit its use to the services they provide on our behalf, as appropriate.

We may also disclose your personal information to any member of our corporate group (including our subsidiaries, our ultimate holding company, and its subsidiaries) to the extent reasonably necessary for the purposes described in this Global Privacy Policy.

In addition, we may disclose your personal information:

1. To the extent required by applicable law or regulation
2. In connection with any ongoing or prospective legal proceedings
3. To establish, exercise, or defend our legal rights (including providing information to others for the purposes of fraud prevention or security)
4. To a purchaser or prospective purchaser of any business or assets that Century is selling or considering selling

We may also share personal information with trusted third-party service providers that assist us in operating our Website and platforms, maintaining system security, monitoring application performance, and analyzing Website usage. These service providers may include providers of website analytics, hosting, infrastructure, and application monitoring services. These service providers are subject to contractual terms, as appropriate, governing their processing and protection of personal information in connection with the services they provide to Century.

Century does not sell personal information and does not disclose personal information to third parties for their own direct marketing purposes.

Opt-Out Options

You may inform us that you do not want Century to use your information to provide you with offers or send you marketing communications by following the instructions below. However, please note that you cannot opt-out from all communications, as Century may need to send you information related to our business relationship.

• You can manage non-essential cookies on our Website by selecting the applicable cookie preference or “Reject” option. Strictly necessary cookies required for security and functionality cannot be disabled.
• You can opt out of our newsletters and other marketing email communications by using the unsubscribe option provided in the communication.
• You may also submit an opt-out request to the PII Data Manager using the contact information provided below.

You can manage or limit certain privacy and tracking settings through your Internet browser. For information about available privacy settings and how to change them, please refer to your browser’s settings or “help” section.

If you follow any of the opt-out instructions above, we may still send you non-promotional communications, such as those regarding your account or our ongoing business relationship.

Third-Party Websites and Social Media

Century does use social media websites for the purposes of engaging and informing the public. We use these services to disseminate information about our company and the services that we provide. We do not use third-party websites to solicit or collect information from individuals. Personal information will not be disclosed, sold or transferred to third parties except as required or permitted by law or as disclosed in this Global Privacy Policy. However, if you choose to engage with Century via third-party websites the collection of your personal information from such websites is subject to the privacy practices of the respective third party and we have no control over how such personal information is used or shared.

Our Website may contain links to websites operated by affiliates and other third parties. Century does not control the content or privacy and security practices of third-party websites, and those websites may not follow the same privacy and security practices as Century. Third-party websites may use their own cookies or similar technologies and may collect and use your information in accordance with their own privacy policies. We encourage you to review the privacy policies of third-party websites before providing personal information or using their services.

International Data Transfers

We are a global organization with operations throughout the world. Personal Data that we collect may be stored, processed, and transferred between countries in which we operate to enable us to use the information in accordance with this Global Privacy Policy. Information that you provide may be transferred to countries in which we operate that may not have the same data protection laws as those in force in the United States, the European Union, or the United Kingdom. Where that is the case, we use appropriate safeguards to protect your information, including the Standard Contractual Clauses approved by the European Commission and applicable UK data transfer mechanisms, where required. You may request additional information about the safeguards applicable to international transfers of your Personal Data by contacting us using the contact details below.

Security of Your Personal Information

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, or destruction. Personal information may be stored and processed using Century systems and third-party service providers that support our operations. We use security measures appropriate to the nature of the information and the systems involved, including access controls and other safeguards designed to protect personal information. You acknowledge that the transmission of information over the Internet is not completely secure, and we cannot guarantee the security of information transmitted over the Internet. Users are responsible for maintaining the confidentiality of their passwords and other login credentials. Century will not ask you to disclose your password. Passwords may be used through Century’s authentication processes to verify access to VIZIV® or VMS®.

Data Retention

We retain your personal information for as long as reasonably necessary to provide the Services, establish or maintain a business relationship with you or the organization you represent, and fulfill the purposes described in this Global Privacy Policy. We may retain certain information for a longer period where necessary to comply with applicable legal, regulatory, contractual, or business requirements. When personal information is no longer required, it will be disposed of in accordance with Century’s applicable data retention and disposal requirements.

Interaction with Children Online

Century is committed to protecting children’s online privacy. Our Services are not directed to individuals under the age of 18, and Century does not knowingly collect personal information from individuals under the age of 18.

Disclosures for Specific Jurisdictions

Your California Rights

If you are a resident of California, you have the following rights regarding your personal information:

NOTICE AT COLLECTION FOR CALIFORNIA USERS

• Sensitive Personal Information. We use Sensitive Personal Information only for necessary or reasonably expected purposes, specifically to provide our Services (e.g., fulfill payments, enable account logins) and as otherwise authorized by law.
• Retention. We retain personal information for as long as reasonably necessary to provide the Services, maintain our business relationship with you or the organization you represent, and fulfill the purposes described in this Global Privacy Policy. We may retain certain information for a longer period where necessary to comply with applicable legal, regulatory, contractual, or business requirements. When personal information is no longer required, it will be disposed of in accordance with Century’s applicable data retention and disposal requirements.
• Sale or Sharing of Personal Information. Century does not sell or share personal information as those terms are defined under applicable California privacy law.
• Right to Know. You have the right to request that we disclose the categories of personal information we collected about you, the categories of sources from which the personal information was collected, the business or commercial purposes for collecting, using, or disclosing the personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we collected about you, subject to applicable law.
• Right to Correct. You have the right to request in certain circumstances that we correct any inaccurate personal information that we have collected directly from you. To protect your personal information, we are required to verify your identity before we can act on your request.
• Right to Delete. You have the right to request that we delete the personal information we have collected about you, subject to certain exemptions.
• Right to Opt-Out of certain uses of your personal information (e.g. sale, share or profiling). You may have the right under California law to opt out of the sale or sharing of your personal information and certain profiling activities. Century does not sell or share personal information as those terms are defined under applicable California privacy law.
• Non-Discrimination. You have the right not to be discriminated against for exercising the rights above.
• Global Opt-Out Signal. Some browsers and browser extensions offer opt-out preference signals, such as the Global Privacy Control (“GPC”), that communicate a consumer’s preference to opt out of the sale or sharing of personal information. Century does not sell or share personal information as those terms are defined under applicable California privacy law. We do not respond to “Do Not Track” signals.
• Financial Incentive. We do not offer any programs to you that would be considered a “financial incentive” for sharing your personal information under California law. Any perks/benefits/discounts are unrelated to your personal information.
• Identity Verification. Where appropriate or required by law, we will take reasonable steps to verify your identity prior to responding to your requests. The verification steps may vary depending on the type of request you have made, the sensitivity of the personal information, and whether you have an account with us.
• Authorized Agent. You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent’s permission to do so and we will need to verify your identity directly.
• Denial/Partial Fulfillment of Requests. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record-keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests.

European Economic Area (EEA) and United Kingdom

Lawful Basis for Processing (EEA and UK Users)

We rely on the following legal basis for collecting and using the personal information described in How We Use Your Information:

• Your consent (e.g., to send you newsletters and other marketing materials).
• Performance of a contract to which you are a party or to take steps at your request prior to entering into a contract (e.g. we use your business email and other information to provide the Services to you).
• When we have a legitimate interest to do so (such as processing for administrative purposes, product development or improvement, preventing fraud or criminal acts and in support of information security) except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
• If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the time of collection. We will also tell you whether the requirement for that information is mandatory and explain any consequences to you if you do not provide the information. For personal information collected through our Websites and business operations in the EEA and UK, we act as the data controller. Where Century processes personal information on behalf of a customer through VIZIV® or VMS®, Century may act as a data processor, depending on the circumstances.

Your UK/European Rights

If you are located in the United Kingdom or the European Economic Area (EEA), you may have additional rights regarding your personal information under applicable data protection laws, including the General Data Protection Regulation and the UK General Data Protection Regulation.

You may have the right to:

• Access, Correct or Delete Your Information. You may request access to the personal information we hold about you, and you may request that we correct inaccurate or incomplete information. You may also request that we delete your personal information in certain circumstances. If you request deletion of your personal information, we may retain certain information as necessary to comply with legal obligations, resolve disputes, enforce agreements, or complete transactions that you initiated prior to the request. At your request, and where required by law, we will confirm whether we hold personal information about you. We may require verification of your identity before responding to your request.
• Object to or Restrict Processing. You may object to our processing of your personal information in certain circumstances or request that we restrict the processing of your personal information. If you request that we restrict processing or object to certain processing activities, we may not be able to provide full access to our systems or services where processing is necessary to authenticate users, provide access to VMS® or VIZIV®, or maintain system security. You also have the right to object at any time to the processing of your personal information for direct marketing purposes.
• Withdrawing Consent. Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing conducted prior to the withdrawal or processing based on other lawful grounds.
• Data Portability. Where applicable, you may request to receive a copy of certain personal information you have provided to us in a structured, commonly used, and machine-readable format and may request that we transmit that information to another organization where technically feasible.
• Automated Decision-Making. You may have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, except as otherwise permitted by applicable law.
• Lodge a Complaint. You have the right to lodge a complaint with a data protection authority if you believe that our processing of your personal information violates applicable law. In the UK, you may contact the Information Commissioner’s Office. In the EEA, you may contact your local data protection authority.

Submitting Requests

You can exercise your rights by:

• Contacting us through our Contact Us page on our Website at: www.centurysc.com
• Emailing us at piidatamanager@cds-net.com

Additional Information

We may alter, update, or otherwise change this Privacy Policy from time to time. As such, you should periodically review this Privacy Policy for updates. Any changes will become effective when the updated Privacy Policy is posted, unless otherwise stated.

If you have any questions, concerns or comments about this Privacy Policy you may contact us at:

Email: piidatamanager@cds-net.com

Via Mail: Century Distribution Systems, Inc.
Attn: Compliance

140 Eastshore Drive, Suite 210
Glen Allen, VA 23059

This policy was last modified on August 12, 2026.

© 2026 Century Distribution Systems, Inc. All Rights Reserved.