Privacy Statement | Easterns Automotive Group

This Privacy Statement describes how Easterns Automotive Group ("Easterns," "we," "us," or "our") collects, uses, shares, and protects personal information obtained from consumers through our website, mobile application, in our dealership locations, and in connection with our products and services. Please read this statement carefully.

1. Scope of This Statement

This Privacy Statement applies to personal information collected by Easterns Automotive Group through our websites (including any mobile-optimized versions), mobile applications (together, our “Online Services”), in our dealership locations, over the telephone, and through other interactions with consumers. It does not apply to any website or application operated by Easterns that displays a separate privacy notice. Residents of Virginia and Maryland, as well as consumers in other states, are encouraged to review the Your Privacy Rights section below for information about rights available to them under applicable state law.

2. Information

We Collect Information You Provide Directly We may collect personal information when you: browse or search for vehicles on our website; submit an inquiry, lead, or contact form; schedule or attend a test drive; purchase, appraise, or sell a vehicle at one of our locations; create an online account; apply for financing; participate in a survey, promotion, or sweepstakes; or contact our customer support team. The categories of personal information we may collect directly from you include:

• Identifiers – name, username and password, postal address, email address, phone number, driver's license number, and similar identifiers.

• Sensitive Personal Information – government identification numbers (e.g., Social Security Number), login credentials, race or ethnic origin, marital status, and payment information.

• Commercial Information – vehicle purchases, trade-ins, appraisals, search history, and payment details.

• Professional & Employment Information – employer name, job title, salary, and work history (collected in connection with financing applications).

• Demographics – age, date of birth, gender, marital status, and military service status. • Customer Interaction Records – call recordings, chat transcripts, and other communications with our team.

• Preferences – preferred dealership location and communication preferences.

• Audio and Visual Information – photographs or videos you choose to share with us.

Information Collected Automatically When you visit or interact with our Online Services or open our emails, we may automatically collect certain information using technologies such as browser cookies, web beacons, pixel tags, mobile device identifiers, and server logs. This information may include:

• Device & Network Identifiers – IP address, device identifiers, browser type, and operating system.

• Online Activity Data – pages visited, search terms, links clicked, dates and times of access, and referring URLs.

Privacy Statement | Easterns Automotive Group | Effective: May 4, 2026 Easterns Automotive Group | Privacy Statement | Page 2

• Geolocation Data – approximate location inferred from your IP address. With your consent, our mobile app may collect precise device location. You may withdraw consent at any time through your device settings.

• Inferences – conclusions drawn from the above to help us understand your preferences and interests.

Information from Third-Party Sources We may receive information about you from third parties, including credit reporting agencies, Departments of Motor Vehicles, vehicle history services, insurance providers, marketing vendors, data analytics companies, identity verification services, and social media platforms. Categories of information obtained from these sources include identifiers, demographic data, commercial information, financial information, professional information, geolocation data, and online activity data.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Operating and improving our Online Services, products, and services.

• Processing vehicle purchases, trade-ins, appraisals, and associated payments.

• Creating and managing online accounts and authenticating users.

• Responding to inquiries, requests, and customer support needs.

• Sending marketing communications about vehicles, promotions, and services (subject to your choices).

• Displaying interest-based advertising on our website and on third-party platforms.

• Conducting data analytics, market research, and business performance analysis.

• Developing, training, and improving AI and machine learning models used in our services.

• Personalizing your experience across our digital and in-store touchpoints.

• Administering surveys, sweepstakes, contests, and other promotions.

• Detecting, preventing, and investigating fraud, security incidents, and other illegal activity.

• Complying with applicable law, regulatory requirements, and our internal policies.

• Responding to legal process, court orders, or government agency requests.

We may combine information collected across different channels (e.g., in-store, online, telephone) to better serve you and improve our products and services.

4. Automated Technologies & Interest-Based Advertising

We use third-party analytics services (such as Google Analytics) to collect information about how visitors use our Online Services. We also work with advertising partners to serve interest-based ads tailored to your browsing behavior and interactions with our website across devices and third-party platforms. These partners may link your information, such as email address or device identifier, to data from other sources, including prior purchases.

To opt out of interest-based advertising, you may visit YourAdChoices (www.aboutads.info) or the Network Advertising Initiative (www.networkadvertising.org). Your choices are browser- and device-specific. You may also limit ad tracking through your mobile device settings.

5. Information Sharing

Easterns Automotive Group will never sell, share, or disclose your phone number to any third party, advertiser, or outside organization for any reason.""We do not share, sell, or distribute your personal contact information, including your name, email address, or phone number, with any third parties for marketing or promotional purposes. Your personal information is used solely for internal business purposes and will never be transferred, sold, or shared with outside parties without your explicit consent.

6. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information. Easterns Automotive Group honors these rights regardless of your state of residence. Virginia Residents (Virginia Consumer Data Protection Act – VCDPA) Virginia residents have the following rights:

• Right to Know / Access: Confirm whether we process your personal data and request a copy.

• Right to Correct: Request correction of inaccurate personal data.

• Right to Delete: Request deletion of personal data we have collected about you.

• Right to Data Portability: Receive a copy of your personal data in a portable format.

• Right to Opt Out: Opt out of the processing of your personal data for (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce significant effects.

• Right to Appeal: If we decline to act on a rights request, you may appeal that decision.

Maryland Residents (Maryland Online Data Privacy Act – MODPA) Effective October 1, 2025, Maryland residents have rights similar to those described above, including rights to access, correct, delete, and obtain a portable copy of their personal data, as well as the right to opt out of targeted advertising, the sale of personal data, and certain profiling activities. We will honor MODPA rights requests from Maryland residents in accordance with applicable law. All Consumers Regardless of your state of residence, you may contact us to review, update, or request deletion of personal information we hold about you. We will respond to all requests in accordance with applicable law and without discriminating against you for exercising your rights. To protect your privacy, we may ask you to verify your identity before we fulfill certain requests. Authorized agents acting on your behalf must provide documentation of their authorization.

Children's Privacy Our Online Services are not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately so we can delete it.

8. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental, unlawful, or unauthorized access, disclosure, alteration, or destruction. However, no security measures are completely impenetrable, and we cannot guarantee the security of your information.

9. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Statement, or as required by applicable law. Factors affecting retention periods include the existence of an ongoing relationship with you, legal or regulatory recordkeeping obligations, and the need to resolve disputes.

10. Third-Party Links and Features

Our Online Services may contain links to third-party websites, apps, or features (such as social media plug ins). These third parties operate independently and are governed by their own privacy policies. We are not responsible for the privacy practices of third-party services, and we encourage you to review their privacy notices before providing any information.

11. Updates to This Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our practices or applicable law. We will post the revised statement on our website with an updated effective date. If we make a material change, we will take reasonable steps to notify you, such as by sending an email or displaying a notice on our website.

12. How to Contact Us

For questions or concerns about this Privacy Statement or our privacy practices, please contact us: Easterns Automotive Group – Privacy Inquiries Phone: 571-464-7375 Website: https://www.easterns.com/privacy-policy-terms

This Privacy Statement was prepared as a template based on standard automotive industry practices and applicable Virginia and Maryland privacy law. Easterns Automotive Group should review this document with qualified legal counsel before publishing to ensure it accurately reflects the company's actual data practices and complies with all applicable requirements.