Altus Power is going public!  Join us live on Friday, December 10th starting at 9:00 a.m. EST with a market open at 9:30 EST right here streaming live from the New York Stock Exchange Ticker:AMPS
Join Us Live!

Privacy Policy

Altus Power Inc.,

Altus Privacy Policy

Effective Date: November 8, 2021

ALTUS POWER, INC. (“Altus”, “we”, “our”)respects your privacy. This Privacy Policy describes the types of personal data we collect from customers using Altus, how we use the personal data, and with whom we share it. We also describe the rights you may have and how you can contact us about our privacy practices.

Altus is responsible for the use of your personal data for the purposes described in this Privacy Policy – our contact information can be found in the “How to Contact Us” section.

For further information on how we process your personal data, please use the links below to jump to the listed section:

  1. California Employee-Applicant CCPA Notice
  2. California Consumer Privacy Statement
  3. Personal Data We Collect
  4. How We Use The Personal Data We Collect
  5. How We Share Personal Data
  6. Data Transfers
  7. How We Protect Personal Data
  8. Retention of Personal Data
  9. Your Rights
  10. Cookies
  11. Updates to Our Privacy Policy
  12. How to Contact Us
  13. Surveys or Sweepstakes

1. California Employee-Applicant CCPA Notice

Last Updated: 2/2023

This notice describes the categories of personal information collected by Altus Power America Management, LLC (“Company”) and the purposes for which such information may be collected and used. For additional information about the Company’s data privacy practices, please review our Privacy Policy https://www.altuspower.com/privacy.

Categories of Personal Information Collected

Identifiers and Contact information. This category includes names, addresses, telephone numbers, mobile numbers, email addresses, signatures, account names, dates of birth, bank account information, and other similar contact information and identifiers.

Protected Classification Information. This category includes characteristics of protected classifications under California or federal law.

Internet or Other Electronic Network Activity Information. This category includes without limitation:

  • All activity on the Company’s information systems, such as internet browsing history, search history, intranet activity, email communications, social media postings, stored documents and emails, usernames and passwords
  • All activity on communications systems including phone calls, call logs, voice mails, text messages, chat logs, app use, mobile browsing and search history, mobile email communications, and other information regarding an Employee’s use of company-issued de-vices

Geolocation Data. This category includes, without limitation, geolocation data, including precise geolocation data from company-owned or employee mobile devices, application, or vehicles to ensure employee safety.

Audio, Electronic, Visual, Thermal, Olfactory, Or Similar Information. This category includes, for example, information collected from cameras, thermometers, and similar devices, and/or thermometers.

Biometric Information. This category includes the use of biometric equipment, devices, or software to record your time worked, to enter or exit facilities or rooms, to access or use equipment, or for other business purposes.

Professional and Employment-Related Information. This category includes, without limitation:

  • Data submitted with employment applications including salary history, employment his-tory, employment recommendations, etc.
  • Background check and criminal history;
  • Work authorization
  • Fitness for duty data and reports
  • Close contacts related to COVID-19 exposure.
  • Performance and disciplinary records
  • Salary and bonus data
  • Benefit plan enrollment, participation, and claims information
  • Leave of absence information including religious and family obligations, and physical and mental health data, concerning employees and their family members

Educational Information. This category includes, without limitation, education history.

Sensitive Personal Information. This category includes sensitive information such as:

  • Social security, driver’s license, state identification card, or passport number
  • Financial account information that allows access to an account, including log-in creden-tials, financial account numbers, passwords, etc.
  • Geolocation, including precise geolocation
  • Racial or ethnic origin, religious or philosophical beliefs, or union membership
  • Content of mail, email, and text messages unless the Company is the intended recipient of the communication
  • Genetic data
  • Biometric information for the purpose of uniquely identifying a consumer
  • Health information
  • Information concerning sex life or sexual orientation

Inferences Drawn from the PI in the Categories Above. This category includes engaging in human capital analytics, including, without limitation, identifying correlations between certain characteristics and job success, analyzing data to improve retention, and analyzing employee preferences to inform HR policies, programs, and procedures.

Purposes Personal Information, Including Sensitive Personal Information, Is Used
  • Collecting and processing employment applications, including confirming eligibility for employment, background and related checks, onboarding, and related recruiting efforts
  • Processing payroll, other forms of compensation, and employee benefit plan and pro-gram design and administration including enrollment and claims handling, and leave of absence administration
  • Maintaining personnel records and record retention requirements
  • Communicating with employees and/or employees’ emergency contacts and plan beneficiaries
  • Complying with applicable state and federal health labor, employment, benefits, workers compensation, disability, equal employment opportunity, workplace safety, and related laws, guidance, or recommendations
  • Preventing unauthorized access to, use, or disclosure/removal of the Company’s prop-erty, including the Company’s information systems, electronic devices, network, and data
  • Ensuring and enhancing employee productivity and adherence to the Company’s policies · Providing training and development opportunities.
  • Investigating complaints, grievances, and suspected violations of Company policy
  • Designing, implementing, and promoting the Company’s diversity and inclusion pro-grams
  • Facilitating the efficient and secure use of the Company’s information systems
  • Ensuring compliance with the Company information systems policies and procedures
  • Improving safety of employees, customers and the public with regard to use of Company property and equipment
  • Improving efficiency, logistics, and supply chain management
  • Improving accuracy of time management systems and attendance, including vacation, sick leave, and other leave of absence monitoring.
  • Evaluating an individual’s appropriateness for a particular position at the Company, or promotion to a new position
  • Managing customer engagement and other legitimate business purposes
  • Responding to and managing legal claims against the Company and/or its personnel, including civil discovery in litigation.
  • Facilitating other business administrative functions and strategic activities, such as risk management, information technology and communications, financial management and reporting, workforce and succession planning, merger and acquisition activities, and maintenance of licenses, permits and authorization applicable to Company operations.

Retention. We retain your personal information for as long as is necessary to determine your eligibility for a position with the company; manage compensation, benefits, and employment-related expenses; manage professional development, performance, and conduct; protect the company against illegal activity and other misconduct; undertake activities to verify and maintain the quality, safety, and performance of our products and services; and other routine business purposes and in accordance with the Company’s data retention schedule. We may retain your personal information for longer if it is necessary to comply with our legal or reporting obligations comply with a civil, criminal, or regulatory inquiry, investigation, subpoena or summons by federal, state, or local authorities, cooperate with law

enforcement agencies concerning conduct or activity that we reasonably and in good faith believe may violate federal, state, or local law, otherwise exercise or defend legal claims or as permitted or required by applicable law. We may also retain your personal information in a deidentified or aggregated form so that it can no longer be associated with you. To determine the appropriate retention period for your personal information, we consider various factors such as the amount, nature, and sensitivity of your information; the potential risk of unauthorized access, use or disclosure; the purposes for which we collect or process your personal information; and applicable legal requirements. Personal information does not include certain categories of information, such as publicly available information from government records, and deidentified or aggregated consumer information.

Disclosure. To carry out the purposes outlined above, the Company may disclose personal information to service provides or other third parties, such as background check vendors, third-party staffing vendors, and information technology vendors, outside legal counsel, and state or federal governmental agencies. The Company does not sell or share, as those terms are defined under applicable law, the above categories of personal information. The Company may add to the categories of personal information it collects and the purposes for which it uses information. The Company will inform you in the event it does so.

California Resident Individual Rights Requests. Individuals who are residents of the State of California have certain individual rights, which are outlined below.

Right To Know About Personal Information Collected or Disclosed. As a California resident, you have the right to request additional information, beyond that disclosed above, regarding the following, to the extent applicable:

  • The categories of personal information the Company collected about you
  • The categories of sources from which that personal information was collected
  • The business or commercial purposes for which that information was collected, sold, or shared
  • The categories of third parties to whom the information was disclosed
  • The specific pieces of personal information collected

Upon receipt of a verifiable request to know, and as required by applicable law, we will provide a response to such request.

Right To Request Deletion of Your Personal Information. You have the right to request that we delete the personal information we collected or maintain about you. Once we receive your request, we will let you know what, if any, personal information we can delete from our records, and will direct any service providers and contractors to whom we disclosed your personal information to also delete your personal information from their records.

There may be circumstances where we cannot delete your personal information or direct service providers or contractors to delete your personal information from their records. Such instances include, without limitation, when the information at issue is maintained: (a) to enable solely internal uses that

are reasonably aligned with your expectations based on your relationship with the Company and compatible with the context in which you provided the information, or (b) to comply with a legal obligation.

Upon receipt of a verifiable request to delete, and as required by applicable law, we will provide a response to such requests.

Right to Request Correction. You have the right to request that the Company correct any inaccurate personal information we maintain about you, taking into account the nature of that information and purpose for processing it. Upon receipt of a verifiable request to correct, and as required by the CCPA, we will provide a response to such requests.

Right to Non-Discrimination for the Exercise of Your Privacy Rights. We will not discriminate or retaliate against you for exercising any of the rights described above.

Submitting CCPA Rights Requests. To submit a CCPA Rights request as outlined above, please contact the Company’s Legal Department by calling us at 203-698-0090 or emailing us at legal@altuspower.com. We reserve the right to only respond to verifiable consumer requests to know, delete, or correct that are submitted as instructed.

Spouses, Dependents, and Associates. If you have knowledge that the Company collected personal information related to your spouse, dependent, or associate, please share a copy of this notice with all such individuals.

We reserve the right to amend this notice at any time without advance notice. Please direct questions about this notice you may call the Talent Management Team at 203-340-8408 or email at Talent.Management@altuspower.com.

2. California Consumer Privacy Statement

Last Updated: March 2023

This California Consumer Privacy Statement (“Statement”) supplements the Altus Privacy Policy. It applies solely to California consumers and addresses personal information we collect online and offline. This Statement does not apply to Altus’s personnel or job applicants.

This Statement uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 and its implementing regulations (the “CCPA”).

  1. Notice of Collection and Use of Personal Information
    We may collect (and may have collected during the 12-month period prior to the effective date of this Statement) the following categories of personal information about you:

    Identifiers
    : identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, internet protocol address, email address, account name, and other similar identifiers

    Additional Data Subject to Cal. Civ. Code § 1798.80: credit card number, debit card number, and other financial information

    Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements

    Geolocation Data: e.g. certain geolocation data may be collected to conduct security and anti-fraud checks

    Employment Information: professional or employment-related information We may use the categories of personal information listed above for the purposes described in the Altus Privacy Policy. In addition, we may use these categories of personal information for certain business purposes specified in the CCPA, as described in this table:

    Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, or providing similar services

    Auditing related to a current interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance

    Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity o Debugging to identify and repair errors that impair existing intended functionality

    Undertaking internal research for technological development and demonstration

    Undertaking activities to verify or maintain the quality or safety of a service that is owned or controlled by us, and to improve, upgrade, or enhance the service that is owned or controlled by us
  2. Our Prior Collection, Use and Disclosure of Personal Information
    We may have collected and used your personal information, as described in Section 1 above, during the 12-month period prior to the effective date of this Statement. For the personal information collected during that timeframe, we describe below: (a) the categories of sources from which we may have obtained the personal information, (b) the categories of third parties with whom we may have shared the information, and (c) the categories of personal information we may have disclosed for a business purpose.

    Source of Personal Information:
    We may have obtained personal information about you from various sources, as described below.

    Categories of Sources of Data Collection:

    Directly from you, such as when you visit our facilities, when you sign-up to receive communications from Altus, when you sign up for Altus services, when you contact us with a comment or question, when you participate in an event, conference or other activity sponsored by Altus, when you participate in a public consultation, opinion, survey, focus group or provide us with feedback regarding our services

    Directly from you, such as when you visit our facilities, when you sign-up to receive communications from Altus, when you sign up for Altus services, when you contact us with a comment or question, when you participate in an event, conference or other activity sponsored by Altus, when you participate in a public consultation, opinion, survey, focus group or provide us with feedback regarding our services

    Directly from you, such as when you visit our facilities, when you sign-up to receive communications from Altus, when you sign up for Altus services, when you contact us with a comment or question, when you participate in an event, conference or other activity sponsored by Altus, when you participate in a public consultation, opinion, survey, focus group or provide us with feedback regarding our services

    Our affiliates
    Businesses that we are evaluating in connection with a potential investment or business opportunities

    Vendors (e.g., background check providers), advisors, referral partners and other business partners

    Recruiting agencies, social media network or publicly available sources

    Sharing of Personal Information: We may have shared your personal information with certain categories of third parties, as described below:

    Categories of Third Parties:
    Our affiliates: Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Online Activity; Geolocation Data; Employment Information

    Vendors, broker-dealers, advisors and others who provide services to us or on our behalf: Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Online Activity; Geolocation Data; Employment Information

    Professional services organizations, such as auditors and law firms: Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Online Activity; Geolocation Data; Employment Information

    Data partners, such as the UTP Plan, the Consolidated Tape Association, and other Premium Data Partners: Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Online Activity; Geolocation Data; Employment Information

    Government entities, including regulatory agencies and law enforcement: Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Online Activity; Geolocation Data; Employment Information

    Operating systems and platforms: Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Online Activity; Geolocation Data; Employment Information

    Sale of Personal Information:
    We do not sell your personal information.

    Disclosure of Personal Information for a Business Purpose:
    We may have disclosed to third parties for a business purpose all of the categories of personal information about you listed in Section 1 above.
  3. California Consumer Privacy Rights
    You have certain choices regarding your personal information, as described below.

    Access: You have the right to request, twice in a 12-month period, that we disclose to you the personal information we have collected, used, and disclosed about you during the past 12 months.

    Deletion: You have the right to request that we delete certain personal information we have collected from you.

    How to Submit a Request: To submit an access or deletion request for yourself or as an authorized agent on behalf of a consumer, email us at legal@altuspower.com. For questions or concerns about our privacy policies and practices, please contact us as described in the How To Contact Us section of our Privacy Notice.

    Verifying Requests: To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request. If you have an account with us, we may verify your identity by requiring you to sign in to your account. If you do not have an account with us and you request access to or deletion of your personal information, we may require you to provide any of the following information: email address; postal address; telephone number, or other information. In addition, if you do not have an account and you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.

    Additional Information: If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

3. Personal Data We Collect

The personal data we collect in order to offer our services includes your:

  • Name;
  • Contact information, including your address, phone number, and email address;
  • Account details, including password;
  • Financial details, including billing information; and
  • Company name.

If you do not provide the required information you may not be able to subscribe to this product.

In addition to this data, our website uses cookies and other technologies to function effectively. These technologies record information about your use of our website, including:

  • Browser and device data, such as IP address, device type, operating system and Internet browser type, screen resolution, operating system name and version, device manufacturer and model, language, plug-ins and add-ons;
  • Usage data, such as time spent on our website, pages visited, links clicked, language preferences, and the pages that led or referred you to our website.

We also may collect information about your online activities on websites and connected devices over time and across third-party websites, devices, apps and other online features and services. We use Google Analytics to help us analyze your use of our website, diagnose technical issues and improve our website.

To learn more about the cookies that may be served through our website and how you can control our use of cookies and third-party analytics, please see our Cookie Policy.

4. How We Use the Personal Data We Collect

We the personal data that we collect in order to set up and maintain customer accounts, for accounting and invoicing purposes, to manage contracts, orders, and subscriptions, to provide troubleshooting and customer support services, for user authentication and security purposes, and to create a usage report and log for each user. We process personal data for these purposes because we are required to do so in order to perform our contracts with customers.

We, our service providers, and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes. We may send you Altus Power-related direct marketing communications as permitted by law, including by email and text messages. You may opt out of our marketing communications as described in the opt-out of marketing section below. We (including our service providers on our behalf) may also engage in door-to-door marketing activities from time to time.

We provide our customers, as well as individuals referred by our customers, with the opportunity to opt out of having their information used for purposes not directly related to placement, processing, fulfillment, or delivery of a product or service. To opt out of marketing communications or to request to be added to our Do Not Call List or Do Not Mail List, you may use one of these convenient methods:

  • Email Offers: If you receive commercial email from us, you may unsubscribe at any time by following the instructions contained within the email, or by sending us an email or writing to us at the addresses listed below. You should note that unsubscribing from our emails will not automatically unsubscribe you from emails sent by any third party, and you will need to separately unsubscribe from such third party's communication, if desired.
  • Direct Mail Offers: If you do not wish to be notified by postal mail regarding products, services, events, programs, and offers that we believe you may find of interest, send us an email or write to us at the addresses listed below.
  • Telemarketing: If you do not want to receive marketing phone calls from us, you may: (i) email us at info@altuspower.com with "Do Not Call" in the subject line; (ii) ask to be placed on our Do Not Call list when you receive a call from us; or (iii) mail us at the address listed below. Once we place your name on our internal "Do Not Call" list, we will no longer call you for marketing purposes (unless you submit another inquiry or request another consultation/quote from us after your initial do-not-call request). We will honor your request as soon as reasonably practicable.

We also process personal data for the following business purposes because we have a legitimate interest in doing so:

  • Maintaining customer account records, in order to administer our business;
  • Maintaining records relating to our customers, in order to administer our business;
  • Managing our customer relationships and communicating with our customers, in order to administer our business and to update our customers about new features and services that we may offer;
  • Complaint handling and dispute resolution, in order to resolve any complaints raised by our customers;
  • Ensuring compliance with applicable Altus policies and procedures relating to our services, in order to ensure the
  • security of our services and monitor compliance with our Terms of Use;
  • Fraud detection and prevention, in order to ensure the security of our services and protect Altus and its users against fraud; and Carrying out analytics, in order to identify potential improvements to our services and to measure engagement with our advertising campaigns.

In addition to the purposes above, we also process personal data when we are required to do so by law, for example in order to maintain accounting records.

We may share your personal data with service providers who act on our behalf in order to more effectively deliver our advertising and to measure the effectiveness of our advertising. We will not share your personal data with third parties for their own marketing purposes. We also may use certain other non-necessary cookies to collect your personal information, without as described in our policy on cookies, with your consent. Our policy on cookies is set forth below.

If we plan to use the personal data that you provide for other purposes, we will provide an additional updated privacy policy to you to describe the purposes for which we will use the personal data and our legal basis for doing so.

5. How We Share Personal Data

We may share personal data with service providers that support the delivery of Altus products and service, including payment processors, customer support service providers, online advertising providers, providers who act on our behalf to more effectively deliver our own marketing and advertising and other service providers that process or analyze personal data on our behalf. We may also share personal data with certain data partners that require it under their terms in order for us to allow access to their data. We also share your personal data with other entities in the Altus group of companies for the purposes described in this Privacy Policy. We have legally binding agreements with all service providers under which they are required to use personal data only as necessary to perform services on our behalf and to implement appropriate data security and confidentiality obligations, in accordance with applicable law.

In addition, we may disclose personal data about you (i) if we are required or permitted to do so by law or legal process, for example due to a court order or a request from a law enforcement agency, (ii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, (iii) in connection with an investigation of suspected or actual fraudulent or other illegal activity, and (iv) in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution, or liquidation).

6. Data Transfers

We may transfer the personal data that we collect about you to recipients in countries other than the country in which the personal data originally was collected. Those countries may not have the same data protection laws as the country in which you initially provided the personal data. When we transfer your personal data to recipients in other countries, we will comply with applicable legal requirements regarding providing safeguards for the transfer of personal information. These safeguards include entering into the European Commission’s Standard Contractual Clauses with counterparties, and/or ensuring that counterparties are certified under the EU-U.S. or Swiss-U.S. Privacy Shield Framework. Further information about data transfers may be obtained by contacting us as indicated in the “How to Contact Us” section of this Privacy Policy.

7. How We Protect Personal Data

Altus maintains technical and organizational safeguards to ensure an appropriate level of security and confidentiality for your personal data, in accordance with our policies and applicable legislation.

8. Retention of Personal Data

The time period for which we keep personal data depends on the purpose for which we collected it. In all cases we keep it for as long as necessary to fulfil the purposes for which we collected it. We will then delete the personal data, unless we are legally required to retain it or if we need to retain it in order to comply with our legal obligations (for example, for tax and accounting purposes).

9. Your Rights

Subject to applicable law, you may have the right to request access to and rectification of the personal data we maintain about you, or to request the restriction of the processing of your personal data or to object to that processing on grounds relating to your situation.

In addition, you may have the right to request erasure of your personal data from Altus’s systems in certain circumstances provided by applicable law. Where technically feasible, upon written request and verifiable identification, we will provide you with a copy of the personal data provided to us by you in a structured, commonly used, machine readable format. To exercise these rights, please contact Altus as indicated below. You may lodge a complaint with a data protection authority if you are not satisfied with our response.

10. Cookies

(a) Information That We Collect Automatically

When you use our website, we or our third-party service providers may collect certain information by automated means, using technologies such as cookies, web server logs, web beacons (including tags and pixels), and JavaScript.

Cookies are files that websites send to your computer or other Internet-connected device to uniquely identify your browser or to store information or settings on your device. Your browser may tell you how to be notified when you receive certain types of cookies and how to restrict or disable certain cookies. Please note, however, that without cookies you may not be able to use all of the features of our website.

In conjunction with gathering information through cookies, our web servers may log information such as your operating system type, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone where your device is located. The web server logs may also record information such as the address of the web page that referred you to our website and the IP address of the device you use to connect to the Internet. They may also log information about your interaction with our website, such as which pages you visit.

(b) Categories Of Cookies And Other Automated Technologies

• Strictly Necessary Cookies

These cookies are necessary for our website to operate properly and facilitate your use of its features. Without these cookies, certain services cannot be provided. These cookies help us understand information, such as your session ID and other server authentication information. This category of cookies should not be disabled. If you use your browser settings to block them, we cannot guarantee your security or predict how our website will perform during your visit.

• Analytics Cookies

These cookies collect information about how visitors interact with our website, such as what pages you visit and if any errors have occurred. The information is used to improve how our website functions. These cookies don’t collect information that identifies you but generate statistical data about your use of our website. We use Google Analytics. The service registers a unique ID that is used to generate statistical data on how visitors use our website. If you want to opt out of our use of Google Analytics please click here.

• Functional Cookies

These cookies allow our website to remember choices you make and provide enhanced and more personal features. They can also be used to remember changes made to parts of our website that you can customise. We also work with the third-party service providers Stripe and Intercom, each of which uses certain cookies. You can find out more about the cookies used by Stripe here and by Intercom here.

• Advertising Cookies

These cookies can help us provide more effective advertising on our website. For example, we might use a cookie to help prevent you from seeing the same advertisement multiple times or to measure how many times an advertisement is viewed or clicked on. We use services like Google Tag Manager and LinkedIn cookies for these purposes. You can find further information on those companies’ privacy policies here and here.

(c) Your Choices

You can manage cookies through your web browser. Most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable existing cookies. You can find out how to do this for your particular browser by clicking “help” on your browser’s menu or by visiting www.allaboutcookies.org. Please note, however, that without cookies you may not be able to take full advantage of all our website features.

The following external links will explain how to manage cookies for the most common browsers:

• Google Chrome

• Firefox

• Safari

• Internet Explorer

• Microsoft Edge

In addition to the browser-based controls, you can manage third party cookies by visiting www.aboutads.info/choices/ and www.youronlinechoices.eu/.

11. Updates To Our Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in our personal data practices. We will post a notice on our website to notify you of any significant changes to our Privacy Policy and indicate at the top of the Privacy Policy when it was most recently updated.

12. How to Contact Us

If you have questions about how Altus handles your personal data or would like to exercise your rights, please reach out by emailing or writing to us at:

Altus Power, Inc.

2200 Atlantic St Floor 6

Stamford, CT 06902

Attention: Altus Legal

Email: legal@altuspower.com

13. Surveys or Sweepstakes

Altus may provide you the opportunity to participate in surveys or sweepstakes. If you participate, we will request certain personally identifiable information from you. Participation in these surveys or sweepstakes is completely voluntary and you therefore have a choice whether or not to disclose this information. The requested information typically includes contact information (such as name and shipping address), and demographic information (such as zip code). We use this information to notify contest winners and award prizes. Altus may post the name(s) of the winners of any sweepstakes on its social media sites.