This Privacy Notice ("Notice") describes how Wellspect DTC LLC ("Wellspect"), doing business as "Surity", its global affiliates, brands, and subsidiaries (collectively, "we," "our," or "us") collect, use, disclose, and otherwise process personal information described in this Notice and the rights and choices individuals have regarding such personal information.

Contents

1. Scope

Except as otherwise described below, this Notice applies to the personal information Surity collects and processes related to your use of our website, www.Surity.care, where this Notice is posted, and other websites that may display or include a link to this Notice ("Site" or "Sites"), other online and offline services, and other products or services we make available to you, (collectively, "Services").

Not in Scope. This Notice does not apply to the personal information that we collect and process about Surity employees.

2. Personal Information Collected

"Personal data" is information that identifies, relates to, or describes, directly or indirectly, you as an individual, or as otherwise defined in applicable law, including related terms, such as "personal information." We may also collect health data, which may be defined as "sensitive" data or "sensitive" personal information, in applicable law.

Personal Data Collected Directly from You. The personal data we may collect from you depends on how you use our Services or otherwise interact or engage with us, but generally includes:

• Identifiers. When you contact us, including via email, phone, or webform, we collect certain information from you, such as your name, email, phone number, postal address, practice name or other unique personal identifier, online identifier, IP address, or other similar identifiers that you otherwise submit to us.
• Customer records. If you register for an account with us, we may collect your contact information, job title, username, and password. We may also collect information that you make available through your profile, such as affiliated business(es), photographs and comments, and other information that you submit through your account.
• Professional contact information and details. When you work with us in your professional capacity (including but not limited to as a Key Opinion Leader or Consultant), we may collect your contact information, payment information, educational and professional history, certifications, qualifications, work experience, names of references, photographs, voice or video recordings, professional interactions, networks, memberships, engagements, influence rankings and tier status, and any other information you choose to provide to us.
• Commercial information. We may collect information about the Services you purchased, obtained, considered, or other purchasing or use histories or tendencies. If you purchase Services from us or make a payment through the Services, we usually direct you to a third-party payment processor. In the event we use a third-party processor, the only information we process is the last four digits of your payment card, a transaction ID number, the cardholder's name, billing address, and email address. For some Services we may collect payment information directly from you. In that case, the payment information we collect includes cardholder name, card number, expiration date, CVV number, billing address, and shipping address.
• Audio, electronic, visual, or similar information inferences. If you interact with us in customer service capacity or if you call us on a recorded line, we may collect information about you via call recordings, recorded meetings, webinars, videos, or photographs.
• Inferences. We may collect information of inferences drawn from any of the information described in this Section about you as a consumer including inferences reflecting consumer preferences, characteristics, behaviors, attitudes, abilities, and aptitudes.
• Sensitive personal information. In some circumstances, we may collect payment card information and related details and personal information collected and analyzed concerning a consumer's health. We may also collect your Social Security, driver's license, or state identification card number. When you fill out our surveys or take our quizzes, we collect your survey or quiz responses, which may include information regarding your demographics, preferences, opinions about our Services, and where relevant, information about your health or medical conditions relevant to our Services. Participation in our surveys is voluntary.1
• Recruitment. If you apply for an employment position with us, we may collect application-related information such as your name, contact information, current employment, information contained in your CV/resume, location, field of expertise, the kind(s) of roles you are interested in, information contained in your social media accounts or personal websites or accounts (i.e. LinkedIn or Twitter), and any other information you may wish to provide us as part of your application, including but not limited to protected classifications or sensitive personal information you may voluntarily disclose such as your disability status, ethnicity, religious beliefs, immigration status, sexual orientation, gender identity or expression, or other information of a sensitive nature. Personal information regarding criminal convictions or medical information will only be collected or processed where permitted by applicable law.
• Communications and interactions. When you email, call, or otherwise communicate with us, we collect and maintain a record of your contact details, a history of our interactions with you, and information about your use of our Services. We also maintain records of communications and information that you may post on our social media channels, and information you provide to us related to any customer support request.
• Events. If you register for or attend an event that we host or sponsor, we may collect personal information related to your registration for and participation in such event. Depending on the type of event, personal information could include travel details, certifications, dietary restrictions, training and professional education history details.
• Preferences. We also may collect information about your preferences, such as communications preferences, preferences related to your use of our Services, shopping behavior preferences, a record of your purchases from us, demographic data, and any other preferences you provide when interacting with us.

Personal Information Collected from Third Parties. We may collect personal information about you from third-party sources, such as public databases, joint marketing/promotional partners, government officials, social media platforms, internet service providers, operating systems and platforms, marketing and data analytics providers, or other third parties, as follows:

• Lead and prospect information. We may receive lead and prospect information, such as names, email addresses and contact information from third parties about individuals who may be interested in engaging with us.
• Social media information. If you post information about us or engage with us on third-party platforms, such as through your social media account, we may collect personal information about you from that third-party platform or account (e.g., your social media username and/or handle). These third-party platforms and services control the information that they collect and share about you. For information about how they may use and disclose your information, including any information you make public, please consult their respective privacy policies.
• References and assessments. During the recruitment process, we may collect information about you from your references, recruitment agencies, and assessment centers we engage with for recruitment purposes. We may also collect personal information about you from third-party sources who assist with our Pre-Employment Checks. If this occurs, you will be told in advance which aspects of your personal information will be verified including an explanation of how the Pre-Employment Check will be carried out, and information about criminal convictions or medical information (if collected) will only be collected through official authorized sources and in accordance with applicable law.

Personal Information Collected Automatically. We and our service providers automatically collect and derive personal information related to your use of our Services and your interactions with us. We may use these automatic collection technologies to collect information about your online activities over time and across third-party sites or other online services. In certain states this may be considered online behavioral advertising; to opt out of this collection, see 'Your Privacy Choices' at the bottom of Surity website at Surity | Reliable Urinary Incontinence Care.

The information we collect may include:

• Internet or other Network Activity Information. We use cookies, log files, pixel tags, and other tracking technologies to automatically collect information when users access or use our Services. We may collect device IP addresses, general location information, domain name, page views, date and time stamps, browser type, device type, device ID, internet service provider, referring and exiting URLs, operating system, language, clickstream data, and similar device and usage information. For more information, please see Section 5 Cookies and Tracking.
• Activities and usage. We also collect activity information related to your use of the Services, such as information about links clicked, searches, features used, items viewed, and time spent within the Services.
• Location Information. We may collect or derive general location information about you, such as through your IP address. With your permission, we may also collect geolocation information from your device when accessing certain Services. You may turn off location information sharing through your device's settings. This information will not be used for the purposes of geofencing.

3. Purposes for Collecting and Processing Personal Information

We may collect, use, and otherwise process your personal information for the following purposes:

• Services and support. To provide and operate our Services, communicate with you about your use of our Services, respond to your inquiries, gather feedback, fulfill your requests and orders, communicate with you, run our day-to-day operations, and for similar support purposes.
• Relationship management. To manage our relationship with you, for example, to process your transactions, manage and maintain your account with us, respond to your questions and comments, set up a Surity loyalty program account, and for other similar purposes.
• Recruiting purposes. To evaluate your interest in employment and contact you regarding possible employment with us, to process your application, assess your ability to meet the job specifications, verify references and professional qualifications, monitor recruitment statistics, improve our application process, ensure the security of our premises, assets, information, employees and other personnel, and to comply with legal and regulatory requirements such as health and safety requirements, government reporting requirements, equal opportunity monitoring, and to ensure compliance with our Code of Ethics & Business Conduct.
• Analytics and improvement. To better understand how website visitors access and use our Services, products, and offerings, and for other research and analytical purposes, such as to evaluate and improve our Services and business operations, to develop Services, features and new products and offerings, and for internal quality control and training purposes.
• Customization and personalization. To tailor the content that we may send you, including offering personalized help and instructions, and to otherwise personalize your experience.
• Sweepstakes, contests, and promotions. To administer the promotional programs that we offer.
• Marketing, advertising, and public relations. For marketing, advertising, and public relations purposes. Where you've consented to or opted in to receive such content, to send you information about our Services and the products and services of our affiliates, such as newsletters, and other marketing content, as well as any other information that you sign up to receive and to provide you with information about, or samples of, our product range for marketing purposes. With your permission, we also may use certain personal data that we collect to manage and improve our advertising campaigns (both online and offline) so that we can better reach individuals with relevant content based on your interests.
• Research, surveys, and product development. To administer surveys, such as for market research, customer satisfaction purposes or improving our Services, to conduct statistical and data analytics, and for other similar purposes.
• Engagement of Key Opinion Leaders and other Consultants. If you engage with us as a consultant or Key Opinion Leader (KOL), we will process your personal data to manage our professional relationship with you; to help promote and influence the adoption of our Services; to keep you updated with relevant information related to your area of expertise; to keep track of the level of interactions the Company has with our KOLs and to build and maintain a community of KOLs; to send informational newsletters; to make informed and objective decisions when identifying which KOLs to engage for research collaboration, clinical trials, patient support programs, involvement in advisory boards or consulting services; and to help assess Fair Market Value when we engage with other KOLs.
• Security and protection of rights. To protect our Services and our business operations; to prevent and detect fraud, unauthorized activities and access, and other misuse, where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or other applicable policies or other agreements we have with you or this Notice, to defend our rights, including through legal or other dispute resolution processes.
• Legal proceedings and compliance obligations. To comply with the law and our legal obligations, for example with respect to internal functions such as accounting, auditing, compliance and recordkeeping, as well as for external purposes, such as to respond to legal process, subpoenas, and related legal proceedings, court orders, national security or law enforcement disclosure requirements, and other lawful requests by regulators and law enforcement.
• General business and operational support. To consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other transactions such as financing, and related to the administration of our general business, accounting, auditing, compliance, recordkeeping, and legal functions.

4. Disclosures of Personal Data

We may disclose personal data that we collect, or you provide for business or commercial purposes, as described in this Notice, to the third parties listed below. These companies and individuals may only use the data as permitted by our contracts with them.

• Global affiliates, subsidiaries, branches, or associated offices. We may disclose the categories of personal data mentioned above to our global affiliates, subsidiaries, branches, or associated offices who will use and disclose this personal information in accordance with the principles of this Notice.
• Vendors, service providers and advisors. We may disclose the categories of personal data mentioned above to our service providers, legal advisors, and others who perform functions on our behalf or provide us with services. Categories of these service providers and related disclosed personal data include, such as:

5. Cookies and Tracking

With your consent, we and our providers use cookies, pixel tags, and other similar tracking technologies to automatically collect information about browsing activity, device type, and similar information within our Site and Services. This information, which may be considered personal data or health data in some jurisdictions, is used, for example, to analyze and understand how you access, use, and interact with our Site and Services; to identify and resolve bugs and errors in our Site and Services; to assess, secure, protect, optimize, and improve the performance of our Site and Services; to personalize content on our Site; and for marketing, advertising, measurement and analytics purposes. We may also de-identify and/or aggregate such information to analyze trends, administer our Site and Services, and gather broad demographic information for aggregate uses, and for any other lawful purposes.

Cookies. Cookies are alphanumeric identifiers used for tracking purposes. Some cookies allow us to make it easier for you to navigate our Site and Services, while others are used to enable a faster log-in process, to support the security and performance of the Site and Services, or to allow us to track activity and usage data within and across our Site and Services.

Pixel Tags and Similar Technologies. Pixel tags (sometimes called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. With your consent, we may use these tracking technologies to understand users' activities, to help manage content and compile usage statistics, and in emails to let us know when they have been opened or forwarded so we can track response rates and gauge the effectiveness of our communications.

Local Storage Objects. Local storage is a web storage mechanism that allows us to store data on a browser that persists even after the browser window is closed. Local storage may be used by our web servers to cache certain information in order to enable faster loading of pages and content when you return to our Sites. You can clear data stored in local storage through your browser. Please consult your browser help menu for more information.

Advertising Networks We work with ad networks, channel partners, mobile ad networks, analytics and measurement services, and others ("ad networks") to personalize content, as well as to manage our advertising on third-party websites, mobile apps, and online services. We may share certain information with ad networks, and we may each use cookies, pixel tags, and other tools to collect usage and browsing information within our Services, as well as on third-party websites, apps, and services. This information may include IP address, location information, cookie and advertising IDs, and other identifiers, as well as browsing information.

Do-Not-Track. Some browsers and browser extensions support the Global Privacy Control ("GPC"), which sends a signal indicating your preference to opt out of certain types of data processing, including "sales" as defined under certain laws. When we detect a GPC signal, we will make reasonable efforts to honor it as required by law. Currently, our Site responds to GPC signals, which means that if we detect that your browser is communicating a GPC signal, we will treat that as a request to opt that particular browser and device out of sales and sharing (i.e., via cookies and tracking tools) on our Site. Note that if you come back to our Site from a different device or use a different browser on the same device, you will need to opt out again or enable GPC on that browser/device. Learn more about GPC at: https://globalprivacycontrol.org/.

6. Your Privacy Choices

You have certain choices regarding our processing of your personal information, and we make available several ways for you to manage your preferences and privacy choices, as described below:

Marketing Communications. We may send periodic promotional emails or other similar communications to you. You may change your preferences or unsubscribe by following the instructions provided to you in the communication.

Cookie Settings. You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. You can manage whether the Services collect information through other tracking technologies by visiting 'Your Privacy Choices' in the footer of the Surity website at Surity | Reliable Urinary Incontinence Care.

Industry Ad Choice Programs. You can control how participating ad networks use the information that they collect about your visits to our Site and Services and those of third parties. You can obtain more information and opt out of receiving targeted ads from participating ad networks at aboutads.info/choices (Digital Advertising Alliance). Or, to learn more about opting out of receiving targeted ads from members of the Network Advertising Initiative ("NAI"), including how to add the NAI Global Privacy Control (GPC) extension to your Chrome web browser, see How to Opt Out - NAI: Network Advertising Initiative.

7. Your Rights

Depending on your state of residency, you may have certain rights related to your personal data, including:

• Confirmation and Access. You may confirm whether we process your personal data and access a copy of the personal data we process and disclose (including for direct marketing purposes)
• Data Portability. To the extent feasible and required by applicable law, data will be provided in a portable format.
• Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information's nature and processing purpose.
• Deletion. You may request that we delete personal data about you that we maintain, subject to certain exceptions under applicable law.
• Opt-out Using Personal Data for Targeted Advertising, Profiling and Sales. You may request that we do not use your personal data for these purposes. To exercise this right, you can reject non-essential cookies on the cookie banner or by adjusting your cookie settings by visiting 'Your Privacy Choices' that is located at the bottom of our website. When we receive an opt-out request, we will promptly honor your choice by:

Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request.

You can exercise your rights by contacting us using the information set out under Section 14 Contact us or through our Web Form.

Applicable for Californian residents:

• Non-discrimination. The right not to be subject to discriminatory treatment for exercising their rights under California Consumer Privacy Act (CCPA).
• California Shine Light Rights. California's "Shine the Light" law (Cal. Civ. Code § 1798.83) permits California residents who provide us certain personal information to request and obtain from us, free of charge, information about personal information (if any) we have shared with third parties for their own direct marketing purposes. To make a California Shine Light request, please call 1-800-461-9330 or email us at privacy@dentsplysirona.com. Requests may be made once per year.
• You may designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization and we may also require relevant consumer to directly verify identity and authority of authorized agent.

8. Retention of Your Personal Data

We retain your personal information for as long as reasonably necessary to fulfill purposes for which it was collected or as otherwise necessary to comply with our legal obligations, resolve disputes, maintain appropriate business records, and enforce our agreements. At the end of the retention period, personal data will be deleted, destroyed, or permanently deidentified.

9. Children

Our Site and services are not designed or intended for children under the age of 18. If we discover that a child has provided us with personal information, we will delete such information from our systems. If you are a parent or guardian and believe we have collected your child's information, please contact us as set forth in Section 14 Contact us.

10. How We Protect Your Personal Data

We have implemented safeguards that are intended to protect the personal information we collect from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. We also ensure that third parties we share personal information with contractually agree to comply with applicable privacy law and adequate security policies. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal data is at your own risk.

11. Third Party Links

Our Site and Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Notice, but instead is governed by privacy notices of those third-party websites. We are not responsible for information practices of such third-party websites.

12. Changes to this Notice

We may make changes to this Notice from time to time, so please be sure to check back periodically. We will post updates to Notice on the Site. If we make any material changes to this Notice, we will endeavor to provide you prior notice, such as by emailing or posting prominent notice on our Site.

13. Contact us

Surity welcomes your questions and comments about your privacy or this Notice. Please contact us by emailing privacy@dentsplysirona.com.

We have also appointed a Data Protection Officer, whose contact details are as follows:

Jennifer Lattimore

Dentsply Sirona, Inc.

13320-B Ballantyne Corporate Pl

Charlotte, NC 28277

privacy@dentsplysirona.com

Mobile: 866-324-2072

14. Additional Information for Residents of Certain States

A. Washington. For Washington residents, please note the following information in addition to what is stated above. We treat all personal data we process as health data for purposes of Washington's My Health My Data Act. This means all of the rights and practices described above apply to our processing of health data.

Consumer Health Data We May Collect About You

We collect and use different types of consumer health data from and about you, including:

• Information about any of the following:
• Individual health conditions;
• Use or purchase of medical devices; or
• Bodily functions or physical health status.

We may also collect data identifying a consumer seeking health care services. Health care services mean any service provided to a person to assess, measure, improve, or learn about a person's mental or physical health, including but not limited to:

• individual health conditions, status, diseases, or diagnoses;
• social, psychological, behavioral, and medical interventions;
• health-related surgeries or procedures;
• use or purchase of medication;
• bodily functions, vital signs, symptoms, or measurements of information described in this subsection;
• diagnoses or diagnostic testing, treatment, or medication;
• reproductive health care services; or
• gender-affirming care services.

Any inferences of the above categories derived, extrapolated, or inferred from non-health information.

We use these categories of consumer health data for the following purposes:

• Fulfilling the purposes for which you provided the data or those that were described when it was collected. This may include personalized advertising if you have provided your specific opt-in consent.
• Performing the services or providing the goods that you request from us and responding to your questions or requests for information.
• Notifying you about changes to our Services.
• Facilitating services and operations performance, security, and integrity, including:

• undertaking activities to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted consumer health data or that otherwise threaten to compromise the performance, security, or integrity of our business; and
• performance analytics, identity verification and authorization, site and application optimization, and quality control.

• Complying with our legal obligations and risk management, audit, investigations and reporting, and other legal and compliance reasons.
• Administering customer accounts and preferences.
• Our internal research and product or service design and development.

Consumer Health Data Disclosures

We may disclose any of the consumer health data categories listed above to processors, service providers, and contractors that help us provide products and services to you and to our affiliates as described above in section "Disclosures of Personal Data" above in this Notice.

We only sell your consumer health data if you give us your permission.

We instruct these affiliates, processors, service providers, and contractors to only use consumer health data as permitted by our contracts with them and consistent with applicable law.

We may also disclose consumer health data as permitted by applicable law, including:

• With your consent.
• To prevent, detect, protect from, or respond to security incidents, identity theft, fraud, harassment, or malicious or deceptive activities.
• To a third party acquiring our assets if Company sells its business or otherwise is part of a merger, acquisition, bankruptcy, or other transaction involving a third-party taking control of our assets or business.
• To investigate, report, or take legal action to protect our rights, property, and safety and the rights, property, and safety of others.
• To protect your or others' vital interests, including health and safety.

Your Privacy Rights

You have specific rights with respect to your consumer health data. You have the right to:

• Request confirmation that we collect, share, or sell your consumer health data.
• Request access to your consumer health data that we have collected or control, including:
• a list of all third parties and affiliates that we have shared or sold your consumer health data to; and
• the email addresses or other online method to contact those third parties and affiliates.
• Withdraw your consent for our collection and sharing of your consumer health data.
• Request that we delete your consumer health data.

To exercise any of your rights under Washington consumer health privacy law, please see Section 13 Contact us.