Access & Deletion

Depending on the State you reside, applicable law may entitle you to additional consumer rights, including the right (with certain limitations and exceptions) to:

• Know the categories and/or specific pieces of Personal Data collected about you, including whether your Personal Data is sold or disclosed, and with whom your Personal Data was shared
• Access a copy of the Personal Data we retain about you
• Request deletion of your Personal Data

To guard against fraudulent requests for access and deletion, C. R. Bard will require information that it determines is sufficient to allow it to confirm the identity of the person making the request before granting access or making corrections. C. R. Bard will endeavor to provide the information in question within a reasonable time and may charge an appropriate cost (e.g., photocopying, mail charges) to the individual making the request, where permissible under applicable law. C. R. Bard reserves the right not to change any Personal Data but will append alternative text the individual concerned believes is appropriate.

In addition, in certain circumstances, C. R. Bard may decline to provide access to Personal Data, including where C. R. Bard determines that the information requested:

• (a) May disclose:
• a. The Personal Data of another individual or of a deceased individual; or
• b. Trade secrets or other business confidential information;
• (b) Is subject to attorney-client or litigation privilege or a professional privilege or obligation;
• (c) Is not readily retrievable and the burden or cost of providing would be disproportionate to the nature or value of the information;
• (d) Does not exist, is not held, or cannot be found by C. R. Bard;
• (e) Could reasonably result in serious harm to the treatment or recovery of the individual concerned, serious emotional harm to the individual or another individual, or serious bodily harm to another individual; or
• (f) May harm or interfere with law enforcement activities or other investigative or regulatory functions of a body authorized by statute to perform such functions.

Please note that although after receiving a request to update, correct or delete information, we will make reasonable efforts to effect such a change promptly, it is not always possible to complete the process before another communication is distributed. We apologize for any inconvenience this may cause. Even if you have requested removal of your Personal Data from our lists, C. R. Bard reserves the right to retain it in our files in some limited circumstances such as when such Personal Data may be necessary to honor your request to opt out of further communications, resolve disputes, troubleshoot problems, comply with applicable law or as provided in our Terms of Use. If C. R. Bard is required to retain any portion of the Personal Data for such purposes, C. R. Bard will use reasonable efforts to limit that retention of Personal Data to what is necessary to accomplish the particular purpose. Therefore, you should not expect that your Personal Data will be completely removed from our systems in response to your request.

C. R. Bard will not respond to repetitious or vexatious requests for access. In determining whether a request is repetitious or vexatious, we will consider such factors such as the frequency with which information is updated, the purpose for which the information is used, and the nature of the information.

Right to Lodge Complaints

We are transparent about the ways in which we collect and use Personal Data, and welcome your questions and concerns. If you have any concern or complaint about the way we handle your Personal Data, please contact us as described below. To the extent you believe we have not addressed your concerns or otherwise choose to do so, you have the right to lodge a complaint with an authority in the State country where you reside or the US Federal Trade Commission regarding your concerns. For more information, please see https://www.ftc.gov/faq/consumer-protection/submit-consumer-complaint-ftc.

How Do We Use Your Personal Data and Other Information

C. R. Bard uses the Personal Data you provide for our business purposes in a manner that is consistent with this Privacy Statement.

• If you provide Personal Data for a certain reason, that Personal Data will be available to us for use in connection with the reason for which it was provided or for a consistent purpose, including, if applicable, processing an order placed by you or informing you that the product is no longer available. For instance, if you contact us by e-mail, we may use the Personal Data you provide to respond to you; or if you contact us about a job listing, the information you provide to us may be used to consider you for the position. We may also combine Personal Data that you have provided to us with information obtained by us from other parties.
• C. R. Bard and its affiliates may use your Personal Data and other information collected through your use of the Services, for collection, review and analysis necessary to meet its reporting obligations, such as mandatory reporting obligations to public health authorities, if applicable.
• C. R. Bard and its affiliates also may use your Personal Data, User Data and other information collected through the Site to help us improve the content and functionality of the Site, to better understand our customers and markets, to improve our products and services and to effect and facilitate sales.
• C. R. Bard and its affiliates may use this information to contact you, electronically, through telemarketing or otherwise, in the future to tell you about, and to offer for sale, products or services we believe will be of interest to you. If we do so, each communication we send you will contain instructions permitting you to "opt out" of receiving future communications.
• In some instances, we contract with outside parties to collect and maintain our information collection servers and to perform technology and related services. We seek to provide any such third parties with only the information they need to perform their specific function and we require them to protect your Personal Data in accordance with this Privacy Statement.

If at any time you wish not to receive any future communications or to have your name deleted from our mailing lists, you may follow the "unsubscribe" procedure included with our communication. In addition, you may e-mail us at privacy@liberatormedical.com. See How to Contact C. R. Bard below.

Do Not Track

Do Not Track (“DNT”) is a privacy preference that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. At the present time, the World Wide Web Consortium (W3C) has not yet established universal standards for recognizable DNT signals and therefore, the Site does not recognize DNT.

Do We Share the Information that We Receive?

C. R. Bard considers your information to be a vital part of our relationship with you. C. R. Bard will share information including Personal Data with its subsidiaries and affiliates that have also agreed to be bound by this Privacy Statement. In addition, C. R. Bard, like many businesses, sometimes hires other companies or service providers to perform certain business-related functions. Examples include mailing information, maintaining databases and processing payments. When we retain another non-affiliated company to perform a function of this nature, we seek to provide them with only the information that they need to perform their specific functions, and we require them to protect your Personal Data in accordance with this Privacy Statement and C. R. Bard's other contractual or legal restrictions.

In addition, if you input Personal Data on a co-branded registration page, relating, for example, to a contest co-sponsored by both C. R. Bard and a partner company o, then your Personal Data will be available both to C. R. Bard and to such partner company. While C. R. Bard will only use such Personal Data in accordance with this Privacy Statement, such partner company's use of your Personal Data will be subject to the privacy policy of that company and C. R. Bard cannot be responsible for their use of your information. We encourage you to review the privacy policy of such partner company before providing information on any such co-sponsored page or promotion.

There are also a limited number of circumstances in which we may share your Personal Data and other information in our possession with certain additional third parties without further notice to you, as set forth below.

Legal Requirements

C. R. Bard may disclose your Personal Data, User Data and other information if required to do so by law or in the good faith belief that such action is necessary to (a) comply with a legal obligation, (b) protect and defend the rights or property of BD or its affiliates, (c) act in urgent circumstances to protect the personal safety of users of the Site or the public, or (d) protect against legal liability. Please note that compliance with a legal obligation is not limited to compliance with court orders or other legal processes specifically related to this Privacy Statement. BD may also disclose Personal Data, including health-related data, to meet its obligations under FDA and other governmental agency regulations and state and federal laws where applicable.

Business Transfers, Combinations and Related Activities

As we develop our business, we might sell, buy, restructure or reorganize businesses or assets. In the event of any sale, merger, reorganization, restructuring, dissolution or similar event involving our business or assets, Personal Data may be part of the transferred assets.

C. R. Bard is a wholly owned subsidiary of BD. BD is the parent company of a large international group of companies. In light of this fact, we may, from time to time transfer your Personal Data to one of our databases in another country.

Public and Unsolicited Information

The protections set out in this Privacy Statement do not apply to Public Information you provide to C. R. Bard through this Site or through any other means. If you include Personal Data in Public Information, we will use that Personal Data only as provided here, but we caution you that, because such information (including your Personal Data) was made available in a forum accessible by the public, the use and disclosure of information by others accessing the Site is not monitored or controlled in any way by C. R. Bard - nor are their activities governed by this Privacy Statement.

Please refer to our discussion of "Public and Unsolicited Information" contained in our Site Terms of Use.

Please note that, as set forth above, this Privacy Statement does not apply to the providing or use of certain Personal Data other than through the Site or in connection with C. R. Bard Services that reference the Privacy Statement on this Site. It does not apply to the use of Personal Data of past or present employees of, or consultants engaged by, Becton, Dickinson and Company and/or its subsidiaries, for employment or benefits administration purposes, both of which are governed by BD policies designed for those respective purposes.

Links to Other Websites

This Site and the C. R. Bard Services may frame or contain references or links to other BD websites as well as other websites and applications, such as BD Partner mobile applications, which are not operated or controlled by BD (the "Third Party Sites"). None of the Third Party Sites are governed by the policies and procedures we describe here. Links and references from this Site to Third Party Sites do not imply C. R. Bard's review or endorsement of the Third Party Sites. We suggest that you contact those sites directly for information on their privacy, security, data collection and distribution policies.

Security

C. R. Bard takes reasonable steps to protect any Personal Data you provide to us and to protect such information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. Unless otherwise stated on the relevant page of the Site, C. R. Bard uses general security standards but has not taken additional action to secure data provided to its sites, and such transmissions are subject to normal Internet security risks. As noted, no Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from this Site may not be secure, and you should therefore take special care in deciding what information you send to us or to C. R. Bard partners. Please keep this in mind when disclosing any Personal Data to C. R. Bard or to any other party via the Internet. Moreover, when you use passwords, ID numbers, or other special access features on this Site, it is your responsibility to safeguard them.

Supplemental Privacy Notice to California Residents

If you reside in California and we receive or collect CA Personal Information about you in a manner that is not an exception that is excluded by applicable law, we are required to provide additional information to you about how we use and disclose your information, and you may have additional rights with regard to how we use your information. We have included this California-specific information below.

California Consumer Privacy Act of 2018 (CCPA)

California Personal Data . Consistent with the "What Information Do We Collect?" section above, we collect certain categories and specific pieces of information about California consumers or households that are considered "Personal Data" in California ("CA Personal Data"). For example and specific to CA Personal Data, C. R. Bard may have collected the following categories of information about you:

• Personal Data under the California Customer Records statute – such as: signature, physical characteristics or description, telephone number, medical information, health insurance information
• Protected classifications under California or federal law – such as: sex, age, physical or mental disability
• Commercial information – such as: products or services obtained or considered, or other purchasing or consuming histories
• Internet or other similar network activity – such as: information regarding a consumer’s interaction with a website or application
• CA Personal Data does NOT include information that is:
• Publicly available from government records
• De-identified or aggregated consumer information
• Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the California Confidentiality of Medical Information Act (CMIA) or clinical trial data
• Collected in the context of C. R. Bard's business-to-business interactions
• Other personal or financial information that is covered under certain sector-specific privacy laws.
• In addition, California personnel are notified separately about the use and disclosure of their CA Personal Data.

Sources. We may collect certain categories of CA Personal Data from you and other third parties as described in the "What Information Do We Collect?" section above.

Purposes. Consistent with the "How Do We Use Your Personal Data and Other Information?" section above, we may share and/or disclose your CA Personal Data for business or commercial purposes, as follows:

• Sharing your CA Personal Data for business purposes: As described in the "Do We Share the Information that We Receive?" section above, in the past twelve months, we may have used or disclosed (shared) the following categories of your CA Personal Data with service providers, affiliates, third party partners, public or government authorities and future business partners for one or more of our operational or business purposes:
• To provide products and services to consumers
• To respond to consumer requests
• To improve and personalize the consumer experience on our Site
• For analytical purposes to improve or further develop products or services
• To monitor the safe and effective use of our products (or services)
• For any activity described to a consumer that engages with C. R. Bard digitally and provides Personal Data or as otherwise permitted under the CCPA
• To conduct troubleshooting, audits, or other quality control activities related to the Site or other micro-sites, products, or services
• To detect and protect against security incidents and potential deceptive, malicious, or fraudulent activity
• To maintain and repair any C. R. Bard Services
• As described above, examples of business purposes include business-related functions, internal operations, prevention of fraud and other harm, and legal or regulatory compliance.
• Sharing your CA Personal Data as a “sale” under California law: We do not sell the Personal Data of California consumers. If C. R. Bard determines that any activity that C. R. Bard is engaged in may constitute a "sale" under California law, C. R. Bard will modify this notice and add a Do Not Sell button to the Site. Note that none of the following types of disclosures constitute a “sale” under the CCPA:
• requests or direction from consumers to disclose their Personal Data
• instances where a consumer tells BD to interact with a third party that does not sell Personal Data of California consumers
• situations where C. R. Bard shares Personal Data pursuant to a written contract with a service provider that is necessary to perform a business purpose where that third party is limited to only using the Personal Data to perform under that contract
• cases where a consumer’s Personal Data is transferred as part of a transaction (merger or acquisition) under which the third party assumes full or partial control of one of our businesses.

California Consumer Rights. Subject to certain exceptions, as a California resident, you may have the following rights to your CA Personal Data: (i) Access. Request access to your CA Personal Data that we collect, use, disclose, or sell (if applicable); (ii) Deletion. Request deletion of your CA Personal Data, although C. R. Bard may deny the request for a number of reasons authorized under California or other applicable law; and (iii) CA Personal Data Sold or Disclosed for Business Purposes. Request information about the CA Personal Data we have "sold" (as defined under CCPA) or disclosed for business purposes within the preceding 12 months. As noted above, C. R. Bard does not sell consumers’ Personal Data. To the extent permitted by applicable law, we may be required to retain some of your CA Personal Data and certain CA Personal Data is strictly necessary in order for us to fulfil the purposes described in this Privacy Statement.

Exercising California consumer rights. If you are a California resident and wish to exercise any of these rights, you may submit a verifiable request to us as follows: (a) contact us via e-mail: privacy@liberatormedical.com as described in the “How to Contact C. R. Bard” section below with the specific nature of your request, referencing “Your California Privacy Rights”; or (b) call the following toll-free number: (800) 490-2177. We are not responsible for requests that are not labelled or sent properly, or do not have complete information. We will verify your identity prior to providing any information in response to a consumer rights request. Please note that you are limited by law in the number of requests you may submit per year. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf (Authorized Agent), may attempt to make a consumer request for you. We cannot respond to a request if we are unable to verify your identity or confirm your Authorized Agent. Follow these steps if you wish to submit a request to exercise your rights under California law:

1. Give us enough information to reasonably verify you are a California resident and entitled to rights under California law;
2. Describe your request with enough detail to allow us to understand and respond to your request; and
3. Tell us how you prefer to receive a written response – by USPS mail or e-mail. Note that if you do not specify your preference, BD will respond to a verified request by e-mail.

We will not discriminate against you by offering you different pricing or products, or by providing you with a different level or quality of products, based solely upon you exercising your rights to your CA Personal Data. Finally, making a verifiable consumer request does not require you to create an account with BD.

Right to Removal of Posted Information—California Minors

If you are under 18 years of age, reside in California, and have provided us with information, you have the right to request removal of unwanted information that you publicly post on the Site. To request removal of such information, you can contact us as provided below. Upon receiving such a request, we will make sure that the information is not publicly available on the Site, but the information may not be completely or comprehensively removed from our systems and databases.

How to Contact C. R. Bard

Please also feel free to contact us if you have any questions about C. R. Bard's Privacy Statement or the information practices of this Site.

You may contact us as follows:

Becton, Dickinson and Company

1 Becton Drive

Franklin Lakes, New Jersey 07417-1880

Attention: Privacy Officer for the Americas

privacy@liberatormedical.com

Additional options for California Residents Only:

Toll Free Phone Number: (800) 490-2177

E-mail: privacy@liberatormedical.com