I. Your privacy is important to us. To better protect your privacy we provide this notice explaining our online information practices and the choices you can make about the way your information is collected and used. To make this notice easy to find, we make it available on our homepage and at every point where personally identifiable, non-public information may be requested. As a current or potential customer of HMP&L, we would like to take this opportunity to thank you for your business and emphasize the importance we place upon protecting the privacy of information we gather from you. Such information is gathered in accordance with applicable state and federal laws. II. This notice applies to all information collected or submitted either in person or on any of our websites. A. Personal information that may be collected by us includes but is not limited to: 1. Your legal name; 2. Your Social Security Number; 3. Your date of birth; 4. Your physical and mailing addresses; 5. Your telephone number(s); 6. Your e-mail address; 7. Your credit or debit card information; 8. Transactions and payment history; and 9. Credit history from a Consumer Reporting Agency (CRA). B. On some of our web pages, you may be able to place an order for services or request information. We may use cookie technology on any of our web pages. Web sites to which we link may also use cookie technology to gather and store data about their visitors. Cookies contain a small amount of information, possibly including non-public personal information that allows a web server to recognize you whenever you visit. We encourage you to familiarize yourself with the privacy and information collection practices of any web site you visit. C. To collect customer information as listed above, we may use the following means to gather information: written, in-person, telephone, facsimile, electronically, online, and third parties. III. We use the information you provide strictly for business purposes (to provide or discontinue services, to collect for services, internal recordkeeping, etc.). We do not share your information with non-affiliates except to the extent necessary to conduct your requested business or as required by law. This may include: A. Information that is necessary to service or process accounts consistent with usual and customary services offered. B. Information that is necessary to protect the confidentiality or security of customer records. C. Information that is necessary to resolve customer disputes or inquiries. D. Information that is required by regulatory entities that are assessing our legal compliance. E. Information that is required to comply with the law. F. Information that is necessary to protect against or prevent fraud, unauthorized transactions, or other liability. IV. Our practices regarding information confidentiality and security: A. We maintain physical, electronic, and procedural safeguards to guard your information. These safeguards include but are not limited to the following: 1. We restrict access to non-public personal information about our customers to those employees who need to know that information in order to assist in providing services or information to the customer; 2. Information gathered about you will be protected in our electronic systems by firewall, encryption, or passwords, as appropriate, and will be properly deleted when no longer necessary for business; and 3. Hard copy or physical documents containing your non-public data will be locked, accessed only by employees with a business need-to-know, and retained only as long as business necessitates. B. Records Retention and Disposal: 1. All records are retained in accordance with the HMP&L Records Retention and Disposal Policy. Electronic and physical records that are no longer needed will be disposed of using an approved method to prevent unwarranted or illegal access. C. HMP&L will monitor this and all other policies related to privacy, confidentiality, and identity theft, to ensure that our procedures and practices afford the best protection we can provide for your personal, non-public information. V. You can access your personal, non-public information that we collect and maintain by submitting a request in writing. This procedure is used to better safeguard your information. A. This request should be sent to: Comptroller, Henderson Municipal Power & Light, PO Box 8, 100 Fifth Street, Henderson, Kentucky 42420. B. You can correct factual errors in your information by sending us a request that credibly shows error. C. To protect your privacy and security, we will take reasonable steps to verify your identity before granting access or making corrections. VI. How to contact us: A. Should you have other questions or concerns about these privacy policies, please call us at 270-826-2726 or HMP&L, 1213 Barret Blvd., Henderson, Kentucky 42420, ATTN: CFO.