State Privacy Notice

Last Updated: September 9, 2026

This State Privacy Notice (“Notice”) supplements Sunshine Retirement Living LLC’s general Privacy Policy, available at Privacy Policy, and provides additional information and rights for residents of states with comprehensive consumer privacy laws that apply to Sunshine Retirement Living. The General Privacy Policy describes our collection, use, disclosure, and protection of personal information in greater detail.

In this Notice, “Sunshine Retirement Living,” “Company,” “we,” “our,” or “us” means Sunshine Retirement Living LLC and the senior living communities it owns or manages that link to this Notice. Terms defined by an applicable state privacy law have the meaning given to them by that law when this Notice applies under that law.

This Notice applies to consumers, prospective residents, family members and representatives, website visitors, and other individuals acting in an individual or household context. It does not apply to personal information collected in an employment or employment-seeking capacity. California employees and job applicants should see our California Employee and Applicant Privacy Policy at California Employee and Applicant Privacy Policy. Individuals whose consumer health data is subject to the Washington My Health My Data Act should also review our Washington Consumer Health Data Privacy Notice at Washington Consumer Health Data Privacy Notice.

Personal Information We Collect

Depending on how you interact with us, we may collect identifiers and contact information; information about communities, services, tours, inquiries, and other commercial or service interests; internet, device, and other network activity; general location information; communications; audio, visual, or other sensory information; profiles and inferences; and limited health or care-needs information that you voluntarily provide.

We do not knowingly collect consumer biometric identifiers for identification, non-public education records, or employment information under this Notice. Employment and applicant information is addressed separately. We may collect other categories only when relevant to a particular interaction and as described at or before collection.

Sources of Personal Information

We obtain personal information from the following categories of sources:

• Directly from you, including through inquiry forms, tour requests, care surveys, telephone calls, email, text, chat, mail, in-person communications, and other information you provide.
• From family members, representatives, referral sources, or other individuals who contact us on your behalf or provide information concerning a prospective resident.
• Indirectly from your interactions with our websites, advertisements, social media, community pages, chat tools, emails, and other digital services.
• From service providers and contractors, including website hosting and security providers, customer relationship and lead-management providers, communications and scheduling providers, analytics providers, advertising networks, and social media platforms.
• From publicly available sources and business partners, where permitted by law.
• From inferences generated by our personnel, systems, or service providers based on the information described above.

How We Use Personal Information

We collect, use, and disclose personal information for the following business and commercial purposes:

• Provide information about our senior living communities, services, amenities, availability, and care options.
• Respond to inquiries, schedule and manage tours or consultations, and route requests to the appropriate community or personnel.
• Review care-survey responses and other information voluntarily provided to understand requested services, general care needs, and potentially appropriate communities or levels of support.
• Manage prospective-resident and family relationships, maintain communication records, and provide follow-up communications by email, telephone, text, mail, or other methods.
• Create lead or prospect profiles and scores, evaluate likely interest or engagement, and prioritize or personalize communications and outreach.
• Improve our websites, services, marketing, communications, customer relationships, and consumer experiences.
• Measure the effectiveness of advertising, perform analytics, create audiences, and deliver or support advertising that may be relevant to consumers.
• Administer and secure our systems and operations, including troubleshooting, testing, research, statistical analysis, fraud prevention, quality assurance, and recordkeeping.
• Evaluate or complete a merger, acquisition, financing, reorganization, sale of a community or other assets, or similar transaction.
• Comply with applicable law, respond to legal process or governmental requests, and establish, exercise, or defend legal rights.
• Fulfill another purpose disclosed to you at collection or with your consent.

Sensitive Personal Information and Sensitive Data

We may collect limited health or care-needs information when you voluntarily provide it in a care survey, inquiry, chat, telephone call, or other communication. We use this information to respond to your request, understand the services or level of support you are seeking, route your inquiry, identify potentially appropriate communities or services, maintain records, comply with law, protect safety and security, and provide services through appropriately restricted service providers or contractors.

We do not use or disclose sensitive personal information for purposes that require California consumers to receive a separate right to limit under the CCPA, and we do not sell or share sensitive personal information or use it for targeted advertising. We will obtain consent before processing sensitive data when applicable state law requires consent.

When we maintain deidentified information, we will maintain and use it in deidentified form and will not attempt to reidentify it except as permitted by applicable law, including to evaluate whether our deidentification processes satisfy legal requirements.

Disclosing Personal Information for Business Purposes

We may disclose personal information to service providers, contractors, affiliates, the senior living communities we own or manage and their personnel, professional advisers, government authorities, and parties to corporate or community transactions for the purposes described above. These recipients may provide website hosting, information technology, cybersecurity, data storage, customer relationship management, chat and lead-capture, communications, surveys, scheduling, analytics, marketing, advertising support, legal, accounting, insurance, consulting, and similar services. Where required by law, we use written contracts that describe permitted purposes and impose appropriate confidentiality, data-use, and protection obligations.

Selling, Sharing, and Targeted Advertising

We do not sell personal information for monetary payment. We do, however, use certain personal information for targeted advertising and disclose certain identifiers, commercial or service-interest information, internet or network activity, general location information, and non-sensitive inferences or profile information to advertising networks, social media platforms, advertising technology providers, and certain analytics providers. These disclosures may constitute a “sale,” “sharing,” or processing for targeted advertising under applicable state law even when no money is exchanged. We do not disclose health or care-needs information, or inferences derived from that information, for targeted advertising.

We do not knowingly sell or share the personal information of consumers under 16 years of age or use it for targeted advertising without any consent required by applicable law.

To opt out of the sale or sharing of personal information or the use of personal data for targeted advertising, please use our Your Privacy Choices. We also recognize opt-out preference signals, such as Global Privacy Control, where required by applicable law. Depending on the signal and whether we can associate the browser or device with you, the signal may apply to the browser or device and, where required and technically feasible, to an associated consumer profile or account.

Data Retention

We retain each category of personal information for no longer than reasonably necessary and proportionate to the purposes for which it was collected or processed, or for another disclosed purpose compatible with those purposes, unless a longer period is required or permitted by law. In determining retention periods, we consider the duration of the consumer relationship or inquiry, operational and service needs, legal and regulatory obligations, security and fraud-prevention needs, applicable statutes of limitation, dispute-resolution needs, and contractual requirements. For California consumers, category-specific retention criteria are summarized in Additional Information for California Residents below.

Your State Privacy Rights

Depending on your state of residence, the law that applies to Sunshine Retirement Living, and applicable exceptions, you may have some or all of the following rights regarding your personal information or personal data:

• Right to Know, Confirm, and Access. You may request confirmation of whether we process your personal information and access information about the personal information we maintain, including the categories and, where applicable, specific pieces of personal information.
• Right to Data Portability. You may request a copy of certain personal information in a portable and, to the extent technically feasible, readily usable format.
• Right to Delete. You may request deletion of personal information, subject to applicable exceptions and limitations. Some states limit deletion rights to information you provided directly to us.
• Right to Correct. You may request correction of inaccurate personal information, taking into account the nature of the information and purposes of processing.
• Right to Opt Out of Sale, Sharing, or Targeted Advertising. You may direct us not to sell or share your personal information, or not to process personal data for targeted advertising, where applicable.
• Right to Opt Out of Certain Profiling. Where provided by applicable law, you may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.
• Right to Limit Certain Uses of Sensitive Personal Information. California residents may have a right to limit certain uses or disclosures of sensitive personal information when a business processes that information beyond statutorily permitted purposes. Sunshine does not currently use or disclose sensitive personal information in a manner that triggers this right.
• Right to Information About Recipients. Where provided by applicable law, you may request information about the third parties to which we disclosed personal information, including a list of specific third parties when required.
• Right to Non-Discrimination or Non-Retaliation. We will not unlawfully discriminate or retaliate against you for exercising an applicable privacy right.

Exercising Your Privacy Rights

To exercise an applicable right, submit a request using one of the following methods:

• Call us at 866-712-1087.
• Email us at info@sunshineret.com.
• Use our online privacy request form at online privacy request form.

Please describe your request with enough detail for us to understand, evaluate, and respond to it. For requests that require verification, we may ask you to provide information reasonably necessary to verify your identity and authority to make the request. We will use information submitted for verification only for verification and request-processing purposes, except as otherwise permitted by law.

You may use an authorized agent to submit a request where applicable. We may require proof that the agent is authorized to act on your behalf and may contact you directly to verify your identity or authority, as permitted by applicable law. You do not need to create an account to exercise privacy rights.

We will respond within the period required by applicable law. We may extend the response period when permitted and will notify you of any extension and the reason for it. We do not charge a fee unless permitted by applicable law, such as when a request is excessive, repetitive, or manifestly unfounded.

Appeals

If we deny a request and the law of your state provides a right to appeal, you may appeal our decision by using the same contact methods listed above and stating that you are appealing a privacy-rights decision. We will respond within the time required by applicable law. If we deny an appeal, we will provide information about how to contact the appropriate state regulator or attorney general when required by law.

Additional Information for California Residents

This Notice, together with our General Privacy Policy, serves as Sunshine Retirement Living’s CCPA privacy policy for California consumers. This section provides the additional category-by-category disclosures and California-specific information required by the CCPA. The table below identifies the CCPA categories of personal information we collected during the preceding 12 months and summarizes our sale or sharing practices, business-purpose disclosures, and retention criteria.

California Categories of Personal Information

California Business-Purpose Disclosures

For business purposes, we may disclose the categories above to website hosting, information technology, cybersecurity, data-storage, CRM, chat, lead-capture, communications, survey, scheduling, analytics, marketing, advertising-support, professional-service, community-operation, and similar service providers or contractors; to Sunshine affiliates and community personnel; to government authorities where required; and to parties involved in a merger, acquisition, sale of a community, financing, reorganization, or similar transaction. The categories disclosed depend on the service or purpose involved.

California Sale and Sharing Disclosures

During the preceding 12 months, Sunshine Retirement Living has shared identifiers, commercial or service-interest information, internet or network activity, general geolocation information, and non-sensitive inferences or profile information with advertising networks, social media platforms, advertising technology providers, and certain analytics providers for cross-context behavioral advertising, remarketing, campaign measurement, audience creation, attribution, and related advertising or analytics purposes. We do not sell personal information for monetary payment. Certain of these disclosures may also constitute a sale under the CCPA, even when no money is exchanged. We do not sell or share health or care-needs information, or inferences derived from that information, for cross-context behavioral advertising.

California residents have the rights described above as applicable under the CCPA, including the rights to know and access personal information, request deletion or correction, opt out of sale or sharing, limit certain uses or disclosures of sensitive personal information where applicable, and receive non-discriminatory treatment for exercising CCPA rights. California residents may exercise these rights using the methods described in Exercising Your Privacy Rights.

California consumers may opt out of sale or sharing through our Your Privacy Choices or an applicable opt-out preference signal, such as Global Privacy Control. We will process opt-out requests as required by the CCPA and will not ask a consumer to reauthorize sale or sharing except as permitted by law.

We do not use or disclose sensitive personal information for purposes outside the CCPA’s permitted sensitive-information purposes. If that changes, we will provide the notice and right to limit required by the CCPA.

We do not currently use automated decisionmaking technology to make significant decisions about California consumers without meaningful human involvement. Our lead and prospect scoring is used to prioritize or personalize outreach and does not determine whether a consumer is offered housing, admitted to a community, offered particular care services, or otherwise determine a significant decision about the consumer. If we begin using covered automated decisionmaking technology, we will provide any notice and applicable rights required by law.

For a request to know, delete, or correct, we may verify your identity by matching information you provide with information we maintain and, where appropriate, requesting additional documentation. For an authorized agent, we may require signed permission or other proof of authority and may verify your identity directly unless applicable law provides otherwise.

California consumers may contact us about this Notice or our privacy practices using the contact information below. California consumers who need this Notice in an alternative format because of a disability may contact us using the same methods.

Changes to This Notice

We may update this Notice from time to time to reflect changes in our practices, services, legal requirements, or other circumstances. We will update the “Last Updated” date and provide any additional notice required by applicable law. We encourage you to review this Notice periodically.

Contact Information

If you have questions or comments about this Notice, our privacy practices, or your privacy rights, contact us at:

Sunshine Retirement Living LLC
1080 Mount Bachelor Dr., #200
Bend, OR 97702
Phone: 866-712-1087
Email: info@sunshineret.com