Kern Energy (Kern) will always respect the confidentiality of all Personal Information in its care. Kern will endeavor to ensure that the policies affecting the collection, storage, and disclosure of Personal Information reflect the confidential nature of the information. Kern will comply with applicable privacy legislation and regulations related to protecting the confidentiality of Personal Information.

The Company will document the purposes for collecting Personal Information. Personal Information will only be used for the stated purpose or purposes for which it was initially collected. The purposes for which Personal Information is being collected will be identified orally or in writing to the Individual before it is collected. The person collecting the information will be able to explain the purpose at the time that the information is collected.

Kern may use Personal Information for a purpose other than the stated initially where a new purpose is required by law or where the Company has obtained consent in writing from the affected Individual(s).

Knowledge and consent are required from the affected Individual for the collection, use, and disclosure of all Personal Information, subject to exceptions noted elsewhere in the Privacy Policy statement. Before giving consent, the Individual will be informed of the intended use and any known potential disclosure of all Personal Information. Any use or disclosure of Personal Information will be within the reasonable expectations of the Individual. Subject to legal and contractual obligations, an Individual may withdraw their consent with reasonable notice.

All Personal Information released internally will be on a strict need-to-know basis. During customary and reasonable business practices, Kern Energy's policy is to grant only specific designated Kern representatives access to Personal Information. This access will not exceed that necessary to accomplish the specific business function of the Company representative nor the purpose for which the information was originally collected.

Personal Information includes, but is not limited to, an Individual’s name, home address, home phone number, personal email address, personal cell phone number, identity-verification information, Social Security Number, driver's license or state-issued identification card number, immigration status, personal banking account information, physical description, age, gender, salary, education, professional designation, personal hobbies and activities, medical history, health insurance information, employment history, credit history, contents of the resume, references, and emergency contact information.