Appendix B CCPA

CCPA

Privacy Notice for California Residents – California Consumer Privacy Act (CCPA)

The following is provided to give California residents the additional information required by the California Consumer Privacy Act (the "CCPA"). The Company is committed to protecting the privacy and security of all the personal information that is entrusted to us.

California Residents Rights:

The CCPA provides California residents with specific privacy rights, including the right to receive a privacy notice, the right to know what information we have collected about you during the past 12 months, and the right to know what categories of personal information we have shared with third parties. CCPA gives California residents the right to opt-out of having their personal information sold. CCPA also gives California residents the right to request deletion of their personal information.

This notice provides information about the categories of information that we collect from California residents generally, the sources of the information, the purposes for which we use the information, and the categories of third parties to whom we disclose the information for business purposes. Under the CCPA, everyday business purposes encompass the Business Purposes (as defined in the CCPA) and following related purposes for which personal information may be used; (i) to provide the information requested by the individual; and (ii) to collect cookie/browser information to enable our website to operate.

Please note that the Company does not sell your personal information, nor do we offer financial incentives for the collection or sale of your personal information. We will not discriminate against you if you exercise your rights under CCPA.

If you are a California resident, you may exercise your rights or authorize another person to act on your behalf by contacting the Company in writing by email at [email protected] or by writing to the below address,:

Attention:

Air Lease Corporation,
2000 Avenue of the Stars,
Suite 1000N,
Los Angeles, CA 90067

Please understand that these rights are subject to some limitations, such as when we are retaining data for the purpose of website operations, disseminating requested information or to comply with our own legal obligations.

CCPA Right To Know Disclosures

Category and Sources of Personal Information (PI) Representative Data Elements Purpose for Collecting and Sharing the PI Categories of Third Parties to whom this type of Personal Information is Disclosed for a Business Purpose Categories of Third Parties to whom this type of Personal Information is Sold Information about Your Rights and Choices

Contact Information

We collect this type of information from:

You

Data provided via our Contact page:

Name, Telephone number, email address, Company Name, Country

Additional Data elements in this category include:

IP Address

MAC Address, SSIDs or other device identifiers or persistent identifiers,

Device characteristics (such as browser information),

First Party Cookies, and Third Party Cookies

Data is used in the process of providing requested information via subscription. Additionally, the Company may communicate with the submitter using the email or telephone information provided.

Additional data elements may be captured and used by our third-party Google reCAPTCHA technology. Refer to Google's Privacy Policy (https://policies.google.com/privacy) for information on their data capture and use policies.

We may disclose this type of information to:

Service providers, who deliver our communications, including email delivery service;

Other third parties (including government agencies) as required by law

We do not sell this personal information.

You can opt-out of having your contact information used by the Company for email communication. To do this, click "unsubscribe" on the email you receive from us.

Unique Identifiers

We assign a member ID to you when you register an account.

We collect this type of information from:

You, when you interact with us by submitting a request for information

Data elements in this category include:

Email address

We use this type of information:

To identify you

For email delivery reporting

For metrics and analytics,

To track your use of our websites, limited to our own information delivery

We may disclose this type of information to our affiliates and service providers and to:

Third parties who assist with our information technology and security programs;

Third parties who assist with fraud prevention, detection and mitigation

Our lawyers, auditors and consultants

Other third parties as required by law

We do not sell this personal information.

To request deletion of your personal information, visit the "Your Rights" section of this document.

Relationship Information

We collect this type of information from:

You

Data elements in this category include:

Professional information

We use this type of information:

To associate individuals with business partners and investor organizations

We may disclose this type of information to our affiliates and service providers and to:

Our lawyers, auditors and consultants

Other third parties as required by law

We do not sell this personal information.

You can opt-out of having your contact information used by the Company for email communication. To do this, click "unsubscribe" on any email you receive from us.

Transaction and Interaction Information

We collect this type of information from:

You

Data elements in this category include:

Data submitted to fulfill requests for investor information

We use this type of information:

To fulfill our business relationship with you

For record keeping and compliance, including dispute resolution and technical troubleshooting

For risk management, fraud prevention and similar purpose

We may disclose this type of information to our affiliates and service providers and to:

Third parties as needed to complete the transaction, including email and postal delivery services

Our lawyers, auditors and consultants

Other third parties as required by law

We do not sell this personal information.

To request deletion of your personal information, visit the "Your Rights" section of this document.

Online & Technical Information

We collect this type of information from:

You and from your computer or devices when you interact with our websites. For example, when you visit our websites, our server logs record your IP address and other information.

Automatically, via technologies such as cookies (see the cookie policy) and web beacons, when you visit our websites.

Third parties, including computer security services.

We also associate information with you using unique identifiers collected from your devices or browsers.

Data elements in this category include:

IP Address

MAC Address, SSIDs or other device identifiers or persistent identifiers,

Device characteristics (such as browser information),

Web Server Logs,

Application Logs,

Browsing Data,

First Party Cookies,

Third Party Cookies,

We use this type of information:

For system administration, technology management, including optimizing our websites and applications,

For information security and cybersecurity purposes, including detecting threats

To support requestor identification in the event of a data deletion request.

We may disclose this type of information to our service providers and to:

Third parties who assist with our information technology and security programs, including companies such as network security services who retain information on malware threats detected,

Third parties who assist with fraud prevention, detection and mitigation,

Our lawyers, auditors and consultants

Other third parties as required by law

We do not sell this personal information.

To request deletion of your personal information, visit the "Your Rights" section of this document.

Geolocation Data

We do not utilize GEO tracking, such as GPS, pixel tracking and/or like technologies.

Third party cookies may collect information to verify users' IP address for security and user experience purposes.

Data elements in this category include:

Precise location (e.g., from mobile devices)

N/A

N/A

N/A

N/A

Government issued identification information numbers

We do not collect this type of information.

Data elements in this category include:

Driver's license number,

Passport number

N/A

N/A

N/A

N/A

Financial Information

We do not collect this type of information

N/A

N/A

N/A

N/A

N/A

Internet of Things and Sensor Data

We do not collect this type of information.

N/A

N/A

N/A

N/A

N/A

Children's Data

We do not knowingly collect any personal information from or about children under age 16.

Data elements in this category include:

Child's name

We do not use this type of information.

N/A

We do not sell this personal information.

To request deletion of your child's personal information, visit the "Your Rights" section of this document.

Compliance Data

We do not collect this type of information.

N/A

N/A

N/A

N/A

N/A