Privacy Statement

Effective: October 1, 2025

Tennessee Privacy Addendum

This Tennessee Privacy Addendum (“Addendum”) supplements the Grant Thornton Advisors, LLC (“Grant Thornton,” the “firm” or “we”) Privacy Statement (“Privacy Statement”) and contains disclosures required under the Tennessee Information Protection Act (“TIPA”) for individuals who are Tennessee residents (“Consumers”).

What is Personal Information

For Tennessee residents, the term “Personal Information” means information that identifies, relates to, or describes a particular Consumer or is reasonably capable of being directly or indirectly associated or linked with, a particular Consumer. All other capitalized terms have the same meanings as given them in the Grant Thornton Privacy Statement or TIPA.

 

Processing Personal Information

This Addendum provides information about uses of your Personal Information, specifically: the categories processed through the Site and our Services, the purposes for processing, the categories of sources for collection, and the categories of third parties to whom such Personal Information may have been disclosed and the period or criteria for retention. Grant Thornton does not have actual knowledge that it sells or shares the Personal Information of individuals under 18 years of age.

Categories of Personal Information Collected

Personal Information collected about you will vary according to our interactions with you and the products and services we offer, please see the descriptions below for more information.

Rights

As a Tennessee resident whose Personal Information may be processed by Grant Thornton, you have the right to request, subject to any statutory limitations or exceptions:

• confirmation that the firm is processing your Personal Information
• deletion of your Personal Information
• correction of your Personal Information
• opt-out of Personal Information processed for the purposes of targeted advertising, sale, or Profiling
• copies of your Personal Information
• disclosure of categories of Personal Information sold to third parties, if any.
• disclosure of categories of Personal Information.

Opt-Out

To the extent our activities could be construed as a sale of Personal Information, you have the right to opt out here. You can also click on the “Do not sell/share my personal information” link at the bottom of the Site to learn more about exercising this right.

You have the right to opt out of targeted advertising and can do so by clicking on this link Customize cookie settings.

You may also opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC). We honor Opt-Out Preference Signals, including GPC. If you choose to use an Opt-Out Preference Signal, you will need to turn it on for each supported browser or browser extension you use. You can read about our general cookies use here. 

Pursuant to the TIPA, Consumers can also opt out of any form of automated processing performed on Personal Information to evaluate, analyze, or predict personal aspects related to an identified or identifiable Consumer, with respect to that Consumer’s economic situation, health, demographic characteristics, personal preferences, interests, reliability, behavior, location, or movements where such automated decisions produce legal or similarly significant effects concerning the Consumer (“Profiling”). The firm does not conduct such processing.  

How to Submit a Rights Request

To submit a rights request, please contact us at  privacy.questions@us.gt.com, (877) 282-0109, or complete the web form located here.

Verification

We will need to verify your identity to respond to a rights request. If you have an account with us that is password-protected, we may verify your identity through our existing authentication practices for your account. If you do not have an account with us, we can request from you two or more data points of Personal Information to verify your identity depending on the nature of the request. Where you request specific pieces of Personal Information, we may also request a signed declaration under penalty of perjury to attest to/verify your identity.

Responses to Requests

Grant Thornton will respond to requests as required by applicable law consistent with statutory requirements. In the case of a request to delete Personal Data, we may use a two-step process for online requests to delete where you must first, submit the request to delete and then second, separately confirm that you want your Personal Data deleted. Requests made no more than twice per year are free of charge.

We reserve the right to deny a request in the following circumstances and where otherwise permitted by Tennessee law. You will be notified where we decline to act on your request.

• your identity cannot be verified according to the level required by law
• other statutory exceptions as provided in the TIPA.

No Discrimination

Grant Thornton will not discriminate against you in the event you exercise any of the rights under Tennessee privacy law. Specifically, we will not:

• deny services to you
• charge different fees or rates for services, including through the use of discounts or other benefits or imposing penalties
• provide a different level or quality of services to you
• suggest that you will receive different rates for services or services at a different level or quality.

Accessible Format

This Addendum is available to individuals with disabilities. To access this Addendum in an alternative downloadable format, please  click here.

Do Not Track Signals

Some web browsers incorporate a “do-not-track” or similar feature that signals to websites with which the browser communicates that a visitor does not want to have their online activity tracked. If you have enabled a legally recognized browser-based opt out preference signal (e.g. Global Privacy Control) on your browser, Grant Thornton will recognize this preference according to and the extent required by applicable law.

Enforcement and Dispute Resolution

We will investigate and attempt to resolve complaints and disputes regarding our use and disclosure of Personal Information in accordance with this Addendum. We encourage interested persons to raise any concerns with us using the contact information below. Any employee who we determine is in violation of our privacy policies will be subject to our disciplinary process. For more information about how Tennessee residents may file a complaint with the Tennessee Attorney General at   https://agtnprod.powerappsportals.us/DCA/.

Merger, Change in Ownership and Other Business Transitions

In the event Grant Thornton goes through a business transition, such as a merger, or the acquisition or sale of all or a portion of its assets, your Personal Information may be among the assets transferred.

Addendum or Privacy Statement Changes

Grant Thornton reserves the right to amend or modify this Addendum or the Privacy Statement from time to time. We will post any revised Addendum or Privacy Statement on this Site, or a similar website that replaces this Site. By continuing to use any of our Sites, you agree that the terms of this Addendum and the Privacy Statement as of the effective date will apply to information, including Personal Information, previously collected, or collected in the future as permitted by law.

How to Contact Us

Questions, comments or complaints about this Addendum or the Privacy Statement, Privacy Shield certification, or data collection and processing practices can be e-mailed to privacy.questions@us.gt.com, or by writing to us using the contact details below:

Corporate Mailing Address:

Grant Thornton LLP

Privacy Office - Risk, Regulatory & Legal Affairs

171 N. Clark Street, Suite 200

Chicago, IL 60601

1 “Grant Thornton” refers to the brand name under which the Grant Thornton member firms provide services to their clients and/or refers to one or more member firms, as the context requires. Grant Thornton LLP and Grant Thornton Advisors LLC (and their respective subsidiary entities) practice as an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations and professional standards. Grant Thornton LLP is a licensed independent CPA firm that provides attest services to its clients, and Grant Thornton Advisors LLC and its subsidiary entities provide tax and business consulting services to their clients. Grant Thornton Advisors LLC and its subsidiary entities are not licensed CPA firms.

Grant Thornton International Limited (GTIL) and the member firms, including Grant Thornton LLP and Grant Thornton Advisors LLC, are not a worldwide partnership. GTIL and each member firm are separate legal entities. Services are delivered by the member firms, GTIL does not provide services to clients. GTIL and its member firms are not agents of, and do not obligate, one another and are not liable for one another’s acts or omissions. 

2 A parent or legal guardian may exercise rights on behalf of the parent’s child or on behalf of a child for whom the guardian has legal responsibility. A guardian or conservator may exercise the rights on behalf of a consumer that is subject to a guardianship, conservatorship or other protective arrangement.