Privacy Policy

Omega Healthcare Investors, Inc.

This Privacy Policy explains how Omega Healthcare Investors, Inc., including its subsidiaries and affiliates (collectively, “Omega,” “we,” “us,” or “our”), collects, uses, discloses, and safeguards Personal Information (i.e., Personal Data or other similar terms as defined by applicable law) both offline and in connection with this website (www.omegahealthcare.com) (the “Website”), or any other services that link to this Privacy Policy.

Scope. This Privacy Policy does not apply to information that is subject to health-related regulations, including but not limited to the Health Insurance Portability and Accountability Act (“HIPAA”). In certain circumstances, we may provide you with a supplemental privacy notice for specific services; in such cases, the supplemental privacy notice shall govern in lieu of this Privacy Policy. Additionally, this Privacy Policy does not apply to the limited circumstances in which Omega is directly involved in the management of a healthcare facility.

You can access specific topics in this Privacy Policy, including information about the Personal Information we collect, the purposes for which we use and disclose such Personal Information, whether we sell or share your Personal Information, the period for which we retain such Personal Information and related subjects, by clicking on the relevant links below:

CONTENTS

1. The Information We Collect and How We Use It

In the preceding 12 months, we may have collected or otherwise received the following types of information about you:

Contact Information

The contact information we have collected about you varies depending on whether we collect that information in person or on our Website. For instance, information collected through our Website varies depending on the webpage but typically includes some combination of your name, email address, postal address, contact type, company information (including address), and any information you provide in messages to us. We may collect your contact information, and subsequently use such contact information, for purposes such as responding to, and following up regarding, your inquiries, providing you with requested information, sending you email alerts (including marketing emails), or reviewing your job application materials. Depending on the nature of your message (e.g., purchase of services), we may route your information to an appropriate third party, such as a distributor, to better address such message.

In some cases, such as where you sign up for a webcast, presentation, or other event/service, we may receive your contact information from a third-party website, including those white-labeled under our brand. Where we collect such contact information, our use of the contact information shall be pursuant to this Privacy Policy. In addition, please see the section Links to External Websites below for more information on submission of information to third-party websites.

Device or Network Related Activity

Like most websites today, we use cookies and similar technologies to collect internet or other electronic network activity information each time you access those servers. These log files contain information relating to Website usage and may include your Personal Information, such as a user device’s IP address or user agent string (e.g., operating system and browser type/version). We collect and may subsequently use this internet and network-related activity information for purposes such as monitoring and troubleshooting errors and incidents, analyzing web traffic, or optimizing the user experience.

Third-Party Analytics Providers

We use one or more third-party analytics services to evaluate your use of the Website by compiling reports on activity (based on their collection of IP addresses, Internet service provider, browser type, operating system and language, referring and exit pages and URLs, date and time, amount of time spent on particular pages, what sections of the Website you visit, number of links clicked, search terms, and other similar usage data) and analyzing performance metrics. These third parties use cookies and other similar technologies (e.g., pixel tags) to help collect, analyze, and provide us with reports or other data.

In some instances, the third-party analytics services vendors may collect and process your Personal Information in accordance with applicable law and this Privacy Policy. Through these analytics services vendors, we collect information about your interaction with our Website, including Personal Information such as your IP address, for the purpose of improving our Website’s operations or providing more personalized services to you.

For further information relating to our use of cookies and similar technologies, please refer to the Cookies & Similar Technologies section included below.

Professional or Employment-Related Information

With respect to job applicants, we may collect Personal Information regarding your job title, the company you work for, your prior work history, languages spoken and proficiency levels, emergency contact information, and other such professional or employment-related information. We also collect professional or employment-related information of individuals that we interact with in a business-to-business context, including contacts with our customers, suppliers and contractors.

Education Information

We may collect information regarding your education history, credentials and other qualifications.

Aggregate Data

In an ongoing effort to better understand our users and the Website, we may analyze your information in aggregate form to carry out, maintain, manage, and improve operations in connection with the Website. This aggregate information is generally not considered Personal Information under applicable law. We commit to maintaining and using such aggregate information in de-identified form and will not attempt to re-identify such information.

Financial Data

During the normal course of business, we may collect limited financial information about you, such as your bank routing information, for the purpose of providing you with services that you request from us.

Legal Basis for Processing

We will only process your Personal Information where we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and use your Personal Information. In almost every case, the legal basis will be one of the following:

  • Consent: For example, where you have provided your consent to receive certain marketing from us. You can withdraw your consent at any time, including by clicking on the “unsubscribe” link at the bottom of any marketing email we send you.
  • Where we have a legitimate business interest in processing your Personal Information, for example, to communicate with you or respond to a query.
  • Performance of a contract with you (or in order to take steps prior to entering into a contract with you).
  • Compliance with law: Where we are subject to a legal obligation and need to use your Personal Information in order to comply with that obligation.

2. Sources of Your Personal Information

We collect Personal Information in the following ways, pursuant to applicable law:

Directly From You

We collect Personal Information directly from you when you sign up to receive our services or to receive communications from us. We may also collect Personal Information directly from you when you contact us, as well as in other similar circumstances.

Through Our Use of Cookies, Pixels, and Other Automatic Data Collection Technologies

When you visit our Website, we or third parties we work with automatically collect certain information using technologies such as cookies, web beacons, clear GIFs, pixels, internet tags, web server logs, and other data collection tools. For more information, please see the Cookies & Similar Technologies section below.

Other Sources

We may receive Personal Information about you from other sources, such as from analytics service providers that provide us with analytics about the use of our Website, from your organization, or from third parties who work with us to provide you with services, such as guarantors you engage while receiving housing-related services from us.

3. Disclosures of Your Personal Information

We may disclose, and may have disclosed in the preceding 12 months, your Personal Information in the following circumstances. We do not sell your Personal Information to or share it with third parties for their marketing purposes.

Business Transfers

In the event of a merger, dissolution, reorganization, or similar corporate event, or the sale of all or substantially all of our assets, we may disclose the information that we have collected about you, including Personal Information, to the surviving entity in a merger or to the acquiring entity. All such transfers shall be subject to our commitments with respect to the privacy and confidentiality of such Personal Information as set forth in this Privacy Policy.

Disclosure to Public Authorities

In some instances, we are required to disclose Personal Information in response to lawful requests by public authorities, including for the purpose of meeting national security or law enforcement requirements. We may also disclose Personal Information to other third parties when compelled to do so by government authorities or required by law or regulation including, but not limited to, in response to court orders and subpoenas.

Sharing with Third-Party Vendors

We engage other companies and individuals to perform certain business-related functions on our behalf in connection with our Website. Examples may include cloud storage and web hosting providers, distributors, technical assistance and security vendors, database management/back-up services, analytics services, email clients, digital marketing services (e.g., marketing automation), customer relationship management/CRM platforms, and customer service vendors. These third parties may have access to your Personal Information only as necessary to perform their functions and to the extent permitted by law. We may also disclose your information to any of our parent companies, subsidiaries, affiliates, or other companies under common control with us in order to support the purposes described in this Privacy Policy.

Other Purposes

We may disclose your Personal Information for other purposes as otherwise disclosed to you, or pursuant to your consent, during your experience on, or in relation to, our Website.

4. Your Rights Regarding Your Personal Information

You may have certain rights regarding your Personal Information. The rights available to you depend on our reason for processing your Personal Information and the requirements of applicable law (i.e., your rights will vary depending on whether you are located in, for example, California or the European Union). Specifically, you may have the following rights:

  • (i) Access (or Know): You have the right to request access to the Personal Information we hold about you, along with other information such as the purposes of the processing, the recipients or categories of recipients to whom the Personal Information has been or will be disclosed, the sources of the Personal Information, retention, and transfers of Personal Information.
  • (ii) Correction: You have the right to request correction of inaccurate Personal Information we have about you. Depending on the purposes of the processing, you may have the right to have incomplete Personal Information completed, including by means of providing a supplementary statement.
  • (iii) Deletion: In some instances, you may have the right to request that we delete your Personal Information. If required by law, we will delete your Personal Information after such request is made. We may also decide to delete your data if we believe that the data is incomplete or inaccurate, or that our continued use and storage are contrary to our obligations to other individuals or third parties. When we delete Personal Information, it will be removed from our active database, but it may remain in archives where it is not practical or possible to delete it. You should note that there are some situations in which we may decline to delete your Personal Information. For example, we retain the information that we collect to, among other things, detect security incidents, comply with our legal obligations, enforce any of our agreements, and protect against malicious, deceptive, fraudulent, or illegal activity.
  • (iv) Data portability: Under certain circumstances, you have the right to receive the Personal Information about you that you have provided to us, in a structured, commonly used and machine-readable format.
  • (v) Opt out of the sale or sharing of Personal Information: We do not currently, nor have we in the preceding 12 months, sold or shared (in this context, share means use of your Personal Information for cross-contextual behavioral advertising) Personal Information collected from or about you through our Website or otherwise.
  • (vi) Right of Non-Discrimination/Retaliation: We do not discriminate against individuals who exercise any of their rights described in this Privacy Policy, nor do we retaliate against individuals who exercise these rights.
  • (vii) Restriction of Processing: You may have the right to request that we restrict the processing of your Personal Information in certain cases. Where applicable, the respective Personal Information will be marked accordingly and may only be processed by us for certain purposes.
  • (viii) Objection to Processing: In certain circumstances, you may have the right to object to our processing of your Personal Information.
  • (ix) Withdrawal of Consent: Where our processing is based on your consent, you may have the right to withdraw such consent at any time; however, you may not be able to use the service for which you are withdrawing your consent. Withdrawing your consent will not affect the lawfulness of the processing we conducted prior to your withdrawal.
  • (x) Automated Decision-Making: You have the right to opt out of the use of automated decision-making technology when it is used for significant decisions concerning you or for extensive profiling. We do not currently use automated decision-making technology for these purposes.
  • (xi) Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit our use and disclosure of your sensitive Personal Information to only those purposes allowed under the California Consumer Privacy Act. However, we only collect and process sensitive Personal Information for purposes that are exempt from this right.

You may also have the right to complain to a data protection authority if you think we have processed your Personal Information in a manner which is unlawful or breaches your rights. If you have such concerns, we request that you initially contact us as indicated in the How to Contact Us section so that we can investigate, and hopefully resolve, your concerns.

Exercising Your Rights

Please note that many of the above rights are subject to exceptions and limitations. Your rights and our responses will vary based on the circumstances of the request. If you choose to assert any of these rights under applicable law, we will respond within the time period prescribed by such law.

Depending on where you are located, a person authorized to act on your behalf may make a verifiable request related to your Personal Information. If you designate an authorized person to submit requests to exercise certain privacy rights on your behalf, we will require verification that you provided the authorized agent permission to make a request on your behalf.

When a request is submitted, your request must: (i) provide sufficient information that allows us to reasonably verify that you are the person about whom we collected Personal Information or an authorized representative of that person; and (ii) describe the request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

In certain jurisdictions, you may appeal our decision on your request regarding your Personal Information. To do so, please contact us as indicated in the How to Contact Us section. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.

To exercise your rights, please contact us as stated in the How to Contact Us section of this Privacy Policy.

5. Opt-Out for Email Marketing and Certain Other Communications

You may manage your receipt of marketing communications, press releases, and alerts by clicking on the “Unsubscribe” (or similar) link located at the bottom of an applicable marketing email and following the instructions found on the webpage the link directs you to.

You cannot opt out of receiving administrative or transactional emails. In all such cases, please allow us a reasonable time to process your request.

6. Cookies & Similar Technologies

We collect information using cookies and similar technologies such as pixels, tags, and beacons. Cookies are small packets of data that a website stores on your computer’s or mobile device’s hard drive (or other storage medium) so that your computer will “remember” information about your visit. We use both first- and third-party session cookies and persistent cookies. Below is a general primer on session and persistent cookies; the information collected by cookies depends on their particular purposes.

  • Session Cookies: We use session cookies to make it easier for you to navigate our Website. A session ID cookie expires when you close your browser.
  • Persistent Cookies: A persistent cookie remains on your hard drive (or other storage medium) for an extended period of time or until you delete it. Persistent cookies also enable us to track analytics and improve user experiences with our Website.

We do not use behavioral advertising cookies on our Website to collect Personal Information about you. For that reason, we do not respond to “Do Not Track,” “Global Privacy Control,” or other opt-out preference signals at this time.

7. How We Protect Your Information

We take commercially reasonable steps to protect your Personal Information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. Please understand, however, that no security system is impenetrable. We cannot guarantee the security of our databases, nor can we guarantee that the information you supply will not be intercepted while being transmitted to and from us over the Internet.

8. Retention of Personal Information

We will retain your Personal Information in a form that identifies you only for as long as it serves the purpose(s) for which it was initially collected as stated in this Privacy Policy, subsequently authorized, or as allowed under applicable law. We also may retain your information during the period of time needed for us to pursue our legitimate business interests, conduct audits, comply with our legal obligations, resolve disputes and enforce our agreements.

9. Children

We do not knowingly collect Personal Information from children under the age of 16 through the Website. If you are under 16, please do not give us any Personal Information. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children to never provide Personal Information to us. If you have reason to believe that a child under the age of 16 has provided Personal Information to us, please contact us as described in the How to Contact Us section below, and we will endeavor to delete that information from our databases. Furthermore, we do not sell or share Personal Information of individuals under the age of 16 to third parties for those parties’ marketing purposes.

10. Important Notice to All Non-US Residents

Our servers are located in the US. If you are located outside of the US, please be aware that any information provided to us, including Personal Information, may be transferred from your country of origin to the US. We will ensure that appropriate safeguards are in place with respect to cross-border transfers of your Personal Information. You may obtain more information about such safeguards by contacting us as described in the How to Contact Us section below.

11. Links to External Websites

The Website may contain links to third-party websites (“External Sites”). We have no control over the privacy practices or the content of any such External Sites. As such, we are not responsible for the content or the privacy policies of such External Sites, and we do not endorse the information contained on any External Sites. We encourage you to check the applicable privacy policy and terms of use when visiting or submitting any information through such External Sites.

12. Changes to this Privacy Policy

This Privacy Policy is effective as of the “Last Updated” date stated at the bottom of this Privacy Policy. We may change this Privacy Policy from time to time. To the extent that we materially change this Privacy Policy, we will notify you of the change. By visiting the Website after we make any such changes to this Privacy Policy, you are deemed to have accepted such changes. Please be aware that, to the extent permitted by applicable law, and without prejudice to the foregoing, our use of your Personal Information is governed by the Privacy Policy in current effect. Please refer back to this Privacy Policy on a regular basis.

13. How to Contact Us

If you have questions about this Privacy Policy, please email us at InvestorRelations@omegahealthcare.com with “Privacy Policy” in the subject line. You may have the right to lodge a complaint with the relevant supervisory authority if you believe we have violated our data protection obligations.

Last Updated: November 13, 2026

Effective Date: November 16, 2022