Effective Date: September 23, 2026.
This Privacy Policy describes how Mid-Atlantic Solutions, LLC and its affiliates and subsidiaries, MAS Labor H2A, LLC, MAS Labor H2B, LLC, MAS Labor 365, LLC, and AgWorks H2, LLC (collectively, “másLabor,” “we,” “us,” or “our”) collect, use, disclose, and safeguard information when you visit or use our website(s) and online services that link to this Privacy Policy (the “Site”), including how másLabor U.S., as defined herein, collects, uses, and discloses certain personally identificable information that we receive in the U.S. from the European Economic Area (“EEA”). By using the Site, you agree to this Privacy Policy and our Terms of Use.

1) Scope & Who We Are
This Policy applies to information we collect online through the Site and related pages, including webinar registrations, contact forms, and resources we host or link to. It does not apply to information collected offline unless expressly stated, and it does not apply to third-party websites or services that we do not control.
másLabor is not a law firm. Communications with us are not protected by attorney-client privilege.

2) Information We Collect
a) Information you provide directly
– Contact information (name, business name, email address, phone number, mailing address)
- Biographic information, including identification documents, citizenship information, and visa details
– Professional information (role, company, program interests such as H-2A or H-2B)
– Webinar/events information (registrations, attendance, Q&A submissions)
– Support/inquiry content (messages sent via forms or email)
– Job applicant information (résumé/CV, work history, references) if you apply for a role
- Other information you may provide to us from time to time

b) Information collected automatically
When you access the Site, we and our service providers may automatically collect device information and usage data (IP address, browser type, operating system, referring URLs, pages viewed, links clicked, date/time, and coarse location derived from IP) and use cookies or similar technologies. You can set your browser to refuse cookies or to alert you when cookies are placed; some Site features may not function properly without cookies.
c) Information from third parties
We may receive information from service providers and platforms we use for events, analytics, email, and CRM; from social media when you interact with our content; from publicly available sources; and from business partners.
When you interact with the Site, there are third parties that may use automatic collection technologies to collect information about you or your device, including, advertisers, analytics companies, your device manufacturer, and your internet or mobile service provider. We do not control these third parties’ tracking technologies or how they may be used.
Personal data described in Sections 2(a)-(c) shall be referred to as “Personal Data” for the purposes of this Privacy Policy.
Some of the Personal Data described above may be considered sensitive data under certain laws. If required under applicable law, we will collect and process sensitive Personal Data only with your consent. If you choose not to provide or allow us to collect some information, we may not be able to provide you with requested features, services, or information.

3) How We Use Information
This Privacy Policy describes the categories of Personal Data that másLabor may receive, as well as the purposes for which we use that Personal Data. másLabor will only process Personal Data in ways that are compatible with the purpose that másLabor collected it for, or for purposes the individual later authorizes. Before we use your Personal Data for a purpose that is materially different than the purpose we collected it for or that you later authorized, we will provide you with the opportunity to opt out. másLabor maintains reasonable procedures to help ensure that Personal Data is reliable for its intended use, accurate, complete, and current.
We use information that we collect about you or that you provide to us, including any Personal Data, to:
– Provide and operate the Site, content, resources, and requested services
- Fulfill any other purpose for which you provide it
– Communicate with you (transactional notices, service updates, administrative messages)
– Send marketing or promotional content about másLabor offerings where permitted (you can opt out at any time)
– Analyze and improve the Site (usage analytics, troubleshooting, research and development)
– Protect the Site and our users (fraud prevention, security, legal compliance)
– Recruitment and hiring (evaluate job applications)
– Comply with law and enforce our Terms of Use and other agreements
- For any other purpose with your consent

4) How We Disclose Personal Data
We may disclose Personal Data to: (a) our affiliates and subsidiaries within the másLabor family listed above to provide and operate the Site, content, resources, and requested services, including to másLabor U.S. pursuant to the EU-US DPF, both as defined below, for the purpose of providing IT systems support and accounting and administrative functions; (b) service providers that host data, run webinars, send emails, provide analytics, or perform other business functions under contractual confidentiality and use restrictions, including to US-based providers, pursuant to the EU-US DPF; (c) parties involved in a merger, acquisition, reorganization, or sale of assets; (d) governmental authorities or other recipients when required to comply with law, legal process, or governmental request, including in response to valid requests by public authorities, including to meet national security and law enforcement; (e) to enforce or apply our terms of use and other agreements; (f) if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our organization, our customers, or others; and (g) other parties with your direction or consent.
If your Personal Data is subject to the EU-US DPF, as defined herein, másLabor U.S. will only disclose it in accordance with EU-US DPF Principles.
We do not sell your Personal Data for monetary consideration, and we do not knowingly “share” Personal Data for cross-context behavioral advertising as defined under certain U.S. state privacy laws.

5) SMS / Text Messaging Privacy
If you provide your mobile phone number through our Site (for example via a webinar registration, contact form, or inquiry form) and opt in to receive SMS communications from us, the following privacy terms apply.

No mobile opt-in data will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6) SMS Terms and Conditions
Upon messaging opt-in, the end user agrees to receive messages from másLabor regarding Customer Support, Account Notifications, webinar and event reminders, and follow-ups on program inquiries you have submitted. End users can opt-out by replying STOP or request more information by replying HELP. Message frequency varies. Message and data rates may apply. If you need assistance or have questions about our SMS service, reply with “HELP” to any SMS message you receive, or contact our customer support team at solutions@maslabor.com or (434) 423-5643.

7) Cookies, Analytics, and Online Tracking
We may use first- and third-party cookies and analytics tools to understand usage and improve the Site and may share this information with third-party vendors. Most browsers let you block or delete cookies. “Do Not Track” signals are not consistently recognized by the industry; we do not respond to them at this time.

8) Data Retention
We retain Personal Data for as long as necessary to fulfill the purposes described in this Policy, including to meet legal, accounting, or reporting obligations, resolve disputes, and enforce agreements.

9) Security
We employ reasonable and appropriate administrative, technical, and physical safeguards designed to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10) Children’s Privacy
The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us so we can delete it.

11) Your Choices
In addition to any rights you may have under Section 12 hereof, you may opt out of the use or collection of your personal data as follows:
– Marketing emails: opt out using the “unsubscribe” link in our emails or by contacting us
– Cookies: manage cookies via your browser settings. If you disable or refuse cookies or similar tracking files, some features of the Site may be inaccessible or not function properly.
– Webinars/Events: update or cancel registrations using the instructions provided for the event

12) Jurisdiction-Based Rights
Depending on your state or country of residency, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing. Residents of applicable states and countries may exercise these rights by submitting a request using the methods in Contact Us below and may appeal a denial by replying to our response and noting “Appeal.”
Note: The exact scope of these rights vary by state and country. There are also several exceptions where we may not have an obligation to fulfill your request.
Notice at Collection (California): We collect identifiers, professional or employment-related information, Internet/electronic activity information, coarse geolocation (from IP), and inferences to improve the Site, for the purposes in Sections 2 and 3. We do not sell or share personal information as defined by the CPRA, and we do not use or disclose sensitive personal information for inferring characteristics. We will not discriminate against you for exercising your privacy rights.

13) International Visitors and EU-US DPF
The Site is controlled and operated from the United States. If you access the Site from outside the U.S., your information may be processed in the U.S. (or other countries) where privacy laws may differ from those in your jurisdiction.
Mid-Atlantic Solutions, LLC (“másLabor U.S.”) complies with the E.U.- U.S. Data Privacy Framework (“EU-US DPF”) as set forth by the U.S. Department of Commerce. másLabor U.S. has certified to the U.S. Department of Commerce that it adheres to the EU-US DPF Principles with regard to the processing of Personal Data received from the EEA in reliance on the EU-US DPF. If there is any conflict between the terms in this privacy policy and the EU-US DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certificate, please visit the Data Privacy Framework website.
The Federal Trade Commission and the US Department of Transportation each has jurisdiction over másLabor U.S.'s compliance with the EU-US DPF. Pursuant to the EU-US DPF certification, másLabor U.S. is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC), the U.S. Department of Transportation or all other U.S. authorized statutory bodies. másLabor U.S. maintains reasonable and appropriate security measures to protect Personal Data subject to the EU-US DPF from loss, misuse, unauthorized access, disclosure, alteration, or destruction in accordance with the EU-US DPF.
másLabor U.S. may transfer Personal Data to our third-party agents or service providers who perform functions on our behalf as described in this Privacy Policy. másLabor U.S. will transfer personal information received from the EEA in reliance on the EU-US DPF only to third parties who commit to process such information in compliance with the EU-US DPF Principles. másLabor U.S. shall be liable under the EU-US DPF Principles if the third party fails to process personal information received from the EEA in reliance on the EU-US DPF in compliance with the EU-US DPF Principles, unless másLabor U.S. proves it is not responsible for the event giving rise to such failure.
In some cases, másLabor U.S. may transfer Personal Data to unaffiliated third-party data controllers. These third parties do not act as agents or service providers and are not performing functions on our behalf. We may transfer your Personal Data to third-party data controllers for the purposes described in this Privacy Policy. We will only provide your Personal Data subject to the EU-US DPF to third-party data controllers where you have not opted-out of such disclosures, or in the case of sensitive Personal Data subject to the EU-US DPF, where you have opted-in if the DPF requires consent. We enter into written contracts with any unaffiliated third-party data controllers requiring them to provide the same level of protection for Personal Data the EU-US DPF requires. We also limit their use of your Personal Data subject to the EU-US DPF so that it is consistent with any consent you have provided and with the notices you have received.
Under the EU-US DPF, you have rights in relation to your Personal Data. These include the right to request:

• Information on the types of Personal Data collected.
• Information on the purposes of collection and use.
• Information on the type or identity of third parties to which your personal data is disclosed.
• Choices for limiting use and disclosure of your Personal Data.
• Access to your Personal Data.
• Notification of the organization's liability if it transfers your Personal Data.
• Notification of the requirement to disclose your Personal Data in response to lawful requests by public authorities.
• Reasonable and appropriate security for your Personal Data.
• A response to your complaint within 45 days.
• Cost-free independent dispute resolution to address your data protection concerns.
• The ability to invoke binding arbitration to address any complaint that the organization has violated its obligations under the DPF Principles to you and that has not been resolved by other means.

Under the EU-US DPF, you may also have the right to access the Personal Data that másLabor U.S. holds about you and to request that másLabor U.S. correct, amend, or delete it if it is inaccurate or processed in violation of the EU-US DPF. These access rights may not apply in some cases, including where providing access is unreasonably burdensome or expensive under the circumstances or where it would violate the rights of someone other than the individual requesting access. If you would like to request access to, correction, amendment, or deletion of your Personal Data, you can submit a written request to the contact information provided below. We may request specific information from you to confirm your identity. In some circumstances, we may charge a reasonable fee for access to your information.
The EU/US DPF also may provide additional rights if the applicable Personal Data is sensitive Personal Data. másLabor U.S. collects the following types of sensitive Personal Data: identity and biographical data, including nationality and identity document numbers, health information, and criminal history, for reasons described in Section 3 of this Privacy Policy. When we collect sensitive Personal Data subject to the EU/US DPF, we will obtain your opt-in consent where the EU-US DPF requires, including if we disclose your sensitive Personal Data to third parties, or before we use your sensitive Personal Data for a different purpose than we collected it for or than you later authorized.
In compliance with the EU-US DPF, másLabor U.S. commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU individual with inquiries or complaints regarding our handling of personal data received in reliance on the EU-US DPF should first contact solutions@maslabor.com with a subject line indicating their query relates to the EU-US DPF.
You can verify másLabor U.S.’s self-certification to the EU-US DPF and check the information we have provided by viewing our details on the DPF list.
14) Third-Party Links and Services
The Site may link to third-party websites, platforms, or services. We are not responsible for the privacy practices of those third parties. Review their privacy policies for more information.

15) How We Protect and Maintain Your Data
We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Site. In particular, email, texts, and chats sent to or from us may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal data is at your own risk.
The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.
We keep the categories of personal data described in this policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the Site, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or deidentified.

16) Changes to This Policy
We may update this Policy from time to time. The Effective Date above indicates when it was last revised. Changes are effective when posted to the Site. You should check this page periodically to review the current policy.

17) Contact Us
If you have questions about this Policy, want to exercise a privacy right, or wish to appeal a decision (where applicable), contact us:
Email: solutions@maslabor.com

18) Governing Law; Venue
As stated in our Terms of Use, this Privacy Policy is governed by the laws of the Commonwealth of Virginia, U.S.A., without regard to conflict of law rules, and disputes are subject to the exclusive jurisdiction and venue specified therein.
19) Dispute Resolution under the EU/US DPF
másLabor U.S. has designated the EU data protection authorities to address complaints and provide appropriate recourse free of charge to individuals raising complaints or concerns under the EU-US DPF.
Individuals raising claims under the EU-US DPF may have the option to select binding arbitration for the resolution of your complaint under certain circumstances, provided you have taken the following steps: (1) raised your complaint directly with másLabor U.S. and provided us the opportunity to resolve the issue; (2) made use of the independent dispute resolution mechanism identified above; and (3) raised the issue through the relevant data protection authority and allowed the US Department of Commerce an opportunity to resolve the complaint at no cost to you. For more information on binding arbitration, see Data Privacy Framework Annex I.

HR Supplement to Privacy Policy:

Effective Date: September 23, 2026
As a result of your employment with Mid-Atlantic Solutions, LLC and its affiliates and subsidiaries, MAS Labor H2A, LLC, MAS Labor H2B, LLC, MAS Labor 365, LLC, and AgWorks H2, LLC (collectively, “másLabor,” “we,” “us,” or “our”), we will collect certain personal data about you. Our collection, storage, and transfer of this information is governed by our Privacy Policy, as may be amended from time to time, as supplemented by this HR Supplement to Privacy Policy (the “Supplement”), which provides more information about employee personal information specifically.
Information:
We collect personal data regarding our employees, as described in Section 2 of the Privacy Policy, which may include sensitive personal data, including identity and biographical data, including nationality and identity document numbers, health information, and criminal history (all such data, the “Employee Data”). We collect Employee Data through a variety of mechanisms, as described in the Privacy Policy, including through employment forms and questionnaires that you complete and provide directly to us.
Sharing of Information:
Employee Data may be shared among the various másLabor subsidiaries and affiliates, including those organized and based in countries other than that in which you reside and work. In particular, Employee Data for many másLabor employees may be shared from time to time, as needed, with másLabor’s U.S. based affiliate Mid-Atlantic Solutions, LLC (“másLabor U.S.”), which uses that information for:

• IT and systems support. Architecture, administration, and escalation support for systems used by the másLabor entity that employs you (the “másLabor Employing Entity”), which systems that may contain personal data for which your másLabor Employing Entity will remain the controller.
• Accounting, finance, and corporate administration. Consolidated financial reporting and shared administrative functions in support of your másLabor Employing Entity, which may involve access to Employee Data.

másLabor’s U.S.’s access to Employee Data pursuant to the above will be occasional and limited as possible to prevent unnecessary disclosure of, or access to, Employee Data by másLabor’s U.S.
másLabor U.S. is subject to EU-US DPF, as outlined in the Privacy Policy, and any sharing of Employee Data from an EU-based másLabor Employing Entity to másLabor U.S. will be consistent with the provisions of the EU-US DPF. As an employee of an EU-based másLabor Employing Entity, you may have additional rights afforded you under the EU-US DPF.
Please review the Privacy Policy for more details on the EU-US DPF, which may also afford you the right to arbitration. másLabor U.S. has designated the EU data protection authorities to address complaints and provide appropriate recourse free of charge to individuals raising complaints or concerns under the EU-US DPF.
We may update this Supplement and the Privacy Policy from time to time. The Effective Date on each webpage indicates when it was last revised. Changes are effective when posted to the Site. You should check the webpages periodically to review the current Privacy Policy and Supplement.