PRIVACY AND COOKIE POLICY

Last Updated: October 3rd 2025

1. Who we are

Native Tech USA Inc., a Delaware corporation with its principal office at 251 Little Falls Drive, Wilmington, DE 19808, together with its affiliates (collectively, "Native", "we", "us", "our"), is responsible for the collection and use of personal information via the United States-facing websites (including any microsites or subdomains that link to this Policy (the "Sites")).

2. Scope

This Policy describes how we collect, use, disclose, and protect personal information obtained through the Sites, and explains choices and rights available under Applicable U.S. State Privacy Laws. By visiting the Sites, you acknowledge this Policy.

3. Personal information we collect

3.1. Information you provide

name, job title, organization, work email address, work telephone number, marketing preferences, enquiry or meeting details, and any content you submit in forms or emails.

3.2. Information collected automatically

device identifiers, IP address, browser and operating system details, referring pages, pages viewed, links clicked, session dates and times, general location derived from IP, and diagnostic data (for example error logs).

3.3. Inferences

limited inferences drawn from the information above to understand interest in our services and manage follow up.

3.4. Sensitive personal information

we do not seek to collect sensitive personal information via the Sites. Please do not submit it in text fields.

3.5. Children

the Sites are intended for business decisionmakers at advertisers and Student Institutions and are not directed to children under 13. We do not knowingly collect personal information from children under 13.

4. Sources of personal information

Directly from you, automatically from your device and browser, from our service providers that support the Sites, and from publicly available business contact sources.

5. Purposes of use

5.1. We use personal information to:

5.1.1. operate, secure, troubleshoot, and improve the Sites;

5.1.2. respond to enquiries, schedule meetings, and manage our relationship with advertisers and Student Institutions;

5.1.3. send service communications and, where permitted, marketing communications about Native;

5.1.4. measure and understand engagement with the Sites;

5.1.5. maintain records, comply with legal obligations, enforce terms, and protect rights, safety, and security.

6. Disclosures of personal information

We disclose personal information to:

6.1. service providers and processors that host, support, analyze, and help operate the Sites and our CRM and marketing systems, including website analytics, session analytics, and meeting scheduling tools;

6.2. professional advisers and auditors;

6.3. affiliated entities for internal business purposes consistent with this Policy;

6.4. authorities, courts, and parties to disputes when required by law or to protect rights or safety;

6.5. prospective or actual buyers, their advisers, and other relevant parties in connection with corporate transactions.

7. Sale, sharing, and targeted advertising

7.1. We do not sell personal information.

7.2. We may process personal information for targeted advertising or crosscontext behavioural advertising through cookies and similar technologies. You can opt out at any time using the "Your Privacy Choices" link in the Sites' footer and through the controls described in Section 11.

7.3. We honour browser opt-out signals that are recognised by Applicable U.S. State Privacy Laws, including Global Privacy Control, for activities that constitute selling or sharing or targeted advertising, as relevant.

7.4. We do not use profiling to make decisions that produce legal or similarly significant effects about you via the Sites.

8. Cookies and similar technologies

8.1. Categories:

8.1.1. Strictly necessary cookies that enable core functions such as page navigation and security;

8.1.2. Functional cookies that remember your choices, such as form inputs on the Sites;

8.1.3. Analytics and performance cookies used to understand use of the Sites (for example Google Analytics, HubSpot analytics, Hotjar);

8.1.4. Advertising and targeting cookies used to measure and improve our marketing and, where deployed, to personalise ads;

8.1.5. Third party cookies: third parties may set cookies to provide analytics or, where enabled, advertising services. They may combine information collected on the Sites with information from other properties.

8.1.6. Cookie duration

cookies persist for varying periods. Session cookies expire when you close your browser. Persistent cookies remain until their set expiry or deletion.

8.1.7. Managing cookies

you can use the Sites' preference tools, your browser settings, and the choices listed in Section 11 to control cookies. Blocking or deleting cookies may affect Site functionality.

9. Data retention

We keep personal information for no longer than necessary for the purposes set out in this Policy. Typical periods are: contact and enquiry records, up to 3 years from the last interaction; analytics data, up to 26 months; cookie identifiers, up to 13 months; server logs, up to 12 months; records of privacy requests, at least 24 months. Where legal, compliance, or defence needs require longer retention, we retain the minimum necessary.

10. Security

We implement technical and organisational measures designed to protect personal information, including encryption in transit, access controls, network monitoring, and backups. No method of transmission or storage is guaranteed secure.

11. Your choices

11.1. Marketing communications

unsubscribe at any time using our email footer links or by contacting us.

11.2. Cookies and targeted advertising

use the "Your Privacy Choices" link, your browser settings, and industry tools such as platform ad settings to opt out of targeted advertising. We also act on recognised browser opt-out signals as described in Section 7.3. Do Not Track: we do not respond to Do Not Track signals. Use the mechanisms in this Section instead.

12. U.S. state privacy rights

Depending on where you live, you may have the following rights with respect to personal information via the Sites:

12.1. access, including confirmation whether we process your information;

12.2. portability, to obtain a copy in a portable format;

12.3. correction of inaccuracies;

12.4. deletion;

12.5. opt out of selling or sharing and of targeted advertising;

12.6. limit the use or disclosure of sensitive personal information, where collected;

12.7. nondiscrimination for exercising your rights;

12.8. appeal, if we deny your request.

13. How to exercise your rights

13.1. Submit a request via our web form

email: support@native.fm. We will respond within the timelines required by law.

13.2. Verification

we will verify your identity using information reasonably related to your relationship with us. If we cannot verify a request, we will explain why and what additional information is needed.

13.3. Authorised agents

you may authorise an agent to act for you. We will require proof of the agent's authority and may require you to verify your identity directly.

13.4. Appeals

if we deny your request, you may appeal by replying to our decision with "Appeal" in the subject line. If your appeal is denied, you may contact your state Attorney General.

14. California disclosures

14.1. Categories collected in the last 12 months

identifiers, commercial information limited to enquiries and meeting interests, internet or network activity, geolocation derived from IP, professional or employment-related information, and inferences.

14.2. Sources, purposes, and disclosures

as described in Sections 4 to 6.

14.3. Selling or sharing

we do not sell personal information. We may share personal information for crosscontext behavioural advertising as described in Section 7.

14.4. Sensitive personal information

we do not collect sensitive personal information via the Sites for purposes that require a right to limit.

14.5. Shine the Light

we do not disclose personal information to third parties for their own direct marketing.

14.6. Your California rights and how to exercise them

see Sections 12 and 13. Use the "Your Privacy Choices" link to opt out of sharing.

15. Nevada

We do not sell covered information as defined under Nevada law. Nevada residents may submit sale opt out requests to support@native.fm.

16. International transfers

Although the Sites target the United States, information may be processed in countries outside your state or country of residence, including the United Kingdom or European Economic Area. Where required, we implement appropriate safeguards for such transfers.

17. Third party links and services

The Sites may link to or integrate third party services that operate under their own privacy terms. We are not responsible for their practices.

18. Changes to this Policy

We may update this Policy from time to time. The "Last Updated" date shows the effective date. Material changes will be posted on the Sites, and additional notice will be provided where required.

19. Contact us

19.1. Email

support@native.fm

19.2. Postal

Native, 251 Little Falls Drive, Wilmington, DE 19808. If you are located outside the United States, you may also contact our UK headquarters at: 91-93 Great Eastern Street, London, EC2A 3HZ.

19.3. Privacy requests

support@native.fm

20. Definitions

"Applicable U.S. State Privacy Laws" means United States state privacy laws in force that provide consumer privacy rights and obligations relevant to the Sites. "Sell", "share", "sensitive personal information" and "targeted advertising" have the meanings given in those laws. "Personal information" includes "personal data" under such laws.