Legal Privacy Policy Effective Date: November 16, 2023Last Updated: November 16, 2023 In this privacy statement, we explain what we do with the data we obtain about you via https://derivativepath.com. We recommend you carefully read this statement. In our processing, we comply with the requirements of privacy legislation. That means, among other things, that: We clearly state the personal information we collect and the purposes for collecting it by means of this privacy statement; We aim to limit our collection of personal data to only the personal data required for legitimate purposes; We first request your explicit consent to process your personal data in cases requiring your consent; We take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf; We respect your right to access your personal data or have it corrected or deleted, at your request. If you have any questions, or want to know exactly what data we keep of you, please contact us. 1. What information does Derivative Path collect from you? We collect certain pieces of your personal information when you interact with us, including when you use our Website or retain our services. Directly from you: We collect any personal information you choose to provide to us, including when you submit any inquiry, subscribe for newsletter, register for event, register an account, or contact a Derivative Path representative. We will use any relevant information you provide to respond to your inquiry, inform you of our services, provide our services, or retain record of your request. Examples of the personal information we collect from you include the following: A first and last name Account name or alias, if registered An email address A telephone number Professional or employment-related information Any other information you choose to provide us If you decide to do business with us, Derivative Path may also ask you to provide additional personal information for onboarding purposes, which may include AML screening in certain circumstances. Indirectly from you: Derivative Path uses cookies, analytics, and related technologies on our Website to automatically collect certain information about you. Such tools help us improve the quality, usability, and performance of the services we offer to you. For more information, see our Cookie Policy. From third parties: We may also collect information about you from third parties. 2. How does Derivative Path use the information we collect? We may use or disclose the personal information we collect for one or more of the following purposes: To fulfill or meet the reason you provided the information. To provide, support, personalize, and develop our website, and services. To market to you, including sending you promotional materials or communications regarding services by us, or to send you information which we think may be of interest to you, in accordance with your marketing preferences. To create, maintain, customize, and secure your account with us. To process your requests, purchases, transactions, and payments and prevent transactional fraud. To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses. To help maintain the safety, security, and integrity of our website, mobile application, products and services, databases and other technology assets, and business. For testing, research, analysis, and product development, including to develop and improve our website, mobile application, products, and services. To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. 3. How do we share and disclose your information? We may share your personal information by disclosing it to a third party for a business purpose. We make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. We may use cookies, analytics, and related technologies to identify targets, place advertisements, and conduct marketing. For more information, see our Cookie Policy. We may share your personal information if we under a legal or regulatory obligation, or to meet security or law enforcement requirements. We do not sell your personal information. 4. How can you control our use of your information? You are in control of setting your preferences for receiving our marketing communications. Each marketing email we send to you includes links with options to update your preferences or unsubscribe. Our website responds to and supports the Do Not Track (DNT) header request field. If you turn DNT on in your browser, those preferences are communicated to us, and we will not track your browsing behavior. You may submit to us a request for access to the personal data we process about you, or a request to correct, delete, or restrict such data by contacting [email protected]. 5. Privacy Policy for California residents If you are a resident of the State of California, you have additional rights regarding your personal information under the California Consumer Protection Act (CCPA), which can be reviewed at CCPA Privacy Policy & Notice for non-employees. 6. Security We are committed to the security of your personal data. We take appropriate security measures to limit abuse of and unauthorized access to such personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed. 7. Third party websites This privacy statement does not apply to third party websites connected by links to our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites. 8. Children Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us. CONTACT INFORMATION Derivative Path, Inc.2001 N. Main Street, Ste 250Walnut Creek, CA 94596T: 415-992-8200E: [email protected]