Privacy Statement

1. Processing Activities Covered

This Privacy Statement applies to the following processing activities:

• Visiting our websites which display or link through to this Privacy Statement;
• Visiting our offices;
• Receiving communications from us, including emails or texts;
• Registering for our events or webinars;
• Using our ExhibitPower software platform and related services.

When applications are provided by us and link to this Privacy Statement, this Privacy Statement applies. When applications are provided by third parties, the privacy statement of the third party applies.

Our websites may contain links to other websites maintained by third parties. The information practices of such other services are governed by their respective privacy statements, which we encourage you to review.

2. Responsible ExhibitPower Entity

ExhibitPower LLC is the controller of your Personal Data and is responsible for the collection, processing and disclosure of your Personal Data as described in this Privacy Statement, unless expressly specified otherwise.

3. What Personal Data Do We Collect?

3.1 Personal Data We Collect Directly from You

The Personal Data that we collect directly from you may include the following:

• If you express an interest in obtaining information about our services, request customer support, use our "Contact Us" feature, register to use our websites, sign up for an event or webinar, or download content, we generally require contact information such as your name, job title, company name, address, phone number, email address, or username and password;
• If you make purchases via our websites or register for an event, we may require financial and billing information such as billing name and address or credit card information;
• If you attend an event, we may, upon your consent, scan your attendee badge to obtain your name, title, company name, address, country, phone number and email address;
• If you register for an online community that we host, we may ask you to provide a username, photo and/or biographical information such as your occupation, social media profiles, and areas of expertise;
• If you use and interact with our websites, we automatically collect log files and other information about your device and usage through cookies and similar technologies (see Section 4 below);
• If you visit our offices, you may be required to register as a visitor and provide your name, email address, phone number, company name and time and date of arrival.

4. What Device and Usage Data We Process

We use common information-gathering tools such as log files and cookies to automatically collect information from your computer or mobile device as you navigate our websites or interact with emails we have sent you.

4.1 Log Files

As is true of most websites, we gather certain information automatically via log files. This may include your IP address, device and application identification numbers, your location, your browser type, your Internet service provider and/or mobile carrier, the pages and files you viewed, your searches, your operating system and system configuration information, and date/time stamps. This information is used to analyze trends, improve our websites, and guarantee their security and continued proper functioning.

4.2 Cookies and Tracking Technologies

We use cookies and similar technologies such as web beacons and tags to compile information about usage of our websites and interaction with emails from us. When you visit our websites, our servers or an authorized third party may place a cookie on your browser to collect information about your online activities.

We use both session-based and persistent cookies. Session cookies disappear when you close your browser. Persistent cookies remain on your device after you close your browser. You can control cookies at the individual browser level; however, disabling cookies may limit certain features of our websites.

All cookies placed by ExhibitPower expire after 12 months unless otherwise indicated.

4.3 Do Not Track Signals

While some internet browsers offer a "Do Not Track" or "DNT" option, there is currently no uniform standard adopted by industry groups, technology companies, or regulators. Therefore, we do not currently commit to responding to browsers' DNT signals with respect to our websites. ExhibitPower takes privacy and meaningful choice seriously and will continue to monitor developments in this area.

4.4 Opt-Out from Device and Usage Data Collection

You may opt out from the collection of device and usage data by managing your cookies at the individual browser level. Please note that by blocking or deleting cookies, you may not be able to take full advantage of our website features.

4.5 Social Media Features

Our websites may use social media features such as sharing buttons and widgets. You may be given the option to post information about your activities on our website to your social media profile. ExhibitPower also allows you to log in to certain websites using sign-in services such as Google, which will authenticate your identity and may share certain Personal Data such as your name and email address. Your interactions with Social Media Features are governed by the privacy policies of those respective companies.

4.6 California and Texas Residents — Additional Rights Updated

ExhibitPower complies with applicable U.S. state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Texas Data Privacy and Security Act (TDPSA).

5. Purposes for Which We Process Personal Data and the Legal Basis on Which We Rely

We collect and process your Personal Data for the following purposes:

• Providing our websites and services: To fulfill our contractual obligations and operate the ExhibitPower platform;
• Promoting security: To verify accounts, investigate suspicious activity, and enforce our terms and policies;
• Managing user registrations: To manage your user account under applicable terms of service;
• Handling contact and support requests: To respond to inquiries and provide customer support;
• Managing event registrations: To plan and host events or webinars and communicate with you;
• Managing payments: To process financial transactions;
• Improving our services: To analyze usage trends and improve our platform and content;
• Managing office visitors: For security purposes and visitor registration;
• Sending marketing communications: To send relevant product information and promotions where you have provided consent or where permitted by applicable law;
• Complying with legal obligations: To cooperate with government authorities, courts or regulators and to protect our legal rights.

6. Who Do We Share Personal Data With?

We may share your Personal Data with the following recipients:

• Our contracted service providers for IT administration and hosting, payment processing, analytics, marketing, and customer support;
• Affiliate organizations for joint events or webinars, where required to process your registration;
• Event sponsors, only if you provide express consent via event registration or allow your attendee badge to be scanned at a sponsor booth;
• Other affiliates within the ExhibitPower corporate group for customer support, marketing, technical operations and account management purposes;
• Successor entities in connection with a merger, acquisition, reorganization or sale of all or a portion of our business, in accordance with applicable law.

We do not sell your Personal Data to third parties.

7. International Data Transfers New

ExhibitPower is headquartered in the United States. If you are accessing our website or services from outside the United States, please be aware that your Personal Data may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated.

We take appropriate safeguards to ensure your Personal Data remains protected in accordance with this Privacy Statement. By using our services, you acknowledge and consent to the transfer of your Personal Data to the United States as described herein.

8. Children

Our websites are not directed at children. We do not knowingly collect Personal Data from children under the age of 16. If you are a parent or guardian and believe your child has provided us with Personal Data without your consent, please contact us as described in Section 13 and we will take steps to delete such Personal Data from our systems.

9. How Long Do We Keep Your Personal Data?

We may retain your Personal Data for a period of time consistent with the original purpose of collection. We determine the appropriate retention period based on the amount, nature, and sensitivity of your Personal Data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements such as statutes of limitation.

After expiry of the applicable retention period, your Personal Data will be deleted or anonymized. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of the data.

10. Your Rights Relating to Your Personal Data

10.1 Your Rights

You have certain rights regarding your Personal Data, subject to local data protection laws. These may include:

• The right to access your Personal Data held by us;
• The right to rectify inaccurate Personal Data and ensure it is complete;
• The right to erasure/deletion of your Personal Data, to the extent permitted by other legal obligations;
• The right to restrict our processing of your Personal Data;
• The right to data portability — to transfer your Personal Data to another controller where technically feasible;
• The right to object to processing of your Personal Data carried out on the basis of our legitimate interests;
• The right to opt out of the sale or sharing of your Personal Data (note: we do not sell Personal Data);
• The right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

10.2 How to Exercise Your Rights

To exercise your rights, please contact us in accordance with Section 13 below. We try to respond to all legitimate requests within 45 days. Occasionally it may take us longer, given the complexity and number of requests we receive. If you are an employee of an ExhibitPower customer, we recommend you contact your company's system administrator for assistance.

If you have a registered account with us, you may update your user settings, profile, or event registration by logging into the website and editing your settings or profile.

10.3 Your Rights Relating to Customer Data

We may also process Personal Data in the role of a processor on behalf of our customers. If your data has been submitted to us by an ExhibitPower customer and you wish to exercise any rights under applicable data protection laws, please inquire with our customer directly. If you wish to make your request directly to us, please provide the name of the ExhibitPower customer who submitted your data when you contact us.

10.4 Your Preferences for Marketing Communications

You may manage your receipt of marketing communications from us by:

• Clicking the "unsubscribe" link at the bottom of our marketing emails;
• Replying or texting 'STOP' if you receive SMS communications;
• Contacting us directly using the information in Section 13.

Opting out of marketing communications does not opt you out of receiving important business communications related to your current relationship with us, such as service announcements or security information.

11. Security

We take precautions including organizational, technical, and physical measures to help safeguard against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, the Personal Data we process or use.

While we follow generally accepted standards to protect Personal Data, no method of storage or transmission is 100% secure. You are solely responsible for protecting your password, limiting access to your devices, and signing out of websites after your sessions. If you have any questions about the security of our websites, please contact us via Section 13 below.

12. Changes to This Privacy Statement

We will update this Privacy Statement from time to time to reflect changes in our practices, technology, legal requirements and other factors. If we do, we will update the "effective date" at the top of this Privacy Statement and may provide you with notice prior to the update taking effect, such as by posting a conspicuous notice on our website or by contacting you using the email address you provided.

We encourage you to periodically review this Privacy Statement to stay informed about our collection, processing and sharing of your Personal Data.

13. Contacting Us

To exercise your rights regarding your Personal Data, or if you have questions regarding this Privacy Statement or our privacy practices, please contact us:

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.