DiligenceSquared

"You can make this request by contacting us as described in Section 13. Right to Know . You have the right to know what personal data we process and how we process your personal data. For more information see Sections 1, 2, 3, and 4. Opt Out . You may have the right to opt out of the processing of personal data. For more information see Section 5. You can make this request by contacting us as described in Section 13. Right to Data Portability . You may have the right to a "portable" copy of your personal data that you have submitted to us. Generally, this means you have a right to request that we move, copy, or transmit your personal data stored on our servers or information technology environment to another service provider's servers or information technology environment. You can make this request by contacting us as described in Section 13. Right of correction . You have the right to request correction or changes of your personal data if it is found to be inaccurate or out of date. You can make this request by contacting us as described in Section 13. Right to Delete Your Data . You have the right to request that we delete any of your personal data that we collected from you and retained, subject to certain exceptions. You can make this request by contacting us as described in Section 13. Process and Contact Information to Send Notices to Us : See Section 13, "How to Contact Us" to contact/send notices to us. "

" We have implemented technical and organizational security measures designed to help protect against unauthorized access, unauthorized alteration, disclosure, or destruction of information. Unfortunately, no data transmission over the Internet can be guaranteed to be entirely secure, and we cannot and do not guarantee or warrant the security of any information that you transmit on or through our websites or Services. We try to restrict access to information to only those employees, contractors, service providers and agents who need to know that information to help us provide the Services, and consistent with the level of sensitivity of such data. Please note that the security of your personal data collected via the Services depends, in part, on your ensuring that any of your IDs and passwords are kept confidential and secure and that you adhere to the restrictions on password and ID-sharing set forth in our Terms of Service."

" For purposes of data protection laws in the European Economic Area (" EEA "), Switzerland, and UK, depending on the purpose for which you use our website or Services, with respect to the processing of your personal data as described in this Privacy Policy, we may act as a data controller or a data processor; or under the California Consumer Protection Act as a business or services provider (or similar designations under other data protection laws). Specifically, for example, the following different relationships with you may exist depending on the purpose for which you use the Services or Website: Research: If you are an expert being interviewed or a participant responding to research questions we pose (or our third party service provider poses) at the direction of our customer for whom the research is performed, then our customer directing the research is the data controller or business (as defined under applicable data protection laws) with regard to your personal data and we are acting as the data processor or service provider (as defined under the applicable data protection laws). This Privacy Policy describes processing we carry out on their behalf, and the customer's privacy policies govern how they use your personal data."

" We (and the third party service providers we hire to perform business functions on our behalf) may collect, receive, process, and use various categories of personal data about you. The type of personal data we collect about you depends on the nature of your interactions with us and the purposes for which you are using the Services or website. Such personal data may include the following: Contact Information and Identifiers : name"

" Internet and Network Activity Information . When you visit our websites and use the Services, we and our service providers automatically collect and analyze certain information about your use of our websites and the device you used to access our websites including:"

" You have the right to know whether your personal information is being sold. For example, under the CCPA, your personal information is "sold" when it is provided to a third party for monetary or other valuable consideration for a purpose. Please note a "sale" does not include when we disclose your personal information that has been de-identified prior to sharing with a third party or is shared, at your direction, to a third party service provider for a specific business purpose or when otherwise permitted under law."

" Opt-Outs . The Services may include other options to select the "decline" or "opt-out" option for specified functionality or features, where available. Where we obtain your personal data from a third party services provider or our customer, we only process personal data you provide as directed by the third party."

" Consent : Where you have given us consent to do so. For example, if you provide your consent, we may provide you, or permit third parties on our behalf to provide you, with information about goods or services which we feel may interest you. You have the right to withdraw your consent. Please see the subsection below " Rights of EEA, UK, & Swiss Data Subjects " to find out how ."

" The California Consumer Privacy Act , Cal. Civ. Code §§ 1798.100 et seq. ("CCPA") is a U.S. law enacted in the State of California, which went into force on January 1, 2020. It expands upon the privacy rights available to certain California consumers, and requires certain companies to comply with various data protection requirements. Please also visit the final CCPA Regulations and the California Privacy Rights Act (" CPRA "). The CPRA provisions went into effect on December 16, 2020, with the remaining provisions of the CPRA operative on January 1, 2023. Pursuant to the California data protection laws, California residents have the right to be provided with the information and to exercise the rights as set forth in this Section 8 below. We handle personal data on behalf of our third parties (such as third party service providers, customers, etc.) as described at the outset of this Privacy Policy under the subheading "Third Parties." The privacy policies of those third parties control their use of your personal data, and you should contact them with any questions about that personal data . Categories of personal data : We and our third party service providers may collect personal data for our business or commercial purposes (as those terms are defined in applicable law) and a detailed list of the categories of personal data which we collect can be found in Section 1. Our services do not intentionally collect sensitive data (as defined by CCPA), other than geo-data, provided that sensitive data could inadvertently be captured if provided by you. "

" Purposes of Collection : We collect your personal data for the business and commercial purposes described in Section 2 above. How personal data is Collected : We collect the above categories of personal data from the sources described in Section 3 of this Privacy Policy. Who we Share personal data with : We may disclose each of the above categories of personal data for the business and commercial purposes described in this Privacy Policy to the extent permitted by applicable law to the categories of third parties as described in Section 4 above. Sale of personal data : We may "sell" all categories of personal data disclosed in Section 1 above. We may "sell" these categories of personal data to the categories of third parties described in Section 4 of this Privacy Policy. You have the right to know whether your personal information is being sold. For example, under the CCPA, your personal information is "sold" when it is provided to a third party for monetary or other valuable consideration for a purpose. Please note a "sale" does not include when we disclose your personal information that has been de-identified prior to sharing with a third party or is shared, at your direction, to a third party service provider for a specific business purpose or when otherwise permitted under law. Notice and Right to Request : You have the right to request access to your personal data that is within our possession. Shine the Light Notice : California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of "personal data" (as defined by this law) to third parties for their direct marketing purposes. "

" Right to Data Portability . You may have the right to a "portable" copy of your personal data that you have submitted to us. Generally, this means you have a right to request that we move, copy, or transmit your personal data stored on our servers or information technology environment to another service provider's servers or information technology environment. You can make this request by contacting us as described in Section 13."

" We (and the third party service providers we hire to perform business functions on our behalf) may collect, receive, process, and use various categories of personal data about you. The type of personal data we collect about you depends on the nature of your interactions with us and the purposes for which you are using the Services or website. Such personal data may include the following: "

" We believe it is important to give you choices about the use of your personal data. We will use your personal data as described in this Privacy Policy or as disclosed in any other terms of service or data protection agreements entered into between us. In the event of a conflict, the terms of service or data protection agreement will govern. If we want to use your personal data for a purpose not authorized in this Privacy Policy, we will first obtain your consent to do so. You Can Opt Out of Receiving our Marketing emails . We will respect your wishes not to receive, or stop receiving, marketing communications. You can opt out at any time by using the unsubscribe links or instructions at the bottom of our emails. Please note that we will continue to send you Services-related communications regardless of any such marketing-related request. Opt-Outs . The Services may include other options to select the "decline" or "opt-out" option for specified functionality or features, where available. Where we obtain your personal data from a third party services provider or our customer, we only process personal data you provide as directed by the third party. You May be able to Block or Remove Cookies through your Browser Settings . We use cookies and other tracking tools to help customize the Services and website and improve your experience, as well as analyze our performance and marketing activities. You may be able to block or delete cookies by going to the preferences, tools, or options menus of your Internet browser. "

"You can object to the processing that we carry out on the grounds of legitimate interests. See the subsection " Rights of data subjects " below to find out how. Consent : Where you have given us consent to do so. For example, if you provide your consent, we may provide you, or permit third parties on our behalf to provide you, with information about goods or services which we feel may interest you. You have the right to withdraw your consent. Please see the subsection below " Rights of EEA, UK, & Swiss Data Subjects " to find out how . Legal Claims : We may need to process your personal data to defend or establish a legal claim (for example, claims relating to the sale of our goods and services under contract law). Rights of EEA, UK & Swiss Data Subjects: Users accessing Services from the EEA, UK & Switzerland are entitled to the following rights where the EU DPLs apply (which may be exercised against us or, if we are not the controller): The Right to be Informed — You have the right to be provided with clear, transparent, and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this Privacy Policy. The Right to Access — You have the right to request access to your personal data that is within our possession. The Right to Rectification — You have the right to request that we correct any personal data you believe is inaccurate. "

" Monitor and detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;"

" We may collect, use, and share personal data about you from you and through and with our third party service providers (for example who provide platform hosting services, data analytics, translation, expert services or other services to us) (" service provider(s) "). We may collect, use and share your personal information on behalf of and at the direction of our customers for research purposes. In the interest of transparency, we may describe in this Privacy Policy some of the most common data collection, use, and sharing on behalf of such third parties, but this Privacy Policy does not govern such third parties' collection, use, processing, or sharing. We are not responsible for the privacy or security practices of such third parties, and you should consult their privacy policies and contact them directly with any questions about that personal data . Third party services are described further below."

" Service providers : We engage service providers to process personal data on our behalf and help us pursue our business purposes, such as analytics, user support, billing and sales activities, data analysis, customer service engagement, email delivery, cloud hosting services, platform services, and marketing assistance. Such service providers may use such data for their own business purposes to enhance, improve, and deliver their services and in such case their use is governed by their privacy policy. For a list of our third party service providers who serve as subprocessors for our platform Services, as may be updated from time to time, please see here https://trust.diligencesquared.com/subprocessors ."

" For Safety, Security, or Legal Compliance Purposes : We might share information in response to subpoenas, court orders, or other legal process (including for national security and law enforcement purposes); to establish or exercise our legal rights or the legal rights of a third party service provider, sponsor, customer, or other research provider (for example to enforce confidentiality or intellectual property rights); to defend against legal claims; or as otherwise required by law; to comply with applicable laws; to protect rights, safety and property of us, our customers, or others; and to respond to lawful requests from public authorities. We might also share personal data to prevent, detect, or investigate suspected fraud, violations of our terms of service, harassment, or illegal conduct."