This Privacy Policy explains how WhiteWater West Industries Ltd. (together with our affiliates, “WhiteWater,” “we,” “us”) collects, uses, discloses, and protects personal information/personal data when you visit or interact with our websites, forms, events, and communications (the “Services”).

Personal information (and, in some jurisdictions, personal data) means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household.

1) Who we are and how to contact us

Questions or requests about privacy can be sent to:

Email: whitewater@whitewaterwest.com

Mail: 180-6651 Fraserwood Pl., Richmond, BC, V6W 1J3, CANADA

Phone: +1 604 273 1068

2) What we collect

We collect information in three main ways:

A. Information you provide
Depending on what you do, you may provide:

• Contact details (name, email, phone, mailing address)

• Professional details (company, job title, role, venue/project details)

• Communications (messages, inquiry details, feedback)

• Event/webinar or newsletter preferences and subscription choices

• Files you upload (for example, photos or documents you submit through forms)

B. Information collected automatically (online identifiers and usage data)
When you use the Services, we may automatically collect:

• Device and browser information (IP address, device identifiers, browser type, operating system)

• Approximate location (derived from IP)

• Website usage (pages viewed, clicks, referring/exit pages, dates/times, session information)

• Cookies and similar technologies (see Section 6)

C. Information from third parties
We may receive information from:

• Service providers who help us run marketing campaigns, events, analytics, or customer relationship management

• Social media platforms if you interact with our pages or ads (subject to their settings and policies)

• Business partners if you request co-sponsored content or events

3) How we use your information

We use personal information to:

• Respond to inquiries and provide requested information, quotes, support, or follow-up

• Operate and improve the Services (functionality, performance, troubleshooting, security)

• Manage relationships with customers, prospects, suppliers, and partners

• Send communications such as newsletters, product updates, event invitations, and industry insights (you can opt out at any time)

• Measure and improve marketing effectiveness (for example, understanding which content is useful)

• Comply with law and protect rights, safety, and security (fraud prevention, investigations, legal claims)

4) Legal bases (EEA/UK/Switzerland)

If you are in the EEA, UK, or Switzerland, we rely on one or more of these legal bases (as applicable):

• Consent (for example, where required for certain cookies or marketing)

• Contract (to provide services you request)

• Legitimate interests (for example, to respond to business inquiries, improve services, and secure our systems), balanced against your rights

• Legal obligation (to meet regulatory or legal requirements)

5) How we share personal information

We may disclose personal information to:

• Service providers/processors that host our site, manage forms, run analytics, send emails, operate CRM/marketing tools, or provide IT/security services (they are permitted to use data only to provide services to us)

• Affiliates within the WhiteWater group of companies (for internal administration, support, and customer relationship management)

• Professional advisors (legal, audit, insurance) where necessary

• Authorities and others where required by law, subpoena, court order, or to protect rights and safety

• Business transaction parties (for example, merger, acquisition, financing, or asset sale), subject to appropriate confidentiality and security controls

We do not sell personal information for money.

If we engage in targeted advertising or similar activities that may be treated as “sale” or “sharing” under some laws, we provide opt-out choices described below.

6) Cookies and similar technologies

We use cookies and similar technologies to:

• Provide essential site functionality

• Remember preferences

• Understand site traffic and performance

• Support marketing and measurement (where enabled)

Your choices:

• You can manage cookies through [Cookie Settings link] and your browser controls.

• For UK/EU visitors, non-essential cookies should only be set where you have been given an appropriate way to consent.

Opt-out preference signals (GPC):

Where required, we honor Global Privacy Control (GPC) signals as a valid request to opt out of certain data sharing (for example, “sale”/“sharing” for cross-context behavioral advertising under California law).

7) Advertising and analytics (optional, keep only if true)

We may use analytics providers (for example, to understand how visitors use our website) and, if enabled, advertising tools (for example, remarketing). These tools may use cookies or similar technologies to collect usage data over time.

You can opt out by using our cookie controls and, where applicable, by sending an opt-out signal such as GPC (see Section 6).

8) Data retention

We keep personal information only as long as necessary for the purposes described in this policy, including to meet legal, accounting, and reporting requirements. Where required, we describe retention periods or the criteria used to determine them.

9) Security

We use administrative, technical, and physical safeguards designed to protect personal information. No security measure is perfect, and we cannot guarantee absolute security.

10) Your privacy rights and choices

Depending on where you live, you may have rights such as:

• Access to your personal information

• Correction of inaccurate information

• Deletion (with exceptions)

• Portability (in some jurisdictions)

• Objection/opt-out of certain processing, including targeted advertising in many US states

• Withdraw consent where processing is based on consent

• Complaint to a privacy regulator (EEA/UK and Canada)

California and certain US state disclosures:

Where applicable, we provide the ability to opt out of “sale” or “sharing” of personal information and to exercise other rights. California also expects a “notice at collection” describing categories collected and purposes.

California residents may also use GPC to submit an opt-out request via supported browsers/extensions.

How to submit a request:

Email us at whitewater@whitewaterwest.com with the subject line “Privacy Request,” or visit https://www.whitewaterwest.com/contact/. We may need to verify your identity before completing certain requests. Authorized agents may submit requests where permitted by law.

11) Children’s privacy

Our Services are not directed to children, and we do not knowingly collect personal information from children without appropriate authorization.

12) International users and cross-border transfers

We may store or process information in countries other than where you live. Where required (for example, under GDPR-style rules), we use appropriate safeguards for international transfers and provide information on how to obtain copies of relevant safeguards.

13) Data breaches

If we experience a security breach involving personal information, we will assess the incident and provide notices as required by applicable law. Some laws require notification “as soon as feasible” after determining a reportable breach, and GDPR-style rules may require reporting to regulators within 72 hours where applicable.

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date above shows when it was most recently revised.

Last updated: February 27, 202200