PRIVACY NOTICE – KARPOWER VALLEY

EFFECTIVE DATE: March 26, 2026

LAST UPDATED: March 26, 2026

Karpower Valley, Inc. (the “Company”) believes that protecting the security and privacy of your personal information is important and are among our core principles. This Privacy Notice explains how we collect, store, use, disclose and transfer (hereinafter “process”) your personal information. The personal information that we collect about you depends on the context of your interactions with us, the products, services and features that you use, your location, and applicable law.

We may collect personal information directly from you and automatically through our use of cookies and other data collection technologies. This privacy policy governs personal information we collect when:

You use our website at www.karpowerusa.com
You communicate with us electronically, such as via our contact intake form or email;
You interact with us offline, including in person, at an event or via phone; or
We collect your information from other online or offline services, tools, events, and any other context in which we link to or otherwise provide you with a copy of this Privacy Policy.

We may provide additional privacy notices when we collect your personal information to supplement this Privacy Notice.

1. Processing of Personal Information related to your Business Relationship with Us

In the context of the business relationship with us, we may process the following categories of personal information of contact persons as (prospective) customers, suppliers, vendors and partners (each a “Business Partner”):

Contact information, such as full name, job position, work address, work telephone number, work mobile phone number, work fax number and work email address;
Further information necessarily processed in a project or contractual relationship with us or voluntarily provided by the Business Partner, such as information relating to orders placed, payments made, requests, and project milestones;
Personal information collected from publicly available resources, integrity data bases and credit agencies;
If legally required for Business Partner compliance screenings: date of birth, ID numbers, country of incorporation and/or any other information that may be legally required of Business Partners; and
Internet or network activity, such as browsing history, search history, and information regarding interactions with our website or emails.

We may process the personal information for the following purposes:

Communicating with Business Partners about our products, services and projects, e.g. by responding to inquiries or requests or providing you with information about products and services;
Planning, performing and managing the (contractual) relationship with Business Partners; e.g. by performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, facilitating and providing support services;
To create a personal profile containing business-related information on interactions between you and us with the aim of being able to offer you and the company you work for relevant information and suitable offers for our services and products and to improve our personal communication with you;
Administrating and performing market analysis;
Contacting you with information and offers concerning our products and services, sending you further marketing messages and conducting customer satisfaction surveys as explained in Section 2;
Maintaining and protecting the security of our products, services and website, preventing and detecting security threats, fraud or other criminal or malicious activities;
Ensuring compliance with legal obligations (such as record keeping obligations), export control and customs, Business Partner compliance screening obligations (to prevent white-collar or money laundering crimes), and our policies or industry standards; and
Solving disputes, enforce our contractual agreements and to establish, exercise or defend legal claims.

2. Transfer and disclosure of personal information

We may transfer your personal information to:

Other affiliated companies or third parties - e.g. sales partners or suppliers - in connection with our business relationship with you;
Third parties which provide IT services to us and which process such data only for the purpose of such services (e.g., hosting or IT maintenance and support services); and
Third parties in connection with complying with legal obligations or establishing, exercising or defending rights or claims (e.g., for court and arbitration proceedings, to law enforcement authorities and regulators, to attorneys and consultants).

3. Retention Periods

Karpower Valley, Inc. retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Notice, including to provide services, comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes. Retention periods vary based on the category of information and our legal or operational needs and are determined using criteria such as: the volume, nature, and sensitivity of the data; potential risk of harm from unauthorized use or disclosure; the purposes for which we process it; applicable legal requirements; and our ability to achieve those purposes through other means.

4. Your rights

Depending on where you live, you may have the following rights, subject to any applicable exemptions or limitations:

The right to know and access your personal information, such as the categories of personal information we have collected, the sources of personal information, the purposes of collection, and how we used, disclosed, sold, or shared personal information;
The right to correct inaccurate personal information that we maintain about you;
The right to delete your personal information under specific circumstances;
The right to opt out of the sale or sharing of your personal information, as such terms are defined by applicable laws;
The right to object or opt out of certain types of processing, such as targeted advertising, direct marketing, and certain types of profiling and automated decision-making;
The right to request the restriction of processing of your personal information;
The right to data portability, which means requesting a copy of your personal information in an accessible format; and
The right to withdraw your consent under certain circumstances.

5. Additional Information for California Residents

The purpose of this California Privacy Section is to supplement other parts of our Privacy Notice and provide additional information relevant to California residents regarding our personal information processing practices in the previous 12 months and our current personal information collection practices. This California Privacy Section should be read in conjunction with our Privacy Notice. We have described the categories of personal information we collect, the sources from which we collect personal information, and our purposes for collection in Section 1 of this Privacy Notice. Section 1 above also describes how and when we disclose personal information to others.

California Privacy Rights.

Subject to appropriate verification of your identity, you may ask us for access to your personal information in our possession, or information about such personal information, including the categories and sources of personal information, our purposes for processing personal information, and how we disclose personal information. You also may ask us to delete your personal information, correct inaccuracies in your personal information, and/or restrict or object to our processing of such personal information. Please note that Karpower Valley, Inc. does not use sensitive personal information in a way that requires us to restrict or limit our use of sensitive personal information in response to a California resident’s privacy rights request.

You may also designate an authorized agent to submit a request for you. Even when an authorized agent submits a request for you, we may ask you to verify your own identity or confirm the request directly with us. You can expect that we will respond to your privacy rights request within 45 days, unless we reach out to explain that it will take us longer. If we cannot fulfill your privacy rights request, we will explain why.

California privacy rights requests may be submitted to us as identified in Section 14 of this Privacy Notice. We do not retaliate or discriminate against California residents for exercising their privacy rights.

Selling and Sharing of Personal Information.

Karpower Valley, Inc. does not knowingly sell or share (as those terms are defined the California Consumer Privacy Act) personal information collected from California residents of any age, including specifically residents under 13 years old. We may disclose personal information to our vendors to facilitate personalization, including through the use of cookies on our website. For more information about how to control cookies or other tracking technologies associated with the website and services, please see Section 8 and our Cookie Notice. If our practices change, we will update this Privacy Notice and provide the required rights to opt out of the sale or sharing of personal information.

6. Cookies and Other Tracking Technologies

We and our vendors may use a variety of tracking technologies, including cookies, to collect certain information when you interact with our website or Services. This information may include your device identifier, IP address, general location information, browser type, operating system, other unique identifiers, the pages you visit within the website, and the dates, times, and duration of your visits or use of the services.

We may combine information collected through these tracking technologies with other information we obtain about you, including information received from external sources.

We use automated tools and analytics services—such as Google Analytics, Google Maps, and YouTube Embed [CB1] —to help us evaluate and improve the performance, functionality, and user experience of our website and services. We may also use these tools to develop marketing insights related to our services. These providers may use cookies and other tracking technologies in connection with the services they perform for us.

For additional information about our use of cookies and other tracking technologies, see our Cookie Notice.

7. How We Respond to Do Not Track Signals

Some web browsers (including Safari, Internet Explorer, Firefox and Chrome) incorporate a “Do Not Track” ("DNT") feature that signals to websites that a user does not want to have his or her online activity and behavior tracked. Not all browsers offer a DNT option and DNT signals are not yet uniform. For this reason, Karpower Valley, Inc. does not recognize or respond to DNT signals.

8. How We Respond to Global Privacy Control

Depending on where you live, we recognize the “Global Privacy Control” (GPC) to allow you to opt out of the sale of your personal information and the sharing of your personal information for targeted advertising. The GPC is a proposed specification designed to allow internet users to notify businesses of their privacy preferences, such as whether or not they want their personal information to be sold or shared. If you visit our website with a browser transmitting GPC from a jurisdiction that requires us to recognize GPC signals, we will not share your personal information for targeted advertising or sell your personal information associated with your visit.

9. Security

To protect your personal information against accidental or unlawful destruction, loss, use, or alteration and against unauthorized disclosure or access, we implement reasonable and appropriate physical, technical and organizational security measures.

10. Children’s Personal Information

The Karpower Valley, Inc. website and services are designed for a general audience and are not directed to children under the age of 13. We do not knowingly collect or solicit personal information from children under the age of 13. If we become aware that we have collected personal information from a child under the age of 13 without verifiable parental consent, we will promptly delete the information from our records. If you believe that a child under the age of 13 may have provided us with personal information, please contact us as specified in Section 14 below.

11. Additional Information for International Visitors to the Website

The Company operates its karpowerusa.com website and services from the United States and may transfer, disclose, and store your personal information in the United States, where we are incorporated, or in any other country where we or our business partners or vendors, who process data on our behalf, operate. The data protection and privacy laws in these countries may offer a lower level of protection than the applicable laws in your jurisdiction.

We will take appropriate measures in compliance with applicable law to protect any personal information that we transfer to another location, including safeguards legally required to protect personal information during transfer and other processing outside the country where it was collected.

If you are located in the European Economic Area, the UK, or Switzerland, we will implement appropriate measures when it is transferred outside of the EEA, the UK, or Switzerland by processing it in a territory which the European Commission or other regulator has determined provides an adequate level of protection for personal information or by otherwise ensuring appropriate safeguards are in place to protect your personal data, such as entering into the Standard Contractual Clauses approved by the European Commission.

By using our website, the Service, or otherwise submitting your personal information to us, you agree to the processing of your personal information in the jurisdictions in which we operate.

12. Data privacy contact

If you have any questions about this Privacy Notice or if you want to exercise your related data privacy rights please contact us at:

info@karpowerusa.com

We will use reasonable efforts to address and settle any requests or concerns you bring to our attention.

13. Changes to This Privacy Notice

The Company reserves the right to modify or update this Privacy Notice at any time, in its sole discretion, to reflect changes in our practices, legal requirements, or business operations. Your continued use of our website or services following the posting of any revised Privacy Notice constitutes your acceptance of such changes. We encourage you to review this Privacy Notice periodically.