Personal Information Automatically Collected

As is true of most digital platforms, we and our third-party providers may also collect Personal Information from an individual’s device, browsing actions and site usage patterns automatically when visiting or interacting with our Services, which may include log data (such as internet protocol (IP) address, operating system, browser type, browser id, the URL entered and the referring page/campaign, date/time of visit, the time spent on our Site Services and any errors that may occur during the visit to our SiteServices), analytics data (such as the electronic path taken to our ServicesSite, through our ServicesSite and when exiting our ServicesSite, as well as usage and activity on our ServicesSite) and location data (such as general geographic location based on the log data we or our third-party providers collect).

We and our third-party providers may use (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”) to automatically collect this Personal Information. For example, our Services uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”), to collect and view reports about the traffic on our Services. More information about the use of Google Analytics for these analytical and non advertising purposes can be obtained by visiting Google’s privacy policy here and Google’s currently available opt-out options are available here.

To manage cookies, an individual may change their browser settings to: (i) notify them when they receive a cookie, so the individual can choose whether or not to accept it; (ii) disable existing cookies; or (iii) automatically reject cookies. Please note that doing so may negatively impact an individual’s experience using our Services, as some features and offerings may not work properly or at all. Depending on an individual’s device and operating system, the individual may not be able to delete or block all cookies. In addition, if an individual wants to reject cookies across all browsers and devices, the individual will need to do so on each browser on each device they actively use. An individual may also set their email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether they have accessed our email and performed certain functions with it.

Personal Information from Third Parties

We also obtain Personal Information from third parties; which we often combine with Personal Information we collect either automatically or directly from an individual.

We may receive the same categories of Personal Information as described above from the following third parties:

• Your Employer / Company: If your employer or company (including representatives of your employer and/or company and administrator account holders) engages in our Services, we may receive your information from them. If another user has been provided access to your account through the delegate or assistant mode, we may receive your information from them. We also may receive your information from your company team members and department colleagues.
• Other Users of our Services: If you share your information with a user of our Services, such as through a QR code, Kado-generated link or physical business card, we may receive your information from them. We also may receive your information from a user of our Services who manually enters your information into the Services, including any information entered or shared in interaction notes, or who connects their address book.
• Third Party Platforms: When an individual connects a third-party platform account to our Services, we may receive some information about individuals that they permit the third-party platform to share with third parties. For example, if you or the administrator account holder connects your Google, Outlook or Salesforce account to our Services, we may receive your information such as contact information, employment information, meeting data, your address book and calendar data.
• Social Media: When an individual interacts with our Services through various social media networks, such as when someone “Likes” us on Facebook or follows us or shares our content on Google, Facebook, Twitter, or other social networks, we may receive some information about individuals that they permit the social network to share with third parties. The data we receive is dependent upon an individual’s privacy settings with the social network. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services.
• Service Providers: Our service providers that perform services solely on our behalf, such as survey and marketing providers, collect Personal Information and often share some or all of this information with us.
• Information Providers: We may from time to time obtain information from third-party information providers to correct or supplement Personal Information we collect. For example, we may obtain updated contact information from third-party information providers to reconnect with an individual.
• Publicly Available Sources: We collect Personal Information about individuals that we do not otherwise have, such as contact information, news source information, employment-related information, and interest-in-services information, from publicly available sources. We may combine this information with the information we collect from an individual directly. We use this information to contact individuals, to update users about their contacts in the news, to send advertising or promotional materials or to personalize our Services and to better understand the demographics of the individuals with whom we interact.

Our Use of Personal Information

We use Personal Information we collect to:

• Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations, to deliver the Services you have requested and to process transactions;
• Manage our organization and its day-to-day operations;
• Communicate with individuals, including via email, text message, social media and/or telephone calls;
• Request individuals to complete surveys about our organization, organizations we partner with, and Services;
• Facilitate and provide our Services and product demonstrations;
• Market our Services to individuals, including through email, direct mail, phone or text message;
• Administer, improve and personalize our Services, including by recognizing an individual and remembering their information when they return to our Services;
• Process payment for our Services;
• Facilitate client benefits and services, including customer support through our command center services;
• Identify and analyze how individuals use our Site and Services;
• Conduct research and analytics on our client base and our Services;
• Improve and customize our Services to address the needs and interests of our client base and other individuals we interact with;
• Test, enhance, update and monitor the Services, or diagnose or fix technology problems;
• Help maintain the safety, security and integrity of our property and Services, technology assets and business;
• Defend, protect or enforce our rights or applicable contracts and agreements;
• Prevent, investigate or provide notice of fraud or unlawful or criminal activity; and
• Comply with legal obligations.

Where an individual chooses to contact us, we may need additional information to fulfill the request or respond to inquiries. We may provide additional privacy disclosures where the scope of the inquiry/request and/or Personal Information we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information provided at that time.

Legal Basis for Processing Personal Information (EEA and UK visitors only)

If you are a website visitor located in the European Economic Area ("EEA") or United Kingdom ("UK"), KADO’s Data Controller and Protection Officer can be contacted by emailing dpo@kadonetworks.com.

Our legal basis for collecting and using the Personal Information described above will depend on the Personal Information concerned and the specific context in which we collect it. However, we will normally collect Personal Information from you only where we have your consent to do so, where we need the Personal Information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect Personal Information from you.

If we ask you to provide Personal Information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your Personal Information is mandatory or not (as well as of the possible consequences if you do not provide your Personal Information). Similarly, if we collect and use your Personal Information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.

Our Disclosure of Personal Information

We disclose Personal Information in the following ways:

• Affiliates. We may share Personal Information with other companies owned or controlled by Kado, and other companies owned by or under common ownership as Kado, which also includes our subsidiaries (i.e., any organization we own or control) or our ultimate holding company (i.e., any organization that owns or controls us) and any subsidiaries it owns, particularly when we collaborate in providing the Services.
• Your Employer / Company: If your employer or company (including representatives of your employer and/or company and administrator account holders) engages in our Services, we may disclose your information to them. If an individual has been provided access to your account through the assistant mode, we may disclose your information to them. We also may disclose your information to your company team members and department colleagues.
• Other Users of our Services: If you share your information with a user of our Services, such as through a QR code, Kado-generated link or physical business card, we may disclose your information to them. We also may disclose your information to a user of our Services who is provided your information from other users of the Services, such as any information entered or shared in interaction notes.
• Survey Providers: We share Personal Information with third parties who assist us in delivering our survey offerings and processing the responses.
• Marketing Providers: We coordinate and share Personal Information with our marketing providers in order to communicate with individuals about the Services we make available.
• Customer Service and Communication Providers: We share Personal Information with third parties who assist us in providing our customer services and facilitating our communications with individuals that submit inquiries.
• Other Service Providers: In addition to the third parties identified above, we engage other third-party service providers that perform business or operational services for us or on our behalf, such as website hosting, infrastructure provisioning, IT services, analytics services, administrative services.
• Other Business As Needed To Provide Services: We may share Personal Information with third parties that an individual engages with through our Services or as needed to fulfill a request or transaction including, for example, payment processing services.
• Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose Personal Information to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal Information may also be disclosed in the event of insolvency, bankruptcy or receivership.
• Legal Obligations and Rights: We may disclose Personal Information to third parties, such as legal advisors and law enforcement:
  • in connection with the establishment, exercise, or defense of legal claims;
  • to comply with laws or to respond to lawful requests and legal process;
  • to protect our rights and property and the rights and property of others, including to enforce our agreements and policies;
  • to detect, suppress, or prevent fraud;
  • to protect the health and safety of us and others; or
  • as otherwise required by applicable law.
• Otherwise With Consent or Direction: We may disclose Personal Information about an individual to certain other third parties or publicly with their consent or direction. For example, with an individual’s consent or direction we may post their testimonial on our Site or service-related publications.

If you are a resident of the State of Nevada, Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. Although we do not currently sell covered information, please contact us at privacy-us@kadonetworks.com to submit such a request.

How We Transfer Data We Collect Internationally

International Transfers Within the KADO group

To facilitate our global operations, we may transfer information to other KADO Affiliates where we have operations for the purposes described in this policy, in particular KADO Networks SP, SLU (Spain).

This Privacy Policy will apply even if we transfer Personal Data to other countries. We have taken appropriate safeguards to require that your Personal Data will remain protected wherever it is transferred. When we share Personal Data of individuals in theEuropean Economic Area ("EEA"), Switzerland or the United Kingdom ("UK") within and among KADO’s Affiliates, we make use of the Standard Contractual Clauses (which have been approved by the European Commission) and the UK Addendum (as defined within ourData Processing Agreement) as well as additional safeguards where appropriate.

International Transfers to Third Parties

Some of the third parties described in this Privacy Policy, which provide services to us under contract, are based in other countries that may not have equivalent privacy and data protection laws to the country in which you reside. When we share Personal Data of individuals in the EEA, Switzerland or UK with third parties, we make use of a variety of legal mechanisms to safeguard the transfer including the European Commission-approved standard contractual clauses, as well as additional safeguards where appropriate. For transfers to or from the United Kingdom, we make use of the UK Addendum.

Children’s Personal Information

Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit Personal Information from children under the age of 13. If an individual is under the age of 13, they should not use our Services or otherwise provide us with any Personal Information either directly or by other means. If a child under the age of 13 has provided Personal Information to us, we encourage the child’s parent or guardian to contact us to request that we remove the Personal Information from our systems. If we learn that any Personal Information we collect has been provided by a child under the age of 13, we will promptly delete that Personal Information.

Links to Third-Party Websites or Services

Our Site and Services may include links to third-party websites, plug-ins and applications. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, and we are not responsible for, any Personal Information practices of third-party websites and online services or the practices of other third parties. To learn about the Personal Information practices of third parties, please visit their respective privacy notices.

How to Access and Control your Personal Information

Reviewing, Correcting and Removing your Personal information

You have the following data protection rights:

• You can request access, correction, updates or deletion of your Personal Information.
• You can object to our processing of your Personal Data, ask us to restrict processing of your Personal Data or request portability of your Personal Data.
• If we have collected and processed your Personal Data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.
• You have the right to complain to a data protection authority about our collection and use of your Personal Data. Contact details for data protection authorities in the EEA are available here).

To exercise any of these rights, please email privacy@kadonetworks.com

We will respond to your request to change, correct, or delete your data within a reasonable timeframe and notify you of the action we have taken.

If you are a customer, prospect, or otherwise interact with a KADO customer that uses our Subscription Service and would like to access, correct, amend or delete your data controlled by the customer, please contact the relevant customer directly. KADO acts as a processor for our customers and will work with our customers to fulfill these requests when applicable.

California Privacy Rights

Applicability

fs This section applies only to California consumers. For purposes of this section "Personal Information" has the meaning given in the California Consumer Privacy Act (“CCPA”). It describes how we collect, use, and share California consumers' Personal Information in our role as a business, and the rights applicable to such residents. The California Consumer Privacy Act ("CCPA") requires businesses to disclose whether they sell Personal Information. KADOis a business and does not sell Personal Information. We may share Personal Information with third parties if those third parties are authorized service providers or business partners who have agreed to our contractual limitations as to their retention, use, and disclosure of such Personal Information.

If you are unable to access this Privacy Policy due to a disability or any physical or mental impairment, please contact us and we will arrange to supply you with the information you need in an alternative format that you can access.

How we Collect, Use and Share Personal Information

We have collected the following statutory categories of Personal Information in the past twelve (12) months:

• Identifiers and contact information, such as name, e-mail address, mailing address, phone number, age and communication preferences. We collect this information directly from you or from third party sources.
• Account information, such as subscription records. We collect this information directly from you.This includes name, company name, employer, job title, job promotion status, email address, phone number, business address, website, username and password, profile information, profile image, address book information, team information, department information, payment and purchase history information, and any other information you provide to us, such as your interests and education history. Please note we utilize a third-party provider to process payments on our behalf and do not accept payment directly through our Services.
• Interaction Notes Information, including subject matter of the interaction, date of the interaction, location of the interaction, quotes, call details, meeting notes, and other information you provide in the notes of an interaction.
• Inquiry Information, including information provided in custom messages sent through the forms or contact information provided on our Site.
• Demonstration and Networking Information, including contact information, job title, company name, number of employees at your company, and video conferencing details.
• Internet or network information, such as browsing and search history. We collect this information directly from your device.
• Geolocation data, such as IP address. We collect this information from your device.
• Other Personal Information, in instances when you interact with us online, by phone or mail in the context of receiving help through our help desks or other support channels; participation in customer surveys or contests; or in providing the Subscription Service.

The business and commercial purposes for which we collect this information are described in the Section called “Our Use of Personal Information”of this Privacy Policy. The categories of third parties to whom we "disclose" this information for a business purpose are described in Section “Our Disclosure of Personal Information”of this Privacy Policy.

Your California Rights

You have certain rights regarding the Personal Information we collect or maintain about you. Please note these rights are not absolute, and there may be cases when we decline your request as permitted by law.

The right of access means that you have the right to request that we disclose what Personal Information we have collected, used and disclosed about you in the past 12 months.

The right of deletion means that you have the right to request that we delete Personal Information collected or maintained by us, subject to certain exceptions.

The right to non-discrimination means that you will not receive any discriminatory treatment when you exercise one of your privacy rights.

KADO does not sell Personal Information to third parties (pursuant to California Civil Code §§ 1798.100–1798.199, also known as the California Consumer Privacy Act of 2018).

How to Exercise your California Rights

You can exercise your rights yourself or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your Personal Information, we will verify your identity by a method appropriate to the type of request you are making. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent's identity to protect your Personal Information.

Please use the contact details below, if you would like to:

• Access this policy in an alternative format;
• Exercise your rights;
• Learn more about your rights or our privacy practices; or
• Designate an authorized agent to make a request on your behalf