Please review this notice regarding Red9’s collection and processing of your business contact information. In accordance with applicable legal requirements, this notice is being provided to you at the earliest of one month of Red9 obtaining your business contact information or our first marketing communication to you.

INFORMATION COLLECTION

Red9 contracts with third party entities to collect business contact information for employees or representatives of companies that may be interested in Red9 services. These third parties include the companies listed in Appendix I that collect business contact information for the purpose of distributing or selling the information for direct marketing purposes. One of these companies collected your contact information and provided it to us pursuant to our contractual relationship with the company. The information collected is limited to the following:

• Name
• Company Name
• Business Telephone Number
• Business Email Address
• Job Title
• Job Function/Responsibilities

This information was collected by a third party through an in-person request, public sources, or other third-party data providers. The third party that collected your information does not provide Red9 with any non-business-related data or sensitive data.

PURPOSE AND USE

Red9 processes your information for its legitimate interest in direct business-to-business marketing purposes. Red9 only uses your business contact information for the purpose of contacting you on your business telephone or business email address to market Red9 services or provide information about Red9. We do not use this information for any other purpose, and we do not sell, transfer, or provide this information to any third party for its use.

DATA UPDATES

Our third parties endeavor to provide the most accurate information possible. If your information was collected by DiscoverOrg, then DiscoverOrg verifies the accuracy of all information provided on an ongoing basis and checks each record at least once every 60 days. Data that DiscoverOrg identifies as inaccurate is updated or, in the information cannot be verified, the information is removed from DiscoverOrg’s databases.

YOUR RIGHTS

With respect to your information that Red9 possesses, you have the rights of access, rectification, erasure, and restriction or processing. You also have the right to object to processing. You may exercise any of these rights by contacting Red9 using the information below. You may request access to the information Red9 has about you, as well as the correction, amendment, or deletion of any information about you that is inaccurate. Red9 will respond to requests for access, rectification, erasure, restriction, and objecting in accordance with its internal policies and applicable legal requirements. If you feel that we have not complied with your requests, you have the right to lodge a complaint with the appropriate supervisory authority in your country.

OPT-OUT

You have the right to opt-out of any marketing communication by either clicking the “unsubscribe” link at the bottom of a marketing email or by emailing [privacy at red9.com]. If one of our contracted third parties informs us that you object to the processing of your information or opt-out of communication, and they will let us know about the objection or opt-out, Red9 will remove you from its marketing list.

DATA RETENTION

Unless you opt-out or enforce your right to object to processing, Red9 will retain your business contact information for two years from the last date of communication or interaction with you.

INFORMATION SECURITY

Security Controls

Red9 maintains suitable physical, administrative, and technical safeguards to protect Red9 data (including your data) from unauthorized access, disclosure, alteration, or destruction. Red9 requires its third-party contractors and service providers to maintain information security controls at least as stringent as those that Red9 uses to protect data.

Transfer to Other Countries

If Red9 transfers any of your business contact information out of the country where it was originally collected, Red9 will ensure that the transferring and receiving entities comply with suitable security safeguards. If your data that originated or is processed in the EEA is transferred to a Red9 affiliate or controlled entity outside of the EEA, Red9 and the receiving entity are contractually required to agree and abide by the EU Standard Contractual Clauses for the transfer of personal data from the EEA to Processors established in non- EEA countries that do not provide an adequate level of data protection, approved by EC Commission Decision of 5 February 2010, as currently set out at: http://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32010D0087.

CONTACT INFORMATION

If you have any questions regarding this notice or Red9’s privacy practices, please review the Red9 Privacy Policy at https://www.red9.com/legal/ or contact [privacy at red9.com]. Red9 reserves the right to update this notice and will provide a revised notice as required by law.

Solution Square, Inc (doing business as Red9)

1-877-891-1870 (USA)

APPENDIX I

Red9 Marketing Tools

• Hubspot
• DiscoverOrg
• Google Adwords
• Taboola
• CBS Interactive
• Qinstreet
• Twitter Advertising
• Facebook
• Advertising
• IDG Advertising
• Emedia
• Pure B2B
• Bizible
• SurveyMonkey
• QuickTap Survey

Red9 Partner Programs

• AWS Partner Program
• Microsoft Partner Program
• Google Advertising
• Severalnines
• VividCortex
• Digital Ocean