Privacy Policy

CERNO Global, Inc. ("CERNO," "we," "our," or "us") has adopted this Privacy Policy ("Privacy Policy") to describe how we collect, use, disclose, retain, and otherwise process Personal Information in connection with our Website, services, and business activities. This Privacy Policy also describes the rights and choices available to individuals under applicable privacy laws.

This Privacy Policy applies to Personal Information collected through www.cernoglobal.com (the "Website"), communications with CERNO, and other interactions with us, unless a separate privacy notice applies.

For purposes of this Privacy Policy, the following terms have the meanings set forth below:

"Personal Information" means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an identified or identifiable individual, as defined under applicable law.

"Process," "Processed," or "Processing" means any operation or set of operations performed on Personal Information, whether by automated or manual means, including the collection, use, storage, organization, access, disclosure, transfer, retention, deletion, or other handling of such information.

"Website" means www.cernoglobal.com and any webpages, digital content, or online services owned or operated by CERNO.

CERNO Global, Inc. is a leadership advisory and strategic consulting firm. In the course of providing its professional services and operating its business, CERNO may Process Personal Information through its Website, communications, events, business relationships, and other interactions described in this Privacy Policy.

CERNO may collect Personal Information directly from you, automatically through your use of the Website, and from third parties, as described below.

Information You Provide

CERNO may collect Personal Information that you voluntarily provide when you communicate with us, request information about our services, submit inquiries through the Website, subscribe to communications, register for or participate in meetings or events, apply for employment or other opportunities, or otherwise interact with CERNO.

Depending on the nature of your interaction with CERNO, this information may include your name, employer, job title, business affiliation, mailing address, email address, telephone number, and the contents of communications, submissions, or other materials you provide.

Information Collected Automatically

When you access or use the Website, CERNO and its service providers may automatically collect certain information regarding your device and your use of the Website. This information may include your IP address, browser type, operating system, device identifiers, referring URLs, pages viewed, dates and times of access, clickstream data, and other technical information regarding your interaction with the Website.

CERNO may collect this information through cookies and similar technologies, as described in the Cookies and Analytics section of this Privacy Policy.

Information from Third Parties

CERNO may receive Personal Information from third parties, including publicly available sources, clients, business partners, service providers, referral sources, professional networking platforms, and other organizations with which CERNO maintains business relationships.

CERNO may combine Personal Information collected from different sources where permitted by applicable law.

CERNO may Process Personal Information for the following purposes, as permitted by applicable law:

• to provide, administer, maintain, and improve our Website, professional services, and business operations;

• to communicate with you, respond to inquiries, provide requested information, and manage our business relationships;

• to administer meetings, events, webinars, surveys, and other activities conducted by CERNO;

• to evaluate employment inquiries and other professional opportunities;

• to operate, secure, monitor, maintain, and improve the Website, our information systems, and other technology resources;

• to conduct internal business administration, including recordkeeping, auditing, financial management, compliance, risk management, and related administrative functions;

• to comply with applicable legal, regulatory, contractual, and professional obligations;

• to establish, exercise, or defend legal claims, and to protect the rights, property, safety, and security of CERNO, our personnel, clients, and others; and

• for any other purpose disclosed at the time Personal Information is collected or otherwise permitted or required by applicable law.

• CERNO does not sell Personal Information or disclose Personal Information to third parties except as described in this Privacy Policy or as otherwise permitted or required by applicable law.

• CERNO may disclose Personal Information in the following circumstances:

• Service Providers

• CERNO may disclose Personal Information to third-party service providers that perform services on our behalf, including providers of information technology, website hosting, cloud computing, cybersecurity, data analytics, communications, payment processing, and other operational or administrative services. Such service providers are authorized to Process Personal Information only as necessary to perform services for CERNO or as otherwise required by applicable law.

• Professional Advisers

• CERNO may disclose Personal Information to attorneys, accountants, auditors, insurers, financial advisers, and other professional advisers where reasonably necessary in connection with the operation of our business, the provision of our services, compliance with legal obligations, or the protection of CERNO's legal interests.

• Business Transactions

• CERNO may disclose or transfer Personal Information in connection with an actual or proposed merger, acquisition, financing, restructuring, reorganization, sale of assets, investment, joint venture, dissolution, bankruptcy, or other corporate transaction. Personal Information may also be disclosed during the evaluation or due diligence of such transactions, subject to appropriate confidentiality obligations.

• Legal and Regulatory Requirements

• CERNO may disclose Personal Information where required or permitted by applicable law, regulation, legal process, court order, subpoena, governmental request, regulatory inquiry, or other lawful authority.

• Protection of Rights

• CERNO may disclose Personal Information where reasonably necessary to protect the rights, property, safety, or security of CERNO, its personnel, clients, or others; to enforce our agreements or policies; to detect, investigate, prevent, or respond to fraud, security incidents, or unlawful activity; or to establish, exercise, or defend legal claims.

CERNO and its service providers may use cookies, web beacons, pixels, local storage, and other similar technologies (collectively, "Cookies") to operate the Website and to collect information regarding its use.

Cookies may be used to:

• enable the operation and functionality of the Website;

• remember user preferences and settings;

• analyze Website traffic and usage patterns;

• improve the performance and security of the Website; and

• support other legitimate business purposes consistent with this Privacy Policy.

CERNO may use third-party analytics providers and similar service providers to help evaluate and improve the performance of the Website. These providers may use Cookies and similar technologies to collect information regarding your interaction with the Website.

Most web browsers allow users to control or disable Cookies through their browser settings. If required by applicable law, CERNO will obtain consent before placing non-essential Cookies on your device.

CERNO retains Personal Information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide services, maintain business records, comply with applicable legal, regulatory, accounting, tax, and professional obligations, resolve disputes, enforce agreements, and protect CERNO's legal interests.

The appropriate retention period for Personal Information depends on the nature of the information, the purposes for which it is Processed, applicable legal requirements, and other relevant circumstances. When Personal Information is no longer required, CERNO will delete, anonymize, or otherwise dispose of it in accordance with applicable law and our records management practices.

CERNO maintains reasonable administrative, technical, and physical safeguards designed and implemented to protect Personal Information against unauthorized access, acquisition, use, disclosure, alteration, or destruction.

Although CERNO employs measures designed to safeguard Personal Information, no method of transmitting or storing information is completely secure. Accordingly, CERNO cannot guarantee the absolute security of Personal Information, and all transmission of information is at the individual's own risk.

Individuals are responsible for maintaining the confidentiality of any credentials used to access services or systems provided by CERNO, where applicable.

CERNO is headquartered in the United States. Personal Information may be collected, transferred to, stored, or Processed in the United States or in other jurisdictions where CERNO, its service providers, or its professional advisers operate.

The data protection laws of these jurisdictions may differ from those of your country or place of residence and, in some cases, may provide a different level of protection.

Where required by applicable law, CERNO will implement appropriate safeguards to protect Personal Information transferred across international borders.

Subject to applicable law, you may have certain rights regarding the Personal Information CERNO Processes about you. Depending on your jurisdiction, these rights may include the right to:

• request access to Personal Information CERNO Processes about you;

• request correction of inaccurate or incomplete Personal Information;

• request deletion of Personal Information, subject to applicable legal exceptions;

• request restrictions on, or object to, certain Processing activities;

• request a copy of Personal Information in a portable format, where applicable;

• withdraw consent where Processing is based on consent; and

• submit a complaint to a competent supervisory or regulatory authority, where permitted by applicable law.

CERNO will respond to requests in accordance with applicable law. To exercise any available privacy rights, please contact CERNO using the information provided in the Contact Information section of this Privacy Policy.

CERNO may request additional information to verify the identity of an individual before responding to a request where permitted or required by applicable law.

If you are a California resident, you may have certain rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CPRA"), subject to applicable exceptions and limitations.

Depending on applicable law, California residents may have the right to:

• know the categories of Personal Information CERNO has collected, used, disclosed, or retained about them;

• request access to specific pieces of Personal Information CERNO maintains about them;

• request correction of inaccurate Personal Information;

• request deletion of Personal Information, subject to applicable legal exceptions;

• request information regarding the categories of third parties to whom Personal Information has been disclosed;

• request a copy of Personal Information in a portable format, where applicable; and

• not be discriminated against for exercising rights provided under the CPRA.

CERNO does not sell Personal Information or share Personal Information for cross-context behavioral advertising, as those terms are defined under the CPRA.

California residents wishing to exercise their rights under the CPRA may contact CERNO using the information provided in the Contact Information section of this Privacy Policy. CERNO may request additional information to verify the identity of the requesting individual before processing a request, as permitted by applicable law.

If you are located in the European Economic Area ("EEA") or the United Kingdom ("UK"), and CERNO Processes your Personal Information in circumstances where applicable data protection laws apply, you may have certain rights under those laws, including the General Data Protection Regulation ("GDPR") and the UK GDPR.

Subject to applicable law, these rights may include the right to:

• request access to Personal Information CERNO Processes about you;

• request correction of inaccurate or incomplete Personal Information;

• request deletion of Personal Information in certain circumstances;

• request restriction of Processing in certain circumstances;

• object to certain Processing activities;

• request the transfer of Personal Information in a portable format, where applicable;

• withdraw consent where Processing is based on consent, without affecting the lawfulness of Processing conducted before such withdrawal; and

• lodge a complaint with the competent data protection authority in your jurisdiction.

CERNO will respond to requests in accordance with applicable law. To exercise any available rights, please contact CERNO using the information provided in the Contact Information section of this Privacy Policy. CERNO may request additional information to verify the identity of the requesting individual before responding to a request.

CERNO's Website and services are intended for business and professional audiences and are not directed to children under the age of 13.

CERNO does not knowingly collect Personal Information from children under the age of 13. If CERNO becomes aware that it has collected Personal Information from a child under the age of 13 without appropriate authorization or as otherwise permitted by applicable law, CERNO will take reasonable steps to delete such information.

If you believe that a child under the age of 13 has provided Personal Information to CERNO, please contact us using the information provided in the Contact Information section of this Privacy Policy.

The Website may contain links to third-party websites, platforms, or services that are not owned or controlled by CERNO.

This Privacy Policy applies solely to CERNO's Processing of Personal Information. CERNO is not responsible for the privacy practices, content, security, or policies of any third-party websites or services. Individuals should review the applicable privacy policies of any third-party websites they visit.

CERNO may update this Privacy Policy from time to time to reflect changes in applicable law, our business practices, or other operational requirements.

When this Privacy Policy is updated, CERNO will revise the Effective Date at the beginning of this Privacy Policy. Any changes will become effective upon publication unless otherwise required by applicable law.

Questions, requests, or concerns regarding this Privacy Policy or CERNO's Processing of Personal Information may be directed to:

CERNO Global, Inc.

Email: cerno@cernoglobal.com

Website: www.cernoglobal.com

If applicable law provides you with specific privacy rights, CERNO will respond to requests in accordance with applicable law after verifying the identity of the requesting individual where appropriate.