Privacy Policy General This website (the “Sites”) is hosted by CompoSecure, L.L.C., a Delaware limited liability company (“Company”). This Privacy Policy describes the types of information we collect on the Sites, how we use such information and to whom and under what circumstances we may disclose it. This Privacy Policy applies only to this website (composecure.mysites.io.flywheelstaging.com), our mobile sites, and our use of social media sites (collectively, the “Sites”), and any other personal information obtained when you call, email, or otherwise communicate with Company. By accessing the Sites on any computer, mobile phone, tablet, or other device (collectively, “Device”) or otherwise interacting with Company, you agree to the terms of this Privacy Policy. If you do not agree to the policy, please do not use the Sites. We may modify this Privacy Policy at any time, and will post the current version on the Sites. We encourage you to periodically review our Privacy Policy to stay informed about how we are using the information we collect. Information That You Give Us For the 12-month period prior to the date of this Privacy Policy, we explain here what categories of personal information we have collected, where we got it from, and with whom we have shared it: Category of Personal Information Collected Source Purpose for Collection Categories of Recipients Contact information: such as name, email address, business or personal address, and phone number. From visitors to the Sites call us, sign-up for emails or another service, or otherwise interact with us. To communicate with and respond to visitors and our customers about the products we sell or the work we do for them, including verification of identity or to meet legal obligations. We may share this information with select marketing, information technology, or other service providers and partners. Browsing information: such as your IP address, MAC address or other device identifier, HTTP Referrer information, the kind of browser or computer you use, pages and content that you visit on the Sites, what you click on, the state and country from which you access the Sites, date and time of your visit, and web pages you linked to our Sites from. Our Sites and your interactions with the Sites, including through the use of cookies and other tracking technologies explained further below. To evaluate usage of the Sites and improve performance and our services; to protect the security and integrity of the Sites and our business, such as preventing fraud, hacking, and other criminal activity or to meet legal obligations. Our service providers who help us with fraud protection and website analytics. In some jurisdictions, , such as the European Union and United Kingdom, individuals may have the right to opt-in or withdraw consent for certain uses. If you reside in such jurisdictions, you may have additional rights which are detailed below, “Access, Correction and Deletion.” Information We Collect Automatically When you visit the Sites, we may collect certain information from you, including your Internet Protocol (IP) address, MAC address, browser type, operating system, device-identifying information, the specific web pages visited immediately preceding your connection, and the domain name from which you accessed the Sites. In addition, we may collect information about your browsing behavior, such as the date and time you visit the Sites, the areas or pages of the Sites that you visit, the amount of time you spend viewing the Sites, the number of times you return to the Sites and other clickstream data. We may also use non-personal or aggregated information for statistical analysis, research, and other purposes. Like many commercial websites, we analyze how visitors use our Sites through what is known as “cookie” technology or similar tracking tools. A cookie is a small text file that is placed on your computer when you access the Sites and allows us to recognize you each time you visit the Sites. We may use cookies to: (1) allow you to use the Sites without having to re-enter your user name and password; (2) enhance or personalize your Sites usage and shopping experience; (3) monitor Sites usage; (4) manage the Sites; and (5) improve the Sites and our products and services, including providing you with interest-based ads. For more information on our advertising, see below: “Interest-Based Advertising.” If you choose, you can set your browser to reject cookies or you can manually delete individual cookies or all of the cookies on your computer by following your browser’s help file directions. However, if your browser is set to reject cookies or you manually delete cookies, you may have some trouble accessing and using some of the pages and features that are currently on our Sites, or that we may put on our Sites in the future. Note that browser-management tools for cookies are outside of our control and we cannot guarantee their effectiveness. We may combine the information we collect through cookies, web beacons, or other technology tools with other information we have collected from you or information from other sources. Disclosure of Information We may disclose information collected from and about you as follows: (1) to our related companies and service providers, to perform a business, professional or technical support function for us; (2) to our business, sales and marketing partners and affiliates, advertisers or other third parties, who may contact you with their own offers; (3) as necessary if we believe that there has been a violation of the Sites Terms of Use or of our rights or the rights of any third party; (4) to respond to legal process (such as a search warrant, subpoena or court order) and provide information to law enforcement agencies or in connection with an investigation on matters related to public safety, as permitted by law, or otherwise as required by law; and (5) in the event that our company or substantially all of its assets are acquired, your personal information may be one of the transferred assets. We may also disclose your personal information with your express consent. We may share aggregate, non-personally identifiable information about Sites users with third parties. Please note that if you voluntarily submit any personal information for posting on the Sites, such as a review or a blog post, the information becomes publicly available and can be collected and used by others, so you should use care before posting information about yourself online. Interest-Based Advertising We may use third-party advertising companies that use tracking technologies to serve our advertisements across the Internet. These companies may collect information about your visits to the Sites and other websites and your interaction with our advertising and other communications. These advertising companies serve ads on behalf of us and others on non-affiliated sites, and some of those ads may be personalized, meaning that they are intended to be relevant to you based on information collected about your visits to the Sites and elsewhere over time. Other companies may also use such technology to advertise on our Sites. You have the choice to tell us not to collect and use this information, and in some jurisdictions, we will only engage in interest-based advertising if you opt-in. If you would like more information about this practice and to know your choices concerning interest-based ads, visit: http://www.networkadvertising.org/choices/ www.aboutads.info/choices Access, Correction, & Deletion We respect your right to access and correct your personal information. You may exercise your rights, subject to applicable laws, to request that we delete or restrict access to your personal data. We may need to retain it for legally permitted purposes and this will be explained to you if necessary. If you need assistance correcting or updating your personal information, or would like to request that we delete your personal information, please contact us using the contact information detailed in the “Contact Us” section below. Retention of Personal Information Personal information that we collect, access or process will be retained only as long as necessary for the fulfilment of the purposes for which it was collected, unless otherwise provided in agreements between you and Company or as required or authorized by law. Personal information that is no longer required to fulfill the identified purposes will be destroyed, erased or made de-identified. Security We maintain reasonable and appropriate measures designed to maintain information we collect in a secure manner. We have taken certain physical, electronic, and administrative steps to safeguard and secure the information we collect from visitors to the Sites. Even though we follow reasonable procedures to try to protect the information in our possession, no security system is perfect and we cannot promise, and you should not expect, that your information will be secure in all circumstances. Children The Sites are not directed to children, nor do we knowingly collect any personal information from children under the age of thirteen without verifiable parental consent. If you believe that a child has provided personal information to us, please contact us promptly as described below, and we will endeavor to investigate and delete such information from our systems. Third Party Websites The Sites may contain links to third-party websites, such as social media sites like Facebook and Twitter, which may have privacy policies that differ from our own. We are not responsible for the activities and practices that take place on these websites. Accordingly, we recommend that you review the privacy policy posted on any external site before disclosing any personal information. Please contact those websites directly if you have any questions about their privacy policies. Changes to This Privacy Policy We may change this privacy policy from time to time, including as required to keep current with rules and regulations, new technologies and security standards. When we do, we will post the change(s) on our Sites. If we change the policy in a material and retroactive manner, we will provide appropriate notice to you. Your California Privacy Rights California law permits our customers who are California residents to request certain information about our disclosure of personal information to third parties for their own direct marketing purposes during the preceding calendar year. This request is free and may be made once a year. To make such a request, please write to us at the following address: General Counsel, CompoSecure, L.L.C., 309 Pierce Street, Somerset, NJ 08873 (USA). Currently, CompoSecure is not required to comply with the California Consumer Privacy Act (CCPA). If you have questions about our privacy practices, please feel free to contact us. Right to Lodge Complaints We are transparent about the ways in which we collect and use personal information, and welcome your questions and concerns. If you have any concern or complaint about the way we handle your personal information, please contact us as described below. To the extent you believe we have not addressed your concerns or otherwise choose to do so, you have the right to lodge a complaint with a supervisory authority in the country where you reside and/or the United States. You may contact the US Federal Trade Commission regarding your concerns. For more information, please see https://www.ftc.gov/faq/consumer-protection/submit-consumer-complaint-ftc. Visitors from Outside the United States—Cross-Border Transfer The Sites are hosted in the United States. If you are visiting the Sites from outside the United States, your information may be transferred to, stored and processed in the United States or other countries in accordance with this Privacy Policy. The data protection and other applicable laws of the United States or other countries may not be as comprehensive as those laws or regulations in your country or may otherwise differ from the data protection or consumer protection laws in your country. Your information may be available to government authorities under lawful orders and law applicable in such jurisdictions. By using the Sites and/or providing personal information to us, you consent to transfer of your information to our facilities as described in this Privacy Policy. Contact Us If you have questions or concerns about this Privacy Policy or how we collect and use the information of our customers, you can contact us by sending a letter to us at the following address: General Counsel, CompoSecure, L.L.C., 309 Pierce Street, Somerset, NJ 08873 (USA) or by sending an email to: legal@composecure.com or by calling us on the telephone at 908.518.0500, Extension 2540. If we need, or are required, to contact you concerning any event that involves your information, we may do so by email, telephone, or mail. This Privacy Policy was last updated on November 11, 2020. Stay in the know. Get updates on product releases and all things CompoSecure. SUBMIT CONTACT US P: 908.356.8720 E: info@composecure.com LINKS Products About Us Media News INFORMATION Resources Investor Relations Press Inquiries Contact Us Join Our Team Privacy Policy ISO 9001: 2015 CERTIFIED © CompoSecure, L.L.C. All Rights Reserved. 2021