SUSTAINABILITY PRIVACY POLICY Website Privacy Policy Hillenbrand, Inc. and its subsidiaries and affiliates, respect your concerns about privacy. This Privacy Policy (“Policy”) explains how Hillenbrand, Inc. (“Hillenbrand,” “we,” “our” or “us”) collects, uses and discloses your personal information; the choices you have regarding our use of your personal information; and how to contact us regarding our privacy practices. This Policy applies to personal information we obtain about you through www.hillenbrand.com and https://ir.hillenbrand.com/ (“Investor Relations Site”) (collectively, the “Websites”) and personal information we collect about you online, including if you contact us. This Privacy Policy does not apply to personal information obtained through our Careers webpage, which is subject to our Candidate Privacy Notice. Please read this Policy carefully to understand our policies and practices regarding your personal information. If you do not agree with our policies and practices, please do not use our Websites. International Users If you are visiting the Websites from outside the United States, please be aware that Hillenbrand is based in the United States and the information we obtain through the Websites will be transferred to, processed and stored on our servers in the United States. The data protection laws and regulations applicable to your personal information transferred to the United States may be different from the laws in your location. What Personal Information We Collect We may collect personal information about you directly from you, automatically through your use of the Websites or that we receive from others in connection with your use of our Websites. “Personal information” is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. The categories of personal information we collect about you depend on how you interact with us on our Websites. Personal Information You Provide We collect personal information about you that you provide to us such as when you contact us, subscribe to email alerts or request information on our Investor Relations Site. We may collect the following personal information from you: Identifiers, such as your name, email address, physical address, job title, employer, and telephone number. Professional or Employment Information, such as the company your work for. Other Personal Information, such as contact type (e.g., consultant, media) or other information you provide us when you contact us. Some forms on our Websites may require you to provide personal information to submit the form. You may choose not to provide personal information in those cases, but this may prevent you from being able to use certain features of our Websites. Personal Information We Collect Automatically We automatically collect personal information about you when you access or use our Websites. The methods that may be used on our Websites to automatically collect personal information include: Log Information: When your computer or mobile device contacts our web servers (for example, when you visit our Websites), our web servers automatically collect usage information. Such usage information includes information about how our visitors use and navigate our Websites and can include the number and frequency of visitors to each web page as well as the length of their stays, browser type, referrer data that identifies the web page visited prior and subsequent to visiting our Websites, and IP addresses. Cookies and Other Tracking Technologies: Cookies, web beacons and other tracking technologies (“tracking technologies”) may be used to collect information about your interactions with our Websites. Brief descriptions of common tracking technologies are provided below: Cookies: A cookie is a small text file that is stored on your computer’s hard drive or stored temporarily in your computer’s memory. There are two kinds of cookies: those that are “session” oriented and those that are “persistent.” Session cookies make it easier for you to navigate our Websites and expire when you close your browser. Persistent cookies remain longer and help in understanding how you use our Websites and enhance your user experience. Cookies may remain on your hard drive for an extended period of time. Most web browsers accept cookies automatically. You can learn more about cookies and how to delete cookies by visiting http://www.allaboutcookies.org. If you use your browser’s method of blocking or removing cookies, some but not all types of cookies may be deleted and/or blocked and as a result, some features and functionalities of our Websites may not work. Please see “Your Choices” below for information on your choices related to tracking technologies. Flash Cookies: Adobe’s Flash Player is used by many websites that offer video and other interactive content. By default, your use of the Adobe Flash Player generates “flash cookies” (also known as “persistent identification elements” or “local shared objects”), which are data files that are placed on your device via the Adobe Flash plug-in and are locally stored on your device other than in the browser and browser settings won’t control them. The Adobe Flash Player (and similar applications) use flash cookies to remember user settings, preferences and usage similar to the browser cookies referenced above. For information on flash cookies, visit https://www.allaboutcookies.org/manage-cookies/remove-flash-cookies.html. Please see “Your Choices” for information on your choices related to flash cookies. Web Beacons: Our web pages may contain a small graphic image called a web beacon, which is sometimes also called a “clear gif,” that allows us to monitor and collect certain limited information about our users, such as the type of browser requesting the web beacon, the IP address of the computer that the web beacon is sent to and the time the web beacon was viewed. Web beacons can be very small or invisible to the user, but, in general, any electronic image viewed as part of a web page can act as a web beacon. We may use web beacons to count visitors to our web pages or to monitor how our users navigate our Websites. We may use web beacons to compile aggregate statistics about our Websites. We may automatically collect the following personal information from you in connection with your use of our Websites: Direct Identifiers, such as your IP address. Internet Activity Information, such as information about your browser type, device used to access our Websites, operating system and data regarding network-connected hardware (e.g., computer or mobile device) as well as information regarding your interactions with pages you visit on our Websites. How We Use Personal Information We may use your personal information to: Provide products and services you requested, including engaging vendors that support those efforts. Communicate with you, including answering your questions, responding to your requests for information and sending you email alerts if you have subscribed to such alerts. Improve our Website, including understanding who is visiting our Websites; analyzing how our Websites are being accessed and used; and improving the functionality of our Websites. Maintain the security of our Websites, including detecting security incidents; protecting our Websites against fraudulent and illegal activity; and enforcing our terms of service. Comply with our legal obligations and respond to legal proceedings, including establishing, exercising or defending legal claims. How We Share Personal Information We may share your personal information in the following circumstances: With your consent to do so or at your direction. With our subsidiaries and affiliates. With our business partners and vendors to the extent that they are assisting us with fulfilling your request or providing products or services. Examples include vendors providing services related to marketing and promotional material distribution, investor relations, advertising and data storage. If we believe such disclosure is necessary. For example, to comply with relevant laws or to respond to a subpoena, warrant or court order served on us; to respond to valid requests by government agencies, including law enforcement authorities; if we believe your actions are inconsistent with our terms of service and applicable terms or policies; to protect the rights, property, life, health, security or safety of Hillenbrand, its employees, the Websites and its users or any third party; or for the establishment of defenses or claims in any legal action or dispute involving Hillenbrand or any of its officers, directors, employees, agents, contractors or partners. In the event we initiate a transfer or assignment of all or a portion of our business or assets (e.g., further to a sale, merger, consolidation, change of control, reorganization, bankruptcy or any other business transaction, including negotiation and due diligence of such transactions), we reserve the right to disclose any information we collect about you or from you. You acknowledge that such transfers may occur and are permitted by and subject to this Policy. Social Features Certain functionalities on our Websites permit interactions that you initiate between the Websites and third-party services, such as social networks (“Social Features”). Examples of Social Features include features enabling you to “like” or “share” our content and features that otherwise connect the Websites to a third-party service (e.g., to pull or push information to or from the Websites). If you use Social Features, and potentially other third-party services, information you post or provide access to may be publicly displayed by the third-party service you use. Also, both Hillenbrand and the third party may have access to information about you and your use of the Websites and the third-party service. Analytics We use analytics services, such as Google Analytics, which use cookies and other tracking technologies to collect information to analyze your use of our Websites. The information collected by the tracking technologies about your interactions with our Websites is used to assess how often you visit our Websites, what pages you view when you visit our Websites and what other websites you visited before coming to our Websites. For more information on Google’s privacy practices for Google Analytics, please visit https://support.google.com/analytics/answer/6004245. You may prevent Google Analytics from recognizing you on our Websites by deleting or disabling cookies from our Site. For more information, see “Your Choices” below. Security We take precautions — including administrative, technical, and physical measures — to safeguard your personal information against loss, theft, and misuse, as well as unauthorized access, disclosure, alteration, and destruction. Although we use reasonable efforts to safeguard personal data, we cannot guarantee the absolute security of personal data obtained or stored electronically. Links to Third-Party Websites and Services Our Websites may contain links to other websites or services that are not controlled by us; these links are provided for your convenience only. We are not responsible for any third party’s data collection or privacy practices and we encourage you to review the privacy policies or notices posted on these third-party websites for further information. Children The Websites are not directed towards children under 13 years of age nor do we knowingly collect information from children under 13 years of age. Your Choices Unsubscribe from Email Alerts Should you receive an email alert from us, you may unsubscribe from receiving additional email communications by following the unsubscribe instructions in the emails we send. Ability to Opt-Out of Tracking Technologies Regular cookies generally may be disabled or removed using tools available as part of most commercial browsers, and in some instances blocked in the future by selecting certain settings. You can learn more about cookies and how to block cookies on different types of browsers by visiting http://www.allaboutcookies.org. Also, tools from commercial browsers may not be effective with regard to Flash cookies (also known as locally shared objects), HTML5 cookies or other tracking technologies. For information on disabling flash cookies, visit https://helpx.adobe.com/flashplayer/kb/disable-local-shared-objects-flash.html. Please be aware that if you disable or remove these technologies, some parts of our Websites may not work and when you revisit our Websites, your ability to limit browser-based tracking technologies is subject to your browser settings and limitations. “Do Not Track” Your browser settings may allow you to transmit a “Do Not Track” signal when you visit various websites. Like many websites, our Websites are not designed to recognize “Do Not Track” signals. California Residents – Privacy Notice California residents have the privacy rights listed below. The rights granted under the California Consumer Privacy Act of 2018 (CCPA) and Shine the Light are not the same. To exercise your rights, you will need to follow the directions specific to each law. California Consumer Privacy Act – Consumer Privacy Notice This portion of the Policy describes how we comply with CCPA, with respect to California residents (“consumers”). Depending on your relationship with Hillenbrand, you may not have any or all of the privacy rights listed below. Collection, Use and Disclosure of Your Personal Information in the Past 12 Months The CCPA requires that we make certain disclosures about our general collection, use and disclosure of California consumer personal information over the past 12 months. Accordingly, in the past 12 months: We collected the categories of personal information detailed in “What Personal Information We Collect” above. We did not sell any personal information, as we understand the term “sale” in the CCPA and its implementing regulations. We disclosed to the entities described in “How We Share Personal Information,” the following categories of personal information: Identifiers, Commercial Information, Geolocation data, Professional or Employment Information. California Privacy Rights You may have the following privacy rights under the CCPA: Request to Know. You may have the right to request to know the following information about our personal information practices over the past 12 months: (i) the categories of personal information we collected about you; (ii) the categories of sources from which we collected the personal information about you; (iii) the categories of third parties with which we share personal information, (iv) the categories of personal information we sold or disclosed about you and for each category, the categories of third parties to which we sold or disclosed that particular category of personal information; (v) our business or commercial purpose for collecting or selling your personal information; and (vi) the specific pieces of personal information we collected about you. Should this right apply to you, then you may exercise your right to request to know twice a year, free of charge. If we are unable to fulfill your request to know, we will let you know the reason why. Request to Delete. You may have the right to request that we delete the personal information that we have collected from you. We may deny your request under certain circumstances, such as if we need to retain your personal information to comply with our legal obligations or if retaining the information is necessary to complete a transaction for which your personal information was collected. If we deny your request to delete, we will let you know the reason why. Right to Non-Discrimination. If you choose to exercise any of these rights, we will not discriminate against you in any way. If you exercise certain rights, understand that you may be unable to use or access certain features of our Websites. If you would like to make a California consumer Request to Know or Request to Delete or are an authorized agent of a California consumer who would like to make such a request, contact us at this toll-free number, 1-833-496-1947, or complete our “Privacy Request Form for California Residents” available here. We will take steps to verify your identity before processing your request to know or request to delete. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify that you are the individual about whom we collected personal information. If you have an account with us, we will use our existing account authentication practices to verify your identity. If you do not have an account with us, we will not require you to create an account with us but we may request additional information about you so that we can verify your identity. We will only use the personal information you provide to verify your identity and to process your request, unless you initially provided the information for another purpose. You may use an authorized agent to submit a request to know or a request to delete. When we verify your agent’s request, we may verify both your and your agent’s identity and request a signed document from you that authorizes your agent to make the request on your behalf. To protect our users’ personal information, we reserve the right to deny a request from an agent that does not submit proof that they have been authorized by the California consumer to act on the consumer’s behalf. California Shine the Light California residents may also request information from us once per calendar year about any personal information shared with third parties for the third party’s own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. To request this information, please contact us at HIprivacy@hillenbrand.com or by postal mail to Hillenbrand, Inc., Attn: Legal Department-Privacy, One Batesville Blvd., Batesville, IN 47006. Your inquiry must specify “Shine the Light Request” in the subject line of the email or the first line of the letter, and include your name, street address, city, state and ZIP code. Changes to Our Policy We may make changes to this Policy at any time to reflect our business processes changes and any necessary modifications due to evolving privacy laws and regulations. Changes will be effective immediately upon posting of the revised Privacy Notice, as indicated by the “Last Updated” date at the bottom of this page. We encourage you to review this Policy periodically to be sure you are aware of those changes. If you object to any modification, your sole recourse is to notify us that you do not agree and stop using the Websites. Contact Us If you have any questions regarding our Privacy Policy, you may contact: Hillenbrand, Inc. Attn: Legal Department-Privacy One Batesville Blvd. Batesville, Indiana 47006 Email: HIprivacy@hillenbrand.com Last Updated: May 26, 2021 HILLENBRAND HEADQUARTERS 1 Batesville Blvd Batesville, IN 47006 Phone: +1.812.934.7000 Email: info@hillenbrand.com FI California’s Transparency in Supply Chain Act of 2010 © Copyright 2021 Hillenbrand Inc., All Rights Reserved. Privacy Policy Designed & Developed By Mojo Media Labs