Privacy POLICY

Force 5, Inc. (“We,” “Us” or “Our”) is committed to safeguarding your privacy and ensuring that
you continue to trust us with your personal information.

Customarily, we collect personal information only directly from you (contact data, payment,
delivery details, etc.). We will tell you what personal information is mandatory when interacting
with our platform.

In specific cases, personal information about you is collected by us automatically. You may also
provide personal information about others. If so, you are responsible for the entire data you
provide to us (and we assume that you are authorized to give such data).

We will collect your personal information only with a specific purpose in mind (processing an
Order, sending you marketing communication, etc.).

You must be older than 13 years to use our services. If you reside in the EU, you must be older
than 16 years. Children’s personal information is cautiously processed only with specific
safeguards.

In order to process your Order, we will share your personal information with our partners only as
described in this policy.

You have specific rights in respect of data protection and we foster an environment facilitating
their exercise (right to access, rectify, object, delete, or receive your personal information, or to
lodge a complaint).

If you are residing in the European Union, your personal information may be transferred outside
the European Union or the European Economic Area.

We have implemented adequate safeguards to secure your personal information and maintain
specific retention periods to ensure your data is not kept longer than necessary for the stated
purpose.

We have a dedicated point of contact for any privacy matters (privacy@Force5.com).

Any questions you might have on the topic of personal information can be directed to
privacy@Force5.com. All requests will be responded to as required by applicable law. Please
note that delays in implementing your options may occur due to technical reasons.

INFORMATION WE COLLECT

Customarily, we collect personal information only directly from you (contact data, payment,
delivery details, etc.). We will tell you what personal information is mandatory when interacting
with our platform.

As our customer or prospective customer, you may provide us with contact data such as your
name, surname, postal or email addresses, and phone number; transaction details such as
information about the Products/Services you purchase, credit card number and other payment
details; renewal options; and geo-location data of your mobile or other device, including GPS-
based, Wi-Fi-based, or cell-based location information. We will indicate which information is
mandatory.

Even if you are not a customer, you may provide us with contact data — for example, when you
set up a QR code for quickly registering at one of our kiosks or an account with Force 5, Inc., or
when you enlist in our marketing communications.

We will interact with you (a) online, (b) offline, or (c) when you interact with online targeted
content (such as advertisements) that we or our service providers present to you via third-party
websites or applications.

In specific cases, personal information about you is collected by us automatically.

We may collect personal information about you via automated means (such as cookies) when
you interact with our ads, applications, or visit our website. In such cases, personal information
we collect may include IP address, browser type, operating system, mobile device identifier,
geographical area, and referring URLs.

You may also provide personal information about others. If so, you are responsible for the entire
data you provide to us, and we assume that you are authorized to give such data. In such
cases, it is your responsibility to obtain prior authorization from those individuals.

HOW WE USE YOUR INFORMATION

We will collect your personal information only with a specific purpose in mind (processing an
Order, sending you marketing communication, etc.).

Our focus is to process your personal information only for specific purposes that allow us to
serve you in the best possible manner, or otherwise to manage an interaction with us.

Force 5, Inc. may store and use your personal information, and may share your personal
information with Force 5, Inc. affiliates or with third parties, in order for Force 5, Inc., its affiliates,
or third parties to:

  • process an Order from you, including processing your online payment and notifying you
    of the Order status;
  • invoice you for the Products or services ordered by you;
  • deliver the Products ordered by you;
  • support our intent to maintain and improve the security of your Order and transactions
    (e.g., by applying anti-fraud filters);
  • register your purchase with the Merchant (for warranty, technical support, or other purposes);
  • provide you with technical and client support;
  • inform you about Product upgrades, special offers, other products, services, and
    information (including from third parties), if you have opted to receive such
    communications;
  • support our intent to show you the most relevant content and improve the usability of our
    website;
  • provide you with access to restricted areas of the website;
  • comply with legal requirements;
  • enforce the terms and conditions of this Agreement, including the investigation of
    potential violations; or
  • for any other lawful purposes.

Depending on the relationship you have with us, processing necessary to fulfil our legitimate
interests may include: notifying you about account or service activity, requesting your feedback,
creating and maintaining your profile, and protecting against, identifying, and preventing abuse,
fraud, and other types of crime, claims, and other liabilities. You are entitled to object to such
processing, and we will review your request and respond to it on a case-by-case basis.

Some data, such as the types of services used and aggregate usage statistics, may be used by
Force 5, Inc. for statistical, marketing, promotional, or other lawful purposes. This kind of
information is collected in aggregate or statistical form, without identifying any user individually.

In any case, we will not subject you to a decision based solely on automated processing that
produces legal effects concerning you or similarly significantly affects you, unless you have
explicitly consented to the processing, the processing is necessary for entering into or
performance of a contract between you and us, or when we are legally required or entitled to
use your personal data in this way.

You must be older than 13 years to use our services. If you reside in the EU, you must be older
than 16 years in order to engage with our platform.

We do not knowingly solicit or collect personal information from children below the applicable
age threshold. If we discover that we have accidentally collected personal information from a
child below this age, we will remove that information from our records as soon as reasonably
possible. For EU residents, explicit consent from a parent or custodian is required where
applicable.

SHARING OF YOUR INFORMATION

In order to process your Order, we will share your personal information with our partners only as
described in this policy.

Force 5, Inc. may share your personal information with third parties only in the following
circumstances:

Affiliates: We may provide your personal information to affiliates or related companies for
legitimate business purposes.

Merchants and their affiliates or partners: Force 5, Inc., to fulfill an Order, may share your
personal information for the purpose of processing your Order.

Service Providers: Force 5, Inc. may engage service providers, consultants, external partners,
agents, or contractors to provide services on its behalf, including administering our media and
services available to you. These third parties may access or otherwise process your personal
information in the course of providing these services. Force 5, Inc. requires such third parties to
comply with all relevant data protection laws and security requirements in relation to your
personal information, by way of a written agreement.

Public Authorities: Force 5, Inc. may disclose your personal information if required to do so by
law, or if in our good faith judgment such legal disclosure is reasonably necessary to comply
with legal processes or respond to any claims.

Some of our services are provided through sites that bear our partners’ or suppliers’ names and
trademarks and are not in our control. This website may also contain links or other devices that
take you to third-party websites. We are not responsible for any aspect of those other websites,
including their privacy practices, products, services, or content. This Privacy Policy does not
apply to such other websites.

YOUR RIGHTS

You have specific rights in respect of data protection and we foster an environment facilitating
their exercise (right to access, rectify, object, delete, or receive your personal information, or to
lodge a complaint).

You have the right to:

  • access your personal information, rectify it, restrict or object to its processing, or request
    its deletion;
  • receive the personal information you provided to us, or transmit it to another company;
  • withdraw any consent previously provided;
  • opt out of certain collection or uses of your personal information, including the use of
    cookies and similar technologies, the use of your personal information for marketing
    purposes, and its use for data analysis;
  • where applicable, lodge a complaint with your supervisory authority.

You can decide whether to provide your personal information to Force 5, Inc., but if you do not
provide certain information, you may not be able to make purchases, enlist services, or access
certain options on the website or through other means.

If you choose to receive communications regarding service information, special offers, or
marketing, we may add your personal information to our email database. You may later
unsubscribe from such communications by following the unsubscribe directions included in our
communications.

DATA TRANSFERS

If you are residing in the European Union, your personal information may be transferred outside
the European Union or the European Economic Area.

Personal information provided to Force 5, Inc. is primarily processed and stored on servers
located within the United States. We may change the location of these servers from time to
time; however, personal information will continue to be protected in accordance with this Privacy
Policy.

Your personal information may be transferred to persons within the European Union,
Switzerland, or to persons within other countries whose legislation may or may not ensure an
adequate level of protection. We will endeavor to comply with the laws of the country from which
your personal information was transferred where those laws provide greater protection.

DATA SECURITY AND RETENTION

We have implemented technical and organizational security measures designed to protect your
personal information against unauthorized access, disclosure, alteration, and destruction. These
measures include, but are not limited to, access controls, encryption of data in transit and at
rest, and regular security assessments.

We retain your personal information only for as long as necessary to fulfil the purposes for
which it was collected, including compliance with legal, regulatory, and business requirements.
Our general retention periods are as follows:

  • Account and contact information: retained for the duration of the customer relationship and for up to 7 years thereafter for legal and business purposes.
  • Transaction and service records: retained for up to 7 years in accordance with applicable
    legal and tax requirements.
  • Marketing and communications data: retained until you opt out or for up to 3 years from
    the date of last engagement, whichever is earlier.
  • Website usage and analytics data: retained for up to 2 years.
  • Security and access logs: retained for up to 1 year.

When personal information is no longer required, we anonymize or securely delete it in
accordance with our internal data retention policy.

CONTACT US

We have a dedicated email address for any privacy matters (privacy@Force5.com).

To exercise your rights, please submit a written request to Force 5, Inc. at privacy@Force5.com
or by mail to the applicable Force 5, Inc. office identified in the “Contact Us” section of the
website.

If you believe that Force 5, Inc. has not complied with this Privacy Policy with respect to your
personal information, please submit a detailed complaint to privacy@Force5.com. We will
promptly investigate your complaint and take all measures we deem necessary to remedy
issues we determine to be justified.

All requests and complaints will be responded to within one month of receipt, or longer where
permitted by law. Please note that implementing your request may take additional time due to
technical reasons. During this period, we may continue to process your personal information
based on your prior preferences.

If you have any questions about this Privacy Policy, please send your inquiry to
privacy@Force5.com or to the applicable office identified in the “Contact Us” section of the
website.

Force 5, Inc. reserves the right to change this Privacy Policy at any time by posting notice of the
changes on the website. The “Last Updated” date at the top of this page will reflect the date of
any material changes. We encourage you to review this policy periodically.

GATEKEEPER FACIAL RECOGNITION FEATURE & PRIVACY

The Gatekeeper Facial Recognition Feature is one of the ways to authenticate an identity to be
checked in and out of the Enterprise Gatekeeper Visitor Management Platform using a
Gatekeeper Client/App and the device’s camera.

The Facial Recognition Feature can be used to authenticate an identity using the Gatekeeper
App and the device’s camera. The feature determines whether the person in front of the camera
is an enrolled user. If they are enrolled, the Gatekeeper app will allow them to be checked in or
out of the Gatekeeper Visitor Management Platform and will determine their access privileges
within the application.

The Facial Recognition Feature data — including mathematical representations of the face — is
encrypted and protected with a key. This data may be refined and updated through use of the
feature to improve recognition accuracy.

The encrypted facial recognition data is stored on the enterprise servers of companies licensed
to use the Gatekeeper Visitor Management Platform and is encrypted both in transit and at rest.
Force 5 will not share this data with any third parties without your consent.

Biometric data retention periods are determined by the regulatory requirements applicable to the
Gatekeeper Licensed Company and the jurisdiction in which the platform is deployed. In all
cases, biometric data will not be retained beyond the period reasonably necessary for the
purpose for which it was collected. For users subject to state biometric privacy laws (including
but not limited to the Illinois Biometric Information Privacy Act), biometric data will be destroyed
within the timeframes required by applicable law, or within 3 years of the user’s last interaction
with the platform, whichever is earlier. The Gatekeeper Licensed Company is responsible for
compliance with applicable biometric data regulations within their jurisdiction.

You may also contact the Gatekeeper Licensed Company directly to request the removal of
your biometric data.

YOU HAVE CONTROL OVER THE FACIAL RECOGNITION FEATURE

If you choose to enroll in the Facial Recognition Feature, you may disable or remove it at any
time. To remove your facial recognition data, navigate to your Edit Identifiers section and press
the Remove button next to Facial Identifier. Doing so will delete all Facial Recognition Feature
data from the enterprise servers, including all mathematical representations of your face.

GOVERNING LAW

This Privacy Policy is governed by and construed in accordance with the laws of the State of
Florida, without regard to its conflict of law provisions. Any disputes arising under this Privacy
Policy shall be subject to the exclusive jurisdiction of the courts located in Miami-Dade County,
Florida.