Privacy Policy

This Privacy Policy describes how Pyrite Risk Experts ("Pyrite," "we," "us," or "our") collects, uses, discloses, and protects personal information obtained through our website www.Pyritere.com (the "Site") and related services (collectively, the "Services"). We are a corporation incorporated in the state of Delaware with offices in New Jersey. We operate the Platform, a data and analytics service for eligible institutional and professional investors. This Privacy Policy should be read in conjunction with our Website Terms and Conditions (“Terms of Service”), which are incorporated herein by reference. By accessing or using the Services, you agree to the terms of this Privacy Policy and our Terms of Service.

I. Information We Collect What We May Share

We collect the following categories of personal information:

A. Information You Provide Directly

1. Account Registration Information: When you register for Platform access, we collect your full name and title, business email and mailing address, password, company name, and date of birth for age verification purposes.

2. Payment Information: When you make a purchase, our third-party payment processor Stripe, Inc. ("Stripe") collects payment card information, billing address, and transaction details on our behalf pursuant to a Data Processing Agreement that complies with applicable U.S. requirements. We do not store complete payment card numbers on our systems.

3. Communications: When you contact us at Privacy@PyriteRE.com or through other channels, we collect the contents of your message, contact information, and related correspondence.

4. Investor Eligibility Documentation: Although we do not solicit nor give advice regarding investments, because some of the vendors we use require same, to verify your eligibility for Platform access, we collect the representations and certifications you provide in your Investor Certification Form, including information about income, net worth, assets under management, and professional qualifications. We do not collect or store copies of underlying financial documents unless you voluntarily submit them.

B. Information Collected Automatically

1. Usage Data: We automatically collect information about your interactions with the Services, including for example, pages and data sets viewed, features accessed, timestamps of access; and search inquiries entered through the Platform.

2. Device and Browser Information: We collect device type, operating system, browser type and version, IP address, approximate geographic location, error logs and performance data and unique device identifiers.

3. Account Closure Data: Our operational systems log the date and time of account closure for all closed accounts.

4. Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your use of the Services. For detailed information about our cookie practices, see Section VIII below.

C. Information from and to Third Parties

We may receive information about you from third-party sources, including data analytics providers, and public databases, which we combine with information we collect directly. We do not sell your personal data. We do not share your personal data for advertising or marketing purposes. We share your information only in the following circumstances:

• Payment Processor

Stripe, Inc processes payment card and billing data on our behalf. Stripe's privacy practices are governed by Stripes Privacy Policy, available at https://stripe.com/privacy. Stripe is certified to the PCI DSS Level 1 standard.

• Infrastructure and Technology Providers.

We use cloud infrastructure and technology service providers (such as hosting, e-mail delivery and security services) who process your personal data on our behalf as data processors, subject to contractual data processing agreements that require them to protect your data and use it only for the purposes we specify.

• Professional Advisors

We may share your information with our legal counsel, compliance advisors, auditors, and other professional advisors, subject to professional secrecy and confidentiality obligations.

• Law Enforcement and Regulatory Advisors

We made disclosure personal data and account activity to law enforcement agencies, regulatory authorities, or other governmental bodies where we are required to do so by applicable law, court order, or regulatory requirement, or where we believe disclosure is necessary to protect the rights, property, or safety of Pyrite, our users or the public.

• Business Transfers

In the event of a merger, acquisition, sale of assets or other corporate reorganization, involving Pyrite, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Privacy Policy.

II. How We Use Your Information

We use the personal information we collect for the following purposes:

• Providing Services:

For Platform access and operations: To create and maintain your account, process transactions, deliver requested services, to verify your eligibility and provide customer support.

• Communication:

To send transactional communications, respond to inquiries, and provide service-related notices. You may receive communications at the email address associated with your account.

• Improvement and Analytics:

To analyze usage patterns, diagnose technical issues, and improve the Platform's features and performance, using aggregated and de identified, improve the Services, develop new features, and conduct research.

• Security and Fraud Prevention:

To protect the security and integrity of the Services, detect and prevent fraud, and enforce our Terms of Service.

• Legal Compliance:

To comply with applicable laws, regulations, legal processes, and governmental requests; to respond to lawful requests from law enforcement agencies, regulatory authorities, and other governmental bodies as required or permitted by applicable law.

• Investor Eligibility Recordkeeping:

To maintain records of investor certifications as required by applicable securities laws.

• Business Operations:

To maintain business records, conduct audits, and perform other internal business functions.

III. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

A. Active Accounts: We retain information associated with active accounts for the duration of the account relationship and for seven years following account closure to comply with legal obligations, resolve disputes, and enforce our agreements.

B. Closed Accounts: When you close your account, we log the account closure date in our operational systems. Personal information associated with closed accounts is retained for seven years following the closure date, except where longer retention is required by law or necessary for legitimate business purposes such as fraud prevention, regulatory compliance or litigation.

C. Other periods: Investor eligibility records are retained for five (5) years; communications are retained for three (3) years; usage logs are retained for two (2) years.

IV. Legal Basis for Processing

We process your personal data on the following legal basis:

• Contract performance: process is necessary to provide you with Platform access and Services you have requested.
• Legal obligation: processing is required to comply with securities record keeping, anti- money laundering, tax reporting, and other applicable legal requirements.
• Legitimate interests: processing is necessary for our legitimate business interests, including Platform security, fraud prevention, product development, and efficient business operations, where these interests are not overridden by your rights.
• Consent: where we have separately sought and obtained your consent.

V. Data Security

Pyrite implements industry standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration or disclosure. These measures include encrypted data transmission (TLS), access controls and multifactor authentication, regular security assessments, and contractual security requirements for our service providers.

No method of electronic transmission or storage is completely secure. While we take reasonable precautions, we cannot guarantee the absolute security of your personal data. You're responsible for maintaining the confidentiality of your platform login credentials and must notify us at Privacy@pyritere.com if you become aware of any unauthorized access to your account.

VI. Children's Privacy

The Services are not directed to children under the age of eighteen (18), and we do not knowingly collect personal information from children under 18. We implement age verification controls at registration to prevent children under 18 from creating accounts.

If we learn that we have collected personal information from a child under 18, we will delete that information as quickly as possible. If you believe that we might have information from or about a child under 18, or a minor registered for Platform access, please contact us at Privacy@PyriteRE.com.

VII. Your Privacy Rights

Subject to applicable law, you may have the following rights regarding your personal information:

A. Access and Portability

You may request access to the personal information we hold about you and, where applicable, receive a copy of that information in a portable format.

B. Correction

You may request correction of inaccurate or incomplete personal information.

C. Deletion

You may request deletion of your personal information, subject to certain exceptions where we are required or permitted to retain information under applicable law.

D. Restriction and Objection

You may request that we restrict processing of your personal information or object to certain processing activities, subject to legal limitations.

E. Exercising Your Rights

To exercise any of these rights, please submit a request to Privacy@PyriteRE.com with the subject line "Privacy Rights Request." We will respond to verified requests within 45 days of receipt, with one 45-day extension if necessary.

We may require verification of your identity before processing your request. Verification methods may include matching information provided in the request to information in our records, requiring authentication through your account credentials.

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide proof of authorization, and you must verify your identity directly with us.

F. STATE-SPECIFIC RIGHTS

State specific rights and our California and Nevada Supplemental Privacy Notice follow this general Privacy Policy.

VIII. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies solely for functional and operational purposes.

A. Types of Cookies

1. Essential and Preference Cookies: Required for basic Site functionality, including authentication and security; To remember your display and accessibility preferences within the Platform.

2. Analytics Cookies: Used to understand how users use the Services.

3. Session Cookies: To maintain your authenticated session while you are logged in. These are deleted when you close your browser.

B. Your Cookie Choices

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies. Please note that disabling cookies may limit your ability to use certain features of the Services.

C. Do Not Track Signals

We do not currently respond to Do Not Track signals.

IX. Third-Party Links and Services

The Services may contain links to third-party websites, applications, or services that are not operated by Pyrite. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you access.

X. Data Breach Notification

In the event of a data breach that compromises the security of your personal information, we will notify affected individuals and applicable regulatory authorities as required by law. Notification will be provided by email to the address associated with your account, by posting on the Site, or by other means permitted by law within the timeframes required by applicable breach notification statutes.

Breach notifications will include a description of the incident, types of information involved, steps taken to address the breach, contact information for further assistance, and recommended actions you may take.

XI. International Data Transfers

Pyrite is based in the United states. Your personal data is primarily processed and stored on servers located in the United states. We do not participate in the US-UK Data Bridge or similar adequacy frameworks.

XII. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will notify you by posting the updated policy on the Site with a new effective date, sending an email to the address associated with your account, or providing other prominent notice.

The updated Privacy Policy will be effective thirty (30) days after notice is provided. Your continued use of the Platform after the effective date constitutes acceptance of the updated Privacy Policy. If you do not agree to the updated Privacy Policy, you must discontinue use of the Platform and Services.

We encourage you to review this Privacy Policy periodically.

XIII. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Pyrite Risk Experts Email: Privacy@PyriteRE.com 444 River Road, Fair Haven, NJ 07704

646-844-1789

U.S. STATE PRIVACY RIGHTS

Effective Date: September 1, 2026

Last Updated: September 1, 2026

1. Scope

This U.S. State Privacy Rights Notice supplements the Privacy Policy of Pyrite Risk Experts, Inc. (“Company,” “we,” “us,” or “our”). It applies to residents of U.S. states that have enacted generally applicable consumer privacy laws, including, as applicable, Alabama, California, Colorado, Connecticut, Delaware, Florida, Iowa, Indiana, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont, and Virginia (collectively, the “Covered States”).

This Notice applies only to the extent that:

• The privacy law of a Covered State is effective and applies to the Company;
• You are a resident of that Covered State; and
• The information at issue is within the scope of that law.

The rights described in this Notice are subject to applicable definitions, exceptions, exemptions, thresholds, and limitations. Depending on your state of residence, some rights described below may not be available to you.

For purposes of this Notice, “personal data” includes “personal information” and other substantially equivalent terms defined by applicable state privacy law. Personal data generally means information that is linked or reasonably linkable to an identified or identifiable individual. Personal data generally does not include publicly available, de-identified, or aggregated information or other information excluded from applicable law.

2. Categories of Personal Data We Process

Depending on your interactions with us, we may process the following categories of personal data:

• Identifiers and contact information, such as name, postal address, email address, telephone number, account name, IP address, device identifier, and other similar identifiers;
• Customer and commercial information, such as records of services purchased, obtained, or considered; transaction records; payment information; and customer-service records;
• Internet and electronic activity information, such as browsing history, search history, pages or content viewed, links selected, referring websites, cookie identifiers, device information, and interactions with our website, applications, or communications;
• Geolocation information, such as approximate location derived from an IP address or device information;
• Audio, visual, electronic, or similar information, such as recorded calls, voicemails, photographs, or other content you submit;
• Professional or employment-related information, such as employer, occupation, professional title, and business contact information;
• Inferences, such as preferences, , or characteristics inferred from other data; and
• Other personal data that you voluntarily provide to us.

Additional information about our collection and processing practices appears in the sections of our general Privacy Policy entitled “Section I.”

3. Purposes for Processing Personal Data

We may process personal data to:

• Provide, operate, maintain, and improve our website, products, and services;
• Process and fulfill transactions and requests;
• Create and administer user accounts;
• Communicate with you and provide customer support;
• Personalize content and user experiences;
• Conduct analytics and measure website performance;
• Market services, subject to your applicable choices;
• Detect, investigate, prevent, and respond to fraud, security incidents, unlawful conduct, and misuse;
• Protect our rights, property, systems, customers, personnel, and others;
• Comply with contractual, legal, regulatory, and recordkeeping requirements;
• Establish, exercise, or defend legal claims; and
• Accomplish other purposes disclosed to you at the time of collection or with your consent.

4. Categories of Personal Data Disclosed to Third Parties

We may disclose the categories of personal data described above to:

• Affiliates, subsidiaries, and related companies;
• Hosting, cloud-computing, information-technology, cybersecurity, and website-service providers;
• Payment processors and financial institutions;
• Analytics providers;
• Marketing, and social-media partners;
• Customer-service and communications providers;
• Professional advisers, such as attorneys, accountants, auditors, consultants, and insurers;
• Government authorities, law-enforcement agencies, regulators, courts, and other persons when disclosure is required or permitted by law; and
• Other third parties at your direction or with your consent.

5. Sale of Personal Data and Targeted Advertising

We do not sell personal data for monetary consideration. We also do not process personal data for targeted advertising or share personal data for cross-context behavioral advertising, as those terms are defined by applicable state privacy laws.

6. State Privacy Rights

Subject to applicable law, residents of a Covered State may have one or more of the following rights:

A. Right to Confirm and Access

You may have the right to confirm whether we process personal data concerning you and to access that personal data.

California residents may also have the right to request additional information, including the categories of personal information collected; categories of sources; business or commercial purposes; categories of third parties to whom the information was disclosed, sold, or shared; and the specific pieces of personal information collected.

B. Right to Correct

You may have the right to request correction of inaccuracies in your personal data, taking into account the nature of the data and the purposes for processing it.

This right is not provided under every state privacy law.

C. Right to Delete

You may have the right to request deletion of personal data concerning you.

The scope of this right differs by state. In certain states, the right applies broadly to personal data obtained about you. In other states, including Iowa and Utah, the statutory right may be limited to personal data you provided to us.

We may retain personal data when permitted by law, including when it is reasonably necessary to provide a requested product or service, complete a transaction, protect security, prevent fraud, exercise legal rights, comply with law, or perform certain internal operations.

D. Right to Data Portability

You may have the right to obtain a copy of certain personal data in a portable and, where technically feasible, readily usable format that permits you to transmit the data to another person or entity without unreasonable impediment.

E. Right to Opt Out of Profiling

Residents of certain states may have the right to opt out of profiling performed in furtherance of decisions that produce legal or similarly significant effects. This generally concerns automated decisions affecting matters such as financial or lending services, housing, insurance, education enrollment, employment opportunities, healthcare services, or access to essential goods or services.

WE DO NOT CURRENTLY ENGAGE IN PROFILING THAT PRODUCES LEGAL OR SIMILARLY SIGNIFICANT EFFECTS.

F. Sensitive Data Rights

Residents of certain states may have the right to consent to, opt out of, or limit certain processing of sensitive data. Where required, we will obtain consent before processing sensitive data. California residents may have a separate right to limit certain uses and disclosures of sensitive personal information, as described in our California Supplemental Notice.

G. Right to Information About Third Parties

Residents of certain states, including Oregon, may have the right to request information about third parties to whom we disclosed personal data, subject to applicable limitations.

H. Rights Relating to Profiling Information

Residents of certain states, including Minnesota, may have additional rights to obtain information about certain profiling decisions, including the data used, the principal factors affecting a decision, and the reasons for a decision, where required by law.

I. Right to Nondiscrimination

We will not unlawfully discriminate against you because you exercised an applicable privacy right. For example, we will not unlawfully deny services, charge a different price, provide a different level or quality of service, or retaliate against you solely because you exercised a privacy right.

This provision does not prohibit a legally permitted loyalty, rewards, premium features, discount, or financial-incentive program.

7. How to Exercise Your Rights

You may submit a privacy request by:

• Completing our request form at Privacy@PyriteRE.com;
• Emailing us at Privacy@PyriteRE.com;
• Calling us toll-free at 646-844-1789 or
• Writing to us at 444 River Road, Fair Haven, NJ 07704.

Please identify your state of residence and describe your request with sufficient detail to allow us to understand, evaluate, and respond to it.

We may request information reasonably necessary to authenticate your request and verify your identity. The verification process may vary depending on the nature and sensitivity of the personal data and the type of request. We will use information submitted for verification only to authenticate and process the request and to maintain legally required records.

If we cannot verify your identity, we may be unable to fulfill certain requests. Opt-out requests will not be conditioned on the submission of information beyond what is reasonably necessary to process the opt-out.

We will respond within the period required by applicable law. When permitted, we may extend that period based on the complexity and number of requests, and we will notify you of the extension and the reason for it.

Ordinarily we do not charge a fee to process a privacy request. We may charge a reasonable fee or decline to act if a request is manifestly unfounded, excessive, technically infeasible, or repetitive, to the extent permitted by applicable law.

8. Authorized Agents

To the extent permitted by applicable law, you may designate an authorized agent to submit a privacy request on your behalf.

We may require the agent to provide evidence of written authorization and may require you to verify your identity or directly confirm that you authorized the agent. We will not require direct confirmation when the agent provides a power of attorney that is valid under applicable law.

9. Universal Opt-Out Preference Signals

Where required by applicable law, we process recognized universal opt-out preference signals, such as Global Privacy Control, as requests to opt out of the sale of personal data, sharing of personal information, or processing for targeted advertising.

The signal will apply to the browser or device from which it is sent and, when we can reasonably associate the signal with a known consumer profile, may also apply to that profile. If you use a different browser or device, clear your cookies, or are not logged into an account, you may need to communicate the signal again.

A universal opt-out signal does not submit an access, correction, deletion, or portability request.

10. Appeals

If we decline to act on your request, and the law of your state provides the right to appeal, you may appeal our decision by:

• Emailing Privacy@PyriteRE.com with the subject line “Privacy Request Appeal”.

Your appeal should identify the original request and explain why you believe our decision should be reconsidered. We will respond within the period required by applicable law.

If we deny your appeal, we will provide information about how you may contact the attorney general or other applicable regulatory authority when required by law.

The availability and timing of an appeal depend on your state of residence. Not every Covered State provides a statutory appeal right.

11. Financial Incentives and Loyalty Programs

We do not currently offer a financial incentive, price difference, or service difference in exchange for the collection, retention, sale, or sharing of personal data.

12. Changes to This Notice

We may update this Notice periodically. When we update this policy, the “Last Updated” date identifies when this Notice was most recently revised. If required by law, we will provide additional notice or obtain consent before materially changing our processing practices.

13. Contact Us

Questions about this Notice or our privacy practices may be directed to:

Pyrite Risk Experts, Inc.

444 River Road

Fair Haven, NJ 07704 Email: Privacy@PyriteRE.com Telephone: 646-44-1789

CALIFORNIA SUPPLEMENTAL PRIVACY NOTICE

Effective Date: September 1, 2026 Last Updated: September 1, 2026

1. Scope

This California Supplemental Privacy Notice supplements the Privacy Policy and U.S. State Privacy Rights Notice of Pyrite Risk Experts, Inc. (“Company,” “we,” “us,” or “our”). It applies to personal information of California residents to the extent that the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its implementing regulations (collectively, the “CCPA”) apply to the Company and the information at issue.

Terms defined in the CCPA, including “consumer,” “personal information,” “sensitive personal information,” “business purpose,” “commercial purpose,” “sell,” “share,” and “service provider,” have the same meanings when used in this Notice.

Personal information does not include information excluded from the CCPA, such as certain publicly available, lawfully obtained truthful information that is a matter of public concern, de-identified, or aggregated information.

2. Notice at Collection

At or before collecting personal information, we provide California consumers with notice of:

• The categories of personal information to be collected;
• The purposes for which those categories will be used;
• Whether the information is sold or shared;
• The applicable retention periods or criteria; and
• A link to this Supplemental Notice and any applicable opt-out mechanism.

We will not collect additional categories of personal information or use collected information for materially different, unrelated, or incompatible purposes without providing any notice or obtaining any consent required by the CCPA.

3. Personal Information Collected, Used, and Disclosed

The following table describes the categories of personal information that we may expect to collect in the following 12 months. The examples do not necessarily reflect information that could be collected about every consumer.

4. Retention of Personal Information

We retain each category of personal information for no longer than reasonably necessary for the disclosed purposes.

The applicable retention period depends on factors such as:

• The nature, amount, and sensitivity of the information;
• The purposes for which it was collected or processed;
• The duration of our relationship with the consumer;
• Contractual and operational requirements;
• Applicable statutes of limitation;
• Legal, tax, accounting, and regulatory requirements; and
• The need to prevent fraud, protect security, resolve disputes, and enforce agreements.

5. Sale and Sharing of Personal Information

We do not sell personal information for monetary or other valuable consideration. We also do not share personal information for cross-context behavioral advertising, as “sell” and “share” are defined by the CCPA.

During the preceding 12 months, we have not sold or shared California consumers’ personal information. We do not have actual knowledge that we sell or share personal information of consumers under 16 years of age.

6. Disclosures for Business Purposes

During the preceding 12 months, we have not disclosed the categories of personal information identified in Section 3 to service providers, contractors, affiliates, payment processors, technology providers, professional advisers, government authorities, and transaction parties for the business purposes described in that section.

We require service providers and contractors to handle personal information in accordance with applicable contractual restrictions and legal requirements.

7. California Privacy Rights

Subject to the CCPA, California residents may have the following rights:

A. Right to Know

You may request that we disclose:

• The categories of personal information collected about you;
• The categories of sources from which it was collected;
• Our business or commercial purposes for collecting, selling, or sharing it;
• The categories of third parties to whom we disclosed, sold, or shared it; and
• The specific pieces of personal information collected about you.

B. Right to Delete

You may request deletion of personal information we collected from you, subject to statutory exceptions.

C. Right to Correct

You may request correction of inaccurate personal information maintained about you, taking into account the nature of the information and the purposes for processing it.

D. Right to Limit Use and Disclosure of Sensitive Personal Information

We use and disclose sensitive personal information only for purposes permitted without providing a right to limit under the CCPA, such as providing requested services, maintaining security, preventing fraud, processing transactions, and performing services on behalf of the business.

E. Right to Data Portability

You may request that we provide specific pieces of personal information in a portable and, where technically feasible, readily usable format.

F. Right to Nondiscrimination

We will not unlawfully discriminate against you for exercising a CCPA right. We will not unlawfully deny services, charge different prices, provide a different level or quality of service, or retaliate against an employee, applicant, or independent contractor because that person exercised an applicable right.

8. Submitting a California Request

You may submit a request by:

• Completing our request form at Privacy@PyriteRE.com;
• Emailing Privacy@PyriteRE.com;
• Calling 646-844-1789; or
• Writing to 444 River Road, Fair Haven, NJ 07704.

Please describe your request with sufficient detail. We may require information reasonably necessary to verify your identity and authority to make the request.

Verification requirements will depend on the nature of the request and the sensitivity of the information. We will use information provided for verification only to authenticate and process the request and maintain legally required records.

We will confirm receipt and respond within the periods required by the CCPA. If permitted, we may extend the response period and will notify you of the extension and its reason.

9. Authorized Agents

You may designate an authorized agent to submit a CCPA request. We may require:

• Proof that you authorized the agent to act for you;
• Verification of your identity; and
• Direct confirmation that you authorized the request.

These requirements do not apply when an agent provides a valid power of attorney under applicable California law.

10. Global Privacy Control

We process Global Privacy Control and other opt-out preference signals that meet applicable CCPA requirements as requests to opt out of sale or sharing.

The signal ordinarily applies to the browser or device from which it is sent. If we can reasonably associate the signal with a known consumer profile, we will apply it to that profile as required by law.

11. Financial Incentives

We do not currently offer a financial incentive or price or service difference in exchange for the collection, retention, sale, or sharing of personal information.

12. California “Shine the Light”

California Civil Code § 1798.83 may permit certain California residents to request information concerning disclosures of personal information to third parties for those third parties’ direct-marketing purposes.

We do not disclose personal information to third parties for their own direct-marketing purposes within the meaning of that statute.

13. Contact Information

For questions concerning this California Supplemental Privacy Notice, contact:

Pyrite Risk Experts, Inc.

444 River Road

Fair Haven, NJ 07704

Email: Privacy@PyriteRE.com

Telephone: 646-844-1789

NEVADA PRIVACY RIGHTS

Effective Date: September 1, 2026 Last Updated: September 1, 2026

1. Scope

This Nevada Privacy Rights Notice supplements the Pyrite Risk Experts, Inc. Privacy Policy (“Company,” “we,” “us,” or “our”). It applies to Nevada residents and “covered information” subject to Nevada Revised Statutes Chapter 603A.

For purposes of this Notice, “covered information” includes the following information collected and maintained in an accessible form:

• First and last name;
• Home or other physical address that includes a street name and city or town;
• Email address;
• Telephone number;
• Social Security number;
• An identifier that permits a specific person to be contacted physically or online; and
• Other information concerning a person that is collected online and maintained in combination with an identifier in a form that makes the information personally identifiable.

2. Categories of Covered Information We Collect

Depending on how you interact with us, we may collect:

• Name and contact information;
• Account and login information;
• Transaction and commercial information;
• Payment-related information;
• Device, browser, and online-activity information;
• IP address and other online identifiers;
• Approximate location information;
• Communications and customer-service records; and
• Other information you voluntarily submit through the website.

Our general Privacy Policy provides additional information about the categories of information collected and the purposes for which we use that information.

3. Categories of Third Parties With Whom We May Share Covered Information

We may disclose covered information to:

• Affiliates and related companies;
• Website-hosting, information-technology, cloud-computing, and cybersecurity providers;
• Payment processors and financial institutions;
• Analytics, marketing, and social-media partners;
• Customer service and communications providers;
• Professional advisers, such as attorneys, accountants, auditors, and insurers;
• Government authorities, regulators, courts, and law-enforcement agencies; and
• Other parties at your direction or with your consent.

4. Review and Correction of Covered Information

A Nevada resident may submit a request to review covered information collected through our website and request changes to that information by:

• Completing our request form at Privacy@PyriteRE.com;
• Emailing Privacy@PyriteRe.com; or
• Writing to: 444 River Road, Fair Haven, NJ 07704

We may take reasonable steps to authenticate your identity before providing access or making requested changes.

5. Nevada Sale Opt-Out Right

Nevada law provides a verified-request right to direct an operator not to make a “sale” of certain covered information.

For purposes of this Nevada right, “sale” generally means the exchange of covered information for monetary consideration by an operator to a person for that person to license or sell the information to additional persons. Nevada’s definition contains statutory exceptions and is narrower than the definitions used by certain other state privacy laws.

We do not currently sell covered information as “sale” is defined under Nevada Revised Statutes Chapter 603A. If our practices change, we will honor verified Nevada sale opt-out requests as required by law.

6. Third-Party Tracking

Third parties may collect information about your online activities over time and across different websites or online services when you use our website. Information about our use of cookies and similar technologies and the choices available to you appears in our Privacy Policy at Section VIII.

Our website processes recognized opt-out preference signals as described in our U.S. State Privacy Rights Notice.

7. Material Changes to This Notice

We may revise this Nevada Privacy Rights Notice periodically. We will provide notice of material changes by posting the updated notice on the website and updating the “Last Updated” date.

8. Effective Date

This Nevada Privacy Rights Notice is effective as of the date stated above.

9. Contact Us

Questions or requests concerning this Nevada Privacy Rights Notice may be directed to:

Pyrite Risk Experts, Inc.

444 River Road, Fair Haven, NJ 07704 Email: Privacy@PyriteRE.com

Telephone: 646-844-1789