Enduring Planet Inc. Privacy Policy

Welcome to the Enduring Planet Privacy Policy (the “Policy”). We appreciate you being here, and we recognize that while we all care about our environment, uplifting marginalized communities by supporting diverse founders, and funding great companies, we also care about our personal information, where it’s shared, and how it’s protected. That’s why we’ve put together this easy-to-understand Policy to do just that.

More specifically, this Policy will inform you as to how we look after your personal information when you use our services, and tell you about your privacy rights and how the law protects you.

This Policy applies to personal information we collect, use or disclose, including when you:

• visit the Enduring Planet web site located at www.enduringplanet.com, and associated sub-domains (the “Site”),

• utilize our “Services” (as defined below),

• submit personal information to us,

• apply for a job with us,

• authorize us to obtain personal information from other sources, and

• interact with us (by email, telephone, online or in person).

By visiting the Site you agree to the provisions of our Terms of Use, which is incorporated by reference into this Policy. If you do not agree to the terms of this Policy, please do not use or access the Site or use the Services (defined below).

If you have any questions or concerns regarding our privacy practices, please reach out to us via the email address provided in Section 12 (Contact Us) below.

Brief Overview

You’re busy, and this Policy is, quite frankly, boring. We hope that you take the time to read it in its entirety, but, in the event that you are a human and not a lawyer or a robot, here’s a brief overview:

• We do collect personal information from those who visit our Site and use our Services. We collect this information to operate, and improve, the Site and Services, and such information is shared only with service providers that are absolutely essential for the operation and maintenance of the Site and Services.

• We do NOT, and will NEVER, sell your personal information or use it for any advertising purposes.

• We’re committed to protecting your personal information and take reasonable precautions to do so.

• If you need to delete, amend, or access your personal information, please reach out to us via email (see Section 12 below).

1. Information Collected

We collect and store information that you voluntarily provide to us as well as data related to your use of the Site or Services. We may request that you provide personal information and other information from which your identity is or may be discernible. Please see Section 13 (Categories of Personal (And Other) Information That We Collect and Disclose) below for a list of the information that we collect and/or store.

Such information is collected for the purpose of contacting you with information regarding prospective funding opportunities for your company based on your specified interests (the “Services”). It is solely up to you whether you furnish such information. If you do provide such information, you are thereby consenting to the use of that information in accordance with the policies and practices described in this Policy.

2. Use of Information

Enduring Planet’s mission is to fund growth for climate entrepreneurs to allow them to grow sustainably, remain in control, achieve a higher valuation, and retain greater equity among founders and employees. The main way in which we do that is by investing our own money (we are a non-bank credit investor). We use personal information we collect about a client applying for financing to get the whole picture and to try and make the best investment decision for ourselves and for the client. This internal use includes sharing information among our key stakeholders, including employees, attorneys, and investors.

In addition, we may use the personal information we collect for the following purposes:

• Providing support and services: including to provide our Services, operate our Sites and online services, and interact with you about your application, account or funding; to communicate with you about your access to and use of our Site and Services; to respond to your inquiries; to provide troubleshooting, process and collect your payments; provide technical support; and for other customer service and support purposes.

• Analyzing and improving our business: including to better understand how users access and use our Services and Sites, to evaluate and improve our Sites, Services and business operations, and to develop new features, offerings and services; to conduct surveys and other evaluations (such as customer satisfaction surveys); to monitor consumer interest in our products and Services; to troubleshoot problems that may arise on the Sites; to improve the accuracy of our customer database; to increase our understanding of our customer database; to increase our understanding of our customers; and for other research and analytical purposes.

• Personalizing content and experiences: including to tailor content we send or display on our websites and other Services; to offer location customization and personalized help and instructions; and to otherwise personalize your experiences.

• Securing and protecting our business: including to protect and secure our business operations, assets, Services, network and information and technology resources; to investigate, prevent, detect and take action regarding fraud, unauthorized access, situations involving potential threats to the rights or safety of any person or third party, or other unauthorized activities or misconduct.

• Defending our legal rights: including to manage and respond to actual and potential legal disputes and claims, and to otherwise establish, defend or protect our rights or interests, including in the context of anticipated or actual litigation with third parties.

• Auditing, reporting, corporate governance, and internal operations: including relating to financial, tax and accounting audits; audits and assessments of our operations, privacy, security and financial controls, risk, and compliance with legal obligations; our general business, accounting, record keeping and legal functions; and related to any actual or contemplated merger, acquisition, asset sale or transfer, financing, bankruptcy or restructuring of all or part of our business.

• Complying with legal obligations: including to comply with the law, our legal obligations and legal process, such warrants, subpoenas, court orders, and regulatory or law enforcement requests.

Aggregate and De-identified Data. We may de-identify personal information and create anonymous and aggregated data sets and reports to assess, improve and develop our business, products and services, prepare benchmarking reports on our industry and for other research, marketing and analytics purposes. Such information may also be shared with third parties for other analytical purposes but will not personally identify any individual and therefore is not subject to this privacy policy.

In the event that you do not wish to provide us with the personal information that we collect in accordance with this Privacy Policy, you may not be able to fully utilize the Site and Services.

3. Disclosure of Information

We may share the personal information we collect as follows:

• Service providers: We may disclose personal information with third-party service providers who use this information to perform services for us, such as hosting providers, payment processors, third party user analytics providers, auditors, advisors, consultants, customer service and/or support providers.

• Subsidiaries and affiliates: We may share your personal information with our affiliated companies (i.e., our parent company and other companies under common ownership, control or management with us); they may use such personal information for the purposes set out in this Policy.

• External partners: We may also join together with other businesses to bring selected opportunities to customers or potential customers. For example, we may share client information with external partners who can provide additional financing options. You may opt out of such sharing as explained in Section 5 (Your Rights) below.

• Legal compliance: We may share personal information where necessary to comply with a law, legal obligation or legal process, such as in response to a valid court order, subpoena, or government investigation. In addition, we may share certain personal information in order to protect the rights, property and safety of our company and/or others, in support of our compliance with tax or corporate governance legislation, to assist law enforcement, for debt collection purposes, for loss and fraud prevention, or to regulatory or other governmental authorities with jurisdiction over us or our affiliates.

• Business transfers: We may disclose and/or transfer personal information as part of any actual or contemplated merger, sale, transfer of assets, acquisition, financing and/or restructuring of all or part of our business, bankruptcy or similar event, including related to due diligence conducted prior to such event where permitted by law.

• Protect our rights: We may disclose personal information where we believe it necessary to respond to claims asserted against us, to enforce or administer our agreements and terms, for fraud prevention, risk assessment, investigation and/or to protect the rights, property or safety of Enduring Planet or our affiliates, clients, customers and/or others.

Aggregated and De-identified Data. We may share aggregate or de-identified information with third parties for research, analytics and/or other purposes.

4. Storage and Transfer of your Information

Your personal information may be stored or processed on our servers, and on the servers of third party service providers, in the United States, Canada and other jurisdictions. Additionally, some of our service providers may access personal information from countries other than your home jurisdiction, and in those circumstances will be subject to the laws of that local jurisdiction. As a result, in certain circumstances, other foreign governments, courts, law enforcement agencies or regulatory agencies may be entitled to access the personal information collected and held by Enduring Planet. In addition, if you are visiting the Site from a country other than the United States, your communication through our Site or any of our services may result in the transfer of information across international boundaries. By using our Site or any of our services, you consent to the collection, storage, and processing of your information in the United States, Canada and in any country to which we may transfer your information in the course of our business operations.

When we transfer personal information outside of the European Union or EFTA states, we ensure an adequate level of protection for the rights of data subjects based on the adequacy of the receiving country’s data protection laws, contractual obligations placed on the recipient of your data, and/or EU-US and Swiss-US Privacy Shield principles.

5. Your Rights

Your data – your rights! In connection with our collection, use, disclosure, etc. of your personal information, you have the following rights, all of which can be exercised by contacting us in accordance with Section 12 below.

The right to be informed. Because we process your personal information, we must make clear what we’re processing, why, and who else the data may be passed to. As such, we’ve attempted to make this Privacy Policy as clear and concise as possible. That being said, if you still have any questions, please reach out to us via the methods set forth in Section 12 (Contact Us) below.

The right to access, change, or modify/rectify your personal information. You have the right to see what data of yours we hold. Relatedly, you also have the right to have your data corrected or amended, if what is held by us is incorrect in some way. Finally, under certain circumstances, you can ask for your personal information to be deleted. This is also called “the Right to be Forgotten”. This right applies if your personal data is no longer required for the purposes for which it was collected, or if your consent for the processing of your personal information has been withdrawn, or if your personal information has been unlawfully processed.

The right to restrict processing. You can ask for a temporary halt to the processing of your personal information, such as in the case where a dispute or legal case has to be concluded, or the data is being corrected.

The right to data portability. You have the right to ask for any data supplied to us to be provided to you in a structured, commonly used, and machine-readable format.

The right to object. You have the right to object to further processing of your data that is inconsistent with the primary purpose for which it was collected, including profiling, automation, and direct marketing.

Rights in relation to automated decision making and profiling. You have the right not to be subject to a decision based solely on automated processing.

Marketing emails. If you choose to take advantage of the Services by applying for financing, you will receive periodic emails regarding Services, based on the information you provide, that may be of interest to you. If you no longer wish to receive our communications, you may unsubscribe by following the instructions included in each communication.

Withdraw your consent. You have the right to withdraw your consent to our use of and/or processing of your personal information. If your consent is withdrawn, we may not be able to provide you with access to certain specific functionalities of the Site and/or Services.

Opt-out. You may opt out of our disclosure of your personal information to external partners by contacting us in accordance with Section 12 below.

Lodge a complaint (EU Residents). EU residents have the right to lodge a complaint concerning our processing of your personal information with your national (or in some cases, regional) data protection authority. The EU Commission has a list here.

6. Links to Third Party Sites

The Site may contain links to third party sites operated by other organizations. Enduring Planet is not responsible for the privacy practices or content of any of such websites to which we link. If you access such websites, either directly or via the Site, you should review the privacy policy of each respective third party.

7. Data Retention

We only retain your personal information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

By law, we may have to keep basic information about our customers (including Contact, Identity, and Transaction Data) for a certain number of years after they cease being customers for purposes.

In some circumstances we will anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

We will make reasonable efforts to enable you to delete your data from our database upon request, which may be done by contacting us in accordance with Section 12 below.

8. Lawful Basis to Information Processing

We process your personal data only when we have a lawful basis. Presently, we have a legitimate interest and, in some cases, your consent as the lawful basis for processing. Our legitimate interests are to: (a) operate and maintain the Site; and (b) to deliver the Services to you. We have determined that our processing of your personal data is necessary to deliver the Services to you, and that there is no less intrusive means of delivering you the Services. Finally, we believe that our processing of personal data will not cause unjustified harm in a way that would override our legitimate interest basis. All users of the: (i) Site consent to the processing of their personal data by accessing and using the Site; and (ii) Services are required to affirmatively consent to our processing of their personal data in order to use and access such Services, with such consent as our lawful basis for collecting and processing certain types of personal information. In such cases, you have a right to withdraw your consent at any time (please see Section 5 above). In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

9. Security

We have implemented safeguards and technical measures, including equipping our website and Services with HTTPS, as well as encrypting all traffic within our database system, to protect the personal information that we have under our control from unauthorized access, use or disclosure. However, no data security measures can guarantee 100% security. You should take steps to protection your information by logging out of your account when finished and keeping your password private.

10. Children’s Privacy

This Site and our Services are not directed to any person under the age of 13. If you become aware that your child has provided us with personal information without your consent, please contact us, in writing, using any of the contact methods outlined below. We do not knowingly collect or solicit information from, market to or accept services from children. If we become aware that a child under 13 has provided us with personal information, we take steps to remove such information and terminate the child’s account.

11. Policy Changes

Each time you use the Site, the current version of the Policy will apply. Accordingly, when you use the Site, you should check the Last Updated date at the top of this Policy and review any changes since the last version. Our business changes frequently and this Policy is subject to change from time to time. Unless stated otherwise, our current Policy applies to all information that we have about you. If we materially change our policies and practices with respect to the personal information we have previously collected about you, we will endeavor to provide you notice, such as through prominent notice on our Site or by sending you an email. Registered users of the Services will be notified by email (at their last known email address) of any material change to this Policy.

12. Contact Us

To contact us with your questions or comments regarding this Policy or the information collection and dissemination practices of the Site, please contact us via email at privacy@enduringplanet.com. Please note that we may need to confirm your identity or request additional details to process your request.

13. Categories of Personal (And Other) Information That We Collect and Disclose

Our collection, use and disclosure of personal information about you will vary depending upon the circumstances and nature of our interactions or relationship with you. In general, we may (i) collect and (ii) disclose for a business purpose, the following categories of personal information about you:

Our Site and Services are equipped with certain analytics functionality that allow us to learn more about the visitors to our Site, as well as the users of our Services, for the purposes detailed in Section 2 above. More specifically, the following personal information is collected through our use of analytics:

• Your IP address;

• What pages on our Site you visit, as well as certain actions taken by you on such pages;

• Screen recordings of your interactions with the Site and Services, including “heat maps” of on-page interaction(s);

• General demographic information, including your approximate income level; and

• Where you came from before visiting the Site (i.e. the website you were on before visiting our Site).

Furthermore, our Site and Services are equipped with cookies, pixel tags, local storage, and scripts (“cookies”). Because we do utilize cookies, we want to inform you about which cookies we’re using, as well as why we use them. More specifically, we may use the following cookies on our Site and Services:

• Functional cookies. These cookies are essential to ensure that our Site and Services operate properly. They are used to save preferences, detect misuse of the Site and Services, allow for single sign on (SSO) functionality, etc. Certain functionality of the Site and/or Services cannot be provided without such cookies.

• Web statistic cookies. These cookies are used to determine which parts of the Site interest our visitors. These cookies are used to keep track of the number of visitors to the Site, keep track of the amount of time each user spends on our Site, assess which parts of the Site need to be changed, optimize the Site, etc. Please see the information above related to our use of “analytics” for details on exactly what personal information is collected through our usage of cookies.

We ask for your permission for our Site and Services to use cookies. When you visit the Site, a pop up will appear asking for your permission. You may not see this pop up if you have already set your preferences in your browser, or if you have already accepted all cookies on other websites.

If you prefer to avoid the use of cookies on the Site, you must disable the use of cookies in your browser and then delete the cookies saved in your browser associated with the Site. You may use this option for preventing the use of cookies at any time. If you do not accept our cookies, you may experience some inconvenience in your use of the Site and/or Services and some functionality of the Services may not be available to you.

If you would like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser.

Finally, in addition to the categories of personal information listed above, in connection with your use of the Services, we will also collect the following business (not personal) information from you:

• The legal name, address, and related details of your business;

• Your business bank account details;

• Certain financial and operational information about your business;

• Information related to your business’s customers, suppliers, clients, etc.; and

• Information related to your staff.