PRIVACY POLICY

Last Updated: January 1, 2026

1. Introduction & Scope

Triple Sequence Holdings LLC (“Triple Sequence Holdings,” the “Company,” “we,” “us,” or “our”) is a privately held, diversified holding company organized under the laws of the State of Utah and headquartered at 3300 North Triumph Boulevard, Suite 100, Lehi, UT 84043, United States. We respect the privacy of every individual who interacts with us and are committed to handling personal information responsibly, transparently, and in accordance with applicable data protection laws.

This Privacy Policy (“Policy”) explains how we collect, use, disclose, retain, and protect personal information that we obtain through our website located at triplesequenceholdings.com (the “Site”), as well as through related communications, inquiries, and recruiting activities. It describes the choices and rights available to you with respect to your personal information. This Policy applies to information collected through the Site and does not govern the separate privacy practices of our operating subsidiaries, which may maintain their own policies appropriate to their respective businesses and jurisdictions.

By accessing or using the Site, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please discontinue use of the Site. This Policy should be read together with our Terms of Use.

2. Information We Collect

We collect personal information in several ways, depending on how you interact with us. The categories of information we collect include the following.

Information you provide to us. When you contact us, submit an inquiry, respond to a career opportunity, or otherwise correspond with the Company through the Site or by email, you may choose to provide information such as your name, email address, telephone number, organization or company name, professional title, the nature of your inquiry, and the contents of any message, attachment, or document you send to us. If you apply for a position with the Company or one of its subsidiaries, you may also provide a résumé, employment history, and related professional details.

Information collected automatically. When you visit the Site, we and our service providers may automatically collect certain technical information, including your Internet Protocol (IP) address, approximate geographic location derived from that address, browser type and language, operating system and device characteristics, referring and exit pages, the pages you view, the dates and times of your visits, and other usage and diagnostic data. This information helps us understand how the Site is used, maintain its security and integrity, and improve its performance.

Cookies and analytics. We use cookies and similar tracking technologies to operate the Site, remember your preferences, and gather aggregated analytics about Site usage. Please see Section 6 (Cookies & Tracking Technologies) for further detail and information about your choices.

3. How We Use Information

We use the personal information we collect for legitimate business purposes consistent with this Policy and applicable law. These purposes include responding to your inquiries, requests, and correspondence; evaluating and processing employment and recruiting applications; communicating with prospective counterparties, advisors, vendors, and other professional contacts; and providing information about the Company and its activities.

We also use information to operate, maintain, administer, and improve the Site and our communications; to analyze trends, usage, and traffic so that we can enhance functionality and the user experience; to protect the security and integrity of the Site, prevent fraud or misuse, and detect and address technical issues; and to comply with applicable legal, regulatory, audit, and recordkeeping obligations, to establish, exercise, or defend legal claims, and to enforce our agreements and policies.

4. Legal Bases for Processing (EEA/UK)

Where the European Union General Data Protection Regulation (GDPR) or the United Kingdom GDPR applies to our processing of your personal information, we rely on one or more of the following legal bases. We process personal information on the basis of your consent, where you have given it (for example, when you elect to provide information through a contact form or accept non-essential cookies); on the basis of our legitimate interests in operating, securing, and improving the Site, responding to inquiries, conducting recruiting, and managing our business relationships, provided those interests are not overridden by your rights and freedoms; for the performance of a contract with you or to take steps at your request prior to entering into a contract; and for compliance with a legal obligation to which we are subject.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. Where we rely on legitimate interests, you may object to that processing as described in Section 10.

5. How We Share Information

We do not sell your personal information, and we share it only as described in this Policy. We may disclose personal information to the following categories of recipients.

• Service providers and processors. We engage trusted third parties to perform services on our behalf, such as website hosting, content delivery, analytics, email and communications infrastructure, security, and information technology support. These providers are authorized to use personal information only as necessary to provide services to us and are bound by appropriate confidentiality and data protection obligations.
• Affiliates and subsidiaries. As a holding company, we may share information among Triple Sequence Holdings LLC and its affiliates and operating subsidiaries for internal administrative, recruiting, and business purposes consistent with this Policy.
• Legal, regulatory, and safety disclosures. We may disclose information where we believe in good faith that doing so is necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our agreements and policies; or to protect the rights, property, or safety of the Company, our personnel, our users, or others.
• Corporate transactions. In connection with, or during negotiations of, any merger, acquisition, financing, reorganization, sale of assets, or other corporate transaction, personal information may be disclosed or transferred to the relevant counterparties and their advisors, subject to appropriate confidentiality protections.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We do not disclose personal information to third parties for their own independent marketing purposes.

6. Cookies & Tracking Technologies

Cookies are small text files placed on your device when you visit a website. We use strictly necessary cookies that are essential to the operation and security of the Site, functional cookies that remember your preferences, and analytics cookies that help us understand how visitors use the Site on an aggregated basis. We may also use similar technologies such as pixels, tags, and local storage for these purposes.

You can control and manage cookies through your browser settings, which typically allow you to refuse, delete, or be notified about cookies. Most browsers also offer a “Do Not Track” setting; because there is no common industry standard for responding to such signals, the Site does not currently respond to them. Please note that disabling certain cookies may affect the availability or functionality of parts of the Site.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to respond to your inquiry, evaluate a recruiting application, operate and secure the Site, and satisfy our legal, regulatory, accounting, audit, and recordkeeping obligations. When personal information is no longer required, we will delete, de-identify, or anonymize it, or securely store it in a manner that isolates it from further use until deletion is possible.

The criteria we use to determine retention periods include the nature and sensitivity of the information, the purposes for which it is processed, the existence of any ongoing relationship or correspondence, and applicable legal or contractual requirements.

8. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and destruction. These measures include access controls, encryption in transit where appropriate, network and infrastructure security practices, and internal policies governing the handling of information by authorized personnel.

Despite our efforts, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any credentials and for taking reasonable precautions when transmitting information to us. If we become aware of a security incident affecting personal information, we will respond in accordance with applicable law.

9. Your Privacy Rights — California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), provides you with specific rights regarding your personal information, subject to certain exceptions. These rights include:

• The right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties with whom we share it;
• The right to delete personal information we have collected from you;
• The right to correct inaccurate personal information that we maintain about you;
• The right to opt out of the sale or sharing of personal information — although, as stated in this Policy, we do not sell or share personal information for cross-context behavioral advertising; and
• The right to non-discrimination, meaning we will not discriminate against you for exercising any of your privacy rights.

To exercise these rights, please contact us at compliance@triplesequenceholdings.com or by mail at the address provided in Section 15. We will verify your request by confirming information reasonably associated with you and your interactions with us. You may use an authorized agent to submit a request on your behalf, subject to verification of the agent’s authority. We will respond within the timeframes required by applicable law.

10. Your Privacy Rights — EEA/UK (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have certain rights under the GDPR and equivalent data protection laws, subject to applicable conditions and exemptions. These include the right to access the personal information we hold about you; the right to rectification of inaccurate or incomplete information; the right to erasure of your personal information in certain circumstances; the right to restriction of processing; the right to data portability; and the right to object to processing carried out on the basis of our legitimate interests.

Where our processing is based on your consent, you have the right to withdraw that consent at any time. You also have the right to lodge a complaint with a supervisory authority in the country of your residence, place of work, or where an alleged infringement occurred. We would, however, appreciate the opportunity to address your concerns directly before you do so. To exercise any of these rights, please contact us at compliance@triplesequenceholdings.com.

11. International Data Transfers

Triple Sequence Holdings LLC is headquartered in the United States, and the information we collect is processed and stored in the United States and may be processed by our service providers in other countries. The data protection laws of these jurisdictions may differ from those of your country of residence. Where we transfer personal information from the EEA, the United Kingdom, or Switzerland to a country that has not received an adequacy decision, we implement appropriate safeguards, such as standard contractual clauses approved by the relevant authorities, to protect your information. By using the Site or providing information to us, you understand that your information may be transferred to and processed in the United States.

12. Children’s Privacy

The Site is intended for a professional, business audience and is not directed to children. We do not knowingly collect personal information from individuals under the age of sixteen (16), and where required by applicable law, under the age of eighteen (18). If you believe that a child has provided personal information to us, please contact us at compliance@triplesequenceholdings.com, and we will take appropriate steps to delete that information.

13. Third-Party Links

The Site may contain links to third-party websites, services, or resources that are not operated or controlled by the Company. This Policy does not apply to those third-party properties, and we are not responsible for their content, privacy practices, or security. We encourage you to review the privacy policies of any third-party sites you visit before providing them with personal information.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will revise the “Last Updated” date above and, where appropriate or required by law, provide additional notice. We encourage you to review this Policy periodically. Your continued use of the Site after any update constitutes your acknowledgment of the revised Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Policy or our handling of your personal information, please contact our Legal & Compliance team:

• Email: compliance@triplesequenceholdings.com
• Mail: Triple Sequence Holdings LLC, Attn: Legal & Compliance, 3300 North Triumph Boulevard, Suite 100, Lehi, UT 84043, United States
• Phone: +1 (801) 851-0100 (Monday–Friday, 9:00 AM – 5:00 PM Mountain Time)

This Policy is governed by and construed in accordance with the laws of the State of Utah, United States, without regard to its conflict-of-laws principles.