Privacy
notice.

01

Who we are

Predyct, Inc. is a technology company providing intelligence for wind infrastructure, including sensor-based monitoring, wireless data transmission, cloud-based analytics and related business services. For the purposes of this Privacy Notice, "Predyct", "we", "us" and "our" refer to Predyct, Inc.

For personal information collected through the website or ordinary business enquiries, Predyct is generally the controller or business responsible for determining how and why the information is used. In future customer engagements, Predyct may also process certain information under separate contractual arrangements.

02

Scope of this Privacy Notice

This Notice applies to personal information collected when you:

• visit the website;
• submit an enquiry or contact form;
• communicate with Predyct by email, telephone or other business channels;
• subscribe to updates or request information;
• interact with Predyct at events, meetings or through business development activity;
• apply for a role or otherwise contact Predyct for recruitment purposes, if applicable.

This Notice does not apply to third-party websites linked from the website or to customer operational, sensor, turbine, blade or asset data governed by a separate written agreement.

03

Personal information we may collect

3.1 Information you provide

We may collect personal information that you provide directly, including:

• name, job title, employer, department and business role;
• business email address, telephone number, mailing address and country or region;
• details included in contact forms, enquiries, messages, meeting requests or correspondence;
• information about your organisation, wind assets, business requirements or potential interest in Predyct products or services;
• marketing preferences and communication preferences;
• recruitment or professional information if you provide it in connection with a role or opportunity.

3.2 Information collected automatically

When you use the website, we may collect technical and usage information, including:

• IP address, device type, browser type and version, operating system and approximate location inferred from IP address;
• pages viewed, time spent on pages, referring pages, links clicked and website interaction data;
• cookie identifiers, analytics identifiers and similar technical information;
• security logs and diagnostic data.

3.3 Information from third parties

We may receive business contact information from publicly available sources, professional networks, event organisers, partners, advisers, customers or service providers where lawful and relevant to our business activities.

04

Purposes for which we use personal information

Predyct may use personal information for the following purposes:

• to operate, maintain, secure and improve the website;
• to respond to enquiries, requests for information and business communications;
• to assess potential customer, partner, supplier, investor, adviser or recruitment opportunities;
• to provide updates, marketing communications or event information where permitted by law;
• to manage business relationships and maintain business records;
• to analyse website use and improve content, performance and user experience;
• to protect the security of our systems, website, personnel, business and users;
• to comply with legal, regulatory, accounting, tax, audit, insurance and corporate governance requirements;
• to establish, exercise or defend legal rights;
• to support corporate transactions, financing, diligence, restructuring, merger, acquisition or sale processes.

4.1 Summary of processing activities

05

Legal bases under UK GDPR and EU GDPR

Where UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases:

• Legitimate interests: operating and improving our website; responding to B2B enquiries; developing business relationships; securing systems; maintaining records; and promoting relevant products and services to business contacts.
• Consent: where required for non-essential cookies, certain marketing communications or other specific processing.
• Contractual necessity: where processing is needed to take steps before entering into a contract or to perform a contract with you or your organisation.
• Legal obligation: where processing is required to comply with applicable laws, regulations, court orders or lawful requests.
• Legal claims: where processing is necessary to establish, exercise or defend legal claims.

Where we rely on legitimate interests, we balance our business interests against the interests, rights and freedoms of the individuals concerned. Given the website’s current business-to-business purpose, most routine enquiry, relationship management and website improvement processing is expected to involve low-volume business contact data rather than sensitive consumer data.

06

Marketing communications

Predyct may send business-to-business marketing communications regarding products, services, events, updates or thought leadership where permitted by applicable law. You may opt out of marketing communications at any time by using any unsubscribe mechanism provided or by contacting us. We may still send non-marketing communications, such as responses to enquiries, service-related messages or legal notices.

07

Cookies and analytics

The website may use cookies and similar technologies for essential website operation, analytics, security, performance and user experience purposes. More information is provided in the Cookie Notice. Where required by applicable law, Predyct will seek consent before placing non-essential cookies.

08

How we share personal information

We may share personal information with:

• hosting, website, IT, security, analytics, email, CRM, cloud, storage and communications service providers;
• professional advisers, including lawyers, accountants, auditors, insurers and consultants;
• business partners, suppliers, contractors and potential customers where necessary for legitimate business purposes;
• regulators, public authorities, courts, law enforcement agencies or other parties where required or permitted by law;
• counterparties, advisers and funders involved in a proposed or actual financing, investment, merger, acquisition, sale, restructuring or similar corporate transaction;
• affiliates or group companies, if applicable, for internal business administration and legitimate business purposes.

We do not sell personal information for monetary consideration. We do not intentionally collect or use consumer personal information for large-scale behavioural advertising through the website.

09

International transfers

Predyct is based in the United States. If you are located in the UK, EU or another jurisdiction outside the United States, your personal information may be transferred to and processed in the United States and other countries whose data protection laws may differ from those in your location.

Where UK GDPR, EU GDPR or other transfer rules require safeguards for international transfers, Predyct will use appropriate safeguards where required, which may include standard contractual clauses, transfer risk assessments, data processing agreements or reliance on another lawful transfer mechanism.

10

Data retention

Predyct retains personal information only for as long as reasonably necessary for the purposes described in this Notice, including to respond to enquiries, maintain business records, support legitimate business activities, comply with legal obligations and establish, exercise or defend legal rights.

Retention periods may vary depending on the type of information, the nature of the relationship, legal requirements, limitation periods, accounting requirements, insurance requirements and whether the information is needed for a continuing business purpose. When information is no longer required, we will delete it, anonymise it or archive it in accordance with applicable requirements and reasonable business practices.

11

Security

Predyct uses reasonable technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, secure hosting, encryption where appropriate, system monitoring, service provider controls and internal policies. No method of transmission or storage is completely secure, and Predyct cannot guarantee absolute security.

12

Your rights

Depending on your location and applicable law, you may have rights to:

• request access to personal information held about you;
• request correction of inaccurate or incomplete information;
• request deletion of personal information;
• object to or restrict certain processing;
• request portability of certain information;
• withdraw consent where processing is based on consent;
• opt out of marketing communications;
• complain to a data protection authority or regulator.

To exercise rights, contact Predyct using the details below. We may need to verify your identity and may be unable to fulfil a request where an exemption applies, where information must be retained for legal reasons, or where the request relates to information held in a business or contractual context involving your organisation.

13

UK and EU complaints

If UK GDPR or EU GDPR applies, you may have the right to complain to a supervisory authority. In the UK, this is the Information Commissioner’s Office. In the EU, you may contact the supervisory authority in your country of residence, place of work or place of alleged infringement. We encourage you to contact us first so that we can try to resolve any concern.

14

US privacy position

Predyct is currently a business-to-business industrial technology company and does not operate a consumer platform through the website. This Notice is therefore intentionally not drafted as a state-by-state US consumer privacy rights notice. Predyct does not currently include California-specific, Colorado-specific, Virginia-specific or similar consumer privacy schedules in this Notice because such provisions would be disproportionate to the present website use case. If Predyct later expands into consumer-facing services, large-scale tracking, online contracting, self-service platform onboarding or materially broader marketing activity, this Notice will be reviewed.

This approach is intended to keep the Notice accurate and proportionate. It should not be read as a decision that no US privacy law can ever apply. Rather, it reflects the present position that the website is primarily a B2B information and enquiry channel, not a high-volume consumer data platform.

15

Sensitive information

Predyct does not seek to collect sensitive personal information through the website. You should not submit health information, precise personal financial information, government identity documents, social security numbers, passport details, personal background checks or other sensitive information through website forms unless Predyct specifically requests it through an appropriate secure process.

16

Children

The website is intended for business users and is not directed to children. Predyct does not knowingly collect personal information from children through the website. If you believe a child has provided personal information to Predyct, please contact us.

17

Third-party websites

The website may link to third-party websites. Predyct is not responsible for the privacy practices, content or security of third-party websites. You should review the privacy notice of any third-party website you visit.

18

Changes to this Notice

Predyct may update this Privacy Notice from time to time. The updated version will be posted on the website with an updated effective date or last updated date. Material changes may be communicated by additional means where appropriate.