Introduction

Dust-to-Digital, Inc. and Dust-to-Digital Foundation, Inc. ("DTD," "we," "us," and "our") respects your privacy and is committed to protecting your Personal Information. This privacy policy ("Privacy Policy" or "Policy") describes how we collect, use, and disclose Personal Information we collect through our website www.dust-digial.com that links to this Privacy Policy (the "Website"), or any other information we collect from you when you interact with us directly or indirectly.

Information Collection

"Personal Information" refers to any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual.

The types of personal information we obtain about you depends on how you interact with our Website and use our services. We may collect Personal Information directly from individuals, indirectly via tracking technologies on our Website, from third parties who may collect information on our behalf for the support of our Website, when a user posts about us on social media, or that you otherwise provide to us. The Personal Information we may collect includes the following:

• Contact details such as name, email address, phone number, and address
• Account details such as username and password
• Order information, including payment information such as credit or debit card number, and billing address
• Information about your purchase history
• Customer support information including the information you choose to include in communications with us, for example, when sending a message to us through our Website
• Information included in User Generated Content (as defined in the DTD Website Terms of Use, available at http://www.dust-digital.com/website-terms) you choose to submit, including audio, video, and photographs

We may also collect Personal Information automatically using various tracking technologies, such as cookies, on our Website. The information collected by these tracking technologies may include IP address, precise geolocation, referring URL, device ID, web browser characteristics, and date and time of activity. See further information in the Cookie & Marketing Tools section below.

If you provide us Personal Information relating to other individuals, you warrant that you have the authority to do so, and where required, have obtained the necessary consent, and acknowledge that it may be used in accordance with this Privacy Policy.

Information Use and Disclosure

We process Personal Information for various purposes, including to:

• Respond to your questions and communicate with you
• Operate, manage, and run our business and maintain records
• Provide, develop, improve, and maintain our Website or our products and services
• Fulfill any transactions or provide any services that you request, such as for the purpose of customer support in fulfilling your orders, account updates, and returns and exchanges
• Engage in advertising and marketing efforts, such as sending you service or promotional announcements, news updates, special offers, or information about our products and services through email, text message, or postal mail
• Analyze and better understand consumers' needs, preferences, and interests and conduct analysis and research
• Collect and analyze information about characteristics and behavior of visitors to our Website
• Ensure compliance with our policies and applicable law and detect, investigate or take action regarding possible fraudulent, illegal, or malicious activity
• Fulfill any other purpose you consent to at or before the time your Personal Information is collected

We do not sell or share Personal Information for monetary consideration. We may disclose Personal Information in the following ways:

• To service providers who process Personal Information on our behalf, including service providers who provide data hosting, information technology support, email hosting, marketing, and analytics services, and other services for the operation of our business
• To third parties when legally obligated to do so
• As part of business negotiations or other corporate transactions in connection with a proposed sale or divestiture of assets
• When you give us your permission to do so

Third Party Websites

For practical reasons and for your information, our Website may contain links to other websites, such as links to our profile pages on social media sites and certain third-party service providers, such as payment gateways and other payment transaction processors. We exercise no control over such other websites and are not responsible for the content thereon. This Privacy Policy does not apply to third party websites, and we recommend that you review the online privacy policy of any website you visit to determine how the operator handles Personal Information collected through its website. See further information in the Cookies & Marketing Tools section below.

Substack

We administer our subscription service through Substack Inc., who provides us with a subscription management and publishing platform. By signing up for our subscription service, your Personal Information and other data may be collected and stored by Substack. For additional information, you can access and read Substack's Privacy Policy at https://substack.com/privacy.

Cookies & Marketing Tools

We use cookies and similar technologies such as tracking pixels and web beacons (collectively referred to as "cookies") to collect user activity information, including your browsing activities and preferences. We may use the following types of cookies:

• Necessary cookies. These are cookies that are required for the operation of the Website
• Preference cookies. These cookies remember choices you make and are used to recognize you when you return to the Website.
• Statistics cookies. These cookies collect information about how you use the Website. They measure and improve the performance of our Website. They help us to know which pages are the most and least popular and see how visitors move around the Website. We may also use these types of cookies to gauge how you interact with our marketing emails.
• Marketing cookies. These cookies collect information about your browsing activities in order to understand your interests for marketing purposes. We, or third parties, may place these cookies on your browser when you visit certain websites for the purpose of serving you with advertisements regarding our products and services that may be of interest to you (i.e., retargeting).

Some Statistics and Marketing cookies, and the user activity information generated from these cookies, are created, stored and/or managed by third party service providers that provide us with web traffic analytics, sales engagement and marketing automation services. The user activity information collected by these tracking technologies may be stored and used by these third parties.

Please note that while your browser may allow you to transmit a "do not track" signal, like many websites, our Website is not designed to respond to such signals. To learn more about "do not track" signals, you can visit http://www.allaboutdnt.com/.

User Generated Content

Our Website may enable you to post product reviews and other User Generated Content (as defined in the DTD Website Terms of Use). If you choose to submit User Generated Content to any public area of our Website, this content may be public and accessible by anyone.

We do not control who will have access to User Generated Content, and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties. For more information about User Generated Content, licensing, and other related information, please review the DTD Website Terms of Use, available at http://www.dust-digital.com/website-terms.

Your Privacy Rights

You may have the following rights with regard to your Personal Information. Please note that these rights are not absolute, may apply only in certain jurisdictions, and we may decline your request to exercise them as permitted by law. Requests to exercise these rights may be made using the contact information listed at the end of this Privacy Policy.

• Right to Confirm / Access / Know. You may have the right to request access to Personal Information that we hold about you, including details relating to the ways in which we collect, use, and share your information.
• Right of Portability. You may have the right to receive a copy of the Personal Information we hold about you and to request that we transfer it to a third party.
• Right to Delete. You may have the right to request that we delete Personal Information we maintain about you.
• Right to Correct. You may have the right to request that we correct inaccurate Personal Information we maintain about you.
• Right to Withdraw Consent. You may have the right to withdraw your consent to the processing of your Personal Information.
• Right to Opt-Out. You may have the right to opt-out of certain uses of your Personal Information.
• Right to Appeal. You may have a right to appeal our decision if we decline to process your request in part or in full. You can do so by replying directly to our denial. If you are not satisfied with our response to your appeal, you may contact your state Attorney General or relevant data protection authority in your jurisdiction of residence.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Additional Disclosures for Individuals in the European Economic Area, Switzerland, and the United Kingdom

This section provides additional disclosures for individuals that reside in the European Economic Area (EEA), Switzerland, or the United Kingdom (UK). For the purposes of the data described in this Policy, we are the "controller" of your personal information.

Our legal basis for processing personal information we collect from the EEA, Switzerland and the UK, can vary depending on the manner in which you use our Website or otherwise engage with us. To the extent we rely on our legitimate interests as a legal basis for processing your personal information, we have considered the balance between our own interests (among other things, the lawful and efficient operation of our Sites and business) and your interests, and we believe that (a) you would reasonably expect us to carry out the kind of processing referenced herein, and (b) such processing will not cause you any harm and/or will not seriously impact your rights and freedoms with regard to data privacy. To the extent we rely on your consent as a legal basis for processing your personal information, you have the right to withdraw such consent given to us for the processing of your personal information at any time, although such withdrawal will not affect the lawfulness of our processing prior to your withdrawal of consent. We may also process personal information where necessary for our compliance with legal obligations to which we are subject. We also reserve the right to process personal information in the event we believe doing so is necessary to protect the rights of the data subject or another person.

Individuals residing in the EEA, Switzerland, or the UK have the right to access, rectify, or erase your personal information; to restrict or object to processing of your personal information, including automated processing; and to data portability (i.e., the right to receive a copy of your personal information. You also have the right to file a complaint with your data protection authority if you have a concern about the manner in which we are processing your personal information.

Newsletter & Other Marketing Communications

If you have provided us with your email address through the link on our Websites, we will regularly send our newsletter communications to your email address. You may opt out of receiving our newsletter and communications from us at any time by sending us an e-mail using the contact information provided at the end of this Privacy Policy or by using the "Unsubscribe" option contained in the newsletter.

In addition, we may send you periodic communications by email or regular mail, such as news updates, special offers or information on our products or services, if you have chosen to receive such communications. If you later wish to opt-out of receiving such promotional emails from us at any time, simply follow the instructions for doing so in the emails that you receive from us. We reserve the right to send you certain communications relating to our Websites, such as service announcements, emails related to purchases you have made, or similar administrative or transactional messages, without offering you the opportunity to opt-out of receiving them.

Data Security

We use reasonable administrative, technical, and physical safeguards designed to ensure that the Personal Information we collect is protected from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. If you create an account on our Website, you may be asked to choose a password for your account, in which case your online account information shall be protected by your password. We recommend that you do not disclose your password to any other person. You are responsible for maintaining the confidentiality of your password and account and are fully responsible for all activities that occur under your password or account.

Retention of Personal Information

We retain the Personal Information we collect for the time period required to fulfill the legitimate business purposes for which it was collected and to engage in the use and disclosure practices outlined in this Privacy Policy, unless a different retention period is required by applicable law, or otherwise to fulfill a legal obligation or protect our legal rights.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 18 years of age.

Changes to This Privacy Policy

This Privacy Policy is effective as of the date stated next to the "Last Updated" section at the top of this Policy. We may change this Privacy Policy from time to time. When we make changes to this Policy, we will post the updated version on our Website and indicate the date the Policy was last updated. We encourage you to review this page periodically to check for any updates.