Privacy Policy Last Updated: December 21, 2025 Introduction Coresight Research (“Coresight,” “we,” “us,” or “our”) is fully committed to protecting the privacy and personal data of all individuals who interact with our services, website, and content. This Privacy Policy details the types of information we collect, how we use it, how it may be shared, and the choices and rights you have regarding your information. We adhere to relevant global privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection regulations. By using our services, you agree to the data practices outlined in this Privacy Policy, including the collection, use, disclosure, and retention of your personal information. This Privacy Policy should be read in conjunction with our Terms of Service available at https://coresight.com/terms-of-service/. Key Definitions (for GDPR Purposes) Data Controller: The party that determines the purposes and means of processing personal data. Data Processor: A third party that processes data on behalf of a Data Controller. Data Subject: A living individual whose personal data is processed. Personal Data: Information relating to an identified or identifiable individual (e.g., name, address, IP address). Special Categories of Personal Data: Sensitive data including but not limited to racial origin, health data, sexual orientation, or biometric identifiers. Processing: Any operation performed on personal data such as collection, storage, access, disclosure, and erasure. Third Party: An entity other than the data subject, controller, or processor involved in the handling of personal data. Information We Collect We collect the following types of information depending on your interaction with our services: Personal Information: Such as your name, email address, phone number, and mailing address. This data is collected when you sign up for newsletters, attend webinars or events, or contact us directly. Demographic Information and User Opinions: Collected during market research studies, feedback surveys, and through participation in events. Technical and Log Information: This includes device identifiers, IP address, browser type and settings, operating system, referral URLs, and activity on our website. Cookies and Tracking Technologies: We use cookies and similar technologies to remember your preferences, enhance user experience, and gather usage statistics. You can disable or manage cookies through your browser settings. How We Use Your Information We may use your personal information for various purposes, including: Delivering and maintaining our services and digital experiences. Personalizing and improving user experience. Sending promotional content, newsletters, and service announcements (you may opt-out at any time). Conducting analytics, research, and user behavior monitoring. Responding to support inquiries and service requests. Fulfilling legal and regulatory obligations, including fraud prevention and compliance. Information Sharing and Disclosure We do not sell your personal data. We may share it under the following conditions: With Service Providers: Trusted partners who help us provide our services (e.g., email marketing, analytics, hosting) under strict confidentiality agreements. For Legal Compliance: When required by law, regulation, legal process, or governmental request. During Business Transactions: In the context of a merger, acquisition, bankruptcy, or sale of company assets. With Marketing Partners: Select third parties that offer products or services we believe you may find valuable. We share data only with your consent when legally required. Data Retention We retain personal data only for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy. In general, we retain data for up to six years, or longer if required by law, to address disputes, enforce our agreements, and ensure compliance. Data Security We employ physical, administrative, and technical safeguards to protect the confidentiality and security of your information. However, no method of transmission over the Internet or method of electronic storage is entirely secure. We encourage users to take precautions when submitting sensitive information online. International Data Transfers Your information may be stored or processed in countries outside your home jurisdiction, including the United States. These countries may have different data protection standards. By submitting your information, you consent to this transfer, storage, and processing. Your Data Protection Rights Depending on where you live, you may have the following rights: The right to access and obtain a copy of your personal data. The right to correct or update inaccurate or incomplete data. The right to request erasure of your data in certain circumstances. The right to restrict or object to data processing. The right to data portability. The right to withdraw previously given consent. To exercise your rights, please contact us at privacy@coresight.com. Requests will be addressed in accordance with applicable laws and within the legally required timeframe. GDPR-Specific Notices In case of a data breach likely to result in a risk to your rights or freedoms, we will notify the appropriate authorities within 72 hours and inform affected users without undue delay. You may revoke your consent for data processing by emailing privacy@coresight.com or submitting a request through our Support Portal under the “GDPR Privacy Request” category. For anonymous or pseudonymized data (such as IP addresses), we may not be able to identify you, which may limit our ability to act on certain rights. California Privacy Rights If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the right to: Request disclosure of the categories and specific pieces of personal data we have collected. Request deletion of your personal data. Opt-out of the sale (if applicable) of your personal information. To exercise your rights under the CCPA, contact us at privacy@coresight.com. “Do Not Track” (DNT) Signals We recognize and respect your browser’s Do Not Track setting. If your browser sends a DNT signal, we make reasonable efforts to honor that preference. However, not all tracking technologies can currently be modified based on DNT settings. Children’s Privacy Our services are not directed toward children under the age of 18. We do not knowingly collect or store information from children. If we learn that personal information from a child under 18 has been collected, we will take appropriate steps to delete it. Google API Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information Collected from Other Sources In short: We may collect limited data from public databases, marketing partners, and other outside sources. In order to enhance our ability to provide relevant marketing, offers, and services to you and to update our records, we may obtain information about you from other sources such as public databases, joint marketing partners, affiliate programs, data providers, and other third parties. This may include mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), IP addresses, social media profiles and URLs, and custom profiles for the purposes of targeted advertising and event promotion. Changes to This Privacy Policy We may update this Privacy Policy from time to time. When changes are made, we will revise the “Last Updated” date and post the revised policy on this page. We encourage users to review this page regularly for any updates. Contact Us If you have questions, requests, or concerns about this Privacy Policy or your data, please contact us: Email: privacy@coresight.com Thank you for trusting Coresight Research with your information.