Privacy Policy

Updated: 07/23/2026

This Privacy Policy (this “Policy”) describes the privacy and security practices associated with the website and online service used to validate the purchase of a Stockpile Gift Card and process a refund for the unclaimed balance of your Stockpile Gift Card (collectively the “Services”) operated by CIMI2603, Inc., and its affiliates or contractors, as further detailed in this Policy ("CIMI2603," “we,” “our,” or “us”).

The purpose of this Policy is to identify (i) what information we collect from and about consumers who access and use the Services, (ii) how we use, share, and secure the information collected, and (iii) what choices you have regarding your information. We do not collect additional categories of information nor use information in any ways not specified herein. This Policy also tells you about your rights and choices with respect to your personal information, and how you can contact us with questions relating to this Policy.

Please carefully read this Policy before accessing and remaining on our website or utilizing our Services. If you do not agree with the terms of this Policy, please do not access our website, or utilize our Services. By accessing our website and utilizing our Services, you agree to the terms of this Policy and consent to the collection and use of your information as set forth below.

We may update this Policy from time to time by posting the revised policy here.

HOW TO CONTACT US

If you have any questions about this Policy or our privacy practices, you may contact us in the following ways:

Postal Address: CIMI2603 Attn: Stockpile Refund

11610 Ash Street, #200

Leawood, KS 66211

E-mail: customerservice@cimicard.com (please include “Stockpile Privacy Policy” in the Subject Line)

Telephone: (913) 276-1370

WHAT INFORMATION WE COLLECT

We collect personal information and other information from and about you to provide the Services. Personal information is information about an identified or identifiable natural person (this does not include deidentified or aggregated information). We limit the collection of personal information to what is relevant and reasonably necessary to facilitate the provision of Services or for other legal compliance. CIMI2603 does not knowingly or intentionally collect or solicit (i) sensitive personal information or (ii) personal information from anyone under the age of 18. The information we collect depends on the Services involved, and may include:

Personal Contact and Professional Information refers to information that allows us to contact you directly, such as your first and last name, company name, job title, e-mail address, mailing address, and mobile phone number.

Technical Information refers to information collected when you use the Services, such as your IP address, device information, information about the network you are using to access the Services, browser type and version, and engagement data such as your activities while using the Services, websites or services previously visited, and content you see or click on.

Account Information where users sign up for accounts, your login details, metadata associated with the account, and any information provided by the user within the account will be collected.

Interest regarding products and product preferences.

Content of Communications refers to information we obtain when you contact or communicate with us.

HOW WE COLLECT INFORMATION

CIMI2603collects information from and about you in the following ways:

Direct Interactions. We collect information voluntarily provided by you, such as Personal Contact and Professional Information, Order Information, Content of Communications, and User-Generated Content, when you:

Use the Services;

Inquire about our Products and Services;

Interact with us.

Automatically. We collect Technical Information automatically when you use the Services through the use of cookies and similar technologies, as further described in the “Cookies” section below.

Mobile Devices. CIMI2603 or its third-party technology partners may collect location information, including location information provided by a mobile device interacting with one of our apps or associated with your IP address or Wi-Fi network. You can generally limit or prohibit the collection of location information using the built-in settings on your mobile device. We do not permit the collection of precise location information.

HOW WE USE YOUR INFORMATION

CIMI2603collects the above described information from and about you for the following purposes:

Provide you with Services;

Respond to inquiries and requests and otherwise provide you with information relevant to the Services;

Undertake auditing and verifications related to user interactions, including but not limited to, verifying the quality and effectiveness of our Services.

Improve the Services;

Administer surveys for internal use;

Maintain the security, integrity, and quality of the Services, databases, technology assets and business, including detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity and preventing fraudulent transactions;

For fraud prevention purposes

Comply with U.S., state, local and non-U.S. laws, rules and regulations and respond to legal inquiries;

Conduct promotions related to the Services;

Facilitate business transactions as described in the ‘Business Transactions’ section below; and

As provided for in the ‘Legal Compliance & Protecting Security and Safety’ section below.

In certain circumstances, laws require that we obtain your consent to collect information for a particular purpose. In these circumstances, we will obtain your consent at the time we collect the information.

We may combine information we collect through your use of the Services with information that we collect from other sources (e.g., offline records or publicly available information). Additionally, we may anonymize or deidentify personal information so that it can no longer be associated with an individual or re-identified. In such cases, we may use and share the anonymized or deidentified data without further notice to you.

Additionally, if you are a business customer, we may use your personal information to keep you informed of our products and services, if you have provided your consent to us doing so, or where we have an existing relationship with you and we wish to contact you about products and services similar to those which we provide you, in which you may be interested. You may opt-in to certain kinds of marketing, or all forms of marketing at any time, by contacting us and you may unsubscribe to receiving emails by clicking on the "opt-out" or "unsubscribe" link provided in all our marketing emails.

USE OF COOKIES AND OTHER TECHNOLOGIES

CIMI2603 uses “cookies” and similar technology that are saved on your computer or mobile device to automatically collect information about use of the Services. Different types of cookies, such as session or persistent cookies, may be used for different functions. Persistent cookies remain on a user’s device for a set period of time and are activated each time a user visits the Services where cookies were set. Session cookies are temporary and allow us to link a user’s actions during a browser session. The information collected includes device information, information about the network you are using to access the Services, websites, or services that you previously visited, and content you see or click on.

The Services use the following types of cookies and other technologies for the following purposes:

Essential. These are essential to navigate the Services and use the features, and they enable us to provide services.

Session. These are specific to a particular visit and remain in your browser or device until you leave the site. Session cookies are then deleted from your device once you leave the site.

Although many browsers are initially set to accept cookies, you may be able to adjust your settings to reject cookies. Choices are browser and device specific, and if you clear cookies from the browser on any of your devices, your opt-out choices will need to be reset. Consult the “Help” section of your browser or built-in mobile device settings for more information. In addition, please note that certain areas of the Services only can be accessed when cookies are enabled. Thus, disabling cookies may prevent you from accessing some of our content.

SHARING AND DISCLOSURE OF INFORMATION

CIMI2603 does not share any personal information for monetary or other valuable consideration. CIMI2603 does not provide any personal information to third parties for the purpose of behavioral advertising. CIMI2603 may share and disclose certain information to the following:

Service Providers: We share information collected with third parties that process information on our behalf. We may use such service providers to:

host the Services;

provide database and server maintenance and security and fraud prevention services;

help us engage in promotional activity regarding the Services;

assist with the transmission of emails, text messages and postal mail delivery;

help us analyze our offerings;

provide customer service, and

process and fulfill online transactions including refunds as may be required.

Validation Processor: When you use the Services we may engage a third party to validate the information you provide and confirm the unredeemed balance on your Stockpile Gift Card. We have engaged Launch Gift Cards, Inc. to provide this service. More information about their privacy and security practices is set forth in the ‘Security’ section below.

Legal Compliance & Protecting Security and Safety: CIMI2603 may access, preserve and disclose your information if required to do so by law or under a good faith belief that such access, preservation or disclosure is reasonably necessary to: (i) comply with legal process or respond to a legal request or subpoena; (ii) enforce our Terms of Use for the Services; (iii) respond to claims that your conduct has violated the rights of third parties; (iv) respond to your requests for customer service; (v) protect the rights, property or personal safety of LGC, its users and the public; (vi) or as otherwise required to comply with, or permitted by, applicable laws and regulations.

Business Transactions: We may transfer information collected if we are acquired by, sold to, or merged with another entity.

CALIFORNIA PRIVACY RIGHTS

This California Privacy Rights section (the “California Privacy Notice”) supplements the Policy set forth above with respect to specific rights granted under the California Consumer Privacy Act of 2018, as amended (the “CCPA”) to natural person California residents and provides information regarding how such California residents can exercise their rights under the CCPA. This California Privacy Notice is only relevant to you if you are a resident of California as determined in accordance with the CCPA. Information required to be disclosed to California residents under the CCPA regarding the collection of their personal information that is not set forth in this CCPA supplement is otherwise set forth above in the Policy.

Categories of Personal Information We Collect: We collect or within the last twelve (12) months have collected some or all of the following categories of personal information from individuals:

Category

Examples

Collected

A. Identifiers

Name, contact details and address (including physical address, email address and Internet Protocol address), and other identification (including social security number, passport number and driver’s license or state identification card number).

YES

B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

Telephone number, signature, bank account number, other financial information (including accounts and transactions with other institutions and anti-money laundering information), and verification documentation and information regarding investors’ status under various laws and regulations (including social security number, tax status, income and assets).

YES

C. Protected classification characteristics under California or federal law

Date of birth, citizenship and birthplace.

D. Commercial information

Account data and other information contained in any document provided by investors to authorized service providers (whether directly or indirectly), risk tolerance, transaction history, investment experience and investment activity, information regarding a potential and/or actual investment in the applicable fund(s), including ownership percentage, capital investment, income and losses, source of funds used to make the investment in the applicable fund(s).

YES

E. Biometric information

Imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns and voice recordings or keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contains identifying information.

F. Internet or other similar network activity

Use of our website, fund data room and investor reporting portal (e.g., cookies, browsing history and/or search history), as well as information you provide to us when you correspond with us in relation to inquiries.

YES

G. Geolocation data

Physical location or movements.

YES

H. Sensory data

Audio, electronic, visual, thermal, olfactory, or similar information.

I. Professional or employment-related information

Current or past job history or performance evaluations.

J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

K. Inferences drawn from other personal information

Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

L. Sensitive Personal Information (see further information on use of sensitive personal information below)

Social security, driver's license, state identification card, or passport numbers; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; genetic data; the contents of a consumer's mail, email, and text messages unless you are the intended recipient of the communication; biometric information for the purpose of uniquely identifying a consumer; and personal information collected and analyzed concerning a consumer's health, sex life, or sexual orientation.

YES, as to the following types of information: account log-in, financial account in combination with any required security or access code password; or credentials allowing access to an account only.

M. Engagement Data

In certain instances, we may collect and use engagement data to understand and analyze your usage of our site. Engagement data is the collection and record of a user’s actions on a website or app, including clicks, page navigation and other interactions.

YES

N. Account Information

Where a user creates an account, their login details, metadata associated with the account and any data provided by the user to the account.

YES

We do not collect or use sensitive personal information other than:

To perform services, or provide goods, as would reasonably be expected by an average consumer who requests those goods or services;

As reasonably necessary and proportionate to detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information;

As reasonably necessary and proportionate to resist malicious, deceptive, fraudulent, or illegal actions directed at us and to prosecute those responsible for such actions;

For short-term, transient use (but not in a manner that discloses such information to another third party or is used to build a profile of you or otherwise alter your experience outside of your current interaction with us);

To perform services on behalf of our business;

To verify or maintain the quality or safety of a service or to improve, upgrade, or enhance such service or device; and

To collect or process sensitive personal information where such collection or processing is not for the purpose of inferring characteristics about a consumer.

Disclosure of Information: We disclose or within the last twelve (12) months have disclosed personal information collected from you for a business or commercial purpose to the categories of third parties indicated in the chart below. We may also disclose your information to other parties as may be required by law or regulation, or in response to regulatory inquiries or in connection with a business transaction.

Personal Information Category

Category of Third-Party Recipients

A. Identifiers

Service providers.

B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

Service providers.

C. Protected classification characteristics under California or federal law

N/A

D. Commercial information

Service providers.

E. Biometric information

N/A

F. Internet or other similar network activity

Service providers.

G. Geolocation data

Service providers.

H. Sensory data

N/A

I. Professional or employment-related information

N/A

J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))

N/A

K. Inferences drawn from other personal information

N/A

L. Sensitive Personal Information

Service providers.

Rights under the CCPA: The CCPA provides California residents with certain rights with respect to their personal information:

Right to request that we disclose, no more than twice in a 12-month period:

The categories and specific pieces of personal information we have collected about you.

The categories and sources from which personal information is collected.

The business or commercial purposes for collecting personal information.

The categories of third parties with whom we disclose personal information.

Whether we disclosed your personal information to a third party, and if so, the categories of personal information that each recipient obtained.

Right to request that we delete any personal information about you that we have collected from you, subject to certain exceptions. If we are required to delete your personal information, then upon receipt of a verifiable request, we will delete your personal information from our records and direct any service providers to delete your personal information from their records.

Right to opt-out of the “sale” or “sharing” of your personal information to third parties, as that term is defined in the CCPA. CIMI2603does not “sell” or “share” personal information as those terms are defined in the CCPA.

Right to request a correction to the personal information that we collect and share for purposes as set forth herein. If we receive a verifiable request to correct inaccurate personal information, we will use commercially reasonable efforts to correct the information as you have requested.

We will not discriminate against you for exercising your rights under the CCPA, including by denying service, suggesting that you will receive, or charging, different rates for services or suggesting that you will receive, or providing, a different level or quality of service to you.

The business or commercial purposes for collecting personal information are described in the ‘How We Use Your Information’ section above.

California residents can exercise their rights by submitting an online request by contacting us via the methods set forth above under “How to Contact Us”. You can designate an authorized agent to make a request on your behalf. We may require proof of your identity and that the agent is duly authorized by you. We do not discriminate against individuals exercising these rights.

Some internet browsers have incorporated “Do Not Track” features. Most of these features, when turned on, send a signal or preference (the “DNT Signal”) to websites you visit indicating that you do not wish to be tracked. At this time, we do not currently respond to DNT Signals.

NEVADA PRIVACY RIGHTS

In addition to the information above, Nevada residents have a right to submit a verified request directing us not to make any “sale” of covered information collected about the consumer to a person for such person to license or sell the information to additional persons, subject to certain exceptions. We do not sell covered information as it is defined under Nevada law.

VIRGINIA PRIVACY RIGHTS

The Virginia Consumer Data Protections Act (VCDPA) provides Virginia residents with certain rights with respect to their personal information:

Right to know the manner of collection and use of personal data (as set forth above).

Right to opt-out of targeting advertising and the “sale” of your personal information to third parties, as that term is defined in the VCDPA. CIMI2603does not engage in targeting advertising or the “sale” of personal information as that term is defined in the VCDPA.

Right to obtain a copy of the personal information you have provided to us.

Virginia residents can exercise their rights by contacting us via the methods set forth above in “How to Contact Us”. We will make every effort to respond to any request identified above within a commercially reasonable period of time, and no later than the time period provided for in the VCDPA.

SECURITY

CIMI2603 strives to use commercially reasonable physical and electronic security measures to protect against the loss, unauthorized access, misuse, or alteration of your personal information. We limit access to personal information to those employees, agents, contractors, and other third parties who have a business need to know. Please be aware though that, despite our best efforts, no security measures are perfect or impenetrable, and we cannot guarantee the security measures of third parties.

STORAGE/RETENTION

Personal information we collect will not be stored for longer than is necessary for the purposes described in this Policy, or to otherwise meet legal, regulatory, tax, accounting, or reporting requirements. In some cases, we may anonymize your personal information (so that it can no longer be associated with you and is no longer personal information) for research or statistical purposes, in which case we may use the information indefinitely without further notice to you.

HOW THIS POLICY MAY CHANGE

This policy may be amended or updated from time to time at our discretion. Any updates will be effective at the time of publication, unless specified otherwise. Your continued use of our Services after the publication of a policy update constitutes your consent to the changes. We will notify you prior to making policy updates that materially change the way we treat your personal data, and will not use your data in a materially different manner without your consent.