POLICY PRIVACY

Last Updated December 2025

Skipdiy.com (“SkipDIY,” “we,” “us,” and “our”) respects your privacy and is committed to protecting it through compliance with this Privacy Policy (“Privacy Policy”). This Privacy Policy describes how we collect and use your Personal Information when you visit our website at https://www.skipdiy.com, you communicate with us, or we otherwise process your Personal Information (collectively, the “Platform”), except as specified below with respect to our role as a processor.

Information that SkipDIY collects about you:

We collect information about you (“Personal Information”):

- Directly from you when you provide it to us. When you make a purchase or request information from SkipDIY, we will ask for things like your name, contact (including email address and phone number), billing, shipping and communication information, and account ID or credentials in order to fulfill your request. If you set up an appointment with us through the Platform, attend a trade show or event, or otherwise contact us, you may also provide similar information. If you submit any Personal Information about other people to us or to our service providers, you are responsible for making sure that you have the authority to do so and to allow us to use their Personal Information in accordance with this Privacy Policy (for example, by obtaining their consent).

- Automatically when you use our Platform. We collect information about how you interact with the Platform including information about your device (such as IP address and other information about your device), the actions you take on our Platform, and through the use of cookies, pixel tags, and similar technologies (collectively, “cookies”).

GDPR

For users in the European Union, we adhere to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the "GDPR"). For users in the United Kingdom, we adhere to the GDPR as enshrined in the Data Protection Act 2018.

We have not appointed a Data Protection Officer as we do not fall within the categories of controllers and processors required to appoint a Data Protection Officer under Article 37 of the GDPR.

Consent

By using our Site users agree that they consent to:

- The conditions set out in this Privacy Policy.

If we have collected your Personal Information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect (1) the lawfulness of any processing we conducted prior to your withdrawal, or (2) processing your Personal Information under other legal bases.

- Legal Basis for Processing.

We collect and process personal data about users in the EU only when we have a legal basis for doing so under Article 6 of the GDPR.

We rely on the following legal bases to collect and process the personal data of users in the EU:

- Users have provided their consent to the processing of their data for one or more specific

purposes; and

- Processing of user personal data is necessary for us to take, at the request of a user, steps before entering a contract or for the performance of a contract to which a user is a party. If a user does not provide the the personal data necessary to perform a contract the

consequences are as follows: Unable to fulfill services.

How We Use Personal Data

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.

The data we collect is used for the following purposes:

- For Functionality and Development of the Platform. Some information, like your IP address, is used to communicate with your device to provide network connectivity, measure usage levels of the website, diagnose server problems and provide security features. Other business purposes that depend on use of your information include data analysis related to testing, modifying, improving or developing new products, services and technologies, and to identify trends. We also use information from the website to generate updates and reports, and to check that the website is working properly. Update functions may automatically check your system to see whether files need to be refreshed, updated, or modernized, in order to provide you with the up-to-date security, versions, features, options and controls associated with your systems or devices. We use cookies to make our websites operate, work more efficiently, and provide analytic information.

- To Provide AI Features: Some Platform features may leverage artificial intelligence (“AI”) tools to enhance performance capabilities. Our use of AI is designed to provide direct services to you. We do not use your Personal Information to train generalized, public AI models. We work with specialized AI sub processors and our instructions limit their use of your data to the provision of the specific service you are using.

- For Business Operations. We use information to operate our business; for example, to perform accounting, auditing, billing, reconciliation, and collection activities, or comply with contractual obligations.

- To Communicate. We use contact information to send messages; to communicate with you about the Platform and your account; to provide the Platform; to respond to customer service requests; to provide alerts such as security updates or changes in our policies or about subscriptions that are ending; and to send marketing or informational materials like newsletters or white papers, in accordance with your communication preferences. We occasionally conduct surveys or do focused research or studies through which you may choose to share information.

- To Protect and Secure the Platform: We may use information to keep our Platform safe, such as crime or fraud monitoring and prevention or cybersecurity efforts.

- For Advertising and Marketing. We may use Personal Information about you, including what advertisements you viewed and other information we collect, to enable us to provide personalized content, verify eligibility for and extend promotional offers, engage in targeted advertising, and study the effectiveness of advertising and marketing campaigns. This includes using data we collect from marketing partners through our affiliate referral program to support our targeted advertising.

- For Statistical Purposes to Improve the Platform. We may compile Platform statistics into traffic reports, which help SkipDIY understand, anticipate, and respond to user needs. If we learn, for example, of heightened interest in certain aspects of the Platform, we are likely to highlight that information on the Platform home page. This Information helps us create a better overall experience for Platform users.

- For Legal, Regulatory, and Compliance Purposes. We may use Personal Information to comply with legal, regulatory, or related obligations, including to protect our legal rights.

Who We Share Personal Data With

With Service Providers

We may share information with our authorized vendors and suppliers to provide services we have contracted for, such as product delivery, website hosting, data analysis, IT services, auditing, or customer service. We use a wide variety of software and tools at SkipDIY, and we process Personal Information using these tools as a regular course of business. We also share anonymized or aggregated information with suppliers for purposes such as analysis, identifying trends in the areas of our products and to help research and develop new SkipDIY services. Our contracts with suppliers and vendors include provisions to protect your Personal Information and limit its use.

Other Disclosures

We will not sell or share your data with other third parties, except in the following cases:

- For Advertising and Marketing. We share your information with our third-party company partners to prepare and deliver advertising and marketing content, to provide content services and to enable them to provide you with more personalized ads and to study the effectiveness of our campaigns.

- For Legal, Regulatory, or Related Purposes. We may disclose your information to the extent required by law or if we have a good-faith belief that such disclosure is necessary in order to comply with official investigations or legal proceedings initiated by governmental and/or law enforcement officials, or private parties, including but not limited to: in response to subpoenas, search warrants, or court orders.

- At Your Direction or With Your Consent. SkipDIY may disclose your Personal Information to any other person or entity where you consent to the disclosure or otherwise direct us to disclose the information.

- To buyers or potential buyers of this company in the event that we seek to sell the company. If you follow hyperlinks from our Site to another site, please note that we are not responsible for and have no control over their privacy policies and practices. We do NOT share your phone number or opt-in consent with third parties unless we’ve received your express written consent to do so.

How Long We Store Personal Data

User data will be stored until the purpose the data was collected for has been achieved. You will be notified if your data is kept for longer than this period.

How We Protect Your Personal Data

In order to protect your security, we use the strongest available browser encryption and store all of our data on servers in secure facilities. All data is only accessible to our employees. Our employees are bound by strict confidentiality agreements and a breach of this agreement would result in the employee's termination.

While we take all reasonable precautions to ensure that user data is secure and that users are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.

Your Rights as a User

Under the GDPR, you have the following rights:

- Right to be informed;

- Right of access;

- Right to rectification;

- Right to erasure;

- Right to restrict processing;

- Right to data portability; and

- Right to object.

- Right to Complain.

Additionally, under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and/or theSwiss-U.S. DPF, you may contact JAMS Mediation, Arbitration, and ADR Services (https://www.jamsadr.com/eu-us-data-privacy-framework) to address complaints and provide appropriate recourse free of charge to you. Under certain conditions, you may invoke binding arbitration. For additional information on pre-arbitration requirements, please see Annex I of the DPF Principles. You may also contact us by using one of the methods provided under the "HOW TO CONTACT US" section below. We will respond to any complaint directly to us within 45 days.

Children

We do not knowingly collect or use personal data from children under 16 years of age. If we learn that we have collected personal data from a child under 16 years of age, the personal data will be deleted as soon as possible. If a child under 16 years of age has provided us with personal data their parent or guardian may contact our privacy officer.

How to Access, Modify, Delete, or Challenge the Data Collected

If you would like to correct or update your Personal Information, or to request access to or deletion of your Personal Information, you may contact us by visiting the Platform or by using the contact details provided under the “HOW TO CONTACT US” section below. If you request a change to or deletion of your Personal Information, please note that we may still need to retain certain information for recordkeeping purposes, and/or to complete any transactions that you began prior to requesting such change or deletion (e.g., when you make a purchase or enter a promotion, you may not be able to change or delete the Personal Information provided until after the completion of such purchase or promotion). Some of your information may also remain within our systems and other records where necessary for compliance with applicable law.

Do Not Track ("DNT") is a privacy preference that you can set in certain web browsers. We do not track the users of our Site over time and across third party websites and therefore do not respond to browser-initiated DNT signals.

How to Opt-Out of Data Collection, Use or Disclosure

In addition to the method(s) described in the How to Access, Modify, Delete, or Challenge the Data Collected section, we provide the following specific opt-out methods for the forms of collection, use, or disclosure of your personal data:

1. You can opt-out of the use of your personal data for marketing emails. You can opt-out by clicking "unsubscribe" on the bottom of any marketing email or updating your email preferences under "Your Account"

Cookie Policy

A cookie is a small file, stored on a user's hard drive by a website. Its purpose is to collect data relating to the user's browsing habits. You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your internet browser, but this may decrease the quality of your user experience. We use the following types of cookies on our Site:

- Functional cookies

Functional cookies are used to remember the selections you make on our Site so that your selections are saved for your next visits;

- Analytical cookies

Analytical cookies allow us to improve the design and functionality of our Site by collecting data on how you access our Site, for example data on the content you access, how long you stay on our Site, etc; and

- Targeting cookies

Targeting cookies collect data on how you use the Site and your preferences. This allows us to personalize the information you see on our Site for you.

Modifications

This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy we will update the "Effective Date" at the top of this Privacy Policy. We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify users by email of changes to this Privacy Policy.

Right to Complain

If you have any complaints about how we process your personal data, please contact us through the contact methods listed in the Contact Information section so that we can, where possible, resolve the issue. We will respond to any complaint directly to us within 45 days. If you feel we have not addressed your concern in a satisfactory manner you may contact a supervisory authority in your region.

If you believe we are using your Personal Information in a way that is inconsistent with this Privacy Policy or for more information about your rights, you can contact your local data protection supervisory authority. The UK supervisory authority is the Information Commissioner's Office (ICO). You can visit their website at www.ico.org.uk. If you are in the EU, you can find your local data protection authority here. If you are in Switzerland, you can find your local data protection authority here. Additionally, under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and/or the Swiss-U.S. DPF, you may contact JAMS Mediation, Arbitration, and ADR Services https://www.jamsadr.com/eu-us-data-privacy-framework) to address complaints and provide appropriate recourse free of charge to you. Under certain conditions, you may invoke binding arbitration. For additional information on pre-arbitration requirements, please see Annex I of the DPF Principles. You may also contact us by using one of the methods provided under the "HOW TO CONTACT US" section below. We will respond to any complaint directly to us within 45 days.

Privacy Policy Updates

SkipDIY may change this Privacy Policy at any time, at its discretion. We will notify you of changes if required by law. Your continued use of the Platform after we make changes is deemed to be acceptance of and consent to those changes, so please check the Privacy Policy periodically for updates.

How to Contact us

If you have any questions, concerns or complaints, you can contact us at [email protected]