WEBSITE PRIVACY POLICY

This Website Privacy Policy (the “Policy”) describes how Biometric Technology Inc, a company incorporated under the laws of the State of Delaware, USA (the “Company”, “we”, “us”, or “our”), collects, uses, stores, discloses, and otherwise processes personal data of users of the website biometric.vision, as well as related pages, localized versions, landing pages, contact forms, and other Company web resources (the “Website”).

This Policy applies exclusively to personal data processing in connection with the use of the Website, including browsing Website pages, submitting requests through web forms, subscribing to newsletters, engaging in business communications, and other similar interactions with the Company via the Website.

This Policy does not govern personal data processing carried out in connection with the use of the Company’s products, SDKs, APIs, widgets, mobile applications, platforms, user accounts, biometric identification services, or other solutions, which may be subject to separate terms, notices, privacy policies, consents, or contractual documentation.

By using the Website (including browsing content, following links, or submitting information through forms), you confirm that you have read this Policy and expressly agree to its terms in full and without reservation. Your use of the Website constitutes your consent to the processing of personal data as described in this Policy. If you do not agree with the terms of this Policy, you must immediately discontinue use of the Website.

1. Data Controller

The data controller responsible for personal data processing within the scope of Website operation is:

Biometric Technology Inc

605 Geddes Street, Wilmington, New Castle, DE 19805, USA

Privacy inquiries: info@biometric.vision

In certain cases, personal data collected through the Website may be shared with and processed by affiliated entities and other companies within the Company’s corporate group where necessary for the purposes described in this Policy, including handling requests, providing user support, maintaining corporate communications, technical maintenance, ensuring security, internal administration, marketing, sales activities, contractual matters, and compliance with applicable law.

2. Scope of Application

This Policy applies to:

• visitors of the Website

individuals submitting inquiries through contact forms, demo request forms, partnership request forms, subscription forms, and other web forms available on the Website;

• individuals communicating with the Company via email where such communication was initiated through the Website

representatives of customers, counterparties, partners, investors, suppliers, and other organizations using the Website or submitting their data through the Website.

3. Categories of Personal Data We May Collect

• Depending on the nature of your interaction with the Website, we may process the following categories of personal data.

3.1 Information You Provide Voluntarily

We may collect and process:

• first and last name
• company name
• job title
• email address
• phone number
• country, region, and preferred language of communication
• contents of inquiries, messages, requests, applications, or other communications
• any other information you voluntarily provide through the Website.

Please do not submit excessive personal data or any special categories of personal data through the Website unless expressly required as part of a specific process, notice, or service.

3.2 Automatically Collected Information

When you visit and use the Website, we may automatically collect certain technical and usage-related information, including:

• IP address
• date and time of request
• device type
• browser type
• operating system type and version
• browser language
• information about interaction with the Website
• visited pages, referring URLs, and actions performed on the Website
• technical logs, error reports, and diagnostic data
• approximate location derived from IP address or similar technical signals
• cookie identifiers and similar online identifiers.

3.3 Information from Third-Party Sources

In limited cases, we may receive information about Website users from third parties, such as:

• web analytics providers
• bot protection and abuse-prevention service providers
• hosting providers, CDN providers, and other infrastructure providers
• the Company’s affiliated entities
• partners where interaction was initiated through a joint page, marketing activity, or partner channel.

The Website is not intended to serve as a general channel for collecting biometric data, identity document images, or other similar sensitive information unless explicitly provided through a dedicated functionality, notice, or separate policy.

4. Purposes of Personal Data Processing

We may use personal data of Website users for the following purposes:

• ensuring the operation, availability, stability, and security of the Website
• administering the Website, providing technical support, troubleshooting issues, preventing abuse, and responding to incidents
• processing inquiries, requests, applications, and communications submitted through the Website
• communicating with you in response to your requests
• providing information about the Company, its solutions, services, news, updates, events, and partnership or business opportunities
• organizing demonstrations, meetings, feedback sessions, and other business interactions

sending informational, business, and marketing communications, including news, invitations, updates, and materials about the Company’s products and services, where permitted under applicable law;

• improving the structure, content, functionality, and user experience of the Website
• analyzing Website traffic and usage
• internal administration, reporting, corporate governance, and business operations within the Company’s corporate group
• complying with legal obligations, responding to lawful requests from competent authorities, and protecting the Company’s legal rights and legitimate interests
• establishing, exercising, or defending legal claims.

5. Legal Bases for Processing

We process personal data on one or more of the following legal bases where and to the extent permitted by applicable law:

• your consent
• necessity of processing in order to respond to your request or take steps prior to entering into a contract
• necessity of processing for performance of a contract or interactions related to contractual relationships

the Company’s legitimate interests, including ensuring Website security, handling business inquiries, maintaining business communications, developing the Website, conducting marketing activities, performing corporate administration, and operating within the Company’s corporate group;

• compliance with legal obligations applicable to the Company
• other legal bases provided for under applicable law.

6. Email Communications, Newsletters, and Marketing Messages

If you submit an inquiry, subscribe to a newsletter, provide your contact details through the Website, register for an event, request a demonstration, or otherwise express interest in the Company or its products or services, we may use your contact details to send you:

• responses to your inquiries
• business communications
• Company news and updates
• invitations to events, webinars, and other activities
• marketing and informational materials about the Company’s products, services, and solutions
• other communications where permitted under applicable law.

Where applicable law requires separate consent for such communications, the Company will obtain and rely on such consent in accordance with applicable requirements.

You may opt out of receiving marketing and informational communications at any time by using the unsubscribe link included in the relevant communication or by contacting us using the contact details provided in this Policy. Such opt-out will not affect our ability to send you non-marketing communications where necessary to respond to your request, fulfill obligations, or comply with legal requirements.

7. Cookies and Similar Technologies

The Website may use cookies, pixels, tags, browser local storage, and similar technologies for the following purposes:

• ensuring the basic functionality of the Website
• storing user preferences
• analyzing and measuring Website traffic
• improving functionality and user experience
• protecting the Website and preventing fraudulent or malicious activity
• technical diagnostics and support
• organizing and evaluating communications, content, and marketing activities where permitted under applicable law.

We may use:

• strictly necessary cookies
• functional cookies
• analytics cookies
• other similar technologies to the extent permitted under applicable law and user preferences.

You may manage cookies through your browser settings and, where available, through the cookie management interface on the Website. Disabling certain cookies may affect the proper functioning of some Website features.

• Where the Website uses a separate cookie preference management tool or cookie notice, such settings and notices apply together with this Policy.

8. Disclosure and Sharing of Personal Data with Third Parties

We do not sell personal data of Website users and do not disclose such data to third parties except as described in this Policy, as required by applicable law, or with your consent.

We may disclose or transfer personal data to the following categories of recipients:

affiliated entities and other companies within the Company’s corporate group — for internal administrative, corporate, technical, marketing, contractual, and business purposes;

service providers and contractors — including hosting providers, CDN providers, CRM providers, email platform providers, analytics providers, cybersecurity providers, technical support providers, marketing platforms, and other IT service providers;

• professional advisors — including lawyers, auditors, consultants, insurers, and other professional advisors
• partners and counterparties — where necessary in connection with your inquiry, request, potential cooperation, or joint activity

acquirers, investors, successors, or other participants in a corporate transaction — in connection with a reorganization, merger, sale of business, assets or shares, investment transaction, or similar operation;

governmental authorities, courts, law enforcement agencies, regulators, and other authorized bodies — where required by law, binding request, court order, or where necessary to protect the Company’s legal rights and legitimate interests.

We take reasonable steps to ensure that such recipients maintain appropriate confidentiality and security safeguards and process personal data only within permitted limits.

9. International Data Transfers

The Website is accessible to users from different countries, and personal data related to its operation and maintenance may be processed in one or more jurisdictions, including outside the country of your residence or the country where the data was originally collected.

Such processing may take place, in particular, where the following are located:

• the Company
• its affiliated entities and other companies within the corporate group
• servers, data centers, and infrastructure providers
• hosting, CDN, analytics, email, and CRM service providers
• technical support, information security, marketing, and corporate support contractors.

Where personal data is transferred to another country, the Company implements reasonable organizational, contractual, and technical safeguards to protect such data to the extent required under applicable law.

When processing personal data of users located in the Republic of Kazakhstan, the Company ensures that the collection, recording, systematization, accumulation, and storage of such personal data are carried out using information systems and databases located within the territory of the Republic of Kazakhstan in accordance with applicable legislation of the Republic of Kazakhstan.

10. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted under applicable law.

In particular:

data submitted through Website inquiries is retained for the period necessary to process the inquiry, conduct follow-up interactions, and maintain reasonable archival records;

business correspondence data may be retained for the period necessary to manage relevant business relationships, document communications, and protect the Company’s legal rights;

newsletter subscription data is retained until you unsubscribe, the relevant communication is discontinued, or deletion is required on another applicable legal basis;

technical logs and security-related data are retained for the period necessary to ensure security, investigate incidents, conduct audits, and comply with legal requirements;

• analytics data may be retained for periods determined by the settings of relevant systems and internal data retention policies.

Upon expiration of applicable retention periods, personal data is deleted, anonymized, or otherwise processed in accordance with applicable law and the Company’s internal procedures.

11. Data Security

We implement reasonable organizational, technical, and administrative measures designed to protect personal data against accidental loss, destruction, alteration, unauthorized access, disclosure, or other unlawful processing.

Depending on the nature of processing, such measures may include:

• access control management
• authentication and account management procedures
• encryption during data transmission and, where applicable, at rest
• logging and monitoring
• backup and recovery procedures
• vulnerability management and updates
• contractual safeguards with contractors and service providers
• internal policies and personnel training.
• However, no method of transmission over the Internet and no data storage system can guarantee absolute security.

12. Data Subject Rights

Depending on your location and applicable legislation, you may have certain rights with respect to your personal data, including the right to:

• request confirmation as to whether your personal data is being processed
• access your personal data
• request correction, updating, or completion of inaccurate or incomplete data
• request deletion of your personal data
• request restriction of processing
• object to certain types of processing
• withdraw consent where processing is based on consent
• request data portability where provided under applicable law
• lodge a complaint with a competent data protection authority.

To exercise these rights, you may contact us using the contact details provided in this Policy. We may request additional information necessary to verify the identity of the requester and prevent unauthorized disclosure of personal data.

13. Children’s Data

The Website is not intended for use by children in violation of applicable law. We do not knowingly collect personal data from children through the Website unless explicitly specified for a particular section of the Website or a specific service.

If you believe that a child has provided personal data through the Website without proper authorization, you may contact us, and we will take reasonable steps to review the request and, where appropriate, delete the relevant data.

14. External Links and Third-Party Resources

The Website may contain links to third-party websites, platforms, services, and resources that are not controlled by the Company. This Policy does not apply to such third-party resources.

• We recommend reviewing the privacy policies and terms of use of such third parties before providing any personal data to them.

15. Language Versions

This Policy may be published in multiple languages. In the event of any inconsistencies, discrepancies, or differences in interpretation between versions in different languages, the English-language version shall prevail, unless otherwise required by applicable law.

16. Changes to This Policy

The Company may update this Policy from time to time, including in connection with changes to Website functionality, technologies used, business processes, corporate group structure, or applicable legal requirements.

The current version of the Policy is published on the Website with the date of the latest update indicated. Where applicable law requires separate notice of material changes, such notice will be provided accordingly.

• Your continued use of the Website after publication of an updated version of the Policy constitutes your acceptance of the revised terms.

17. Contact Information

For questions related to this Policy and the processing of personal data in connection with the Website, you may contact us at:

• Biometric Technology Inc.

605 Geddes Street Wilmington, New Castle, DE 19805, USA

Email: info@biometric.vision