LEGAL

Privacy Policy.

Last updated: August 2026

01 Introduction

02 Information We Collect

03 How We Use Information

04 Sharing of Information

Introduction

EvoGenesis Inc. ("EvoGenesis," "we," "our," or "us") is committed to protecting the privacy of individuals who interact with our website, services, and communications. This Privacy Policy describes how we collect, use, disclose, and safeguard information about you when you visit www.evogenesis.co (the "Site"), communicate with our team, or otherwise engage with us in a business or professional capacity.

Please read this policy carefully. By using the Site or providing us with your information, you acknowledge that you have read and understood the practices described herein. If you do not agree with this policy, please discontinue your use of the Site and our services.

This policy applies to information we collect directly from you and, where applicable, from third-party sources. It does not apply to information collected by third-party websites, applications, or services that may be linked to or accessible from our Site, each of which is governed by its own privacy terms. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.

Information We Collect

We collect information in a number of ways — directly from you when you voluntarily provide it, automatically as you interact with our Site, and, in limited circumstances, from publicly available sources or business partners. The categories of information we may collect include the following:

Contact information. When you submit an inquiry, request a meeting, or correspond with us by email or telephone, we collect your name, email address, phone number, company name, job title, and any other information you choose to provide. This applies to general inquiries, investor relations contacts, and partnership or feedstock discussions.
Usage data. We automatically collect certain technical information when you visit the Site, including your IP address, browser type and version, operating system, referring URLs, pages viewed, time and date of your visit, and general geographic location derived from your IP address. This information is collected through standard server log files and standard security and server logs.
Cookies and tracking technologies. The Site currently uses cookies needed for security, delivery, and core functionality. See Section 5 for more detail on how we use cookies and how you can manage your preferences.
Business contact information. In the course of commercial discussions — including with potential feedstock suppliers, energy offtake partners, technology licensees, and investors — we may collect professional contact details, company information, and records of correspondence in order to manage business relationships.
Communications and correspondence. Any information you include in emails, contact forms, or other direct communications with us may be retained as part of our business records, subject to the retention practices described in Section 6.

We do not intentionally collect sensitive personal information such as government identification numbers, payment card details, biometric data, or information relating to health, race, religion, or political views. If any such information is inadvertently provided, we will take steps to delete it promptly.

How We Use Information

We use the information we collect for purposes that are consistent with the context in which it was provided and that are necessary for the legitimate operation of our business and development of our technology platform. Specifically, we use your information for the following purposes:

Responding to inquiries. To reply to messages, questions, and meeting requests submitted through the Site or by email, and to follow up on partnership discussions and investor communications.
Operating and improving the Site. To monitor Site performance, diagnose technical issues, analyze usage patterns, and make improvements to content, structure, and functionality over time.
Managing business relationships. To maintain records of commercial discussions with feedstock suppliers, energy buyers, technology partners, and investors, and to fulfill obligations arising from letters of intent, memoranda of understanding, or other agreements.
Communications and marketing. To send you information about EvoGenesis, including updates on our technology, commercialization milestones, and investor-relevant news, where you have requested such communications or where we have a legitimate interest in contacting you as a relevant professional or business contact.
Legal and regulatory compliance. To comply with applicable laws, regulations, and legal process, including maintaining records as required by applicable corporate, tax, and securities regulations.
Security and fraud prevention. To detect, investigate, and prevent potentially fraudulent, abusive, or unlawful activity, and to protect the integrity of our systems, networks, and communications.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you without your explicit consent. We do not sell your personal information to third parties for their own commercial purposes.

EvoGenesis does not sell, rent, or trade personal information to or with third parties for their own marketing purposes. We may share your information in the following limited circumstances:

Service providers and contractors. We engage trusted third-party vendors to help us operate the Site and conduct our business — including hosting providers, analytics services, email delivery platforms, and customer relationship management tools. These service providers are permitted to use your information only as necessary to perform services on our behalf, and are contractually required to maintain appropriate security and confidentiality standards.
Business partners. In the course of commercial discussions, we may share contact details or company information with potential feedstock partners, offtake counterparties, or co-investors, where such sharing is necessary to advance a business relationship and is consistent with the expectations under which the information was provided.
Legal requirements. We may disclose information if required to do so by law or in response to a valid legal request from a court or government authority, including in connection with regulatory inquiries, audits, or legal proceedings.
Corporate transactions. If EvoGenesis undergoes a merger, acquisition, financing, restructuring, or sale of all or substantially all of its assets, your information may be transferred to the relevant successor entity as part of that transaction. We will notify you of any such change in control that materially affects the processing of your personal information.
With your consent. We may share your information with other parties where you have given us your explicit consent to do so.

Where information is transferred outside of your country of residence — including to service providers or partners located in the United States or other jurisdictions — we take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable data protection law.

Cookies

Our Site currently uses cookies and related technologies needed for security, content delivery, and core operation.

Strictly necessary cookies. These support essential functions such as security, session management, and navigation.
Analytics and performance cookies. We do not currently use Google Analytics or marketing analytics cookies on the public Site. If that changes, we will update this policy and provide any consent controls required by law.
Third-party security services. Our hosting and security providers may set essential cookies or process technical request information to protect and deliver the Site.

You can control or delete cookies through your browser settings. Disabling essential cookies may affect Site functionality.

Data Retention

We retain personal information only as long as reasonably necessary for the purpose for which it was collected, an ongoing business relationship, legal or regulatory obligations, security, or another legitimate business need.

When information is no longer required, we take reasonable steps to delete or anonymize it. You may also request access, correction, or deletion as described below.

Your Rights

Depending on your country of residence, you may have certain rights with respect to the personal information we hold about you. These rights may include:

Right of access. The right to request a copy of the personal information we hold about you, including information about the purposes for which it is processed, the categories of information involved, and the recipients to whom it has been disclosed.
Right to rectification. The right to request that we correct any inaccurate or incomplete personal information we hold about you without undue delay.
Right to erasure. The right to request that we delete your personal information where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing was based, or where the processing is otherwise unlawful.
Right to restriction of processing. The right to request that we restrict or suspend the processing of your personal information in certain circumstances, such as while the accuracy of the information is contested or an objection to processing is under consideration.
Right to data portability. Where processing is based on consent or the performance of a contract and is carried out by automated means, the right to receive your personal information in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.
Right to object. The right to object to our processing of your personal information where that processing is based on our legitimate interests, including for the purposes of direct marketing.
Right to withdraw consent. Where we rely on your consent as the legal basis for processing, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights described above, please contact us using the details set out in Section 8. We will respond to your request within the timeframes required by applicable law, and in most cases within thirty days of receipt. We may need to verify your identity before processing your request, and in some circumstances we may be unable to comply with your request — for example, where doing so would reveal information about another person, or where we are required by law to retain the information.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with a data protection supervisory authority, you also have the right to lodge a complaint with the relevant authority if you believe your rights have not been respected.