Woodway Assurance Privacy Notice

Woodway Assurance takes privacy seriously and is committed to handling personal information responsibly. This notice explains how we collect, use, and protect personal information in connection with our website, our business and marketing activities, and our product, EviData™.

Website

When you visit our website, certain technical information is collected automatically. This may include your IP address, browser type and version, device and screen settings, operating system, pages visited, how they are used and approximate location. We use cookies and similar tools for:

• Essential purposes, to support core site functionality such as remembering cookie preferences
• Analytics purposes, to understand how our site is used, improve performance and help us provide better services. Analytics cookies may show us, for example, whether you are a returning visitor, pages most often viewed and how people interact with our content. We do not use them to build personal profiles or track you across other websites.

You can manage your cooking preferences at any time by adjusting your browser settings.

If you use a form or email link on the site, we collect the information you provide (such as name, email, organization and comments). This information is used to respond to your inquiry and manage our business relationship.

Business, Marketing and Communications

We may collect personal information directly from you if you:


• Communicate with us about our services

• Connect with us on social media

• Provide us with your details in the course of business discussions

• Interact with us at events or professional activities

This information typically includes your name, contact information, role, and organization. We use it to respond to inquiries, manage relationships and communicate about our services and activities.

EviData Software

EviData was built with privacy by design principles at its core. The software runs entirely within the client’s environment, with access restricted to authorized users. Data is processed securely and reports generated contain only risk metrics and measures of data utility and never personal information.

Clients upload their own datasets, and EviData uses AI-driven automation to assess both privacy risks and data utility. Woodway Assurance does not receive, access or retain client datasets. If support is required, it is provided within the client’s environment, without transferring the data to Woodway.

How We Use Information

We use personal information for limited and specific purposes:


• Operating, maintaining, and improving our website

• Responding to inquiries and providing support
• Carrying out sales and marketing activities in line with your communications preferences
• Managing business relationships and communications
• Hosting or participating in professional activities and events



Safeguards

We protect personal information using safeguards appropriate to its sensitivity, including:


• Administrative measures, such as privacy policies, staff training, and contractual protections with service providers

• Technical measures, such as access controls, encryption, and secure hosting

• Physical measures, such as restricted access to systems and facilities



Sharing Information

We may share personal information:


• With trusted service providers who support our website, communications or business operations, under confidentiality and security obligations

• If required by law or regulation

• In the context of a corporate transaction, with appropriate safeguards



We do not sell personal information.

Retention

We retain personal information only as long as necessary for the purposes described in this notice or as required by law.

Your Rights and Choices

If you have a privacy question or concern, please contact us first so we can try to resolve it. You also have the right to contact a privacy regulator in your jurisdiction. You may:

• Ask what personal information we’ve collected about you and why
• Ask for access to the personal information we hold about you
• Ask that we update, correct or delete your personal information
• Withdraw consent to certain uses or communications, subject to legal or contractual limits

We respect your right to privacy and won’t penalize you for exercising your rights. Please note however that some services depend on certain personal information. If you choose not to provide or request deletion of it, we may be unable to deliver those services.

Updates to This Notice

We may update this notice from time to time. The most current version will always be available on our website and will include the effective date.

Contact

For questions, concerns or to exercise your privacy rights, please use our contact form.

Effective date: September 2025