Effective Date: August 27, 2025

NorthRock Companies (“NorthRock”, “we”, “our”, or “us”) operate the websites northrockco.com and northrockco.com (collectively, the “Site” or “Website”). This Privacy Policy explains how we collect, use, disclose, and protect your Personal Information and your rights in relation to that data. It applies to:

• Visitors and users of the Site

• Information collected through email, text, or other electronic communications (“Electronic Communications”)

• Data collected via tools like Google® Analytics

This Privacy Policy does not apply to information you provide to us offline.

---

1. Acceptance of Terms

By accessing or using our Site or providing Personal Information via Electronic Communications, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please refrain from using our Site.

---

2. Information We Collect

We collect the following categories of information:

1. Automatically Collected Information:

   • IP address, browser type/version, pages visited, date/time of visit, time spent, and other technical data.

2. Information You Provide Directly:

   • Name, phone number, email address, birthdate, Social Security Number (SSN), and employment details (“Personal Information”).

   • Inquiries submitted through contact forms or email.

   • Information submitted when creating or logging into your account.

   • Form submissions and other communication initiated by you.

3. Information from Third Parties:

   • Data collected from third-party tools, such as Google® Analytics, including session duration, geographic data, referral source, and search behavior.

---

3. Use of Your Information

We may use your Personal Information for the following purposes:

1. Responding to your inquiries;

2. Providing information about NorthRock Companies and our properties;

3. Conducting transactions you request;

4. Verifying your identity for login access;

5. Sending updates or alerts;

6. Managing contractual relationships;

7. Meeting legal obligations or other lawful purposes.

We do not sell your Personal Information to third parties for marketing purposes.

---

4. Third-Party Providers and External Links

We may engage third-party providers to perform services on our behalf. These providers may have access to your Personal Information strictly for the purposes of performing services under contract with us.

This Site may also contain links to websites operated by third parties. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies directly.

---

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience, analyze traffic, and improve the Site. Cookies may include an anonymous unique identifier.

You can refuse cookies through your browser settings. However, disabling cookies may limit your use of certain features of our Site.

We use Google® Analytics, which collects data such as:

• Search behavior

• Session duration

• Geographic origin

• Navigation behavior

This information may be used for remarketing within the U.S. only. You can opt out of Google® Analytics by visiting: https://tools.google.com/dlpage/gaoptout/

---

6. Your Privacy Rights

Depending on your state of residence (e.g., California), you may have the right to:

• Know what personal data we collect, use, disclose, or sell

• Access your personal data

• Request deletion of your data

• Opt out of the sale or sharing of your personal data (if applicable)

• Correct inaccuracies in your personal data

• Limit the use of sensitive personal data

To exercise these rights, please contact us at:   info@northrockco.com

You may also submit authorized requests via an agent. We may verify your identity before processing any requests.

We do not sell or share Personal Information for monetary or cross-context behavioral advertising purposes.

---

7. Data Retention

We retain your Personal Information only as long as necessary to:

• Fulfill the purposes described in this Privacy Policy

• Comply with legal obligations

• Resolve disputes

• Enforce agreements

When no longer required, data is deleted or anonymized in accordance with our data retention policy.

---

8. Security Measures

We implement reasonable technical and organizational safeguards to protect your Personal Information, including:

• Secure socket layer (SSL) encryption

• Access control mechanisms

• Regular vulnerability assessments

Despite our efforts, no internet transmission is 100% secure. You use the Site at your own risk.

---

9. Sharing of Information

We reserve the right to disclose Personal Information:

1. As required by law or regulation

2. When legally necessary in our sole discretion

3. To protect our rights, property, users, or operations

4. To third parties in connection with a merger, sale, or asset transfer

5. As permitted with your explicit consent

In the event of a corporate transition (e.g., sale, merger), your data may be transferred to the new entity, subject to this policy.

---

10. Children’s Privacy

We do not knowingly collect Personal Information from children under 13 without verifiable parental consent. If we learn we have collected such information inadvertently, we will delete it promptly.

We recommend that users under 18 refrain from submitting any Personal Information on the Site.

---

11. Users Outside the United States

This Site is intended for U.S. users only. By accessing this Site from outside the U.S., you acknowledge and consent to:

• The transfer of your data to the United States

• Processing of your data under U.S. laws, which may be less protective than your local laws

---

12. Do Not Track Signals

Our Site does not currently respond to “Do Not Track” browser signals. However, you can manage cookie preferences through your browser settings.

---

13. Your Choices and Opt-Outs

You may opt out of communications or request that we delete or update your data by contacting us:   info@northrockco.com

Please note:

• Opting out of communications does not affect necessary transactional messages.

• Deletion of certain information may affect services previously rendered or access to your account.

---

14. California Shine the Light Law (CA Civil Code § 1798.83)

California residents may request information about the categories of personal data shared with third parties for direct marketing purposes. NorthRock does not currently share such data for these purposes. To make a request, contact:   info@northrockco.com

---

15. Changes to This Privacy Policy

We may update this Privacy Policy at any time. Revisions will be posted on this page with an updated effective date. Your continued use of the Site after any updates signifies your acceptance of the new terms.

We encourage you to review this policy periodically.

---

16. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:   info@northrockco.com