External Privacy Policy

Effective Date: August 20, 2025

Introduction

Tribal Regulatory Services (“TRS”, “the Company”) is committed to protecting the privacy and confidentiality of personal information. This Privacy Policy explains how information is collected, used, disclosed and safeguarded when individuals interact with the Company’s website, www.tribalreg.com.

Purpose

The purpose of this Policy is to establish a clear framework for the collection, use, and protection of personal information obtained through the TRS website. It ensures transparency for stakeholders and demonstrates TRS’s commitment to privacy and compliance with applicable legal and regulatory requirements.

Scope

This Policy applies to all visitors to the TRS website and to any personal information collected through online interactions. It does not cover information collected during TRS’s regulatory or compliance services, which are governed by client agreements and internal policies.

Definitions

• Personal Information (PI): Data that identifies, relates to, or could reasonably be linked to an individual, such as name, contact details or IP address.
• Sensitive Personal Information (SPI): Higher-risk categories of data, including government-issued identifiers, financial account information, and tribal enrollment identifiers.

Information Collected

TRS may collect the following categories of information:

• Information provided directly: Contact details or other data submitted via email, telephone, or other communications.
• Information collected automatically: Technical data such as IP address, browser type, device characteristics, and usage patterns when the website is accessed.

Use of Information

Collected information is used solely for legitimate business purposes, including:

• Operation and improvement of the website
• Response to inquiries and communication directed to the Company
• Monitoring of website security and performance
• Compliance with applicable legal or regulatory requirements

Information Sharing

Personal information is not sold. Information may be shared only in the following circumstances:

• With trusted service providers that support website operations, such as hosting or analytics providers
• With affiliates for purposes consistent with this Policy, including internal administration, service delivery, and compliance functions.
• With legal or regulatory authorities when required by law

Data Security

Reasonable administrative, technical and physical safeguards are maintained to protect personal information collected through the website. TRS continuously monitors and enhances its safeguards to reduce risk. TRS also protects confidential business partner information through contractual obligations, role-based access controls, and other safeguards consistent with industry standards.

Individual Rights

Where required by law, individuals may have rights to access, correct, or request deletion of personal information maintained by TRS. Requests will be reviewed and responded to in accordance with applicable legal obligations.

Policy Updates

This Policy may be updated periodically to reflect changes in practices or legal requirements. The “effective date” above indicates the latest version.