Privacy Notice

Effective as of 24-Dec-2025

HEXENS and its affiliates (collectively, "HEXENS", "we", "us", or "our") have updated our Privacy Notice ("Notice").

Welcome to Hexens Cyber Security Ltd, your trusted partner in blockchain and cybersecurity excellence. At HEXENS, we are dedicated to delivering cutting-edge tools and services that empower organizations and professionals to secure digital assets, analyze risks, and maintain compliance in an increasingly complex threat landscape.

As one of the leaders in blockchain security intelligence, HEXENS operates the Platform — an advanced ecosystem for smart contract analysis, risk assessment, and analytical insights. Through innovative APIs, on-demand feeds, and specialized tools, we enable developers, security researchers, enterprises, and institutions to proactively detect vulnerabilities, evaluate token and protocol risks, ensure standard compliance, and gain actionable intelligence across multiple blockchains.

This Notice serves as your guide to understanding how we handle your personal data when you engage with HEXENS's services. We strive to ensure clarity and transparency in our data processing practices, aligning with industry standards and legal requirements.

References to "Personal Data" within this Notice pertain to information that, either independently or in combination with other data, identifies, relates to, or could reasonably be linked directly or indirectly to an individual or household. In adherence to applicable law, "Personal Information" holds the same meaning as terms such as "personal data" or "personally identifiable information".

At HEXENS, our commitment to privacy entails responsible and ethical practices in collecting, using, processing, storing, transferring, protecting, and disclosing Personal Information. This Notice is crafted with your trust in mind, reflecting our dedication to ensuring that your data is handled only as explicitly outlined herein.

By engaging with our Platform, you agree to the terms and conditions outlined in this Notice.

WHAT PERSONAL DATA DO WE COLLECT?

The types of personal information we collect depend on your relationship with HEXENS and applicable law. Ways we may collect personal information include:

• Directly from you through interaction with the Services, surveys, sweepstakes, and requests for information;
• Passively during your visit to the Services, using technologies like cookies, as described below.

We endeavor to collect only that information which is relevant for the purposes of processing. Below are the ways we collect personal information and how we use it.

Additionally, we may collect the following categories of Personal Data from you in the course of business, including through your use of the Website, when you contact or request information from us, when we provide services to you or receive services from you. We collect the following personal data.

We will only use your Personal Data if and to the extent that applicable law allows. Aside from publicly available information, Personal Information that HEXENS collects is a function of how you interact with us.

Your Personal Information will be stored only for the time period necessary to fulfill the purposes outlined in this Privacy Notice, unless otherwise required or permitted by law.

WHY DO WE COLLECT PERSONAL DATA?

We use the Personal Information we collect for the following purposes:

• To provide advice and administer our client relationships, we use Personal Data that you voluntarily submit to us on the Platform or during the course of our engagement, regardless of the media used, such as identification data, contact details, and other data that we may process in connection with the provision of legal services.
• To provide relevant marketingfor example, we may use Personal Information to provide marketing and promotional information about products and services that HEXENS offers. Information you have provided to third parties may be combined with information we already have about you and may be used to create more tailored advertising and products. For information about how you can opt-out of receiving marketing communications from us at any time, or withdraw your consent to receive such communications, see the section titled "Your Data Privacy Rights".
• To address compliance and legal obligations, such as complying with the Firm's tax reporting obligations, checking the identity of new clients, and preventing money laundering and/or fraud, we use identification data, transaction data, compliance data, and device data. This processing is necessary to comply with legal requirements that apply to the Firm. In addition, job applicant data and compliance data may be used as necessary to comply with legal, regulatory, and corporate governance requirements to which we are subject to.
• To improve our Platform. For example, we may use Personal Information to administer our Platform and for internal operations of the Platform, including troubleshooting, data analysis, testing, research, and statistical purposes, to improve user experience and as a part of our efforts to keep our websites safe and secure. We use cookie and device data. This processing is necessary for our legitimate interests to constantly monitor the functionality and user-friendliness of our Platform and improve our online presence and services to you.
• Fraud Prevention. For example, we may use Personal Information to prevent, protect against, investigate, or prosecute any fraud, abuse, or other misuse or illegal activity using our products or services.

Except for publicly available information or information we collect via cookies and similar technologies (see below), all the above-mentioned Personal Information is collected from you. In some cases, it is collected from you directly by HEXENS (such as when you input the information into our Platform to download certain materials); in other cases, it is collected by a HEXENS partner and shared with HEXENS (such as when (i) you register for an industry conference where HEXENS is a sponsor, (ii) you click on a HEXENS advertisement on a third party platform, (iii) you purchase a product from an authorized reseller of HEXENS products and the order is provided to HEXENS, or (iv) you register for a course related to HEXENS software and/or seek certification from HEXENS).

DATA SHARING

We may disclose your Personal Data in accordance with applicable law and subject to applicable professional and regulatory requirements regarding confidentiality and professional secrecy.

In instances mandated by law, government directives, competent authorities, or court orders, we may disclose personal data. Such disclosures may be made to establish, exercise, or defend our legal rights or to prevent crime and fraud. For instance, we reserve the right to share personal data with professional advisors, investigators, or credit reference agencies for these purposes. Furthermore, disclosures may occur as a precautionary measure to mitigate liability, safeguard the rights, property, or safety of HEXENS, Remedy, our affiliates, our users, other individuals, or the public. This includes actions taken to uphold the security and integrity of our services or infrastructure, to shield HEXENS and/or Remedy and our services from fraudulent, abusive, or unlawful use, and to investigate and defend HEXENS and Remedy against third-party claims or allegations.

We may disclose your Personal Data to:

• legal and regulatory authorities, upon request, or for the purposes of reporting any actual or suspected breach of applicable law or regulation;
• accountants, auditors, lawyers and other outside professional advisors to the Firm, subject to binding contractual obligations of confidentiality.
• if we believe it is necessary to comply with a legal obligation, protect our rights or the safety of others, investigate fraud, or respond to a government request.

We may process this data in accordance with the terms of our contract with you (where we need this information to provide Services to you) or to take steps at your request prior to entering a contract.

We may store the information we collect in servers located in countries where we or our service providers have facilities. Therefore, we may transfer information to countries outside of your country of residence which may have data protection laws and regulations that differ from those in your country. Information regarding data transfer mechanisms will be made available upon your request.

DATA SUBJECT RIGHTS

Under certain circumstances and in compliance with applicable laws, you have the right to:

• Access. Subject to certain exceptions, you have the right to request a copy of the Personal Data we are processing about you, which we will provide to you in electronic form. At our discretion we may require you to prove your identity before providing the requested information. If you require multiple copies of your Personal Data, we may charge a reasonable administration fee.
• Rectification. You have the right to require that any incomplete or inaccurate Personal Data that we process about you is amended.
• Deletion. You have the right to request that we delete Personal Data that we process about you, unless we are required to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
• Restriction. You have the right to request that we restrict our processing of your Personal Data where:
  • you believe such data to be inaccurate;
  • our processing is unlawful; or
  • we no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not want us to delete it.
• Portability. You have the right to request that we transmit the Personal Data we hold in respect of you to another data controller, where this is:
  • Personal Data which you have provided to us;
  • and we are processing that data on the basis of your consent or in order to perform our obligations under contract to you (such as to provide legal services).
• Objection. Where the legal justification for our processing of your Personal Data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim.
• Withdrawing Consent. If you have consented to our processing of your Personal Data, you have the right to withdraw your consent at any time, free of charge.

Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the personal information or where data may be exempt from disclosure due to reasons of legal professional privilege or professional secrecy obligations.

DATA SECURITY

HEXENS takes the security of Personal Information seriously. To protect Personal Information against accidental or unlawful destruction, loss or alteration, HEXENS uses risk-based technical and organizational security measures reasonably designed to prevent any unauthorized disclosure or access. For example, HEXENS has implemented strict security controls, intrusion detection software and processes to alert us in the case of a potential or actual intrusion of our information systems. We endeavor to implement technical and organizational security measures in an effort to safeguard the Personal Data in our custody and control. Such measures include, for example, limiting access to Personal Data only to our staff and authorized service providers on a need-to-know basis for the purposes described in this Notice, as well as other administrative, technical, and physical safeguards including, when required or appropriate, obtaining written assurances from third parties that may access your personal information that they will provide a level of protection equivalent to that adopted by HEXENS.

CHILDREN'S PRIVACY PROTECTION

We understand the importance of protecting children's privacy in the interactive online world. This Platform is not designed for or intentionally targeted at children 13 years of age or younger. It is not our policy to intentionally collect or maintain information about anyone under the age of 13.

DATA RETENTION

We will only retain your personal information for as long as necessary for the purposes for which that information was collected as set out in this Privacy Notice or for longer as required under any applicable legal, regulatory, accounting, or reporting requirements.

The length of time for which we will retain your personal information will depend on the purposes for which we need to retain it. After we no longer need to retain your personal information, it will be deleted or securely destroyed.

THIRD PARTY SITES

Our Website may contain links to other sites which are controlled by third parties, for example in the "Insights" section. We also use social media sites, such as LinkedIn and Facebook and third party platform to host events, training and seminars. You should review these other sites' privacy policies. We do not accept any responsibility for the information you provide on those sites or their collection and use of your personal information.

CONTACT DETAILS

If you have any comments, questions or concerns about data privacy, including the processing of Personal Data carried out by us, or on our behalf, please contact us through info@hexens.io and send your request.

CHANGES TO THIS PRIVACY NOTICE

We may occasionally update this Notice as our services and privacy practices change, or as required by applicable legal or regulatory requirements. Where it is practicable, we will notify you by email of any significant changes. The "Last updated" legend at the end of this Notice indicates when this Notice was last revised. Any changes are effective when we post the revised Notice on the Services. We may provide you with disclosures and alerts regarding the Notice or Personal Data collected by posting them on our website and, if you are a User, by contacting you through our services.

We hope that this Notice can resolve any query or concern you raise about our use of your Personal Data.

How do you contact us?

If you feel, we have not handled your query or concern, to your satisfaction, you can contact us by sending an email to info@hexens.io. We make every effort to promptly address legitimate requests and aim to respond within 30 days of receiving your request. While we typically meet this timeframe, there may be occasions when additional time is required. In such cases, we will inform you of the delay, provide an explanation, and keep you updated on the progress of our response.

If you reside in a European country, you have the right to submit a complaint to the supervisory authority in your respective country.

In accordance with the provisions of the GDPR, you have several rights regarding your personal data that we process.

For more information see https://edps.europa.eu/data-protection/our-work/our-work-by-type/legislation_en

Please note that the exercise of your rights may be subject to additional legal conditions. To exercise any of your rights, please send us a written request, using the contact details above.

Last updated: 24-Dec-2025