Effective Date: August 3, 2026

Introduction

This Privacy Policy describes how Providence Spaceliners Corporation ("we," "our," or "us") collects, uses, and shares your personal information when you use our website at https://www.providencespaceliners.com and related services.

Controller/Data Controller Information

Company: Providence Spaceliners Corporation

Legal Entity: Corporation

Jurisdiction: Delaware, United States

Address: 1500 North Grant Street, Suite C Denver, CO 80303 United States

Contact Email: policies@providencespaceliners.com

Data Protection Officer: policies@providencespaceliners.com

Representative: J G Bowman III

What Data We Collect

We may collect the following categories of personal information:

• Personal identifiers such as names, usernames, and account IDs
• Authentication information (stored in hashed/encrypted form)
• Contact information including email addresses, phone numbers, and mailing addresses
• Cookies, web beacons, and similar tracking technologies
• Information about how you use our services
• Payment information processed through third-party payment processors
• Information provided when contacting customer support
• Content you create, upload, or share through our services
• Device information, IP addresses, browser types, and technical data

How We Collect Data

We collect personal information through the following methods:

• Customer support interactions

How We Use Your Data

We use your personal information for the following purposes:

• To manage your account and user profile
• To analyze usage patterns and improve our services
• To send marketing emails and newsletters (with consent)
• For advertising and marketing purposes
• To comply with legal obligations and protect our rights

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal bases:

• Consent: Where you have given explicit consent for specific processing activities
• Contract: When necessary to perform a contract with you or take steps at your request
• Legal Obligation: When required to comply with legal obligations
• Legitimate Interest: For legitimate business interests, provided these do not override your fundamental rights
• Vital Interests: To protect vital interests where applicable

Third-Party Services

We may share your information with the following third-party service providers:

Analytics

Google Analytics: website analytics and user behavior tracking (Privacy Policy)

Google Analytics 4: advanced website analytics and user behavior tracking (Privacy Policy)

Google Tag Manager: tag management and marketing analytics (Privacy Policy)

Marketing & Advertising

Google Ads Conversion Tracking: advertising conversion measurement (Privacy Policy)

LinkedIn Insight Tag: professional advertising and analytics (Privacy Policy)

Payment Processing

Stripe: payment processing and financial transactions (Privacy Policy)

PayPal: payment processing and digital wallet services (Privacy Policy)

Paddle: payment processing and subscription management (Privacy Policy)

Klarna: buy-now-pay-later payment services (Privacy Policy)

Amazon Pay: payment processing using Amazon accounts (Privacy Policy)

GoCardless: direct debit and recurring payment processing (Privacy Policy)

Apple Pay: mobile payment and digital wallet services (Privacy Policy)

Google Pay: mobile payment and digital wallet services (Privacy Policy)

Shopify Payments: integrated e-commerce payment processing (Privacy Policy)

E-Commerce Platforms

WooCommerce: e-commerce platform functionality

Shopify: e-commerce platform and online store management (Privacy Policy)

Email & Communication

Mailchimp: email marketing and newsletter services (Privacy Policy)

Brevo (Sendinblue): email marketing and CRM services (Privacy Policy)

Authentication & Security

reCAPTCHA: spam protection and bot detection (Privacy Policy)

hCaptcha: spam protection and bot detection (Privacy Policy)

Akismet: spam filtering and content moderation (Privacy Policy)

Forms & Surveys

reCAPTCHA: spam protection and bot detection (Privacy Policy)

hCaptcha: spam protection and bot detection (Privacy Policy)

Akismet: spam filtering and content moderation (Privacy Policy)

Hosting & Infrastructure

Cloudflare: content delivery and security services (Privacy Policy)

Cloudflare Pages: static site hosting (Privacy Policy)

Namecheap: domain registration and hosting services (Privacy Policy)

Scheduling and Calendar

Calendly: scheduling platform (Privacy Policy)

Social and Embeds

YouTube: video hosting and streaming (Privacy Policy)

Vimeo: video hosting platform (Privacy Policy)

Google Maps: mapping and location service (Privacy Policy)

Customer Support

HubSpot: CRM and marketing automation (Privacy Policy)

E-Commerce Operations

We operate e-commerce functionality through the following platforms:

WooCommerce: e-commerce platform functionality

Shopify: e-commerce platform and online store management (Privacy Policy)

For e-commerce operations, we may process additional information including:

• Order information and purchase history
• Payment details (processed securely through third-party processors)
• Shipping and billing addresses
• Customer service communications
• Fraud prevention and security measures

International Data Transfers

We may transfer your personal information to countries other than your own. When we do so, we implement appropriate safeguards to protect your information, including:

• Adequacy decisions by relevant data protection authorities
• Binding Corporate Rules for intra-group transfers
• Certification schemes and codes of conduct

Your Privacy Rights

Depending on your location and applicable privacy laws, you may have the following rights regarding your personal information:

EU GDPR

EU residents have rights of access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with an EU supervisory authority.

UK GDPR

UK residents have similar rights under the UK GDPR. You may contact the ICO regarding complaints.

CA PIPEDA

Residents of Canada have rights of access and correction subject to limited exceptions.

US CA CCPA CPRA

California residents have rights to know, access, delete, correct, and opt-out of sale or sharing of personal information, and to limit use of sensitive personal information. We do not discriminate for exercising these rights.

ZA POPIA

South Africa residents have rights to access and correct personal information and to lodge a complaint with the Information Regulator.

BR LGPD

Brazil residents have rights of confirmation, access, correction, anonymization, portability, deletion, information about sharing, and the right to review automated decisions.

AU PRIVACY ACT

Australian residents have rights to access and correct personal information and to complain to the OAIC.

CH NFADP

Swiss residents have rights of access, rectification, deletion, and objection under the nFADP.

CN PIPL

China residents have rights to know, decide, limit or refuse processing, access and copy, correct, supplement, delete, and data portability where conditions are met.

IN DPDP

India residents may access, correct, and erase personal data and can nominate a person to exercise rights in case of incapacity.

KR PIPA

South Korea residents may request access, correction, deletion, and suspension of processing.

JP APPI

Japan residents may request disclosure, correction, suspension of use, or deletion of retained personal data.

US State Privacy Rights

Colorado

Residents of Colorado have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Virginia

Residents of Virginia have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Connecticut

Residents of Connecticut have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Utah

Residents of Utah have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Oregon

Residents of Oregon have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Texas

Residents of Texas have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Montana

Residents of Montana have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Indiana

Residents of Indiana have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Iowa

Residents of Iowa have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Tennessee

Residents of Tennessee have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Delaware

Residents of Delaware have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

New Jersey

Residents of New Jersey have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

New Hampshire

Residents of New Hampshire have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Nebraska

Residents of Nebraska have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Kentucky

Residents of Kentucky have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Minnesota

Residents of Minnesota have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Florida

Residents of Florida have rights to access, delete, and correct personal information and to opt out of targeted advertising, sale of personal data, and certain profiling. Appeals process is available.

Appeals Process: If we deny a request, you may appeal by replying to our response email. If unresolved, you may contact the state Attorney General.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure.

Children's Privacy

Our services are not directed to children, and we do not knowingly collect personal information from minors. If we become aware that we have collected personal information from children without appropriate consent, we will take steps to delete such information.

Do Not Track Signals

Our website does not respond to Do Not Track (DNT) signals. However, you can manage your privacy preferences through your browser settings and the options provided in this policy.

Marketing Communications

If you have consented to receive marketing communications, you can opt out at any time by:

• Clicking the unsubscribe link in our emails
• Contacting us using the information provided below
• Updating your preferences in your account settings (if applicable)

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The effective date at the top of this policy indicates when it was last revised. We will notify you of material changes through our website, email, or other appropriate means as required by applicable law.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or need to contact our Data Protection Officer, please reach out to us:

Email: policies@providencespaceliners.com

Address: 1500 North Grant Street, Suite C Denver, CO 80303 United States

Data Protection Officer: policies@providencespaceliners.com

International Transfers - EU-GDPR

If we transfer personal data outside the EEA, we rely on adequacy decisions or on appropriate safeguards such as the EU Standard Contractual Clauses. We implement supplementary measures where required.

Children's Privacy - EU-GDPR

Our services are not directed to children. Where consent is required for minors under local law, we obtain consent from a parent or guardian.

International Transfers - UK-GDPR

For transfers from the UK we use the UK Addendum to the EU SCCs or other approved transfer tools.

Children's Privacy - UK-GDPR

Our services are not directed to children. Where consent is required for minors under local law, we obtain consent from a parent or guardian.

International Transfers - BR-LGPD

International transfers follow LGPD mechanisms such as adequacy decisions or contractual safeguards.

Children's Privacy - BR-LGPD

Our services are not directed to children. Where consent is required for minors under local law, we obtain consent from a parent or guardian.

International Transfers - AU-PRIVACY-ACT

If we disclose personal information overseas, we take reasonable steps to ensure recipients protect it as required by the Australian Privacy Principles.

International Transfers - CH-NFADP

International transfers are based on the Swiss adequacy list or on appropriate safeguards such as the Swiss SCCs.

International Transfers - CN-PIPL

Cross border transfers follow PIPL mechanisms such as CAC security assessment, certification, or model contracts as applicable.

Children's Privacy - CN-PIPL

Our services are not directed to children. Where consent is required for minors under local law, we obtain consent from a parent or guardian.

International Transfers - IN-DPDP

We follow any government notifications designating restricted jurisdictions for cross border transfers.

Children's Privacy - IN-DPDP

Our services are not directed to children. Where consent is required for minors under local law, we obtain consent from a parent or guardian.

International Transfers - KR-PIPA

Cross border transfers are based on consent or other mechanisms allowed under PIPA.

Children's Privacy - KR-PIPA

Our services are not directed to children. Where consent is required for minors under local law, we obtain consent from a parent or guardian.

International Transfers - JP-APPI

For international transfers we obtain prior consent or rely on adequacy and safeguards required by APPI.

Children's Privacy - JP-APPI

Our services are not directed to children. Where consent is required for minors under local law, we obtain consent from a parent or guardian.