Block9 LLC

California Privacy Notice

Effective Date: April 30, 2026

Last Updated: April 30, 2026

Scope. This California
Privacy Notice applies solely to www.block9.app and the consulting, education, workshop, and merchandise offerings of Block9 LLC. Other Block9-affiliated products or applications operated under separate domains are governed by their own separate privacy notices.

This notice supplements the Block9 Privacy Policy and is provided in accordance with the California Consumer Privacy Act of 2018, as amended by the California Privacy
Rights Act of 2020 (collectively, the “CCPA”), and serves as our “Notice at
Collection” under California Civil Code § 1798.100(b). It describes how Block9
LLC collects, uses, discloses, and retains personal information about
California residents, and the rights California residents have under the CCPA.

Block9 LLC provides technology consulting, education, and merchandise related to blockchain technologies. We are technology professionals, not financial, investment, legal, or tax advisors.

1. Categories of Personal Information We Collect

In the preceding 12 months, Block9 may have collected the following CCPA categories of personal information about California residents, depending on how the individual interacted with our Site, Services, merchandise, or educational
offerings:

• Identifiers — name, email address, phone number, mailing address, IP address, account identifiers, and (for cryptocurrency payments) wallet addresses and on-chain transaction identifiers tied to a Block9 invoice.

• Customer records — billing and shipping
addresses and payment confirmation details. Block9 does not directly store full payment-card numbers, bank-account numbers, or similar sensitive financial account information; those are handled by our payment processors.

• Commercial information — records of services booked, products purchased, returns, and items viewed or added to cart.

• Internet or other electronic network activity — browsing history on www.block9.app, device and browser information, interactions with our Site, and similar usage data collected through cookies and analytics tools.

• Geolocation data — approximate (non-precise) location derived from IP address.

• Professional or employment-related information — job title, company name, and business contact information when an individual engages Block9 on behalf of an employer.

• Audio or visual information — session
recordings, where applicable and with consent, made for quality and reference
purposes.

• Inferences — inferences drawn from the above to
characterize blockchain interests or service preferences.

Sensitive Personal Information. Block9 does not knowingly collect categories of
“sensitive personal information” as defined by the CCPA (such as Social
Security numbers, driver's license numbers, precise geolocation, racial or
ethnic origin, religious beliefs, genetic data, biometric data, health information, or contents of mail/email/messages not directed to Block9). Because we do not collect or use sensitive personal information for purposes that would trigger the CCPA's “right to limit”, that right is not applicable to our processing.

2. Sources of Personal Information

We collect personal information from the following CCPA-defined sources:

•  Directly from the individual (e.g., when you create an account, contact us, book a session, place an order, or attend a workshop).

• Automatically through your device when you interact with the Site, via cookies and analytics tools.

• From service providers that perform functions on our behalf (hosting, payment processing, fulfillment, communications, analytics,
advertising).

• From advertising and analytics platforms used to support marketing.

• From affiliate partners, only to the limited extent they share information about referred purchases.

3. Purposes for Which We Use Personal Information

Block9 uses personal information for the following business and commercial purposes:

• Providing, scheduling, and delivering consulting, education, workshop, and configuration services.

• Processing payments, fulfilling orders, arranging shipping, and handling returns.

• Communicating with clients about bookings, orders, and service delivery.

• Operating, maintaining, and improving the Site and our Services.

• Marketing and advertising, including measuring effectiveness.

• Detecting, investigating, and preventing fraud, abuse, and security incidents.

• Complying with legal obligations and responding to valid legal process.

4. Categories of Personal Information Disclosed for a Business Purpose

In the preceding 12 months, Block9 may have disclosed the following categories of personal information for a business purpose to the following categories of
recipients:

• Service providers — hosting and commerce (e.g., Shopify); payment processors (e.g., Stripe, PayPal, Apple Pay); fulfillment vendors (e.g., Printify); communications and collaboration platforms (e.g., gGoogle Workspace); analytics and advertising platforms; customer-relationship-management
systems; and similar operational vendors. Categories disclosed: identifiers, customer records, commercial information, internet activity, geolocation, professional information, and inferences.

• Affiliate partners — when an individual
completes a purchase through an affiliate link (e.g., Amazon, SoloSatoshi LLC, Ryder, and more), the partner receives information directly from
the individual under the partner's own privacy policy. Block9 does not transmit
consumer personal information to affiliate partners outside of the
click-through referral itself.

• Legal and safety — government authorities, courts, or other parties where required by law, valid legal process, or where reasonably necessary to protect rights, property, or safety. All categories may be disclosed in this circumstance.

5. Sales and Sharing of Personal Information

Sale. Block9 does not sell personal information for monetary consideration.

Sharing for Cross-Context Behavioral Advertising. Block9 may engage in “sharing” as defined by the CCPA when the Site uses third-party advertising or analytics tools (such as Meta or Google) that may receive identifiers and
internet-activity information for cross-context behavioral advertising. Categories that may be shared: identifiers and internet or other electronic network activity. California residents have the right to opt out of this
sharing; see Section 7 below.

Block9 does not knowingly sell or share the personal information of consumers under 16 years of age.

6. Retention

Block9 retains each category of personal information for only as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide services, comply with legal obligations, resolve disputes, and enforce agreements.

Specifically:

• Account, transaction, and communication records: typically retained for the duration of the customer relationship and for a period thereafter consistent with applicable tax, accounting, and legal requirements (generally up to seven years).

• Marketing-list and analytics data: retained until the individual unsubscribes or until the data is no longer reasonably useful for the purpose collected.

•  Cookies and similar technologies: retained per the cookie's stated lifespan or until cleared by the user.

•  Session recordings: retained only for the period reasonably necessary for quality and reference purposes, then deleted.

Where personal information is no longer needed for any of the purposes above, Block9 will delete or de-identify it.

7. Your Rights Under the CCPA

California residents have the following rights, subject to verification and applicable exceptions:

• Right to Know. Request that Block9 disclose the categories and specific pieces of personal information collected, the categories of sources, the purposes for collection, and the categories of third
parties to whom information has been disclosed.

• Right to Delete. Request that Block9 delete personal information collected from you, subject to exceptions permitted by law (including the inability to delete information recorded on a public blockchain, which is immutable and outside Block9's control).

• Right to Correct. Request that Block9 correct inaccurate personal information.

• Right to Opt Out of Sale or Sharing. Direct Block9 not to sell or share your personal information. Block9 does not sell personal information; opt-out applies to sharing for cross-context behavioral
advertising. You may exercise this right by following our opt-out process or by
enabling the Global Privacy Control signal in your browser.

• Right to Limit Use of Sensitive Personal Information. This right applies only where a business uses or discloses
sensitive personal information for purposes beyond those permitted under the CCPA. Block9 does not collect or use sensitive personal information for
purposes that trigger this right; accordingly, no “Limit” action is required.

• Right to Non-Discrimination. Block9 will not deny services, charge different prices, or provide a different level or quality of service because you exercised any CCPA right.

8. How to Exercise Your Rights

You may submit a CCPA request by:

Email: privacy@block9.app

Online: www.block9.app/pages/contact

Verification. To protect your information, we will verify your identity before responding to a Right to Know, Right to Delete, or Right to Correct request. Verification may include matching information you provide with information already in our records (such as confirming your email and recent transaction details). The level of verification will be proportional to the sensitivity of the request.

Authorized Agents. You may designate an authorized agent to submit a request on your behalf. The agent must provide a written authorization signed by you, and
Block9 may require you to verify your identity directly and confirm that you
authorized the agent.

Response Times. Block9 will confirm receipt of your request within 10 business days and will respond substantively within 45 calendar days. We may extend this period by an additional 45 days when reasonably necessary, with notice to you.

Appeals. If Block9 declines a request, you may appeal by replying to our response email or contacting privacy@block9.app with the subject line “CCPA Appeal.”

9. Public Blockchain Data

Blockchain Data Limitation. When
you make a peer-to-peer cryptocurrency payment to Block9, the transaction is
recorded on a public blockchain. Public blockchain data — including wallet
addresses, transaction amounts, and timestamps — is publicly visible,
immutable, and outside Block9's control. Block9 cannot delete, modify,
anonymize, or restrict access to information once it is recorded on a public blockchain. Your CCPA rights apply only to personal information that Block9 itself collects and controls; they do not extend to data on public blockchains.

10. Related Policies

This California Privacy Notice should be read alongside the Block9 Privacy Policy, which describes our broader data practices. Service-related terms (rescheduling, shipping, refunds, payments) are governed by the Refund & Rescheduling Policy and the Shipping Policy, all available at www.block9.app.

11. Contact

Privacy and CCPA requests: privacy@block9.app

General inquiries: sales@block9.app

Phone: (636) 224-8069

Mailing address: Block9 LLC, Attn: Privacy, PO Box 2, Barnhart, MO 63012, USA

Web: www.block9.app

12. Changes to This Notice

Block9 may update this notice as our operations evolve or as the law changes. The current version is posted at www.block9.app, with the Effective Date and Last Updated dates noted at the top of this document.