PRIVACY POLICY

Effective Date: August 27, 2026
Last Updated: August 27, 2026

1. About this policy

CDN Maverick Capital Corp. (“CDN Maverick,” “we,” “us” or “our”) respects your privacy and is responsible for personal information under its control.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information through cdnmaverick.com (the “Website”), including when you subscribe for company updates, ask to be contacted, send us an inquiry, download corporate materials or interact with Website features.

This policy is intended to address the privacy requirements that apply to our Website activities, including British Columbia’s Personal Information Protection Act, the federal Personal Information Protection and Electronic Documents Act where applicable, Québec’s private-sector privacy legislation where applicable, and Canada’s Anti-Spam Legislation for commercial electronic communications.

2. Information we collect

Information you provide

1. your name and email address;
2. your telephone number, if you choose to provide it;
3. your request to receive company news, news releases or investor updates;
4. your communications preferences and records of consent or withdrawal of consent;
5. the content of inquiries, messages or other information you choose to send us; and
6. information reasonably required to respond to a privacy request or complaint.

Please do not submit passwords, financial-account information, brokerage credentials, securities trading instructions, material non-public information or other sensitive information through the Website.

Information collected automatically

When you visit the Website, our systems and service providers may process technical and usage information such as:

1. Internet Protocol (IP) address;
2. browser, device and operating-system information;
3. general location derived from an IP address;
4. pages viewed, referring page, date and time of access and session information;
5. interactions with Website features, videos, links and downloads;
6. cookie or similar identifiers; and
7. security, server, performance and diagnostic logs.

Corporate materials and downloads

The Company’s presentation, fact sheet and other public corporate materials may be downloaded without providing your name, email address or telephone number. A download may still be recorded in ordinary server logs or, if you have consented to analytics, as an analytics event. Any form inviting you to request follow-up or subscribe for updates is separate and optional.

3. How we use information

We use personal information only for purposes that a reasonable person would consider appropriate in the circumstances, including to:

1. respond to an inquiry or request for investor-relations follow-up;
2. send company news, news releases and investor updates when you have subscribed or when otherwise permitted by law;
3. administer subscriptions, consent records and unsubscribe requests;
4. operate, maintain, secure and troubleshoot the Website and its forms;
5. prevent spam, fraud, automated abuse and malicious activity;
6. understand Website use and improve content and functionality, when analytics consent has been provided where required;
7. maintain appropriate business, legal, regulatory and compliance records;
8. establish, exercise or defend legal rights; and
9. respond to lawful requests or comply with legal, regulatory, securities-law or stock-exchange obligations.

If we wish to use personal information for a materially different purpose, we will identify that purpose and obtain additional consent where required.

4. Consent and electronic communications

We seek consent that is appropriate to the information and the purpose for which it will be used. Consent may be express or implied where permitted by law.

Submitting a general inquiry or asking to be contacted allows us to respond to that request. It does not, by itself, subscribe you to ongoing investor or promotional communications.

When you subscribe for company updates, we may send you news releases, investor updates, corporate information and similar communications. Our subscription request will identify CDN Maverick, explain the purpose of the subscription, provide required contact information and explain that you may withdraw consent.

You may unsubscribe at any time by using the unsubscribe link in an electronic communication or by contacting us. We will process a valid unsubscribe request without delay and no later than 10 business days after it is received. We may retain limited suppression information to ensure that your request continues to be honoured.

Withdrawing consent does not affect collection, use or disclosure that was lawful before the withdrawal. In some circumstances, we may retain or use information where permitted or required by law.

5. Cookies, analytics and embedded services

The Website uses essential technologies needed to operate forms, maintain security and provide requested functionality. With your permission, the Website may also use non-essential analytics, functional or embedded-media technologies.

When consent is required, non-essential technologies are disabled until you make a choice. You can accept or reject non-essential technologies and change your preferences through the Website’s cookie-preference tool. Disabling optional technologies may limit analytics or prevent some embedded content from displaying, but should not prevent access to public corporate materials.

Google Analytics and Google Tag Manager

We use Google Tag Manager to manage Website tags and, with consent where required, Google Analytics to understand Website traffic and interactions. Google Analytics may process information such as IP-derived general location, browser and device information, pages viewed, traffic source, engagement and interactions with links or downloads. We use this information in aggregated or statistical form to improve the Website.

Google reCAPTCHA

Website forms use Google reCAPTCHA to help distinguish legitimate use from spam, bots and malicious activity. reCAPTCHA may process IP address, browser and device information, interaction information and security signals. It is used for Website security and abuse prevention, not to subscribe you to communications.

Videos and market information

The Website may display videos hosted by Vimeo, YouTube or another identified video provider and may display market information supplied through a third-party market-data service. When optional third-party content is enabled or played, the provider may receive technical and interaction information and may use its own cookies or similar technologies. Those providers process information under their own privacy terms.

6. When we disclose information

We do not sell or rent Website subscriber lists or contact information to third parties for their own marketing.

We may provide personal information to service providers and authorized representatives that need it to perform work for us, including:

1. Website hosting, administration, development and security providers;
2. WordPress and form-administration providers;
3. email-distribution and communications providers;
4. Google in connection with Tag Manager, Analytics and reCAPTCHA;
5. embedded-video and market-data providers when those features are used;
6. investor-relations and corporate-communications providers acting for CDN Maverick; and
7. legal counsel, auditors, accountants and other professional advisors.

These parties may access personal information only as reasonably necessary for their authorized work and are required to protect it through appropriate confidentiality, security or contractual measures.

We may also disclose information when authorized or required by law, including to courts, law-enforcement bodies, privacy regulators, securities regulators or securities exchanges.

Information may be disclosed in connection with a proposed or completed financing, merger, acquisition, reorganization or sale of all or part of our business or assets, subject to applicable law and appropriate confidentiality protections.

7. Processing outside your jurisdiction

CDN Maverick and its service providers may process or store personal information outside your province, territory or country, including elsewhere in Canada or in the United States. Information processed in another jurisdiction may be subject to that jurisdiction’s laws and may be accessible to its courts, law-enforcement agencies or governmental authorities.

Before communicating personal information outside Québec where Québec law applies, we take the assessment and contractual steps required by that law.

8. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy and for applicable legal, regulatory, accounting, audit and legitimate business requirements.

1. Subscription information is generally retained while you remain subscribed. Limited suppression information may be kept after you unsubscribe.
2. Inquiry and follow-up records are retained for the period reasonably required to respond and maintain an appropriate business record.
3. Consent and unsubscribe records are retained for the period reasonably required to demonstrate compliance.
4. Analytics information is retained according to the configured retention period for the analytics service.
5. Server logs and backups are retained according to documented operational and security schedules.

When identifiable information is no longer required, we securely delete, destroy or anonymize it in accordance with our retention practices and applicable law.

9. Security and privacy incidents

We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity and amount of personal information under our control. These safeguards include access restrictions, account security, service-provider controls, Website security measures and procedures for securely retaining and disposing of information.

No Internet transmission or storage system is completely secure. If a privacy or security incident occurs, we assess it, take reasonable steps to reduce harm and notify affected individuals or regulators when required by law. We maintain incident records where required.

10. Your privacy rights

Subject to applicable law, you may request:

1. access to personal information we hold about you and information about how it has been used or disclosed;
2. correction of inaccurate or incomplete personal information;
3. withdrawal of consent to future use or disclosure based on consent;
4. cessation of optional electronic communications;
5. deletion or de-indexing where a right applies; and
6. a copy of eligible computerized personal information in a structured, commonly used technological format where required by law.

We may request only the information reasonably necessary to verify your identity and locate the relevant records. We will respond within the time required by applicable law and will explain any lawful limitation or refusal.

11. Complaints

You may contact our Privacy Officer with a question or complaint. We will acknowledge and review the matter, investigate where appropriate and communicate the outcome or next steps.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, the Commission d’accès à l’information du Québec or another regulator with jurisdiction.

12. Public-company communications

Website forms are not channels for securities trading instructions, personalized investment advice or selective disclosure of material non-public information. We may answer an inquiry only by referring to information already publicly disclosed where an additional response could conflict with securities laws, continuous-disclosure obligations or stock-exchange requirements.

This Privacy Policy is separate from the Website disclaimer, terms of use, forward-looking-information disclosures and other public-company disclosures.

13. Children and third-party links

The Website is intended for a general corporate and investment audience and is not directed to children. We do not knowingly seek to collect personal information from children through the Website. If we learn that a child has improperly provided personal information, we will review and delete it where appropriate.

The Website may link to third-party websites, including securities exchanges, regulatory filing systems, social-media platforms and news services. We do not control the independent privacy or security practices of those third parties. Their collection and use of information are governed by their own privacy terms.

14. Changes to this policy

We may update this policy to reflect changes to the Website, our information practices, service providers or legal requirements. We will post the revised policy with an updated effective date. We will provide additional notice or obtain additional consent when required for a material change.

15. Privacy Officer

Questions, privacy requests, withdrawals of consent and complaints may be directed to:

Privacy Officer

CDN Maverick Capital Corp.

Suite 2150 – 555 West Hastings Street

Vancouver, British Columbia  V6B 4N6

Canada

Email: info@cdnmaverick.com

Please do not send identity documents, passwords, financial-account information or other sensitive information by ordinary email unless we specifically request it through an appropriate secure process.