Privacy Policy

1. Who We Are

JNA Resource Advisory, LLC is a professional geological consulting firm registered in the State of Arizona, USA. We provide independent Qualified Person certifications, mineral resource and reserve estimation, and technical due diligence services to the global mining, finance, and legal sectors. Our principal place of business is Globe, Arizona, USA.

For all privacy-related matters, the data controller and point of contact is:

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily submit to us through the website's contact form, email correspondence, or phone calls. This may include:

• Identity information: Your full name and job title
• Company information: Your company or organization name
• Contact information: Email address and phone number
• Enquiry details: The service you are enquiring about, your project description, timeline, and any other information you choose to include in your message

Providing this information is entirely voluntary. However, if you do not provide contact details, we will be unable to respond to your enquiry.

2.2 Information Collected Automatically

When you visit the Site, certain technical information may be collected automatically by our hosting provider or analytics tools, including:

• IP address (anonymized where possible)
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website (the page you came from before visiting our site)
• Date and time of your visit

This information is collected in aggregate form to help us understand how the Site is used and to improve its performance. It is not used to identify you personally.

2.3 Information We Do Not Collect

We do not collect or process:

• Payment card or financial account information (we do not process payments through the website)
• Sensitive personal data such as health information, racial or ethnic origin, religious beliefs, or biometric data
• Social media account information
• Data from minors under the age of 18

3. How We Use Your Information

We use the information we collect for the following purposes:

• Responding to enquiries: To review your submitted enquiry, assess the nature of the services requested, and contact you to discuss your project and our ability to assist.
• Providing professional services: Once an engagement is initiated, to communicate with you about the scope of work, deliverables, and project status.
• Conflict-of-interest screening: As a Qualified Person firm bound by professional independence obligations under NI 43-101, SK-1300, and JORC, we are required to evaluate potential conflicts of interest before accepting any engagement. Information you provide may be used for this internal screening process.
• Improving our website: To analyze how visitors use the Site and identify areas for improvement, using aggregated, non-personal analytics data.
• Legal compliance: To comply with applicable laws, professional regulations (including AIPG CPG standards and SME RM obligations), and court orders.
• Record keeping: To maintain accurate records of professional communications as required by our professional obligations.

4. Legal Basis for Processing

Where applicable under data protection laws (including the General Data Protection Regulation for visitors from the European Economic Area), we process your personal data on the following legal bases:

• Consent: When you submit a contact form, you consent to us processing your information for the purpose of responding to your enquiry.
• Legitimate interests: We process automatically collected technical data based on our legitimate interest in maintaining and improving our website and protecting against fraudulent or malicious traffic.
• Legal obligation: Where we are required to retain certain records to comply with professional licensing obligations, securities regulations, or applicable law.
• Performance of a contract: Once a consulting agreement is in place, we process information as necessary to fulfill our contractual obligations.

5. Information Sharing and Disclosure

We do not sell, rent, trade, or share your personal information with third parties for their own marketing or commercial purposes. We may share your information only in the following limited circumstances:

5.1 Service Providers

We use a small number of trusted service providers to operate the website and manage communications. These may include:

• Website hosting: Netlify, Inc. (netlify.com) — hosts the Site and processes contact form submissions on our behalf
• Email service: Our email hosting provider for communications
• Calendar/scheduling: Calendly, LLC — if you use a scheduling link to book a consultation

All service providers are contractually obligated to use your data only as necessary to provide services to us, and not for any other purpose.

5.2 Professional Peer Review

For certain engagements, JNA Resource Advisory engages independent peer reviewers to verify geological conclusions before QP certifications are signed. Any project information shared with peer reviewers is subject to a Non-Disclosure Agreement and is used solely for technical review purposes.

5.3 Legal Requirements

We may disclose your information if required to do so by law, subpoena, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of JNA Resource Advisory, our clients, or the public.

5.4 Business Transfer

In the event of a merger, acquisition, or sale of the business or its assets, personal information held by JNA Resource Advisory may be transferred to the acquiring entity. We will notify affected individuals by email or prominent notice on the Site before any such transfer occurs.

6. Cookies and Tracking Technologies

The JNA Resource Advisory website is designed to be minimal in its use of tracking technologies. Our use of cookies is limited to what is necessary for the site to function properly.

6.1 Strictly Necessary

We use no persistent tracking cookies of our own. Our hosting provider (Netlify) may set a session cookie to manage form submissions and protect against cross-site request forgery. This cookie is temporary and deleted when you close your browser.

6.2 Analytics

If we implement website analytics in the future (such as a privacy-first analytics tool), we will update this policy to describe those tools, what they collect, and how to opt out. We will not implement Google Analytics or similar tracking without updating this policy and, where required, obtaining your consent.

6.3 Google Fonts

Our website loads fonts from Google Fonts. When your browser requests these fonts, Google may receive your IP address. Google's use of this data is governed by Google's own privacy policy at policies.google.com/privacy. If you prefer not to have this data sent to Google, you can disable font loading in your browser settings (the site will fall back to system fonts).

6.4 Managing Cookies

You can control and delete cookies through your browser settings. For instructions, visit your browser's help documentation. Note that disabling cookies may affect the functionality of some features of the Site, including the contact form.

7. Data Security

We take the security of your information seriously. We implement the following measures to protect against unauthorized access, disclosure, alteration, or destruction of your personal information:

• All data transmitted between your browser and our Site is encrypted using HTTPS/TLS
• Contact form submissions are transmitted securely to our email systems
• Internal client files are stored in encrypted, access-controlled cloud storage (Microsoft SharePoint) with role-based permissions
• Business accounts are protected with strong passwords and multi-factor authentication
• Access to client data is limited to the principal consultant and, where applicable, contracted peer reviewers bound by NDA

No method of data transmission or storage is 100% secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by professional or legal obligations:

• Enquiries that do not result in an engagement: Contact form submissions and related correspondence are retained for up to 24 months. After this period, they are securely deleted unless you have consented to longer retention.
• Completed engagements: Project files, correspondence, and data related to completed consulting engagements are retained for a minimum of 7 years following completion of the engagement. This retention period reflects: (a) the statute of limitations for professional liability claims under Arizona law; (b) obligations under NI 43-101, SK-1300, and JORC standards for record-keeping of public technical reports; and (c) potential requirements from securities regulators.
• Technical/analytics data: Anonymized website analytics data may be retained indefinitely as it cannot be linked to an individual.

Upon expiration of the applicable retention period, personal data is securely deleted or anonymized.

9. Your Rights and Choices

Depending on your location, you may have the following rights with respect to your personal information:

• Right to access: Request a copy of the personal information we hold about you
• Right to rectification: Request correction of inaccurate or incomplete information
• Right to erasure: Request deletion of your personal information, subject to our legal and professional retention obligations described in Section 8
• Right to restriction: Request that we limit the processing of your information in certain circumstances
• Right to data portability: Receive your personal information in a structured, machine-readable format
• Right to object: Object to processing based on our legitimate interests
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing

If you are located in the European Economic Area and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection supervisory authority.

10. International Visitors

JNA Resource Advisory is based in the United States and our website is hosted in the United States. If you are visiting from outside the United States — including from Canada, Australia, the European Economic Area, or West Africa — your information will be transferred to, stored, and processed in the United States. U.S. data protection laws may differ from those in your home country.

By submitting an enquiry or using the Site from outside the United States, you acknowledge that your information will be processed in the United States in accordance with this Privacy Policy. For clients in the European Economic Area, we will ensure that any transfer of personal data is subject to appropriate safeguards as required by applicable law.

11. Children's Privacy

The JNA Resource Advisory website and our professional services are directed exclusively to business professionals in the mining, finance, and legal sectors. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected personal information from a minor without parental consent, we will take immediate steps to delete that information. If you believe we have inadvertently collected information from a minor, please contact us at info@jnaresourceadvisory.com.

12. Third-Party Links

The Site may contain links to third-party websites, including professional organization directories (AIPG, SME, CIM), industry publications, and LinkedIn. These links are provided for your convenience and information only. JNA Resource Advisory does not control these websites and is not responsible for their privacy practices or content. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link on our Site does not imply endorsement of the linked site or its operator.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on this page
• For material changes, provide a prominent notice on the Site's homepage for at least 30 days

Your continued use of the Site after any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any changes, you should discontinue use of the Site and, if applicable, contact us to request deletion of your information.

14. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:

We aim to acknowledge all privacy enquiries within 5 business days and resolve them within 30 days.