Delta Gold Inc.

Effective Date: July 16, 2025

1. Introduction

Delta Gold Inc. ("we," "us," or "our"), a Nevada-based corporation, is dedicated to safeguarding the privacy and security of your personal information in compliance with United States federal and state regulations, including the California Consumer Privacy Act (CCPA), the Nevada Privacy of Information Collected on the Internet from Consumers Act (SB 220), and other applicable laws. This Privacy Policy outlines our practices for collecting, using, disclosing, and protecting your personal data when you visit our website (www.deltagoldinc.com), engage with our gold mining, storage, or investment consulting services, or interact with us through any channel. By accessing our website or services, you acknowledge and agree to the practices described in this policy. Our commitment to transparency and regulatory compliance ensures your trust as we deliver premier gold-related services across the United States.

2. Information We Collect

To provide our specialized services in gold mining, secure storage, and investment consulting, we collect various types of information. These categories are designed to enhance your experience while adhering to strict regulatory standards set forth by U.S. authorities, such as the Federal Trade Commission (FTC) and the Securities and Exchange Commission (SEC). The information we collect includes:

• Personal Information: This includes your full name, email address, phone number, mailing address, and other identifiers you provide when registering for an account, submitting contact forms, requesting consultations, or engaging with our customer support. For clients utilizing our investment services, we may also collect government-issued identification numbers (e.g., Social Security Number) to comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations enforced by the U.S. Department of the Treasury.
• Financial Information: When you engage in transactions for our storage or consulting services, we collect payment details such as credit card numbers, bank account information, or billing addresses. These are processed through third-party payment processors that comply with the Payment Card Industry Data Security Standard (PCI-DSS), ensuring secure handling of sensitive financial data.
• Usage Data: We collect non-personally identifiable information about your interactions with our website, including your IP address, browser type, operating system, device information, pages visited, time spent, and referral URLs. This data is gathered using cookies, web beacons, and analytics tools like Google Analytics, in compliance with FTC guidelines on online tracking.
• Communication Data: Information you share through emails, phone calls, live chats, or feedback forms, including inquiries about our mining operations, storage facilities, or investment strategies. This may include recordings of customer service calls, with your consent, as permitted under applicable U.S. wiretapping laws.
• Geolocation Data: For clients visiting our physical facilities or engaging in location-specific services, we may collect approximate location data to provide tailored services, such as identifying the nearest vault facility. This is done with your explicit consent and in accordance with state privacy laws.
• Survey and Marketing Data: Responses to optional surveys or preferences for receiving marketing communications, such as newsletters about gold market trends or promotional offers, collected under the CAN-SPAM Act regulations.

3. How We Collect Information

We collect information through the following methods, ensuring compliance with U.S. data protection regulations:

• Directly from You: When you submit forms on our website, register for an account, request a consultation, or contact our support team via phone, email, or live chat.
• Automatically: Through cookies, server logs, and analytics tools that track your website interactions. We provide clear notice of cookie usage and obtain consent where required by laws like the CCPA.
• From Third Parties: From service providers, such as payment processors or marketing partners, or from public sources, such as government databases for KYC/AML compliance, as mandated by the U.S. Patriot Act.
• During In-Person Interactions: When you visit our facilities in Nevada, California, Alaska, or Arizona, we may collect information for security and verification purposes, in line with federal and state regulations.

4. How We Use Your Information

We use your information to deliver high-quality services while adhering to U.S. regulatory frameworks, including SEC regulations for investment services and IRS requirements for financial recordkeeping. Specific uses include:

• Service Delivery: To manage your account, process transactions for gold storage or consulting services, and facilitate access to our secure vaults, which meet London Bullion Market Association (LBMA) standards.
• Customer Support: To respond to inquiries, provide personalized investment advice, and resolve issues, ensuring compliance with FTC consumer protection guidelines.
• Website Improvement: To analyze usage data and optimize our website’s performance, accessibility, and user experience, in accordance with best practices outlined by the U.S. Access Board.
• Marketing and Communications: To send you tailored newsletters, market updates, or promotional offers about gold investment opportunities, with your explicit consent as required by the CAN-SPAM Act.
• Compliance and Security: To verify identities, prevent fraud, and comply with KYC/AML regulations, as well as other federal laws enforced by the U.S. Department of Justice and the Financial Crimes Enforcement Network (FinCEN).
• Research and Development: To enhance our mining technologies and storage solutions, using aggregated and anonymized data to ensure compliance with data minimization principles.

5. How We Share Your Information

Delta Gold Inc. does not sell, rent, or trade your personal information for commercial purposes, in strict compliance with the CCPA and other U.S. privacy laws. We may share your data under the following circumstances:

• Service Providers: With trusted third-party vendors, such as payment processors (e.g., Stripe, PayPal), analytics providers (e.g., Google Analytics), and IT service providers, who are contractually obligated to maintain confidentiality and comply with PCI-DSS, ISO 27001, and other relevant standards.
• Business Partners: With your consent, we may share limited data with partners listed on our website (e.g., Newmont Corporation, Barrick Gold) to facilitate joint services or co-branded promotions, ensuring compliance with partnership agreements and privacy laws.
• Legal and Regulatory Authorities: When required to comply with U.S. federal or state laws, such as subpoenas, court orders, or audits by the IRS, SEC, or FinCEN. We may also share data to protect against fraud or enforce our legal rights, as permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to a successor entity, with notice provided and in compliance with applicable regulations.
• With Your Consent: For any other purpose not listed here, we will obtain your explicit consent before sharing your data, as required by the CCPA and Nevada SB 220.

6. Cookies and Tracking Technologies

Our website employs cookies, web beacons, and similar technologies to enhance functionality and user experience, in compliance with FTC guidelines and the CCPA’s transparency requirements. These technologies serve the following purposes:

• Essential Cookies: Enable core website functions, such as navigation and secure account access.
• Analytics Cookies: Collect anonymized data to analyze website performance and user behavior, helping us improve our services.
• Marketing Cookies: Track preferences to deliver personalized ads or content, with your consent as required by law.

You can manage cookie preferences through your browser settings or our cookie consent tool, available upon your first visit to our website. Disabling cookies may limit certain website features. For more details, please refer to our Cookie Policy, accessible via the footer of our website.

7. Data Security

We prioritize the security of your personal and financial information, implementing robust measures that align with U.S. federal and state regulations, including the Gramm-Leach-Bliley Act (GLBA) for financial data protection. Our security practices include:

• Encryption: We use Advanced Encryption Standard (AES-256) for data transmission and storage, ensuring compliance with NIST standards.
• Access Controls: Biometric and multi-factor authentication for our vault facilities and digital systems, adhering to LBMA and ISO 27001 standards.
• Monitoring: 24/7 AI-powered surveillance and intrusion detection systems to protect against unauthorized access.
• Regular Audits: Annual third-party security audits and penetration testing to identify and mitigate vulnerabilities.
• Employee Training: Mandatory data protection training for all staff, in line with FTC Safeguards Rule requirements.

While we strive to protect your data, no online system is entirely immune to risks. We encourage you to use strong, unique passwords and avoid sharing sensitive information over unsecured networks.

8. Your Privacy Rights

As a U.S.-based company, we comply with federal and state privacy laws, including the CCPA, Nevada SB 220, and Virginia Consumer Data Protection Act (VCDPA). Depending on your state of residence, you may have the following rights:

• Right to Know: Request details about the categories of personal information we collect, use, or share, as outlined in the CCPA.
• Right to Access: Obtain a copy of your personal data in a portable format.
• Right to Delete: Request deletion of your personal information, subject to exceptions (e.g., IRS recordkeeping requirements).
• Right to Correct: Request correction of inaccurate personal data.
• Right to Opt-Out: Opt out of the sale or sharing of your personal information for targeted advertising (note: we do not sell data).
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights, as guaranteed by the CCPA.
• Right to Restrict Processing: Limit the use of sensitive personal information, where applicable.

To exercise these rights, please submit a verifiable request to support@deltagoldinc.com. We will verify your identity using secure methods (e.g., matching provided information with account records) and respond within 45 days, as required by the CCPA, with a possible 45-day extension for complex requests. You may also designate an authorized agent to submit requests on your behalf, provided they present valid authorization.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations, such as IRS regulations requiring financial records to be retained for seven years. Usage data is typically retained for one year for analytics purposes, while communication data may be deleted within six months unless needed for ongoing support. Inactive accounts are archived after one year, with personal data deleted unless required for legal compliance. We conduct annual data reviews to ensure compliance with data minimization principles.

10. Third-Party Links

Our website may include links to third-party websites, such as those of our partners (e.g., Newmont Corporation, Barrick Gold) or service providers. These sites operate under their own privacy policies, and we are not responsible for their practices. We encourage you to review their policies before sharing personal information, as required by FTC guidelines on transparency.

11. Children's Privacy

Our services are intended for individuals 18 years and older, in compliance with the Children’s Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 18. If we discover such data has been collected, we will promptly delete it and notify the parent or guardian, as required by COPPA. Contact us at privacy@deltagoldinc.com if you believe we have inadvertently collected a child’s information.

12. International Data Transfers

As a U.S.-based company, our primary operations and data storage occur within the United States. If you access our services from outside the U.S., your data may be transferred to and processed in the U.S., subject to U.S. privacy laws. We ensure that any international data transfers comply with applicable regulations, such as Standard Contractual Clauses for cross-border transfers, where required.

13. Compliance with U.S. Regulations

Delta Gold Inc. operates in full compliance with U.S. federal and state regulations, including but not limited to:

• CCPA: Grants California residents specific privacy rights, including the right to know, delete, and opt-out of data sharing.
• Nevada SB 220: Requires transparency in data collection and opt-out options for Nevada residents.
• GLBA: Mandates safeguards for financial data and clear privacy notices for customers.
• CAN-SPAM Act: Regulates commercial email communications, requiring opt-out mechanisms and clear sender identification.
• Patriot Act: Enforces KYC/AML requirements for financial transactions to prevent money laundering and fraud.
• FTC Safeguards Rule: Requires robust security measures to protect customer information.

We undergo regular compliance audits and work with legal experts to ensure adherence to these regulations, providing you with confidence in our data handling practices.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technological advancements, or legal requirements. Updates will be posted on this page with a revised effective date, and we will notify you via email or a prominent website notice for significant changes, as required by the CCPA and Nevada SB 220. We encourage you to review this policy periodically to stay informed.

15. Contact Us

For questions, concerns, or to exercise your privacy rights, please contact our Data Protection Officer:

Email: support@deltagoldinc.com

Address: 650 West Georgia Street, Suite 480 PO Box 11525 Vancouver, BC V6B 4N7 Canada

We are committed to addressing your inquiries within 24 hours and resolving privacy requests within the timelines mandated by applicable U.S. laws.

If you are not satisfied with our response, you may file a complaint with your state’s data protection authority, such as the California Attorney General’s Office for CCPA-related concerns, or the FTC for general privacy issues.