Website Privacy Notice

We collect or obtain data relating to you in a variety of ways, as described below. Such data may include personal data, i.e., information that alone or in combination with other information identifies you as an individual or can be reasonably linked to your identity.

• When you use our services, provide information in Your Account, search for products, and place an order for one of our products/reports through our website.
• When you submit questions, request information, or give us feedback via this Site.
• You may also make requests through this Site to exercise your individual rights under applicable privacy laws. We will collect and maintain data related to such requests to respond to you and for our audit and legal compliance purposes.

Examples of data collected:

• your name, email address, postal address, telephone number, payment information, location information;
• your account login and password, if required;
• data collected automatically about the computer or device you are using when you visit this site, including: your public (IP) address, information about the browser or type of device you are using, and data stored through the cookies and browser storage described in the Cookies and Other Internet Technologies section);
• purchase history and information about your activities or other content you view on this site, such as the type and name of the content and the time viewed;
• additional data relevant to your question, request, or feedback, such as your industry and preferred contact method.

Some of the data collected when you use our other services may be considered "special" or "sensitive" under the Data Protection Act, 2012 (Special Category Data), e.g., sexual life, race, political opinions, health, etc. When we collect such data, we will do so with your explicit consent obtained at the point of collection, and we will process such data in accordance with applicable law and this Privacy Notice.

In addition to the purposes outlined in Section A, Data Collection, we will also use your data to operate, provide, and improve the Services that we offer to you. These purposes include:

• Administer and deliver products and services. Receive and process orders, deliver products and services, process payments, and communicate with you about orders, products, and services.
• Recommendations and personalization. We will use your personal information to recommend features, products, and services that might be of interest to you, identify your preferences, and personalize your experience with our Services.
• Administer and manage this Site. To communicate with you about your interaction with this Site, process your request for information, or otherwise complete a transaction or service you request or authorize;
• Customize or personalize your user experience. We use your personal data to personalize the content we deliver to you, including to provide you with content/report that are more relevant to you;
• Contact you about Maverick's products and services. We will use your personal data to provide you with promotional materials or offers for products or services from Maverick Research, or send you other communications about our business and events (including communications based on your interests, personal and business characteristics, and location) (collectively, "marketing communications"). We may provide these communications and offers via email, postal mail, online, social media platforms, text messages, and other means;
• For our internal business purposes. In certain cases, we will use your personal data for purposes such as corporate transactions, audits, and data analysis, to conduct research and analytics about your use of this site and interaction with us, develop new products, improve this site and our existing products and services, identify usage trends, assess the performance of our advertisements, optimize our advertising campaigns, and determine the effectiveness of our communications. We may also use your data to protect the rights, safety, property, or operations of one or more Maverick Research partners, you, or others;
• Comply with applicable law. In certain cases, we will process your personal data to comply with legal obligations and/or respond to requests and communications from law enforcement authorities or other government officials.

Purposes for which we seek your consent. We may ask for your consent to process your personal data for a specific purpose that we communicate to you. When you consent to such processing, you may withdraw your consent at any time, and we will stop processing your data for that purpose.

Note that you may unsubscribe from a Maverick mailing list at any time by clicking on the 'unsubscribe' link in any of our marketing communications to you. After you unsubscribe, we will not send you further marketing communications, but we may continue to contact you to the extent necessary for any services you have requested. We will never use your personal data to advertise, promote, or market third-party goods or services to you. Additionally, we will not license or publish any of your personal data. Maverick Research sometimes “shares” Personal Information as defined under the Ghana Data Protection Law, 2012, but we do not and will not sell any personal data to third parties for their own commercial use.

Applicable law in Ghana and in certain countries requires us to set out in this Privacy Notice the legal basis upon which we rely to process personal data.

Consent: We may rely on the consent that you provide us at the point of data collection or disclosure to us to process such data for the purposes outlined herein.

Legitimate interests: We may process your personal data where necessary for our legitimate interests, provided that such interests are not overridden by your rights, interests, or fundamental freedoms. In particular, we may process your personal data in reliance on a legitimate interest in the effective and lawful operation of this site and our businesses, as well as the effective delivery of information and services to you. We may have other legitimate interests and, if so, we will make clear what those interests are at the relevant point in time.

Compliance with legal obligations: We may process your personal data if necessary for us to comply with a legal obligation arising under an applicable law to which we are subject.

To the extent that we process any "special" or "sensitive" categories of personal data relating to you, we will do so because either: (i) you have given us your explicit consent to carry out such processing, (ii) the processing is necessary for the establishment, exercise, or defense of legal claims, or (iii) you have made the data manifestly public.

If you have questions or concerns about the legal basis upon which we collect and use your personal data, you can contact us at privacy@maverick-research.com.

In connection with one or more of the purposes outlined in the "Data Use" section above, we may disclose your data to:

• Other entities within the Maverick Research group of companies;
• Third parties that provide services to us, such as system hosting, management and support; e-commerce and payment processing solutions; data analysis; facilitation of advertisements; data backup; and data security and storage services;
• Relevant third parties as part of a corporate transaction, such as a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with a bankruptcy or similar proceedings);
• Competent governmental and public authorities, in each case to comply with legal or regulatory obligations or requests; and
• Other third parties as we believe necessary or appropriate: (a) under applicable law; (b) to comply with legal process; (c) to enforce our terms and conditions; (d) to protect our operations and those of any of our affiliates; (e) to protect our rights, privacy, safety, or property, and/or those of our affiliates, you, or others; and (f) to allow us to pursue available remedies or limit damages that we may sustain.

When we share personal data with third parties for a specific purpose, they have access only to the data needed to provide the service, and may not use it for other purposes.

This Site includes ordinary links to Maverick Research's social media pages. It does not currently load social media plugins or tracking pixels. If you follow a link to a social media platform, that platform's own privacy notice applies to your use of its site.

This Site currently uses a limited amount of first-party browser storage. Cookies are small files stored by your browser; local storage is a similar browser feature used to save a preference on your device.

• Cookie preference: a first-party cookie records whether you allowed or rejected optional language-preference storage. It lasts up to 180 days so we can remember your choice and avoid asking on every visit.
• October campaign dismissal: during the October 2026 campaign, a session cookie records that you closed the campaign message. It expires when your browser session ends.
• Language preference: if you allow functional preferences, this Site saves your selected language in your browser's local storage so it can be used on later visits. If you reject functional preferences, the selected language is not saved.

This Site does not currently load Google Analytics, advertising or retargeting pixels, or social media tracking plugins. It does not set analytics, targeting, or social media cookies through these tools. If we add such technologies to this Site, we will update this Notice and the available preference controls before using them.

You can review or change your choice at any time in our Cookie Preference Center.

This Privacy Notice does not address, and we are not responsible for, the privacy practices of any third parties, including those that operate websites to which this Site links. The inclusion of a link on this Site does not imply that we or our affiliates endorse the practices of the linked website.

The disclosures described in the "Data Use" section above result in the transfer of your data to countries or regions with data protection laws that differ from those in your country of residence. We respect applicable local laws regarding cross-border transfers of and access to personal data and take steps to ensure that appropriate safeguards are in place to protect such data.

The Ghana Data Protection Act, 2012 (ACT 843)

The Maverick Research (Ghana) complies with the Ghana Data Protection Act, 2012 (ACT 843) as set forth by the Ghana Data Protection Commission. Maverick Research (Ghana) has certified to the Ghana Data Protection Commission that it adheres to the Ghana Data Protection Framework Principles (ACT 843 Principles) for processing personal data received from Ghana, in reliance on ACT 843. Maverick Research (Ghana) has certified to the Ghana Data Protection Commission that it adheres to the Data Protection Act, 2012 (ACT 843) regarding the processing of personal data. If there is any conflict between the terms in this privacy policy and the Ghana Data Protection Principles, the Principles shall govern. To learn more about the Data Protection Commission (GDPC) program, and to view our certification, please visit https://dpc.gov.gh/.

The Ghana Data Protection Commission has jurisdiction over Maverick Research (Ghana)'s compliance with the Data Protection Act, 2012 (ACT 843).

Internal Complaints Mechanism (DPC)

In compliance with the Data Protection Commission, Maverick Research (Ghana), commits to resolving DPC Principles-related complaints about our collection and use of your personal information. Ghanaian individuals with inquiries or complaints regarding our handling of personal data received in reliance on the Data Protection Commission should first contact Maverick Research’s Data Protection Supervisor at: dataprivacy@maverick-research.com.

Independent Recourse Mechanism (DPC)

In compliance with the DPC, Maverick Research (Ghana) commits to cooperate and comply with the advice of the panel established by the Data Protection Commission (DPC) regarding unresolved complaints concerning our handling of personal data received in reliance on the DPC.

In certain circumstances, the DPC provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in ACT 843 (Section 75 – 80).

Maverick Research remains responsible for any of your personal information that is shared under the DPC Onward Transfer Principle with third parties for external processing on our behalf, as described in Section "D - Disclosures of personal data".

To learn more about the DPC and to view Maverick Research's certification, please visit the DPC website.

We maintain physical, technical, and organizational security measures to protect personal data against accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, or access, wherever it is processed. We use generally accepted industry security standards, including physical, electronic, and administrative safeguards that are designed to help protect the data we collect, use, and retain.

We will retain your data for as long as needed for the purposes described in this Notice and in accordance with applicable law.

You have choices as well as several rights regarding our processing of your data, and we are committed to providing you with reasonable access to it and the ability to review and limit the use of such data in accordance with applicable law.

If you no longer want to receive electronic newsletters you signed up to receive or other marketing communications from Maverick Research, you can click on the 'unsubscribe' link at the bottom of such communications or update your email preferences.

Depending on your country of residence, you may also have the right to:

• Confirm whether or not we are processing your data and to request access to such data;
• Correct inaccuracies in your data;
• Delete data you provide or is otherwise obtained from you;
• Obtain a copy of your data that you provided to us;
• Restrict the way in which we use your personal data (e.g., if we have no legal right to keep using it);
• Object to our processing of your personal data;
• Withdraw the consent that you have given us to process your personal data (where we process your personal data based on your consent); and
• Lodge a complaint with the data protection commission regarding our processing of your personal data.

If you are interested in exercising one or more of the rights described above, you can submit a request using the form here or contact us at privacy @maverick-research.com. Please note that we may require proof of your identity before we can give effect to these rights.

Non-discrimination

We will not discriminate against you if you decide to exercise your rights under applicable law.

Identity verification when submitting your request

Because we want to avoid taking action regarding your personal data at the direction of someone other than you, only you or an "Authorized Agent" permitted to act on your behalf may submit a request. An "Authorized Agent" means a natural person or a business entity you have authorized to act on your behalf by providing your written permission. Please note, we may deny a request from an Authorized Agent if they do not submit proof that you have authorized them to act on your behalf.

Your request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal data or an Authorized Agent; and
• Describe your request with sufficient detail that allows us to understand, evaluate, and respond to it properly.

We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data we maintain relates to you. To verify your identity, we will seek to match any personal data you provide when you (or an Authorized Agent) submit your request to any personal data we already maintain. If we are unable to verify your identity based on the data we maintain, we will let you know.

Your right to appeal our decision

If we refuse to take action on your request, you may have the right to appeal that decision depending on your state of residence. You may appeal by submitting the required information to privacy@maverick-research.com.

Additional information for other residents

If you have any questions or concerns about our collection or use of your personal data, you can contact our Ghana Data Protection Officer at privacy@maverick-research.com.

If you are unsatisfied with the way in which we have handled your personal data or any privacy query or request that you have raised with us, you have a right to complain to the appropriate Data Protection Commission ("DPC"). To find their contact details, please visit https://dpc.gov.gh.

Regional Information for African Residents

Some African state privacy laws require Maverick Research to provide specific disclosures. Although this Notice accurately represents our practices with respect to our collection and processing of personal data, our Maverick Research Regional Privacy Notice provides specific information to satisfy the specific disclosure requirements provided by such state laws. You can review the Maverick Research Regional Privacy Notice here.

This Site does not currently load targeted advertising technologies or set targeting cookies. There is therefore no targeted advertising cookie on this Site for a Global Privacy Control (GPC) signal to disable. If we introduce targeted advertising technologies, we will update this Notice and explain how applicable opt-out signals are handled.

We understand the importance of protecting the privacy of minors, especially in the online environment. This Site is not designed for or intentionally targeted at minors under the age of 18, and we request that minors not use this Site. We do not knowingly collect data from minors on this Site. If we become aware that we have received data from a person under the age of 18, we will take reasonable steps to delete such data from our records.

We may make changes to this Privacy Notice from time to time. The "Effective Date" at the top of this page shows when this Privacy Notice was last revised. Any changes will become effective when we post a revised version of this Privacy Notice on this Site. Your use of this Site is subject to the terms in the version of this Privacy Notice that is posted on this Site at the time of your visit. We encourage you to review this Privacy Notice periodically to remain informed about how we are protecting your data.

If you have any comments or questions regarding this Privacy Notice or our data handling practices, or wish to contact our Data Protection Supervisor, kindly contact us at privacy@maverick-research.com. You can also send us a letter at the following addresses:

ATTN: Privacy Dept.

Maverick Research

125 Agbogba Road, North Legon, Accra

+233 25 611 1900

info@maverick-research.com

https://maverick-research.com