Privacy Protocol

At Core Metric LLC, a Minnesota limited liability company ("Core Metric," "we," "us," or "our"), we are committed to safeguarding corporate information and respecting individual privacy rights across all jurisdictions in which we operate. This Privacy Protocol outlines our data collection, verification, use, and security practices in connection with our B2B client acquisition infrastructure and territory management operations.

1. Scope & B2B Data Collection

Core Metric operates exclusively in the business-to-business (B2B) commercial sector. We do not solicit, process, or sell consumer personal data. The information we gather is strictly limited to corporate entities and professional decision-makers in their commercial business capacity, including:

• Professional Identity: First and last name, business job title, corporate email address, and professional telephone number.
• Corporate Entity Details: Commercial business name, website URL, industry sector, facility square footage, employee count, physical facility address, and service territory.
• Technographic & Operational Signals: Publicly verifiable commercial equipment profiles (walk-in coolers, parallel rack systems, commercial chillers), facility licensing records, corporate web technologies, and active commercial hiring postings.

2. Permitted Purpose & Use of Information

We use commercial B2B data strictly to facilitate bona fide business-to-business communication, introduce specialized commercial maintenance solutions, and manage qualified facility walkthroughs between commercial facility operators and licensed refrigeration/HVAC contractors. Specifically:

• To conduct targeted, direct B2B outreach aligned with the recipient's commercial operational responsibilities.
• To verify commercial refrigeration equipment and preventive maintenance coverage.
• To administer client onboarding, manage territory exclusivity locks, and coordinate walkthrough calendar bookings.

3. Deliverability, Verification & Hygiene Standards

To ensure high standards of corporate etiquette and prevent unsolicited or misaddressed communications, all prospect records undergo rigorous multi-stage verification prior to outreach. This includes validating physical mail exchange (MX) server configurations, checking corporate domain registration, and scrubbing against our real-time client customer suppression firewalls.

4. Opt-Out, Suppression & Choice Protocol

We respect the preference of every business and professional decision-maker. If you or your organization wish to be permanently excluded from future communications, you may exercise your choice at any time:

• Reply with "STOP", "unsubscribe", or any plain-language opt-out statement to any email received from our systems.
• Submit an opt-out request directly to our compliance inbox: questions@coremetricmarketing.com.

All opt-out and suppression requests are processed automatically across our central suppression ledger within twenty-four (24) to forty-eight (48) business hours, permanently preventing future outbound engagement across all client domains.

5. Multi-State Regulatory & Privacy Compliance

Core Metric LLC proactively aligns its operations with federal and state data governance frameworks, including:

• Federal CAN-SPAM Act (15 U.S.C. § 7701 et seq.): Full compliance with accurate sender identification, non-deceptive subject lines, clear opt-out mechanisms, and inclusion of our physical business address.
• Minnesota Consumer Data Privacy Act (MCDPA - Minn. Stat. Ch. 325M/325O): While Core Metric operates as a small B2B service below statutory controller thresholds, we honor the core principles of data minimization, purpose limitation, and individual data subject rights.
• California Consumer Privacy Act (CCPA/CPRA), Texas Data Privacy and Security Act (TDPSA), and Other State Laws: We afford business contacts the right to know what commercial information is maintained, the right to request correction of inaccurate records, and the absolute right to opt out of commercial communications and request data deletion.

6. Data Security & Storage

We implement industry-standard physical, administrative, and technical safeguards to protect corporate metadata against unauthorized access, loss, or alteration. Access to client suppression lists and operational databases is restricted to authorized administrative personnel operating with multi-factor authentication. Client customer suppression lists submitted during onboarding are strictly confidential, stored with AES-256 encryption, isolated exclusively to that Client's exclusionary firewall, never sold or shared across accounts, and permanently deleted within thirty (30) days following agreement termination upon written request.

7. Compliance Contact Information

If you have any questions, requests for data deletion, or compliance inquiries regarding this Privacy Protocol, please contact our compliance desk:

Core Metric LLC
Attn: Compliance & Data Operations
202 N Cedar Ave Ste 1, Owatonna, MN 55060 USA
Email: questions@coremetricmarketing.com

8. Dispute Resolution & Class Action Waiver

Any dispute, controversy, or claim arising out of or related to this Privacy Protocol, data processing practices, or privacy requests shall be resolved exclusively pursuant to the Mandatory Pre-Suit Informal Resolution, Binding Individual Arbitration, and Class Action Waiver provisions set forth in Section 8 of the Core Metric Terms of Service (Terms of Service).