DRAFT v1 — FOR INTERNAL REVIEW ONLY. NOT YET APPROVED BY A LICENSED PRIVACY ATTORNEY. This page is a first-draft privacy notice prepared as legal-operations work product. It is not legal advice and carries no attorney–client privilege. It must be reviewed and approved by a bar-admitted privacy attorney in the relevant jurisdictions before the site goes live.

Privacy Policy

Last updated: June 16, 2026

House of 360 ("H360," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal data we collect when you use thehouseof360.com (the "Site"), why we collect it, who we share it with, how long we keep it, and the rights you have over it.

H360 is a business-to-business (B2B) site. We do not knowingly direct the Site to, or collect personal data from, consumers or anyone under 18. The Site has no user accounts, no online store, and no payment processing.

Who we are (the data controller)

The Site is operated by [OPERATING ENTITY — confirm legal name & registered address], the controller responsible for your personal data. H360 is a vertical brand of PGS360; the likely operating controller is Prime Global Solutions, Inc. (to be confirmed).

• Postal address: [POSTAL ADDRESS — required, including for CAN-SPAM compliance]
• Privacy contact: info@thehouseof360.com
• EU / UK representative (GDPR Art. 27 / UK GDPR Art. 27): [PLACEHOLDER — EU/UK representative TBD, pending attorney determination of whether one is required]

What we collect and why

We collect personal data through a single channel: the "Request a Meeting" form on the Site. When you complete it, we collect the information you choose to provide:

• Company name — to identify the business making the enquiry.
• Company email address — to contact you and respond to your enquiry.
• Service interest — the service(s) you tell us you are interested in.
• US footprint (yes/no) — whether your business operates in the United States, so we can route your enquiry appropriately.

We ask you to use a business email and to submit information about your company, not about individuals in their personal capacity. We do not ask for, and request that you do not submit, sensitive personal data through the form.

In addition, like most websites, our web server may automatically log limited technical data (such as your IP address) when your browser loads the Site and its resources. See "Third-party services and the GSAP animation library" below.

Our lawful basis for using your data

For visitors in the EU/EEA and the UK, we rely on our legitimate interests (Article 6(1)(f) of the GDPR and UK GDPR) to process the contact and enquiry data you submit. Our legitimate interest is to respond to, evaluate, and follow up on business enquiries about our services. We have considered your interests and rights and believe this processing is proportionate because the data is limited, business-context, and provided by you for exactly this purpose.

You can object to processing based on legitimate interests at any time — see "Your privacy rights" below. We do not use consent checkboxes for this enquiry data, and submitting the form is not a request for marketing consent.

How we use your data

• To respond to your "Request a Meeting" enquiry.
• To contact you about the service(s) you expressed interest in, and to arrange and follow up on a meeting.
• To keep a record of our business correspondence with you.

We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not profile you for advertising.

Who we share your data with

We do not sell your personal data. We share it only with the service providers we use to operate the Site and respond to enquiries, and only as needed:

• Pipedrive — our customer relationship management (CRM) provider, acting as our data processor. Form submissions are stored in Pipedrive so we can manage and respond to your enquiry. Pipedrive processes the data on our instructions under its data-processing terms.
• jsDelivr (CDN) — the Site loads the GSAP animation library from the jsDelivr content delivery network. When your browser requests that file, your IP address is disclosed to the CDN as a technical necessity of delivering the content. See the next section.

We may also disclose personal data where we are legally required to do so (for example, to comply with a lawful request from a public authority), or to establish, exercise, or defend legal claims.

Third-party services and the GSAP animation library

The Site uses the GSAP JavaScript animation library, which is loaded from the jsDelivr content delivery network (a third-party CDN) rather than from our own servers. Because your browser fetches the file directly from jsDelivr, the CDN necessarily receives your IP address and standard request data (such as your browser type) in order to serve the file. This is a standard mechanism for delivering website resources and is not used by us to track or identify you. We do not control jsDelivr's own processing of this technical data.

International data transfers

We welcome enquiries from businesses worldwide, including in the EU/EEA, the United Kingdom, the United States, South Korea, and Latin America. Our service providers may store or process data in countries outside your own, including the United States.

Where personal data of EU/EEA or UK individuals is transferred to a country that does not have an adequacy decision, we rely on appropriate safeguards — typically the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable) — as provided in our processors' data-processing terms. [Confirm transfer mechanism with each processor and with attorney review.]

We do not sell or share your personal data

We do not sell your personal data, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and similar US state privacy laws. We have not sold or shared personal data in the preceding 12 months. We do not offer financial incentives in exchange for personal data.

Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access — to know what personal data we hold about you and to receive a copy.
• Correction — to have inaccurate or incomplete data corrected.
• Erasure / deletion — to ask us to delete your personal data.
• Objection — to object to our processing based on legitimate interests.
• Restriction — to ask us to restrict processing in certain circumstances.
• Portability — to receive your data in a portable, machine-readable format.
• Withdraw consent — where we rely on consent (note: we rely on legitimate interests, not consent, for enquiry data).
• Non-discrimination — we will not discriminate against you for exercising any of these rights.

These rights arise under the GDPR (EU/EEA), the UK GDPR, the CCPA/CPRA (California), and other US state privacy laws, among others. The exact rights available to you depend on the law that applies to you. Where US state law allows, you may use an authorized agent to submit a request on your behalf.

If you are in the EU/EEA or the UK and believe we have not handled your data properly, you also have the right to lodge a complaint with your local data protection authority — though we'd appreciate the chance to address your concern first.

How to exercise your rights

To make any privacy request, email us at info@thehouseof360.com. To protect your data, we may need to verify your identity before we act on a request — for example, by confirming the email address used to submit the form. We will respond within the timeframes required by the law that applies to you.

Cookies and tracking

As of June 16, 2026, this Site sets no cookies and uses no analytics, advertising, or behavioral-tracking technologies. We do not use tracking pixels or advertising trackers. If this changes, we will update this policy and, where the law requires it, provide a cookie notice and obtain consent before any non-essential cookies or trackers are used.

How long we keep your data

We keep enquiry data only as long as needed for the purpose we collected it. As a default, we propose retaining "Request a Meeting" submissions in our CRM for 24 months from your last contact with us, after which we delete or anonymize them — unless a longer period is required to comply with a legal obligation or to establish, exercise, or defend a legal claim. [Confirm retention period.]

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make a material change, we will take reasonable steps to bring it to your attention.

Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, contact us at:

• Email: info@thehouseof360.com
• Postal address: [POSTAL ADDRESS — required, including for CAN-SPAM compliance]
• Operating entity: [OPERATING ENTITY — confirm legal name & registered address]