Privacy Policy — MKH Build LLC

01

Introduction, Scope, and Definitions

1.1 — Purpose of This Policy

This Privacy Policy explains in full detail how MKH Build LLC, a computer integrated systems design and construction services company, handles information about visitors to our website, prospective clients, active clients, subcontractors, vendors, job applicants, and any other natural persons whose personal data may come into our possession during the course of our business operations. We are headquartered in the State of Utah and provide services across the United States; accordingly, this policy is drafted to comply with applicable federal laws, the Utah Consumer Privacy Act where relevant, the California Consumer Privacy Act as amended by the CPRA, and other state-level privacy frameworks. We periodically review and update this document to reflect changes in our practices, technology, legal requirements, and operational needs.

1.2 — Definitions of Key Terms

Throughout this policy, the term Personal Information refers to any data that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked to a specific individual or household, including but not limited to names, postal addresses, email addresses, telephone numbers, Internet Protocol addresses, device identifiers, financial account details, and commercial transaction records. Non-Personal Information means aggregated, anonymized, de-identified, or statistical data that cannot be used to single out an individual. Processing encompasses any operation performed on personal information, whether automated or manual, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, combination, restriction, erasure, or destruction. Services means the MKH Build website at https://www.mkhbuild.lat, any subdomains, mobile applications, email communications, consultation engagements, project-related communications, and any other digital or physical service offered under the MKH Build or MKH Construction LLC brand.

1.3 — Scope and Territorial Application

This policy applies globally to all users of our services, regardless of their geographic location. However, certain rights and obligations described herein may apply only to residents of specific jurisdictions as mandated by applicable law. We make every effort to extend equivalent privacy protections to all individuals whose data we process, irrespective of where they reside, subject to operational practicality and legal feasibility.

02

Categories of Information We Collect

2.1 — Identity and Contact Information

When you interact with our website, submit an inquiry through our contact form, request a consultation, engage in a project discussion, sign a service agreement, or otherwise communicate with us, we may collect the following identifiers and contact details: your full legal name, email address (personal and/or business), telephone number including mobile and landline, physical mailing address, your company or organization name, your job title or professional role, and your website URL. We collect this information to enable us to respond to your inquiries, deliver our services, prepare proposals and contracts, manage project communications, issue invoices, and maintain our business relationship with you.

2.2 — Commercial and Transactional Information

In the course of providing construction, systems integration, consulting, and maintenance services, we collect records of services requested, project scopes and specifications, site survey data, architectural and engineering documents, budget parameters, payment methods and billing addresses, invoicing records, purchase orders, change order documentation, and service history. This category also includes records of communications between you and our team, including email correspondence, meeting notes, telephone call summaries, and project management system entries. Maintaining comprehensive commercial records is essential for quality assurance, project accountability, compliance with contractual obligations, and any applicable statutory record-keeping requirements in the construction and technology industries.

2.3 — Technical and Device Information

When you visit our website, our servers automatically log certain technical data transmitted by your browser or device. This includes your Internet Protocol (IP) address, browser type and version, operating system type and version, referring and exit pages, the date and time stamp of your visit, the duration of your session, pages viewed and navigation paths, clickstream data, screen resolution, time zone settings, language preferences, and an approximation of your geographic location derived from your IP address. We collect this information through server logs, cookies, web beacons, and similar tracking technologies for purposes including network security monitoring, traffic analysis, website performance optimization, and detection and prevention of fraudulent or malicious activity.

2.4 — Geolocation and Property Information

For project assessment and service delivery purposes, we may collect information about physical property addresses, site conditions, municipal zoning data, utility infrastructure details, and related geographic information. While this data often pertains to commercial or residential properties rather than individuals, it may in some contexts be associated with identifiable property owners or decision-makers. We treat property-linked information with the same level of care as personal information.

2.5 — Employment and Vendor Information

If you apply for a position with MKH Build LLC or engage as a subcontractor, supplier, or vendor, we may collect additional categories of information including your resume or curriculum vitae, employment history, educational qualifications, professional certifications and licenses, references, worker classification documentation, tax identification numbers, insurance certificates, bonding information, and banking details for payment processing. This information is collected and processed solely for purposes related to our legitimate business relationships and is retained in accordance with applicable employment and commercial laws.

03

Methods and Sources of Information Collection

3.1 — Direct Collection from You

We collect the majority of personal information directly from you when you voluntarily provide it through our website contact forms, during telephone conversations with our team, in email exchanges, through in-person meetings at project sites or our offices, by completing service agreements or other contractual documents, via our project management platform or client portal, and by submitting payments or financial documentation. You are never under a statutory obligation to provide personal information to us; however, failure to supply certain information may limit our ability to respond to your inquiries, provide a quotation, or deliver contracted services.

3.2 — Automated Collection Technologies

We deploy automated data collection mechanisms including first-party cookies, session storage, web beacons, pixel tags, and server access logs. These technologies enable us to recognize returning visitors, remember your preferences, measure the effectiveness of our marketing communications, analyze aggregate usage patterns, and maintain the security and integrity of our systems. Further detail regarding our use of cookies and similar technologies is provided in Clause 10 of this policy.

3.3 — Third-Party Sources

On occasion, we may receive information about you from third-party sources. These may include public databases and registries, professional networking platforms, industry directories, credit reference agencies where a credit check is necessary for project financing, partner architecture or engineering firms involved in a joint project, subcontractors who refer clients to us, and marketing or lead-generation services where appropriate consent has been obtained. When we receive information from third parties, we take reasonable steps to verify that the source has lawfully collected and shared such information and that we have an appropriate legal basis to process it.

3.4 — Social Media and Public Platforms

If you interact with our official social media profiles or post publicly about us, we may view and collect that information where it relates to our business. We do not control the privacy practices of third-party social media platforms, and we encourage you to review the privacy policies of any platform on which you choose to share information.

04

How We Use Collected Information

4.1 — Service Provision and Contract Fulfillment

We use your personal and commercial information to provide the integrated systems design, construction, consulting, and maintenance services you have requested. This includes preparing proposals and cost estimates, conducting feasibility studies and site assessments, developing project blueprints and technical documentation, coordinating with subcontractors and suppliers, managing project schedules and deliverables, processing invoices and payments, maintaining project records, and delivering final commissioning and handover documentation. Without processing this information, we would be unable to fulfill our contractual obligations to you.

4.2 — Client Communication and Support

We use your contact information to respond to inquiries submitted through our website, provide project status updates, send appointment confirmations and reminders, issue service notifications, communicate about changes to our terms or policies, and offer ongoing technical support. We may also use this information to send you surveys or feedback requests regarding completed projects, as part of our continuous quality improvement program. Participation in such surveys is entirely voluntary.

4.3 — Business Operations and Analytics

We process technical, usage, and aggregate data to analyze website traffic patterns, measure the performance and reach of our digital content, optimize our website layout and user experience, identify technical issues or security vulnerabilities, forecast resource and staffing needs, and make strategic business decisions. This processing typically relies on aggregated or anonymized data and does not directly impact individual privacy interests.

4.4 — Marketing and Promotional Communications

With your explicit consent where required by law, we may use your email address or other contact details to send you information about our services, industry news, case studies, project highlights, and upcoming events that we believe may be of interest to you. Every marketing communication we send will include a clear and functional unsubscribe mechanism, and you may opt out of receiving promotional messages at any time by clicking the unsubscribe link, replying to the message with an opt-out request, or contacting us directly at reply@mkhbuild.lat. We do not sell, rent, lease, or otherwise exchange your personal information for monetary consideration with any third party for their direct marketing purposes.

4.5 — Legal Compliance and Protection of Rights

We reserve the right to use and disclose information as necessary to comply with applicable laws, regulations, legal processes, and governmental requests; to enforce our terms of service and contractual agreements; to detect, prevent, or address fraud, security breaches, or technical issues; to protect the rights, property, or safety of MKH Build LLC, our clients, our employees, subcontractors, or the general public; and to establish, exercise, or defend against legal claims.

05

Legal Basis for Processing Personal Information

5.1 — Consent-Based Processing

In certain circumstances, we process personal information based on your freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications, the use of non-essential cookies and tracking technologies, the processing of sensitive categories of personal data should they ever arise, and any other processing purpose that does not fall under an alternative legal basis. You have the right to withdraw your consent at any time, and such withdrawal will not affect the lawfulness of processing conducted prior to your withdrawal.

5.2 — Contractual Necessity

Where we have entered into a service agreement with you, or where processing is necessary to take steps at your request prior to entering into a contract, we rely on contractual necessity as the legal basis for processing your personal information. This covers the majority of information we collect in connection with client projects, including identity, contact, and commercial transaction data described in Clauses 2.1 and 2.2 of this policy.

5.3 — Legitimate Business Interests

We process certain categories of information based on our legitimate business interests, provided that such interests are not overridden by your fundamental rights and freedoms. Legitimate interests include improving and securing our website and digital infrastructure, conducting business analytics and performance measurement, managing our business operations efficiently, defending against legal claims, and preventing fraud, unauthorized access, and other unlawful activities. We conduct a balancing assessment for each processing activity that relies on legitimate interests as its legal basis.

5.4 — Compliance with Legal Obligations

We process personal information as necessary to comply with applicable federal, state, and local laws, including but not limited to tax and accounting regulations, construction industry licensing and permitting requirements, occupational safety and health regulations, employment and labor laws, and any court orders or binding regulatory directives. Our status as a licensed contractor operating in multiple states necessitates robust record-keeping and reporting practices.

06

Data Sharing and Disclosure Practices

6.1 — Service Providers and Subprocessors

We engage carefully selected third-party service providers to support various aspects of our business operations. These providers include website hosting and content delivery infrastructure services, cloud-based project management and collaboration platforms, email and communication service providers, payment processing gateways, accounting and invoicing software vendors, customer relationship management (CRM) providers, cybersecurity monitoring services, and professional advisors such as attorneys, accountants, and insurance brokers. Each service provider is bound by contractual obligations that require them to process personal information solely on our documented instructions, implement appropriate technical and organizational security measures, and maintain confidentiality. We do not authorize our service providers to use your information for their own independent purposes.

6.2 — Project Partners and Subcontractors

In the course of delivering integrated construction and systems design projects, we may share relevant technical specifications, project schedules, site information, and client contact details with authorized subcontractors, specialty tradespeople, engineering consultants, architects, permitting authorities, and material suppliers. Information shared in this context is strictly limited to what is necessary for the successful completion of the project and is governed by confidentiality provisions in our subcontractor agreements and professional services contracts.

6.3 — Legal Disclosures

We may disclose personal information when we have a good-faith belief that such disclosure is reasonably necessary to comply with a subpoena, court order, warrant, regulatory investigation, or similar legal process; to respond to lawful requests by public authorities including national security or law enforcement agencies; or to protect and defend our legal rights. Where permitted by applicable law, we will make reasonable efforts to notify you of any such disclosure prior to compliance, unless notification is prohibited by the legal process or would compromise an ongoing investigation.

6.4 — Business Reorganization

In the event that MKH Build LLC undergoes a merger, acquisition, reorganization, sale of assets, joint venture, assignment, transfer, or any other change of control transaction, your personal information may be among the assets transferred to the surviving or acquiring entity. We will notify you via email and/or through a prominent notice on our website of any such change in ownership or control and of any choices you may have regarding your personal information. The acquiring entity will be required to honor the commitments set forth in this Privacy Policy.

6.5 — Aggregate and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with business partners, industry associations, prospective clients seeking references, and for publication in case studies and portfolio materials. We maintain strict technical and administrative controls to ensure that such data remains non-identifiable and is not later re-identified by any recipient.

07

Data Retention Policies and Procedures

7.1 — Retention Criteria

We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected, to satisfy any legal, regulatory, accounting, or reporting requirements, or to establish, exercise, or defend legal claims. The specific retention period for each category of information is determined by reference to the nature and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, whether those purposes can be achieved through other means, and applicable statutory limitation periods and regulatory requirements. Our data retention schedule is reviewed at least annually by our management team and updated as necessary.

7.2 — Typical Retention Periods

As a general guideline, client project records including contracts, specifications, and correspondence are retained for a minimum of seven years following project completion to satisfy construction industry standards, potential warranty claims, and tax record-keeping obligations. Website usage logs and analytics data are retained for a maximum of twenty-six months before being either deleted or irrevocably anonymized. Inquiries from prospective clients who do not ultimately enter into a service agreement are retained for eighteen months. Job applicant information for unsuccessful candidates is retained for twelve months unless the candidate consents to a longer retention period. These periods may be extended in specific cases where litigation or regulatory investigation is reasonably anticipated.

7.3 — Data Deletion Procedures

When personal information reaches the end of its applicable retention period, we take appropriate steps to securely delete, destroy, or irreversibly anonymize it. Electronic data is purged from live systems, backups, and archives using industry-standard secure deletion methods. Physical documents containing personal information are shredded or incinerated by a certified document destruction service. We maintain a log of all data deletion events for accountability and audit purposes.

08

Data Security and Safeguards

8.1 — Technical Security Measures

We implement and maintain a comprehensive suite of technical security controls designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers, firewalls and intrusion detection and prevention systems, regular vulnerability scanning and penetration testing, endpoint protection and anti-malware software, multi-factor authentication for administrative access to systems, encrypted backup and disaster recovery infrastructure, secure software development and patch management practices, and network segmentation to isolate systems processing personal information from general-purpose infrastructure.

8.2 — Organizational and Administrative Safeguards

Complementing our technical defenses, we have established administrative and organizational measures including a formal information security policy that is reviewed and approved by management annually, role-based access controls that limit data access to employees and contractors who have a legitimate business need, mandatory privacy and security training for all personnel at onboarding and annually thereafter, confidentiality agreements executed by all employees, contractors, and third-party service providers, documented procedures for responding to data subject requests and inquiries, and periodic internal audits and compliance reviews conducted by designated responsible individuals within the organization.

8.3 — Security Incident Response

We maintain a documented incident response plan that governs the detection, containment, investigation, remediation, and notification procedures applicable to security incidents involving personal information. In the event of a confirmed data breach that poses a risk to your rights and freedoms, we will notify affected individuals without undue delay and, where required by applicable law, report the incident to relevant supervisory authorities within the prescribed statutory timeframe. Notifications will describe the nature of the breach, the categories and approximate number of data subjects and records affected, the likely consequences, and the measures we have taken or propose to take to address the breach and mitigate its potential adverse effects.

09

Your Rights and How to Exercise Them

9.1 — Right to Access and Confirmation

You have the right to request confirmation as to whether we process personal information about you. If we do, you are entitled to obtain access to that information, including the categories and specific pieces of personal information we hold, the purposes of processing, the categories of sources from which the information was collected, the categories of third parties with whom we have shared the information, and the retention periods or criteria used to determine them. Upon request, we will provide a copy of your personal information in a commonly used electronic format, free of charge, unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act on the request.

9.2 — Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. Upon receiving such a request, we will take reasonable steps to verify the accuracy of the corrected information and will promptly update our records. We may ask you to provide supporting documentation to substantiate your correction request where appropriate.

9.3 — Right to Erasure (Right to Be Forgotten)

In certain circumstances, you may request the deletion or erasure of your personal information. Grounds for erasure include situations where the information is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis for processing exists, where you object to processing and there are no overriding legitimate grounds, where the information has been unlawfully processed, or where erasure is required by applicable law. We will honor valid erasure requests unless we are legally obligated to retain the information for compliance with a legal duty, for the establishment or defense of legal claims, or for reasons of public interest, public health, or archiving purposes in the public interest.

9.4 — Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal information in certain scenarios, including where you contest the accuracy of the information (for a period enabling us to verify its accuracy), where the processing is unlawful but you oppose erasure and request restriction instead, where we no longer need the information for the original purposes but you require it for the establishment, exercise, or defense of legal claims, or where you have objected to processing pending verification of whether our legitimate grounds override yours. While processing is restricted, we may continue to store the information but will not process it further without your consent or for legal claims purposes.

9.5 — Right to Data Portability

Where processing is carried out by automated means and is based on consent or contractual necessity, you have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that information directly to another controller where technically feasible. We will respond to data portability requests within the timeframe mandated by applicable law and will format the exported data in a manner that facilitates its reuse.

9.6 — Right to Object

You have the right to object at any time to the processing of your personal information based on our legitimate interests, including any profiling that may arise from such processing. Upon receiving a valid objection, we will cease processing the relevant information unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless processing is necessary for the establishment, exercise, or defense of legal claims.

9.7 — Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to your withdrawal. To withdraw consent, contact us using the information provided in Clause 16 of this policy or use the unsubscribe mechanism included in our marketing communications.

9.8 — How to Exercise Your Rights

To exercise any of the rights described above, please submit your request in writing to reply@mkhbuild.lat or by postal mail to MKH Build LLC, 4873 S Poplar Way, APT 101, Mapleton, UT 84664-5086, United States. We will acknowledge receipt of your request within ten business days and will substantively respond within forty-five calendar days, which we may extend by an additional forty-five days where reasonably necessary, with prior notice. We may need to verify your identity before processing your request, which may require you to provide additional information or documentation. You may designate an authorized agent to submit a request on your behalf, provided that the agent presents written authorization signed by you and that we are able to verify your identity directly.

10

Cookies and Similar Tracking Technologies

10.1 — Categories of Cookies We Deploy

Our website uses the following categories of cookies and similar technologies. Strictly Necessary Cookies are essential for the basic functionality of our website, including session management, security monitoring, and load balancing. These cookies do not require consent under most privacy frameworks. Functional Cookies enable the website to remember choices you make, such as your preferred language, region, or accessibility settings, to provide enhanced and more personalized features. Analytics Cookies help us understand how visitors interact with our website by collecting and reporting information on page views, time on site, navigation paths, device types, and approximate geographic location. We use this data solely in aggregate form to improve website performance and content. Advertising Cookies are not currently deployed on our website. Should we ever introduce advertising-related tracking, we will update this policy and seek appropriate consent before activation.

10.2 — Managing Your Cookie Preferences

Most web browsers allow you to manage your cookie preferences through the browser settings. You can typically configure your browser to block all cookies, accept only first-party cookies, delete cookies upon closing your browser, or receive a warning before a cookie is stored. Please be aware that disabling certain categories of cookies, particularly strictly necessary cookies, may affect the functionality and availability of our website and could prevent you from accessing certain features. The following links provide guidance on managing cookie settings for popular browsers: Google Chrome, Mozilla Firefox, Apple Safari, and Microsoft Edge. For detailed browser-specific instructions, please consult the help documentation provided by your browser vendor.

10.3 — Web Beacons, Pixels, and Other Technologies

In addition to cookies, we may use web beacons (also known as clear GIFs, pixel tags, or tracking pixels) in our HTML-formatted emails and on certain pages of our website. Web beacons are tiny transparent graphic images that allow us to determine whether a specific web page has been viewed or an email message has been opened, and to analyze aggregate patterns of user interaction. We do not use web beacons to collect personal information about individual users. You can disable the tracking functionality of web beacons in email messages by configuring your email client to block the automatic loading of remote images.

11

Children’s Privacy Protections

11.1 — Age Restrictions on Our Services

Our website and services are not directed to, nor intended for use by, individuals under the age of eighteen (18). We do not knowingly collect, solicit, or maintain personal information from anyone under the age of eighteen, nor do we knowingly allow such individuals to use our website, submit inquiries, or engage our services. In the context of our construction and systems integration projects, any interaction with minors would be incidental and limited to standard professional exchanges that may occur on-site during project execution, always conducted in the presence of a parent, guardian, or authorized adult representative of the client.

11.2 — Procedures Upon Discovery of Minor Data

If we become aware that we have inadvertently collected personal information from an individual under the age of eighteen without verifiable parental consent, we will take prompt steps to delete such information from our records and, where feasible, from the records of any service providers to whom the information may have been transferred. If you are a parent or legal guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at reply@mkhbuild.lat so that we may take appropriate corrective action.

12

International Data Transfers and Cross-Border Processing

12.1 — Location of Data Processing

MKH Build LLC is headquartered in the United States, and our primary data processing activities, including server hosting and administrative operations, take place within the territorial jurisdiction of the United States. However, certain of our service providers and technology platforms may operate data centers, maintain backup facilities, or provide support services from locations outside the United States. When your personal information is transferred across national borders, we take appropriate measures to ensure that it receives an adequate level of protection in the recipient jurisdiction.

12.2 — Safeguards for International Transfers

For transfers of personal information from the European Economic Area, the United Kingdom, Switzerland, or other jurisdictions with data protection adequacy requirements to countries not recognized as providing adequate protection, we rely on appropriate safeguards, which may include the European Commission Standard Contractual Clauses, the United Kingdom International Data Transfer Agreement, binding corporate rules where applicable, or derogations for specific situations as permitted under applicable data protection law. We conduct transfer impact assessments to evaluate the legal and practical protections available in the destination country and implement supplementary technical and contractual measures where necessary to bring the level of protection up to the standard required by the originating jurisdiction.

13

Third-Party Websites and External Links

13.1 — Links to External Websites

Our website may contain hyperlinks to external websites, platforms, and resources that are not owned, operated, or controlled by MKH Build LLC. These links are provided for your convenience and informational purposes only and do not constitute an endorsement of the content, products, services, or privacy practices of the linked entity. We are not responsible for the privacy policies, data handling practices, or content of any third-party website. We strongly recommend that you review the privacy policy of every website you visit before providing any personal information.

13.2 — Embedded Third-Party Content

In certain circumstances, our website may embed content such as maps, videos, or interactive forms provided by third-party services. These embedded elements may collect data about your interaction with them in the same manner as if you had visited the third party’s website directly. We take care to only embed content from reputable providers, but we encourage you to review the privacy policies of those third-party providers for complete transparency regarding their data collection practices.

14

State-Specific Privacy Rights (United States)

14.1 — California Privacy Rights (CCPA and CPRA)

If you are a resident of the State of California, the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 grants you specific rights regarding your personal information. These rights include the right to know what personal information we have collected, used, disclosed, shared, and sold about you during the preceding twelve months; the right to delete personal information we have collected from you, subject to certain exceptions; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of your personal information (we do not sell or share personal information as those terms are defined under California law); the right to limit the use and disclosure of sensitive personal information; and the right to non-discrimination for exercising any of these privacy rights. To exercise your California privacy rights, please submit a verifiable consumer request through the contact channels identified in Clause 16. We will respond within forty-five days of receiving your request.

14.2 — Categories of Personal Information Collected (California Disclosure)

In compliance with the CCPA and CPRA, we disclose that we have collected the following categories of personal information in the preceding twelve months: identifiers such as name, postal address, email address, telephone number, and IP address; commercial information including records of services purchased and project history; internet or electronic network activity information including browsing history and interaction with our website; geolocation data at the city or ZIP code level of granularity; and professional or employment-related information for job applicants and business contacts. We collect these categories from the sources described in Clause 3 and for the business purposes described in Clause 4. We have not sold or shared personal information to third parties for cross-context behavioral advertising purposes in the preceding twelve months and have no plans to do so.

14.3 — Utah Consumer Privacy Act (UCPA)

As a business operating in the State of Utah, we respect the rights of Utah residents under the Utah Consumer Privacy Act. Utah residents have the right to confirm whether we process their personal data and to access such data; the right to delete personal data they have provided to us; the right to obtain a copy of their personal data in a portable format; and the right to opt out of the sale of their personal data or targeted advertising. We do not engage in the sale of personal data or in targeted advertising as defined by the UCPA. To exercise your UCPA rights, please contact us using the information provided in Clause 16.

14.4 — Nevada Privacy Rights

Under Nevada Revised Statutes Chapter 603A, Nevada residents have the right to opt out of the sale of certain covered information. We do not sell covered information as defined under Nevada law. If you are a Nevada resident and have questions about our data practices, you may contact us at reply@mkhbuild.lat.

14.5 — Other State Privacy Law Compliance

We monitor developments in the privacy laws of all U.S. states and territories, including but not limited to the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and other comprehensive state privacy legislation. As these laws take effect and our business activities bring us within their scope, we will update our policies and practices to ensure full compliance. If you are a resident of a state with a comprehensive privacy law not explicitly addressed herein, please contact us for information about your specific rights.

15

Updates and Amendments to This Privacy Policy

15.1 — Policy Revision Process

We reserve the right to update, modify, or amend this Privacy Policy at any time to reflect changes in our data processing practices, technology infrastructure, legal obligations, or operational requirements. All revisions will be effective immediately upon posting to this page, unless otherwise stated. We maintain a version history and document the substantive rationale for each material amendment. The date of the most recent revision will always be displayed at the top of this page, beneath the heading.

15.2 — Notification of Material Changes

If we make material changes to this Privacy Policy that significantly affect the way we handle your personal information, we will notify you through one or more of the following channels: a prominent notice posted on our website homepage for a minimum of thirty days following the change; an email notification sent to the address on file for active clients and registered contacts; and, where required by applicable law, a request for renewed consent before applying the changed policy to previously collected information. We encourage you to periodically review this page to stay informed of how we are protecting your privacy.

15.3 — Binding Effect of Continued Use

Your continued use of our website and services after the posting of any modifications to this Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not agree with the revised policy, you should discontinue use of our website and services and, where applicable, contact us to close your account or withdraw your consent.

16

Contact Information, Complaints, and Dispute Resolution

16.1 — How to Contact Us

If you have any questions, concerns, comments, or requests regarding this Privacy Policy or our data handling practices, please contact us using any of the following methods. You may reach our privacy compliance team by email at reply@mkhbuild.lat. You may call us at +1 (363) 777-1284 during regular business hours, Monday through Friday, Mountain Time. Written correspondence may be mailed to MKH Build LLC, Attention: Privacy Compliance, 4873 S Poplar Way, APT 101, Mapleton, Utah 84664-5086, United States. We strive to respond to all privacy-related inquiries within ten business days and to resolve any concerns in a fair, transparent, and timely manner.

16.2 — Complaint Procedures

If you believe that we have not adequately addressed your privacy concerns or that our processing of your personal information violates applicable law, you have the right to lodge a complaint with the appropriate data protection supervisory authority in your jurisdiction. In the United States, you may contact the Federal Trade Commission, your state Attorney General’s office, or the state agency responsible for enforcing consumer privacy laws in your state of residence. If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may lodge a complaint with the data protection authority in your country of residence or in the country where the alleged infringement occurred. A full directory of European data protection authorities is maintained by the European Data Protection Board.

16.3 — Binding Arbitration and Governing Law

Any dispute, claim, or controversy arising out of or relating to this Privacy Policy or the breach, termination, enforcement, interpretation, or validity thereof shall be governed by and construed in accordance with the laws of the State of Utah, without giving effect to any choice or conflict of law provision or rule. Any such dispute shall be resolved exclusively through binding individual arbitration administered in Utah County, Utah, in accordance with the Commercial Arbitration Rules of the American Arbitration Association, unless applicable law mandates a different forum or procedure. Each party shall bear its own costs and attorney’s fees. Claims must be brought in the party’s individual capacity and not as a plaintiff or class member in any purported class or representative proceeding. This clause does not limit your right to bring a complaint to a data protection authority as described in Subsection 16.2.

16.4 — Entire Agreement

This Privacy Policy, together with our Terms of Service and any other legal notices published on our website, constitutes the entire agreement between you and MKH Build LLC concerning the subject matter hereof and supersedes all prior and contemporaneous understandings and agreements, whether written or oral, regarding privacy and data handling. If any provision of this Privacy Policy is determined by a court or tribunal of competent jurisdiction to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect, and the invalid provision shall be deemed modified to the minimum extent necessary to make it enforceable while preserving its original intent.