WORLDLY HOLDINGS INC.

GLOBAL PRIVACY POLICY

Last Updated: May 7, 2025

This Privacy Policy describes how Worldly Holdings Inc. (formerly Higg Inc.) and our subsidiaries and affiliated companies, (collectively, “Worldly,” “we,” or “us”), collect, use, and disclose information about you. Prior to May 15, 2023, Worldly was known as Higg Inc. (“Higg”). This policy replaces and supersedes the privacy policy previously posted by Higg on its websites.

Worldly primarily collects information and data about businesses, such as their environmental management systems or their energy usage. Worldly collects enterprise data, and generally does not collect, process, or use consumer personal data or information.

This Privacy Policy applies to information we collect when you access or use our websites: https://worldly.io/; https://app.worldly.io;  https://learn.worldly.io; https://suppport.worldly.io;  https://worldly.invoicing.co/; and https://howtohigg.org  (collectively, the “Website”), our Platform, available at https//portal.worldly.io  (the “Platform”), your account on our Platform  (“Account”), any web-based tools, services, and data made available to you by Worldly on the Website, Platform, and other online products and services that link to this Privacy Policy, or when you otherwise interact with us, such as through our customer support channels or on social media pages (collectively, our “Services”).

We may change this Privacy Policy from time to time. If we make changes, we will revise the date at the top of this policy. We may also provide you with additional notice (such as by adding a statement to the Services or sending you a notification), such as in connection with making material changes to this Privacy Policy. We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.

CONTENTS

• Collection of Information
• Use of Information
• Sharing of Information
• Transfer of Information to the United States and Other Countries
• Your Choices
• Additional Disclosures for Individuals in Europe
• Contact Us

COLLECTION OF INFORMATION

Information You Provide to Us

We collect information you provide directly to us. For example, we collect information directly from you when you register for an Account, store information in your Account, fill out a form, contribute to an assessment, submit or post content through our Services, apply for a job with us, participate in a survey, request customer support, or otherwise communicate with us. The types of information about you that we collect include your name, postal and email addresses, job title and function, phone number, resume information, Account username and password, and any other information you choose to provide. Additionally, if you make a purchase, we work with a third-party payment processor to collect and process your payment information. 

We provide more detailed information about the categories of information we collect, the purposes we collect that information and the categories of third parties that we share that information within the Privacy Schedule.

Information We Collect Automatically

We automatically collect certain information about your interactions with us or our Services, including:

• Account Information: We collect information about your activity on our Services, such as your subscription value, how you use the Services and subscription renewal dates.
• Device and Usage Information: We collect information about how you access our Services and the Website, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, and browser type. We also collect information about your activity on our Website or the Services, such as access times, pages viewed, links clicked, and the page you visited before navigating to our Services.
• Information Collected by Cookies and Similar Tracking Technologies: We (and those who perform work for us) use tracking technologies, such as cookies and web beacons, to collect information about your interactions with the Services and our Website. Cookies are small data files stored on your hard drive or in device memory that help us improve our Services our Website and your experience, see which areas and features of our Services or Website are popular, and count visits. Web beacons (also known as “pixel tags” or “clear GIFs”) are electronic images that we use on our Services, on our Website and in our emails to help deliver cookies, count visits, and understand usage and campaign effectiveness. For more information about cookies and how to disable them, see our Cookie Policy and the Your Choices section below.

Information We Collect from Other Sources

We obtain information from other sources in addition to the information you provide. For example, we may collect information from job postings, third-party researchers, and marketing tools. We may receive business contact information and other data about individuals from third-party sources, such as business intelligence providers This information may include, for example, your name, email address, physical address, company name, company description, website, job title, phone number, address, revenue information, interactions with our marketing campaigns, such as click-throughs, customer support agents, and customer relationship managers, such as chats, or information contained in your resume, in a LinkedIn account or profile, or submitted to a third-party researcher or customer relationship manager. We may combine this information with information that you provide us or that we receive through automatic tracking technologies.

Information We Derive

We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address or infer that you are interested in certain products based on how you interact with our Website or Services.

USE OF INFORMATION

We use the information we collect and receive to provide, maintain, and improve the Services, the Website and the other interactions we have with you.  We also use the information we collect and receive to:

• Provide, maintain, improve, and develop new products and services, including to debug and repair errors in our Services. 
• Personalize your experience with us, today identify visitors to our Website.
• Send you technical notices, security alerts, support messages and other transactional or relationship messages.
• Communicate with you about products, services, and events offered by Worldly and others and provide news and information that we think will interest you (see the Your Choices section below for information about how to opt out of these communications at any time).
• Provide and administer surveys. 
• Monitor and analyze trends, usage, and activities in connection with our Services.
• Facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards. 
• Build multi-touch attribution for customers who go through marketing, sales, and customer portals or infrastructure.
• Detect, investigate, and help prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity and help protect the rights and property of Worldly and others through use of internal applications and software. Certain of the tools used for this purpose utilize behavioral tracking and automated decision-making.
• Comply with our legal, regulatory and financial obligations.
• Create de-identified, anonymized, or aggregated information for internal purposes.
• Conduct research and development activities.
• With your consent or to carry out any other purpose described to you at the time the information was collected.

SHARING OF INFORMATION

We share personal information in the following circumstances or as otherwise described in this policy:

• We share personal information with vendors and service providers that perform work for us, such as companies that assist us with web hosting, payment processing, fraud prevention, customer service, human resources, employment applications, and marketing and advertising.
• If you share content or information on our Services or, we may share that information with other users of our Services.
• If you choose to use integrations we offer on our Services, we may share certain information with the integration partners.
• We may share personal information with third party social media or business intelligence services that provide services to us. 
• We may share personal information with event sponsors, event co-hosts, and other partners. 
• We may disclose personal information if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.
• We may share personal information if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Worldly, our users, the public, or others.
• We share personal information with our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
• We may share personal information in connection with, or during negotiations concerning, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company. 
• Personal information is shared between and among Worldly and our current and future parents, affiliates, partners, and subsidiaries and other companies under common control and ownership.  
• We share personal information with environmental and sustainability nonprofit organizations and associations. For example, we share personal information with Cascale, the Apparel Impact Institute (AII), Reset Carbon, and the Social & Labor Convergence Program (SLCP). For information on how those organizations or entities collect, process, use, or share personal information, please visit their websites directly.
• We share personal information with your consent or at your direction.

We provide more detailed information about the categories of information we collect, the purposes we collect that information and the categories of third parties that we share that information within the Privacy Schedule.

HOW WE RESPOND TO DO NOT TRACK SIGNALS

We respond to Do Not Track requests for certain geolocations.

TRANSFER OF INFORMATION TO THE UNITED STATES AND OTHER COUNTRIES

Worldly is headquartered in the United States, and we offer services and engage vendors in the United States and across the world, including in China, India, Switzerland, the United Kingdom, the European Economic Area, and many more locations. Therefore, we and those that perform work for us may transfer your personal information to, or store, process, or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction.

YOUR CHOICES

Account Information

You may update and correct certain Account information at any time by logging into your Account or emailing us at support@worldly.io. If you close your Account and wish to delete your Account information, please contact us at support@worldly.io. For more information concerning Account information and deletion, please see the Data Retention section below.

Cookies

Most web browsers are set to accept cookies by default. If you prefer, you can usually adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of the Website or our Services. For more information about cookies and how to disable them, see our Cookie Policy.

Communications Preferences

You may opt out of receiving promotional emails from Worldly by following the instructions in those communications or by emailing us at privacy@worldly.io. If you opt out, we may still send you non-promotional emails, such as those about your Account or our ongoing business relationship.

ADDITIONAL DISCLOSURES FOR INDIVIDUALS IN EUROPE

If you are located in the European Economic Area (“EEA”), the United Kingdom, or Switzerland, you have certain rights and protections under the law regarding the processing of your personal data, and this section applies to you.

Legal Basis for Processing

When we process your personal data, we will do so in reliance on one or more of the following lawful bases:

• To perform our responsibilities under our contract with you (e.g., to provide the Services to you, processing payments for and providing the products and Services you requested). 
• When we have a legitimate interest in processing your personal data to operate our business or protect our interests (e.g., to provide, maintain, and improve our products and Services, conduct data analytics, and communicate with you).
• To comply with our legal obligations (e.g., to maintain a record of your consents).
• When we have your consent to do so (e.g., when you opt in to receive marketing communications from us). When consent is the legal basis for our processing your personal data, you may withdraw such consent at any time.

Data Retention

We retain personal data associated with your Account. If you close or have closed your Account, you may request that we delete your personal data by contacting us at privacy@worldly.io. Please note that we may retain certain information associated with your Account as required by law or for legitimate business purposes.

We will also retain personal data that we collect about you for our own, internal business purposes for so long as such information is necessary, or for so long as we have a legal obligation to retain it.

Data Subject Requests

Subject to certain limitations, you may have certain rights, including: 

• Right of access and/or portability: You have the right to access any personal data that we hold about you and, in some circumstances, have that data provided to you so that you can provide or “port” that data to another provider.
• Right of erasure: In certain circumstances, you have the right to the erasure of personal data that we hold about you (for example, if it is no longer necessary for the purposes for which it was originally collected).
• Right to object to processing: In certain circumstances, you have the right to request that we stop processing your personal data and/or stop sending you marketing communications.
• Right to rectification: You have the right to require us to correct any inaccurate or incomplete personal data.
• Right to restrict processing: You have the right to request that we restrict processing of your personal data in certain circumstances (for example, where you believe that the personal information we hold about you is not accurate or lawfully held).

If you would like to exercise any of these rights, you may contact us at privacy@worldly.io. We may have a reason under the law why we do not have to comply with your request or may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

Questions or Complaints 

Individuals that reside in the EEA, UK, or Switzerland have the right to lodge a complaint about our data collection and processing actions with the supervisory authority concerned. If you have a concern about our processing of personal data that we are not able to resolve, you have the right to lodge a complaint with the supervisory authority where you reside. Contact details for your supervisory authority can be found using the links below:

For individuals in the EEA: https://edpb.europa.eu/about-edpb/board/members_en 

For individuals in the UK: https://ico.org.uk/global/contact-us/ 

For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

CONTACT US

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@worldly.io 

Physical Address: 2041 East St #833, Concord, CA 94520
Attention: Privacy 

For more information about the privacy practices and policies of our licensor, the Sustainable Apparel Coalition, please see its Privacy Policy.

PRIVACY SCHEDULE

We collect the following categories of personal information, for the following purposes, and share that information with the following categories of third parties: