Table of Contents

Privacy Policy 1

Table of Contents 1

1. Personal Information We Collect 1

2. How We Use the Personal Information We Collect 1

3. Legal Bases for Processing (EEA and UK) 1

4. How We Disclose the Personal Information We Collect 1

5. Your Choices 1

6. Third Parties 1

7. Retention 1

8. Security 1

9. Children’s Privacy 1

10. International Visitors 1

11. Changes to This Privacy Policy 1

12. Contact Information 1

Privacy Policy

Hopkins Last updated: August 4, 2026

This Privacy Policy describes the types of personal information that Hopkins (“Hopkins”, “we”, “our”, or “us”) collects, uses, and discloses from individuals (“you” or “your”) who use the Hopkins website and platform (collectively, the “Services”). By using the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. Your use of the Services is also subject to the Hopkins Master Subscription Agreement.

Important note on processor activities. This Privacy Policy does not apply to the extent Hopkins processes personal information in the role of a data processor on behalf of its Merchant customers — for example, where a Merchant’s end-customer data is processed through the Hopkins platform. In that context, the Merchant is the data controller and Hopkins’ processing is governed by the Hopkins Data Protection Agreement and the applicable customer contract.

Table of Contents

1. Personal Information We Collect
2. How We Use the Personal Information We Collect
3. Legal Bases for Processing (EEA and UK)
4. How We Disclose the Personal Information We Collect
5. Your Choices
6. Third Parties
7. Retention
8. Security
9. Children’s Privacy
10. International Visitors
11. Changes to This Privacy Policy
12. Contact Information

1. Personal Information We Collect

We collect personal information in several ways depending on how you interact with the Services.

A. Personal Information You Provide to Us

Contact Information. When you enquire about the Services, register for a demo, or sign up for an account, we collect your full name, work email address, company name, company size, and any other information you choose to provide.

Account Information. To create and manage your Hopkins account, we collect your email address, phone number, and name. You may also upload a profile photograph for your individual account and your business profile on the platform.

Business Profile Data. When you use the platform to manage your merchant profile, we collect business-specific information including your business name, category, address, city, country, trade licence number, operating hours, payment methods accepted, and website URL.

Communications. If you contact us directly — for example, through our support channels — we collect your name, email address, the contents of your message, any attachments you send, and any other information you choose to share. When you sign up for news and updates, we collect your email address. We may use embedded pixels or similar technologies in emails we send you to track whether and when you open them, whether you click links, how long you read them, and your approximate location and device information, in order to improve our communications and Services.

Payment Information. If you subscribe to a paid plan, your payment-related information (such as credit card details) is collected and processed by our third-party payment processor. Hopkins does not store raw card data.

Careers. If you apply for a position at Hopkins, we collect your contact information, CV or résumé, and any other information you choose to submit as part of your application.

B. Personal Information We Collect Automatically

When you use the Services, we automatically collect certain technical and usage information.

Location Information. We infer your approximate geographic location from your IP address.

Device Information. We receive information about the device and software you use to access the Services, including your IP address, device type, device identifiers, web browser type and version, and operating system version.

Usage Information. We automatically receive information about your interactions with the Services, including the pages and features you access, referral URLs, dates and times of your visits, log data, and actions taken within the platform.

Cookies and Similar Technologies. We and our third-party partners use cookies and similar tracking technologies (such as pixel tags and web beacons) to operate and improve the Services, remember your preferences, and understand how you use our platform. Please see the Cookies section below for more detail.

C. Personal Information We Receive from Third Parties

Google Business Profile. Where you authorise Hopkins to access your Google Business Profile via OAuth, we receive your business account information, location data, business name, address, phone number, category, operating hours, and website URL. This data is used solely to provide the GBP sync and field comparison features within the Services. Hopkins’ use of data obtained through the Google API complies with the Google API Services User Data Policy, including the Limited Use requirements. Hopkins does not use Google API data to develop, improve, or train generalised AI or machine learning models.

Affiliate and Partner Platforms. If you connect an affiliate tracking platform (such as Impact, PartnerStack, Everflow, Post Affiliate Pro, or Refersion), we may receive click and conversion event data associated with your tracked links, including timestamps, attribution identifiers, UTM parameters, and technical matching signals.

Ad Measurement Data. Where Merchants use the Hopkins partner pixel on their website in connection with tracking campaigns, we receive information about whether a user who interacted with a tracked link subsequently completed a conversion action. This may include the timestamp of the interaction, campaign identifiers, and technical signals used to attribute the activity.

2. How We Use the Personal Information We Collect

We use the personal information we collect for the following purposes.

To provide, maintain, improve, and enhance the Services, including operating the platform, processing transactions, and delivering the features described in the Master Subscription Agreement. To personalise your experience on the Services, such as by providing tailored recommendations and insights relevant to your business profile. To understand and analyse how you use the Services and to develop new products, services, features, and functionality. To communicate with you, including sending transactional emails (account confirmations, invoices, alerts, and security notifications), responding to your enquiries, and providing customer support. For marketing and advertising purposes, such as sending product updates, newsletters, and promotional materials that may be of interest to you, where permitted by applicable law. To generate anonymised or aggregated data that does not identify any individual, which we may use for any lawful purpose including product development and industry reporting. To facilitate transactions and payments. To detect, investigate, and prevent fraud, abuse, and other harmful or unlawful activity. To comply with applicable legal obligations, enforce our agreements, and respond to lawful requests from governmental authorities.

3. Legal Bases for Processing (EEA and UK)

If you are located in the European Economic Area or the United Kingdom, we process your personal information only where we have a valid legal basis, as set out in the table below.

Where we rely on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your rights and interests, taking into account the nature of the data and the context of the processing.

4. How We Disclose the Personal Information We Collect

Hopkins does not sell your personal information. We may disclose your personal information in the following circumstances.

Analytics Partners. We use analytics services to collect and process usage data. These services may also collect information about your use of other websites and online resources. You can learn more about Google’s practices at https://www.google.com/policies/privacy/partners/.

Legal Requirements. We may disclose your information where required by applicable law, court order, or governmental authority, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Hopkins, our users, or the public.

Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you of any such transfer and any choices you may have in accordance with applicable law.

With Your Consent. We may disclose your information for any other purpose with your prior consent.

5. Your Choices

Marketing Communications. You may opt out of receiving marketing emails from Hopkins by clicking the unsubscribe link in any marketing email or by contacting us at privacy@askhopkins.ai. Please note that you will continue to receive transactional and account-related emails even after opting out of marketing communications.

Cookies. You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of the Services.

Do Not Track. Some browsers include a “Do Not Track” feature. The Services do not currently respond to Do Not Track signals.

Global Privacy Control. Where required by applicable law (including the CCPA), Hopkins honours the Global Privacy Control signal as an opt-out of the sale or sharing of personal information.

Data Subject Rights. Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, or port your personal data, or to object to certain processing. You may also have the right to withdraw consent where processing is based on consent. To exercise any of these rights, please contact us at privacy@hopkins.com. We will respond within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before processing your request. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority.

6. Third Parties

The Services may contain links to third-party websites and services. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

7. Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations. The following general retention periods apply.

When data is no longer required, we securely delete or anonymise it. We may retain de-identified, aggregated data indefinitely.

8. Security

Hopkins implements appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256 or equivalent), role-based access controls, regular security assessments and vulnerability scanning, and employee training. Notwithstanding the above, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your Hopkins account and to notify us immediately of any suspected unauthorised access.

9. Children’s Privacy

The Services are not directed at individuals under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@askhopkins.ai and we will take steps to delete such information.

10. International Visitors

Hopkins is operated from and stores data in servers that may be located outside your country of residence, including in the United States. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with data transfer restrictions, please be aware that your personal information may be transferred to and processed in countries that may not provide the same level of data protection as your home jurisdiction. Where we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner’s Office, or we rely on other lawful transfer mechanisms.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Where changes are material, we will notify you by email or by posting a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of the Services after the effective date constitutes your acceptance of the revised Privacy Policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Hopkins — Privacy Email: privacy@askhopkins.ai Website: askhopkins.ai/privacy

This Privacy Policy was last updated on August 4, 2026.