SPRIGGS EXCAVATION, INC.

WEBSITE AND SOCIAL MEDIA PRIVACY POLICY

Effective Date: [07-08-2026]

1. Introduction

Spriggs Excavation, Inc. (the "Company," "we," "our," or "us") is a heavy civil contractor based in Durango, Colorado. This Website and Social Media Privacy Policy describes how we collect, use, disclose, and protect information when you visit our website at seicivil.com, apply for employment, access employee portals, or interact with us through Company-managed social media pages, including Facebook, Instagram, and LinkedIn.

This Privacy Policy applies to website visitors, job applicants, employees accessing company portals, vendors and business contacts, and individuals who view, message, comment on, apply through, or otherwise interact with our Company-managed social media pages, subject to the separate privacy policies and terms of the applicable social media platforms.

2. Information We Collect

2.1 Website Analytics

We use Vercel Web Analytics to understand how visitors interact with our website. Vercel Web Analytics is a privacy-focused analytics tool that does not use cookies, does not store IP addresses, and collects only anonymized, aggregated data. Information collected includes:

• Pages viewed
• Referral source
• Visit duration
• Device information (browser type, operating system, screen resolution)
• Geographic information (country and region level only)
• Page load times and performance metrics

2.2 Job Applicant Information

Job applications are routed through BambooHR's applicant tracking system. Information collected from applicants may include:

• Identifiers. Name, email address, phone number, mailing address.
• Professional Information. Resume, cover letter, work history, references, certifications, licenses.
• Education. Degrees, training, and educational history.
• Demographics (Sensitive Data). With your consent, we may collect demographic information such as race, ethnicity, gender, disability status, and veteran status for equal employment opportunity purposes. This information is collected only with your affirmative opt-in consent. Providing this information is voluntary and will not affect your application.
• Other. Any additional information voluntarily submitted by the applicant.

Access to applicant information is restricted to the hiring panel and authorized human resources personnel. Applicant data collected through BambooHR or another linked application platform is subject to the applicable platform's privacy policy in addition to this policy.

Sensitive Data. Certain information we collect from job applicants, such as demographic data provided for equal employment opportunity purposes, may qualify as "sensitive data" under the Colorado Privacy Act. We process sensitive data only with your prior opt-in consent. You may withdraw your consent at any time by contacting us using the information provided in Section 11.

LinkedIn Applications. Through the end of August 2026, the Company may also receive employment applications through LinkedIn. Information submitted through LinkedIn remains on LinkedIn unless and until it is transferred to or used by the Company in connection with the hiring process, at which point this policy applies to the Company's handling of that information.

2.3 Employee Portal

Employees access company resources through BambooHR. Employee portal access is secured through single sign-on (SSO), two-factor authentication (2FA), passkey support, and automatic session timeout controls. Information processed through employee portals is governed by internal employment policies and applicable employment agreements.

2.4 Social Media Pages and Interactions

The Company maintains and internally manages social media pages on Facebook, Instagram, and LinkedIn. Our website may link to those pages and may display selected LinkedIn post images and text manually, but we do not use dynamic social media plugins or widgets on our website that would allow social media platforms to collect visitor data through the website.

When you interact with our social media pages, the applicable platform may collect your profile information, account identifiers, comments, messages, reactions, engagement data, and other information according to that platform's own privacy policy and terms. We may receive or view information that you make available to us through those platforms, including direct messages, public comments, profile information, job inquiries, application-related communications, and engagement with our posts.

If you contact us through Facebook, Instagram, or LinkedIn regarding employment opportunities, we may respond through that platform and redirect you to our formal application process through BambooHR.

Please avoid sending sensitive personal information through social media direct messages or public comments. Public comments, posts, tags, and other public interactions on social media may be visible to other users according to the platform's settings and policies.

2.5 Third-Party Embedded Content

Our website may include interactive project viewers powered by Pix4DCloud. When you access embedded Pix4DCloud content, Pix4D's privacy policy governs data collection by that platform.

2.6 Vendors and Service Providers

We collect business contact information (name, company, email, phone number) from vendors and service providers in connection with vendor relationships, project coordination, and contract management.

3. How We Use Information

We use the information we collect for the following purposes:

• Operate and maintain our website
• Analyze website traffic and usage patterns through anonymized analytics
• Process and evaluate job applications
• Communicate with job applicants regarding their applications
• Administer employee access to company portals and systems
• Respond to inquiries, messages, comments, job inquiries, and other interactions received through Company-managed social media pages
• Manage vendor and service provider relationships
• Comply with legal obligations and regulatory requirements
• Protect the security and integrity of our systems and data

4. Disclosure of Information

We do not sell personal information. We do not share personal information for purposes of cross-context behavioral advertising or targeted advertising.

We may disclose information in the following circumstances:

• Service Providers. We share information with service providers who assist us in operating our business, including Vercel (website hosting and analytics), BambooHR (applicant tracking and HR management), Kosh Solutions (IT and technology services), background check providers (for employment screening purposes), and benefits administrators (for medical, dental, vision, 401(k), COBRA, HSA, and basic life insurance enrollment and administration). These providers are contractually obligated to use information only for the purposes of providing services to us.
• Social Media Platforms. If you interact with us through Facebook, Instagram, LinkedIn, or another social media platform, your interaction is also subject to that platform's privacy policy, terms, and data practices. We do not control those platforms' collection, use, disclosure, retention, or security of your information.
• Legal Compliance. We may disclose information when required by law, regulation, legal process, or enforceable governmental request.
• Business Transfers. In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction.

We do not transfer personal information outside the United States. Our website and social media pages are intended for users located in the United States only and are not directed to individuals in the European Union, European Economic Area, United Kingdom, or other jurisdictions outside the United States. If you access our website or social media pages from outside the United States, you do so at your own risk and are responsible for compliance with local laws.

If the Company's practices change in the future regarding sale or sharing of data, this policy will be updated and applicable opt-out signals will be honored.

5. Your Privacy Rights

Depending on your state of residence, you may have privacy rights under applicable state privacy laws, including the Colorado Privacy Act (CPA). These rights may include:

• Right to Know/Access. You may request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete. You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct. You may request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing/Targeted Advertising. You may opt out of the sale of personal information or sharing of personal information for purposes of targeted advertising. Note: We do not currently sell personal information or share it for targeted advertising.
• Right to Opt Out of Profiling. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Note: We do not currently engage in such profiling.
• Right to Data Portability. You may request a copy of your personal information in a portable and readily usable format.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.
• Right to Appeal. If we deny your privacy rights request, you may have the right under applicable law (including the Colorado Privacy Act) to appeal that decision. To submit an appeal, please contact us using the information provided in Section 11. We will respond to your appeal within the timeframe required by applicable law.

Exercising Your Rights

To exercise any of the above rights, please contact us using the information provided in Section 11. We will verify your identity before processing your request. We will respond to verified requests within the timeframes required by applicable law.

Authorized Agents

You may designate an authorized agent to submit a privacy rights request on your behalf. We may require the authorized agent to provide proof of authorization and may still require direct verification of your identity.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect information, including:

• HTTPS encryption for all website communications
• Access controls including SSO, 2FA, passkeys, and session timeouts for employee portals
• Restricted access to applicant data limited to the hiring panel
• Contractual obligations on service providers to maintain appropriate security measures

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially reasonable means to protect information, we cannot guarantee absolute security.

In the event of a data breach affecting personal information, we will provide notification in compliance with applicable state and federal breach notification laws.

7. Data Retention

We retain information for the following periods:

• Website Analytics. Anonymized analytics data is retained for up to 12 months.
• Applicant Data. Applicant data stored in BambooHR is retained indefinitely unless deletion is requested by the applicant or required by law.
• Employee Data. Retained in accordance with the Company's internal data retention policy and applicable legal requirements.
• Vendor Information. Retained for the duration of the business relationship and as required for legal and accounting purposes.

8. Children's Privacy

Our website and services are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

9. Third-Party Links

Our website and social media pages may contain links to third-party websites and services, including BambooHR, LinkedIn, Facebook, Instagram, and Pix4DCloud. This Privacy Policy applies only to our handling of information and does not apply to those third-party sites or platforms. We encourage you to review the privacy policies and terms of any third-party sites or platforms you visit or use.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make changes, we will update the "Effective Date" at the top of this policy. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Spriggs Excavation, Inc.

Attn: Privacy Inquiries

B gdlB dR tropriA 083

30318 OC ,ognaruD

Email: moc.livicies@stcejorp

Phone: 4444-624 )079(