MCM SERVICES USA CORPORATION PRIVACY POLICY Effective Date: October 13, 2025 This Privacy Policy describes how MCM Services USA Corporation ("MCM Services," "we," "us," or "our") collects, uses, and protects your information when you use our website, including the client portal ("Portal"). 1. INFORMATION WE COLLECT We collect information directly from you when you register for the Portal, request a quote, or use our services. This includes: a. Personal Identification Information: Name, email address, phone number, and physical address (collected via form submissions and client onboarding). b. Account Credentials: Email and password (used for secure login via Firebase Authentication). We do not store or have direct access to your plain-text password. c. Project Data: Information related to your service requests, current projects, project status, documents, and billing details (stored securely in our Firestore Database). d. Technical Data: Browser type, device information, and language preferences (for functionality and security). 2. HOW WE USE YOUR INFORMATION We use your data primarily to provide and improve our services, including: a. Service Delivery: To authenticate your access to the Portal, manage your ongoing projects, schedule service calls, and process payments. b. Communication: To send project updates, confirmations, documents (invoices, contracts), and respond to your inquiries. c. Security: To maintain the safety and security of our services, including verifying your identity and preventing fraudulent activity. 3. DATA STORAGE AND SECURITY (FIREBASE/FIRESTORE) Your data, including client authentication details and project information, is stored using Google's Firebase and Firestore services. We commit to the following security measures: a. Secure Authentication: User passwords are encrypted and managed by Firebase Authentication. b. Access Control: Data in the Firestore Database is protected by security rules ensuring that clients can only read and access data specific to their User ID (UID), preventing unauthorized access to other client projects. c. Third Parties: We do not sell or rent your personal data to third parties. 4. COOKIES AND TRACKING We use minimal session cookies to remember your language preference and maintain your secure login session within the Portal. 5. YOUR RIGHTS You have the right to access, update, or request the deletion of your personal data. Please contact us using the information provided below to exercise these rights. 6. CONTACT US For any questions regarding this Privacy Policy or your data, please contact us via the forms on our website.