Effective Date: March 8, 2026

This Privacy Policy (“Privacy Policy”) describes how Northrop Capital Group (“NCG,” “Company,” “we,” “our,” or “us”) collects, uses, stores, discloses, and protects information obtained from users of www.northropcapitalgroup.com, including all related webpages, forms, features, functionality, content, communications, and services made available through or in connection with the website (collectively, the “Website”).

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING THE WEBSITE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MUST IMMEDIATELY CEASE ACCESSING AND USING THE WEBSITE.

1. INTRODUCTION 1.1 Effective Date The effective date of this Privacy Policy is March 8, 2026. 1.2 Purpose

NCG is committed to respecting the privacy rights of visitors to and users of the Website. This Privacy Policy is intended to describe our information collection, use, storage, disclosure, and protection practices. 1.3 Scope

This Privacy Policy applies solely to information collected by or through the Website and does not apply to information collected offline or through third-party websites, applications, services, or platforms not owned or controlled by NCG, except as expressly stated herein. 1.4 Separate Terms and Conditions

Your use of the Website is also subject to NCG’s Terms and Conditions, which are incorporated herein by reference to the extent applicable. By using the Website, you represent and warrant that you have also read, understood, and agreed to the Terms and Conditions. 1.5 No Permission Without Agreement

If you do not understand or agree to this Privacy Policy, you may not access or use the Website and must immediately discontinue doing so.

2. CHANGES TO THIS PRIVACY POLICY

NCG reserves the right, at any time and in its sole discretion, to update, amend, modify, or revise this Privacy Policy by posting a revised version on the Website. Any such revised Privacy Policy will become effective upon posting unless a later effective date is expressly stated.

Your continued use of the Website after the posting of any revised Privacy Policy constitutes your acknowledgment of and agreement to the revised terms, to the extent permitted by law.

We encourage you to review this Privacy Policy periodically.

3. CHILDREN'S PRIVACY

The Website is not directed to children under the age of thirteen (13), and NCG does not knowingly solicit or collect Personal Information from children under 13 years of age.

If NCG becomes aware that it has collected Personal Information from a child under 13 without legally sufficient consent, NCG will take reasonable steps to delete such information. If you believe a child under 13 has provided Personal Information to NCG, please contact us promptly.

4.1 INFORMATION WE COLLECT

NCG may collect information from you in a variety of ways, including information you voluntarily provide and information collected automatically through your use of the Website. 4.1 Traffic Data and Technical Information

Like many website operators, NCG may automatically collect certain information that web browsers, devices, and servers typically make available, including without limitation:

• IP address;

• browser type and version;

• device type;

• operating system;

• referring website addresses;

• pages viewed;

• dates and times of access;

• clickstream data;

• approximate geographic location derived from IP address;

• and other technical or diagnostic information regarding your interaction with the Website.

This information may be referred to collectively as “Traffic Data.” 4.2 Cookies and Similar Technologies

The Website may use cookies, pixels, tags, scripts, web beacons, and similar tracking technologies (“Cookies”) to recognize users, improve website performance, analyze traffic, remember preferences, enhance user experience, and support marketing and advertising efforts.

Cookies may include both:

• first-party cookies, which are set by NCG or on our behalf; and

• third-party cookies, which are set by third-party analytics, advertising, or service providers. 4.3 Analytics and Advertising Technologies

NCG may use analytics and remarketing tools provided by third parties, including but not limited to services such as Google Analytics, advertising platforms, social media pixels, and similar technologies, to:

• understand how visitors use the Website;

• measure advertising effectiveness;

• improve the Website and user experience;

• and provide advertisements on third-party platforms based on prior visits to the Website.

These third parties may use cookies or similar technologies to collect information about your browsing activities over time and across different websites and devices. 4.4 Browser Settings and Cookie Controls

Most web browsers permit you to control or disable cookies through browser settings. If you choose to refuse or disable cookies, some features or functionality of the Website may not operate properly. 4.7 Information You voluntarily Provide

NCG may collect information you voluntarily provide through the Website, including when you:

• submit a contact form;

• request information;

• inquire about financing or advisory services;

• schedule a consultation;

• upload or submit documents;

• communicate with us by email, phone, text message, or webform;

• subscribe to updates or marketing communications;

• or otherwise interact with the Website. 4.6 Personal Information

The information you voluntarily provide may include personally identifiable information (“Personal Information”), including without limitation:

• first and last name;

• business name;

• job title;

• mailing address;

• email address;

• telephone number;

• business industry;

• revenue and other business profile information;

• financing needs and requested funding amounts;

• and any other information you choose to provide. 4.7 Financial and Business Information

In connection with financing inquiries or service requests, you may also provide business or financial information, such as:

• time in business;

• estimated monthly or annual revenue;

• business ownership information;

• use of funds;

• existing obligations;

• supporting financial documentation;

• and other underwriting-related or business evaluation materials.

NCG does not request consumer credit card payment information through ordinary website contact forms unless specifically disclosed at the point of collection.

4.8 Information from Third Parties

NCG may receive information about you from third parties, including:

• referral sources;

• lead providers;

• marketing partners;

• analytics providers;

• public databases;

• social media platforms;

• service providers;

• and lenders, funding partners, or other third parties involved in evaluating or responding to your inquiry.

NCG may combine such information with information collected directly from you. 5. HOW WE USE INFORMATION

NCG may use the information we collect, including Personal Information, for lawful business purposes, including without limitation to:

1. operate, maintain, monitor, and improve the Website;

2. respond to inquiries, requests, or communications;

3. contact you regarding potential financing opportunities, advisory services, or related business matters;

4. review, evaluate, process, and present inquiries or applications;

5. share relevant information with lenders, capital providers, service providers, referral partners, or other third parties in connection with requested services;

6. verify identity, authority, or submitted information;

7. personalize your Website experience;

8. send administrative, service-related, or transactional communications;

9. send marketing, promotional, or informational communications, where permitted by law;

10. conduct analytics, research, reporting, and performance measurement;

11. detect, prevent, investigate, and address fraud, security incidents, unlawful activity, or misuse of the Website;

12. comply with legal obligations, regulatory requirements, court orders, or lawful requests;

13. enforce our agreements, policies, and legal rights;

14. protect the rights, property, and safety of NCG, our users, and others;

15. facilitate corporate transactions, restructurings, or business transfers;

16. and for any other purpose disclosed at the time of collection or otherwise permitted by law. 6. HOW WE DISCLOSE INFORMATION

NCG does not sell your Personal Information for cash in the ordinary course of business. However, we may disclose information we collect under the circumstances described below. 6.1 Disclosure to Lenders, Capital Sources, and Service Providers

If you submit an inquiry or request services through the Website, NCG may disclose your information to banks, lenders, lessors, financing companies, investors, underwriting partners, processing partners, technology vendors, CRM providers, communications vendors, and other service providers or counterparties as reasonably necessary to evaluate, process, support, or respond to your inquiry or to provide requested services. 6.2 Disclosure to Vendors and Operational Service Providers

NCG may disclose information to third-party service providers who perform functions on our behalf, including without limitation website hosting, analytics, data storage, customer relationship management, communications delivery, security, technical support, marketing support, and administrative processing. 6.3 Disclosure to Marketing and Advertising Partners

NCG may disclose certain information to advertising, analytics, or marketing partners to assist with audience measurement, campaign optimization, remarketing, lead attribution, and similar marketing-related purposes, subject to applicable law. 6.4 Disclosure Required by Law or to Protect Rights

NCG may disclose information if we believe in good faith that such disclosure is necessary or appropriate to:

• comply with applicable law, regulation, legal process, subpoena, or court order;

• respond to lawful governmental requests;

• enforce our Terms and Conditions or other agreements;

• detect, investigate, or prevent fraud, security incidents, or illegal activity;

• protect the rights, property, safety, or legal interests of NCG, our users, or others.

6.5 Business Transfers

NCG reserves the right to transfer or disclose information, including Personal Information, in connection with an actual or proposed merger, acquisition, financing, asset sale, corporate reorganization, bankruptcy, receivership, dissolution, or similar transaction or proceeding. 6.6 With Your Direction or Consent

NCG may disclose your information where you direct us to do so or where you otherwise consent to such disclosure.

7. EMAIL, PHONE, AND TEXT COMMUNICATIONS

By submitting your contact information through the Website, you expressly consent, to the extent permitted by law, to receive communications from NCG and its representatives by:

• email,

• telephone,

• and SMS/text message,

regarding your inquiry, requested services, operational matters, follow-up communications, and marketing or promotional communications.

You understand that:

• your consent is not a condition of purchase;

• message and data rates may apply;

• and you may opt out of certain marketing communications as described in the applicable communication.

You may unsubscribe from marketing emails by using the unsubscribe mechanism contained in the email, where available. You may opt out of text messages by replying STOP where such functionality is offered. Even if you opt out of marketing communications, NCG may still send you transactional or service-related communications where permitted by law.

8. USER CONTENT AND PUBLIC SUBMISSIONS

If the Website allows you to submit testimonials, reviews, comments, or other public-facing content, any information you choose to make public may be viewable by others and may become publicly available. You should exercise caution before disclosing Personal Information in any public-facing area of the Website.

NCG is not responsible for the privacy or security of information you voluntarily make public.

9. SECURITY OF INFORMATION

NCG uses commercially reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, use, loss, alteration, or disclosure.

However, no method of internet transmission, electronic storage, or security control is completely secure. Accordingly, NCG cannot and does not guarantee absolute security, and you acknowledge that you provide information at your own risk.

10. RETENTION OF INFORMATION

NCG retains information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide services;

• respond to inquiries;

• maintain business and financial records;

• comply with legal, tax, accounting, regulatory, or contractual obligations;

• resolve disputes;

• enforce our agreements;

• and protect our legal interests.

Retention periods may vary depending on the nature of the information and applicable legal requirements.

11. ACCESSING, UPDATING, OR CORRECTING INFORMATION

If you believe that Personal Information maintained by NCG is inaccurate or incomplete, you may contact us to request that we update or correct it, subject to applicable law and our recordkeeping obligations.

NCG may require verification of your identity before acting on such a request.

12. THIRD-PARTY WEBSITES

The Website may contain links to third-party websites, applications, or services not owned or controlled by NCG. NCG is not responsible for the privacy, security, or data practices of such third parties.

Before providing Personal Information to any third-party website or service, you should review its privacy policy and terms.

13. DO NOT TRACK

Some web browsers may transmit “Do Not Track” signals. Because there is not yet a universally accepted standard for how to respond to such signals, NCG does not currently respond to browser-based Do Not Track signals.

14. STATE PRIVACY RIGHTS

Depending on your state of residence, you may have certain rights under applicable privacy laws, subject to legal exceptions and verification requirements. These rights may include, where applicable, the right to request access to, correction of, deletion of, or information about certain Personal Information we collect about you.

NCG reserves the right to verify your identity and authority before responding to any such request and may deny requests to the extent permitted by law.

If you wish to make a privacy-related request, you may contact NCG using the contact information provided below.

15. INTERNATIONAL USERS

The Website is intended for users located in the United States. If you access the Website from outside the United States, you understand and agree that your information may be transferred to, processed in, and stored in the United States and other jurisdictions where data protection laws may differ from those of your jurisdiction.

16. CALIFORNIA AND OTHER JURISDICTION-SPECIFIC DISCLOSURES

If applicable law requires additional privacy disclosures or consumer rights notices based on your state or jurisdiction of residence, NCG may provide supplemental disclosures or notices separately, and such supplemental terms shall supplement this Privacy Policy to the extent required by law.

17. CONTACT INFORMATION

If you have questions about this Privacy Policy or wish to submit a privacy-related request, you may contact:

Northrop Capital Group

Website: www.northropcapitalgroup.com

Email: info@northropcapitalgroup.com