Privacy at BlackRock

IIF CAPITAL – COMPREHENSIVE COOKIE & DIGITAL TRACKING DISCLOSURE

Document Ref: IIF-CK-2026-REV2

Classification: Public Corporate Disclosure

Last Revised: 12 July 2026

1. Scope and Regulatory Framework

This Cookie Disclosure ("Notice") governs the utilization of cookies, web beacons, conversion pixels, and related digital tracking technologies (collectively, "Cookies") across all web domains, client portals, applications, and mobile interfaces owned, operated, or managed by IIF Capital or by third-party providers on behalf of the Firm (collectively, "Our Websites").

This Notice operates as an integral sub-component of the IIF Capital Comprehensive Privacy Policy. Its purpose is to provide absolute transparency to corporate and individual visitors ("you", "your") regarding how browser telemetry is gathered, the operational purposes for processing this tracking data, the third parties to whom data may be disclosed, and the mechanisms available to you to manage your data control rights.

This Notice does not apply to external, third-party domains that we do not own or control directly, even if those platforms display IIF Capital institutional advertisements or hyperlinks.

2. Functional Definition of Cookies

A Cookie is a compact, structured text file downloaded to your localized device or browser cache during a digital visit to Our Websites. Upon subsequent interactions, your browser automatically transmits these files back to the originating domain (or a recognized partner domain) to allow the system to record data, construct an online activity profile, and optimize the overall user experience.

First-Party Cookies: Set directly by IIF Capital and associated with the specific domain listed in your browser’s address bar.
Third-Party Cookies: Placed by authorized partner networks, analytics providers, or security vendors to track cross-context behaviors.

3. Functional Taxonomy of Digital Tracking Technologies

IIF Capital categorizes its deployed tracking technologies into five distinct functional classifications:

+---------------------------------------------------------------------------------------+
|                              SYSTEM COOKIE CLASSIFICATION                             |
+--------------------+-------------------------------------------------------------------+
| 1. Necessary       | Cybersecurity, core platform functionality, and accessibility.    |
+--------------------+-------------------------------------------------------------------+
| 2. Preference      | User custom configurations, language parameters, and layout modes.|
+--------------------+-------------------------------------------------------------------+
| 3. Analytics       | Non-attributable aggregate performance metrics.                   |
+--------------------+-------------------------------------------------------------------+
| 4. Marketing       | Targeted institutional tracking and campaign evaluation.          |
+--------------------+-------------------------------------------------------------------+
| 5. Conversational  | Session tracking for automated client service chatbot interfaces.  |
+--------------------+-------------------------------------------------------------------+

3.1. Necessary Cookies

Purpose: Essential for maintaining platform integrity, enforcing network encryption, facilitating secure account logins, and ensuring digital web accessibility standards.
Control: You may choose to block these trackers through your individual browser controls; however, doing so will cause structural operational failures across our encrypted networks and disable basic website features.

3.2. Preference Cookies

Purpose: Retaining user-configured historical settings such as localized currency preferences, default language parameters, geographic regions, and text formatting options for subsequent visits.

3.3. Statistical Analytics Cookies

Purpose: Generating non-attributable, aggregate metrics regarding traffic distribution, page interaction speeds, and structural user drop-off points to optimize digital infrastructure and delivery.
Data Policy: These tools do not harvest or analyze individual-level behavioral data tied to the specific identity of any user.

3.4. Marketing, Tracking & Profiling Cookies

Purpose: Deployed by external marketing infrastructures to evaluate the reach of institutional corporate campaigns and display relevant corporate content tailored to user interests.
Data Sharing: Information regarding your browsing habits and visit frequency on our platforms may be shared under controlled frameworks with affiliated organizations or advertising partner networks.

3.5. Conversational Cookies

Purpose: Binding ongoing support communications and interaction history to a specific visitor session when you communicate with our digital assistant or automated chatbot interfaces.
Data Policy: Activation of these cookies is mandatory to maintain an uninterrupted support session with the virtual helpdesk.

4. Regional Consent & Preference Management

IIF Capital enforces rigorous, geography-specific data protection compliance frameworks to govern how cookies are deployed:

4.1. European Union (EU) & United Kingdom (UK) Jurisdictions

Strict Opt-In Protocol: No tracking mechanisms beyond Necessary Cookies will be downloaded to your device unless you provide prior, explicit, and unambiguous consent via our tracking prompt upon starting your browsing session.

4.2. International & Non-European Jurisdictions

Opt-Out Control: Selecting the "Required Only" configuration automatically deploys Necessary and Statistical Analytics Cookies (as these classifications do not collect personal identifiers). You retain the right to opt out of Analytics separate from other cookies via our portal controls.
Cross-Border Navigation: If you move between European and non-European sub-domains, your initial choice controls your analytics configuration. You can modify these settings at any time by selecting the "Manage Cookies" dashboard link integrated into the footer of every page.

5. Storage Lifecycles & Alternative Tracking Technologies

5.1. Distinctions Based on Storage Lifecycles

Session Cookies: Temporary memory arrays that automatically expire and are completely removed the moment you close your browser interface or leave the site. They allow our systems to recognize your inputs as you move across individual pages during a single visit.
Persistent Cookies: Deployed with distinct, predefined expiry lifecycles to recognize your return configurations, login preferences, or settings over longer intervals.

5.2. Non-Cookie Tracking Elements

IIF Capital may integrate web beacons, transparent GIFs, and conversion pixels within our market research updates, email newsletters, or client communication networks. These technologies help our compliance and outreach teams track email open rates, link click-through metrics, and overall aggregate user engagement to continuously optimize communication quality.

6. Manual Global Controls & Operational Impact

If you choose to block all tracking cookies globally, you can adjust the advanced settings within each browser application on every individual device you use.

Important Operational Notice: Restricting all tracking mechanisms may prevent you from accessing secure corporate portals, interacting with automated support functions, or receiving optimized data feeds. Disabling cookies via your browser configuration applies globally across all internet domains you visit, not exclusively to IIF Capital platforms.

7. Fiduciary Contact, Auditing, and Complaints

The Compliance and Data Protection Department monitors IIF Capital’s adherence to global digital privacy frameworks. For inquiries regarding this disclosure, to exercise your data rights, or to submit a formal grievance, please contact our privacy desk:

Corporate Compliance Intake Desk: IIF Capital Group Department in Charge: Data Protection & Digital Infrastructure Division

Secure Institutional Email: Compliance@iifcapital.com If you believe your tracking preferences have not been correctly implemented by our systems, you retain the statutory right to lodge a formal complaint with the competent data protection authority or privacy ombudsman within your local jurisdiction.