Privacy Policy

Last Updated: June 24, 2026

This privacy policy (this “Policy”) explains how Excelis Packaging Automation, and our portfolio companies (“Excelis,” “we”, “us,” or “our”) may collect, use, process, store, and disclose the personal information (as defined below) that we collect in connection with your interactions with us, including through our website, surekap.com, and any other websites, applications, content, features, or services controlled by Excelis that link to this Policy (collectively, the “Services”). This Policy also applies when you interact with us through our social media pages, marketing activities (including e-mail campaigns, advertisements, and promotions), and any other activities described in this Policy. This Policy does not apply to personal information Excelis collects from its employees.

This Policy also describes the choices you can make about how your information is collected and used and how you may contact us if you have further questions about our collection and use of your information. This Policy does not apply to any third-party websites, services, advertisers, or applications linked or made available through our Services. These third parties have their own privacy policies, and we encourage you to read such policies before providing information to or through those third parties.

PLEASE READ THIS POLICY CAREFULLY. IT CONTAINS IMPORTANT INFORMATION APPLICABLE TO YOU, TOGETHER WITH ANY PERSONS, ENTITIES, ORGANIZATIONS, OR DIGITAL ENGINES FOR WHICH YOU ACCESS OR USE THE SERVICES, REGARDING THE PRIVACY AND SECURITY OF THE INFORMATION USED BY EXCELIS.

By accessing and/or using the Services, you accept and agree to the terms of this Policy without modification. [You also agree to be bound by our Terms of Use, into which this Policy is incorporated by reference.]

THE DATE THIS POLICY WAS LAST REVISED IS IDENTIFIED AT THE TOP OF THIS PAGE. WE MAY UPDATE OR MODIFY THIS POLICY AT ANY TIME AT OUR DISCRETION, AND SUCH UPDATES OR MODIFICATIONS ARE EFFECTIVE UPON BEING POSTED ON THE SITE OR OTHERWISE MADE AVAILABLE TO YOU.

YOU ARE RESPONSIBLE FOR REVIEWING THIS POLICY PERIODICALLY TO ENSURE YOU ARE AWARE OF ANY CHANGES TO IT. YOUR CONTINUED USE OF THE SERVICES INDICATES YOU ACCEPT SUCH CHANGES. IF YOU DO NOT AGREE WITH THIS POLICY OR ANY CHANGES HERETO, YOU MUST NOT ACCESS OR USE THE SERVICES OR DISCLOSE ANY OF YOUR PERSONAL INFORMATION THROUGH THE SERVICES. YOUR ONLY RECOURSE IS TO NOT USE THE SERVICES.

State Privacy Rights Notice / California Notice at Collection: See the State Privacy Rights Notice / California Notice at Collection section below for important information about your rights under applicable state privacy laws.

CONTENTS

• Information We Collect

• How We Collect Information

• How We Use Information

• How We Share Information

• How Long We Store Your Information

• Data Security

• Children’s Privacy

• Your Rights and Choices Regarding Your Information

• Links to Other Websites

• State Privacy Rights Notice / California Notice at Collection

• Canadian Privacy Rights

• Notice to Non-U.S. Visitors and Customers – Transfer of Data to U.S.

• How to Contact Us

Information We Collect

This Policy applies to all information collected about you by us or on our behalf or submitted by you through the Services. The information that we collect about you may include the pages you visit, the services or features in which you elect to participate, and the manner in which you interact with us across all channels.

Personal Information

When you access or use the Services, Excelis may ask you to provide certain personal information. As used in this Policy, “personal information” is information that identifies, relates to, describes, can reasonably be associated with, or can reasonably be linked, directly or indirectly, to a particular identified or identifiable individual or household. Personal information does not include de-identified information (including, for example, information that is aggregated and that no longer identifies individuals). All personal information you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

We and our service providers may collect personal information from you and any devices you use when you: order products or services (whether through a web form, in person, over the telephone, by mail, or by other means), create or manage an account with us, register to receive marketing and other materials from us, express interest in receiving information about us and our services, make requests or submit feedback, comments, or complaints to us, view or otherwise engage with the Services, or communicate with us (whether through digital or other means).

We may collect information from you both when you provide it voluntarily and automatically (for example, through the use of cookies, pixel tags, and similar tracking technologies) when you access or use our digital Services. We also may collect information from other sources, as described further in How We Collect Information below.

Depending upon your interactions with the Services and the choices you make, as further described below, the types of personal information collected may include (but are not limited to):

• Identifiers, such as first and last name, postal address or work address, e-mail address, account username and password, and Internet Protocol (IP) address;

• Internet or Electronic Network Activity, such as:

  • Web browser specifications, usage data, and search history, including the webpages you visit, websites visited before accessing the Services (including referring URLs), and websites visited after accessing the Services;

  • Device, connectivity, and configuration data, including device ID numbers, nearby networks, browser type, operating system, information about how and when you used the Services, and language settings;

• Geolocation data about your device’s location, which you may provide to us directly or which may be inferred from your IP address and internet connection data;

• Commercial information and interactions, such as:

  • Records of transactions and other information you post or otherwise submit to us, including the products or services purchased, obtained, or considered (for example, cart history), and other order, purchasing, or consuming histories or tendencies;

  • Records of interactions with us via email, telephone, or other means; this may include audio recordings, the date and time you interacted with us, the content of your interaction with us, and the method by which you interacted with us;

• Financial information, such as shipping and billing address and payment information (including bank account number and credit or debit card number, type, and expiration date); and

• Professional or employment-related information, such as job title, company name, and past employment history.

On some pages, you can submit information about other people. For example, if you order a product on behalf of another business or recipient and want it sent directly to that recipient, you will need to submit that recipient’s information. In this circumstance, the types of personal information collected may include (but are not limited to):

• Recipient’s name;

• Recipient’s address; and

• Recipient’s phone number.

To the extent you provide or transmit personal information that identifies any other individual (including, without limitation, name, address, and/or telephone number) to us, our affiliates, or our third-party vendors, suppliers, or business partners through the Services, you warrant that (i) you are providing or obtaining only your own information or the information of others who authorized you to provide such information to third parties and/or obtain such information from third parties on their behalf; and (ii) the use of such information by us and our affiliates, vendors, suppliers, or business partners will not infringe upon, misappropriate, or otherwise violate the intellectual property, proprietary, or other rights of any third parties.

Non-Personal Information

We may also collect “non-personal information,” which is information that does not identify or relate to an individual or household, or that may be obtained by removing all identifiers from personal information (for example, by anonymizing data). If we connect or combine non-personal information with personal information, we will treat such combined information as personal information.

How We Collect Information

We generally collect your information to fulfill a contractual obligation or where we or someone with whom we work needs to use your personal information for a reason related to their provision of services on our behalf. We collect personal information in the following ways for the business purposes described in How We Use Information below.

Information You Provide to Us

When you visit, access, or use the Services or otherwise communicate with us (for example, via mail, e-mail, telephone, or in person), you may provide us with personal information or non-personal information. This information includes:

• Information that you provide by filling in forms on the Services or through other means (such as over the telephone or in writing). This may include your name, phone number, e-mail address, or business or company information. We also may ask you for information when you report a problem with the Services.

• Records and copies of your correspondence or verbal communications (including e-mail addresses, phone numbers, and information you voluntarily provide), if you contact us.

• Your search queries or other inquiries submitted through the Services.

Information Provided by Third Parties

We may collect personal information and non-personal information from third parties, including from the following sources:

• Service providers (including IT hosting providers and customer service providers);

• Data analytics service providers;

• Email, survey, feedback, and other communications service providers;

• Business and promotional partners; and

• Advertising and marketing service providers, including social media platforms.

If we combine information from other sources with personal information that we already hold, we treat the combined information as personal information.

Information We Collect Automatically

We may collect information automatically about your device and browser, browsing and usage activity, and patterns as you interact with our digital Services. This may include information about your interactions with the Services, such as the date, time, length, and frequency of any visit, the information you enter, your interactions with content or links you click, or pages or features you access. It may also include technical data such as URL information, IP addresses, operating systems, the types of devices you are using to access or connect to the Services, unique device identifiers, device attributes, network connection type, and other device and network information.

We may collect this information ourselves or through third parties, such as service providers (including IT hosting providers), data analytics service providers, or advertising and marketing service providers, including social media platforms. Information may be collected through the types of technologies described below.

Cookies

Cookies are small data files of letters and numbers created by a website and stored automatically in a memory folder on your device in order to remember information about you, such as your language preference, login information, or items in your cart. Excelis and certain third parties may use cookies, pixel tags, and similar tracking technologies to support the operation of the Services and to improve user experience. For more information, please see our Cookie Policy.

How We Use Information

We may use the information you provide about yourself or others for the following purposes:

• Processing and fulfilling orders.

• Customer service. We may use your personal information to communicate with you, including by contacting you with questions or issues related to the Services or your orders, responding to inquiries or complaints regarding your orders, and providing updates on our new products and services.

• Account registration and maintenance.

• Administration of the Services. We may use your personal information to repair any errors in the Services and provide access to, maintain, personalize, or improve the Services.

• Fraud and security. We may use your personal information to detect, prevent, and address fraud, abuse, illegal activity, and technical and security issues, and to maintain the safety, integrity, and security of the Services and our technological assets.

• Compliance. We may use your personal information to comply with legal, regulatory, tax, accounting, and audit obligations; enforce our agreements, terms, conditions, and policies; and investigate complaints or potential violations thereof.

• Analytics. We may use your personal information to understand how you access and use our Services, analyze activity to ensure technical functionality of the Services, and monitor and analyze your use of our Services, including your interactions with features and information made available, linked to, or offered through our Services.

• Advertising and marketing. We may use your personal information to send you marketing or promotional communications, measure and improve marketing effectiveness, and deliver advertising and other content to you using cookies or similar technologies, including targeted advertisements.

• With your consent. In some cases, we may specifically ask for your consent to collect, use, or share your personal information, such as when required by applicable law.

• Other purposes. We may use your personal information for any other business purposes reasonably determined to be useful, for which we may provide notice at the time of collection.

How We Share Information

We do not transfer your information to third parties in exchange for money. However, we may share your personal information with certain service providers (including IT hosting service providers), contractors, business and logistical partners, and other third parties whom we engage to operate our business and perform services on or through the Services (for example, to market our products and services, including to personalize advertising targeted to you).

In addition, we may from time to time contract with third parties to assist us in collecting, maintaining, and managing our customer information, taking and fulfilling orders, processing credit card information, and providing analytics regarding your interactions with our Services and other third-party websites so that we may improve the products and services we offer you.

We may use data analytics service providers. For example, we may use Google Analytics, a service provided by Google, Inc., to gather information about how you and other users engage with the Site. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners.

We may disclose personal information if we are required to do so by applicable law. We may disclose your information to corporate affiliates or, if we are subject to a merger or acquisition with/by another organization, your information may be transferred to such company upon completion of the transaction.

We may disclose your information if we in good faith believe such action is necessary to (i) comply with applicable law or legal process, including valid, legally enforceable requests from public authorities; (ii) protect and defend our or your rights and property; (iii) protect against misuse or unauthorized use of the Services, or detect, prevent, and otherwise address fraud, security, or technical issues; (iv) protect the personal safety or property of our users or the public; or (v) achieve another legitimate purpose. Please note we may not provide you with notice prior to disclosure in such cases.

We may disclose non-personal information to third parties in our discretion. Additionally, we may share aggregated and de-identified information with our service providers, business and logistical partners, and other third parties with whom we conduct business so they can understand how and how often people use our Services. This helps us improve the Services available to you.

Lastly, we may disclose your information to those third parties to whom you expressly request disclosure.

How Long We Store Your Information

We may store your personal information in accordance with our retention policies for as long as needed for the purposes for which we use it, including, for example, processing transactions and maintaining customer accounts. We also may retain and use your personal information to the extent necessary to comply with our legal, accounting, or reporting obligations and policies (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. Additionally, we may continue to store your personal information contained in our standard back-ups and archives.

Data Security

We take reasonable measures to protect the security and integrity of your personal information, including reasonable physical, administrative, technical, and organizational procedures designed to safeguard and secure the information we collect. However, no method of electronic storage or data transmission over the Internet can be guaranteed to be 100% secure.

ANY TRANSMISSION OF PERSONAL INFORMATION IS AT YOUR OWN RISK. BY USING THE SERVICES, YOU ACKNOWLEDGE AND ACCEPT THESE RISKS. AS A RESULT, WE CANNOT GUARANTEE OR WARRANT THE SECURITY OF ANY INFORMATION YOU DISCLOSE OR TRANSMIT TO US OR THAT IS OTHERWISE PROVIDED TO US, AND WE ARE NOT RESPONSIBLE FOR THE THEFT, DESTRUCTION, OR INADVERTENT DISCLOSURE OF SUCH INFORMATION. IT IS YOUR RESPONSIBILITY TO SAFEGUARD ANY PASSWORDS, ID NUMBERS, OR OTHER SPECIAL ACCESS FEATURES ASSOCIATED WITH YOUR USE OF THE SERVICES.

Children’s Privacy

The Services are not created for anyone under the age of eighteen (18) years of age. For that reason, we do not knowingly collect or maintain personal information from those we actually know are under eighteen (18) years of age, and no part of our Services is targeted at or structured to attract anyone under eighteen (18) years of age.

If you are a parent or guardian, and if you are aware that your child has provided us with personal information, please contact us through one of the methods listed under How to Contact Us below. If we become aware that we have collected personal information from someone under eighteen (18) years of age without verification or parental consent, we will take reasonable steps to remove that information from our servers.

Your Rights and Choices Regarding Your Information

Marketing Preferences

If you have supplied your e-mail address to us, you agree that, from time to time, Excelis may further contact you to conduct market research or send emails to introduce new products and/or services that may be of interest to you. You can choose not to receive this correspondence by opting out using one of the methods listed under How to Contact Us below or by clicking the opt-out link at the bottom of our promotional e-mails. Once you opt out, you will not receive promotional emails from Excelis unless you opt back in at a later time. However, you may still receive non-marketing communications from us (for example, relating to your account, updates, or legal notices), you will still be a registered member of Excelis, and you will still be eligible to use any of our products and services.

Cookies and Interest-Based Advertising

For more information on how to manage cookies, pixel tags, and other tracking technologies on our Services, please see our Cookie Policy.

Do Not Track

Our Services do not change their behavior in response to “Do Not Track” browser signals.

Links to Other Websites

The Services may contain links to third-party websites, applications, or services. If you click one of these links, you will be taken to websites, applications, or services we do not control. We have no control over the content and practices of these third-party offerings. This Policy does not apply to those third parties, and Excelis is not and shall not be responsible for their privacy policies, content, or security. We encourage you to review the privacy policies of any third-party services you use or websites you visit. By providing a link to a third-party website, application, or service, we are not endorsing or attempting to associate with any other entity, their content or services, or the persons or entities associated with those websites, applications, or services.

State Privacy Rights Notice / California Notice at Collection

This section describes how we may collect, use, and disclose personal information of residents of the United States in connection with our Services pursuant to applicable state consumer privacy laws (collectively, “State Privacy Laws”). If you are a resident of a state with a State Privacy Law, this section applies to you.

If you are a California resident, this section serves as our Notice at Collection pursuant to the California Consumer Privacy Act (the “CCPA”). As used in this section, “personal information” has the meaning defined under the CCPA.

Categories of Personal Information We Collect and Use

The table below summarizes the categories of personal information we may have collected in the past twelve (12) months and the purposes for which we may collect and use that information. For additional information, please see Information We Collect and How We Collect Information above.

CategoryDescriptionBusiness or Commercial PurposesIdentifiersInformation such as real name, postal address or work address, IP address and online identifiers, e-mail address, and account username and passwordProcessing and fulfilling orders; Customer service; Account registration and maintenance; Administration of the Services; Fraud and security; Compliance; Analytics; Advertising and marketingCalifornia Customer Records Personal InformationMay include name, address, telephone number, bank account number, professional or employment-related information, credit card number, debit card number, or other financial information. Some personal information included in this category may overlap with other categories.Processing and fulfilling orders; Customer service; Account registration and maintenance; Administration of the Services; Fraud and security; Compliance; Analytics; Advertising and marketingInternet or Electronic Network ActivityOnline identifiers (including IP address), browser information, usage data, browsing and search history, cookies or similar technologies, device and network information, and information regarding consumer’s interactions with our website or advertisements.Processing and fulfilling orders; Customer service; Administration of the Services; Fraud and security; Compliance; Analytics; Advertising and marketingGeolocation DataData about your device’s approximate physical location (including longitude and latitude coordinates, Wi-Fi network, and cell tower pings), which you may provide directly to us or which may be inferred from your IP address and internet connection dataProcessing and fulfilling orders; Customer service; Administration of the Services; Fraud and security; Analytics; Advertising and marketingCommercial InformationRecords of personal property, products, or services purchased, obtained, or considered, or other purchasing or consuming histories or tendenciesProcessing and fulfilling orders; Customer service; Account registration and maintenance; Administration of the Services; Fraud and security; Compliance; Analytics; Advertising and marketingProfessional or Employment-Related InformationJob title, company name, and past employment historyFraud and security; Hiring and employment; Compliance

Sale or Sharing of Personal Information

Excelis does not sell personal information for money in the ordinary sense. However, because Excelis uses advertising and analytics cookies, pixel tags, and similar tracking technologies, certain disclosures of online identifiers, device information, and internet activity to advertising or analytics partners may be considered “selling,” “sharing,” or “cross-context behavioral advertising” under the CCPA and other State Privacy Laws.

Category Disclosed for Advertising or AnalyticsPurposeCategories of RecipientsIdentifiersTargeted advertising and remarketingAdvertising and marketing partnersCalifornia Customer Records Personal InformationTargeted advertising and remarketingAdvertising and marketing partnersInternet or Electronic Network ActivityTargeted advertisingAdvertising and marketing partnersCommercial Information and InteractionsTargeted advertising and remarketingAdvertising and marketing partners

Excelis does not knowingly sell or share the personal information of individuals under thirteen (13) years of age.

Your Consumer Privacy Rights

Depending upon where you live in the United States, if you are a resident of a state with a State Privacy Law, you may have certain rights with respect to your personal information that we have collected and used under certain circumstances, which may include the following:

• Right to Know. The right to confirm whether or not we process your personal information.

• Right to Access. The right to request that we disclose the following information regarding our use of your personal information during the past twelve (12) months:

  • the categories and/or specific pieces of personal information we have collected about you;

  • the business or commercial purposes for which we have collected, used, sold, or shared such personal information;

  • the categories of sources for the personal information we have collected about you;

  • the categories of third parties and, in certain jurisdictions, the specific third parties with whom we have disclosed your personal information;

  • if we have disclosed your personal information for a business purpose, a list identifying the personal information categories disclosed that each category of recipient has obtained; and

  • if we have “sold” or “shared” your personal information, a list identifying the personal information categories disclosed that each category of recipient purchased or received.

• Right to Portability. The right to receive a portable copy of your personal information that we have collected.

• Right to Correct. The right to request correction of your inaccurate personal information, taking into account the nature of the personal information and the purposes of processing.

• Right to Delete. The right to request that we delete your personal information that we have collected (subject to certain exceptions that may apply under applicable law).

• Right to Opt Out. The right to opt out of (1) the sale of your personal information, (2) the sharing of your personal information for cross-context behavioral or targeted advertising purposes, and/or (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

• Right to Limit Use of Sensitive Personal Information. If we use sensitive personal information about you beyond what is necessary to provide you with the products or services you request, or as otherwise permitted by applicable law, you have the right to request we limit our use of your sensitive personal information.

• Right to Non-Discrimination/Non-Retaliation. Excelis will not discriminate or retaliate against you for exercising any of your rights under the CCPA. We will not deny you goods or services, charge you different prices (including through the use of discounts or other benefits or the imposition of penalties), provide you with a different level or quality of goods or services, or suggest any of the foregoing because you exercised your CCPA rights.

• Right to Appeal. If we decline to take action upon your request, you may have the right to appeal our decision by submitting an appeal request using any of the methods specified in How to Contact Us below.

These rights may not apply in certain jurisdictions or under certain circumstances permitted by law. For example, we may need to retain information you have requested that we delete to complete a transaction for which your personal information was collected, provide a product or service you requested, perform a contract to which you are a party, or take steps at your request prior to entering into a contract.

How to Exercise Your Consumer Privacy Rights

If you are a resident of jurisdiction with a State Privacy Law where one or more of these rights are granted to you, and if you wish to exercise your Right to Know, Right to Portability, Right to Correct, or Right to Delete as listed above, please contact us using any of the methods specified in How to Contact Us below.

Please describe your request with enough detail for us to understand, evaluate, and respond to it. For some requests, we may request information necessary to verify your identity before processing such request.

Where permitted by law, you may designate an authorized agent to submit a request on your behalf. We may require proof of the agent’s authority and may separately verify your identity. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

You may exercise your Right to Opt Out of Sale or Sharing by clicking on the “Do Not Sell/Share My Personal Information” link on the footer of our Services. Our Services recognize the Global Privacy Control (“GPC”), which is a browser-based signal that communicates your opt-out preferences. When we detect a GPC signal from your browser or device, we will treat it as a valid request to opt out of the sale and sharing of your personal information, as well as a request to opt out of cross-contextual behavioral advertising, as applicable under the CCPA and other State Privacy Laws. The signal will apply to the specific browser or device from which the signal is sent. To implement GPC, you may download a browser or extension that supports the signal. For more information about GPC, visit https://globalprivacycontrol.org/.

Do Not Track is a preference you can set in your web browser to inform websites that you do not want your online browsing activities to be tracked. However, these features are not yet uniform, so we do not currently respond to such features or signals.

Canadian Privacy Rights

For residents of Canada, personal information is collected, used, and disclosed in accordance with the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and other applicable Canadian privacy laws.

Residents of Canada may access, review, and request correction of their personal information held by Excelis. You can submit a request regarding your personal information by contacting us through one of the methods indicated in How to Contact Us below.

We will take reasonable steps to verify your identity prior to responding to your requests. The verification steps will vary depending upon the sensitivity of the personal information and whether you have an account with us.

As required or permitted by applicable law, you may be entitled to additional rights regarding your personal information depending on your jurisdiction of residence. These may include, for example, the right to be informed of and submit observations regarding automated decision-making and the right to request information about data processing.

We reserve the right not to change personal information if we disagree that it is incorrect, but we will append your requested alternative information. We may not provide access to personal information where we are permitted or required to deny access by applicable law (for example, where the information requested would disclose the personal information, including opinions, of another individual, or where the information is subject to solicitor-client or litigation privilege).

You have the right to refuse to provide or to withdraw your consent to processing of your personal information at any time with effect for future processing. This would not affect processing where applicable law allows us to process personal information without consent.

Notice to Non-U.S. Visitors and Customers – Transfer of Data to U.S.

If you are located outside the United States of America and choose to provide information to us, please note that we are a United States company, and you should be aware that your personal information will be transferred to the United States of America, the laws of which may be deemed by your country to have inadequate data protection. Personal information may be subject to disclosure or access requests by the government, courts, or law enforcement or regulatory agencies according to applicable United States law. If you are located in a country outside the United States of America and voluntarily submit personal information to us, you thereby consent to the general use of such information as provided in this Policy and to the transfer of that information to, and/or storage of that information in, the United States of America.

How to Contact Us

Should you have any questions or concerns about this Policy, Excelis’ privacy practices, or your personal information, please contact us using one of the methods below:

Mail:

Excelis Automation

Attn: Richard Butler

2760 N Service Drive

Red Wing, Minnesota 55066

Email: info@excelisautomation.com

Phone: (507) 262-3571