Cookies — Newly Renovated Inc.

NEWLY RENOVATED INC.

COOKIE POLICY

Version 2.0 - Tracking Technology Disclosure - Updated March 13, 2026

Effective Date: March 13, 2026

CSLB Contractor License No. 1127199 (Class B - General Building Contractor)

This Cookie Policy provides a complete inventory of all cookies and tracking technologies currently deployed on the NRI website. You may manage your cookie preferences at any time through the cookie consent banner or the persistent cookie preferences icon located at the bottom-left corner of every page of the Site.

RELATED LEGAL DOCUMENTS

This Cookie Policy should be read in conjunction with:

ï Website Terms of Use - governs your legal relationship with this Site [www.newlyrenovated.com/terms]

ï Privacy Policy - complete disclosure of all data collection and California privacy rights [www.newlyrenovated.com/privacy]

1. WHAT ARE COOKIES AND SIMILAR TECHNOLOGIES?

Cookies are small text files placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites function, to function more efficiently, and to provide reporting information to site operators. In addition to cookies, the NRI Site uses the following similar technologies:

ï Web beacons ("pixels"): Small transparent image files embedded in web pages or emails that record whether a page or email has been opened and may transmit information including IP address, browser type, and time of access.

ï JavaScript tags: Code embedded in web pages that executes in your browser and transmits interaction data (such as button clicks and form completions) to analytics and advertising platforms.

ï Local storage: A browser-based storage mechanism that allows websites to store data locally on your device without an expiration date unless manually cleared.

Cookies may be classified as first-party (set directly by NRI from the newlyrenovated.com domain) or third-party (set by a domain other than newlyrenovated.com, such as Google LLC, Meta Platforms, Inc., or Hotjar Ltd.). Cookies may also be session-based (deleted when you close your browser) or persistent (remaining on your device for a specified period or until manually deleted).

2. WHY NRI USES COOKIES

NRI uses cookies and similar technologies for the following purposes:

ï To ensure the Site's inquiry forms, navigation, and security features function correctly (essential cookies);

ï To understand how visitors interact with the Site so NRI can improve content and user experience (analytics cookies);

ï To remember user preferences and consent selections across visits (functionality cookies); and

ï To measure the effectiveness of NRI's digital advertising campaigns and deliver relevant advertisements to potential clients on third-party platforms (marketing and targeting cookies).

NRI does not use cookies to collect Sensitive Personal Information as defined under Cal. Civ. Code ß 1798.121, and does not use cookies to build profiles of individual users for sale to data brokers.

3. COOKIE INVENTORY

The following table sets forth the complete inventory of cookies and tracking technologies currently deployed on the NRI Site. NRI reviews this inventory at least annually. If you believe a cookie is in use that is not listed below, please contact NRI at Hello@NewlyRenovated.com.

ESSENTIAL COOKIES - Required for Site functionality. Cannot be disabled.

Cookie / Tool

Provider

Type

Purpose

Opt-Out / Control

gasession / nrisession

Newly Renovated Inc.

Essential

Maintains your browsing session; enables form submissions and Site navigation to function correctly. Required for the Site to operate.

Cannot be disabled without preventing core Site functionality.

_csrf

Newly Renovated Inc.

Essential

Cross-site request forgery protection token. Ensures form submissions originate from the NRI Site and not from malicious third parties.

Cannot be disabled without preventing form submission.

PERFORMANCE & ANALYTICS COOKIES - Help NRI understand Site usage. Opt-out available.

Cookie / Tool

Provider

Type

Purpose

Opt-Out / Control

_ga

Google LLC (Google Analytics 4)

Analytics

Distinguishes unique users by assigning a randomly generated number as a client identifier. Persists for 2 years. Collects data on pages visited, session duration, and traffic sources.

Google Analytics opt-out: tools.google.com/dlpage/gaoptout | Cookie banner ? Reject Analytics

ga[ID]

Google LLC (Google Analytics 4)

Analytics

Used to persist session state across page requests. Session-level identifier tied to the GA4 property. Expires at end of session or after 2 years.

Same as _ga above.

_gid

Google LLC (Google Analytics 4)

Analytics

Stores and counts page views. Expires after 24 hours.

Same as _ga above.

hjSessionUser[ID]

Hotjar Ltd.

Analytics

Sets a unique Hotjar user ID for the browser. Persists for 1 year. Used to track returning visitors across sessions for behavior analytics and heatmaps.

Hotjar opt-out: hotjar.com/legal/compliance/opt-out | Cookie banner ? Reject Analytics

hjSession[ID]

Hotjar Ltd.

Analytics

Contains current session data. Persists for 30 minutes from last activity. Used to attribute page views and actions within a single session.

Same as _hjSessionUser above.

FUNCTIONALITY COOKIES - Remember your preferences. Opt-out available.

Cookie / Tool

Provider

Type

Purpose

Opt-Out / Control

nriprefs

Newly Renovated Inc.

Functionality

Stores your cookie consent preferences (accept/reject selections) so NRI does not re-prompt you on each visit. Persists for 12 months.

Cleared automatically when you update preferences via cookie banner or consent manager icon.

nriutm

Newly Renovated Inc.

Functionality

Temporarily stores UTM campaign parameters from your referring URL to attribute inbound inquiries to the correct marketing source for internal reporting. Expires at end of session.

Cleared at end of session. Cookie banner ? Reject Functionality.

MARKETING & TARGETING COOKIES - Support advertising campaigns. Opt-out available.

Cookie / Tool

Provider

Type

Purpose

Opt-Out / Control

gclau

Google LLC (Google Ads / GTM)

Marketing

Used by Google Ads to store and track conversions. Measures effectiveness of ad campaigns that bring visitors to the Site. Persists for 90 days.

Google Ads opt-out: adssettings.google.com | Cookie banner ? Reject Marketing

gac[ID]

Google LLC (Google Ads)

Marketing

Contains campaign-related information. Used to link user actions on the Site to specific Google Ads campaigns. Persists for 90 days.

Same as gclau above.

_fbp

Meta Platforms, Inc. (Meta Pixel)

Marketing

Used by Meta to deliver, measure, and improve the relevance of advertisements served on Facebook and Instagram. Identifies browsers for ad targeting. Persists for 90 days.

Meta ad preferences: facebook.com/ads/preferences | Cookie banner ? Reject Marketing

_fbc

Meta Platforms, Inc. (Meta Pixel)

Marketing

Stores the Facebook click identifier from the URL when a user arrives at the Site from a Facebook ad. Persists for 90 days.

Same as _fbp above.

4. THIRD-PARTY PROVIDERS: ADDITIONAL DISCLOSURES

The following third-party providers supply tools that result in cookies being placed on your device when you visit the NRI Site. Each provider operates under its own privacy policy governing how it processes data:

ï Google LLC (Google Analytics 4, Google Ads, Google Tag Manager): Privacy Policy: policies.google.com/privacy | Ad Settings: adssettings.google.com | Analytics Opt-Out Browser Add-On: tools.google.com/dlpage/gaoptout

ï Meta Platforms, Inc. (Meta Pixel - Facebook/Instagram): Privacy Policy: facebook.com/privacy/policy | Ad Preferences: facebook.com/ads/preferences | Off-Facebook Activity: facebook.com/off_facebook_activity

ï Hotjar Ltd. (Behavior Analytics and Heatmaps): Privacy Policy: hotjar.com/legal/policies/privacy | Opt-Out: hotjar.com/legal/compliance/opt-out

NRI has entered into data processing agreements with each of these providers to the extent required by applicable law. NRI configures Google Analytics with IP anonymization enabled, and configures the Meta Pixel in Limited Data Use ("LDU") mode for California users consistent with Meta's California-specific data use framework.

5. YOUR COOKIE CHOICES AND CONTROL

A. Cookie Consent Banner - Initial Visit

Upon your first visit to the Site, NRI will present a cookie consent banner allowing you to: (i) accept all cookies; (ii) reject all non-essential cookies; or (iii) manage preferences by category. Your selections will be stored in the nriprefs cookie for twelve (12) months.

B. Persistent Cookie Preferences Icon - Ongoing Access

In addition to the initial consent banner, a persistent cookie preferences icon is displayed at the bottom-left corner of every page of the Site at all times. Clicking this icon reopens the cookie consent manager at any time, allowing you to review and update your cookie preferences after your initial visit. This persistent mechanism satisfies the CPRA's ongoing symmetry-in-choice requirement and ensures you are never required to re-visit the Site's initial visit banner in order to withdraw or change your consent.

Web Developer Implementation Note: The persistent cookie preferences icon at the bottom-left of all pages must be implemented as part of the cookie consent management platform (CMP) deployment. This icon must be visible and functional on all pages at all times, including after a user has completed the initial consent banner flow. Recommended CMP platforms: Cookiebot, OneTrust, or CookieYes. The icon must link to the same consent manager as the initial banner and must allow users to change any prior selection, including withdrawing a prior "Accept All" selection.

C. Global Privacy Control (GPC)

NRI honors GPC signals transmitted by your browser consistent with Cal. Civ. Code ß 1798.135. If your browser transmits a GPC signal, NRI's Site will automatically treat that signal as an opt-out of the sharing of Personal Information for cross-context behavioral advertising and will disable applicable Marketing and Analytics third-party cookies for your session.

D. Browser-Level Cookie Controls

You may set your browser to refuse all cookies or to alert you when cookies are being sent. Instructions for managing cookies in common browsers:

ï Google Chrome: support.google.com/chrome/answer/95647

ï Mozilla Firefox: support.mozilla.org/kb/enable-and-disable-cookies-website-preferences

ï Apple Safari: support.apple.com/guide/safari/manage-cookies-sfri11471

ï Microsoft Edge: support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge

Disabling cookies may prevent certain features of the Site - including inquiry forms - from functioning correctly.

E. Industry Opt-Out Tools

You may use the following industry opt-out tools to limit interest-based advertising from participating companies:

ï Digital Advertising Alliance (DAA): optout.aboutads.info

ï Network Advertising Initiative (NAI): optout.networkadvertising.org

6. CALIFORNIA PRIVACY RIGHTS AND COOKIES

California residents have the right under the CPRA to opt out of the "sharing" of Personal Information collected through cookies for cross-context behavioral advertising. The Marketing & Targeting cookies listed in Section 3 may constitute "sharing" under Cal. Civ. Code ß 1798.140. To exercise your right to opt out:

ï Enable a GPC signal in your browser (see Section 5(C));

ï Select "Reject Marketing" in the NRI cookie consent banner or via the persistent cookie preferences icon (see Sections 5(A) and 5(B)); or

ï Submit a written opt-out request via the dedicated privacy request form at www.NewlyRenovated.com/privacy-request or by emailing Hello@NewlyRenovated.com with the subject line "Cookie Opt-Out - California Resident."

For all other California privacy rights (Right to Know, Right to Delete, Right to Correct, Right to Non-Discrimination), please refer to the NRI Privacy Policy at www.newlyrenovated.com/privacy.

7. DATA RETENTION FOR COOKIES

Cookie retention periods are set forth in the Cookie Inventory in Section 3. In general:

ï Essential and functionality cookies are retained for the duration of your session or for up to twelve (12) months;

ï Analytics cookies are retained for up to two (2) years by third-party providers, subject to those providers' own data retention policies;

ï Marketing cookies are retained for up to ninety (90) days by third-party advertising platforms.

NRI reviews the cookie inventory and retention periods at least annually and updates this Policy to reflect any changes in cookies deployed on the Site.

8. UPDATES TO THIS COOKIE POLICY

NRI reserves the right to modify this Cookie Policy at any time to reflect changes in the cookies NRI deploys, applicable law, or third-party provider offerings. When material changes are made, NRI will update the Effective Date at the top of this document and will provide renewed cookie consent prompts where required by law. Prior versions are available upon request.

9. CONTACT INFORMATION

Newly Renovated Inc.

Attn: Privacy / Cookie Policy Inquiries

650 5th Street, Suite 410, San Francisco, CA 94107

Email: Hello@NewlyRenovated.com

Telephone: (415) 626-8180

Privacy Request Form: www.NewlyRenovated.com/privacy-request

Newly Renovated Inc. - Cookie Policy - Version 2.0 | CSLB License No. 1127199