California Privacy Notice

Finastra California Privacy Notice

Updated: February 1, 2026

INTRODUCTION

This document gives notice how Turaz Global S.à r.l and its group companies d/b/a Finastra (”we”, “our”, “us”, “Finastra”) handles Personal Information that is subject to the California Consumer Privacy Act of 2018 and corresponding regulations, as such are amended from time to time (the “CCPA”).

This Notice describes the practices we have adopted with respect to processing Personal Information as a “business” under the CCPA including the collection, use, storage or disclosure of Personal Information, without limitation, (i) on our websites that link to this Notice (collectively the "Sites"); or (ii) when you participate in our webinars, events, trade shows and demonstrations of our Services.

This Notice does not apply to information governed under regimes other than the CCPA such as information subject to the EU GDPR, the UK GDPR, the Gramm-Leach-Bliley Act or certain information subject to the Fair Credit Reporting Act. If you are a resident of the EEA, the UK, or Switzerland, please see the Finastra EEA/UK/Switzerland Privacy Notice.

This Notice describes California residents’ data protection rights under the CCPA and describes how California residents may exercise those rights. If you are a candidate applying for a position at Finastra and you are a resident of California, please refer to our California Applicant Privacy Notice.

For more general disclosures about our information collection and use, please see our Privacy Notice. All terms not otherwise defined herein shall take the applicable meaning assigned in the Privacy Notice.

CCPA RIGHTS

If you are a California resident, you may request certain information from or certain action by us, such as exercising the access and deletion rights described herein and in the Privacy Notice (see the Rights section of the Privacy Notice, or you may authorize an agent to make such a request on your behalf. We will seek to verify your identity and your agent’s authority when we receive an individual rights request from you or on your behalf to ensure the security of your Personal Information and may need to collect additional Personal Information to do so.

Please direct any such rights requests (as further described below) or additional questions that you may have regarding this Notice to privacy@finastra.com or by filling out the form located at https://www.finastra.com/california-consumer-privacy-rights-request-web-form unless the below specific rights specify other methods through which you can exercise your rights.

In addition to the rights set forth in the Rights section of the Privacy Notice, California law provides residents with certain additional rights. Subject to all applicable exemptions and exceptions, those rights may include those listed below.

Right to Know

If you are a California resident, you may also request to receive details about how we collect, use, and share your Personal Information. You may also request for us to disclose the following about your information in the preceding 12 months:

• The categories of Personal Information we collected;
• The categories of sources from which we collected your Personal Information;
• The business or commercial purposes for collecting, selling, or sharing your Personal Information;
• The categories of third parties to whom we disclose your Personal Information; and
• The specific pieces of Personal Information we have collected about you.

Opt-out of Sale

If a business sells Personal Information, you have a right to opt-out of that sale. We do not, and do not intend to, sell the Personal Information of California residents and, furthermore, do not have actual knowledge that we sell the Personal Information of consumers under 16 years old.

Opt-out of Sharing

You have the right to opt-out of the sharing of your Personal Information for the purpose of targeted behavioral advertising. If you exercise your right to opt-out of the sharing of your Personal Information, we will refrain from sharing your Personal Information for targeted behavioral advertising, unless you subsequently provide express authorization for the sharing of your Personal Information.

In the preceding 12 months, we have shared the following categories of Personal Information for targeted behavioral advertising with the following categories of third parties:

To opt-out of the sharing of your Personal Information for targeted behavioral advertising use the opt-out tool located at the bottom of our Site or set the Global Privacy Control (GPC) signal.

The GPC is a browser-based opt-out preference signal that communicates your privacy preferences to the sites you visit. For more information on the GPC, visit its website here.

Note that because the GPC and other choices available to you may be browser-based, your opt-out preferences will apply only to the browser from which you exercised that choice. You can, however, enable the GPC on all of your browsers and devices.

Please note that not all browsers process your opt-out requests in the same manner. Please reference your specific browser options and instructions for more information.

We will honor GPC requests to the extent we are able to, based on the information provided via the signal. Note that we may not be able to tie a browser or device-based preference signal request to all Personal Information we have about you.

Please note these opt-outs work via Cookies, so if you delete Cookies, use a different device, or change web browsers, you will need to opt-out again.

Nondiscrimination

Businesses may not, and we do not, discriminate against you for exercising any CCPA rights, such as the access and deletion rights described above. We do not discriminate against users for exercising the rights granted to them under applicable law.

SERVICE PROVIDER DESIGNATION

When offering Services to our customers, we may act as a “service provider” under the CCPA and our receipt and collection of any consumer Personal Information is completed on behalf of our customers in order for us to provide our Services. This Notice does not apply to the information, if any, that we collect pursuant to our role as a service provider.

ADDITIONAL CCPA DISCLOSURES

Categories of Personal Information Collected and Disclosed

In the past 12 months, we have collected, and disclosed to third parties for our business purposes, the categories of Personal Information identified in the Personal Information Collected section of the Privacy Notice.

Categories of Sources

The categories of sources from which we collected this Personal Information are identified in the Sources of Personal Information section of the Privacy Notice.

Categories of Recipients

The categories of third parties to whom we disclosed all of the categories of Personal Information that we disclose for our business purposes are identified in the Onward Transfers & Disclosures section of the Privacy Notice.

Purposes for Collection and Disclosure

We have collected and disclosed all the categories of Personal Information that we collect for the purposes defined in the Purposes for Processing section of the Privacy Notice.

Changes to this CCPA Privacy Notice

We reserve the right to amend this CCPA Privacy Notice at our discretion and at any time. When we make changes, we will post the updated notice on the applicable Sites and update the CCPA Privacy Notice's date. Your continued use of our Sites or Services following the posting of changes constitutes your acceptance of such changes. If you do not agree to any updates to this CCPA Privacy Notice, please do not continue using or accessing the Sites and Services.