Privacy Policy

Privacy Policy

Effective Date: September 1, 2026

Last Updated: September 1, 2026

1. Introduction and Scope

This Privacy Policy (“Policy”) describes how Metro Exhibits, LLC, a New Jersey Limited liability company, doing business as Metro Exhibits (“Metro Exhibits,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information when you visit our website at metroexhibits.com (the “Site”), use our online portals, communicate with us, or engage our trade show and exhibit design, rental, fabrication, installation, and logistics services (collectively, the “Services”).

This Policy applies to all personal information we collect through or in connection with: (a) the Site and any related microsites, landing pages, or subdomains; (b) email, telephone, text message, and other communications between you and Metro Exhibits; (c) our client portals, project management platforms, and account dashboards; (d) in-person interactions at trade shows, events, showrooms, and our facilities; and (e) information provided to us by third-party partners, vendors, venues, and show management organizations.

By accessing the Site or providing personal information to us, you acknowledge that you have read and understand this Policy. If you do not agree with our practices, please do not use our Site or Services.

2. Categories of Personal Information Collected

We may collect and process the following categories of personal information:

2.1 Identifiers and Contact Information

• Full name, job title, and professional credentials
• Business and personal email addresses
• Business and personal telephone numbers, including mobile numbers
• Mailing address, shipping address, and on-site delivery addresses
• Company or organization name and employer details
• Social media handles and professional networking profiles

2.2 Professional and Business Information

• Industry, trade association memberships, and professional affiliations
• Role in purchasing decisions and authority levels
• Business size, annual revenue range, and exhibit program budget
• Trade show and event participation history
• Vendor and subcontractor qualifications, insurance certificates, and licenses

2.3 Project and Event Details

• Exhibit design specifications, booth dimensions, floor plans, and CAD files
• Show name, venue, dates, booth number, and move-in/move-out schedules
• Brand assets including logos, images, color specifications, and marketing materials
• Shipping manifests, crate inventories, and logistics documentation
• Installation requirements, labor orders, and on-site contact information

2.4 Communications

• Emails, chat transcripts, voicemails, and written correspondence
• Notes from meetings, calls, and consultations
• Feedback, testimonials, surveys, and reviews
• Customer service and support request records

2.5 Payment Billing Information

• Credit card numbers, bank account details, and billing addresses
• Purchase orders, invoices, and payment history
• Tax identification numbers (EIN/TIN) for vendor onboarding
• Credit references and financial qualification data

2.6 Automatically Collected Information

• IP address, browser type and version, operating system, and device identifiers
• Pages visited, time spent on pages, click patterns, and navigation paths
• Referring URL, search terms, and exit pages
• Cookie identifiers, pixel tags, web beacons, and similar tracking technologies
• Approximate geolocation derived from IP address
• Date and time of access, session duration, and frequency of visits
• Analytics data from Google Analytics, heatmapping tools, and session replay services

2.7 Information from Third Parties

• Lead information from trade show organizers, exhibitor directories, and industry databases
• Credit and background check results from reporting agencies
• Information from business partners, referral sources, and co-exhibitors
• Publicly available business information from websites, press releases, and social media
• Information from advertising and marketing partners regarding campaign interactions

3. How We Collect Information

We collect personal information through the following methods:

Website Forms and Submissions

• Request for quote (RFQ) forms, contact forms, and inquiry submissions
• Account registration and client portal sign-up forms
• Newsletter subscription and marketing opt-in forms
• Event registration and appointment scheduling tools

Direct Communications

• Email correspondence with our sales, design, project management, and support teams
• Telephone calls, including calls that may be recorded for quality assurance
• In-person meetings at trade shows, our showroom, or client facilities
• Text messages and instant messaging platforms

Newsletter and Marketing Sign-Ups

• Email newsletter subscriptions through our Site or at events
• Whitepaper, case study, or resource downloads requiring contact information
• Webinar and virtual event registrations

Account and Portal Access

• Client portal registration and ongoing project collaboration
• Document uploads, approvals, and design review interactions
• Vendor and subcontractor onboarding portals

Cookies and Automated Technologies

• First-party and third-party cookies placed when you visit the Site
• Pixel tags, web beacons, and clear GIFs in emails and on web pages
• JavaScript analytics scripts and session recording tools
• Server logs and automated system monitoring

Vendor and Client Onboarding

• New client agreements, master service agreements, and credit applications
• Vendor qualification forms, W-9s, and compliance documentation
• Insurance certificates, safety certifications, and labor agreements

4. Purposes of Processing

We use the personal information we collect for the following business and commercial purposes:

Responding to Inquiries and Providing Quotes

• Processing and responding to requests for proposals, quotes, and general inquiries
• Providing estimates for exhibit design, rental, fabrication, and related services
• Scheduling consultations, site surveys, and design meetings

Providing Design, Rental, Fabrication, and Logistics Services

• Designing, engineering, and fabricating custom and modular exhibits
• Managing rental exhibit inventory, selection, and customization
• Coordinating shipping, drayage, installation, and dismantling logistics
• Managing on-site supervision, labor, and technical services
• Providing storage, refurbishment, and asset management services

Managing Client Relationships

• Maintaining client accounts and project histories
• Facilitating design reviews, approvals, and change orders
• Communicating project updates, timelines, and deliverables
• Providing post-show reports, analytics, and ROI assessments

Billing, Invoicing, and Financial Administration

• Processing payments, issuing invoices, and managing accounts receivable
• Conducting credit checks and financial qualification assessments
• Managing purchase orders, contracts, and financial records
• Tax reporting and compliance with financial regulations

Marketing, Advertising, and Business Development

• Sending newsletters, promotional materials, and industry updates
• Targeted advertising on social media and digital platforms
• Conducting market research and analyzing industry trends
• Inviting clients and prospects to events, webinars, and trade shows

Analytics, Site Improvement, and Security

• Analyzing website traffic, user behavior, and conversion metrics
• Improving Site functionality, content, and user experience
• Detecting and preventing fraud, unauthorized access, and security threats
• Monitoring system performance and troubleshooting technical issues

Legal Compliance and Corporate Operations

• Complying with applicable laws, regulations, and legal processes
• Enforcing our terms of service, contracts, and policies
• Responding to law enforcement requests and legal proceedings
• Facilitating corporate transactions including mergers, acquisitions, and reorganizations

5. Legal Bases for Processing (GDPR)

To the extent the GDPR, UK GDPR, or another applicable law requires a legal basis for processing, we rely on the following legal grounds, as applicable:

Consent (Article 6(1)(a) GDPR)

Where you have given clear, affirmative consent for us to process your personal data for specific purposes, such as subscribing to our newsletter, opting into marketing communications, or consenting to non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Performance of a Contract (Article 6(1)(b) GDPR)

Processing necessary to perform a contract with you or to take steps at your request prior to entering into a contract, including providing our exhibit design, rental, fabrication, and logistics services, managing your account, processing payments, and fulfilling our contractual obligations.

Legitimate Interests (Article 6(1)(f) GDPR)

Processing necessary for our legitimate business interests or those of a third party, provided such interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include: operating and improving our business and Services; marketing our services to existing and prospective clients in the trade show industry; ensuring network and information security; preventing fraud; and conducting analytics to understand how our Site and Services are used. We conduct balancing tests to ensure our legitimate interests do not unduly impact your rights.

Legal Obligation (Article 6(1)(c) GDPR)

Processing necessary for compliance with a legal obligation to which we are subject, including tax and accounting requirements, responding to valid legal processes, and meeting regulatory obligations.

6. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to provide functionality, analyze usage, and deliver targeted content and advertising.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for Site operation, including session management, security, and load balancing. These cannot be disabled.
• Functional Cookies: Remember your preferences, language settings, and previously viewed content to enhance your experience.
• Analytics and Performance Cookies: Collect aggregated, anonymous data about how visitors use our Site, including pages visited, time spent, and traffic sources. We use Google Analytics and similar services.
• Advertising and Targeting Cookies: Track your browsing activity across sites to deliver relevant advertisements and measure campaign effectiveness. These may be set by third-party advertising networks.

Cookie Consent Banner

When you first visit our Site, you will be presented with a cookie consent banner that allows you to accept or reject non-essential cookies. Your preferences are stored and can be modified at any time.

Managing Your Cookie Preferences

You may manage your cookie and privacy preferences at any time through our Privacy Choices page at https://metroexhibits.com/opt-out-preferences/, through the cookie or privacy controls available on the Site, by adjusting your browser settings to block or delete cookies, or by using browser-level privacy controls. Please note that disabling certain cookies may impair Site functionality.

Browser-Level Controls

Most web browsers allow you to control cookies through their settings. You can typically set your browser to notify you when cookies are being placed, block third-party cookies, or reject all cookies. Consult your browser’s help documentation for specific instructions.

Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser, we treat it as a valid opt-out request for the sale or sharing of personal information associated with that browser, and we will disable non-essential tracking technologies accordingly.

Our Privacy Choices page at https://metroexhibits.com/opt-out-preferences/ provides an additional mechanism for submitting privacy requests and managing available opt-out preferences. This Policy remains the governing notice describing our privacy practices and applicable rights.

7. Disclosure of Information

We may disclose your personal information to the following categories of recipients and for the following purposes:

Service Providers and Contractors

We engage third-party service providers who perform services on our behalf, including web hosting, email delivery, payment processing, CRM management, analytics, shipping and logistics coordination, printing, and IT support. These providers are contractually obligated to use personal information only as directed by us and to maintain appropriate security measures.

Affiliates and Related Entities

We may share personal information with our parent company, subsidiaries, and corporate affiliates for purposes consistent with this Policy, including joint marketing, shared services, and operational coordination.

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, asset sale, or similar corporate transaction, personal information may be transferred to the acquiring entity or successor. We will provide notice before personal information becomes subject to a different privacy policy.

Legal and Safety Disclosures

We may disclose personal information when we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our agreements, terms of service, or policies; (c) protect the rights, property, or safety of Metro Exhibits, our clients, employees, or the public; (d) detect, prevent, or address fraud, security, or technical issues; or (e) respond to an emergency involving danger of death or serious physical injury.

With Your Consent

We may disclose your personal information to third parties when you have provided affirmative consent for such disclosure.

No Sale of Personal Information for Monetary Consideration

Metro Exhibits does not sell personal information for monetary consideration. However, as explained in Section 12 below, certain disclosures of personal information to third-party advertising partners may constitute a “sale,” “sharing,” or processing for targeted advertising under the CCPA/CPRA and similar state privacy laws. We provide opt-out mechanisms as required by applicable law.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. In determining retention periods, we consider:

• The duration of our ongoing relationship with you and the provision of Services
• Whether there is a legal, regulatory, or contractual obligation requiring retention (e.g., tax records, contracts, insurance claims)
• The statute of limitations for potential legal claims
• Applicable industry standards and best practices
• Our legitimate business interests, including maintaining historical project records for repeat clients

Generally, client project records are retained for a minimum of seven (7) years following project completion. Marketing and communication preferences are retained until you opt out or request deletion. Website analytics data is retained in aggregated form. When personal information is no longer needed, we securely delete or anonymize it.

9. Data Security

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, or loss. Our security measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Access controls and role-based permissions limiting data access to authorized personnel
• Regular security assessments, vulnerability scans, and penetration testing
• Employee security awareness training and confidentiality obligations
• Incident response and breach notification procedures
• Secure disposal of physical and electronic records

Notwithstanding the foregoing, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. We cannot ensure or warrant the security of any information you transmit to us, and you do so at your own risk.

10. International Data Transfers

Metro Exhibits is based in the United States. If you are accessing our Site or providing personal information from outside the United States, including from the EEA, UK, or other jurisdictions with data protection laws, please be aware that your personal information will be transferred to, stored, and processed in the United States and potentially other countries that may not provide the same level of data protection as your jurisdiction.

Transfer Mechanisms

Where required by applicable law, we use appropriate safeguards for international transfers, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission (Module 1 for controller-to-controller and Module 2 for controller-to-processor transfers)
• The UK International Data Transfer Addendum to the EU SCCs, as required for transfers from the United Kingdom
• Adequacy decisions by the European Commission or UK Secretary of State where applicable
• Supplementary measures as necessary based on transfer impact assessments

You may request information about applicable transfer safeguards by contacting us using the information provided in Section 18 below.

11. Children’s Privacy

Our Site and Services are designed for business professionals in the trade show and events industry and are not directed to children. We do not knowingly collect personal information from children under the age of sixteen (16), or under thirteen (13) where applicable under the Children’s Online Privacy Protection Act (COPPA).

If we become aware that we have collected personal information from a child under the applicable age threshold without verified parental consent, we will take steps to delete such information promptly. If you believe that we may have collected information from a child, please contact us immediately at privacy@metroexhibits.com.

12. United States State Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information under applicable state privacy laws. This section describes those rights and how to exercise them.

12.1 California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA/CPRA”), provides you with the following rights:

Right to Know and Access

You have the right to request that we disclose: (a) the categories of personal information we have collected about you; (b) the categories of sources from which personal information is collected; (c) the business or commercial purposes for collecting, selling, or sharing personal information; (d) the categories of third parties to whom we disclose personal information; and (e) the specific pieces of personal information we have collected about you. You may request this information for the twelve (12) month period preceding your request.

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law (e.g., completing a transaction, detecting security incidents, complying with legal obligations, or exercising free speech rights).

Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you, taking into account the nature of the personal information and the purposes of processing.

Right to Opt Out of Sale or Sharing

You have the right to opt out of the “sale” or “sharing” of your personal information as those terms are defined under the CCPA/CPRA. While we do not sell personal information for monetary consideration, certain uses of cookies and tracking technologies for cross-context behavioral advertising may constitute “sharing” under the CPRA. You may exercise this right through our Privacy Choices page at https://metroexhibits.com/opt-out-preferences/, by enabling Global Privacy Control (GPC) in your browser, or through the methods described in Sections 12.10 and 14.

Right to Limit Use of Sensitive Personal Information

If we collect sensitive personal information (as defined under the CPRA), you have the right to limit our use and disclosure of such information to purposes necessary to perform our Services, as permitted by law.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, provide a different level or quality of services, or suggest that you may receive a different price or quality of services for exercising your rights.

Authorized Agents

You may designate an authorized agent to submit requests on your behalf. If you use an authorized agent, we may require: (a) signed written authorization from you; (b) verification of your identity directly; and (c) confirmation that you provided the agent with permission to submit the request.

California Shine the Light (Civil Code Section 1798.83)

California residents may request information regarding our disclosure of personal information to third parties for their direct marketing purposes. If applicable, this information would include a list of the categories of personal information shared and the names and addresses of all third parties with which we shared information in the preceding calendar year.

Categories of Personal Information Collected, Disclosed, Sold, or Shared

In the preceding twelve (12) months, we have collected the categories of personal information described in Section 2 above. We disclose personal information to service providers and contractors as described in Section 7. We do not sell personal information for monetary consideration. We may share identifiers and internet activity information with advertising partners for cross-context behavioral advertising purposes, which may constitute “sharing” under the CPRA.

Do Not Sell or Share Mechanism

To opt out of the sale or sharing of personal information, or of processing for targeted advertising where applicable, you may use our Privacy Choices page at https://metroexhibits.com/opt-out-preferences/, submit a request to privacy@metroexhibits.com, call us at 973-575-9100, or enable Global Privacy Control in your browser settings. We will process opt-out requests within the time required by applicable law.

12.2 Virginia Consumer Data Protection Act (VCDPA)

If you are a Virginia resident, the VCDPA provides you with the following rights: (a) the right to confirm whether we are processing your personal data and to access such data; (b) the right to correct inaccuracies in your personal data; (c) the right to delete personal data you have provided or we have obtained; (d) the right to obtain a portable copy of your personal data in a readily usable format; and (e) the right to opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

12.3 Colorado Privacy Act (CPA)

If you are a Colorado resident, the CPA provides you with rights substantially similar to those described for Virginia residents above, including the rights to access, correct, delete, and obtain a portable copy of your personal data, as well as the right to opt out of targeted advertising, sale of personal data, and profiling. Colorado residents also have the right to opt out of the processing of sensitive data without prior consent.

12.4 Connecticut Data Privacy Act (CTDPA)

If you are a Connecticut resident, the CTDPA provides you with rights substantially similar to those described for Virginia and Colorado residents above, including the rights to access, correct, delete, and obtain a portable copy of your personal data, and the right to opt out of targeted advertising, sale of personal data, and profiling.

12.5 Utah Consumer Privacy Act (UCPA)

If you are a Utah resident, the UCPA provides you with the rights to: (a) confirm whether we are processing your personal data and access such data; (b) delete personal data you have provided to us; and (c) obtain a portable copy of your personal data. You also have the right to opt out of the processing of your personal data for targeted advertising or the sale of personal data.

12.6 New Jersey Data Privacy Act (NJDPA)

If you are a New Jersey resident, the New Jersey Data Privacy Act (“NJDPA”), effective January 15, 2025, provides you with the following rights: (a) the right to confirm whether we are processing your personal data and to access such data; (b) the right to correct inaccuracies in your personal data; (c) the right to delete personal data concerning you; (d) the right to obtain a portable copy of your personal data in a readily usable format; and (e) the right to opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. We obtain your consent before processing sensitive data, and we recognize universal opt-out mechanisms (such as Global Privacy Control) as a valid means of opting out of targeted advertising and the sale of personal data. If we deny your request, you have the right to appeal as described below.

12.7 Nevada Privacy Rights

If you are a Nevada resident, Nevada law (Nevada Revised Statutes Chapter 603A) gives you the right to submit a verified request directing us not to sell certain “covered information” that we have collected or will collect about you. Nevada defines “sale” narrowly as the exchange of covered information for monetary consideration to a person for that person to license or sell the covered information to additional persons. While we do not sell covered information as defined under Nevada law, you may submit an opt-out request at any time by contacting us at privacy@metroexhibits.com. We will respond to verified requests within sixty (60) days, with a possible extension of thirty (30) days where reasonably necessary.

12.8 Florida Digital Bill of Rights (FDBR)

The Florida Digital Bill of Rights (“FDBR”) grants Florida residents certain rights regarding their personal data, but its consumer-rights obligations apply only to entities that meet its statutory definition of a “controller” — generally for-profit entities with global annual gross revenues exceeding $1 billion that also satisfy additional statutory criteria. Metro Exhibits does not currently meet this threshold, and the FDBR’s consumer-rights obligations therefore do not apply to us at this time. Should our operations change such that the FDBR becomes applicable, we will honor the rights it provides and update this Policy accordingly. Florida residents may also exercise the rights described elsewhere in this Section 12 to the extent another applicable law provides them.

12.9 Other State Privacy Laws

Additional states have enacted or may enact consumer privacy legislation. If you are a resident of a state with applicable privacy legislation (including but not limited to Texas, Oregon, Montana, Iowa, Indiana, Tennessee, or other states), we will honor your rights as required by applicable law. Please use the methods in Sections 12.10 and 14 to exercise any applicable rights.

12.10 How to Exercise Your State Privacy Rights

To exercise any of the rights described above, you may submit a verifiable consumer request by:

• Emailing us at privacy@metroexhibits.com
• Submitting a request through our Privacy Choices page at https://metroexhibits.com/opt-out-preferences/
• Calling us at 973-575-9100.
• Mailing a written request to 15 Riverside Drive,  Pine Brook, NJ USA 07058.

12.11 Verification Process

To protect your privacy and security, we must verify your identity before fulfilling your request. We will ask you to provide information that matches our records, which may include your name, email address, company name, and details about your prior interactions with us. We may use a third-party verification service. If we cannot verify your identity to a reasonable degree of certainty, we may request additional information or deny the request.

12.12 Appeal Process

If we deny your privacy request in whole or in part, you have the right to appeal our decision. To appeal, submit a written appeal to privacy@metroexhibits.com with the subject line “Privacy Request Appeal” within a reasonable period after receiving our decision. We will respond to your appeal within the timeframe required by applicable law (generally 45-60 days). If your appeal is denied, you may contact your state’s attorney general to file a complaint.

13. Rights Under the GDPR and UK GDPR

To the extent the GDPR or UK GDPR applies to our processing of your personal data, you may have the following rights:

Right of Access (Article 15)

You have the right to obtain confirmation as to whether your personal data is being processed and, where that is the case, access to the personal data together with supplementary information including the purposes of processing, categories of data, recipients, retention periods, and the existence of your other rights.

Right to Rectification (Article 16)

You have the right to obtain the rectification of inaccurate personal data and, taking into account the purposes of processing, to have incomplete personal data completed.

Right to Erasure / Right to Be Forgotten (Article 17)

You have the right to obtain the erasure of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and there is no other legal basis; (c) you object to processing and there are no overriding legitimate grounds; (d) the data has been unlawfully processed; or (e) erasure is required for compliance with a legal obligation.

Right to Restriction of Processing (Article 18)

You have the right to restrict processing where: (a) you contest the accuracy of the data (for the period enabling us to verify accuracy); (b) processing is unlawful and you oppose erasure; (c) we no longer need the data but you require it for legal claims; or (d) you have objected to processing pending verification of whether our legitimate grounds override yours.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance, where processing is based on consent or contract and is carried out by automated means.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or the performance of a task in the public interest, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims. Where personal data is processed for direct marketing purposes, you have the right to object at any time, and we will cease processing for that purpose.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State or UK territory of your habitual residence, place of work, or place of the alleged infringement.

Data Controller Identity

To the extent the GDPR or UK GDPR applies to our processing, the data controller is Metro Exhibits, LLC d/b/a Metro Exhibits, 15 Riverside Drive, Pine Brook, New Jersey 07058, United States.

EU/UK Representative

Where applicable law requires Metro Exhibits to designate a representative in the European Economic Area or the United Kingdom, information about that representative will be made available through this Policy or other appropriate notice.

Privacy Contact

Privacy inquiries may be directed to Rob Di Mattia at rdm@metroexhibits.com or to privacy@metroexhibits.com. This contact designation does not state that Metro Exhibits is required to appoint a statutory Data Protection Officer.

14. How to Exercise Your Rights

Regardless of your jurisdiction, you may exercise your privacy rights or contact us regarding this Policy through the following channels:

• Email: privacy@metroexhibits.com
• Mail: 15 Riverside Drive | Pine Brook, NJ USA 07058, Attn: Privacy Team,
• Phone: 1 973-575-9100

Response Timeframes

We will acknowledge receipt of your request within ten (10) business days. We will respond to verifiable requests within the following timeframes, unless an extension is necessary and permitted by law:

• CCPA/CPRA requests: 45 calendar days (may be extended by an additional 45 days with notice)
• GDPR/UK GDPR requests: one (1) month (may be extended by two additional months for complex requests with notice)
• VCDPA, CPA, CTDPA, and NJDPA requests: 45 calendar days (may be extended by an additional 45 days with notice)
• UCPA requests: 45 calendar days (may be extended by an additional 45 days with notice)
• Nevada opt-out-of-sale requests: 60 days (may be extended by an additional 30 days where reasonably necessary)

All responses are provided free of charge unless a request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or refuse to act on the request.

Our Site may contain links to websites, services, or content operated by third parties, including but not limited to trade show organizer websites, venue portals, social media platforms, and industry partner sites. This Policy does not apply to any third-party websites or services. We are not responsible for the privacy practices, content, or security of any third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

16. Do Not Track Disclosure

Some browsers include a “Do Not Track” (DNT) feature that signals to websites that you do not want your online activity tracked. Because there is no uniform standard for how DNT signals should be interpreted, our Site does not currently respond to DNT browser signals. However, we do honor Global Privacy Control (GPC) signals as described in Section 6 above. You may also exercise your opt-out rights as described in Sections 12 and 14 of this Policy.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last Updated” date at the top of this Policy
• Post the revised Policy on our Site
• Provide prominent notice on our Site (e.g., a banner or pop-up notification) for material changes
• Where required by law, notify you directly via email or other communication channels

We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of our Site or Services after the posting of changes constitutes your acceptance of such changes, except where additional consent is required by applicable law.

18. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us at:

Metro Exhibits, LLC d/b/a Metro Exhibits

Attn: Privacy Team

15 Riverside Drive

Pine Brook, New Jersey 07058

Email: privacy@metroexhibits.com

Phone: 973.575.9100

Website: metroexhibits.com

Chief Operating Officer and Privacy Contact:

Rob Di Mattia

rdm@metroexhibits.com

15 Riverside Drive

Pine Brook, New Jersey 07058

Governing Law: This Policy shall be governed by and construed in accordance with the laws of the State of New Jersey, without regard to its conflict of laws principles, except where superseded by applicable federal or international data protection law.