12. Plain English Rights Card

A Note to Our Users This Rights Card is a plain language summary of your most important rights when using the Waiver2.0 Platform. It is not a substitute for the full Legal Compliance Suite, but it gives you a clear, simple overview of what you can expect from us and what you are entitled to. If you have any questions, contact us at support@waiver2.com. 1. Who We Are Waiver2.0 is a digital platform that helps gyms and fitness facilities create and store waivers and agreements in a tamper-evident way. We do not run the gym — we provide the technology that records your agreement with the gym in a tamper-evident form, kept for the retention period set out in the Privacy Policy. 2. What You Are Signing When you sign a waiver via Waiver2.0, you are signing a digital document with an electronic signature. Your signature is: ✅ Electronic — the electronic signature laws set out in the Electronic Signature & Forensic Disclosure (Section 2) do not deny a signature legal effect only because it is electronic; whether a waiver is enforceable is for the court to decide. ✅ Recorded — kept with your waiver for the period in Section 6 below; any change after signing is detectable. ✅ Sealed with a unique digital fingerprint (SHA-256 hash): a copy can be compared with it, and a difference shows that the copy is not the document that was recorded. ✅ Time-stamped — the date and time our server recorded your signature are kept with your waiver. You should read the document carefully before signing. Take as long as you need. 👤 You confirm you're old enough. The Platform is only for people who have reached the age of majority where the gym is located (commonly 18). You confirm this yourself when you sign — we don't independently verify it. 3. Your Privacy Rights — Simply Put 🔒 Data is transmitted over encrypted connections (HTTPS). Your waiver record and its PDF documents are stored on servers in the EU. Each record is sealed with a SHA-256 hash chain. 🚫 We never sell your data. Your personal information is never sold, rented, or shared with advertisers or marketers. 📁 You can access your records. You can log in at any time and download your signed documents. ✏️ You can correct your information. If something is wrong, contact us at privacy@waiver2.com. 🗑️ You can ask us to delete your data. Subject to legal requirements (some records must be kept), you can request deletion of your personal information. 📬 You can complain. If you feel your privacy rights have been violated, you can complain to your national privacy authority (details below). 4. Your Consumer Rights — Simply Put Regardless of what any legal document says, you have rights that cannot be taken away: 🇦🇺 Australia: Our services come with guarantees under the Australian Consumer Law that cannot be excluded. If something goes seriously wrong, you may be entitled to a refund or remedy. 🇨🇦 Canada: You have non-waivable rights under your provincial consumer protection legislation. 🇺🇸 United States: You have rights under your state's consumer protection law. California residents have additional rights under the California Consumer Privacy Act (CCPA). 🇪🇺 European Union, EEA and 🇬🇧 United Kingdom: You can withdraw from a purchase within 14 days without giving a reason and get a full refund (Refund & Cancellation Policy, Section 4.3). 🌍 Everywhere: You can cancel within 14 days of buying a plan and get a full refund (Refund & Cancellation Policy, Section 2.1). 5. Your Media Rights — Simply Put 📸 You choose. The gym can only photograph or film you if you have given your consent in your waiver. 🚫 You can say no. You can refuse or withdraw consent for photos and videos at any time via the portal — without losing your gym membership. 🔒 Media capture (not offered at present). The MCD module belongs to the Premium Plan, which cannot be chosen at present. Where it is used, any photos or videos you take of an injury through it are designed to be sealed when they reach our server, so that a change to them after that would be detectable. 👶 No images of minors. Images or videos of anyone under 18 are not permitted on the Platform. 6. What Happens to Your Data ⏱️ Your records are kept until the legal time limit for claims in the country of the gym where you signed your waiver runs out, counted from when your waiver expires — longer if the Waiver2.0 operator places a hold on your records while an incident report is still open. Holds are placed and lifted by the Waiver2.0 operator, not automatically. That's 12 years in Australia, 6 years in the United States, and 15 years in Canada. 🔒 The digital fingerprint (hash) of your signed contract stays in the forensic chain. On its own, it can't identify you or be used to reconstruct anything about you. 7. Your Right to Dispute If something goes wrong, here is what you can do: Step 1: Contact us first at support@waiver2.com — we aim to respond within 5 business days. Step 2: If unresolved, contact your local consumer protection authority (details below). Step 3: You always have the right to go to the competent court in your country or state. 8. How to Contact Us General support: support@waiver2.com Privacy & data rights: privacy@waiver2.com Legal & compliance: legal@waiver2.com Accessibility needs: support@waiver2.com 9. Your Local Authorities — If You Need Them 🇦🇺 Australia: ACCC (consumer) — www.accc.gov.au · OAIC (privacy) — www.oaic.gov.au 🇨🇦 Canada: Competition Bureau — www.competitionbureau.gc.ca · OPC (privacy) — www.priv.gc.ca 🇪🇺 European Union and EEA (privacy): Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), the authority for Waiver2.0 OÜ as the Data Controller — www.aki.ee. Under Article 77 GDPR, you may also complain to the supervisory authority of the EU or EEA country where you habitually live or work, or where the alleged infringement took place; if you live in Greece, for example, that is the Hellenic Data Protection Authority — www.dpa.gr 🇺🇸 United States: FTC — www.ftc.gov · State Attorney General (consumer & privacy) 10. One Last Thing Waiver2.0 is an independent platform. We record your agreement and keep it in tamper-evident form — we do not run the gym, we do not make decisions about your training, and we do not provide medical or legal advice. If you have a concern about your gym, speak to the gym directly or contact your local consumer authority. Last updated: 8 November 2026.