WWW.ELASTIC.CO/LEGAL/PRIVACY-STATEMENT

General Privacy Statement

Effective Date: September 7, 2026

This General Privacy Statement (also referred to as our "Privacy Statement" or "Statement") explains how Elastic N.V. and its subsidiaries and affiliated companies ("Elastic," "we," "our," or "us") collect, use, share, and otherwise process information that identifies or could be identifiable to you ("personal data" or "personal information").

Residents of the EEA, United Kingdom, or Switzerland

If EEA, UK, or Swiss data protection law applies to the processing of your personal data, you can review the "Your privacy rights" section below to learn more about your rights and Elastic's compliance with applicable laws.

California residents

If you are a California resident, the California Privacy Rights Statement supplements this General Privacy Statement and provides an explanation of how Elastic "discloses" for "business purposes," but does not "sell" or "share" your "personal information," as those terms are defined under California law.

Interaction specific statements

We supplement this Statement with the following specific statements based on how we interact with you:

Product Privacy Statement: This statement applies to the information we collect and use in connection with customer deployments of our products and services.

Candidate Privacy Statement: This statement applies to the personal data we collect and use in connection with our employment recruiting process.

California Privacy Rights Statement: This statement explains the privacy rights of California residents.

Cookie Statement: This statement explains how we use cookies and similar technologies.

General Privacy Statement contents

Scope and responsibilities Information we collect and how we collect it How we use the information How we share the information Cookies and website automatic data collection Legal basis for processing your personal data Network and information security International data transfers Data Privacy Framework Your privacy rights US state law requirements Security Other information How to contact us

Scope and responsibilities This General Privacy Statement explains your rights and choices related to the personal data we collect when:

• You visit, interact with, or use any of our websites, social media pages, or marketing or sales communications or register for our products and services ("Online Properties")

• You visit, interact with, or use any of our offices, events, sales, marketing, and other offline activities ("Offline Properties")(collectively, the "Properties") This General Privacy Statement does not cover:

• Personal data processed by Elastic according to our Product Privacy Statement**:** This Statement does not cover the information we may automatically collect in connection with your use of Elastic products and services as a customer or user.

• **Personal data processed by Elastic according to our **Candidate Privacy Statement when an individual applies or is referred for a role with Elastic through our site or otherwise.

• Personal data processed by Elastic as a Processor: This Statement does not apply to personal data processed by Elastic in the role of a Processor or Service Provider (as applicable), including information processed for the operation and efficacy of Elastic's Products, which is subject to the terms of the applicable customer agreement.

Elastic determines the purposes and means for the processing (i.e., we are the data controller) of your personal data as described in this Privacy Statement unless expressly specified otherwise.