THE CYPRESS COMPANIES, INC. PRIVACY POLICY Effective Date: October 19th, 2026 This Privacy Policy ("Policy") describes how The Cypress Companies, Inc., its affiliates, and related entities ("Company," "us," "our," or "we") collect, use, disclose, and otherwise process Personal Information through our websites that link to this Policy, including www.cypresscompanies.com, as well as related products and services we may offer to you (collectively, the "Services"). Contents Personal Information We Collect How We Use Personal Information How We Disclose Personal Information Cookies and Similar Technologies User Choices Security of Personal Information Children Links to Other Websites U.S. State Privacy Notice Changes to Privacy Policy Contact Information 1. Personal Information We Collect We collect information through our Services that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you ("Personal Information"). We collect Personal Information when you provide it to us directly; from your colleagues who may provide your information related to commercial requests; automatically through the Services, such as through cookies and similar online tracking technologies; and from our vendors and other parties that help us operate the Services. The types of Personal Information we collect depend on the nature of your interactions with us and may include: Contact details, personal records, and other identifiers including individual and/or business contact and identification information, such as name, email address, postal address, and phone number. Commercial information, including records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. Financial information, including credit card and other billing information. Internet or other electronic network activity information, including device information, such as IP address, device identifier, browser information, operating system, language information; browsing history; search history; and information regarding your interaction with the Services and advertisements, such as entries into forms and keystrokes, URL accessed, and dates and times of activity. Geolocation data, including approximate location derived from your IP address. Professional or employment-related information, including affiliated company, job title, and industry. We may combine this information with information about you that we acquire from other sources, including our marketing partners and third parties. We may also aggregate or deidentify information so it is no longer considered Personal Information. When we covert, or permit others to convert, Personal Information into deidentified, anonymized, or aggregated data, we commit to maintaining the information in deidentified form and will not attempt to reidentify the information. 2. How We Use Personal Information We, or our vendors, may use or otherwise process the categories of Personal Information described above for the following purposes: Communicate with you, such as responding to inquiries, sending information, providing customer service, and managing your preferences. Perform analytics, such as conducting analyses, research, reporting, quality assurance, training, auditing, and business planning. Marketing and advertising, such as marketing our products or Services; measuring advertising effectiveness and understanding interactions with advertisements or digital content on our Services; and supporting advertising or retargeting activities. Security and integrity, such as detecting, preventing, investigating, and responding to fraud, security incidents, unauthorized activity, illegal activity, complaints, disputes, or misuse of our Services; performing audits and other assessments; and investigating claims and activities. Legal and compliance, such as complying with our legal or regulatory obligations; cooperating with regulators, law enforcement, courts, auditors, and other authorized parties; performing and assisting in investigations; enforcing our terms, policies, or any agreements; protecting and defending the rights, property, safety, and security of Company, customers, producers, business partners, personnel, systems, and others; and filing, responding to, and otherwise processing legal claims. Corporate transactions, such as evaluating, negotiating, and executing corporate transactions, mergers, reorganizations, financing, reinsurance, acquisitions, divestitures, business transfers, and similar business activities. 3. How We Disclose Personal Information We may disclose Personal Information for the purposes described above to the following categories of recipients: Our affiliated entities including our affiliates and other related entities for our business purposes. Service providers and other vendors that assist us in operating the Services and our business, such as payment processors, technology providers, cybersecurity providers, cloud and hosting providers, and data analytics providers. Advertising partners for ad targeting, remarketing, personalized advertising, and analytics, such as social media and digital technology providers. Law enforcement, government or regulatory bodies, or other authorized parties, such as regulators, law enforcement, courts, and government agencies for legal and compliance purposes. Professional advisors, such as attorneys, accountants, consultants, and auditors to help us manage and operate our business. Parties you authorize, such as individuals or organizations that you instruct or permit us to share your Personal Information with. Corporate transaction counterparties and other parties in connection with corporate transactions, mergers, reorganizations, financing, reinsurance, acquisitions, divestitures, business transfers, and similar business activities. Other parties as permitted or required by law. 4. Cookies and Similar Technologies We and our vendors use cookies, pixels, tags, scripts, and similar technologies (collectively, "Cookies") to operate our Services, remember your preferences, understand how visitors interact with our Services, improve our content, maintain security, measure marketing effectiveness, and support advertising activities. These Cookies may collect usage information (such as the browser you are using, IP address, device identifier, length and time of visit, and pages visited); general geolocation data (to deliver content based on your location); and details about how you interact with the Services (including clicks, cursor movement, scrolls, and keystroke activity). We may engage certain web analytics services (including Google) to help us understand and analyze how visitors use the Services, help us administer and improve the quality of the Services, and serve ads on our behalf across the Internet. We or our vendors may collect Personal Information about your online activities over time and across different devices and online properties when you use the Services. You can manage certain Cookie choices through your browser settings or by selecting Your Privacy Choices in the footer of our website. Some Cookies are necessary for the Services to function and cannot be disabled. If you block or delete Cookies, some features may not function properly. In addition, the following services or organizations offer tools that you can use to limit or opt out of interest-based advertising: Google: For more information on how Google Analytics uses data collected through the Services, visit support.google.com/analytics/answer/6004245. You may also be able to opt out of Google Analytics by visiting tools.google.com/dlpage/gaoptout. To adjust your Google advertising settings, visit myadcenter.google.com. Industry organizations. To opt out of interest-based advertising from companies that participate in the Digital Advertising Alliance or Network Advertising Initiative opt-out programs, please visit youradchoices.com/control and thenai.org/how-to-opt-out. Your opt-out choice may apply only to the browser or device you are using when you opt out, so you should update your settings on each of your browsers and devices. If you opt out, you will still receive ads, but they may not be as relevant to you and your interests. We do not control how third parties manage their opt-out processes. We are not responsible for the effectiveness of external parties' opt-out options or programs, or the accuracy of their statements regarding their programs. Your web browser may have settings that allow you to transmit a "Do Not Track" signal when you visit various websites or use online services. Like many websites, the Services are not designed to respond to "Do Not Track" signals received from browsers. To learn more about "Do Not Track" signals, visit allaboutdnt.com. 5. User Choices Promotional Emails. If you do not want to receive email solicitations from us, you can opt out by following the instructions in the promotional email. We may continue to send you non-promotional emails, such as emails regarding your orders and other transactions with us. Cookies. You also have choices with respect to Cookies, as described above. If you choose to reject all Cookies some parts of the Services may not work properly. 6. Security of Personal Information We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Information from unauthorized access, acquisition, use, disclosure, alteration, or destruction. However, no website, system, or transmission of information is completely secure, so we cannot guarantee the security of your Personal Information collected through our Services. 7. Children The Services are not directed at, or intended for use by, persons under the age of 18. If we become aware that we have received Personal Information from a person under the age of 18, we will delete it in accordance with applicable law. 8. Links to Other Websites The Services may contain links to other websites. Please be aware that we are not responsible for the content, privacy practices, advertising, or products of any linked websites that we do not control. We encourage our users to be aware when they leave our Services and to read the privacy statements of any other linked websites. 9. U.S. State Privacy Notice This section provides additional information for residents of states with applicable comprehensive privacy laws (collectively, "Covered States"), including the California Consumer Privacy Act. The disclosures in this section that describe how and why we collect, use, and disclose Personal Information also describe how we have collected, used, and disclosed Personal Information in the preceding twelve (12) months. Collection and Use of Personal Information We may obtain the types of Personal Information set out in the Personal Information We Collect section above from offline sources as well, such as our in-store locations and other sources outside the Services. We may also collect the following categories of Personal Information: Audio, electronic, visual, or similar information, including CCTV footage. Personal Records described in Cal. Civ. Code ยง 1798.80(e), including name, signature, address, telephone number, credit card number, debit card number, or other financial information. Inferences from Personal Information collected, including customer preferences. The Personal Information we collect about you may vary depending on the nature of your interactions with us and may not include all of the examples listed in this Policy. We use and disclose the categories of Personal Information identified above as set out in the How We Use Personal Information and How We Disclose Personal Information sections above. Retention of Personal Information We keep the categories of Personal Information described above for as long as is necessary for the purposes described in this Policy or otherwise authorized by law. This generally means maintaining the Personal Information for as long as one of the following reasons apply: The Personal Information is reasonably necessary to provide our Services, manage our operations, manage your relationship with us, or satisfy another purpose for which we collected the Personal Information. The Personal Information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the Personal Information was collected. The Personal Information is reasonably required to protect or defend our rights or property. We are otherwise required or permitted to keep the Personal Information by applicable laws or regulations. Where Personal Information is used for more than one purpose, we will retain it until the purpose with the latest period expires. Consumer Privacy Rights If you are a resident of a Covered State, you may have the following rights related to your Personal Information: Right to Know, Confirm, Access, and Obtain a Copy. You have the right to confirm whether we are processing your Personal Information; access your Personal Information; request certain details about the processing of your Personal Information; and request to receive the Personal Information we hold about you in a portable format. California residents have the right to request the categories of Personal Information we have collected about you; the categories of sources from which the Personal Information is collected; our business or commercial purpose for collecting, selling, or sharing Personal Information; the categories of recipients to whom we disclose Personal Information; and the specific pieces of Personal Information we have collected about you. Right to Delete. You have the right to request that we delete Personal Information we collected about you. Right to Correct. You have the right to request that we correct Personal Information we maintain about you that you believe is inaccurate. We do not sell Personal Information or share Personal Information for cross-context behavioral or targeted advertising. We do not use Personal Information for profiling and automated decision-making in furtherance of decisions that produce legal or similarly significant effects or for other purposes to which the rights to opt out of or access automated decision-making apply. We do not use or disclose sensitive Personal Information for purposes for which the right to limit such use and disclosure apply. We will not discriminate or retaliate against you for exercising any of your privacy rights. Submitting Privacy Rights Requests If you are a resident of a Covered State and would like to submit a request to know/confirm/access, delete, or correct, you may do so by emailing us at info@cypresscompanies.com or calling us at 330-849-6500. You may designate an authorized agent to make a request on your behalf. An authorized agent may submit a request on your behalf using the methods listed above. Authorized agents may be required to provide proof of authorization, and we may also require the consumer to verify their identity directly with us. We will respond to your request in compliance with the requirements of applicable law. If we deny your request and you believe such request was denied it in error, you may appeal for reconsideration of your request by emailing info@cypresscompanies.com. Verification of Your Identity When you exercise these rights and submit a request, we or our partners will verify your identity as required or permitted by applicable law. For example, we may ask you to log in to your account if you have one with us. If you do not have an account with us, we may ask for your email address, order numbers of previous orders of our products and Services, the last four digits of a credit or debit card or a bank account number used to make a purchase, or the date of your last purchase from us. 10. Changes to Privacy Policy We reserve the right to amend this Privacy Policy at our discretion and at any time. When we make updates to this Privacy Policy, we will update the Effective Date. If we make material changes to this Privacy Policy, we will notify you as required by applicable law. Your continued use of our Services following the posting of changes constitutes your acceptance of such changes. 11. Contact Information If you have any questions, concerns, or inquiries about our privacy practices, you can reach us at info@cypresscompanies.com. Please include your name, address, and/or email address when you contact us.
