Last Updated: November 13, 2025 This Privacy Notice for My Intimacy Lab ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you: Visit our website at https://www.myintimacylab.com or any website of ours that links to this Privacy Notice Engage with us in other related ways, including sales, marketing, or events Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, please contact us at: sean@myintimacylab.com SUMMARY OF KEY POINTS What personal information do we process? We may process personal information depending on how you interact with us and the Services. Learn more about personal information you disclose to us. Do we process sensitive personal information? We do not process sensitive personal information. Do we collect any information from third parties? No, we do not collect information from third parties. How do we process your information? We process information to provide, improve, and administer our Services, communicate with you, ensure security, prevent fraud, and comply with the law. Learn more When and with whom do we share personal information? We may share information in specific situations with specific third parties. Learn more What are your rights? Depending on your location, privacy laws may give you rights regarding your personal information. Learn more How do you exercise your rights? You can submit a data subject access request or contact us. Full Privacy Notice: Review the Privacy Notice in full TABLE OF CONTENTS What Information Do We Collect? How Do We Process Your Information? What Legal Bases Do We Rely On? When and With Whom Do We Share Your Personal Information? Do We Use Cookies and Other Tracking Technologies? How Long Do We Keep Your Information? Do We Collect Information From Minors? What Are Your Privacy Rights? Controls for Do-Not-Track Features Do United States Residents Have Specific Privacy Rights? Do Other Regions Have Specific Privacy Rights? Do We Make Updates to This Notice? How Can You Contact Us About This Notice? How Can You Review, Update, or Delete the Data We Collect From You? 1. WHAT INFORMATION DO WE COLLECT? Personal Information You Disclose to Us In Short: We collect personal information that you provide to us. We collect personal information that you voluntarily provide when you: Express interest in obtaining information about us or our products/services Participate in activities on our Services Contact us Personal Information Provided by You: Names Phone numbers Email addresses Sensitive Information: We do not process sensitive information. All personal information you provide must be true, complete, and accurate. Please notify us of any changes. 2. HOW DO WE PROCESS YOUR INFORMATION? In Short: We process your information to provide, improve, and manage our services, communicate with you, ensure security and prevent fraud, and comply with the law. We may also process your information for other purposes only with your explicit consent. Purposes include: Sending marketing and promotional communications (you can opt out anytime) Saving or protecting an individual's vital interest (e.g., to prevent harm) Other purposes related to providing or improving our services 3. WHAT LEGAL BASES DO WE RELY ON? In Short: We process your personal information only when necessary and legally justified. EU/UK (GDPR/UK GDPR): Consent: You give permission; you can withdraw anytime Legitimate Interests: Necessary for business purposes without overriding rights Legal Obligations: Required by law Vital Interests: Necessary to protect life or safety Canada: Express or implied consent, or exceptional cases allowed by law 4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION? In Short: Only in specific situations: Business Transfers: Mergers, acquisitions, or asset sales Affiliates: Parent company, subsidiaries, or partners under common control Business Partners: To offer products, services, or promotions 5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES? Yes, for: Security, crash prevention, bug fixes, and site functions Third-party analytics and advertising tailored to your interests 6. HOW LONG DO WE KEEP YOUR INFORMATION? We keep information as long as necessary to fulfill purposes or as required by law. When no longer needed, information is deleted or anonymized. 7. DO WE COLLECT INFORMATION FROM MINORS? We do not knowingly collect data from or market to children under 18. If we learn data from a minor has been collected, we will delete it. 8. WHAT ARE YOUR PRIVACY RIGHTS? Depending on your location, you may have rights to: Access, correct, delete, restrict, or move your personal information Withdraw consent where applicable Opt-out of marketing communications EEA/UK residents can also complain to local Data Protection Authorities: EU Authorities UK ICO Switzerland FDPIC Contact: sean@myintimacylab.com 9. CONTROLS FOR DO-NOT-TRACK FEATURES Most browsers and mobile apps have DNT features. Currently, there is no uniform standard, and we do not respond to DNT signals. 10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS? Residents of certain states may have rights to: Request access to personal information Correct inaccuracies Obtain a copy or delete personal information Withdraw consent 11. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS? In Short: You may have additional rights based on the country you reside in. Australia and New Zealand We collect and process your personal information under the obligations and conditions set by: Australia’s Privacy Act 1988 New Zealand’s Privacy Act 2020 This Privacy Notice satisfies the notice requirements defined in both Privacy Acts, including: what personal information we collect from you, from which sources, for which purposes, and other recipients of your personal information. If you do not wish to provide the personal information necessary to fulfill these purposes, it may affect our ability to provide our services, including: Offering you the products or services that you want Responding to or helping with your requests At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us using the details provided in the section HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU? . If you believe we are unlawfully processing your personal information, you have the right to submit a complaint about: A breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner A breach of New Zealand’s Privacy Principles to the Office of New Zealand Privacy Commissioner Republic of South Africa At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us using the details provided in the section HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU? . If you are unsatisfied with how we address any complaint regarding our processing of personal information, you can contact the office of the regulator: The Information Regulator (South Africa) Website: https://inforegulator.org.za/ General enquiries: enquiries@inforegulator.org.za Complaints (complete POPIA/PAIA form 5): PAIAComplaints@inforegulator.org.za & POPIAComplaints@inforegulator.org.za 12. DO WE MAKE UPDATES TO THIS NOTICE? In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws. We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes, we may notify you either by: Prominently posting a notice of such changes, or Directly sending you a notification We encourage you to review this Privacy Notice frequently to stay informed about how we are protecting your information. 13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE? If you have questions or comments about this notice, you may: Email: sean@myintimacylab.com Mail: My Intimacy Lab 130 Anzac Street Takapuna, Auckland 0622 New Zealand 14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU? Based on the applicable laws of your country (or state of residence in the US), you may have the right to: Request access to the personal information we collect from you Obtain details about how we have processed your information Correct inaccuracies in your information Delete your personal information Withdraw your consent to our processing of your personal information These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please submit a data subject access request.

Last Updated: November 13, 2025 This GDPR Notice explains how My Intimacy Lab ("we," "us," or "our") processes personal data of individuals located in the European Union (EU) or the United Kingdom (UK) under the General Data Protection Regulation (GDPR) and the UK GDPR. **Data Collection and Use** We collect personal data you provide directly to us, including your name, email address, phone number, and any other information you submit through our website or communications. We use your personal data to: - Provide and manage our services - Respond to inquiries and provide customer support - Send communications (including marketing, with your consent) - Comply with legal obligations - Protect legitimate interests such as security and fraud prevention **Legal Basis for Processing** We process your personal data on one or more of the following bases: - Your consent - Performance of a contract - Compliance with legal obligations - Protection of vital interests - Legitimate interests pursued by us, where not overridden by your rights **Data Sharing** We may share your data with: - Affiliates or subsidiaries under common control - Service providers and business partners - Legal authorities as required by law **Your Rights under GDPR** EU/UK residents have the right to: - Access and obtain a copy of your personal data - Rectify inaccurate or incomplete data - Erase your personal data (right to be forgotten) - Restrict processing of your data - Object to processing of your data - Data portability (receive your data in a structured, commonly used format) - Withdraw consent at any time - Lodge a complaint with your local data protection authority **Data Retention** We retain personal data only as long as necessary to provide our services and comply with legal obligations. Data no longer required is securely deleted or anonymized. **Contact Information** To exercise your rights or for any questions regarding this GDPR Notice, contact us at: Email: sean@myintimacylab.com Mail: My Intimacy Lab, 130 Anzac Street, Takapuna, Auckland 0622, New Zealand