House of Brands LLC., and its affiliates (collectively, “House of Brands”, “we”, “us” or “our”) value privacy rights. As required under applicable law, and specifically the EU General Data Protection Regulation (“GDPR”) and the Israeli Protection of Privacy Law (“IPPL”), the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), and the privacy laws of certain other U.S. states (as applicable to residents of those states acting in an individual or household context only, and not in a commercial or employment context) (which collectively shall be referred to herein as “Data Protection Laws”), individuals are permitted to make certain requests and exercise certain rights regarding their Personal Data or Personal Information (as such term is defined under the applicable Data Protection Laws) depending on their jurisdiction.

In order to submit a request to exercise individual rights pursuant to the Data Protection Laws, please complete this form and send it to us at: support@oakandluna.com.

Upon receipt of your completed request, we will process it and respond within the timelines required under applicable Data Protection Laws. If additional information is necessary, we will contact you using the contact information you provided in this form. Information provided in connection with this request will be processed only for the purpose of processing and responding to your request and will be retained only for as long as necessary to document our response and to comply with our legal record-keeping obligations. For more information, please review our Privacy Policy, available at: https://www.oakandluna.com/articles/privacy-policy, and, if you are a California resident, our CCPA Privacy Notice, available at: https://www.oakandluna.com/articles/ccpa-notice.

Full Name: _________

Email Address: _________

If applicable, US State: _________

• I am the data subject requesting action.
• I am not the data subject; however, I am acting on behalf of the data subject. I have written authority, which I enclose and attach to this letter.

• Customer
• Prospect
• Employee
• Candidate
• Vendor
• Other: _________

Detailed below are various rights and requests you may submit depending on your residence and the applicable Data Protection Laws. Please select the right you wish to exercise. Rights may differ across jurisdictions and may be subject to eligibility requirements (including residency). As a result, certain rights listed below may not apply to you, may be available only in limited circumstances, or may be fulfilled differently.

• Right to be Informed;
• Right to Know or Access or Inspection;
• Right to a List of Third Parties – the right to receive a list of the specific third parties to which we have disclosed personal data relating to you.
• Right to rectification/correct inaccuracies in personal data relating to you in the event you found it incorrect, outdated, etc. (or otherwise request its deletion),
• Right to Deletion (Right to be forgotten) (this right is not absolute; we may retain certain Personal Data where permitted or required by applicable law);
• Right to Restriction of Processing, opt out, withdraw consent, Object;
• Right to Data Portability;
• Right to Limit the Use or Disclosure of Sensitive Personal Information;
• Right to Opt Out of Profiling or Automated Decision-Making;
• Right to Appeal our decision regarding your request (see “Appeal Rights” in our Privacy Policy).

You may also exercise the following rights at any time, without submitting this form, through our cookie consent banner, by enabling a Global Privacy Control (GPC) signal in your browser, or by emailing support@oakandluna.com with the subject line “Do Not Sell or Share”:

• Right to opt-out of the sale or sharing of your Personal Data;
• Right to opt-out of the sharing of your Personal Data for cross-contextual behavioral advertising.

Please note that these controls apply to the device and browser on which they are set. If you use multiple devices or browsers, you may need to update your settings on each.

Please provide any additional information relevant to your request.

Please provide as much detail as possible (for example, relevant dates, references, and other context). For more information about individuals' rights in relation to their Personal Data, please review our Privacy Policy.

To help protect individuals' privacy, we need to verify that you are who you say you are. Depending on the rights you wish to exercise, we may ask you to provide information to verify your identity. We reserve the right to decline your request if we are unable to verify your identity.

The information you provide will be used only to identify the personal data you are requesting and to respond to your request in accordance with applicable Data Protection Laws. We may share it with relevant internal departments or service providers as necessary to respond to your request.

We will process your request within the time period required under applicable Data Protection Laws. Where permitted, we may extend this period by the amount of time allowed under applicable Data Protection Laws if your request is complex, if you submit multiple requests, or if we require additional information.

We will process your request free of charge. However, we reserve the right to charge a reasonable fee to cover certain administrative costs (for example, providing additional copies of the data) or to deal with requests that are manifestly unfounded or excessive.

Please note that you may not be entitled to exercise all or part of the rights described above. This depends on your jurisdiction, the applicable Data Protection Laws, our relationship with you, and any rights we may have under applicable law to refuse your request or to retain certain data. If we are unable to provide the information you requested or otherwise fulfill your request, we will endeavor to explain why and to inform you of any rights you may have.

• I, the undersigned, declare that the information I have provided in this form is true, complete, and accurate, and that this request is submitted by me, or by an authorized person submitting it on behalf of the data subject.
• I understand that House of Brands may request additional information and/or documentation to verify my identity or authority to submit this request, and that House of Brands will process the request only after completing the verification required.

Date: _____________

Signature: _________

Thank you for filling out our form!