Last updated: May XX, 2026



This Privacy Notice (“Notice”) describes how LifeWave, Inc., its global affiliates, brands, and subsidiaries (“LifeWave,” “we,” “our,” or “us”) collect, use, disclose, and otherwise process the personal information described in this Notice and the rights and choices individuals have regarding such personal information. By using our website, creating an account, using approved mobile application (“App”), or otherwise engaging with us or using the products and services we make available (collectively, the “Services”), you acknowledge that your personal information will be handled as described in this Notice.



For information about your privacy choices, please review Section 7 Your Privacy Choices and Section 14 Additional Information for Certain Jurisdictions.



If you are a resident of California: Please refer to Section 14.B. California Notice at Collection and Privacy Rights, which includes additional information about the personal information that we may collect about you, and your rights under California privacy laws.



Your use of our Services and any dispute over privacy, is subject to this Notice and our Terms and Conditions, available at [insert link].



Not in Scope. This Notice does not apply to the personal information that we collect and process about LifeWave employees, contractors, personnel, job applicants, or candidates.



Additional Notices. In some cases, we may provide additional or supplemental privacy notices that apply to specific relationships, products, services, or contexts in which we collect and process personal information. These additional notices may include, for example notices applicable to Brand Partners, distributors, or individuals participating in our sales and compensation programs, as well as other role- or context-specific notices provided within certain parts of the Services.



Where an additional or supplemental notice applies, it will govern our processing of personal information that is subject to that additional notice and will control to the extent there is a conflict with this Notice.



Table of Contents

1. Personal Information Collected
2. Purposes for Collecting and Processing
3. Disclosures of Personal Information
4. Aggregate and De-Identified Information
5. Cookies and Tracking
6. Your Privacy Choices
7. Retention
8. Children’s Information
9. International Transfers of Personal Information
10. Security
11. Third-Party Links
12. Changes to this Privacy Notice
13. Contact Us
14. Residents of Certain Jurisdictions





1. Personal Information Collected

As further described below, we collect personal information directly from individuals, from third parties, and automatically through your use of our Services.



Personal Information Collected Directly. The personal information we collect depends on how you use our Services or otherwise interact or engage with us, but generally includes:

• Contact information. When you contact us, including via email, phone, or webform, we collect certain personal information from you, such as your name, address, phone number, email address, and any personal information that you otherwise submit to us.
• Survey responses. When you fill out our surveys, we may collect your survey responses, including information regarding demographics, preferences, and your opinion about our products and Services. Participation in our surveys is voluntary.
• Transaction and retail information. If you purchase products from us or make a payment through the Services, we and our payment processors may collect transaction-related information, such as billing and shipping address, payment method details, purchase history, and other information related to the transaction. Payment card information is collected and processed directly by our payment processors.
• Contests and promotions. If you participate in our contests or promotions, we may collect your name, email address, and other registration information related to our contests and promotions.
• Communications and interactions. When you email, call, or otherwise communicate with us, we collect and maintain a record of your contact details, a history of our interactions with you, and information about your use of the Services.
• Events. If you register for or attend an event that we host or sponsor, we may collect personal information related to your registration for and participation in such event.
• Account and registration information. If you register for an account, we may collect name, email address, phone number, and address.
• Preferences. We also may collect information about your preferences, such as communication preferences, preferences related to your use of our Services, shopping behavior preferences, a record of your purchases from us, demographic data, and any other preferences you provide when interacting with us.



Personal Information Collected from Third Parties. We may collect personal information about you from third-party sources, such as public databases, service providers and vendors, affiliated companies, Brand Partners, analytics providers, joint marketing/promotional partners, social media platforms, or other third parties.

• Lead and prospect information. We may receive lead and prospect information, such as names, email addresses and contact information from third parties about individuals who may be interested in engaging with us.
• Social media information. If you post information about us or engage with us through third-party platforms, such as through your social media account, we may collect personal information about you from that third-party platform or account. These third-party platforms and services control the information that they collect and share about you. For information about how they may use and disclose your information, including any information you make public, please consult their respective privacy policies.



Personal Information Collected Automatically. We and our providers automatically collect and derive personal information related to your use of our Services and your interactions with us. Such information may include:

• Device and browsing information. We use cookies, log files, pixel tags, and other tracking technologies to automatically collect information when users access or use our Services. We may collect device IP address, general location information, domain name, page views, date and time stamps, browser type, device type, device ID, internet service provider, referring and exiting URLs, operating system, language, clickstream data, and similar device and usage information. For more information, please see Section 5 Cookies and Tracking.
• Activities and usage. We also collect activity information related to your use of the Services, such as information about links clicked, searches, features used, items viewed, and time spent within the Services.
• Location Information. We may collect or derive general location information about you such as through your IP address.



Purposes for Collecting and Processing

Generally, we collect, use, and otherwise process the personal information that we collect for the following purposes:

• Services and support. To provide our products and to operate our Services, communicate with you about your use of our products and Services, respond to your inquiries, gather feedback, fulfill your requests, communicate with you, run our day-to-day operations, and for similar support purposes.
• Relationship management. To manage our relationship with you, including to process your transactions, manage and maintain your account and subscriptions, administer and honor product warranties, and respond to your questions, requests and communications.
• Analytics and improvement. To better understand how users access and use our Services, products, and offerings, and for other research and analytical purposes, such as to evaluate and improve our Services and business operations, to develop Services, features and new products and offerings, and for internal quality control and training purposes.
• Customization and personalization. To tailor the content that we may send you, including to offer personalized help and instructions, and to otherwise personalize your experience.
• Contests and promotions. To administer the contests and promotional programs we offer.
• Marketing, advertising, and public relations. For marketing, advertising, and public relations purposes. For example, to send you information about our products and Services and the products and services of our affiliates, such as newsletters, and other marketing content, as well as any other information that you sign up to receive and to provide you with information about, or samples of, our product range for marketing purposes. We also may use certain personal information that we collect to manage and improve our advertising campaigns (both online and offline) so that we can better reach individuals with relevant content based on your interests and geographic region.
• Planning and managing events. For event planning and management, including registration, attendance, connecting you with other event attendees, and contacting you about relevant events and Services.
• Research, surveys, and product development. To administer surveys, such as for market research, customer satisfaction purposes or improving our products and Services, to conduct statistical and data analytics, and for other similar purposes.
• Security and protection of rights. To protect our Services and our business operations; to prevent and detect fraud, unauthorized activities and access, and other misuse, where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, violations of our Terms of Use or other agreements we have with you or this Notice, to defend our rights, including through legal or other dispute resolution processes.
• Legal proceedings and obligations. To comply with the law and our legal obligations, to respond to legal process and related legal proceedings, and government or law enforcement requests.
• General business and operational support. To consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other transactions such as financings, and related to the administration of our general business, accounting, auditing, compliance, recordkeeping, and legal functions.



2. Disclosures of Personal Information

Generally, we disclose the personal information that we collect to provide our Services, respond to and fulfil your transactions or requests, as otherwise directed or consented to by you, and as follows:

• Global affiliates, subsidiaries, branches, or associated offices. We may disclose the personal information we collect to our global affiliates, subsidiaries, branches, or associated offices who will use and disclose this personal information in accordance with the principles of this Notice.
• Vendors and service providers. We may disclose the personal information that we collect to our service providers and others who perform functions on our behalf or provide us services. These may include, for example, service providers that host or operate the Services, payment processors, analytics providers, information technology service providers, customer service vendors, consultants, auditors, and legal counsel. These companies and individuals may only use the data as permitted by our contracts with them.
• Brand Partners and network participants. We may disclose personal information to Brand Partners, distributors, and other participants in our sales network, including sponsors, uplines, and downlines, where necessary to operate the Brand Partner program, facilitate support and training, and enable customer and business relationships within the network. Additional details regarding these disclosures are provided in applicable supplemental notice(s), including the Brand Partner Privacy Addendum.
• Advertising and analytics platforms, providers, and networks. We may disclose or make available personal information to the platform providers and vendors that we use to provide or make available certain features or portions of the Services, or as necessary to respond to your requests. We may also make certain information (such as browsing information) available to advertising platforms, providers and networks in support of our marketing, advertising, and campaign management.
• General business operations. If we, our affiliates, or our subsidiaries are acquired by, merged with, financed by, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected about you to the other company. We may also share certain personal information as necessary prior to the completion of such a transaction or corporate transactions such as financings or restructurings, to lenders, auditors, and other advisors, including attorneys and consultants, as part of due diligence or as necessary to plan for a transaction.
• Others as permitted or required by applicable law. We may disclose personal information to other parties to the extent permitted or required by applicable law. This may include regulators, government entities, and law enforcement. It may also include certain disclosures that we are required to make.
• Security and protection of rights. We may disclose your personal information when we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Use or this Notice, or as evidence in litigation in which we are involved.
• With permission. We may disclose personal information in ways not described above. If we do so, we will notify you, and if necessary, obtain your consent.



3. Aggregate and De-Identified Information

We may use and disclose aggregate and other non-identifiable data related to our business and the Services for quality control, analytics, research, development, and other purposes. Where we use, disclose, or otherwise process de-identified data (data that is no longer reasonably linked or linkable to an identified or identifiable natural person, household, or personal or household device) we will maintain and use the information in deidentified form and not to attempt to reidentify the information, except in order to determine whether our deidentification processes are reasonable and adequate pursuant to applicable privacy laws.



4. Cookies and Tracking

We and our providers use cookies, pixel tags, and other similar tracking technologies to automatically collect information about browsing activity, device type, and similar information within the portal. This information, which may be considered personal information in some jurisdictions, is used, for example, to analyze and understand how you access, use, and interact with our Services; to identify and resolve bugs and errors; to assess, secure, protect, optimize, and improve the performance of our Services; to personalize content; and for marketing, advertising, measurement and analytics purposes. We may also de-identify and/or aggregate such information to analyze trends, administer Services, and gather broad demographic information for aggregate uses, and for any other lawful purposes.



Cookies. Cookies are alphanumeric identifiers used for tracking purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, to support the security and performance of the Services, or to allow us to track activity and usage data within and across the Services.



Pixel Tags and Similar Technologies. Pixel tags (sometime called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. We may use these tracking technologies to understand users’ activities, to help manage content and compile usage statistics, and in emails to let us know when they have been opened or forwarded so we can track response rates and gauge the effectiveness of our communications.



Local Storage Objects. Local storage is a web storage mechanism that allows us to store data on a browser that persists even after the browser window is closed. Local storage may be used by our web servers to cache certain information in order enable faster loading of pages and content when you return to the portal. You can clear data stored in local storage through your browser. Please consult your browser help menu for more information.



Analytics. We use analytics tools, such as Google Analytics, to evaluate usage and traffic on our portal. These analytics providers use cookies, pixels, and other tracking technologies to collect usage data to provide us with reports and metrics that help us analyze, improve, and enhance performance and user experience. You can learn more about how Google uses your information at www.google.com/policies/privacy/partners/ (“How Google uses information from sites or apps that use our services”). You can also download the Google Analytics Opt-out Browser Add-on to prevent your information from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.



Cross-Device Tracking. We and ad networks we work with may use the information we collect about you within our portal, and on other third-party websites and services, to help us and these third parties identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.) to interact or engage with us or our Services.



Advertising Networks. We work with ad networks, channel partners, mobile ad networks, analytics and measurement services, and others (“ad networks”) to personalize content, as well as to manage our advertising on third-party websites, mobile apps, and online services. We may share certain information with ad networks, and we may each use cookies, pixels tags, and other tools to collect usage and browsing information within our Services, as well as on third-party websites, apps, and services. This information may include IP address, location information, cookie and advertising IDs, and other identifiers, as well as browsing information.



Custom Lists and Matching. We may share or make available certain customer list information (such as your name, email address and other contact information) with third parties (i) so that we can better target ads and content to you across third party sites, platforms and services, and (ii) in some cases, these third parties may help us to enhance our customer lists with additional demographic or other information, so we can better target our advertising and marketing campaigns.



Do-Not-Track. Currently, our portal does not recognize web browser “Do-Not-Track” requests. You may, however, disable certain tracking as discussed below (e.g., by disabling cookies).



5. Your Privacy Choices

You have certain choices regarding our processing of your personal information, and we make available several ways for you to manage your preferences and privacy choices, as described below:

Marketing Communications. We may send periodic promotional and operational emails, text messages, or other similar communications to you. You may change your preferences or unsubscribe by following the instructions provided to you in the communication and by replying OPT OUT or STOP to any text message we send you. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt out of receiving promotional emails from us, we may still send you communications related to your transactions or that you have otherwise requested to receive from us.



Cookie Settings. You can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our portal who disable cookies will be able to enter the portal, but some features may not function. If you visit the portal from a different device or from a different browser on the same device, you will need to apply your cookie settings for that browser and/or device as well.



Industry Ad Choice Programs. You can control how participating ad networks use the information that they collect about your visits to certain websites, in order to display more relevant targeted advertising to you. You can obtain more information and opt out of receiving targeted ads from participating ad networks at aboutads.info/choices (Digital Advertising Alliance). If you are in Europe, this information is available at www.youronlinechoices.eu (European Interactive Digital Advertising Alliance).



6. Retention

We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected or as otherwise necessary to comply with our legal obligations, resolve disputes, maintain appropriate business records, and enforce our agreements.



7. Minor’s Information

Our Services are not designed for minors. If we discover that a minor has provided us with personal information, we will delete such information from our systems. If you are a parent or guardian and believe we have collected your child’s information in violation of applicable law, please contact us as set forth in Section 12 Contact Us.



8. International Transfers of Personal Information

LifeWave is headquartered in the United States, and has operations, entities, and service providers in the United States, European Union, and throughout the world. As such, LifeWave and our service providers may transfer your personal information to, or access it in, jurisdictions (including the United States and other jurisdictions where we, our affiliates and service providers have operations) that do not include equivalent levels of data protection as your home jurisdiction. We will take steps to ensure that such personal information receives an adequate level of protection in the jurisdictions in which we process it, including through appropriate written data processing terms and/or data transfer agreements.



9. Security

We have implemented safeguards that are intended to protect the personal information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.



10. Third-Party Links

Our Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Notice, but instead is governed by the privacy notices of those third-party websites. We are not responsible for the information practices of such third-party websites.



11. Changes to this Privacy Notice

We may make changes to this Notice from time to time, so please be sure to check back periodically. We will post updates to the Notice on our website. If we make any material changes to this Notice, we will endeavor to provide you prior notice, such as by emailing or posting prominent notice on our website, in accordance with applicable law.



12. Contact Us

LifeWave welcomes your questions and comments about your privacy or this Notice. Please contact us by emailing privacy@lifewave.com.



13. Additional Information for Certain U.S. Residents

This section of the Policy provides additional information for certain U.S. residents under applicable state privacy laws.



Consumer Rights. Residents of certain U.S. states, including Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, Indiana, Kentucky, and Rhode Island receive additional notice and have additional privacy rights under applicable privacy laws, subject to certain limitations, which may include:

• Access. To confirm whether we are processing their personal information and to obtain a copy of their personal information in a portable and, to the extent technically feasible, readily usable format.
• Deletion. To delete their personal information provided to or obtained by us.
• Correction. The right to correct inaccuracies in their personal information, taking into account the nature and purposes of the processing of the personal information.
• Opt-Out. To opt out of certain types of processing, including:
  • to opt out of the “sale” of their personal information;
  • to opt out of targeted advertising by us; and
  • to opt out of any processing of personal information for purposes of making decisions that produce legal or similarly significant effects.
• Revoke Consent. If you have provided your consent in order for us to process your personal information, including your sensitive personal information, you may revoke such consent.



You may submit a request to exercise most of your privacy rights under U.S. state privacy laws online by using our webform here.

To opt out of the use of your online browsing information for purposes of “sales” or targeted advertising by us, you can adjust your cookies settings here. See Section 5. Cookies and Other Tracking Mechanisms and Section 6. Your Privacy Choices for more information. In addition, our website responds to global privacy control—or “GPC”—signals, which means that if we detect that your browser is communicating a GPC signal, we will process that as a request to opt that particular browser and device out of “sale” and/or targeted advertising (i.e., via cookies and tracking tools) on our Site.



We will respond to your request as required under applicable U.S. privacy law(s). When you submit a request, we will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information in order to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.



To the extent required under applicable U.S. privacy laws, if we deny your request, you may appeal our decision in accordance with the instructions we provide in our response.



To the extent permitted under applicable U.S. privacy laws, you may also designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization, and we may also require the relevant consumer to directly verify the identity and authority of the authorized agent.



If you are a resident of Connecticut, Delaware, Maryland, or Minnesota, you may contact us at privacy@lifewave.com to request a list of the third parties with whom we have disclosed your personal information. Please note, the categories of third parties that we disclose personal information to generally are listed in Section 4. Disclosures of Personal Information above.



While we do not disclose personal information to third parties in exchange for monetary compensation, our use of third-party analytics and advertising cookies may be considered “selling” under applicable U.S. privacy laws. We may “sell” the following categories of personal information: identifiers, Internet and network activity information, and commercial information. We may disclose these categories to third-party advertising networks and analytics providers for purposes of marketing and advertising, to improve and measure our ad campaigns, and to better understand user activity on our Sites. You may opt out of the sale of your personal information as further described above.



13. Additional Information for California Residents

This section of the Policy provides additional information for California residents and describes our information practices pursuant to applicable California privacy laws, including the California Consumer Privacy Act (“CCPA”). This section applies to “personal information” as defined in the CCPA, whether collected online or offline. This section does not address or apply to our handling of personal information that is exempt under the CCPA, such as publicly available information or de-identified or aggregated information.



Categories of Personal Information Collected and Disclosed. We may collect (and may have collected in the prior 12 months) the following categories of personal information about you, as defined by the CCPA. We may disclose each category collected to a service provider or contractor for a business or commercial purpose and to other third parties including as described in Section 4 Disclosures of Personal Information and any applicable supplemental notices.



• Identifiers. Includes name, alias, user ID, username, account number or unique personal identifier, email address, phone number, address and other contact information, IP address and other online identifiers.
• Customer Records. Includes your account and profile information and customer records that contain personal information, such as name, demographics and other characteristics or descriptions, contact information, and financial or payment information.
• Commercial Information. Includes records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or Other Electronic Network Activity Information. Includes, but is not limited to, browsing history, clickstream data, search history, and information regarding interactions with our Site, advertisements, or emails, including other usage data related to your use of any of our Services or other similar online services.
• Geolocation Data. Such as general location information about a particular individual or device.
• Audio, Electronic, Visual, or Similar Information. Includes information collected via call recordings if you are interacting with us in a customer service capacity or if you call us on a recorded line, recorded meetings and webinars, and security camera footage to secure our offices and premises.
• Protected Classifications. Such as sex and other characteristics of protected classifications under California or federal law.
• Inferences and Profiles. Such as inferences drawn from any of the information described in this section about a consumer including inferences reflecting the consumer’s preferences, characteristics, behaviors, attitudes, abilities, and aptitudes.



Sources of Personal Information. We generally collect personal information from the following categories of sources: directly or indirectly from you; affiliates and subsidiaries; Brand Partners (including Sponsors, uplines, and downlines); business partners; vendors and service providers; publicly available sources; Internet service providers; operating systems and platforms; social networks; and marketing and data analytics providers.



Purposes of Collection, Use, and Disclosure. As described in Section 3. Purposes for Collecting and Processing Personal Information, in general, we collect and otherwise process personal information for the following business or commercial purposes, or as otherwise directed or consented to by

you: Services and support; relationship management; analytics and improvement; customization and personalization; contests and promotions; marketing, advertising and public relations; planning and managing events; research, surveys, and product development; security and protection of rights; legal proceedings and obligations; and general business and operational support.



Sensitive Personal Information. Notwithstanding the purposes described above, we do not collect, use, or disclose “sensitive personal information” beyond the purposes authorized by applicable privacy law. Accordingly, we only use and disclose sensitive personal information as reasonably necessary and proportionate: (i) to perform our Services requested by you; (ii) to help ensure security and integrity, including to prevent, detect, and investigate security incidents; (iii) to detect, prevent and respond to malicious, fraudulent, deceptive, or illegal conduct; (iv) to verify or maintain the quality and safety of our Services; (v) for compliance with our legal obligations; (vi) to our service providers who perform services on our behalf; and (vii) for purposes other than inferring characteristics about you.



Retention of Personal Information. We retain the personal information we collect only as reasonably necessary for the purposes described above or otherwise disclosed to you at the time of collection. When deciding how long to keep your personal information, we consider whether we are subject to any legal obligations (e.g., any laws that require us to keep records for a certain period before we can delete them) or whether we have taken any legal positions (e.g., issued any legal holds or otherwise need to preserve the information). Rather than delete your data, we may also deidentify it by removing identifying details. Where we have committed to maintaining and using personal information in a deidentified form, we agree not to reidentify deidentified data except as permitted by applicable law.



Sales and Sharing of Personal Information. The CCPA defines "sale" as disclosing or making available personal information to a third party in exchange for monetary or other valuable consideration, and “sharing” includes disclosing or making available personal information to a third party for purposes of cross-contextual behavioral advertising.



While we do not disclose personal information to third parties in exchange for monetary compensation, we may be considered as “selling” or “sharing” personal information under the CCPA because of our use of third-party ad or analytics cookies and other tools. We “sell” or “share” the following categories of personal information: identifiers, commercial information, and Internet or other electronic network activity information. We disclose these categories to third-party advertising networks and analytics providers for purposes of marketing and advertising. We do not sell or share sensitive personal information or personal information about individuals we know are under the age of 16.



California Privacy Rights. The CCPA provides California residents with specific rights regarding personal information. Subject to certain conditions and exceptions, California residents have the following rights with respect to their personal information:

1. Right to Know (Access & Portability). You have the right to request:
   1. the categories or personal information we collected about you;
   2. the categories of sources from which the personal information is collected;
   3. our business or commercial purposes for collecting, selling, or sharing personal information; the categories of third parties to whom we have disclosed personal information; and
   4. a copy of the specific pieces of personal information we have collected about you.
2. Right to Correct. You have the right to request we correct inaccurate personal information.
3. Right to Delete. You have the right to request we delete your personal information.
4. Right to Opt-Out of Sales and Sharing. You have the right to opt-out of “sales” and “sharing” of your personal information, as those terms are defined under the CCPA.
5. Right to Limit Use and Disclosure. You have the right to limit the use and disclosure of your “sensitive personal information” to the permitted purposes under the CCPA.
6. Right to Non-retaliation. We will not retaliate against you for exercising any of the rights described in this section.



Exercising Your Privacy Rights. California residents may exercise their CCPA privacy rights as set forth below:



• Right to Know/Access, Delete, Correct, [and limit]. California residents may submit CCPA requests to know/access, delete, and correct their personal information by using our webform, available at [insert link], or calling [insert toll-free phone number].



When you submit a request, we will take steps to verify your identity and request by matching the information provided by you with the information we have in our records. We will process your request based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. In some cases, we may request additional information in order to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.



You may also designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.



• Right to Opt-Out of Sales and Sharing. To exercise your right to opt-out of the “sale” or “sharing” of your personal information, you may do so via our cookie preference manager. We will apply your opt out based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. You may also click the “Your Privacy Choices ” link at the bottom of our Site.



In addition, if we detect that your browser or device is transmitting an opt-out preference signal, such as the “global privacy control” or (“GPC”) signal, we will opt that browser or device out of cookies that result in a “sale” or “sharing” of your personal information. If you come to our Site or use our Services from a different device or from a different browser on the same device, you will need to opt-out, or use an opt-out preference signal, for that browser and/or device as well. More information about GPC is available at: globalprivacycontrol.org.



Notice of Financial Incentive. With respect to some of our Services, we may offer programs, contests, or similar promotional offerings (each, a “Program”) that include offers, rewards, discounts, services, perks, or promotions (collectively, “Rewards and Offers”), which constitute the material terms of the Program and may be considered “financial incentives” under the CCPA. Participation in a Program is voluntary.

We provide these Rewards and Offers to participating users to understand and improve customer satisfaction and experiences, and to foster positive customer relationships.



• Valuation of Personal Information. We estimate the value of the personal information we collect in connection with these Programs based on a reasonable and good faith calculation that considers the expenses related to the Programs. We consider the value of such personal information to be reasonably related to the costs incurred to provide the Program, including, without limitation, IT, administrative, direct, third-party, discount, and Program development costs, as well as the overall value of the relationship with participating users.
• Use and Disclosure of Personal Information. Personal information collected in connection with a Program is used, retained, and may be disclosed to our business partners, vendors, service providers, and other third parties, as described in this Privacy Notice, including to: (a) administer the Program; (b) conduct research and analytics; (c) improve our products and Services; (d) provide more relevant and targeted offers; and (e) send updates and offers by email or postal mail (in accordance with your communication preferences).



You may withdraw from participating in a Program at any time by contacting us at privacy@lifewave.com. If you withdraw from a Program (or submit a CCPA request to delete your Program information), your participation in that Program will be terminated, and you will no longer be eligible to earn, use, access, or redeem any Rewards and Offers, subject to the applicable Program terms.



California Shine the Light Law. Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use. Such requests may be made once per calendar year for information about any relevant third-party sharing in the prior calendar year. To submit a “Shine the Light” request, email us at privacy@lifewave.com, and include in your request a current California address and your attestation that you are a California resident.



13. Additional Information for Mexican Residents

As a Mexican resident, your personal data will be protected by the Federal Law for the Protection of Personal Data in Possession of Private Parties (“FLPPDPPP”) (Ley Federal de Protección de Datos Personales en Posesión de Particulares), its Regulations and any other currently applicable law or that is enacted or becomes applicable from time to time.



Controller: [The full name of the Mexican legal entity shall be added here.]



Address: [The full name of the Mexican legal entity shall be added here.]



Contact: For any purposes you may need information related to this privacy notice, such as limitation of the use and disclosure of your personal data, exercise of ARCO Rights, among others, please contact: privacy@lifewave.com.



Your rights: Under certain circumstances and according to the FLPPDPPP, you have the following rights in relation to your personal data:

1. Right to Access. You have the right to access your personal data held by us.
2. Right to Rectify. You have the right to request correction of any inaccurate or incomplete data relating to you.
3. Right to Cancellation. You have the right to request cancellation of your personal data held by us. Cancellation of personal data will lead to a blocking period, following which the data will be erased, provided that we may retain data exclusively for purposes pertaining to responsibilities that arise from processing. The blocking period will be equal to the statute of limitations period for actions arising from the legal relationship governing processing, pursuant to applicable law.
4. Right to Object processing. You, at all times and for any legitimate reason, have the right to object to the processing of your data.



The foregoing rights are your “ARCO Rights”. Any ARCO Right request must contain, at least, the following:

1. Full name and e-mail or address, to communicate the response to your request.
2. The documents that prove your identity, or where appropriate, that of your legal representative.
3. A clear description of the personal data with respect to which you seek to exercise any of the ARCO Rights.
4. Any other element or document that facilitates the location of the personal data.
5. If required, the Data Controller may request additional information.



The response to your request will be communicated to you within the period provided in the FLPPDPPP and, if it is appropriate, it will be implemented within the maximum period envisioned under the FLPPDPPP, or in any other terms as may be set forth in the FLPPDPPP from time to time.



By accepting this Privacy Notice, you hereby consent to this document, the personal data that we collect, the purposes for which we collect it (including those from which you may opt-out), as well as the transfer of your personal data.



Additional Privacy Notice for LifeWave Brand Partners



Last Updated: May XX, 2026



Applicability. This Brand Partner Privacy Addendum (“Addendum”) applies to individuals who enroll or participate in LifeWave’s Brand Partner, distributor, or similar independent sales programs (“Brand Partners”) and describes additional practices related to the collection, use, and disclosure of personal information in connection with the Brand Partner program. In the event of a conflict between this Addendum and the Privacy Notice, this Addendum will control with respect to Brand Partner personal information.



1. Role of Brand Partners

Brand Partners participate in LifeWave’s independent sales network and may operate as independent business participants within that network. As part of the program, Brand Partners may interact with customers and other Brand Partners, including sponsors, uplines, and downlines, and may receive access to certain personal information as described below.



2. Additional Categories of Personal Information Collected

In addition to the categories of personal information described in the Privacy Notice, we may collect and process additional personal information about Brand Partners such as:

• Business and program participation information, including market, organizational structure (e.g., upline/downline relationships), and performance metrics (such as overall purchase or sales volume);
• Profile and account information, including profile photo and account preferences; and
• Compliance and program administration information, including information necessary to administer the Brand Partner program and enforce applicable policies; and
• Transaction, compensation, and tax information, including purchases, order history, commission payments, bonus or incentive eligibility, and information necessary for payment processing and applicable tax reporting (e.g., for issuance of required tax forms such as Form 1099 where applicable).



3. Additional Purposes of Processing

We may use Brand Partner personal information, in addition to the purposes described in the Privacy Notice, to:

• Administer the Brand Partner program, including account management, compensation and incentives, program operations, and compliance with applicable financial and tax obligations;
• Facilitate network relationships, including enabling communication, support, and training among Brand Partners within upline and downline structures;
• Support sales and customer relationships, including enabling Brand Partners to provide customer support and product recommendations;
• Monitor and enforce compliance with applicable program policies, agreements, and legal requirements; and
• Provide tools and functionality through the Back Office or similar platforms, including privacy controls and visibility settings.



4. Disclosures Within the Brand Partner Network

LifeWave strives to protect personal information. When we disclose personal information as described below, we take steps to ensure that appropriate safeguards are in place consistent with applicable law.



a. Disclosures to Downlines

If you are a Brand Partner, we may make available certain personal information to your personally sponsored Brand Partners and customers (“Downlines”) to enable support, training, and program-related communications.



This may include:

• Name, profile information, and contact details.



b. Disclosures to Uplines

We may also disclose certain personal information to your sponsor and upline Brand Partners (“Uplines”) to support program operations, training, and business development.



This may include:

• Account and profile information (e.g., name, contact details, profile photo, and, where applicable, date of birth);
• Business information (e.g., market, organizational structure, and overall purchase or sales volume);
• Transaction and order information (e.g., purchases, product details, order tracking, shipping details, and autoship information); and
• Incentive qualification status (e.g., eligibility for rewards or trips).



Brand Partners may be able to manage certain sharing preferences through their account settings, including within the Back Office, or by contacting customer support.



c. Disclosures Relating to Customers

If you are a customer, we may disclose certain personal information to your sponsor or upline Brand Partners to enable them to provide product support and recommendations in connection with the Brand Partner program.



This may include:

• Account and contact information; and
• Order and transaction details.



Customers may be able to manage certain sharing preferences through their account settings or by contacting customer support.



d. Disclosures Within LifeWave

We may share your personal information within LifeWave and its affiliates, departments, and service providers on a need-to-know basis. Such disclosures occur only where necessary to provide our services, administer the Brand Partner program, or support operational, management, administrative, compliance, or related business functions.



5. Marketing and Communications by Brand Partners

LifeWave does not disclose personal information to third parties for their own unrelated direct marketing purposes outside of the Brand Partner program.



However, Brand Partners may use personal information made available through the program to contact customers and other Brand Partners, including for product promotion, marketing communications, and program-related outreach, in accordance with LifeWave’s policies, procedures, applicable consent requirements, and applicable law. Brand Partners are responsible for ensuring such communications comply with applicable marketing and communications laws.



6. Nature of Brand Partner Recipients

Brand Partners who receive personal information through the program may use such information to operate their LifeWave business and provide support within the network. Their handling of personal information may be subject to their own practices and independent obligations, except to the extent governed by LifeWave’s policies and agreements.



7. Privacy Rights

For information about applicable privacy rights, please refer to the “Additional Information for Certain Jurisdictions” section of the Privacy Notice.