We view data privacy as a fundamental component of doing business. Our Privacy Statement and practices are focused on processing personal data appropriately and lawfully, while providing confidentiality, integrity and availability.

This Privacy Statement applies to www.yuvo-travel.com, other Yuvo domains. The Yuvo website is owned by Yuvo Group Inc., while Yuvo’s business operations and user-facing services are operated by Yuvo Travel Inc. Both companies are based at 228 Park Ave S, Suite 300, New York, NY 10003, US. For the purposes of this Privacy Statement, “Yuvo”, “we”, “us”, or “our” refers to Yuvo Travel Inc., Yuvo Group Inc., and, where applicable, their subsidiaries and affiliates, as relevant to the particular processing activity.

We process personal data in accordance with applicable privacy and data protection laws and regulations (collectively, “Data Protection Laws”). Depending on your location and the circumstances of the processing, Data Protection Laws may include, among others, the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR and the Data Protection Act 2018, applicable United States federal and state privacy laws, including the California Consumer Privacy Act (“CCPA”), as amended, the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados or “LGPD”), and other applicable privacy and data protection laws and regulations.

This Privacy Statement explains the types of information we collect, how we use, share, and secure the information you provide. It also describes your choices regarding use, access and correction of your personal data.

Yuvo Travel Inc. is generally responsible for the processing of personal data in connection with our business operations and services. Yuvo Group Inc. may also be responsible for certain processing activities where it determines how and why personal data is processed. Where applicable under Data Protection Laws, each entity acts as the data controller or equivalent entity responsible for such processing.

For the purposes of this Privacy Statement, “Personal Data” means any information that identifies, relates to, describes, or can reasonably be linked, directly or indirectly, to an identified or identifiable individual. This may include, for example, your name, date of birth, postal address, email address, telephone number, online identifiers, device information, or other information associated with you.

We process personal data only for specific and legitimate business purposes, as described in this Privacy Statement. These purposes may include providing and improving our services, communicating with you, managing our business relationships, ensuring the security of our services, preventing fraud and misuse, complying with legal obligations, and other purposes described in the relevant sections below.

Where required by applicable Data Protection Laws, we rely on an appropriate legal basis for each processing activity.

We seek to process personal data in accordance with the following principles:

• Personal data is processed lawfully, fairly, and transparently.

• Personal data is collected and used for specified and legitimate purposes and is not further processed in a manner incompatible with those purposes.

• We limit the personal data we collect and use to what is reasonably necessary and relevant for the relevant purpose.

• We take reasonable steps to ensure that personal data is accurate and, where appropriate, kept up to date.

• We retain personal data only for as long as reasonably necessary for the purposes for which it is processed, subject to applicable legal, regulatory, and business requirements.

• We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful access, use, disclosure, alteration, loss, or destruction.

• We disclose personal data to third parties only where appropriate for the purposes described in this Privacy Statement, where required by law, or where otherwise permitted under applicable Data Protection Laws.

• We respect the privacy rights available to individuals under applicable Data Protection Laws.

We collect and process personal data in connection with the provision, operation, support, and improvement of the services described in our Terms and Conditions (“Services”), as well as for the other purposes described in this Privacy Statement.

Depending on how you interact with us and the Services you use, we may collect personal data directly from you, from our business partners, service providers, or other third parties, where permitted by applicable Data Protection Laws.

We use personal data for purposes connected with operating and providing the Services and our business, including to:

• provide, administer, support, maintain, and improve the Services;

• manage our relationships and communications with users, customers, and business partners;

• process requests, enquiries, transactions, and other interactions with Yuvo;

• perform analytics, statistics, research, and service improvement activities;

• prevent, detect, and address fraud, misuse, security incidents, and other unlawful or harmful activities;

• manage our IT systems, security, authentication, access controls, and internal operations;

• comply with applicable legal, regulatory, tax, accounting, and other obligations; and

• establish, exercise, or defend legal claims and protect our rights, property, and legitimate business interests.

We process personal data only for the purposes described in this Privacy Statement, for other purposes that are compatible with those purposes where permitted by applicable law, or where otherwise required or permitted under applicable Data Protection Laws.

When you contact us through our website, by email, telephone, or through other supported communication channels, we may process the Personal Data you provide in order to respond to your enquiry, provide information about our Services, and manage our business relationship with you.

We retain such communications and related Personal Data only for as long as reasonably necessary for these purposes or as otherwise required or permitted under applicable Data Protection Laws.

We may use automated and AI-enabled tools in connection with the operation and provision of our Services and our internal business processes. Where such tools involve the processing of Personal Data, we use them only for relevant business purposes and in accordance with applicable Data Protection Laws and this Privacy Statement.

We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected and processed. As a general rule, we retain Personal Data for up to two years following the end of the relevant business relationship or your last interaction with Yuvo. We may retain Personal Data for a longer period where necessary to comply with applicable legal or regulatory requirements, resolve disputes, establish or defend legal claims, prevent fraud or misuse, or for other purposes permitted under applicable Data Protection Laws.

Access to Personal Data within Yuvo is limited to authorised personnel of Yuvo Travel Inc., Yuvo Group Inc., and their relevant affiliates who require access for the purposes described in this Privacy Statement. Access is granted on a need-to-know basis and subject to appropriate confidentiality and security requirements.

We, our business partners, and our service providers may use cookies and similar technologies on our websites and other online Services to operate and secure our Services, remember your preferences, understand how our Services are used, perform analytics, and support advertising and personalisation activities.

Where required by applicable Data Protection Laws, we obtain your consent before using non-essential cookies or similar technologies and provide you with options to manage your preferences.

Our use of cookies is governed by our Cookie Policy.

We may disclose Personal Data to third parties where reasonably necessary for the purposes described in this Privacy Statement or otherwise permitted or required under applicable Data Protection Laws, including:

• with your consent or at your direction;

• where necessary to provide, operate, support, maintain, or improve the Services;

• where necessary to manage our relationships with you, our customers, or business partners;

• within Yuvo, where access is necessary for relevant business purposes;

• to business partners, service providers, technology providers, and other third parties that support or participate in the provision or operation of our Services;

• where required to comply with applicable laws, legal obligations, court orders, or lawful requests from public authorities;

• where necessary to establish, exercise, or defend legal claims or protect our rights and interests; and

• where necessary to prevent, investigate, or address fraud, misuse, security incidents, or other unlawful activities.

We may engage business partners and service providers to perform or support certain activities in connection with our Services, including technology and infrastructure, analytics, fraud prevention, and other operational activities. We seek to limit the Personal Data disclosed to what is reasonably necessary for the relevant purpose.

Where required by applicable Data Protection Laws or appropriate to the nature of the relationship, we enter into contractual arrangements with recipients that include appropriate privacy, confidentiality, security, and data protection requirements. Service providers processing Personal Data on our behalf may process such data only in accordance with the applicable contractual arrangements and Data Protection Laws.

Where reasonably practicable, we seek to use infrastructure and service providers located in the European Economic Area for the processing and storage of Personal Data. However, certain processing activities may take place outside the European Economic Area, including in the United States.

Where the disclosure or other processing of Personal Data constitutes an international transfer under applicable Data Protection Laws, we use appropriate transfer mechanisms and safeguards as required by applicable Data Protection Laws.

The security of Personal Data is important to us. We implement and maintain appropriate technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, and other unlawful or unauthorised processing.

These measures are designed taking into account the nature of the Personal Data, the nature and scope of the processing, available technology, and the risks associated with the processing.

Questions regarding the security of Personal Data may be directed to [email protected].

Depending on where you are located and the applicable Data Protection Laws, you may have certain rights in relation to your Personal Data. These may include the right to:

• request information about how we process your Personal Data and obtain access to it;

• request correction of inaccurate or incomplete Personal Data;

• request deletion of your Personal Data;

• request restriction of, or object to, certain processing activities;

• request portability of your Personal Data;

• withdraw your consent where processing is based on consent;

• opt out of certain uses or disclosures of your Personal Data; and

• exercise other privacy rights available to you under applicable Data Protection Laws, subject to any conditions, limitations, or exceptions provided by such law.

Where available under applicable Data Protection Laws, you may also have the right to lodge a complaint with or otherwise contact the competent privacy or data protection authority.

To exercise your privacy rights or ask questions about our processing of your Personal Data, please contact us at [email protected].

We may need to verify your identity before processing certain requests. We will respond within the timeframe required by applicable Data Protection Laws.

We may use Personal Data to send you marketing communications, including by email, SMS, RCS, WhatsApp, newsletters, or other communication channels. These communications may include information about our Services, promotions, surveys, feedback requests, as well as products or services offered by our business partners or other third parties.

Where required by applicable law, we will obtain your consent before sending marketing communications. Where consent is not required, we may send such communications where otherwise permitted by applicable privacy, electronic communications, and marketing laws, subject to any applicable conditions and opt-out requirements.

We may analyse Personal Data relating to your interactions with Yuvo, including your use of our websites, communications, and Services, to understand your preferences and interests, select and personalise advertisements, offers, recommendations, and other content, and measure the performance and effectiveness of our marketing activities.

We may also offer newsletters or similar marketing communications. Where permitted by applicable law, we may process information about the delivery, opening, clicking, or other interaction with such communications in order to understand their relevance, measure their performance, and improve future communications.

We may work with business partners, advertising platforms, social media platforms, and other service providers to display advertising on our websites or on other websites and platforms, promote our Services, create or select audiences, provide personalised advertising, and measure or improve the effectiveness of our advertising. These activities may involve the use of cookies and similar technologies, as further described in our Cookie Policy.

Where available in your region, you may manage certain interest-based advertising preferences through Your Online Choices. Please note that opting out of personalised or interest-based advertising does not necessarily prevent you from receiving non-personalised advertisements.

We use Google services to provide, measure, promote, and improve our Services, including in connection with personalised advertising. Google may process Personal Data received through its services in accordance with its own terms and privacy practices. Further information about how Google uses Personal Data in this context is available through Google's Business Data Responsibility resources.

You may opt out of receiving marketing communications at any time by using the unsubscribe or preference-management options provided in the relevant communication or by contacting us at [email protected]. Your marketing preferences will not affect communications that are necessary to provide the Services, manage our relationship with you, or comply with applicable legal requirements.

Yuvo Travel Inc. maintains profiles on social media platforms to present Yuvo and our Services, communicate with users and business partners, and support our marketing and promotional activities.

When you visit or interact with our social media profiles, including by following our profiles, commenting on or sharing our content, or contacting us through a social media platform, we may process Personal Data made available to us through that interaction in order to communicate with you, respond to enquiries, manage our social media presence, and understand engagement with our content.

Social media platforms may independently collect and process information about your use of their services, including for analytics, personalisation, and advertising purposes. Such processing is governed by the terms and privacy policies of the relevant platform. We may also receive aggregated statistics, insights, or other information from these platforms relating to interactions with our profiles and content.

We currently maintain profiles on the following social media platforms:

• Facebook – Privacy Policy.

• Instagram – Privacy Policy.

• X – Privacy Policy.

• LinkedIn – Privacy Policy.

• YouTube – Privacy Policy.

These platforms are operated by their respective providers, which may process Personal Data independently in accordance with their own privacy policies and applicable Data Protection Laws.

For further information about how these platforms process Personal Data and the privacy controls available to you, please refer to their respective privacy policies and settings.

From time to time, we may conduct surveys, request feedback, or invite you to participate in research activities to better understand the needs and experiences of our users, customers, and business partners and to improve our Services.

If you choose to participate, we may process the Personal Data and other information you provide in connection with the survey, feedback, or research activity. We retain such information in accordance with the retention principles described in this Privacy Statement.

We may carry out reasonable verification and due diligence activities in connection with our business partners and prospective business partners in order to verify relevant business information, prevent fraud or misuse, manage legal and compliance risks, and protect Yuvo and our business partners.

Where necessary for these purposes, we may process Personal Data relating to individuals associated with a business partner, such as authorised representatives or beneficial owners. This may include verifying relevant information against publicly available or other appropriate sources and, where appropriate, conducting sanctions or politically exposed person screening.

Yuvo is responsible for maintaining this Privacy Statement and for supporting compliance with applicable Data Protection Laws and our internal privacy requirements.

Each Yuvo entity responsible for a particular processing activity is responsible for complying with applicable Data Protection Laws in relation to that processing. We maintain appropriate records and documentation concerning our processing activities where required by applicable Data Protection Laws.

Questions concerning this Privacy Statement or our processing of Personal Data may be directed to [email protected].

If you have any concerns or complaints regarding our processing of Personal Data or our privacy practices, you may contact us at [email protected]. We will review and respond to complaints in accordance with applicable Data Protection Laws.

Where available under applicable Data Protection Laws, you may also lodge a complaint with or otherwise contact the competent privacy or data protection authority.

We may update this Privacy Statement from time to time to reflect changes in our Services, processing activities, corporate structure, legal requirements, or other relevant circumstances.

Where required by applicable Data Protection Laws, or where changes materially affect how we process Personal Data, we will provide appropriate notice of such changes. We encourage you to review this Privacy Statement periodically for the latest information about our privacy practices.

Last updated: 7 October 2026

If you have any questions about this Privacy Statement or our processing of Personal Data, you may contact us at [email protected].

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), the following information supplements our Privacy Statement and explains how we process your Personal Data under the GDPR and UK GDPR, as applicable.

We process Personal Data only where we have an appropriate legal basis under the GDPR or UK GDPR. The legal basis depends on the purpose and circumstances of the relevant processing activity.

In particular, we may rely on the following legal bases:

Where we use automated or AI-enabled tools, the legal basis for the processing depends on the underlying purpose for which the tool is used and is determined in accordance with the principles described above.

Where we rely on legitimate interests, we consider whether the processing is necessary for the relevant interest and whether your interests, rights or freedoms override those interests.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

We may obtain Personal Data about you from sources other than directly from you, including from our business partners, prospective business partners, service providers, affiliated companies, publicly available sources, and other third parties where permitted by applicable law. This may include information obtained from publicly available corporate and beneficial ownership registers, official sanctions lists, and third-party compliance or screening providers, where applicable.

Depending on the relevant processing activity, such Personal Data may include identification and contact information, professional or business-related information, information concerning your relationship with a business partner, and information relevant to business partner verification, due diligence, fraud prevention, sanctions or PEP screening.

Where the GDPR or UK GDPR requires us to provide you with information about processing based on Personal Data obtained from another source, we will provide the relevant information within the timeframe and in the manner required by applicable law, unless an applicable exception applies.

We do not generally seek to process special categories of Personal Data or Personal Data relating to criminal convictions and offences.

However, such information may occasionally be processed where necessary in connection with business partner due diligence, sanctions screening, fraud prevention, legal compliance, or the establishment, exercise or defence of legal claims.

Where we process special categories of Personal Data, we do so only where an applicable condition under Article 9 of the GDPR or UK GDPR is satisfied, in addition to an appropriate legal basis under Article 6.

Where we process Personal Data relating to criminal convictions or offences, we do so only where permitted under Article 10 of the GDPR or UK GDPR and applicable EEA Member State or UK law, as relevant.

For certain social media analytics features, Yuvo and the relevant social media platform may act as joint controllers under applicable Data Protection Laws. This may include, for example, Meta and LinkedIn Page Insights.

Where such joint controllership applies, the respective platform’s joint controller arrangement governs the allocation of responsibilities between Yuvo and the platform. Further information about the processing and the relevant arrangement is available through the privacy information provided by the respective social media platform.

If the GDPR or UK GDPR applies to the processing of your Personal Data, you may have the following rights, subject to the conditions and limitations provided by applicable law:

• Access – you may request confirmation as to whether we process your Personal Data and obtain access to that Personal Data and related information.

• Rectification – you may request correction of inaccurate Personal Data and completion of incomplete Personal Data.

• Erasure – you may request deletion of your Personal Data in circumstances provided by applicable law.

• Restriction – you may request that we restrict the processing of your Personal Data in certain circumstances.

• Data portability – where applicable, you may request to receive Personal Data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller.

• Objection – where we rely on legitimate interests as a legal basis, you may object to processing on grounds relating to your particular situation. We may continue the processing where we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or where the processing is necessary for the establishment, exercise or defence of legal claims.

• Withdrawal of consent – where processing is based on your consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

You have an absolute right to object at any time to the processing of your Personal Data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing. If you object, we will no longer process your Personal Data for those purposes.

You may exercise these rights by contacting us at [email protected]. We may request additional information where reasonably necessary to verify your identity or authority to make the request.

We will respond to valid requests without undue delay and, in principle, within one month. Where permitted by applicable law, this period may be extended by up to a further two months where necessary, taking into account the complexity and number of requests. If we extend the response period, we will inform you of the extension and the reasons for it within the initial one-month period.

Requests are generally handled free of charge. However, where permitted by applicable law, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.

We do not currently make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

If we introduce such processing in the future, we will do so only where permitted under applicable Data Protection Laws and will provide the information and safeguards required by law. Where applicable, these safeguards may include the right to obtain human intervention, make representations regarding the decision, and contest the decision.

As described in our Privacy Statement, Personal Data may in certain circumstances be transferred to or accessed from countries outside the EEA or UK, including the United States.

Where such processing constitutes an international transfer subject to the GDPR or UK GDPR, we use an appropriate transfer mechanism as required by applicable law.

For transfers from the EEA, these mechanisms may include:

• an adequacy decision adopted by the European Commission;

• the EU-U.S. Data Privacy Framework, where the relevant U.S. recipient is certified to participate in the framework;

• the European Commission’s Standard Contractual Clauses (“SCCs”), together with any supplementary measures required in the circumstances; or

• another transfer mechanism or derogation permitted under the GDPR.

For transfers from the UK, these mechanisms may include:

• applicable UK adequacy regulations;

• the UK Extension to the EU-U.S. Data Privacy Framework, where the relevant U.S. recipient participates in the UK Extension;

• the UK International Data Transfer Agreement (“IDTA”) or the UK Addendum to the EU Standard Contractual Clauses; or

• another transfer mechanism or exception permitted under the UK GDPR.

You may contact us at [email protected] for further information about the transfer mechanisms and safeguards applicable to your Personal Data.

Where required by applicable EEA or UK electronic communications and privacy laws, we obtain your consent before using non-essential cookies or similar technologies, including technologies used for advertising, personalisation, or certain analytics purposes.

Where consent is required, you may withdraw or change your consent at any time through the cookie preference tools made available on our Services. Further information about the technologies we use and the choices available to you is provided in our Cookie Policy.

We also obtain consent before sending electronic direct marketing communications where required by applicable law. In certain circumstances, applicable law may permit us to send marketing communications without prior consent, for example in connection with an existing customer relationship, subject to the conditions and opt-out requirements provided by applicable law.

You may opt out of direct marketing communications at any time using the unsubscribe or preference-management options provided in the relevant communication or by contacting us at [email protected].

If you have any questions about the processing of your Personal Data or wish to exercise your rights under the GDPR or UK GDPR, you may contact Yuvo at [email protected].

If you are located in the EEA, you have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

If you are located in the UK and submit a data protection complaint to us, we will acknowledge receipt of your complaint within 30 days, take appropriate steps to investigate and respond to it without undue delay, keep you appropriately informed, and communicate the outcome of our investigation.

You may also lodge a complaint with the Information Commissioner’s Office (“ICO”).

If you reside in the United States, the following information supplements our Privacy Statement and applies to the extent that Yuvo is subject to applicable U.S. federal or state privacy laws in relation to the processing of your Personal Data.

Privacy rights and requirements may vary depending on your state of residence and the context in which we process your information. In particular, certain state privacy laws may exclude or limit rights in relation to information processed in an employment, business-to-business, or other commercial context.

For the purposes of this section, “Personal Information” includes Personal Data as defined in our Privacy Statement to the extent that such information is considered personal information, personal data, or an equivalent term under applicable U.S. privacy laws.

Depending on how you interact with Yuvo, we may collect the following categories of Personal Information:

We may also process other categories of Personal Information where necessary for a particular Service or activity and where permitted under applicable law. Sensitive Personal Information is addressed separately below.

We retain each category of Personal Information only for as long as reasonably necessary for the purposes for which it is processed. In determining the appropriate retention period, we consider the duration of our relationship with you or the relevant business partner, the nature and purposes of the processing, applicable legal and regulatory requirements, security and fraud prevention requirements, and the need to establish, exercise or defend legal claims. Further information is provided in the Retention and access to Personal Data section of our Privacy Statement.

We may disclose the categories of Personal Information described above to the categories of recipients identified in our Privacy Statement, including Yuvo affiliates, business partners, service providers, technology providers, advertising and social media platforms and, where appropriate, public authorities or other third parties.

Such disclosures may be made for the business and commercial purposes described in our Privacy Statement, including providing and improving the Services, managing business relationships, operating and securing our systems, analytics, fraud prevention, compliance, marketing, advertising and protecting our legal and business interests.

Yuvo does not sell Personal Information as defined under applicable U.S. privacy laws.

As described in our Privacy Statement and Cookie Policy, we may work with advertising platforms, social media platforms and other business partners or service providers to advertise our Services, personalise advertising, create or select audiences, and measure advertising performance. The categories of Personal Information processed through cookies and similar technologies are described in our Cookie Policy.

Depending on the technologies and advertising services used, certain disclosures of Personal Information to advertising partners may constitute “sharing” for cross-context behavioural advertising under the CCPA or processing for “targeted advertising” under other applicable U.S. state privacy laws.

Where applicable, you may opt out of such sharing or targeted advertising through the privacy preference tools made available on our websites. Where required by applicable law, we recognise and process qualifying universal opt-out mechanisms or opt-out preference signals, including the Global Privacy Control, as requests to opt out of applicable sale, sharing, or targeted advertising activities.

We do not process Personal Information for targeted advertising where prohibited by applicable law, including where we know or should know that a consumer is under 18 years of age.

Yuvo does not generally seek to collect or process Sensitive Personal Information as defined under applicable U.S. state privacy laws.

Certain information processed in connection with business partner due diligence, fraud prevention, sanctions screening, legal compliance, or similar activities may be considered sensitive under applicable law. Where we process such information, we use it only for purposes permitted under applicable law and apply any additional requirements that may apply to its collection, use, or disclosure.

We do not currently use or disclose Sensitive Personal Information for purposes that would require us to provide a right to limit its use or disclosure under the CCPA.

Depending on your state of residence and applicable law, you may have some or all of the following rights:

• to confirm whether we process your Personal Information;

• to access or obtain information about the Personal Information we process about you;

• to obtain a copy of your Personal Information;

• to correct inaccurate Personal Information;

• to request deletion of Personal Information;

• to obtain Personal Information in a portable and, where required, readily usable format;

• to opt out of the sale of Personal Information;

• to opt out of the sharing of Personal Information for cross-context behavioural advertising;

• to opt out of processing for targeted advertising;

• where provided by applicable law, to opt out of certain profiling carried out in furtherance of decisions that produce legal or similarly significant effects;

• where applicable, to limit certain uses or disclosures of Sensitive Personal Information;

• to exercise your privacy rights without unlawful discrimination, retaliation or denial of goods or services; and

• where provided by applicable law, to appeal our refusal to take action on a privacy request.

• where provided by applicable law, to obtain information about, or a list of, third parties to which we have disclosed your Personal Information

These rights are subject to the conditions, limitations and exceptions provided by applicable law.

You may submit a privacy request by contacting us at [email protected] or through any privacy request or preference-management tools that we make available on our websites.

We may take reasonable steps to verify your identity before fulfilling a request where verification is permitted or required by applicable law. We will only request information reasonably necessary for this purpose.

Where applicable law permits the use of an authorised agent, you may designate an authorised agent to submit a request on your behalf. We may request evidence that the agent is authorised to act for you and may, where permitted by law, ask you to verify your identity or confirm the authorisation directly with us.

We will respond to requests within the timeframe required by applicable law. Where permitted, we may extend the response period and will inform you of the extension and the reason for it.

We do not discriminate against you for exercising privacy rights provided by applicable law.

If applicable law provides you with a right to appeal and we decline to take action on your privacy request, you may appeal our decision by contacting [email protected] and indicating that your request is an appeal.

We will review and respond to the appeal within the timeframe required by applicable law. Where required, we will also provide information about how you may contact the relevant state authority regarding the outcome of your appeal.

If you are a California resident and the CCPA applies to our processing of your Personal Information, you have the rights provided by the CCPA, including the rights to know, access, correct and delete Personal Information, to opt out of the sale or sharing of Personal Information, to limit certain uses and disclosures of Sensitive Personal Information where applicable, and to exercise your rights without discriminatory treatment.

The categories of Personal Information that we may collect, the sources from which we obtain that information, the purposes for which we use it, and the applicable retention criteria are described above and in our Privacy Statement.

The categories of Personal Information that may be disclosed for business purposes include the categories described above, depending on the relevant activity. Such disclosures may be made to service providers, contractors, business partners and other recipients described in our Privacy Statement.

Yuvo does not sell Personal Information as defined under the CCPA.

During the 12 months preceding the “Last updated” date of this Privacy Statement, Yuvo did not sell or share Personal Information as defined under the CCPA.

During the 12 months preceding the “Last updated” date of this Privacy Statement, Yuvo did not disclose Personal Information to service providers or contractors for a business purpose as defined under the CCPA.

As described in our Privacy Statement and Cookie Policy, Yuvo may use advertising and similar technologies that involve disclosures of Personal Information to advertising networks, social media platforms, and advertising or analytics technology providers. Such disclosures may constitute “sharing” for cross-context behavioural advertising under the CCPA.

The categories of Personal Information that may be shared for these purposes include Identifiers and Internet or other electronic network activity information. Further information about the Personal Information processed through cookies and similar technologies, including the relevant technologies and providers, is available in our Cookie Policy.

California residents may opt out of such sharing through the privacy preference mechanism made available on our website. We also recognise qualifying opt-out preference signals, including the Global Privacy Control, as required by the CCPA.

Where the CCPA provides a right to limit the use or disclosure of Sensitive Personal Information and Yuvo engages in processing subject to that right, we will provide an appropriate mechanism to exercise it.

Yuvo does not have actual knowledge that it sells or shares Personal Information of consumers under 16 years of age.

Certain U.S. state privacy laws provide rights in relation to profiling or automated processing used to make decisions that produce legal or similarly significant effects.

We do not currently use profiling to make such decisions about individuals. If we introduce such processing, we will provide the notices, choices and other safeguards required by applicable law.

If you have questions about this U.S. Additional Information or wish to exercise an applicable privacy right, you may contact us at: [email protected]