Privacy Statement

Last Updated: March 20, 2026

Welcome to Lucky Orange!

This is the privacy statement (the "Privacy Statement") that governs how Lucky Orange LLC ("Lucky Orange") collects, uses, discloses, and otherwise processes Personal Data (defined below) in connection with www.luckyorange.com (the "Site") and any other website that links to this Privacy Statement. It also describes rights you may have under applicable laws. This Privacy Statement does not, however, apply to Lucky Orange in its role as a processor for its customers that use Lucky Orange services. Please review the Lucky Orange Data Processing Addendum to its Terms of Service, for more information on Lucky Orange's role as a processor.

As used herein, the terms "you" or "your" shall apply to individual users of the Site. If you have any questions or comments regarding this Privacy Statement, please contact us at privacy@luckyorange.com.

1. What is Personal Data?

As used in this Privacy Statement, "Personal Data" means information that uniquely identifies, relates to, describes, or is reasonably capable of being associated with or linked to you. When Lucky Orange combines other information (i.e., information that does not, on its own, identify you) with your Personal Data, Lucky Orange treats the combined information as Personal Data.

2. When Personal Data is Collected

Lucky Orange's Site may collect the following categories of Personal Data:

A. Contact, Account, and Billing Information. Lucky Orange processes Personal Data that you provide through creation and management of your account, if you contact us, or if you post a comment on a Lucky Orange blog, such as your name, e-mail address, and phone number. Lucky Orange also processes, via a third-party service provider, payment information for billing purposes.

B. User ID and Password Information. Lucky Orange processes Customers' user ID and password information to enable them to log into and use the Site. In the event you are able to log into the Site through a social networking site (e.g., Facebook or Twitter), Lucky Orange may receive Personal Data in accordance with the privacy notice of that site, which Lucky Orange may add to Personal Data you have previously provided.

C. IP Address and Header Information. Lucky Orange automatically collects certain information when you visit our Site, such as IP address and Header Information. "Header Information" is information such as browser type, geolocation, operating system, language, screen resolution, referring URL, etc. provided to our web server by your browser.

D. Traffic Data. Lucky Orange generates certain information about visitors' use of the Site such as pages visited, the visitor's mouse movements and clicks, keystroke data, HTML data on a page visited by a visitor if such HTML data includes Personal Data (collectively, "Traffic Data").

E. Communication Information. We may collect Personal Data contained within your communications with us via email, chat functionality, social media, telephone, or otherwise, and in certain cases we may use third-party service providers to do so. Where permitted by applicable law, we may collect and maintain records of calls and chats with our agents, representatives, or employees via message, chat, post, or similar functionality.

3. How Lucky Orange Uses Cookies and Similar Technology

To help operate the Site, enhance your experience, and collect information about online activity, Lucky Orange places small data files on your device known as "cookies," or other similar technologies (e.g., pixel tags, web beacons, local shared objects). We process the information collected through such technologies, which may include or be combined with Personal Data, to help operate certain features of the Site, including to store and manage your preferences and settings; measure and analyze how you use the Site and effectiveness of Lucky Orange communications; offer targeted products, programs, and services; and help Lucky Orange improve its products, services, and security.

Website Analytics – We use analytics services that use cookies and other technologies that collect your Personal Data, to assist us with analyzing our Site traffic and site usage to optimize, maintain, and secure our Site and inform subsequent business decisions (including, e.g., advertising). These include, but are not limited to, the following third-party services:

• Google Analytics: To learn more about how Google uses data, visit Google's Privacy Policy and Google's page on "How Google uses data from sites or apps that use our services." You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Analytics Cookie Usage on Websites.

• Pixels: We use Meta and Reddit pixels to track user activity on our Site and improve downstream offerings, including interest-based advertising for our services and those of our partners and service providers.

Interest-Based Advertising – We may also allow or enable third parties to collect Personal Data to provide their interest-based advertising on behalf of our products and services, or their own. Interest-based advertising occurs when advertisements are shown to you based on information collected from your online interactions over time and across multiple websites, devices, or online services that you visit or use. Some companies may engage in cross-context behavioral advertising to predict your preferences and show you advertisements that are most likely to be of interest or relevant to you.

We do not control these third parties' collection or use of your information for these purposes, or the opt-out options they may individually offer you via their terms, conditions, and privacy policies. If you have any questions about an advertisement or other targeted content, you should contact the applicable provider directly. Examples of the third-party service providers we engage to serve interest-based advertisements include Digital Window, Google Ads (including Google Signals, Google Dynamic Remarketing, and Google AdWords Conversion), Meta Ads (including Meta pixels and Facebook advertising services) and Microsoft Advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement. It is in this context that we may provide advertising networks, data analytics providers, social networks, and video sharing platforms with Personal Data such as your IP address, device information, Internet and other electronic network activity information, and geolocation information in the last twelve months.

Selling Personal Data – While we do not sell Personal Data in exchange for monetary consideration, we do disclose Personal Data for other benefits that could be deemed a "sale" under various data protection laws because it is sometimes broadly defined to include activities such as the delivery of interest-based advertising on websites or allowing third parties to receive certain information, such as cookies, IP address, and/or browsing behavior.

You may wish to restrict the use of cookies or completely prevent them from being set. If you disable cookies though, please be aware that some of the features of the Lucky Orange Site may not function correctly. To manage your preferences with respect to cookies, please visit your browser as most modern browsers allow you to change your cookie settings. You can usually find these settings in the options or preferences menu of your browser.

You may also review and execute any provider-specific instructions to customize your preferences or opt-out of certain processing, including interest-based advertising, by third-party service providers. For example, to opt-out of this type of advertising by Google, customize your ad preferences, or limit Google's collection or use of your data, visit Google's Safety Center and Google's Ad Settings and follow Google's personalized ad opt-out instructions. Meta also offers an Ad Preferences center to customize your settings, as well as a Privacy Policy with additional information on how you can exercise your rights.

4. The Purposes and Use of Personal Data

To the extent permitted by applicable law, Lucky Orange uses Personal Data to:

• Provide, analyze, administer, improve, and personalize the Site;

• Contact you in connection with the Site, notifications, programs or offerings that you may have registered for;

• Send you updates and promotional materials;

• Provide personalized advertising to you;

• Identify and authenticate your access to the parts of the Site that you are authorized to access;

• For recruiting and human resources administration purposes; and

• Protect Lucky Orange rights and/or property and to ensure the technical functionality and security of the Site.

• To fulfill any other purpose for which you provide it, including purposes described when you provide the information or give your consent.

5. To Whom Personal Data Is Disclosed

Lucky Orange may disclose aggregated information about our users, and information that does not identify any individual, without restriction. Lucky Orange may disclose your Personal Data with your consent or in the following circumstances.

A. Our Service Providers. Lucky Orange employs service providers to perform tasks on its behalf and to assist in providing the Site. For example, Lucky Orange may share your Personal Data with service providers who assist in the performance of core Site functions (such as hosting, data storage, and security) related to the operation of the Site and/or by making certain interactive tools available to you. Lucky Orange also uses third parties for technical and customer support, application development, tracking and reporting functions, quality assurance, and other services.

B. Advertising. Lucky Orange engages advertising services to assist in advertising its Site. From time to time, those services target advertisements on third-party websites based on cookies or other information indicating previous interaction with the Site.

C. Companies Involved in Mergers and Acquisition Transactions or Change of Control. In some cases, Lucky Orange may choose to buy or sell assets. In these types of transactions, user data (including Personal Data) is typically one of the business assets transferred. If Lucky Orange were to sell all or substantially all of its assets or is otherwise acquired under a change of control event, Personal Data would be one of the assets that is reviewed and transferred or acquired by a third party. Lucky Orange may transfer Personal Data to a third party entity in the event of some other change of control (such as the result of a bankruptcy proceeding).

D. Law Enforcement, Government Agencies, and Courts. Lucky Orange may disclose Personal Data at the request of law enforcement or government agencies or in response to subpoenas, court orders, or other legal process to establish, protect, or exercise our legal or other rights or to defend against a legal claim or as otherwise required or allowed by law, or to protect the rights, property, or safety of any other person. Lucky Orange may also disclose Personal Data to investigate or prevent a violation by you of any contractual or other relationship with Lucky Orange (such as a violation of the Terms of Service) or your illegal or harmful activity.

E. Other. Lucky Orange may disclose Personal Data to third parties when explicitly requested by or consented to by you, or for the purposes for which you disclosed the Personal Data to us as indicated at the time and point of the disclosure (or was obvious at the time and point of disclosure).

6. Opt-Out of Marketing Communications

You may choose not to receive future promotional or advertising emails from Lucky Orange by selecting an unsubscribe link at the bottom of any email that you receive from Lucky Orange. Additionally, you may send a request specifying your communications preferences to privacy@luckyorange.com. Please note that even if you opt out of receiving the foregoing emails, Lucky Orange may still send you a response to any "Contact" request as well as administrative, maintenance and operational emails (for example, in connection with a password reset request).

At the top of this page and in the link provided here, Lucky Orange provides access to a data privacy management tool that allows you to opt out of being tracked by the Lucky Orange's technologies.

7. Personal Data from Children

Lucky Orange does not knowingly collect the Personal Data of children under the age of sixteen (16). If Lucky Orange learns that it has collected Personal Data from children, and there is no lawful basis or parental consent to process such Personal Data, Lucky Orange will use commercially reasonable efforts to delete all such Personal Data. If you believe we might have any information from or about a child, please contact us at privacy@luckyorange.com.

8. Retention of Personal Data

Lucky Orange will retain your Personal Data for the period necessary to fulfill the purposes for which your Personal Data has been collected as outlined in this Privacy Statement, unless a longer retention period is required by law. Criteria we will use to determine how long to retain your Personal Data include the nature and length of our relationship with you; our legal rights, obligations, and retention requirements; and if we have an ongoing business purpose for retaining your Personal Data.

9. How We Protect Your Personal Data

Lucky Orange has implemented security measures to protect Personal Data from loss, misuse, and alteration. Despite efforts to store Personal Data in a secure operating environment, Lucky Orange does not and cannot guarantee the security of Personal Data during its transmission or storage on our systems. Lucky Orange does not represent or warrant that Personal Data about you will be protected against, loss, misuse, or alteration by third parties.

10. Links to Third Party Websites

The Site may contain links to third party websites. Please be aware that Lucky Orange is not responsible for the privacy practices of third-party websites you choose to visit. If you provide any information directly to parties other than Lucky Orange, different rules may apply to the use or disclosure of that information. Lucky Orange encourages you to investigate and ask questions before disclosing your Personal Data to third parties.

In some cases, we offer links to social media platforms (like LinkedIn, Instagram, YouTube, Facebook, X (formerly known as Twitter), and TikTok) that enable you to easily connect with us or share information on social media. Any content you post via these social media pages is subject to the terms of use and privacy policies for those platforms.

11. Your Privacy Rights and How to Exercise Them

Depending on where you live, you may have the following rights with respect to your Personal Data under applicable data protection law:

• Access – You may have the right to know what Personal Data we have collected about you and to access such Personal Data.

• Deletion – You may have the right to delete your Personal Data that we have obtained, subject to certain exceptions.

• Correction – You may have the right to correct inaccuracies in your Personal Data.

• Opt Out of Certain Processing – You may have the right to: (a) opt out of the processing of your Personal Data for purposes of targeted advertising, (b) opt out of the sale or sharing of your Personal Data; (c) limit the use of your Sensitive Personal Data (if applicable), and (d) opt out of the processing of your Personal Data for profiling in furtherance of decisions that produce legal or similarly significant effect concerning you. We do not collect or process sensitive Personal Data outside of purposes permitted by law, so we do not offer the option to limit its use.

• Objection/Restriction of Processing – The right to object or restrict us from processing your Personal Data in certain circumstances.

• Withdraw Consent – The right to withdraw your consent where we are relying on your consent to process your Personal Data.

• Automated Decision-Making – The right to know when you are subject to automated decision-making, the Personal Data used to render the decision, the principal factors and parameters involved in the decision, and human review or correction of the decision (or its underlying data, where appropriate). You may also have the right, depending on your location, to consent or opt out of (a) this automated decision-making or (b) any profiling in furtherance of decisions that produce legal or similarly significant effects. We do not profile you or other individuals in a manner that would result in legal or similarly significant effects, or engage in automated decision-making, so we do not offer an opt out of such activity.

• Lodge a Complaint – The right to lodge a complaint with a supervisory authority or other regulatory agency if you believe we have violated any of the rights afforded to you under applicable data protection laws. We encourage you to first reach out to us so we have an opportunity to address your concerns directly before you do so.

To exercise any of the privacy rights afforded to you under applicable data protection laws, please submit a request to us by one of the following methods:

• E-mailing us at privacy@luckyorange.com

• Completing the Data Subject Consumer Request Form

You will not be discriminated against in any way by virtue of your exercise of your rights listed in this Privacy Statement. However, should you withdraw your consent or object to processing of your Personal Data, or if you choose not to provide certain Personal Data, we may be unable to provide some, or all, of our services to you.

Only you, or an authorized agent that you authorize to act on your behalf, may make a request related to your Personal Data. We may need to verify your identity before fulfilling your requests. If we cannot initially verify your identity, we may request additional information to complete the verification process. If you are an authorized agent making a request on behalf of another person, we will also need to verify your identity, which may require proof of your written authorization or evidence of a power of attorney.

We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

We may deny certain requests, or only fulfill some in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.

12. Individuals in the European Union, European Economic Area, Switzerland, and the United Kingdom

This section provides additional information regarding Lucky Orange's processing of Personal Data of people located in the European Union (EU), European Economic Area (EEA), Switzerland, and the United Kingdom (UK) in accordance with the EU Data Protection Regulation, UK Data Protection Regulation, and the Swiss Federal Data Protection Act.

Legal Bases for Processing

Our legal basis for processing Personal Data depends on the Personal Data involved and the context in which we process it. Where Lucky Orange acts as a controller, we process your Personal Data: with your consent; where necessary to perform a contract; to comply with our legal obligations; and where doing so is in our legitimate interests (including the purposes described in this Privacy Statement) and such interests are not outweighed by your rights and freedoms.

Special Category Data

Lucky Orange does not intend to collect any Special Category Data, which is any data that reveals your racial or ethnic origin, political opinions, religious, moral or philosophical beliefs, trade union membership, political views, the processing of genetic data, biometric data for the purpose of identifying a person, and data concerning health or a person's sex life and/or sexual orientation. Please refrain from sending us any Special Category Data.

13. Your California Privacy Rights

This section provides additional information regarding Lucky Orange's practices pursuant to the California Consumer Privacy Act of 2018 and its implementing regulations, as amended by the California Privacy Rights Act ("CCPA"), where "Personal Information" has the definition set forth in the CCPA. Please see the chart below for detailed information about the categories of Personal Information we have collected from California residents during the twelve months preceding the date on which this Privacy Statement was last updated and the categories of third parties to whom we Sell or Share Personal Information (as those terms are defined in the CCPA). For each category of Personal Information set forth in the chart below, the categories of third parties to whom we disclose it for a business or commercial purpose are set forth in the How We Disclose Personal Information section above.

California Shine the Light – Under California Civil Code Section 1798.83, individual customers who reside in California and who have an existing business relationship with us may request information about our disclosure of certain categories of Personal Data to third parties for the third parties' direct marketing purposes, if any. To make such a request, please contact us at privacy@luckyorange.com. Please be aware that not all information sharing is covered by these California privacy rights requirements and only information on covered sharing will be included in our response. This request may be made no more than once per calendar year.

14. Changes to the Privacy Statement

Lucky Orange may revise and update this Privacy Statement at any time and will post the updated Privacy Statement to the Site. If these changes are material (i.e., changes believed to be of importance to you), Lucky Orange will post notice of material changes on the Site. Unless otherwise indicated, any changes to this Privacy Statement shall be effective immediately upon posting to the Site. You are responsible for periodically visiting our Site and this Privacy Statement to check for any changes.

15. Contact

If there are any questions regarding this Privacy Statement you may contact Lucky Orange using the information below:

https://help-preview.luckyorange.com/

privacy@luckyorange.com

8665 W 96th St Suite #100 Overland Park, KS 66212 USA

Version 3/20/26. Copyright © Lucky Orange LLC 2024. All rights reserved.