Effective Date: August 25, 2021

1. OVERVIEW

This privacy policy ("Policy") applies to DailyLook, Inc. ("DailyLook," "we," or "us") including the DailyLook.com website ("our website") and the DailyLook mobile application ("our app"). We strive to deliver outstanding services and products to our customers and we value your patronage. We recognize that privacy is an important issue. We have developed this Policy to explain our practices regarding the personal information we collect from you or about you when you purchase products and services from us, through written or verbal communications with us, or when you use our website and app. While this Policy broadly describes the practices we have adopted across DailyLook within the United States, local laws vary, and some jurisdictions may place restrictions on our collection, use, or disclosure of personal information. Our actual practices in such jurisdictions may be more limited than those described in this Policy to comply with local requirements. If you are a resident of California, please see Appendix A for information regarding our use of your personal information. If you are a resident of Nevada, please see Appendix B for information regarding our use of your personal information.

By accessing or using our website, app, or submitting information to us, or otherwise agreeing to this Policy, e.g., in the context of registering for any of our products or services, you understand and consent to our collection and use of your personal information as described herein.

Please note that this Policy does not apply to our processing of personal information on behalf of and subject to the instructions of third parties.

2. PERSONAL INFORMATION WE COLLECT

We may collect personal information at every consumer interaction and in conducting every aspect of our business. We collect personal information that you provide directly to us on our website or app when you establish an account, order a box, or purchase goods. We may also collect information related to conversations, including records or copies of your correspondence with us or customer service calls for quality assurance and training purposes, and other communications such as website chat support, in-app messages, or SMS.

We collect personal information in certain common cases, including:

Establishing an Account: When you establish an account, we will collect personal information, including first name, last name and e-mail address, height, weight, body type, date of birth, clothing sizes, undergarment sizes, upper body fit preferences, lower body fit preferences, body proportions, shoe size, style preferences, celebrity or blogger style preferences, occupation, parental status, dress style frequency, types of clothing desired, active wear preference, favorite stores, favorite brands, exposure preferences, spending ranges, trendy vs. classic preferences, accessory and jewelry style preferences, color preferences, print style preferences and social media user names, shipping address, billing address, telephone number, credit card name, credit card number, expiration date and security code, shipping date and shipping frequency. The personal information described in this paragraph is the "Account Data."

Purchase of Goods: In connection with your purchase of goods from us through our Website or App, we collect personal information. The information we collect in these cases may include first name, last name; shipping address; billing address; telephone number; e-mail address; account name, account password; goods purchased; goods returned; date of purchase; invoice number; credit card number, expiration date and security code; and customer comments. The personal information described in this paragraph is the "Purchase Data."

Newsletter: If you subscribe to receive our newsletter or e-mail announcements regarding new products, services or promotions, we collect personal information including first name, last name; e-mail address; account name and password. The personal information described in this paragraph is "Newsletter Data"

Social Media: If you choose to participate in DailyLook-sponsored social media activities or offerings, we may collect certain information from your social media account consistent with your settings within the social media service, such as location, check-ins, activities, interests, photos, status updates, and friends list. Our professional stylists may view your social media to help them curate apparel to match your tastes and preferences. The personal information described in this paragraph is the "Social Data."

Comments: We may collect personal information through customer service chat, communications with our stylists, suggestion box comments and reviews that you post on our website or app. The information we collect may include name; date; goods purchased; issues; problems; ratings; opinions; experiences; and preferences. The personal information described in this paragraph is the "Comment Data."

Automatically Collected Personal Information: By their nature, our website and apps also automatically collect some personal information about you. In order for you to view or interact with our website or app, we receive individual identifiers like your IP address, and some network information like the date and time of pages visited. We may collect this personal information even if you are not logged in. We collect some personal information automatically using cookies or other tracking technologies as described below in Section 7. The personal information automatically collected may be collected by or on behalf of third parties who may provide us inferences or aggregate reporting based on analysis of such personal information. The personal information described in this paragraph is the "Use Data."

Employee Data: We collect information in the context of your role as an applicant to, an employee of, director of, or officer of, our business. The personal information we collect in these cases may include name, social security number, address, date of birth, gender, race, ethnicity, bank account and routing number, tax filing status, emergency contact information, telephone number, family member names, educational background, criminal background and employment history, medical provider information, dependent name, date of birth, gender and address, medical insurance provider, compensation and benefits data, workplace, and title. We only use this information for purposes of evaluating qualifications related to your job application or your job duties; or for providing compensation, benefits, and services in the context of the employment relationship. The personal information described in this paragraph is the "Employee Data."

In addition to the information we collect from you directly, we may also infer information about you based on the information you provide to us or from other information we collect.

3. PERSONAL INFORMATION FROM OTHER SOURCES

We may collect personal information about you from a number of sources in addition to those means of collection indicated above, including offline or through sources unrelated to your interaction with our website or app. For example, we may collect personal information from publicly accessible sources (e.g., property records); directly from a third party, (e.g., credit reporting agencies or customer due diligence providers); or from a third party with your consent (e.g., your bank). We may merge or co-mingle that personal information with the personal information we maintain about you and other data collected on or through our website.

4. PURPOSES FOR WHICH WE COLLECT PERSONAL INFORMATION

In addition to the reasons set forth above, we collect your personal information for the following reasons:

• Selecting and delivering apparel to you to match your taste and style preferences and selling goods to you based on your selections.
• Improving your online experience
• Supporting our continuing efforts to offer you the services and products you want most.
• Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business;
• Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards;
• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
• Debugging to identify and repair errors that impair existing intended functionality;
• Short-term, transient use; provided that the personal information is not disclosed to a third party and is not used to build a profile about a consumer or otherwise alter an individual consumer's experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction;
• Undertaking internal research for technological development and demonstration; and
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
• Reporting to government entities as required by law.

5. LIMITED USE

We will only use your personal information for the purposes for which we have collected it, unless we reasonably determine we need to use it for another reason and that reason is compatible with the original purpose. For example, we consider de-identification, aggregation, and other forms of anonymization of personal information to be compatible with the purposes listed above and in your interest, because the anonymization of such information reduces the likelihood of improper disclosure of that information.

If you wish to receive an explanation as to how the processing for a particular purpose is compatible with the original purpose, please contact us via the information specified in the Contact section below.

PLEASE NOTE THAT WE MAY PROCESS YOUR PERSONAL INFORMATION WITHOUT YOUR KNOWLEDGE OR CONSENT, IN COMPLIANCE WITH THE ABOVE RULES, WHERE THIS IS REQUIRED OR PERMITTED BY LAW.

6. HOW WE SHARE PERSONAL INFORMATION

In order to provide you with the best products and services, we share your personal information among our affiliates, service providers, and other third parties as described below.

6.1 Fulfillment Providers. We share personal information with companies that help us fulfill requests and orders for products and services ("Fulfillment Providers") including, but not limited to, credit card processors and shipping companies.

6.2 Advertising Networks. We share personal information with third parties who help us market to you through advertising online and otherwise ("Advertising Networks") as further described in Section 7 of this Privacy Policy.

6.3 Service Providers. We may, from time to time, use business partners, suppliers, and sub-contractors ("Service Providers") to assist us with the provision of services to you (for example, without limitation, website hosting, app design, maintenance services, database management, web analytics, app analytics, billing, payment processing, fraud protection, credit risk reduction, marketing, or improvement of services). These Service Providers have access to your personal information only to perform the respective tasks assigned to them on our behalf, and are obligated not to disclose or use it for any other purpose.

6.4 Compliance with Laws. We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We may disclose your personal information to government or law enforcement officials or private parties in response to lawful requests when we believe disclosure or sharing is necessary to comply with any legal obligation, enforce or apply our terms and conditions, respond to claims and legal process, protect our services, members, dealers, our rights and/or the safety of the public or any person, or prevent or stop any illegal, unethical or legally actionable activity (including for the purposes of fraud protection).

6.5 Sale or Transfer of Business or Assets. We may share some or all of your personal information in connection with or during negotiation of any merger, financing, acquisition or dissolution transaction, or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets. In the event of an insolvency, bankruptcy, or receivership, personal information may also be transferred as a business asset. If another company or individual acquires our business, or assets, that company or individual will possess the personal information collected by us and will assume the rights and obligations regarding your personal information as described in this Policy.

6.6 Other Legitimate Business Purposes. We may also disclose your personal information when it may be necessary for other legitimate purposes as reasonably determined by us and as permitted by law.

7. COOKIES AND OTHER TRACKING TECHNOLOGIES

Third parties, including Google and Facebook, may use cookies, web beacons, and other storage technologies to collect or receive information from our website and elsewhere on the internet and use that information to provide measurement services and target ads. You can opt-out of the collection and use of information for ad targeting using the options described in the Opting Out section below. The tracking technologies we utilize include the following:

7.1 Cookies. We may use different types of cookies when providing different types of web-related services. If you do not know what cookies are, or how to control or delete them, then we recommend you visit www.aboutcookies.org for detailed guidance. Cookies allow us to identify and authenticate visitors, track aggregate behavior, and enable important service features. We use both session ID cookies and persistent cookies. Session ID cookies are used to maintain your browser state as you browse through services, and they expire when you close your browser. A persistent Cookie remains on your hard drive for an extended period, and we use that to allow you to add items to your cart and checkout, and to identify you should you return to services and want to find information you had previously entered or accessed. If you have signed up for SMS text messaging from DailyLook, we also use persistent cookies to record activity on our site, and provide SMS text messaging about our products, services, and promotions.

We may also contract with analytics services, third-party affiliate services, and third-party advertising companies to collect similar information. These cookies allow the ad servers to recognize your computer each time they send you an online advertisement, and compile information about you or others who use your computer. This information allows such Advertising Networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you.

You may disable cookies through your web browser. For information about opting out of these collection services, please see the Your Choices section below.

7.2 Web Beacons/Tags. We may automatically collect aggregate anonymous information through files embedded in our services and emails known as "web beacons." We may deliver a web beacon to you through our services from an Advertising Network with which we have contracted. Web beacons allow third parties to provide anonymized and aggregated auditing, research, and reporting for us. Web beacons also allow us to tell whether email recipients are able to properly view messages or if email messages have been opened, to ensure that we are sending only messages that are of interest to our users. We may use this information to reduce or eliminate messages sent to users. We do not tie the information gathered by web beacons to personal information.

7.3 Analytics. We may use analytics tools or similar tools provided by third parties ("Data Analytics Providers") to help analyze how you and other users utilize our services. Analytics tools use cookies and other tracking technologies to collect information such as how often users visit our website, what pages they visit, and what other websites they have used prior to visiting our website. We use the information we get from analytics tools only to improve services. Analytics tools collect the IP address or other unique identifier assigned to you on the date you visited services. We do not combine the information generated through the use of analytics tools with your other personal information. Analytics tools provided by third parties plant a persistent cookie on your web browser to identify you as a unique user the next time you visit our website, and the treatment of that information is governed by the third party's terms of use and/or privacy policy. To learn about how Google uses data related to website analytics when you use our site or apps, click here: https://policies.google.com/technologies/partner-sites. For information about how Facebook uses cookies and other storage technologies, click here: https://www.facebook.com/policies/cookies/.

7.4 BY USING OUR WEBSITE, YOU GIVE CONSENT FOR US TO SHARE YOUR DATA WITH THESE PROCESSORS, AND FOR THEM TO TRANSFER THIS INFORMATION ONWARD TO THEIR PARTNERS IN CONNECTION WITH PROVIDING YOU SERVICES.

8. OPTING OUT

You can make the following choices regarding your personal information:

8.1 Promotional and Other Emails. You may choose, during the account registration processes on our website, or otherwise, to provide us with your email address for the purpose of allowing us to send newsletters, surveys, offers, and other materials related to our services. You can stop receiving these emails by sending a request to the email address in the Contact Us section below. If you decide not to receive these emails, we may still send you communications related to your current or former membership.

8.2 Behavioral Advertising. Our services may use behavioral advertising. This means that a third party may use technology (e.g., a cookie) to collect information about your use of our website so that they can provide advertising about products and services tailored to your interests. That advertising may appear either on our website, or on other websites not operated by us. If you do not want third parties to collect information about your use of our services, you can opt-out of such at the Digital Advertising Alliance in the US, the Digital Advertising Alliance of Canada in Canada, or the European Digital Advertising Alliance in Europe.

PLEASE NOTE THAT OPTING-OUT OF BEHAVIORAL ADVERTISING DOES NOT MEAN THAT YOU WILL NOT RECEIVE ADVERTISING WHILE USING SERVICES. IT WILL, HOWEVER, EXCLUDE YOU FROM INTEREST-BASED ADVERTISING CONDUCTED THROUGH PARTICIPATING NETWORKS, AS PROVIDED BY THEIR POLICIES AND CHOICE MECHANISMS.

8.3 Analytics. Many analytics providers allow end-users to opt out of the retention of their information, including our third-party analytics providers. Please note that, typically, unless you create an account with the analytics provider, your choice to opt out applies only to the device from which you make the request, because the providers use cookies on that device to recognize your choice. If you get a new device, install a new web browser, update your browser, or otherwise erase/alter your browser cookie files you may clear the opt-out cookie.

You may learn more about the use of information by and opting-out of analytics from our third-party provider by visiting its opt-out page at the following links:

www.google.com/policies/privacy/partners/

https://tools.google.com/dlpage/gaoptout

8.4 Cookies. You may disable, or delete cookies in your Web browser, but doing so may impact the usability of the website. To block cookies, you can also browse our service using your browser's anonymous usage setting (called "Incognito" in Chrome, "In Private" for Internet Explorer, "Private Browsing" in Firefox and Safari, etc.).

8.5 Do Not Track. Our website does not recognize or respond to "Do Not Track" requests available through many popular web browsers.

9. INTERNATIONAL TRANSFERS OF INFORMATION

Your personal information may be processed in the country in which it was collected and in other countries, where laws regarding personal information may be less stringent than the laws in your country. Therefore, in some circumstances, you might be left without a legal remedy in the event of a privacy breach or other use that is prohibited in your country. By submitting your personal information, you agree to this transfer, storage and/or processing, including all associated risks.

10. INFORMATION SECURITY

No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security. We make efforts to protect your personal information from improper or unauthorized loss, misuse, access, disclosure, alteration, or destruction. If you have questions about the security of your personal information, contact us at the email or regular mail address specified in the Contact section below.

11. MINORS

Our website and app and our services are not directed to minors. We actively seek to dissuade registration from persons under 18 and do not knowingly collect personally identifiable information from them. If you are under 18 years of age, you are not eligible to use our website or apps or to receive our services.

12. DATA RETENTION

We will retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information, whether we can achieve those purposes through other means, and the applicable legal requirements.

13. THIRD-PARTY LINKS

Our website or app may contain links to other websites or apps. We are not responsible for the privacy practices or the content of these other websites or apps. You should read the policy statement of these other websites or apps to understand their policies. When you access linked websites or apps, you may be disclosing private information. It is your responsibility to keep such information private and confidential.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Policy from time to time, in our sole discretion. When we do so, we will post the new Policy on our website. You should consult this Policy regularly for any changes. Continued use of services following posting of such changes constitutes your acknowledgement of such changes and agreement to be bound by the changes. If you do not agree, you should immediately discontinue your use of our website and services.

15. CONTACT US

If you have questions regarding this Policy, its appendices, or our treatment of your personal information, you may contact us at:

APPENDIX A: CALIFORNIA PRIVACY RIGHTS

Effective: August 25, 2021

Your California Privacy Rights:

Under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 and certain other privacy and data protection laws, as applicable, residents of California have the right to request that we disclose what personal information we collect, use, disclose, and sell. More specifically, if you are a resident of California you have rights to the following without charge:

We reserve our rights to (i) not retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about consumers is not retained; (ii) not reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information; and (iii) not provide personal information to you more than twice in a 12-month period.

We are not required to, and reserve our right to not delete your personal information if it is necessary to: (i) complete the transaction for which the personal information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us; (ii) detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity or prosecute those responsible for that activity; (iii) debug to identify and repair errors that impair existing intended functionality; (iv) exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law; (v) comply with the California Electronic Communications Privacy Act; (vi) engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent; (vii) enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; (viii) comply with an existing legal obligation; and (ix) otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

How to Exercise Your Rights

Unless otherwise specified, to exercise any of your rights described in this Appendix A, please submit your request at https://www.dailylook.com/privacy-information-request or by sending an email to privacy@dailylook.com with the subject "CCPA Consumer Request."

In order to verify your request, you will need to provide us with enough information to identify you (e.g., your full name, address, and customer or matter reference number), proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill), and a description of what right you wish to exercise along with any information to which your requests relates.

You may also designate an authorized agent to make a request under the California Consumer Privacy Act on your behalf. In order to fulfill your request to know or delete submitted by an authorized agent, you must provide the authorized agent written permission to do so, and we may require you to verify your own identity with us directly.

We reserve our right not to grant a consumer request if we cannot verify that the person making the request is the person about whom we have collected information, or someone authorized to act on such person's behalf. You may only make a request to access or receive copies of personal information twice within a 12-month period. Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Your Right to Opt-Out of the Sale of Personal Information

We do not sell personal information to third parties. If we were to sell personal information to third parties, you would have the right to opt-out of the sale of your personal information. If you were to exercise your right to opt-out of the sale of your personal information, we would refrain from selling your personal information, unless you subsequently provide express authorization for the sale of your personal information.

Children's Right to Opt-In to the Sale of Personal Information

We do not direct our website and apps and our services to minors. We actively seek to dissuade registration from persons under 18 and do not knowingly collect personally identifiable information from them. If you are under 18 years of age, you are not eligible to use our website or apps or to receive our services.

If we were to offer our services to minors, we would not sell the personal information of minors under 16 years of age without affirmative ("opt in") authorization.

Our Collection and Disclosure of Personal Information

• You, the consumer.
• Fulfillment Providers.
• Service Providers
• Data Analytics Providers.
• Social Networks.
• Government entities.

• Fulfillment Providers.
• Data Analytics Providers.
• Advertising Networks.
• Service Providers
• Government entities.

Categories of Personal Information Collected, Disclosed, and Sold within the past 12 months.

The above chart does not include information collected where your communications or transactions with us occur solely in the context of you providing or receiving a product or service to or from a company, partnership, sole proprietorship, nonprofit, or government agency on whose behalf you are acting.

Individual consumers who reside in California and have provided us with their personal information may request information about our disclosures of certain categories of personal information to third parties for their direct marketing purposes. Such requests must include your name, street address, city, state, and zip code, and be submitted to us at one of the following addresses: privacy@dailylook.com with the subject "California Shine The Light Request" or DailyLook, 2460 E. 12th St. Unit D, Los Angeles, CA 90021, Attention: Shine the Light Request. Within thirty days of receiving such a request, we will provide a list of the categories of personal information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year. We reserve our right not to respond to requests submitted to addresses other than the addresses specified in this paragraph.

If you are a California resident under the age of 18, and a registered user of our website, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information that you have publicly posted. To make such a request, please send an email with a detailed description of the specific content or information to privacy@dailylook.com with the subject "Privacy Rights for Minors." Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

APPENDIX B: NEVADA PRIVACY NOTICE

Effective: August 25, 2021

Under Nevada Revised Statues Section 603A., et. seq., residents of Nevada have certain rights with respect to the personal information that we collect on our website or app as follows: (i) The categories of personal information that we collect and the categories of third parties with whom we share personal information are described above in Appendix A; (ii) You may review and request changes to the personal information that we collect or process on our website or app by sending an e-mail to privacy@dailylook.com; (iii) Any material changes to this notice shall be posted in this privacy notice and (iv) When you use our website or app, third parties may collect personal information about your online activities over time and across different internet sites or online services with third parties.

Copyright © 2022 DailyLook, Inc. All rights reserved.