The Company participates in the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (collectively, “DPF”) issued by the U.S. Department of Commerce and approved by the European Commission, UK Information Commissioner’s Office, and the Swiss Data Federal Data Protection Commission. The Company commits to comply with the DPF Principles with respect to personal information the company receives from the EU, UK, and Switzerland in reliance on the DPF. <1/><2/> If there is any conflict between the terms in this privacy policy and the DPF Principles, the DPF Principles shall govern. To learn more about the DPF, please visit <5>https://www.dataprivacyframework.gov. To view our certification, please visit <8>https://www.dataprivacyframework.gov/s/participant-search. <10 /><11 /> If third-party agents process personal information on our behalf in a manner inconsistent with the DPF Principles, we remain liable unless we prove we are not responsible for the event giving rise to any damages. If you have a question or complaint related to our compliance with the DPF Principles, please contact us as described in the <14>Contact Us section below. <17/><18/> For any complaints related to DPF that cannot be resolved with us directly, you may refer the matter to JAMS pursuant to the JAMS Data Privacy Framework Program, which is described on the JAMS website at <21>https://www.jamsadr.com/eu-us-data-privacy-framework. JAMS mediation may be commenced as provided for in the JAMS rules. Following the dispute resolution process, the mediator or the consumer may refer the matter to the U.S. Federal Trade Commission, which has DPF investigatory and enforcement powers over the Company. Under limited circumstances, and after other available dispute resolution mechanisms have been exhausted, consumers may be able to invoke binding arbitration to address complaints about the Company’s compliance with the DPF Principles

Grace + Max

Grace + Max