Privacy Notice

This Privacy Notice explains how Bread.Hot (collectively, ["Bread.Hot"], "our", "us" or "we"), collects, uses, processes and discloses information relating to individuals who access or interact with our Website, including any related services (collectively, "Services") made available through this Website (hereinafter, the “Bread.Hot Platform”).

This Privacy Notice is intended to help you understand what information we may collect about you, how that information may be used, and the rights and options available to you in relation to such information.

Please read this Privacy Notice carefully. By accessing or using the Bread.Hot Platform, you acknowledge that you have read and understood this Privacy Notice and that your information may be collected and processed as described herein. If you do not agree with the practices described in this Privacy Notice, you should not access or use the Bread.Hot Platform.

We may revise or update this Privacy Notice from time to time to reflect changes in applicable laws, regulatory developments, industry standards, or modifications to the Bread.Hot Platform or the services we provide. Where updates materially affect your rights or the manner in which we process your information, we will take reasonable steps to notify users of such changes in a manner appropriate to their significance. Your continued use of the Bread.Hot Platform following the publication of any revised Privacy Notice will constitute your acceptance of those changes.

The Bread.Hot Platform is not intended for use by individuals under the age of eighteen (18), and we do not knowingly collect personal information from persons under that age.

By using the Bread.Hot Platform you represent that you are at least 18 years old.

If we become aware that personal information relating to a minor has been submitted to us without appropriate parental or guardian consent, we will take reasonable steps to remove such information from our systems as soon as practicable. Parents or legal guardians who believe that a minor has provided personal information through the Bread.Hot Platform may contact us to request deletion of such information.

Unless the context otherwise requires, all capitalised terms used herein shall have the meanings assigned to them in our Terms of Use

Personal Data and Personal Data Controller

The term "Personal Data" as used in this policy, describes information that can be associated with a specific person and can identify that person. Personal Data does not include information that has been aggregated or anonymized so that a specific person can no longer be identified. Any reference to Personal Data in this Privacy Notice includes without limitation Personal Data as defined by the Data Protection Act 2018.

A Personal Data controller is a person or organisation who controls the collection, holding, processing or use of Personal Data, including a person or organisation who instructs another person or organisation to collect, hold, process, use, transfer or disclose Personal Data on his or her behalf.

Types of Personal Data Collected

The types of Personal Data that we may collect from you or through third parties will depend on our interactions with you and may include:

• Financial information such as your wallet addresses;
• Transaction information such as the wallet addresses of senders and recipients of Digital Assets, activities on the Bread.Hot Platform, your inquiries and our responses;
• Usage data which can include your IP address, your country of origin, the features of the browser or operating system utilised by you, how you use the Bread.Hot Platform, among other identifiers;
• Other personal data or commercial and/identification information that we, in our sole discretion, may deem necessary to prevent fraud, abuse of the Bread.Hot Platform,
  or to comply with applicable legal obligations.

The Bread.Hot Platform does not collect or store private keys associated with users' digital asset wallets.

We may also collect Personal Data about you from third parties and other sources such as publicly available sources of information.

We collect this information from you when you freely provide it on the Bread.Hot Platform or when you use it. We may also collect your Personal Data from third parties or publicly available sources as noted above.

Unless specified otherwise, all Personal Data requested by us is mandatory and failure to provide this Personal Data may make it impossible for you to access or use the Bread.Hot Platform. In cases where the Bread.Hot Platform specifically states that some Personal Data is not mandatory, users are free not to communicate this Personal Data without consequences to the availability or the functioning of the Bread.Hot Platform. Users who are uncertain about which Personal Data is mandatory may contact us for clarification.

Information Automatically Collected

When you access or interact with the Bread.Hot Platform, certain technical information about your device and your use of the Bread.Hot Platform may be collected automatically. This information may include details such as your IP address, device identifiers, browser type and version, operating system, time zone settings, and general information about the device or software used to access the Bread.Hot Platform.

We may also collect information relating to how the Bread.Hot Platform is accessed and used. This may include data regarding the s or features you view, the actions you take while using the Bread.Hot Platform, the websites or search terms that directed you to the Bread.Hot Platform, and other usage statistics relating to your interaction with the Bread.Hot Platform.

In addition, information may be collected through cookies or similar tracking technologies that are stored on your device. These technologies help us understand how users interact with the Bread.Hot Platform, improve the functionality and performance of our services, and support the overall operation and security of the Bread.Hot Platform.

Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to support the operation of the Bread.Hot Platform and to better understand how it is used. Cookies are small data files that may be placed on your computer, mobile device, or browser when you visit a website. These technologies help enable certain features of the Bread.Hot Platform and allow us to collect information about user interactions with the Bread.Hot Platform.

Cookies and related technologies may be used for purposes such as maintaining the functionality of the Bread.Hot Platform, improving performance, analysing usage patterns, and helping us understand how users navigate and interact with the Bread.Hot Platform.

This section describes the types of cookies and tracking technologies that may be used on the Bread.Hot Platform, the purposes for which they are used, and the options available to you for managing or controlling their use.

How We Use Cookies

Cookies and similar technologies may be used to support the operation and functionality of the Bread.Hot Platform and to help us better understand how users interact with it. Through these technologies we may collect information that enables us to analyse usage patterns, monitor performance, and improve the overall experience of the Bread.Hot Platform.

Cookies may also be used to remember certain preferences or settings during a user’s visit, to facilitate authentication where applicable, and to enable certain technical features of the Bread.Hot Platform. In addition, cookies may allow us to communicate updates or relevant information about the Bread.Hot Platform when users return to the website.

We do not use cookie-derived information to create detailed behavioural advertising profiles of individual users, and we do not combine cookie data with third-party datasets for targeted advertising purposes or share such information with data brokers.

Types of Cookies

Cookies used on the Bread.Hot Platform may generally fall into one of the following categories:

• Essential Cookies: These cookies are necessary for the proper operation of the Bread.Hot Platform. They

enable core functionality such as security features, network management, and basic accessibility of the website.

• Functional Cookies: These cookies help the Bread.Hot Platform remember choices or preferences
• made by users, such as language settings or other configuration options, so that the Bread.Hot Platform can provide a

more

personalised experience during subsequent visits.

Analytical or Performance Cookies: These cookies collect information about how users access and interact with the Bread.Hot Platform. For example, they may help us understand which s are visited most frequently or identify technical issues affecting performance. This information is typically used in aggregated form to improve the Bread.Hot Platform.

Information or Referral Cookies: In some cases, cookies may be used to recognise devices that have previously visited the Bread.Hot Platform or to understand how users arrived at the website. Certain cookies in this category may be operated by third-party service providers that assist us in analysing traffic sources or Bread.Hot Platform usage.

Managing Cookies

Most web browsers allow users to manage cookie preferences through their browser settings. Depending on your browser configuration, you may be able to refuse cookies, delete cookies that have already been stored on your device, or restrict the use of certain types of cookies.

Because cookies are generally specific to the browser and device being used, you may need to adjust your cookie preferences separately for each browser or device through which you access the Bread.Hot Platform.

Users accessing the Bread.Hot Platform through mobile devices should consult the relevant device settings or support documentation for information on managing cookies and similar tracking technologies.

Additional general information about cookies and how they can be managed is available at https://www.allaboutcookies.org.

Please note that disabling or restricting certain cookies may affect the functionality of the Bread.Hot Platform, and some features or services may not operate as intended if cookies are blocked or removed.

Google Analytics

We may use Google Analytics, a web analytics service provided by Google, to help us understand how visitors use and interact with the Bread.Hot Platform. Google Analytics uses cookies and similar technologies to collect information about how users access and navigate the Bread.Hot Platform.

The information collected may include details such as s visited, time spent on the Bread.Hot Platform, navigation paths, and general usage patterns. This information is used to compile statistical reports that help us analyse activity on the Bread.Hot Platform and improve its functionality and performance.

Information generated

through Google Analytics may be transmitted to and stored by Google in accordance with Google’s privacy policies.

If you prefer not to have your website activity tracked through Google Analytics, you may install the Google Analytics opt-out browser add-on available from Google. Additional information about this tool can be found on the Google Analytics website on the Google Analytics website: https://tools.google.com/dl/gaoptout.

Method and Basis of Processing Data

Methods of processing

We take appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the Data.

The Personal Data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. Data may be accessible to you and in some cases, to certain types of persons in charge, involved with the operation of the Bread.Hot Platform (administration, legal, system administration) or external parties (such as third-party technical service providers, hosting providers, IT companies) appointed, if necessary, as data processors by us. You may request a list of these parties at any time.

Legal basis of processing

We may process Personal Data relating to you if one of the following applies:

You have given your consent for one or more specific purposes. Note: Under some legislation we may be allowed to process Personal Data until you object to such processing ("opt-out"), without having to rely on consent or any other of the following legal bases:

• Provision of Personal Data is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof;
• Processing is necessary for compliance with a legal obligation to which we are subject;
• Processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in us;
• Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.

How We Use Personal Data

We may use Personal Data collected

through the Bread.Hot Platform for a variety of operational and service-related purposes, including:

• Providing the Website and the Bread.Hot Platform, including delivering the services you request and providing related customer support;
• Processing transactions and sending notifications or confirmations regarding your transactions on the Bread.Hot Platform;
• Detecting, preventing, and investigating malicious, fraudulent, or abusive activity on the Bread.Hot Platform;

• Monitoring and analysing user behaviour and usage patterns on the Bread.Hot Platform, including through analytics tools;
• Testing and evaluating beta features or new functionalities of the Bread.Hot Platform;

• Contacting you, including responding to inquiries or providing information related to the Bread.Hot Platform and its services;
• Displaying or integrating content from external platforms within the Bread.Hot Platform;
• Supporting operational and productivity-related activities necessary for the management and functioning of the Bread.Hot Platform;
• Providing social or community features available through the Bread.Hot Platform;
• Optimising traffic, performance, and functionality of the Bread.Hot Platform;
• Registering you as a user of the Bread.Hot Platform and authenticating your credentials, where applicable;
• Complying with applicable legal and regulatory obligations, including responding to requests from authorities or enforcement bodies;
• Protecting the rights, property, and legitimate interests of Bread.Hot and Bread.Hot affiliates, as well as those of our users and third parties;

• Monitoring and maintaining infrastructure, including technical systems and services that support the Bread.Hot Platform;
• Enabling interaction with external social networks and third-party platforms, where such features are available;
• Providing location-based interactions or services, where applicable;
• Managing tag technologies, which are pieces of code used to analyse and track activities on the Bread.Hot Platform;
• Supporting traffic optimisation and distribution mechanisms to ensure efficient delivery of the Bread.Hot Platform and its services.

How We Share Personal Data

We may share your Personal Data with our service providers and vendors to assist us in providing you with the Bread.Hot Platform. We do not share your Personal Data with third parties without your consent, except as described in this Privacy Notice or as otherwise required or permitted by applicable law. We may share your Personal Data within our group, and with affiliates, for purposes consistent with this Privacy Notice.

We may share your Personal Data with third party companies and individuals that provide services on our behalf or help us operate the Bread.Hot Platform or our business. These third parties may use your Personal Data only as directed or authorised by us and in a manner consistent with this Privacy Notice, and are prohibited from using or disclosing your information for any other purpose. We may also share your Personal Data for compliance purposes.

We may sell, transfer or otherwise share some or all of our business or assets, including your Personal Data, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganisation or sale of assets, or in the event of bankruptcy or dissolution.

Retention of Personal Data

We retain Personal Data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including operating the Bread.Hot Platform, providing services to users, maintaining the security and integrity of our systems, and complying with applicable legal or regulatory obligations.

The length of time for which Personal Data is retained may vary depending on factors such as the nature and sensitivity of the information, the purposes for which it is processed, the potential risks associated with unauthorised use or disclosure, and any applicable legal or operational requirements.

Where Personal Data is collected in connection with the use of the Bread.Hot Platform or the provision of services, we may retain such information for as long as necessary to maintain and operate those services, resolve disputes, enforce our agreements, or comply with legal obligations.

When Personal Data is no longer required for the purposes described in this Privacy Notice, we will take reasonable steps to delete, anonymise, or otherwise securely dispose of such information, unless we are required or permitted by law to retain it for a longer period.

Please note that certain information associated with blockchain-based transactions may not be capable of deletion or modification due to the immutable nature of

public distributed ledger networks. Additional information about this is provided in the

“Blockchain Transactions” section of this Privacy Notice.

Privacy Technology Practices

Links to Third-Party Sites

The Bread.Hot Platform may contain links to other websites, mobile applications, and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web s or in mobile applications or online services that are not associated with us. We do not control third party websites, mobile applications or online services, and we are not responsible for their actions. Other websites, mobile applications and services follow different rules regarding the collection, use and sharing of your Personal Data. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

Data Security

The security of your Personal Data is important to us. We employ a number of administrative, technical, and physical safeguards designed to protect the Personal Data we collect. The safety and security of your information also depends on you. We ask you not to share any of your personal security information.

You acknowledge that, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to the Bread.Hot Platform. Any transmission of Personal Data is at your own risk.

Blockchain Transactions

Interactions involving Digital Assets may be recorded on a public blockchain, including transactions executed through or in connection with the Bread.Hot Platform. Public blockchains operate as distributed ledgers designed to permanently record transactions across networks of independent computers.

Information recorded on a public blockchain may be visible to anyone and may be subject to analysis by third parties using blockchain analytics tools. As a result, transaction data associated with Wallet addresses may, in some circumstances, be linked to identifiable individuals, particularly where blockchain information is combined with data obtained from other sources.

Public blockchains are decentralised networks that are not owned, operated, or controlled by us. Due to the immutable nature of these networks, information recorded on a blockchain generally cannot be modified, deleted, or otherwise altered. Accordingly, we do not have the ability to remove, correct, or erase any data that has been recorded on a public blockchain.

By interacting with Digital Assets through this Bread.Hot Platform, you acknowledge that blockchain transactions may be permanently recorded and publicly accessible.

Overseas Disclosure and Your Privacy Rights

For purposes of relevant data protection legislation, Bread.Hot is the Personal Data controller. Bread.Hot is a company with operations throughout the world. As a result, Personal Data may be transferred outside the country in which you reside for the purposes identified. Any such transfer of Personal Data shall take place under applicable law and will be protected through international data transfer agreements where necessary that have been recognised by relevant data protection authorities as providing an adequate level of protection to the Personal Data we process. By using this Bread.Hot Platform you understand that your Personal Data may be processed in the United States and outside of the EEA and the UK.

Residents of the EEA and the UK are granted certain rights over their Personal Data, which include:

• The right to obtain confirmation of the Personal Data we process.
• The right to rectify inaccurate Personal Data that we process.
• The right to request erasure of your Personal Data, subject to exceptions provided under the law.
• The right to restrict certain processing of your Personal Data, so long as the processing is not necessary for the performance of or in relation to a contract or service to which you are a party.
• The right to receive your Personal Data in a structured, commonly used and machine readable format
• The right to object to the processing of your Personal Data, including the right to object to automated decision-making and profiling.
• The right to withdraw your consent where you have previously given it for the processing of your Personal Data

You are generally entitled to access Personal Data that we hold about you. If you request access to your Personal Data, in ordinary circumstances we will give you full access to your Personal Data. Depending on the nature of the request, we may charge for providing access to this information, however such charge will not be excessive. However, there may be some legal or administrative reasons to deny access. If we refuse your request to access your Personal Data, we will provide you with reasons for the refusal where we are required by law to give those reasons.

Complaints: If you feel that we have not respected your privacy or that we have conducted ourselves inconsistently with this Privacy Notice, please contact Support and advise us as soon as possible. We will investigate your queries and privacy complaints within a reasonable period of time depending on the complexity of the complaint. We will notify you of the outcome of our investigation.

General

If you would like to exercise any of the rights listed above, or if you would like to contact us about any questions you may have regarding your Personal Data, please contact Support and provide (i) enough information to identify you and (ii) a description of what right you want to exercise and the information to which your request relates. Any Personal Data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

If you are concerned that we have not complied with your legal rights or applicable privacy laws, you may contact us or your local data protection authority.