THE LUST PRIVACY PROMISE

LUST LABS, LLC PRIVACY POLICY Effective date: 10/11/2026 | Last updated: 10/11/2026 1. Who We Are and What This Policy Covers LUST Labs, LLC (“LUST Labs,” “we,” “us,” or “our”) values your privacy. This Privacy Policy describes how we collect, use, disclose, and protect information when you visit our website, contact us, purchase or inquire about our services, participate in a LUST Labs event or promotion, or otherwise interact with us (collectively, the “Services”). Our Services are designed to provide a premium, discreet sexual-wellness experience, including sexual-health testing and related education, navigation, and services that may be offered from time to time. Some Services may involve independent laboratories, healthcare professionals, telehealth providers, pharmacies, technology platforms, or other third-party providers. Those parties may collect or maintain information under their own privacy notices and legal obligations. This Policy does not replace any separate notice, consent, authorization, or Notice of Privacy Practices provided by a healthcare provider or other legally responsible entity. By using the website or Services, you acknowledge this Policy. Where applicable law requires consent or authorization for a particular use or disclosure, we will seek that separately; this Policy is not a substitute for such consent. 2. Information We May Collect A. Information you provide directly •Contact and account information: such as your name, email address, telephone number, date of birth, mailing or shipping address, account credentials, and communication preferences. •Order and transaction information: such as services or test packages requested, order status, billing address, payment status, refunds, and customer-service history. Payment card details are generally handled by our payment processor; we may receive transaction identifiers and limited payment details. •Sexual-wellness and health information: such as the tests or services you request, relevant intake responses, specimen-collection details, symptoms or health history you choose to provide, and information needed to coordinate services. Sexual-health information can be sensitive personal information. •Laboratory and results-related information: where applicable, information needed to arrange testing, identify and route a specimen, deliver results, support follow-up, or coordinate with an authorized healthcare professional or laboratory. The laboratory or clinical provider may maintain its own medical record. •Communications: including emails, phone calls, text messages, website forms, support requests, event inquiries, and any attachments or information you choose to provide. •Marketing and event information: such as newsletter preferences, event registration, referral or partner codes, survey responses, and participation in promotions. B. Information collected automatically When you use our website, we or our service providers may collect technical and usage information such as IP address, browser and device type, operating system, referring pages, pages viewed, approximate location derived from IP address, timestamps, and interactions with website features. We may use cookies, pixels, log files, analytics tools, or similar technologies for essential website functionality, security, analytics, and—only where permitted and appropriately configured—marketing. The technologies actually used on the website must be verified before publication. C. Information from other sources Depending on the Services you request, we may receive information from laboratories, healthcare professionals, telehealth or provider networks, pharmacies, payment processors, shipping carriers, customer-support vendors, identity-verification vendors, event or business partners, and technology providers. This may include order status, specimen status, test results, provider or treatment coordination information, payment confirmation, or delivery status. We will use and disclose information received from these sources as described in this Policy, as authorized by you, and as permitted or required by law. 3. How We Use Information We may use information for the following purposes, as applicable to the Services you use: •To provide, administer, and support requested testing, sexual-wellness, education, customer-support, and related Services. •To coordinate orders, laboratory processing, specimen handling and shipping, results delivery, and follow-up with the appropriate laboratory or authorized healthcare professional. •To communicate with you about orders, service updates, account matters, results-routing steps, safety information, and customer support. •To process payments, prevent fraud, secure our website and systems, troubleshoot issues, and maintain business records. •To personalize and improve website functionality, service quality, and customer experience. •To send marketing communications or event information where permitted by law and consistent with your preferences. You may opt out of promotional messages as described below. •To administer events, memberships, promotions, partner programs, surveys, and referral activities. •To comply with applicable laws, regulations, legal process, reporting duties, and contractual obligations; to protect rights, safety, and security; and to establish or defend legal claims. •To create aggregate or de-identified information where permitted by law. We will not attempt to re-identify information that is required by law or contract to remain de-identified. We do not use identifiable sexual-health information to train general-purpose artificial intelligence models unless we first provide any notice and obtain any consent or authorization required by law. Any future use of AI tools involving personal or health information must be reviewed for privacy, security, contractual, and legal compliance before implementation. 4. How We May Disclose Information We may disclose information, as appropriate and permitted by law, to: •Laboratories and specimen-service providers: to order tests, fulfill kits, receive or route specimens, process testing, and return results. •Healthcare professionals and provider networks: to support clinical review, telehealth, consultation, follow-up, or treatment when those services are offered and you request or authorize them, or when otherwise permitted by law. •Technology and operational vendors: such as hosting, patient-portal or practice-management systems, secure messaging, customer support, payment processing, shipping, scheduling, and cybersecurity providers that help operate the Services. •Pharmacies: if medication-related services are offered and disclosure is necessary to fulfill a prescription or coordinate care. •Business, event, or referral partners: only for the particular activity and only to the extent appropriate, disclosed to you, and permitted by law. We do not disclose identifiable test results or other sensitive health information to event partners or lifestyle communities for marketing purposes. •Professional advisers and authorities: including lawyers, accountants, insurers, regulators, law enforcement, courts, or government agencies when reasonably necessary to comply with law, protect rights or safety, or handle legal claims. •Transaction participants: in connection with a proposed or completed merger, financing, acquisition, reorganization, or sale of all or part of our business, subject to appropriate safeguards and applicable law. •Other parties with your direction or permission: when you ask us to share information or provide any consent or authorization required by law. We may also disclose information when required or permitted by law, including certain legally mandated public-health reporting by the laboratory or healthcare provider responsible for the report. The party responsible for any particular report depends on the applicable law and the service arrangement. 5. Health Information and HIPAA Some information handled in connection with sexual-health testing or clinical services may be protected by federal or state health-privacy laws. Whether the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) applies to LUST Labs for a particular activity depends on LUST Labs’ role and the applicable arrangements. A laboratory, healthcare provider, or technology vendor may have separate obligations under HIPAA or other laws. If a separate HIPAA Notice of Privacy Practices, patient consent, authorization, or other notice applies, it will be provided separately by the entity responsible for it. We seek to limit access to sensitive information to people and vendors who need it to perform authorized functions, subject to applicable law and our contractual obligations. We do not promise that all information we handle is subject to HIPAA. 6. Cookies, Analytics, and Advertising Our website may use essential cookies and similar technologies to make the site function, protect against fraud, remember preferences, measure performance, and understand website use. If we use non-essential analytics or advertising technologies, we will configure notices and choices as required by applicable law. The use of tracking technologies on pages where visitors provide or access sexual-health information requires particular care. We will not enable advertising pixels or disclose sensitive health information for targeted advertising without the legal review, notice, and consent or opt-out mechanism, as applicable, required for that activity. You may be able to control cookies through your browser settings and any cookie-preference tool we make available. Blocking some cookies may affect website functionality. Browser-based opt-out signals, including Global Privacy Control, will be honored where required by applicable law. 7. Marketing Communications You may opt out of promotional emails by using the unsubscribe link in the email. If we send promotional text messages, you may opt out by replying STOP, where supported. We may still send non-promotional messages needed to fulfill an order, provide service information, respond to your request, or meet legal obligations. Consent to receive marketing messages is not a condition of purchasing services where prohibited by law. 8. Data Security We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use secure channels for sensitive information and notify us promptly if you believe your account or communications have been compromised. 9. Data Retention We retain information for as long as reasonably necessary for the purposes described in this Policy, including providing Services, maintaining business and transaction records, resolving disputes, meeting contractual obligations, and complying with applicable legal, clinical, laboratory, and regulatory retention requirements. Retention periods may differ by record type and by the entity responsible for the record. Laboratories and healthcare professionals may retain clinical records under their own legal and professional obligations. LUST Labs will establish and follow a documented retention schedule. 10. Your Privacy Choices and Rights Depending on where you live and the nature of the information, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information; to receive information about how it is processed or disclosed; to opt out of certain targeted advertising, sales, or profiling; or to withdraw consent where processing is based on consent. These rights are subject to legal exceptions and may not apply to all health or clinical records. Applicable law may also give you rights to request confidential communications, restrictions, amendments, or an accounting of certain disclosures from a HIPAA-covered provider or health plan; those requests should be directed to the entity responsible for the record. To submit a privacy request, contact us using the information in the Contact Us section. We may need to verify your identity and the authority of any authorized agent before responding. If we deny a request, we will explain any appeal process required by applicable law. We will not unlawfully discriminate or retaliate against you for exercising a privacy right. 11. State Consumer Health Data Laws Certain states have laws that specifically protect consumer health data, including laws that may apply to sexual-health information collected outside a traditional healthcare relationship. Depending on your location and the Services involved, you may have additional rights concerning consumer health data, including rights to access or delete data, withdraw consent, or request information about disclosures. Where required, we will provide a separate consumer-health-data notice and obtain consent before collecting or sharing consumer health data for activities that require consent. Requests may be submitted through the contact information below. This section is a general description and does not replace any state-specific notice or consent required for the states in which LUST Labs operates. Counsel should determine which state laws apply and prepare any required supplemental notices, consent forms, and appeal procedures before launch. 12. Children’s Privacy Our Services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information from children under 18 through the Services. If you believe a child has provided us personal information, please contact us so we can review and take appropriate steps. If a future service is offered to minors, this Policy and our consent procedures must be reviewed before that service is made available. 13. Third-Party Websites and Services Our website or communications may link to websites, portals, payment pages, laboratories, healthcare providers, pharmacies, or other third-party services that we do not operate. Their privacy practices are governed by their own notices and terms. Please review those notices before submitting information. We are not responsible for the privacy or security practices of third parties except to the extent applicable law provides otherwise. 14. U.S. Visitors and International Transfers Our Services are intended primarily for people located in the United States. Information may be processed or stored in the United States or other locations where our service providers operate, subject to applicable law and contractual safeguards. If we begin offering Services to people in other countries, we will review whether additional notices or protections are required. 15. Changes to This Policy We may update this Policy from time to time. We will post the revised version with a new “Last updated” date. If a change materially affects how we handle information already collected, we will provide any additional notice or obtain any consent required by law. 16. Contact Us For questions or privacy requests, contact: LUST Labs, LLC Email: LLhealthLLC@gmail.com Telephone: (629) 888-3688