Privacy Policy | Fasting and the Longevity Revolution

Effective Date: 25/06/2025 Scope of this Policy • This privacy policy applies to Create Cures Foundation and our affiliates (“CCF,” “we,” “us,” “our”) and the Fasting and the Longevity Revolution website (the “Services”). • This Policy applies when you access the website https://www.fastingandthelongevityrevolution.com/ and interact with us through our Services. It also applies anywhere it is linked. It does not apply to third-party websites, mobile applications, or services that may link to the Services or be linked to from the Services. Please review the privacy policies on those websites and applications directly to understand their privacy practices. • We may need to update this Privacy Policy from time to time. If we do, we will notify you by publishing the updated version on this page. The date of the most recent update will always be available at the top of this Policy. Citizens of the European Union and the State of California are hereby invited to carefully consult the specific sections of this policy expressly dedicated to them, which outline the particular conditions applicable to the processing of their personal data and the rights afforded to them under the relevant data protection laws. Information We Collect We collect personal information in order to supply our Services. We collect information from you directly, when you voluntarily and knowingly provide us with data such as your name, address, email address, phone number and any other information you choose to provide to us. Moreover, we collect some information automatically, through the use of cookies and other similar technologies. This information includes the link that directed you to our webpage, your IP address and geographical location, the types of device, operating system and web browser you are using and the date and time of you visit. This data may be used to improve your browsing experience. The Cookie Policy explains more about how we use these technologies. We do not collect personal information that is recognized as sensitive, such as information concerning health, ethnicity or political opinions and do not knowingly collect the personal information of any person under the age of 18. If we discover, or have reason to believe, we are holding sensitive personal information we will delete that information within a reasonable period. In addition, we might collect data from third parties. We may combine information from the Services together and with other information we obtain from our business records. We may use and share information that we aggregate (compile to create statistics that cannot identify a particular individual) or de-identify (strip information of all unique identifiers such that it cannot be linked to a particular individual) at our discretion. Information you give us You may provide the following information to us directly: -Contact and professional information, including name, email address, telephone number, and job title, as well as company name and size. -Demographic information. -Payment information, including credit card information. -Information contained in your communications to us. -Any other information you submit to us. Information We Collect From Other Sources We receive certain personal data and information directly from our partners. In particular, FastSpring acts as the Merchant of Record (MoR) for Create Cures Foundation, handling, among other things, payment processing and business transactions related to the purchase of our services. Specifically, Bright Market, LLC d/b/a FastSpring may provide Create Cures Foundation with certain personal information (such as your credit card number, billing address, PayPal ID, etc.) and/or anonymous data that you submit in connection with your purchase. This information may be shared for purposes such as: – transaction reporting, – registering your purchase, – enabling access to products or services, – providing technical support or after-sales service. For more detailed information, we encourage you to review FastSpring’s Privacy Policy: https://fastspring.com/privacy • Information we collect automatically • We and partners working on our behalf may use log files, cookies, or other digital tracking technologies (please see our cookie policy at https://www.fastingandthelongevityrevolution.com/cookie-policy) to collect the following information from the device you use to interact with our Services. We also create records when you make purchases or otherwise interact with the Services. -Device information, including IP address, device identifiers, and details about your web browser. -Analytical information, including details about your interaction with our website, app, and electronic newsletters. -Diagnostic information, including web traffic logs. -Advertising information, including special advertising and other unique identifiers that enable us to target first-party advertisements to you. Please be aware that our advertising partners may collect information about you when you visit third-party websites or use third-party apps. They may use that information to better target advertisements to you on our behalf. -Business record information, including records of your purchases of products and services. How We Use Your Information • We may use any of the information we collect for the following purposes: –Service functionality: To provide you with our products and services, including to take steps to enter a contract for sale or for services, process payments, fulfill orders, send service communications (including renewal reminders), and conduct general business operations, such as accounting, recordkeeping, and audits. We process personal data to fulfill orders and manage user accounts, including creating and maintaining customer profiles, processing purchases through FastSpring, delivering streaming access and authorizing video player usage. – Customer support: to provide customer support and communicate with you, such as responding to inquiries, sending transactional emails like purchase confirmations and password resets.- Improving service quality: to improve the user experience and optimize our content and platform performance. –Security: To protect and secure our Services, assets, network, and business operations, and to detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal. –Advertising and marketing: upon your explicit consent, , to send you marketing communications, personalize the advertisements for our Services that you see on our Services and third-party online properties, and measure the effectiveness of our advertising. We may share your information with business partners, online advertising partners, and social media platforms for this purpose. -Newsletter: upon your explicit consent, for the purpose of sending you informative and promotional communications regarding new documentary releases, exclusive offers and promotions, as well as updates about the platform’s content, services, and features. –Legal compliance: To comply with legal process, such as warrants, subpoenas, court orders, and lawful regulatory or law enforcement requests and to comply with applicable legal requirements. How We Share Your Information We may share any of the information we collect with the following recipients. Affiliates: We might share information with other members of our group of companies. Service providers: We engage vendors to perform specific business functions on our behalf, and they may receive information about you from us or collect it directly. These vendors are obligated by contract to use information that we share only for the purpose of providing these business functions, which include: • Supporting Service functionality, such as vendors that support event registration, customer service and customer relationship management, subscription fulfillment, freight services, application development, list cleansing, postal mailings, and communications (email, fax). • Auditing and accounting firms, such as firms that assist us in the creation of our financial records. • Professional services consultants, such as firms that perform analytics, assist with improving our business, provide legal services, or supply project-based resources and assistance. • Analytics and marketing services, including entities that analyze traffic on our online properties and assist with identifying and communicating with potential customers. • Security vendors, such as entities that assist with security incident verification and response, service notifications, and fraud prevention. • Information technology vendors, such as entities that assist with website design, hosting and maintenance, data and software storage, and network operation. • Marketing vendors, such as entities that support distribution of marketing emails. Business partners: From time to time, we may share your contact information and other information about you with other individuals and organizations for our and their marketing purposes. In all cases, such relationships will be conducted in compliance with applicable laws and formalized through specific agreements. Online advertising partners: We partner with companies that assist us in advertising our Services, including partners that use cookies and online tracking technologies to collect information to personalize, retarget, and measure the effectiveness of our advertising of our own Services. Social media platforms: If you interact with us on social media platforms, the platform may be able to collect information about you and your interaction with us. If you interact with social media objects on our Services (for example, by clicking on a Facebook “like” button), both the platform and your connections on the platform may be able to view that activity. To control this sharing of information, please review the privacy policy of the relevant social media platform. Government entities/Law enforcement: We may share information when we believe in good faith that we are lawfully authorized or required to do so to respond to lawful subpoenas, warrants, court orders, or other regulatory or law enforcement requests, or where necessary to protect our property or rights or the safety of our employees, our customers, or other individuals. Other businesses in the context of a commercial transaction: We may change our ownership or corporate organization while providing the Services. We may transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information as described in this policy. Security We use a combination of physical, technical, and administrative safeguards to protect the information we collect through the Services. While we use these precautions to safeguard your information, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf. Your Options and Rights Regarding Your Information • Email Unsubscribe: If you do not wish to receive marketing information from us or wish to opt out of future email promotions from us, please contact us. Please note that all promotional email messages you receive from us will include an option to opt out of future email communications. • Ad Choices: You have options to limit the information that we and our partners collect for online advertising purposes. -You may disable cookies in your browser or mobile device using their settings menus. Your mobile device may give you the option to disable advertising functionality. Because we use cookies to support Service functionality, disabling cookies may also disable some elements of our online properties. -You may contact us directly. If you exercise these options, please be aware that you may still see advertising, but it will not be personalized. Nor will exercising these options prevent other companies from displaying personalized ads to you. • Do Not Track: CCF responds to the Global Privacy Control signal for U.S. residents. However, we do not respond to “Do Not Track” signals because there is no formal “Do Not Track” standard. • Jurisdiction-specific rights: You may have certain rights with respect to your personal information depending on your location or residency. Please see “privacy disclosures for specific jurisdictions” below. Please contact us to exercise your rights. Other Important Information • Data retention We may store information about you for as long as we have a legitimate business need for it. In any case, we will not keep your: • Transactional data for more than 10 years after our last interaction; • Data for marketing and analysis purposes for more than 5 years after our last interaction. • Cross-border data transfer We may collect, process, and store your information in the United States and other countries. Any such transfers will comply with safeguards as required by relevant law. We ensure that any transfer of European Citizens personal data to a third country is carried out in compliance with applicable data protection laws and is subject to appropriate safeguards — such as the European Commission’s Standard Contractual Clauses, Binding Corporate Rules, or other lawful transfer mechanisms recognized under the GDPR. • Information about children The Services are intended for users who are eighteen years old and older. We do not knowingly collect information from children. If we discover that we have inadvertently collected information from anyone younger than the age of eighteen, we will delete that information. Please contact us with any concerns. Privacy Disclosures for Specific Jurisdictions European Economic Area, United Kingdom, and Switzerland We process “personal data,” as that term is defined in the European Union’s General Data Protection Regulation (“GDPR”). Data Controller The Data Controller is Create Cures Foundation, 1260 15th St, Ste PH Santa Monica, California 90404; Phone +1 (424) 7859099; email: longevityrevolution@createcures.org • Legal basis for processing and related purposes. When we process the personal data of users in the European Economic Area (“EEA”), U.K., or Switzerland, we must have a legal basis for doing so, in full compliance with art. 6 GDPR We process users’ personal data: • on the basis of consent to the processing, as set forth in Art. 6(1)(a) GDPR to send you marketing communications, personalize the advertisements for our Services that you see on our Services and third-party online properties, and measure the effectiveness of our advertising. • on the basis of the legal basis under Art. 6(1)(b) GDPR when the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the data subject’s request. To provide you with our products and services, including to take steps to enter a contract for sale or for services, process payments, fulfill orders, send service communications (including renewal reminders), and conduct general business operations, such as accounting, recordkeeping, and audits. To provide you with adequate customer support in response to your request. • pursuant to Art. 6(1)(c) GDPR when the processing is necessary to comply with a legal obligation to which the data controller is subject; • on the basis of the legitimate interests of the data controller or a third party, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data, pursuant to Art. 6(1)(f) GDPR, do not prevail in connection with the identified purposes. To protect and secure our Services, assets, network, and business operations, and to detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal. To enhance the quality of the service. • Your rights under the GDPR: Users who are located in EEA, U.K., or Switzerland have the right to lodge a complaint about our data collection and processing actions with the supervisory authority concerned. Contact details for data protection authorities are available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. • If you are located in the EEA, U.K., or Switzerland, you have the following rights. –Access and Portability: Request access to personal data we hold about you or request transmission of your data to a third party. You may request that we erase the personal information we hold about you at any time. You may also request that we transfer this personal information to another third party. –Correction: Request that we rectify inaccurate or incomplete personal data we store about you. –Erasure: Request that we erase personal data when such data is no longer necessary for the purpose for which it was collected, when you withdraw consent and no other legal basis for processing exists, or when you believe that your fundamental rights to data privacy and protection outweigh our legitimate interest in continuing the processing. –Restriction of processing: Request that we restrict our processing of personal data if there is a dispute about the accuracy of the data; if the processing is unlawful; if the processing is no longer necessary for the purposes for which it was collected but is needed by you for the establishment, exercise or defense of legal claims; or if your request to object to processing is pending evaluation. –Objection to processing: You have the right to opt out where the processing is based on our legitimate interest, as well as to withdraw any consent previously given for the processing of your personal data. This shall not affect the lawfulness of processing carried out prior to such withdrawal or opt-out. We will no longer process the data unless there are compelling legitimate grounds for our processing that override your interests, rights, and freedoms, or for the purpose of asserting, exercising, or defending legal claims. –Transfers: Obtain information about and a copy of the safeguards we use to transfer personal data across borders. Please contact us to exercise these rights. Disclosure of personal data to third parties: We may share your information with business partners, online advertising partners, and social media platforms in order to send you marketing communications, personalize the advertisements for our Services and measure the effectiveness of our advertising. Depending on the context, third parties may process such data either as independent data controllers or, as the case may be, as data processors acting on our behalf. In the latter case, they will be formally appointed in advance and duly instructed to ensure compliance with the data processing standards established by Create Cures Foundation. An up-to-date list of the data processors appointed by the data controller is available upon request. California • Your California Privacy Rights; “Shine the Light” Law We do not share your personal information with third parties for those third parties’ direct marketing purposes. • California Consumer Privacy Act The California Consumer Privacy Act (“CCPA”) provides California residents with rights to receive certain disclosures regarding the collection, use, and disclosure of information about them, as well as rights to know/access, correct, delete, and limit disclosure of personal information. You have the right to be free from discrimination based on your exercise of your CCPA rights. To the extent that we collect personal information that is subject to the CCPA, that information, our practices, and your rights are described below. • Notice at Collection Regarding the Categories of Personal Information Collected You have the right to receive notice of certain information about our data collection, use, and disclosure. The following summarizes the categories of personal information we may collect: • Personal Identifiers -Name -Address -Email Address -Telephone number -Date of Birth -Username and Password -Commercial Information -Purchase or transaction history -Sweepstakes, raffles, contests, marketing, or promotional activity -Internet or Other Electronic Network Activity Information -Browsing history -Search history -Information regarding a consumer’s interaction with an Internet website, application, or advertisement -Internet Protocol address -Device ID -Cookies -Beacons -Pixel Tags -Mobile ad identifiers -Social media interaction information We determine the retention period for each of the categories of personal information listed above based on (1) the length of time we need to retain the information to achieve the business or commercial purpose for which it was obtained, (2) any legal or regulatory requirements applicable to such information, (3) internal operational needs, and (4) any need for the information based on any actual or anticipated investigation or litigation. Entities to whom we disclose information for business purposes are service providers, which are companies that we engage to conduct activities on our behalf. We restrict service providers from using personal information for any purpose that is not related to our engagement. Entities to whom we “sell” or with whom we “share” information are third parties. Under the CCPA, a business “sells” personal information when it discloses personal information to a company for monetary or other benefit. A company may be considered a third party either because we disclose personal information to the company for something other than an enumerated business purpose under California law, or because its contract does not restrict it from using personal information for purposes unrelated to the service it provides to us. A business “shares” personal information when it discloses personal information to a company for purposes of cross-context behavioral advertising. Your rights under the CCPA -Opt out of sale or sharing of personal information: You have the right to opt out of our sale or sharing of your personal information to third parties. To exercise this right, please contact us at longevityrevolution@createcures.org . Your right to opt out does not apply to our disclosure of personal information to service providers. For more information, please contact us using the contact information provided below. -Limit the use of your sensitive personal information: You have the right to limit our use of your sensitive personal information if we use such information to infer characteristics about you. To exercise this right, please contact us at longevityrevolution@createcures.org . Your right to limit our use of such information is subject to exception. -Know and request access to and correction or deletion of personal information: You have the right to request access to personal information collected about you and information regarding the source of that personal information, the purposes for which we collect it, and the third parties and service providers to whom we sell, share, or disclose it. You also have the right to request in certain circumstances that we correct personal information that we have collected about you and to delete personal information that we have collected directly from you. Please contact us to exercise these rights. Colorado, Connecticut, Utah, and Virginia Residents of the States of Colorado, Connecticut, Utah, and Virginia have the following rights: • Opt out of “sales” of personal information and use of their personal information for “targeted advertising,” as those terms are defined under applicable law. • Opt out of “profiling” under certain circumstances, as defined under applicable law. (Residents of Colorado, Connecticut, and Virginia only.) • Confirm processing of and access to personal information under certain circumstances. • Correct personal information under certain circumstances. (Residents of Colorado, Connecticut, and Virginia only.) • Delete personal information under certain circumstances. Residents of these states can exercise their rights by contacting us using one of the methods listed below. Contact information, submitting requests, and our response procedures Contact Please contact us if you have questions or wish to take any action with respect to information to which this privacy policy applies. Email: please contact us at longevityrevolution@createcures.org Mail: please contact us at 1260 15th St, Ste PH – Santa Monica, California 90404 Making a request to exercise your rights Submitting requests: You may request to exercise your rights by making a request using the contact information above. If you are a resident of California, Colorado, or Connecticut, you may, under certain circumstances, authorize another individual or a business, called an authorized agent, to make requests on your behalf. We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response. Verification: We must verify your identity before responding to your request. We verify your identity by asking you to provide personal identifiers that we can match against information we may have collected from you previously. We may need to follow up with you to request more information to verify identity. We will not use personal information we collect in connection with verifying or responding to your request for any purpose other than responding to your request. Appeals Residents of California, Colorado, Connecticut, and Virginia have the right to appeal a denial of their request by contacting us as described in the notice of denial. Policy Updates and Notification We reserve the right to update or modify our Privacy Policy and Terms of Service at any time. Should there be any significant changes to the contents of this policy, we will ensure to notify you through appropriate means (e.g., via email or by re-displaying the link to the full privacy policy through the cookie banner). Any changes will become effective upon publication. The publication date can be found at the beginning of this document.