Privacy Statement

Thank you for using Bloom Processing LLC online and mobile resources and for viewing this privacy statement (the "Privacy Statement" or "Statement"). Our Privacy Statement serves to give notice about the types of personal information we collect, how we use it, and who we share it with and why. We encourage you to read this Privacy Statement carefully.

This Privacy Statement was amended as of March 12, 2026 and is effective as of that date. The English language version of this Privacy Statement is the controlling version regardless of any translation you may attempt.

Please note that use of our online and mobile resources is also governed by our Terms of Use and Conditions of Sale ("Terms"). By accessing, using, or placing an order through our online and mobile resources you agree to these Terms.

Navigating Through This Statement

You can use the links below to navigate to areas of this Statement that apply specifically to you:

• Some Important Vocabulary
• When and To Whom Does This Privacy Statement Apply
• How Do We Collect Personal Information?
• What Types of Personal Information Do We Collect?
• How Do We Use the Personal Information We Collect?
• When/With Whom Do We Share Personal Information?
• Do Not Track Signals
• Cookies and Other Tracking Technologies
• Your Privacy Rights
• How to Exercise Your Privacy Rights
• Children's Privacy
• Submitting Information From Outside the United States
• The EU General Data Protection Regulation
• Promotional Messages
• Changes to this Privacy Statement
• Contacting Us

Some Important Vocabulary

When we reference "this Statement", "this Privacy Statement" and "our Statement", we mean the Privacy Statement you are reading now. Wherever we say "MoneyFlow", "Company", "we", "us", or "our", we mean Bloom Processing LLC. We use the words "you" and "your" to mean you, the reader, and other visitors to our online and mobile resources who are, in all cases, over the age of 13, or otherwise have verifiable parental consent to view this page.

When we talk about our "online and mobile resources", we mean all websites, applications, portals or other features we operate to allow you to interact with us and our systems, as well as any mobile apps we've created and distributed to let you interact with the content we provide. An "affinity action" is when you "follow" us, "like" us or take a similar or analogous action on our external social media presence.

When we refer to "personal information", we mean any information, data or data element, whether in electronic or other form, that, alone or in combination with other elements, can be used to distinguish, trace, or discover your identity. Where applicable data privacy laws include specific elements or defined terms for what they consider to be personal information (sometimes also referred to as "personal data"), then the term "personal data" includes those specific elements and defined terms.

When and To Whom Does This Privacy Statement Apply?

Our online and mobile resources collect personal information from: (1) visitors to, and users of, our online and mobile resources; and (2) those who may interact with our ads and content displayed on third party sites. This Statement applies to our processing and sharing of personal information collected from the data subjects listed in the previous sentence. If we have legal obligations to other categories of data subjects, such as our employees, supply chain partners or vendors, we provide them with separate legally required notices in confidential contracts, policies, and other similar documents.

How Do We Collect Your Personal Information?

We collect and otherwise obtain your personal information in the following ways: (1) when you choose to give it to us by voluntary submission; (2) through automatic collection by technical means when you visit or use our online and mobile resources; and (3) when it is provided to us by external sources such as marketing companies, advertising companies, social media companies and/or companies that provide services on our behalf.

Voluntary Submissions

Here are some of the ways you voluntarily give us your personal information:

• Creating Accounts – If we make an account creation feature available you will provide us your email address and other identifiers.
• Answering our Questionnaires – To help you find and claim settlements, you may submit information to us regarding your claims and about other products and services you've used or purchased.
• Making Purchases – If you choose to make a purchase through our online and mobile resources, we will collect your name, email, phone number, residential address, and other information you provide to fulfil the order.
• Signing up for Newsletters – We collect some voluntarily submitted information if you sign up to receive a newsletter or other informational or marketing material we publish.
• Registering for Events – When you register for events or programs we may host, you will be submitting certain identifiers. If the event requires a fee, we may also ask you to submit credit card or other financial information.
• Sending Emails and Texts – If you choose to send us an email or text message, you will be giving us your email address or phone number and any other personal information in your message.
• Using Community Features – Some of our online and mobile resources may offer social media-like community features. If you choose to make use of these features, the information you post, including your screen name and any other personal information, will be in the public domain and may not be covered by this Statement.

If you prefer that we not receive the above-described personal information, please don't submit it. Your use of our online and mobile resources is strictly your choice. By not participating, you may limit your ability to take full advantage of the online and mobile resources, but most of the content will still be available to you and we never discriminate on the basis of how much information you provide.

Automatic Collection

When you visit or use our online and mobile resources, information about your internet/electronic activity is automatically collected through your browser via tracking technologies, such as "cookies." Cookies are small text files downloaded onto your computer or mobile device. Cookies allow us to collect your IP address and recognize your computer or mobile device and store some information about your preferences for using our online and mobile resources or past actions.

If you access our online and mobile resources from a phone or other mobile device, the mobile services provider may transmit to us certain information such as uniquely identifiable mobile device information. That, in turn, allows us to collect mobile phone numbers and associate them with the mobile device identification information.

External Sources

We may work with companies who provide us with data, including personal information, so that we can tailor our services to audiences who have the most interest. We also may work with digital advertising and marketing companies to provide you with ads that meet your interests and that enhance your experience with us. These third parties collect information with their own cookies, pixels, and related tracking technology and then provide that information to us. We are not responsible for their data collection practices.

We maintain a presence on one or more external social media platforms such as Twitter, Facebook, YouTube and LinkedIn. We are not responsible for either the content on, or the privacy practices of, social media platforms, or any third-party sites or apps to which we link. Those apps, sites and platforms are not controlled by us and therefore have their own privacy policies and terms of use.

What Types of Personal Information Do We Collect?

The categories of personal information we have collected from visitors and users of our online and mobile resources in the previous 12 months, and may collect from you, are as follows:

• General Identifiers such as a real name, alias, online identifier, Internet Protocol address, date of birth, postal address, email address, account name, or other similar identifiers.
• Commercial Information including records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies, including class action payouts.
• Internet Activity Data or other similar electronic network activity information, such as answers to questionnaires, browsing history, chat transcripts, search history, and information regarding a consumer's interaction with our online and mobile services or an advertisement.
• Audio/Visual Data such as profile or account photos, access to a phone camera to input transaction details, or videos or other electronic recordings, such as recordings of customer service phone calls.
• Analytics and Inference Data drawn using the above-described personal information to create a profile reflecting our customers' interests and preferences or to otherwise improve our products and services.

Sensitive Personal Information

We do not collect "sensitive personal information" or "sensitive data" as these terms are defined by applicable law.

Deidentified Information

We may collect deidentified data and inferences derived from the categories of personal information described in this Statement. This data does not identify you in any way. We will not reidentify, or attempt to reidentify, any deidentified information that we collect as described in this Statement.

How Do We Use the Personal Information We Collect?

Use for Legitimate Business Purposes

We use the personal information we collect only in the manner and through the means allowed by applicable law. That means we determine whether we have a lawful basis or legitimate business purpose to use your personal information before doing so. Specifically, we use personal information for the following business purposes:

• Transaction Processing – such as processing, completing, and maintaining records of transactions.
• Performance of Contracts – such as fulfilling our duties and exercising our rights under contracts we may have with you.
• Promotions – such as providing personalized promotions and special offers.
• General Marketing – such as providing users with information about our brand, products, and events.
• Tailored Marketing – providing users with marketing tailored to their interests.
• Account Servicing – facilitating and servicing your account.
• Physical Security – providing security at our physical locations and for internal or external investigations.
• Technical Security – monitoring our networks and detecting security incidents.
• Customer Service – responding to consumer inquiries, including requests for information, online support and phone calls.
• User Experience – such as internal research and analytics to improve user experience on our online and mobile resources.
• Knowing Our Customer – understanding the demographics and interests of our online and mobile resource visitors.
• Debugging – debugging, identifying, and repairing errors that impair existing intended functionality.
• Detecting and Preventing Unlawful Acts – protecting against malicious or illegal activity and prosecuting those responsible.
• Verification – verifying accounts and responding to consumer requests.

Retention of Your Personal Information

We store and retain your personal information in accordance with applicable law and as long as necessary to carry out the purposes described above and in accordance with our internal data retention procedures. The criteria used to determine the retention periods include: (1) how long the personal information is needed in connection with the purposes for which we use it; (2) the type of personal information collected; and (3) whether we are subject to a legal, contractual or similar obligation to retain the personal information.

When/With Whom Do We Share Personal Information?

We may share the categories of personal information described in this Privacy Statement with the following categories of third parties for the business purposes described below:

• Corporate Affiliates – We may share personal information with our corporate affiliates or corporate parents who will use such information in the same way as we can under this Statement.
• Operations Support Vendors – We may share your personal information to vendors that help us to operate and increase the efficiency of our business.
• Customer Support Vendors – We may share your personal information with vendors that provide customer support services, such as chatbot, phone, or email support.
• Promotional or Fulfillment Vendors – In order to carry out promotions we make available to you and/or deliver our products and services, we may share personal information with vendors who specialize in those activities.
• Software and Technology Vendors – Our various service providers may have access to or be provided with some of your personal information in connection with the tasks they perform on our behalf. Some of our vendors may provide us with, or support their own services with, artificial intelligence tools.
• Transaction Support Vendors / Payment Processors – We share personal information with those of our vendors and business partners that process payments on our behalf and send you confirmations and administrative messages.
• Settlement Administrators – We may share your personal information with settlement administrators and other third parties in order to help you claim settlement payouts.
• Marketing and Advertising Providers – We may share your personal information to third parties, including social media networks, who support online advertising, data analytics, social media engagement, and other advertising networks that support our marketing efforts.
• Security and Fraud Prevention Providers – We may disclose personal information to third party security and fraud prevention providers when we have reason to believe that someone is causing injury to or interference with our rights or property.
• Law Enforcement or Government Agencies – We may disclose personal information to government agencies and authorities, and to other third parties when compelled to do so by such government authorities, or at our discretion, or otherwise as required or permitted by law.
• Successors for Business Sale/Purchase – If we sell or transfer all or substantially all of our assets, equity interests or securities, or are acquired by one or more third parties, personal information may be one of the transferred assets.

In some jurisdictions, our transfer of information to third-party providers for marketing and advertising purposes could be defined as "selling" personal information or "sharing" personal information for "cross-context behavioral advertising." We may transfer the following categories of information to third parties for marketing and advertising purposes: (1) persistent identifiers, such as unique device identifiers, email addresses, account information, IP addresses, information related to your browser and operating system; and (2) user activity data generated through your activities on our online and mobile resources.

Do Not Track and Global Privacy Control

Certain browsers and plug-ins allow users to send signals such as Do Not Track ("DNT") or Global Privacy Control ("GPC"). While we do not respond to DNT signals, we do honor GPC signals as a valid request to opt-out of the sale or sharing of your personal information where required by applicable law.

When we receive a GPC signal, we will process it as a request to opt-out of any sale or sharing of your personal information that occurs via cookies or similar tracking technologies on our website. Please note that this opt-out mechanism applies only to the specific browser or device on which the signal is sent, and you may need to adjust your settings on each browser or device you use.

Cookies and Other Tracking Technologies

We use cookies and other tracking technologies to provide, protect, and improve our online and mobile resources and to collect, use, and share your information as described in this Privacy Statement. These technologies are useful for storing your preferences and settings, enabling you to sign-in, gathering information such as browser type and operating system, providing interest-based advertising, combating fraud, analyzing how our website or services perform, and fulfilling other legitimate purposes.

Cookies used on this website may include: (1) required or "essential" cookies used to perform essential website functions; (2) preferences cookies that remember your preferred settings; (3) analytics cookies to better understand how you use the website; (4) advertising cookies that show you ads and personalize content based on your activities on other websites and social media profiles.

Most web browsers are set to accept cookies by default. You can usually choose to set your browser to disable or reject cookies. Be aware that disabling or rejecting cookies could affect the availability and functionality of the website or certain portions of the website. Please note that we may still use information we've collected from cookies prior to you disabling them; however, we will not collect any further information from the disabled cookies.

Your Privacy Rights

Where applicable based on privacy laws in your jurisdiction, you may have certain rights you can request that we fulfill. These rights may include:

• The Right to Know. You have the right to request that we disclose the information that we have collected about you and identify the purposes for which the information was used, whether and to whom it was shared, and what sources it was obtained from.
• The Right to Delete. You have the right to request that we delete information that we maintain about you, subject to certain exceptions.
• The Right to Correct. You have the right to correct any information that we store about you.
• The Right to Opt-Out of Your Personal Information Being Sold or Shared. You may opt-out of us sharing or selling your information by contacting us at support@moneyflow.com or by visiting our "Do Not Sell" page.
• Right to Opt-Out of Targeted Advertising. You have the right to request that we opt you out of targeted advertising.
• Right to Opt-Out of Profiling or Automated Decision Making. You have the right to not be subject to profiling or automated decision making in furtherance of decisions that produce legal or similarly significant effects.
• Right to Withdraw Consent from Processing. If we have collected and processed your information based on your consent, then you can withdraw your consent at any time.
• Right to Data Portability. You have the right to request that we provide you with a copy of your information on file with us.
• Right Not to Receive Discriminatory Treatment. Exercising your rights under this Privacy Statement will not result in any discrimination by us.
• Right to Complain. You have the right to complain to your state's Attorney General.
• Right to Appeal. If you make a request to exercise any of the applicable data access rights and we are unable to comply with your request, you may request to appeal our decision by emailing us at support@moneyflow.com with the subject line "Data Access Request Appeal."

How to Exercise Your Privacy Rights

In order to exercise any of the rights detailed in this Privacy Statement, please contact us at support@moneyflow.com or visit our data subject request page. We may require additional information from you to help us verify your identity and state or country of residence, and to otherwise process your request. If we are unable to verify your identity, we may deny your requests to know or delete. You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent's permission to do so and must verify your identity directly.

Children's Privacy

Federal law imposes special restrictions and obligations on commercial website operators who direct their operations toward, and collect and use information from children under the age of 13. We take those age-related requirements very seriously, and, consistent with them, do not intend for our online and mobile resources to be used by children under the age of 18, and certainly not by anyone under the age of 13. Moreover, we do not knowingly collect personal information from minors under the age of 18. If we become aware that anyone under the age of 18 has submitted personal information to us via our online and mobile resources, we will delete that information and not use it for any purpose whatsoever.

We strongly encourage parents and legal guardians to talk with their children about the potential risks of providing personal information over the Internet.

Submitting Information From Outside the United States

We control and operate the online and mobile resources from within the United States of America (the "U.S."). Information collected through the online and mobile resources may be stored and processed in the United States or any other country in which MoneyFlow or its affiliates or service providers maintain facilities. To the extent applicable, we rely on the latest revision of the standard contractual clauses promulgated by the European Commission for transfers of personal data from the European Economic Area (EEA), United Kingdom (UK), or Switzerland to our online and mobile resources within the U.S.

The EU General Data Protection Regulation

When we collect personal information from individuals located in the European Union ("EU"), Switzerland, or the United Kingdom ("UK"), those individuals have rights under the General Data Protection Regulation ("GDPR"). This section of our statement is used to allow us to fulfill our GDPR obligations and explain your GDPR rights. For purposes of this section, the words "you" and "your" mean only such individuals located in the EU, Switzerland, or the UK.

Legal Basis for Processing

Our legal basis for collecting and using your personal information will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. We do not sell, rent, or trade your personal information to third party data vendors or marketing companies nor do we use your personal information for automated decision making, including profiling.

Exercising Your GDPR Rights

You may exercise the rights available to you under the GDPR, including:

• Access – the right to obtain a confirmation that your personal information is being processed, access to your personal information, and a copy of the personal information we are processing.
• Rectification – the right to have your personal information corrected if it is inaccurate, and to have incomplete personal information completed.
• Erasure – also known as the "right to be forgotten," the right to request your personal information be deleted under certain circumstances.
• Restrict Processing – the right to restrict processing of your personal information under certain circumstances.
• Portability – the right to receive the personal information you provided to us in a portable format under limited circumstances.
• Automated Processing – the right to not be subject to a decision based solely on automated processing, including profiling.
• Object to Processing – the right to object to the processing of your personal information for legitimate interests or direct marketing purposes.

You can exercise these rights by contacting us using the contact information listed below. We may need to request additional information from you to verify your identity before granting your request.

International Transfers

We may disclose your personal information for the purposes described herein to recipients located in countries outside of the European Economic Area ("EEA"), Switzerland, and the UK, including in the U.S. We have entered into EU standard contractual clauses ("Model Contracts") for transfers of personal information. You can request further details in relation to international transfers by contacting us at support@moneyflow.com.

Promotional Messages

By signing up to any of our promotional lists, you are giving your express permission to MoneyFlow and its agents or vendors the right to contact you with targeted advertising materials by email, text message ("SMS"), telephone or cellphone, including the use of automated, predictive, programmable, or similar automatic dialers or dialing software, or any other means of communication we may utilize to provide promotional offers. Your consent is not a condition of purchase. We may share your data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services.

If you no longer wish to receive promotional communications by email, please follow the unsubscribe link located at the end of an email message. If you no longer wish to receive promotional text messages, reply STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any mobile message from MoneyFlow. When we receive your request, we will take reasonable steps to remove you from our distribution lists, but it may take time to do so.

Changes to this Privacy Statement

We reserve the right to change or update this Statement from time to time. Please check our online and mobile resources periodically for such changes since all information collected is subject to the Statement in place at the time of collection. We will indicate the effective/amendment date at the beginning of this Statement.

Contacting Us

If you have questions about our Privacy Statement or privacy practices, please contact us at: