Do Not Sell or Share My Personal Information

Last Updated: April 22, 2026

A. Your Right to Opt Out

Under applicable U.S. state privacy laws, and under certain Canadian privacy laws (including Quebec’s Act respecting the protection of personal information in the private sector, commonly known as Quebec Law 25), you have the right to opt out of the sale or sharing of your personal information for cross-context behavioural advertising and targeted advertising, and the right to deactivate identifying, locating, and profiling functions. This page describes how to exercise those rights with respect to Nammex (North American Medicinal Mushroom Extracts) Inc. ("Nammex," "Real Mushrooms," "we," "us," or "our") and the website located at realmushrooms.com and the related online services (the "Website").

The specific rights available to you depend on your jurisdiction of residence:

• California: Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CPRA"), California residents have the right to opt out of the "sale" of their personal information and the right to opt out of the "sharing" of their personal information for cross-context behavioural advertising. These are separate rights and you may exercise one or both.

• Nevada: Under Nevada Revised Statutes Chapter 603A, Nevada residents have the right to opt out of the sale of certain covered personal information for monetary consideration.

• Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Delaware, Iowa, and other U.S. states: Residents of these states with comprehensive consumer privacy laws have the right to opt out of the processing of their personal information for purposes of targeted advertising and, where applicable, the sale of their personal information.

• Canadian Residents (PIPEDA, BC PIPA, Alberta PIPA, Quebec Law 25): You have the right to withdraw consent to the use of your personal information for marketing and behavioural advertising purposes, subject to legal or contractual restrictions and reasonable notice. Quebec residents have additional rights, including the right to deactivate the functions on the Website that allow you to be identified, located, or profiled.

• European Economic Area, United Kingdom, and Switzerland: Where applicable, you have the right under the GDPR or UK GDPR to object to processing of your personal data based on legitimate interests, to withdraw consent, and to object to direct marketing.

Exercising your opt-out right will not result in any penalty, denial of goods or services, different pricing, or lower quality of service from Nammex. We do not discriminate against consumers who exercise their privacy rights.

B. What We Sell or Share

We do not sell personal information to third parties for monetary consideration. However, we do "share" personal information for cross-context behavioural advertising purposes, as that term is defined under the CPRA, and we engage in "targeted advertising" as defined under other state privacy laws. In addition, our use of certain identifying technologies on the Website is subject to enhanced consent obligations under Quebec Law 25.

Specifically, we share or disclose certain categories of personal information with the advertising, analytics, marketing, personalization, and affiliate partners identified in the table below. Each of these recipients operates one or more of the tracking technologies described in our Privacy Notice.

For a full description of all third-party tracking technologies deployed on the Website, including their operators, configuration, and purposes, please see the "Cookies, Pixels, and Other Tracking Technologies" and "Cross-Context Behavioural Advertising and Targeted Advertising" sections of our Privacy Notice.

C. How to Opt Out

You may submit a Do Not Sell or Share request through any of the following methods:

1. Email Us

Send an email to privacy@realmushrooms.com with the subject line "Do Not Sell or Share Request" and include your name, email address, and state or province of residence. You do not need to provide a reason for your request.

2. Call Us

Call Nammex at [PHONE NUMBER] and request to opt out of the sale or sharing of your personal information.

3. Network Advertising Initiative (NAI), Digital Advertising Alliance (DAA), and Digital Advertising Alliance of Canada (AdChoices)

You may opt out of interest-based advertising from NAI member companies (including some of our advertising partners) using the NAI opt-out tool at https://optout.networkadvertising.org/. You may also use the DAA WebChoices opt-out tool at https://www.aboutads.info/choices/ and, in Canada, the AdChoices opt-out tool at https://youradchoices.ca/. Please note that these opt-outs are cookie-based and must be renewed if you clear your browser cookies.

4. Direct Opt-Out from Specific Advertising Partners

You may also opt out of personalized advertising directly through the privacy and advertising settings of the relevant advertising partner, including: Meta (Facebook and Instagram) at https://www.facebook.com/settings?tab=ads; Google at https://myadcenter.google.com/; Microsoft Advertising at https://choice.microsoft.com/; Pinterest at https://www.pinterest.com/settings/personalization/; and TikTok at https://www.tiktok.com/legal/page/row/personalized-advertising/. Each of these tools is operated by the respective advertising partner and not by Nammex.

5. Browser-Based Controls

Most web browsers allow you to refuse or delete cookies through your browser settings. You may also use browser extensions that block tracking scripts. Please note that disabling cookies or blocking tracking scripts may affect the functionality of the Website and may need to be re-applied if you clear your browser data.

6. Nevada Residents

Nevada residents may submit a Nevada-specific opt-out request by emailing privacy@realmushrooms.com with the subject line "Nevada Privacy Opt-Out Request." We will acknowledge your request within 60 days.

7. Canadian Residents — Withdrawal of Consent and Quebec Deactivation Rights

Canadian residents may withdraw consent to the use of their personal information for behavioural advertising or marketing at any time by emailing privacy@realmushrooms.com, by following the unsubscribe instructions in any commercial electronic message, or by using the browser-based controls and third-party opt-out tools described above. Quebec residents may exercise their right to deactivate the functions on the Website that allow them to be identified, located, or profiled by contacting privacy@realmushrooms.com with the subject line "Quebec Deactivation Request."

D. What Happens After You Submit a Request

Once we receive your opt-out request, we will:

• Acknowledge receipt of your request within fifteen (15) business days (or such other period as required by applicable law);

• Process your request and stop sharing your personal information for cross-context behavioural advertising and targeted advertising within forty-five (45) days of receipt, unless a longer or shorter period is required or permitted by applicable law;

• Notify any third parties to whom we have shared your personal information within the preceding ninety (90) days that you have opted out, to the extent required by applicable law; and

• For Canadian and Quebec residents, give effect to your withdrawal of consent or deactivation request in accordance with the timelines required by PIPEDA, the BC and Alberta PIPAs, and Quebec Law 25.

We will not ask you to create an account or provide information beyond what is reasonably necessary to identify you and process your request. You do not need to be an existing customer to submit a request.

Please note that your opt-out request applies to the sharing of your personal information for cross-context behavioural advertising and targeted advertising. It does not affect:

• Our use of your personal information for other purposes described in our Privacy Notice, such as order fulfilment, account management, customer service, and transactional communications;

• Sharing with service providers acting solely on our behalf, such as payment processors, shipping providers, hosting providers, fraud-prevention vendors, and accounting providers;

• Data already shared with third parties before the date of your request; or

• Sharing required by law, necessary to complete a transaction you have requested, or otherwise permitted by an exception in applicable privacy law.

Submission of a Do Not Sell or Share request does not, on its own, disable analytics tools, performance monitoring tools, accessibility tools, fraud-prevention systems, or other operational technologies described in our Privacy Notice, except where applicable law (including Quebec Law 25 and the GDPR) requires otherwise. To restrict additional categories of processing, please contact us at privacy@realmushrooms.com or use the browser-based controls and third-party opt-out tools described above.

If we are unable to verify your identity or locate your information, we will notify you and explain the basis for our decision. You may appeal a denial by contacting us at privacy@realmushrooms.com with the subject line "Privacy Rights Appeal."

E. Right to Opt Back In

After exercising your right to opt out, you may authorize Nammex to resume sharing your personal information for cross-context behavioural advertising or targeted advertising at any time by contacting us at privacy@realmushrooms.com with the subject line "Do Not Sell or Share — Opt Back In." Under the CPRA, we are required to wait at least twelve (12) months before asking you to opt back in.

F. Authorized Agents

You may designate an authorized agent to submit a Do Not Sell or Share request on your behalf. To submit a request through an authorized agent, the agent must provide one of the following:

• A signed written authorization from you granting the agent permission to submit the request; or

• A copy of a power of attorney executed pursuant to applicable law.

We may contact you directly to verify the authorization and confirm that you wish to exercise your opt-out right. We will not charge a fee for verifying an authorized agent’s authority. Requests by authorized agents should be submitted to privacy@realmushrooms.com with the subject line "Do Not Sell or Share Request — Authorized Agent."

G. EEA, UK, and Swiss Residents — GDPR and FADP

The concepts of "sale" and "sharing" of personal information for cross-context behavioural advertising are constructs of U.S. state privacy law (in particular the CCPA/CPRA and the comprehensive consumer privacy laws of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Delaware, Iowa, and other states). They do not directly correspond to concepts under the EU General Data Protection Regulation (Regulation (EU) 2016/679) (the "EU GDPR"), the United Kingdom General Data Protection Regulation (the "UK GDPR"), or the Swiss Federal Act on Data Protection (the "FADP").

If you are located in the European Economic Area, the United Kingdom, or Switzerland, your rights with respect to advertising and analytics processing through cookies, pixels, and similar technologies are described in our Privacy Notice and include, in particular: (i) the right to give or refuse, and to withdraw at any time, your prior consent under the EU ePrivacy Directive (Directive 2002/58/EC) as implemented in your EU Member State and under the UK Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR") to the storing of information on, or gaining of access to information already stored in, your terminal equipment for non-essential purposes; (ii) the right under Article 21(2) of the EU/UK GDPR to object at any time to processing of personal data concerning you for direct marketing purposes (including profiling related to such direct marketing); (iii) the right under Article 7(3) to withdraw consent at any time where processing is based on consent; (iv) the rights of access, rectification, erasure, restriction, portability, and objection under Articles 15-21 of the EU/UK GDPR; and (v) the right under Article 77 to lodge a complaint with your supervisory authority (in the United Kingdom, the Information Commissioner’s Office at https://ico.org.uk/; in Switzerland, the Federal Data Protection and Information Commissioner at https://www.edoeb.admin.ch/).

To exercise any of these rights, please contact our Privacy Officer at privacy@realmushrooms.com or our EU/UK Article 27 representatives identified at the beginning of our Privacy Notice. The full list of EEA, UK, and Swiss rights, together with information about our lawful bases for processing, our international transfer safeguards (including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum), our retention periods, and our EU and UK Article 27 representatives, is set out in our Privacy Notice.

H. Contact Us

If you have questions about your opt-out rights or this document, please contact us at:

Nammex (North American Medicinal Mushroom Extracts) Inc.

Attn: Privacy Officer

[STREET ADDRESS], British Columbia, Canada

Email: privacy@realmushrooms.com

Phone: [PHONE NUMBER]

EU Representative (Article 27, EU GDPR): [NAME OF EU ARTICLE 27 REPRESENTATIVE], [STREET ADDRESS, EU MEMBER STATE], Email: [EU REP EMAIL], Phone: [EU REP PHONE].

UK Representative (Article 27, UK GDPR): [NAME OF UK ARTICLE 27 REPRESENTATIVE], [STREET ADDRESS, UNITED KINGDOM], Email: [UK REP EMAIL], Phone: [UK REP PHONE].

For our full Privacy Notice, including descriptions of all personal information we collect, how we use it, and your complete rights under applicable Canadian, U.S., EU, UK, and Swiss law, please visit the Privacy Notice on the realmushrooms.com Website.