PRIVACY POLICY

Last Updated/Effective Date: January 9, 2024

Last Updated/Effective Date:
December 19, 2023

Table of Contents:

1. SCOPE AND APPLICATION : What and who this Policy covers
2. COLLECTION OF INFORMATION: The sources of and methods by which we and our service providers collect information from and about you, including information about your interaction with the Company Services
3. USE AND DISCLOSURE: How we use the information we collect from and about you, and who we might share it with and why
4. SECURITY: How we protect your information from loss or misuse
5. USER ACCESS AND CONTROL: How you can access and control the information we maintain about you
6. OTHER IMPORTANT INFORMATION: Other things you should know about this Policy and how we handle your information
7. CONTACT US: How to contact Company about this Policy
8. CALIFORNIA CONSUMER PRIVACY ACT NOTICE: Other things you should know if you reside in California
9. FOR CONSUMERS IN VIRGINIA, COLORADO, CONNECTICUT, AND OTHER U.S. STATES WITH SIMILAR PRIVACY LAWS: Other things you should know if you are a consumer residing in Virginia, Colorado, Connecticut, or other states with similar privacy laws

1. SCOPE AND APPLICATION

Blockchain Creative Labs, LLC (“Company” or “we”) wants you to be familiar with how we collect, use and disclose information from and about you. This Privacy Policy describes our practices in connection with information collected through services such as websites, and mobile sites that link to this privacy policy (collectively, the “Company Services”). California residents, please see the California Consumer Privacy Act Notice in Section 8 below. Consumers in Virginia, Colorado, Connecticut, and other states with similar privacy laws, please see Section 9 below. By using Company Services, you agree to the terms and conditions of this Privacy Policy. Information about our affiliated companies (“Fox Affiliates”) is available at www.FoxCorporation.com.

This Privacy Policy applies to all users, including both those who use the Company Services without being registered with or subscribing to a Company Service and those who have registered with or subscribed to a Company Service. This Privacy Policy applies to Fox’s collection and use of your personal information (i.e., information that identifies a specific person, such as full name or email address). It also describes generally our practices for handling non- personal information (for example, interests, demographics and services usage).

2. COLLECTION OF INFORMATION

Depending on your interactions with us, Company and our service providers may collect the following information from and about you:

Registration Information is the information you submit to register for or subscribe to a Company Service, for example, to create an account, receive a newsletter or request other information. Registration Information may include, for example, name, email address, mailing address, and telephone number.

Content Verification Information is the information you provide when you use the content verification and other related functions of the Company Services and may include, for example, unique identifiers, images, or other material. Content Verification Information is subject to the Company Terms of Use

Activity Information. When you access and interact with the Company Services, Company and its service providers may collect certain information about those visits. For example, in order to permit your connection to the Company Services, our servers receive and record information about your computer, device, and browser, including potentially your IP address, browser type, and other software or hardware information. If you access the Company Services from a mobile or other device, we may collect a unique device identifier assigned to that device, or other transactional information for that device.

Cookies and other tracking technologies (such as browser cookies, pixels, beacons, local storage, and other mechanisms) use various approaches to collect and store data. Some of these technologies store data in the browser or on your device. Other technologies may use network-related or other information to recognize your device (e.g., IP address). Company’s websites, and other services use these technologies, for example, when you first request a web page and data is then stored on your computer or other device so the website or other service can access information when you make subsequent requests for pages from that service. These technologies may also be used to collect and store information about your usage of the Company Services, such as pages you have visited, search history, and the video and other content you have viewed.

Other parties that support the Company Services by providing services, such as tracking aggregate Company Services usage statistics, may also use these technologies to collect similar information when you use the Company Services or other parties’ services. Those parties may also use these technologies, along with activity information they collect, to recognize you across the devices you use, such as a mobile device, laptop or other computer.

Your browser may be initially set to accept cookies, but you can change your settings to notify you when a cookie is being set or updated, and to block cookies altogether. Please consult the "Help" section of your browser for more information, including on how to clear data from local storage and, depending on your browser, how to turn off other data collection by the browser. For more information about Google Analytics, please review the site “How Google uses information from sites or apps that use our services,” located at www.google.com/policies/privacy/partners/. To opt out of Google Analytics specifically, please go tohttps://tools.google.com/dlpage/gaoptout. Please note that by blocking any or all cookies, you may not have access to certain features, content or personalization available through the Company Services.

Information from Other Sources. We may supplement the information we collect with information from other sources, such as publicly available information about your online and offline activity from social media services, advertising technology companies, advertisers, commercially available sources, and information from our Company Affiliates or business partners.

Depending on your interactions with us, Company may not have collected information from you for each of the categories above.

'Do Not Track'. At this time, we do not respond to the 'Do Not Track' signal, as we await the work of interested stakeholders and others to develop standards for how the 'Do Not Track' signal should be interpreted.

3. USE AND DISCLOSURE

We may use and disclose some or all of the information we collect from and about you for the following purposes:

To provide the Company Services. We use information we collect from and about you to provide the Company Services. This may include:

1. to measure, maintain, and improve those Company Services and features and to develop new products and services, including conducting research and quality and safety assurance measures;
2. to improve your experience with both online and off-line Company Services by delivering content you will find relevant and interesting, including marketing messages;
3. to perform identity verification;
4. to allow you to comment on content and participate in contests;
5. to provide you with customer support and to respond to inquiries. This may include the use of chatbots. Please note that your inquiries and responses to these chatbots may be transcribed and retained.
6. to make inferences and predictions about your potential areas of interest in order to provide you with content that is more interesting, personalized, and relevant to you;
7. to maintain our facilities and infrastructure;
8. to comply with internal policies, including accounting, audit, and other internal functions; and
9. to maintain records, conduct risk and security controls and monitoring.

To allow service providers to assist us in providing and managing the Company Services. Information we collect from and about you may be made available to certain service providers, such as contractors, chatbot providers, analytics and other measurement companies, and agents or sponsors, who help us analyze and understand your use of the Company Services, and manage and/or provide investor relations or other Company Services.

To deliver video content. In the ordinary course of our business, we may share information that we collect from or about you with other parties in order to process your requests and fulfill your orders for video content offered through the Company Services.

To provide co-branded services and features. We may offer co-branded services or features, such as contests, sweepstakes, or other promotions together with other parties (“Co- Branded Services”). These Co-Branded Services may be hosted on Company Services or on that other party’s service. By virtue of these relationships, we may share information you submit in connection with the Co-Branded Service with that party. That other party’s use of your information will be governed by its privacy policy.

To contact you. Fox may periodically send promotional materials or notifications related to the Company Services. If you want to stop receiving promotional materials, you can email us at contact.us@fox.com or follow the unsubscribe instructions at the bottom of each email. There are certain service notifications and other non-promotional emails that you may not opt-out of, such as notifications of changes to the Company Services or policies.

To share with our Company Affiliates. Company may share information we collect from and about you as described in this Privacy Policy with Company Affiliates for the purposes described in this Privacy Policy. A link to a website that lists Company Affiliates can be found at the beginning of this policy. Users who visit Company Affiliates’ services should still refer to their separate privacy policies, which may differ in some respects from this Privacy Policy.

To share with business partners. Company may share information we collect from and about you as described in this Privacy Policy with business partners to permit them to send you marketing communications consistent with your choices.

To protect the rights of Company and others. There may be instances when Company may use or disclose information we collect from and about you as described in this Privacy Policy, including situations where Company has a good faith belief that such use or disclosure is necessary in order to: (i) protect, enforce, or defend the legal rights, privacy, safety, or property of Company, our Company Affiliates, or our or their employees, agents and contractors (including enforcement of our agreements and our terms of use); (ii) protect the safety, privacy, and security of users of the Company Services or members of the public; (iii) protect against fraud or for risk management purposes; (iv) comply with the law or legal process; or (v) respond to requests from public and government authorities.

To complete a merger or sale of assets or other corporate transaction. If Company sells all or part of its business or makes a sale or transfer of its assets or is otherwise involved in an acquisition, reorganization, merger, or transfer of all or a part of its business or other corporate transaction (including in connection with a bankruptcy or similar proceedings), Company may transfer or disclose information we collect from and about you as described in this Privacy Policy to the party or parties involved in the transaction as part of that transaction.

Depending on your interactions with us, Company may not have collected, used or disclosed information from or about you in each of the categories above, and to the extent that Company has disclosed information from or about you, it may not include all of the information that we collect from and about you as described in this Privacy Policy.

Please note that when the information collected from or about you does not identify you as a specific person, we may use that information for any purpose or share it with other parties, to the extent permitted by applicable law.

4. SECURITY

Company uses commercially reasonable administrative, technical, personnel, and physical measures designed to safeguard information in its possession against loss, theft and unauthorized use, disclosure, or modification. However, no one can guarantee the complete safety of your information.

5. USER ACCESS AND CONTROL

If you would like to access personal information we hold about you, delete or correct personal information you have previously provided directly to us, please visit https://fcprivacy.exterro.net/portal/dsar.htm?target=Verify_Fox and submit a request. Please note that, for security reasons, we will ask you to verify your identity in order to proceed with your request. If you would like to suppress or otherwise limit our use of your personal information, you may contact us as outlined in Section 7 below. In your request, please include your email address, name, address, and telephone number and specify clearly what information you would like to suppress or limit. We will try to comply with your request as soon as reasonably practicable and consistent with applicable law. Please note that, subject to applicable law, in some cases we may not comply with your request where we may require your information in order to comply with applicable law, or to protect, enforce or defend our rights or employee rights, or those of a Company Affiliate.

If you are a resident of California, please see the section entitled “California Consumer Privacy Act Notice,” below, for more information about the rights you have under California law.

If you are a California resident, you may request that we not share your personal information on a going-forward basis with Company Affiliates or unaffiliated third parties for their direct marketing purposes by mailing us privacy@bcl.xyz. We will try to comply with your request(s) as soon as reasonably practicable and consistent with applicable law.

6. OTHER IMPORTANT INFORMATION

Updates to this Privacy Policy. Company may modify this Privacy Policy. Please look at the Effective Date at the top of this Privacy Policy to see when this Privacy Policy was last revised. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on the Company Services.

Location of Data. The Company Services are hosted in and managed from the United States.

Linked Services. The Company Services may be linked to sites operated by unaffiliated companies, and may carry advertisements or offer content, functionality, games, newsletters, contests or sweepstakes, or applications developed and maintained by unaffiliated companies. Company is not responsible for the privacy practices of unaffiliated companies, and once you leave the Company Services or click an advertisement you should check the applicable privacy policy of the other service.

In addition, Company is not responsible for the privacy or data security practices of other organizations, such as Meta, Instagram, X (formerly Twitter), Apple, Google, Microsoft or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including in connection with any information you disclose to other organizations through or in connection with the Company Services.

Data Retention. We will retain your information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or allowed by law.

We may also retain backup information related to your account on our servers for some time after cancellation or your request for deletion for fraud detection or to comply with applicable law or our internal security, or recordkeeping policies. It may not always be possible to completely remove or delete all of your information due to technical constraints, or contractual, financial, or legal requirements.

Deidentified Information. To the extent we process “deidentified” personal information, as defined under applicable law, we will maintain and use that information in deidentified form and will not attempt to reidentify the information except as permitted by applicable law.

7. CONTACT US

If you have questions about this Privacy Policy, please contact us at:

Email: contact.us@fox.com

Mail: Fox Privacy Officer

2121 Avenue of the Stars, Suite 1200

Los Angeles, CA 90067

8. CALIFORNIA CONSUMER PRIVACY ACT NOTICE

This California Consumer Privacy Act Notice Section provides information for California residents in connection with the California Consumer Privacy Act (“CCPA”). California residents who are prospective, current, or former Company employees; or contractors, emergency contacts, or beneficiaries (although not employees) may view our workforce-related California privacy notice by visiting https://www.fox.com/workforce-privacy-notice/. California residents who are business consumers acting as employees, owners, directors, officers or independent contractors of an entity conducting due diligence or providing or receiving a product or service from Company (“Business-to-Business Contacts”) may view our B2B privacy notice by visiting https://www.bcl.xyz/b2bprivacy-policy/. Under the CCPA, and for purposes of this Section, “Personal Information” generally means information that identifies, relates to, or describes a particular California resident and includes the categories listed below. This Section 8 provides details about the categories of Personal Information of California residents that we have collected or disclosed during the last 12 months, as well as rights California residents have under California law.

Categories of Personal Information Collected and Disclosed:

The categories of Personal Information that we have collected and disclosed are below, along with the categories of third parties to whom each category of Personal Information was disclosed. Depending on the California resident’s interactions with us, Company may not have collected or disclosed each (or any) of these categories of Personal Information about each individual.

Sources of Personal Information. We collect Personal Information directly from California residents themselves, as well as from Company Affiliates, and sources of demographic and other information. Depending on the individual’s interactions with us, Company may not have collected Personal Information from each (or any) of these categories of sources.

Purposes. We may use Personal Information and/or disclose it to third parties for the following purposes:

1. to operate, manage, and maintain our business, including in connection with a sale, acquisition, reorganization, merger, transfer of all or a part of our business, or other corporate transaction (e.g., a bankruptcy or similar proceeding);
2. to provide our products and services;
3. to accomplish our business purposes and objectives, including:
1. developing, improving, repairing, and maintaining our products and services;
2. personalizing and marketing our products and services;
3. conducting research, analytics, and data analysis;
4. maintaining our facilities and infrastructure;
5. quality and safety assurance measures;
6. conducting risk and security controls and monitoring;
7. detecting and preventing fraud;
8. performing identity verification;
9. performing accounting, audit, and other internal functions;
10. complying with law, legal process, and internal policies;
11. maintaining records; and
12. exercising and defending legal claims.

Depending on the California resident’s interactions with us, Company may not have used Personal Information collected about that resident for each of these purposes, and to the extent that Company has disclosed Personal Information about that resident, it may not include all of the Personal Information collected about that resident.

“Sale” and “Sharing” of Personal Information. We do not “sell” or “share” Personal Information as defined in the CCPA. Please note, however, that the CCPA definitions of “sale” and “sharing” does not include, for example, the transfer of Personal Information as an asset that is part of a merger, bankruptcy, or other similar transaction involving of all or any portion of our business.

Sensitive Personal Information. We do not process “sensitive” Personal Information for purposes other than those specified in the CCPA Regulations section 7027(m) (such as to provide the services and for security purposes).

Data Retention. We will retain Personal Information from or about you as reasonably necessary and proportionate to achieve the purpose(s) for which the Personal Information was collected or processed as outlined in this Section 8 unless a longer retention period is required or allowed by law.

California Rights.

If you are a California consumer, you have the following rights:

(1) Right to Know. You have the right to request that we disclose to you the following information:

1. The categories of Personal Information we collected about you and the categories of sources from which we collected such Personal Information;
2. The specific pieces of Personal Information we collected about you for the applicable time period;
3. The business or commercial purpose for collecting, disclosing, or selling Personal Information about you;
4. The categories of Personal Information about you that we sold and the categories of third parties to whom we sold that Personal Information; and
5. The categories of Personal Information about you that we otherwise shared or disclosed and the categories of third parties with whom we shared or disclosed that Personal Information.

To make a request for your Personal Information, please visit https://fcprivacy.exterro.net/portal/dsar.htm?target=Verify_Fox or call us at 888- 596-3929. You will need to provide your name and email address, along with other details about your request. You will then receive verification instructions by email. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for your Personal Information. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name, and your email address. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request, where, for example, we are unable to verify your identity or an exception to this right applies.

(2) Right to Request Deletion. You have the right to request that we delete Personal Information we collected from you.

To make a request for deletion, please visit https://fcprivacy.exterro.net/portal/dsar.htm?target=Verify_Fox or call us at 888- 596-3929. You will need to provide your name and email address, along with other details about your request. You will then receive verification instructions by email. Please note that you also will be asked to separately confirm that you would like to proceed with your deletion request. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for deletion. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name, and your email address. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies.

(3) Right to Request Correction. You have the right to request that we correct inaccurate Personal Information we collected about you.

To make a request for correction of inaccurate Personal Information, please visit https://fcprivacy.exterro.net/portal/dsar.htm?target=Verify_Fox or call us at 888-596- 3929. You will need to provide your name, email address, and the Personal Information you would like to have corrected, along with other details about your request. You will then receive verification instructions by email. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for correction of inaccurate Personal Information. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name, your email address, and the personal information you wish to correct. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies.

(4) Right to be Free from Discrimination. You have the right to be free from unlawful discrimination for exercising your rights under the CCPA.

9. FOR CONSUMERS IN VIRGINIA, COLORADO, CONNECTICUT, AND OTHER U.S. STATES WITH SIMILAR PRIVACY LAWS

Depending on where you live, you may have certain additional rights regarding your personal information. This section provides information for consumers residing in Virginia, Colorado, and Connecticut, in connection with the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (the “CDPA”), and other states with similar privacy laws. Under the VCDPA, the CPA, the CDPA, and other similar state privacy laws, and for purposes of this Section, “Personal Data” generally means information that identifies, relates to, or describes a particular consumer residing in Virginia, Colorado, Connecticut, or other states with similar privacy laws, and includes the categories listed below. This Section 9 provides details about the categories of Personal Data of consumers in Virginia, Colorado, and Connecticut, and other states with similar privacy laws, that we have collected, or disclosed as well as rights consumers in Virginia, Colorado, Connecticut, and other states with similar privacy laws have under their states’ laws. Depending on the consumer’s interactions with us, Fox may not have collected, disclosed, or processed each (or any) of these categories of Personal Data for each listed purpose. We do not “sell” or process Personal Data for the purposes of targeted advertising. Additionally, we do not knowingly process Personal Data of children under 13 years of age.

Categories of Personal Data Collected or Disclosed:

The categories of Personal Data that we collected or disclosed are below, along with the purposes for processing and categories of third parties to whom each category of Personal Data was disclosed.

Please note that we may process Personal Data in each of the above categories in order to protect the rights of Company and others, and/or to complete a merger or sale of assets or other corporate transaction. For more details about our purposes for processing, please see the Use and Disclosure section above.

Targeted Advertising and “Sale” of Personal Data.

We do not “sell” Personal Data or process Personal Data in connection with “targeted advertising,” as those terms are defined under the laws of Virginia, Colorado, Connecticut and other states with similar privacy laws. Please note that these laws’ definitions of “sale,” however, do not include, for example, the transfer of Personal Data as an asset that is part of a merger, bankruptcy, or other similar transaction involving of all or any portion of our business.

Consumer Rights under Virginia, Colorado, Connecticut, and other similar laws.

If you are a consumer residing in Virginia, Colorado, Connecticut, or other state with a similar privacy law, you have the following rights:

(1) Right to Access and Portability. You have the right to confirm whether we are processing Personal Data concerning you, and to request that we disclose to you the Personal Data we collected from or about you, including in a portable form.

To confirm whether or not we are processing your Personal Data, or to make a request for your Personal Data, please visit https://fcprivacy.exterro.net/portal/dsar.htm?target=Verify_Fox or call us at 888- 596-3929. You will need to provide your name and email address, along with other details about your request. You will then receive verification instructions by email. In some circumstances, we may need additional information from you to verify your identity or proceed with your request

You can use an authorized agent to submit a request for your Personal Data. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name and email address. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies.

(2) Right to Request Deletion. You have the right to request that we delete Personal Data we collected from you or about you.

To make a request for deletion, please visit https://fcprivacy.exterro.net/portal/dsar.htm?target=Verify_Fox or call us at 888- 596-3929. You will need to provide your name and email address, along with other details about your request. You will then receive verification instructions by email. Please note that you also will be asked to separately confirm that you would like to proceed with your deletion request. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for deletion. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name and email address. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies.

(3) Right to Request Correction. You have the right to request that we correct inaccurate Personal Data we collected from or about you.

To make a request for correction of inaccurate Personal Data, please visit https://fcprivacy.exterro.net/portal/dsar.htm?target=Verify_Fox or call us at 888- 596-3929. You will need to provide your name, email address, and the Personal Data you would like to be corrected, along with other details about your request. You will then receive verification instructions by email. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for correction of inaccurate Personal Data. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name, email address, and the personal data you would like to correct. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies.

(4) Right to Appeal. If we decline to take action in response to your Personal Data rights request, consumers residing in Virginia, Colorado, Connecticut, and other states with similar privacy laws may request an appeal, by notifying us through our privacy rights portal by following the instructions provided with the response to your request.

(5) Right to be Free from Discrimination. You have the right to be free from unlawful discrimination for exercising your rights under the laws of Virginia, Colorado, Connecticut, and other states with similar privacy laws.