Privacy Policy SkyRun Franchising Limited, a Colorado limited liability company (“SkyRun,” “we,” “us,” and “our”) respects the importance of the privacy of your personal information. We provide this Privacy Policy so you know about our information handling and storage practices and understand how we collect, use, and share the personal information we receive about you from your use of the website on which this Privacy Policy is posted or referenced (the “Site”), or otherwise in connection with our products, services, which could include information received from other sources including our franchisees. By accessing or using the Site or interacting with us in connection with our products, services or programs, you agree to the terms of this Privacy Policy. Your visit to the Site and any dispute over privacy is subject to the Terms of Use, including limitations on damages and application of the law of the State of Colorado. Use of the Site is strictly voluntary. If you do not agree to our Privacy Policy and Terms of Use, you must immediately log off the Site and may not use the Site. Additionally, we may not be able to assist you in connection with matters relating to our products, services, franchise opportunities or programs. SkyRun franchisees are independent entities, and their processing of information is subject to their own privacy policies. For information on how a specific SkyRun franchisee or processes your information, please direct your request to that SkyRun franchisee. 1. Your Consent BY SUBMITTING YOUR PERSONAL INFORMATION TO US (EITHER DIRECTLY TO US OR INDIRECTLY THROUGH ONE OF OUR SERVICE PROVIDERS), YOU ARE CONSENTING TO THE COLLECTION AND PROCESSING OF YOUR PERSONAL INFORMATION IN THE UNITED STATES AND TO OUR USE OF YOUR PERSONAL INFORMATION AND ANY RELATED INFORMATION IN THE MANNER DESCRIBED IN THIS PRIVACY POLICY, INCLUDING THE TRANSMISSION TO, AND STORAGE AND PROCESSING OF YOUR PERSONAL INFORMATION BY THIRD PARTIES OUTSIDE THE UNITED STATES. IF YOU ARE SUBMITTING PERSONAL INFORMATION OF THIRD PARTIES TO US, YOU WARRANT AND REPRESENT YOU HAVE THEIR CONSENT TO PROVIDE THEIR PERSONAL INFORMATION TO US AND YOU WILL INDEMNIFY US AND HOLD US HARMLESS FROM AND AGAINST CLAIMS BY SUCH INDIVIDUALS RELATING TO OUR PROCESSING AND USE OF SUCH PERSONAL INFORMATION WITHIN THE TERMS OF THIS PRIVACY POLICY. 2. The Data We Collect Anonymous Electronic Information. In general, you can browse the Site without telling us who you are or revealing any personal information about yourself. However, we collect your computer’s or mobile device’s IP address, which you necessarily disclose when you visit the Site so that data (such as the web pages you request) can be sent to your computer or device. Cookies. The Site may utilize “cookies,” which are text files placed on your computer or device that web pages or screens may use to store data on your computer or mobile device or send data to our web servers. We may use cookie data to “recognize” you when you return to the Site, to save your user ID, to track usage information, to troubleshoot how the Site operates and for internal analysis of how people use the Site. Should you decide not to accept cookies from the Site, you will limit the functionality we can provide you. Additional Electronic Information. We may use standard Internet technology, such as web beacons, tracking pixels, and other similar tracking technologies, to track your use of the Site. Location Information. We may collect information about your location if you provide your address or zip code or we may approximate your location based on your IP address. The Site is not designed to respond to “do not track” requests from web browsers. Through Your Interactions with Us. When you engage in certain activities on the Site or otherwise interact with us, such as by subscribing to our newsletter, booking a rental property, inquiring about becoming a rental partner, applying for a job, or inquiring about a franchise opportunity, we may ask you to provide personal and other information. The information we will require will depend on the activity and could include your name, email address, contact number, address, phone number, credit card or other financial information. If you do not provide the mandatory information for a particular activity, you will not be able to engage in that activity. You may also limit your ability to use all or a portion of the Site. If you are a registered user of the Site, we may track when and how you use the Site and the operations you perform on the Site. Information Obtained from Other Sources. We may obtain information about you from other companies and organizations, such as from our affiliates, SkyRun franchisees, online travel agencies, travel insurance partners and service providers that may perform certain operations on our behalf. We process information received from the franchisees to provide them with services as well as for our own purposes in accordance with this Privacy Policy. We may combine information received from other sources with information we have collected or may collect about you. We may also collect information that is publicly available. For example, we may collect information about you when you interact with us through social media. We are not responsible for the accuracy of any information provided by other sources or the data practices of other sources. 3. Use and Disclosure of the Data We Collect Generally, we process and use personal information to provide and improve our services including the Site, for purposes in our legitimate interests and for compliance with applicable laws. To Operate Our Business. We process personal information where: (a) you have given consent to the processing, either to us or to our service providers, partners or franchisees; (b) processing is necessary to or perform a contract with you; (c) processing is necessary for the purposes of the legitimate interests pursued by us or a third party; or (d) processing is necessary for compliance with a legal obligation. Some of our lawful bases for processing your information stem from our independent franchisees. We may use or share your personal information for particular business activities, including, without limitation, facilitating property rentals and related services, facilitating the purchase of travel insurance, responding to your inquiries, processing your bookings, providing you updates on special offers and general information about other services and events offered by SkyRun, providing customer service and support, developing and displaying content tailored to your interests, reviewing your job application, processing your franchise application, and to solicit feedback on your experience with us. Depending on the circumstances and the nature of the information, we may share this information with our affiliated entities, SkyRun franchisees, marketing partners, and other parties with whom we collaborate. For example, we share information with franchisees in order to facilitate your property rentals and similar services, respond to your questions and comments, market and advertise to you, and otherwise comply with applicable law. In addition, when we use service providers, these service providers may have access to your personal information to perform contractually specified services on our behalf. To Improve our Business. We may use your IP address and similar Site use information to: (i) help diagnose problems with the Site, administer and improve the Site, and measure the use of the Site; (ii) identify the type of web browsers used, the pages viewed, the websites from which a visitor found the Site, and the search terms and search engines used to find the Site; and (iii) gather other analytics information relating to use and navigation of the Site. This information does not identify you personally. On occasion we may aggregate this data with data from other users to track overall visitor traffic and usage patterns and provide this aggregate information to vendors, business partners, or affiliates. The information we obtain using standard Internet technology, such as web beacons, tracking pixels, and other similar technologies, enables us to customize the services we offer visitors to the Site, to deliver targeted content, and to measure the overall effectiveness of our online content, advertising, or programming or other activities. We may use your location information to provide personalized content and advertising, to enhance your experience with the Site, to assist us with analytics, and to improve the effectiveness of our Site. We may use the information in an anonymous or aggregated format that does not identify you personally, which uses might include, without limitation, to evaluate existing products, services, and systems; to assist in the development of new products or services; research; advertising; and to identify trends and changes. For Law Enforcement, Regulators and Other Parties for Legal Reasons. We may also disclose personal information in any of the following circumstances: (a) in response to a subpoena, search warrant, court order, or other legal process or request, or as may otherwise be required by law, rule, or regulation; (b) to protect and defend our rights or property or those of our affiliates, franchisees, business partners, or others; or (c) as we, in our sole discretion, believe is appropriate under exigent circumstances in response to a perceived threat to the personal safety, property, or rights of any person or organization. In addition, since our database is a business asset, in the event we are reorganized or become part of another organization, you consent to the sale, assignment, or transfer of your personal information to a successor that acquires substantially all of our business assets, or to an affiliate, as applicable. We do not sell personal information to third parties. Other than as set forth in this Privacy Policy, we do not transfer, share or disclose personal information to third parties. We do not disclose personal information of individuals we know to be under the age of 16 to other businesses or third parties for consideration except as noted above. 4. Google Analytics We use a tool provided by Google called “Google Analytics,” to collect and process information about your use of the Site. Google Analytics collects information such as how often users visit the Site, what pages they visit when they do so, and what other sites they used prior to coming to this Site. We use the information we get from Google Analytics only to improve the Site. Google Analytics only collects the IP address assigned to you on the date you visit the Site, rather than your name or other identifying information. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Google sets and reads cookies to collect this data and your web browser will automatically send data collected by those cookies to Google. Google uses this data to provide us with reports that we will use to improve the Site’s structure and content. For more information on how Google uses this data, visit Google’s Privacy Policy and Google’s page describing how Google uses data when you use sites or apps that use Google’s services. You can prevent Google Analytics from recognizing you on return visits to the Site by disabling cookies on your browser. However, this may impact your use and enjoyment of the Site. From time to time, we may enable and implement Google Analytics Advertising Features including Remarketing with Google Analytics and Demographics and Interest Reporting. Remarketing with Analytics uses Google Analytics cookies to serve advertisements to you across the Internet based on your visits to the Site. Demographics and Interest Reporting uses a third-party cookie to collect information about our Site traffic by tracking users across websites and across time, which generates a report for us to better understand our Site users. To opt out of remarketing advertising provided through Google, to customize your ad preferences, or to limit Google’s collection or use this information, visit Google’s Safety Center and Google’s Ad Settings and follow Google’s personalized ad opt-out instructions. Opting out will not affect your use of the Site. 5. Children’s Online Privacy Protection The Site is not directed to children under the age of 13 and we will not knowingly collect personal information from children under the age of 13 on the Site. If we become aware that we have inadvertently received personal information from a child under the age of 13 on the Site, we will delete the information from our records. 6. Security of Personal Information We take the security of personal information seriously and we take what we believe to be reasonable precautions and have implemented certain safeguards to protect the security of data and personal information. We may transmit your personal data to third parties outside the United States for storage or processing. We will attempt to ensure that your personal information will be subject to appropriate safeguards and that it is processed and secured in accordance with applicable law. However, we cannot guarantee against any loss, misuse, unauthorized disclosure, or alteration or destruction of data or personal information. While we strive to protect your personal information, we do not guarantee the security of any information you transmit to or from the Site or by email or otherwise, and you provide such information at your own risk. You acknowledge that: (a) there are security and privacy limitations in computer systems and on the Internet which are beyond our control; (b) the security, integrity, and privacy of any and all information and data exchanged between you and us through the Site, including personal information, cannot be guaranteed; and (c) any such information and data may be viewed or tampered with by a third party while such information or data is being used, transmitted, processed, or stored. 7. Our Relationship to Other Websites The Site may contain links to other websites. If you visit one of these other websites, we encourage you to review the privacy policy on that website. We are not responsible for the policies and practices of other websites, and any information you submit to those websites is subject to their privacy policies. 8. Privacy Rights and Requests You may have rights under applicable laws concerning personal information we have collected about you, which may include the right to access your personal information we have, to ask us to delete, correct, or restrict the use of your personal information, to withdraw your consent to our use of your personal information, to ask how we have used your personal information, and to ask whether we have shared your personal information. We will honor your rights to the extent required by us under applicable law or as we may agree to honor in our sole discretion. All privacy requests relating to your personal information, including those related to access to, rectification of, restriction of, processing of, sharing of, or objection to the processing of your personal information, withdrawal of consent to handle your personal information, the right to be forgotten, or to opt-out of the sale of your personal information (in case our policy changes), can be submitted to us one of the following ways: By email: info@skyrun.com By mail: Attn: Privacy Requests 390 Interlocken Crescent, Suite 350 Broomfield, CO 80021 By phone: 877-SKYRUN-1 All communications must be in the English language. Please clearly state what information you are requesting and any other requests you are making. You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent’s permission to do so and verify your identity directly. We will respond to reasonable requests within the time limits established by applicable law or within a reasonable time if no time limit is established by applicable law. If you or your authorized agent sends us an email requesting that we take action regarding your personal information or the right to be forgotten, the requesting email MUST come from the email address we have on file for you in order to verify that the request is valid and also to protect your personal information. All other requests must be made in writing or otherwise be verifiable as originating from you or your authorized agent. In order to protect your information and because people may have the same name, we will only provide or delete personal information that we can verify is associated with your particular email address or where we can reasonably identify the identity of the requestor. For your protection, we may ask you for additional information to verify your identity. In most cases, we will provide the information you request and correct or delete any inaccurate personal information you discover. We reserve the right, however, to limit or deny your request to the extent permitted by applicable law if: (a) complying with the request may present a threat to the personal safety, property, or rights of any other person or organization; (b) complying with the request may lead to a violation of applicable laws or regulations; (c) we are not required to comply with the request because of a legal rule or exception; or (d) you have failed to provide us with sufficient evidence to verify your identity. We will not delete personal information if that personal information is related to an ongoing transaction. Even after a request, we may also keep personal information where necessary to comply with applicable laws or where necessary to protect a legal right or fulfill a legal obligation. Please note that SkyRun franchisees are independent entities, and their processing of information is subject to their own privacy policies. If you wish to exercise any of these rights with respect to the processing of information by SkyRun franchisees, please contact the specific franchisee to effectuate your requests, and we will work with the franchisee to address your requests to the extent required by applicable law. 9. How Long We Keep Personal Information We store the personal information we collect about you for as long as is necessary for the purpose(s) for which we collected it, or for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations. 10. Changes to Privacy Policy We reserve the right to revise this Privacy Policy, in whole or in part, at any time without notice to you. You expressly waive any right to receive notice of any revisions to this Privacy Policy. We encourage you to review this Privacy Policy regularly in your use of the Site to ensure you are aware of current practices. Any use of the Site following the date on which the revised Privacy Policy is published on the Site shall constitute your acceptance of all such changes. 11. Contact For questions or comments related to this Privacy Policy, please email us at info@skyrun.com or call us at 877-SKYRUN-1. Last updated: January 2024 4893-1640-1562, v. 1