California Privacy Notice

This California Privacy Notice is effective as of March 11, 2026

This California Privacy Notice supplements our Privacy Policy and applies only to California residents. This notice sets forth the disclosures and rights for California Consumers regarding their personal information, consistent with applicable law, including without limitation the California Consumer Privacy Act as amended by the California Privacy Rights Act and any implementing regulations adopted thereunder ("CCPA"). Terms (including defined capitalized terms) used in this California section of this Privacy Policy have the same meanings given in the CCPA, unless otherwise defined.

1. California Consumer Rights

Subject to certain exceptions, California residents have the following rights:

• Access and portability. Upon a verifiable request, California residents can request information regarding what personal information we collect, use, or disclose, and other information about our data practices, including the right to request we provide you with the categories and/or specific pieces of personal information we have collected about you, and the categories of sources of such personal information and the categories of external recipients to which such personal information is disclosed (but not the individual sources or recipients);
  • In order to provide specific pieces of information about you, we may require a signed declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.
• Deletion. Request deletion of the personal information we maintain about you;
  • Please note that as part of the verification process, once you submit a request to delete, we may follow up and require you to confirm that you want your information deleted.
• Correction. Request correction of inaccurate personal information we maintain about you.
• Do Not Sell or Share My Personal information. You may request to opt out of the "sale" or the "sharing" of your personal information to third parties for cross-context behavioral advertising (i.e. targeted advertising), whether or not for monetary or other valuable consideration. We do not knowingly sell or share personal information of residents younger than the age of 18 for cross-contextual behavioral advertising their personal information.
• Limit the Use and Disclosure of Sensitive Personal Information. Under the CCPA, a business must only provide the Right to Limit the Use and Disclosure of Sensitive Personal Information when Sensitive Personal Information is collected or processed for the purpose of inferring characteristics about a consumer or does not fall under certain statutory exceptions. Company's use and disclosure of Sensitive Personal Information falls within the statutory exceptions, and we therefore do not currently offer this right.

We will not discriminate against you by offering you different pricing or products, or by providing you with a different level or quality of products, based solely upon you exercising your rights under the CCPA.

2. Exercising Your Rights

Do Not Sell or Share My Personal Information

Cookie Based Opt-Outs for Do Not Sell or Share for Cross Context Behavioral Advertising

Company engages in online advertising practices (and certain analytics or similar activities) whereby we share personal information with other companies and service providers in compliance with the law in order to deliver more meaningful ads and other communications to consumers, and for other similar reasons provided in this Privacy Policy. These practices may be considered a "sale" or "share" for cross-context behavioral advertising as defined in the CCPA. To disable sharing through cookies set by third parties that may be considered "sharing" under the CCPA, please refer to the Manage Cookies link in the cookie banner of the applicable Site.

Right to Know; Right to Delete; Right to Correct

If you are a California resident and wish to exercise any of these rights, please: (a) contact us at privacy@mileycyrus.com with the specific nature of your request, referencing "Your California Privacy Rights"; or (b) call the following toll-free number: 1-800-487-3015. When submitting your request, you must affirm that you are a California resident or an authorized representative for a California resident and provide enough information for us to verify you are the person about whom we collected personal information or their authorized representative. All requests should be properly labelled and contain all the necessary information so that we can understand, evaluate and respond to the request.

Authorized Agents

If you are an authorized representative submitting a request on a consumer's behalf, please complete the applicable request per the instructions in this Notice. We will follow up with authorized agents to request this documentation. Such written permission must state the agent's full legal name, the full legal name of the applicable consumer, and a clear description of the permission granted. Alternatively, an authorized agent may submit a copy of a power of attorney under Probate Code sections 4000-4465. The consumer's identity, in addition to the authorized agent's identity, will need to be independently verified for us to be able to fulfill your request. We may also ask the consumer to directly confirm with us that they provided the agent permission to submit the request. If we cannot verify your identity to a sufficient level of certainty or we do not receive adequate proof that you are authorized to act on the consumer's behalf, we may deny the request.

Verifying Requests

In your request, you must provide enough information to allow us to verify you are the person about whom we collected personal information, or their authorized representative. In respect of Californian residents' rights of access and portability, deletion and correction, we will take reasonable steps to verify your identity based upon the information you provide, and you may be asked to provide additional proof of identification so that we can verify your identity and validate the request. If we cannot verify your identity to a sufficient level of certainty to respond to your request, we cannot respond to your request. Pursuant to the CCPA, we will not require you to verify your identity, beyond asking for the information necessary to complete your request, when you exercise your rights to opt out of the sales or sharing of your personal information.

Retention

We will retain your information for as long as your account is active and as needed to provide you services (including the time period reasonably necessary to provide you the services you request, and exercise the choices and rights you have requested), or otherwise to fulfill the purpose(s) for which your information was collected. We will use and retain your information as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

Notice of Financial Incentive

Under California regulations, if we offer certain loyalty, discount, or similar program(s) directly or reasonably related to the collection, retention or deletion of your personal information, such program may be considered a "financial incentive". In such cases, we will be required to make additional disclosures to you.

3. Personal Information We Collect and Share & Purposes for Collection

4. California "Shine the Light"

If you are a California resident, California Civil Code Section 1798.83 provides you the right to receive: (a) information identifying any third party(ies) to whom we may have disclosed, within the preceding calendar year, your personal information for that third party's direct marketing purposes; and (b) a description of the categories of personal information disclosed. To obtain such information, please contact us or write to us at:

mcdotcom, Inc.
700 12th Avenue South, Suite 201
Nashville, TN 37203
Email: notices@mileycyrus.com

We are not responsible for requests that are mis-labeled or sent improperly, or do not have complete information.