PRIVACY POLICY

Effective Date: 30 October 2026.

Breathe & Believe Global Privacy Policy

This privacy policy describes how Breathe & Believe Global collects, uses, and shares data. It also describes your rights to control data about you. Legally speaking, Tyger Beau Limited, company number 13120517 (trading as Breathe & Believe Global) is the “data controller” of this data and is primarily responsible for how it is collected, used, and shared.

The disclosures in this privacy policy cover Breathe & Believe Global’s collection and use of data related to our websites, online services, ticket sales, and event management. We refer to all these together as our “Sites”.

Some platforms or partners we use or link to from the Sites may collect data for their own purposes as controller or joint controller. Those platforms or partners will provide their own privacy policy, which will apply to their collection and use of data collected for their own or joint purposes. We do our best to partner with companies we trust to responsibly handle data about you, but please have a look at these other privacy policies so you understand how those partners will use your data.

How to contact us

If you have questions or concerns about this privacy policy or our data practices, contact us at hello@breatheandbelieveglobal.com.

Information we collect and how we use it

We collect and use data about you as described here. Some data may be optional. The uses described here may be subject to your consent or other choices as required by privacy laws or other legal requirements.

If you: | We may collect: | And use it to:

Visit our Sites.

IP address or similar network information, browser information, device identifier information, cookie or similar identifiers, location based on IP address, language and time zone settings, and page interactions (such as scrolling, clicks, length of visits, pages viewed).

Understand traffic volume and use of our Sites, understand user demographics, identify and resolve technical issues, develop and personalize new features, generate audiences for online advertising, protect the Sites against fraud or security threats, and measure the effectiveness of online advertising.

Sign up for our email or marketing list.

Name, email address, phone number.

Operate our direct marketing list, measure effectiveness of our marketing, and manage your marketing profile.

Purchase a ticket to an event.

Name, email address, billing address, credit card information, special needs or accommodations related to an event.

Process purchase payments, prevent fraud, provide customer support, facilitate accommodations, and enable your participation in events to which you purchased a ticket.

Attend an event.

Name, check-in status, check-in time, photographs, videos, or audio recordings.

Operate and manage the event, review event activities, market future events.

Log in to a Site.

Name, email address, and other login information.

Facilitate account creation and login experiences and secure the Sites and protect your account.

Contact us with a question or customer service request.

Name, email address, order information, and any information you provide about your question or concern.

Respond to your questions or concerns, research and address product or service issues.

In addition to the above, we may use any data collected about you to manage your rights and choices, comply with legal or regulatory obligations, resolve disputes and enforce our agreements, secure our Sites, prevent fraud or other misuse, and protect the safety of our customers.

For individuals in the European Economic Area or United Kingdom, our legal bases of processing are:

• Consent for direct marketing such as sending you emails, any online advertising or tracking where consent is required, and for any health data shared for accommodations or other Event-related purposes.

• Necessary for performance of a contract for fulfilling event ticket purchases or other orders.

• Necessary for compliance with legal obligations where the data processing is required by law.

• Legitimate interests for other uses.

How we share information about you

We may share information about you in the following ways:

• If necessary, with partners with whom we collaborate to operate events to which you purchased a ticket.

• With vendors who provide services on our behalf. These vendors will only use data about you for the purpose of providing services and not for their own benefit.

• With your consent or upon notice and opportunity to opt out, according to legal requirements.

• In response to a legally enforceable subpoena, court order, government inquiry, or other binding legal process.

• With an acquiring company as part of a sale, merger, or other business transfer where our company or its assets are purchased.

• Where necessary to protect the rights, safety, or security of you or others.

We may engage in common data practices that are considered a "sale" of personal information under certain laws including the California Consumer Privacy Act. These include use of "custom audience" advertising features and standard online advertising tools on social media platforms such as TikTok, Meta, Google, and Snapchat.

If our company or assets are sold, merged, or transferred, your information may be transferred to the new owner as part of that transaction. In that case, your information will remain protected and subject to the same privacy commitments in place at the time it was collected, unless you are notified otherwise and given the opportunity to opt out.

Your rights

You may have the right to control how we collect, use, or share information about you, including rights to access, correct, delete, obtain copies of, withdraw consent for, or opt out of online advertising or other processing of data about you.

To exercise these rights, please contact us as described in the “How to contact us” section above. We will respond as quickly as we can within the time periods required by applicable laws, which in most cases is between 30 and 45 days.

Storage and retention of data

Our default rule is that we keep information about you as long as necessary to fulfil the purpose for which it was collected or for a use disclosed above. We will use reasonable security measures to protect your data.

We may use service providers that store data in different parts of the world, including the United States. We take steps to ensure our service providers comply with international data transfer requirements, usually through approved data transfer agreements.

Children

Our Sites are not directed to children. If you believe we have collected data about your child, please contact us and we will either delete that data or obtain your parental consent for its use.

Analytics, cookies, and tracking

We may use advertising technologies including cookies, tags, pixels, or similar technologies. These technologies allow us to identify audiences of interested fans and target those fans with promotions and advertisements that we think may be of interest.

Some of these ads may be personalized, meaning they are intended to be relevant based on your prior activity or demographic information we or the advertising partner has about you.

We use analytics to better understand how our Sites are used. This includes Google Analytics by Google, which requires us to disclose how they process data collected through Google Analytics. Please see this link for information on Google’s processing of data.

Changes to this privacy policy

Any material changes we make to our privacy policy in the future will be posted here. We will also notify you of privacy policy changes through email, login notifications, or other mechanisms reasonably designed to provide notice of the changes. We encourage you to check our privacy policy periodically to refresh your understanding of our data practices.

Local rights and disclosures

Certain local laws require specific disclosures related to our data practices.

US State disclosures

Residents of certain US states may have some or all of the following rights, which can be exercised by contacting us as described in the “How to contact us” section above:

• Access and obtain a copy of personal information about you.

• Confirm the categories and/or specific pieces of personal information about you we have collected, used, disclosed, or shared with third parties.

• Correct inaccuracies or delete personal information about you.

• Opt out from profiling that may produce legal or other significant effects.

• Opt out from targeted advertising and/or the sale or sharing of personal information about you.

• Request a list of categories, or where required by law specific names, of third parties to which we have disclosed personal information about you.

• Non-discrimination for the exercise of your privacy rights.

If you are a resident of California, you may opt out of having your personal information shared with third parties for the third party’s direct marketing purposes.

If you are not satisfied with the results of a privacy rights request you can contact us to appeal our decision as described in the "How to contact us" section above. Please include "Appeal" in the subject line of your message.

We may require validation of your identity before fulfilling your privacy rights request. Validation will vary depending on the type of request and risk of disclosure to an unauthorized person. Validation steps may include providing a copy of a government-issued identification or similar, logging in with an account, or providing other details that support the authenticity of the request.

You may designate a third party as an agent to make privacy rights requests on your behalf. An agent must be designated in writing or through a power of attorney. We will require a designated agent to validate their authority prior to fulfilling requests made on your behalf.

EEA and UK disclosures

If you are located in the European Economic Area or United Kingdom, you may have additional rights regarding our processing of personal data about you.

You may have the right to:

• Access and obtain a copy of personal data about you.

• Confirm the categories and specific pieces of personal data about you that we have collected, used, disclosed, or shared with third parties.

• Correct inaccuracies or delete personal data about you.

• Object to or restrict processing of personal data about you.

• Opt out from direct marketing, profiling, and/or targeted advertising.

If you believe our processing of personal data about you does not comply with applicable laws, you may also have the right to lodge a complaint with your local supervisory authority.

We do not process your personal data for automated decision-making with the potential exception of fraud prevention and security by our payment processor.

Our processing of your personal data may require transfer of your personal data outside of the European Economic Area and United Kingdom. In these cases, we will take steps to apply approved safeguards, usually through approved data transfer agreements.

In some cases you may have the right to request a copy of these safeguards, which you can do by contacting us as described in the "How to contact us" section above.