New Leaf Table Website

This PrivacyPolicy has been compiled to assist you (“you,” “your,” or “User”) to understandhow New Leaf Table, Inc. (“we”, “our,” “us” or "New Leaf Table"), andour affiliates and subsidiaries, collect, use and disclose your personalinformation.

This PrivacyPolicy describes our practices in connection with information that the Companycollect through your use of www.newleaftable.com (the “Site”), any mobilesites, applications, widgets, and other mobile interactive features associatedwith the Site (collectively, our “Apps”), through other services that theCompany may offer in connection with our Site and Apps, through our officialsocial media pages that the Company control (our “Social Media Pages”), as wellas through email messages that the Company send to you (collectively, theSocial Media Pages, Apps and Site, the “Sites”).

This notice doesnot apply to information collected or obtained by any third party, includingthrough any application or content (including advertising) that may link to orbe accessible from or on the Sites.

Byaccessing, browsing, or otherwise using the Sites, you acknowledge and consentto our collection and use of information as set forth in this PrivacyPolicy. PLEASEREAD THIS PRIVACY POLICY CAREFULLY. YOUR USE OF THE SITES CONSTITUTES YOURCONSENT TO THIS PRIVACY POLICY. DO NOT USE THE SITES IF YOU ARE UNWILLING ORUNABLE TO CONSENT TO THIS PRIVACY POLICY.

This PrivacyPolicy applies only to your use of the Sites and was last updated as of March 1,2024. New Leaf Table may revise this Privacy Policy at any time and suchrevision shall be posted on the Sites. Any revision and/or addition to thisPrivacy Policy shall become effective and binding on you when you continue touse the Sites on or after the effective date of such revision and/or addition.

1. TLDR.

New Leaf Tablecollects some Personal Data from its Users, as will be explained more fully inthis Privacy Policy. The Company has some analytics packages installed to helpus determine usage of our Sites, plus some basic Facebook, Instagram, Twitter andother social media company (“Social Media”) integration. If you use ourrestaurant meal finder (web only for now), the Company may also ask forlocation permissions (or you can enter any location manually). Sometimes the Companyalso use remarketing to ask Social Media to show you an ad about our service.If you rate foods and recipes on our service, the Company does some processingto suggest recipes the Company think you'll like, based on recipes that otherpeople liked. This data is not shared with anyone else. Want to prevent anykind of tracking? Type "disable third party cookies" plus the name ofyour web browser into any search engine to find out how. Many of the pluginsthe Company lists here also have "opt out" pages.

2. Privacy Officer.

New Leaf Table, LLC

11816 Inwood Rd #1374

Dallas, TX75244

Email: info@newleaftable.com

3.Types of Data Collected.

a. Amongthe types of Personal Data that this Application collects, by itself or throughthird parties, there are: Cookies, Usage Data, email address, username, uniquedevice identifiers for advertising (Google Advertiser ID or IDFA, for example),geographic position, first name, body measurements & indexes and foodrelated activity.

b.Completedetails on each type of Personal Data collected are provided in the dedicatedsections of this privacy policy or by specific explanation texts displayedprior to the Data collection. However, the Company may collect, now or in thefuture, the following types of Personal Data:

1. Device properties including, but not limited to,     unique or other device identifiers;
2. Device operating system and firmware;
3. IP address (i.e., a number that is automatically     assigned to your device or computer used to access the Site, and allows us     to identify your device or computer) and Internet service provider;
4. Mobile phone carrier;
5. Geographical data such as country or region;
6. Other similar data;

c. PersonalData may be freely provided by the User, or, in case of Usage Data, collectedautomatically when using this Application.

d. Unlessspecified otherwise, all Data requested by this Application is mandatory andfailure to provide this Data may make it impossible for this Application toprovide its services. In cases where this Application specifically states thatsome Data is not mandatory, Users are free not to communicate this Data withoutconsequences to the availability or the functioning of the Service.

e.  Userswho are uncertain about which Personal Data is mandatory are welcome to contactthe us at the information provided below.

f. Anyuse of Cookies – or of other tracking tools – by this Application or by theowners of third-party services used by this Application serves the purpose ofproviding the Service required by the User, in addition to any other purposesdescribed in the present document and in the Cookie Policy, if available.

g. Usersare responsible for any third-party Personal Data obtained, published or sharedthrough this Application and confirm that they have the third party's consentto provide the Data to the Owner.

4. How The Company Use Your Personal Data.

In general, theCompany do not and will not share your personally identifiable informationexcept as set forth in this Privacy Policy. The Company do not sell, transfer, and/orshare your personally identifiable information with third parties for their ownmarketing purposes.

The Company usethe information the Company collect from you when you browse our Sites in thefollowing manner:

    Categories of Personal  Information      

Use of Information

Identification information, application  usage data (e.g., features/pages accessed by a member), location data (GPS).

To operate and improve the Sites and associated  services.

Email  address

To create an  account with us.

Name, email address.

To respond to your comments, inquiries and  questions and provide customer services.

Name,  email address.

To send  administrative information to you, for example, information regarding the  Sites and changes to our terms, conditions, and policies. Because this  information may be important to your use of the Sites, you may not opt-out of  receiving these communications.

User Height and Weight

To generate suggested health measures.

Email  address and first name

By  registering on the mailing list or for the newsletter, the User’s email  address will be added to the contact list of those who may receive email  messages containing information of commercial or promotional nature  concerning these Sites. Your email address might also be added to this list  as a result of signing up to these Sites or after making a purchase.

You can opt-out of certain use(s)of your personal information, as described below.

How The Company UseAutomatically Collected Information

The informationthe Company collect automatically is statistical data and generally does notcontain personal information. The Company may maintain it or associate it withpersonal information the Company collects in other ways or receive from thirdparties. The Company will use this automatically-collected information toimprove our Sites and to deliver a better and more personalized service,including to:

·      Estimate our audience size and usagepatterns;

·      Store information about your preferences,allowing us to customize our Sites according to your individual interests;

·      Speed up your searches; and

·      Recognize you when you return to ourSites.

5.Use of Cookies.

Our Sites use“cookies” and other web tracking tools. The Company may store information aboutyou using the cookies on our site. A cookie (also called web cookie, Internetcookie, browser cookie, or simply cookie) is a small piece of data sent from awebsite and stored on the user’s computer by the user’s web browser while theuser is browsing. The Company use cookies to:

• improve your user experience;
• improve the functionality of our     Sites;
• gain a better understanding of how     visitors like you use our Sites, its tools and functions; and
• communicate with you elsewhere on     the internet.

Through our use ofcookies and tracking technology, the Company can tailor our Sites to yourpersonal needs and improve user-friendliness. The Company uses both necessarycookies and analytics or targeting cookies that are optional. The following arethe categories of cookies uses on the Sites:

Categories of Cookies

• Necessary cookies:     Strictly necessary for the operation of a website because they enable you     to navigate around the site and use features. These cookies cannot be     switched off in our systems and do not store any personally identifiable     information.

    Cookies Used      

Lifespan

New Leaf Table (sessionid)

14 days

New  Leaf Table (csrftoken)

1  year

Cloudflare (_cflb, _cf_bm, and _cfduid)

1 month

• Non-Necessary Cookies:     Targeting Cookies that get set on our site by our advertising partners.     They are typically used by companies to build a profile of user interests     and show targeted and relevant advertising while you browse. The     information these cookies store on you is based on your unique browser and     internet device. You may block these cookies and will then experience less     targeted advertising. Analytics cookies count visits and traffic sources     to help improve the performance of our site through metrics. These cookies     show us which pages on our site are the most and the least popular, and     how users navigate our site. The information collected is aggregated and     contains no personally identifiable information. If you block these cookies,     then the Company will not know when you have visited our site.

    Cookies Used      

Lifespan

Google Analytics (_gid)

1 day

Google  Analytics (_ga)

2  years

Google Analytics (_gat)

1 minute

Facebook  (_fbp)

3  months

Amplitude (amplitude_id_#)

10 years

The Company wantsto be completely transparent about the cookies the Company uses and to maketheir control as easy as possible for you. If, after your initial visit to theSite, you want to delete any cookies that are already on your computer, pleaserefer to the file management software to locate the file or directory thatstores cookies under the following file names. Other information on deleting orcontrolling cookies is available at www.allaboutcookies.org.

Please note thatby deleting our cookies or disabling future cookies you may not be able toaccess certain areas or features of our site.

6.Mode and place of processing of Personal Data.

A. Purpose of Processing.

The Company takesappropriate security measures to prevent unauthorized access, disclosure,modification, or unauthorized destruction of the Personal Data. The PersonalData concerning the User is collected to allow us to provide our Services, aswell as for the following purposes: Analytics, Interaction with external socialnetworks and platforms, Access to third-party accounts, Remarketing andbehavioral targeting, Tag Management, Managing support and contact requests,Interaction with support and feedback platforms, Infrastructure monitoring,Traffic optimization and distribution, Handling payments, Managing contacts andsending messages, Contacting the User and Handling activity data.

B. Methods of processing.

The Personal Dataprocessing is carried out using computers and/or IT enabled tools, followingorganizational procedures and modes strictly related to the purposes indicated.In addition to the Owner, in some cases, the Data may be accessible to certain typesof persons in charge, involved with the operation of this Application(administration, sales, marketing, legal, system administration) or externalparties (such as third-party technical service providers, mail carriers,hosting providers, IT companies, communications agencies) appointed, ifnecessary, as Data Processors by the Owner. An updated list of these partiesmay be requested from the Owner at any time.

C.Legal basis of processing.

The Company may process PersonalData relating to Users if one of the following applies:

• Users have given their consent for one or more     specific purposes. Note: Under some legislations the Owner may be allowed     to process Personal Data until the User objects to such processing     (“opt-out”), without having to rely on consent or any other of the     following legal bases. This, however, does not apply, whenever the     processing of Personal Data is subject to European data protection law;
• provision of Data is necessary for the     performance of an agreement with the User and/or for any pre-contractual     obligations thereof;
• processing is necessary for compliance with a     legal obligation to which the Owner is subject;
• processing is related to a task that is carried     out in the public interest or in the exercise of official authority vested     in the Owner;
• processing is necessary for the purposes of the     legitimate interests pursued by the Owner or by a third party.

In any case, the Owner will gladlyhelp to clarify the specific legal basis that applies to the processing, and inparticular whether the provision of Personal Data is a statutory or contractualrequirement, or a requirement necessary to enter into a contract.

D. Geographic Location of Data Storage andProcessing.

The Sites collectinformation and process and store that information in databases located in theUnited States and Canada. If you are visiting the Sites from a country outsidethe United States, you should be aware that you may transfer personally identifiableinformation about yourself to the United States, and that the data protectionlaws of the United States may not be as comprehensive as those in your owncountry. To find out more about the place of processing of such transferredData, Users can check the section containing details about the processing ofPersonal Data.

By visiting theSites and submitting any personally identifiable information you consent to thetransfer of such personally identifiable information to the United States.

E. Retentiontime.

Personal Datashall be processed and stored for as long as required for the purpose they havebeen collected for.

Therefore:

• Personal Data collected for purposes     related to the performance of a contract between us and the User shall be     retained until such contract has been fully performed.
• Personal Data collected for the     purposes of our legitimate interests shall be retained as long as needed     to fulfill such purposes. Users may find specific information regarding     the legitimate interests pursued by us within the relevant sections of     this document or by contacting us.

The Company mayretain Personal Data for a longer period whenever the User has given consent tosuch processing, as long as such consent is not withdrawn. Furthermore, theOwner may be obliged to retain Personal Data for a longer period wheneverrequired to do so for the performance of a legal obligation or upon order of anauthority. Once the retention period expires, Personal Data shall be deleted.Therefore, the right to access, the right to erasure, the right torectification and the right to data portability cannot be enforced afterexpiration of the retention period.

F. Access to Personal Data.

YOURPERSONAL DATA WILL NOT BE SOLD. Nor will Your Personal Data be licensed or disclosedto unaffiliated third-parties, except in connection with the sale, transfer,merger, consolidation or other transaction involving all or part of our companyor as may be permitted under applicable law.

The Company maydisclose your personal data to our subsidiaries and affiliates to fulfill thepurpose for which you provide it, for example, to provide you with a requestedcommunication.

In addition to theabove, the Company may share the personal data collected from you, as describedabove, with our third party partners to enable us to analyze and use suchinformation to provide you with our products and services, and in the mannerset forth in this Privacy Policy. The Company may share your information withthird-parties who assist us with its outreach and engagement communications tomake you aware of certain products and services (as detailed below). The Companyalso allow our website hosting partners and other parties who assist us inoperating our website, conducting our business, or serving our users, to accessand process your information so long as those parties agree to keep thisinformation confidential. The Company does not sell your information to thirdparties for marketing purposes, and the Company restricts such third parties’usage of your information consistent with this Privacy Policy.

In addition to theabove, the Company may be required to disclose your information to (i) complywith laws or to respond to lawful requests and legal process (including torespond to requests from public or government authorities, including public orgovernment authorities outside your country of residence), (ii) to investigate,prevent, or take action regarding illegal or suspected illegal activities,(iii) to protect the rights and property of New Leaf Table, and others toenforce our agreements, and this Privacy Policy and the Terms of Use, includingto protect the security or integrity of the Site or our information systems,(iv) in an emergency to protect person or property, (v) as may be needed on aconfidential basis to support a corporate transaction (including a merger,acquisition, divestiture, financing, or sale of assets or lines of business),or (vi) on an aggregated basis for any purpose in which your specific personalinformation is blinded, masked or otherwise not identifiable. The Company mayalso exchange information with third parties for fraud protection and creditrisk reduction.

G.Facebook permissions provided to ourSites.

(This is only if you use Facebook Login, which you can disconnecton your profile page)

The Sites may ask for someFacebook permissions allowing it to perform actions with the User's Facebookaccount and to retrieve information, including Personal Data, from it. Thisservice allows this Application to connect with the User's account on the Facebooksocial network, provided by Facebook Inc.

For more information about thefollowing permissions, refer to the Facebook permissions documentation andto the Facebookprivacy policy .

The permissions asked are thefollowing:

              i.        Basicinformation. By default, thisincludes certain User’s Data such as id, name, picture, gender, and theirlocale. Certain connections of the User, such as the Friends, are alsoavailable. If the User has made more of their Data public, more informationwill be available.

            ii.        Email. Provides access to the User'sprimary email address.

7.             Specific Third-Party Processing of Personal Data:

    Third-Party      

Description

Processing of Personal Data

Google Analytics (Google, Inc.)

Google Analytics is a web analysis service provided  by Google Inc. (“Google”). Google utilizes the Data collected to track and  examine the use of these Sites, to prepare reports on its activities and share  them with other Google services. Google may use the Data collected to  contextualize and personalize the ads of its own advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy  Policy – Opt  Out. Privacy Shield participant.

Amplitude (Sonalight, Inc.)

Amplitude is an analytics  service provided by Sonalight, Inc. This service is designed for mobile apps  analytics and can collect various information about your phone, highlighted  in the Amplitude privacy policy.

Personal Data collected:  Cookies and Usage Data.

Place of processing: United  States – Privacy  Policy.

Facebook Ads conversion tracking (Facebook, Inc.)

Facebook Ads conversion tracking is an analytics  service provided by Facebook, Inc. that connects data from the Facebook  advertising network with actions performed on these Sites.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy  Policy. Privacy Shield participant.

Apple HealthKit (Apple,Inc.)

HealthKit is an activity data  handling service provided by Apple Inc. that enables the Owner to access or  store activity data.

Personal Data collected: body  measurements & indexes and food related activity.

Place of processing: United  States – Privacy Policy.

Stripe (Stripe Inc.)

Stripe is a payment service provided by Stripe Inc.

Payment processing services enable these Sites to  process payments by credit card, bank transfer or other means. To ensure  greater security, the Company shares only the information necessary to  execute the transaction with the financial intermediaries handling the  transaction. Some of these services may also enable the sending of timed  messages to the User, such as emails containing invoices or notifications concerning  the payment.

Personal Data collected: various types of Data as  specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy.  Privacy Shield participant.

Bugsnag (Bugsnag Inc.)

Bugsnag is a monitoring service  provided by Bugsnag Inc. This type of service allows this Application to  monitor the use and behavior of its components so its performance, operation,  maintenance and troubleshooting can be improved.

Personal Data collected:  various types of Data as specified in the privacy policy of the service.

Place of processing: United  States – Privacy  Policy.

Crashlytics (Google Inc.)

Crashlytics is a monitoring service provided by  Google Inc. This type of service allows this Application to monitor the use  and behavior of its components so its performance, operation, maintenance and  troubleshooting can be improved.

Personal Data collected: geographic position,  unique device identifiers for advertising (Google Advertiser ID or IDFA, for  example) and various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy  Policy.

Twitter Tweet button and social  widgets (Twitter, Inc.)

The Twitter Tweet button and  social widgets are services allowing interaction with the Twitter social  network provided by Twitter, Inc.

Personal Data collected:  Cookies and Usage Data.

Place of processing: United  States – Privacy  Policy. Privacy Shield participant.

Facebook Like button and social widgets (Facebook,  Inc.)

The Facebook Like button and social widgets are  services allowing interaction with the Facebook social network provided by  Facebook, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy  Policy. Privacy Shield participant.

Groove Widget (Groove Networks,  LLC.)

The Groove Widget is a service  for interacting with the Groove support and feedback platform provided by  Groove Networks, LLC.

Personal Data collected:  Cookies and Usage Data, email address and username.

Place of processing: United  States – Privacy  Policy.

Sendgrid (Sendgrid)

Sendgrid is an email address management and message  sending service provided by Sendgrid Inc.

Personal Data collected: email address and  username.

Place of processing: United States – Privacy Policy.

AdWords Remarketing (Google  Inc.)

AdWords Remarketing is a  remarketing and behavioral targeting service provided by Google Inc. that  connects the activity of this Application with the Adwords advertising  network and the Doubleclick Cookie.

Personal Data collected:  Cookies and Usage Data.

Place of processing: United  States – Privacy Policy – Opt Out.

Facebook Remarketing (Facebook, Inc.)

Facebook Remarketing is a remarketing and  behavioral targeting service provided by Facebook, Inc. that connects the  activity of this Application with the Facebook advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy  Policy – Opt Out. Privacy Shield  participant.

Google Tag Manager (Google LLC)

Google Tag Manager is a tag  management service provided by Google LLC. This helps us to manage the tags  and scripts needed on these Sites in a centralized fashion.

Personal Data collected:  Cookies and Usage Data.

Place of processing: United  States – Privacy Policy. Privacy Shield  participant.

CloudFlare (Cloudflare)

CloudFlare is a traffic optimization and  distribution service provided by CloudFlare Inc. The way CloudFlare is  integrated means that it filters all the traffic through these Sites, i.e.,  communication between these Sites and the User's browser, while also allowing  analytical data from these Sites to be collected.

Personal Data collected: Cookies and various types  of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy  Policy.

8. Third-Party Links On the Sites.

Occasionally, solelyat our discretion, the Company may link to third party sites or content on theSites. The Company may do this for the convenience of you and other users ofthe Sites, but the Company does not have control over the operation of thesethird-party websites. These third-party sites have separate and independentprivacy policies. We, therefore, have no responsibility or liability for thecontent and activities of these linked sites. The Company urges you to reviewthe privacy policies posted on these third-party websites at the time you firstvisit such sites.

9. Protection of Your Personal Data.

The Company are committed to theprotection of your personal and order information. As such, New Leaf Tabletakes reasonable measures to follow industry standard practices to protect,secure and maintain the integrity and availability of your information.

Notwithstanding the foregoing, youacknowledge that no security safeguards or method of transmission over theInternet are completely secure. Although the Company does our best to protectyour personal information, the Company cannot guarantee the security of yourpersonal information transmitted to our Sites.

10.The Rights of Users.

Users may exercise certain rightsregarding their Data processed by the Owner.

In particular, Users have theright to do the following:

• Withdraw their consent at any time. Users have     the right to withdraw consent where they have previously given their     consent to the processing of their Personal Data.
• Object to processing of their Data. Users have     the right to object to the processing of their Data if the processing is     carried out on a legal basis other than consent. Further details are     provided in the dedicated section below.
• Access their Data. Users have the right to learn     if Data is being processed by the Owner, obtain disclosure regarding     certain aspects of the processing and obtain a copy of the Data undergoing     processing.
• Verify and seek rectification. Users have the     right to verify the accuracy of their Data and ask for it to be updated or     corrected.
• Restrict the processing of their Data. Users     have the right, under certain circumstances, to restrict the processing of     their Data. In this case, the Owner will not process their Data for any     purpose other than storing it.
• Have their Personal Data deleted or otherwise     removed. Users have the right, under certain circumstances, to obtain the     erasure of their Data from the Owner.
• Receive their Data and have it transferred to     another controller. Users have the right to receive their Data in a     structured, commonly used and machine readable format and, if technically     feasible, to have it transmitted to another controller without any     hindrance. This provision is applicable provided that the Data is     processed by automated means and that the processing is based on the     User's consent, on a contract which the User is part of or on     pre-contractual obligations thereof.
• Lodge a complaint. Users have the     right to bring a claim before their competent data protection authority.

11.Details about the right to object to processing.

Where PersonalData is processed for a public interest, in the exercise of an officialauthority vested in us or for the purposes of the legitimate interests pursuedby us, Users may object to such processing by providing a ground related totheir particular situation to justify the objection.

Users must knowthat, however, should their Personal Data be processed for direct marketingpurposes, they can object to that processing at any time without providing anyjustification.

12. How to exercise these rights.

Any requests toexercise User rights can be directed to the Owner through the contact detailsprovided in this document. These requests can be exercised free of charge andwill be addressed by the Owner as early as possible and always within onemonth.

13. California Consumers.

The CaliforniaConsumer Privacy Act of 2018 (“CCPA”) and other California privacy lawsprovides California residents (i.e., consumers) with specific rights regardingpersonal information.

A.    Access to Specific Information and DataPortability Rights.

Californiaresidents have the right to request that the Company disclose certaininformation to you about our collection and use of your personal informationover the past twelve (12) months. Once the Company receive and confirm averifiable consumer request from you, the Company will disclose to you, to theextent permitted by law:

• The categories of personal     information the Company collected about you.
• The categories of sources for your     personal information the Company collected about you.
• Our business or commercial purpose     for collecting your personal information.
• The categories of third parties with     whom the Company share your personal information.
• If the Company disclosed your     personal information for a business purpose, the personal information     categories that each category of recipient obtained.

You shall have theright to request that the information described above be provided to you in aportable and readily usable format, to the extent technically feasible (“dataportability”).

B.    Deletion Request Rights.

You have the rightto request that the Company delete certain of your personal information thatthe Company collected from and/or related to you and retained, subject tocertain exceptions.

To the extent thatthe Company can delete your personal information, once the Company receive andconfirm your verifiable consumer request, the Company will delete (and directour service providers to delete) your personal information, unless an exceptionapplies.

The Company maydeny your deletion request if retaining the information is necessary for us orour service providers to:

• Complete the transaction for which     the Company collected your personal information, provide a good or service     that you requested, or take actions reasonably anticipated within the     context of our ongoing business relationship with you.
• Detect security incidents, protect     against malicious, deceptive, fraudulent, or illegal activity, or     prosecute those responsible for such activities.
• Debug products to identify and     repair errors that impair existing intended functionality.
• Exercise free speech, ensure the     right of another consumer to exercise their free speech rights, or     exercise another right provided for by law.
• Comply with the California     Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
• Engage in public or peer-reviewed     scientific, historical, or statistical research in the public interest     that adheres to all other applicable ethics and privacy laws, when the information's     deletion may likely render impossible or seriously impair the research's     achievement, if you previously provided informed consent.
• Enable solely internal uses that are     reasonably aligned with consumer expectations based on your relationship     with us.
• Comply with a legal obligation.
• Make other internal and lawful uses     of that information that are compatible with the context in which you     provided it.

C.    Exercising Your Access, Data Portability, andDeletion Rights.

To exercise theaccess, data portability, and deletion rights described above, please submit averifiable consumer request to us by contacting usat support@newleaftable.com.

Only you or aperson registered with the California Secretary of State that you authorize toact on your behalf, may make a verifiable consumer request related to yourpersonal information. You may also make a verifiable consumer request on behalfof your minor child.

You may only makea verifiable consumer request for access or data portability twice within a12-month period. The verifiable consumer request must:

• Provide sufficient information that     allows us to reasonably verify you are the person about whom the Company     collected personal information or an authorized representative.
• Describe your request with     sufficient detail that allows us to properly understand, evaluate, and     respond to it.

The Company cannotrespond to your request or provide you with your personal information if theCompany cannot verify your identity or authority to make the request andconfirm the personal information relates to you. Making a verifiable consumerrequest does not require you to create an account with us. The Company willonly use personal information provided in a verifiable consumer request toverify the requestor's identity or authority to make the request. Anydisclosures provided pursuant to the CCPA will only cover the 12-month periodpreceding the receipt of the verifiable consumer request.

The Company willrespond to a verifiable consumer request within 45 days of its receipt ornotify you that the Company requires more time to respond and the reason forthe extended response time. The Company will deliver the written response bymail or electronically, at your option.

To the extent thatyour verifiable consumer request is excessive, repetitive, or manifestlyunfounded, the Company may charge a reasonable fee to respond to such arequest.

The Company willnot discriminate against you for exercising any of your CCPA rights. Unlesspermitted by the CCPA, the Company will not:

• Deny you goods or services.
• Charge you different prices or rates     for goods or services, including through granting discounts or other     benefits, or imposing penalties.
• Provide you with a different level or quality of     goods or services.
• Suggest that you may receive a     different price or rate for goods or services or a different level or     quality of goods or services.

14. European Users.

The EuropeanUnion’s General Data Protection Regulation (“GDPR”) and other European dataprotection laws require that companies processing the Personal Data of EU usersdo so on the basis of specific legal grounds, as explained above. Further, EUUsers have certain data rights with respect to our handling of your PersonalData.

A.  Explanation And Copies Of Your Data.

You have the rightto request an explanation of the personal data that the Company has about youand how the Company uses that data.

You also have theright to receive a copy of the Personal Data that the Company collects aboutyou if collected on the basis of consent or because the Company require theinformation to provide the services that you request.

B.   Correction.

If the Company hasPersonal Data about you that you believe is inaccurate, you have the right torequest correction of your Personal Data.

C.  Deletion.

You may requestdeletion of your Personal Data at any time. The Company may retain certaininformation about you as required by law and for legitimate business purposespermitted by law.

D.  Objections And Complaints.

Users in the EUhave the right to object to our processing of Personal Data, including formarketing purposes based on profiling and/or automated decision making. TheCompany may continue to process your information notwithstanding the objectionto the extent permitted under GDPR.

Users in the EUalso have the right to file a complaint relating to our handling of yourPersonal Data with the National Supervisory Authorities. Their contactinformation can be found at https://edpb.europa.eu/about-edpb/board/members_en.

You may alsosubmit questions, comments or complaints to us at the information below.

15.          ExercisingYour Data Rights.

To exercise thedata rights described above, please submit a request to us by contacting usat info@newleaftable.com.

Only you or aperson authorized to act on your behalf may make a request related to yourPersonal Data. You may also make a request on behalf of your minor child.

The Company cannotrespond to your request or provide you with your Personal Data if The Companycannot verify your identity or authority to make the request and confirm thePersonal Data relates to you. Making a data rights request does not require youto create an account with us. The Company will only use Personal Data providedin a data request to verify the requestor's identity or authority to make therequest.

The Company willrespond to a request within 30 days of its receipt or notify you that theCompany requires more time to respond and the reason for the extended responsetime. The Company will deliver our written response by mail or electronically.

16.Additional information about Data collection and processing.

A.  Additionalinformation about User's Personal Data.

In addition to theinformation contained in this privacy policy, the Sites may provide the Userwith additional and contextual information concerning particular Services orthe collection and processing of Personal Data upon request.

B.   SystemLogs and Maintenance.

For operation andmaintenance purposes, the Sites n and any third-party services may collectfiles that record interaction with this Application (System logs) use otherPersonal Data (such as the IP Address) for this purpose.

C.   InformationNot Contained In This Policy.

More detailsconcerning the collection or processing of Personal Data may be requested fromthe Owner at any time. Please see the contact information at the beginning ofthis document.

D.  HandingOf “Do Not Track” Requests.

This Applicationdoes not support “Do Not Track” requests.

To determinewhether any of the third-party services it uses honor the “Do Not Track”requests, please read their privacy policies.

E.   European Union (or EU).

Unless otherwisespecified, all references made within this document to the European Unioninclude all current member states of the European Union and the EuropeanEconomic Area.

17. Not Intended for Children Under 13.

The Sites are notintended for use by persons under the age of 18 and New Leaf Table does notspecifically market to children under 13. New Leaf Table does not knowinglycollect information from persons under the age of 13.

18.Changes to this Privacy Policy.

The Companyreserves the right to amend this Privacy Policy at our discretion and at anytime. When the Company makes changes to this Privacy Policy, the Company willnotify you by email or through a notice on our website homepage.

Contacting Us

If there are any questionsregarding this Privacy Policy, you may contact us using the information below:

New Leaf Table, Inc.

New Leaf Table, LLC

11816 Inwood Rd #1374

Dallas, TX 75244

Email to: info@newleaftable.com

19.Types of Data Collected.

Contact email: info@newleaftable.com

‍