This Privacy Policy ("Policy") applies to The Maze NYC LLC ("Company") and governs data collection and usage. For the purposes of this Policy, unless otherwise noted, all references to the Company include https://themazenyc.com/ (the “Site”). By using the Site, you consent to the data practices described in this Policy.

Collection of your Personal Information

In order to better provide you with products and services offered, the Company may collect personally identifiable information, such as your:

• First and last names
• Mailing address(es)
• Email address(es)
• Phone number(s)
• Employer(s)
• Job title(s)

If you purchase the Company's membership, products and/or services, the Company will collect billing and credit card information. This information is used to complete the purchase transaction.

The Company may also collect anonymous demographic information, which is not unique to you, such as your:

• Age
• Gender
• Household income

The Company does not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to the Company when you elect to become a member and/or use certain products or services. These may include: (a) becoming a member; (b) registering for an account; (c) entering a sweepstakes or contest sponsored by the Company or one of its partners; (d) signing up for special offers from selected third parties; (e) sending the Company an email message; and/or (f) submitting your credit card or other payment information when becoming a member, and/or ordering and purchasing products and services. To wit, the Company will use your information for, but not limited to, communicating with you in relation to membership, services and/or products you have requested from it. The Company also may gather additional personal or non-personal information in the future.

Use of your Personal Information

The Company collects and uses your personal information in the following ways:

• to operate and deliver membership, services and/or products you have requested;
• to provide you with information, membership, products, and/or services that you request from us;
• to provide you with notices about your membership and/or client account;
• to carry out the Company's obligations and enforce its rights arising from any contracts entered between you and the Company, including for billing and collection;
• to notify you about changes to the Site, membership or any products or services the Company provides;
• in any other way the Company may describe when you provide the information; and
• for any other purpose with your consent.

The Company may also use your personally identifiable information to inform you of other products or services available from the Company and its affiliates.

Sharing Information with Third Parties

The Company does not sell, rent, or lease its membership or customer lists to third parties.

The Company may, from time to time, contact you on behalf of external business partners about a particular offering that may be of interest to you. In those cases, your unique personally identifiable information (email, name, address, phone number) is transferred to the third party. The Company may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to the Company, and they are required to maintain the confidentiality of your information.

The Company may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on the Company or the Site; (b) protect and defend the rights or property of the Company; and/or (c) act under exigent circumstances to protect the personal safety of users of the Company, or the public.

Opt-Out of Disclosure of Personal Information to Third Parties

In connection with any personal information the Company may disclose to a third party for a business purpose, you have the right to know:

• The categories of personal information that the Company disclosed about you for a business purpose.

Under certain federal or state laws, you may have the right to opt out of the disclosure of your personal information. If you exercise your right to opt out of the disclosure of your personal information, we will refrain from disclosing your personal information, unless you subsequently provide express authorization for the disclosure of your personal information. To opt out of the disclosure of your personal information, contact the Company at membership@themaze.com.

Right to Deletion

Subject to certain exceptions set out below, on receipt of a verifiable request from you, the Company will:

• Delete your personal information from our records; and
• Direct any service providers to delete your personal information from their records.

Please note that that the Company may not be able to comply with requests to delete your personal information if it is necessary to:

• Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal, state or law, and provide a good or service requested by you, or reasonably anticipated within the context of the Company’s ongoing business relationship with you, or otherwise perform a contract between you and the Company;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
• Debug to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
• Comply with applicable federal or state laws;
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the Company’s deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided the Company has obtained your informed consent;
• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with the Company;
• Comply with an existing legal obligation; or
• Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Children Under Eighteen

The Company does not knowingly collect personally identifiable information from children under the age of 18. If you are under the age of 18, you must ask your parent or guardian for permission to use the Site.

Opt Out and Unsubscribe from Third-Party Communications

The Company respects your privacy and gives you an opportunity to opt out of receiving announcements of certain information. Users may opt out of receiving any or all communications from third-party partners of the Company by contacting the Company at membership@themaze.com.

Email Communications

From time to time, the Company may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communications. In order to improve the Company’s services, it may receive a notification when you open an email from the Company or click on a link therein.

Changes to This Statement

The Company reserves the right to change this Policy from time to time. For example, when there are changes in its services, changes in its data protection practices, or changes in the law. When changes to this Policy are significant, the Company will inform you. You may receive a notice by sending an email to the primary email address specified in your account and/or membership, by the placement of a prominent notice on the Site, and/or by an update to this Policy. Your continued use of the Site, membership and/or services available after such modifications will constitute your: (a) acknowledgment of the modified Policy; and (b) agreement to abide and be bound by that Policy.

Contact Information

The Company welcomes your questions or comments regarding this Policy. If you believe that the Company has not adhered to this Policy, please contact the Company at membership@themazenyc.com.

Effective as of October 1, 2025