SCDG EDIFY PRODUCTIONS, INC.

PRIVACY AND COOKIE POLICY

Last updated: March 12, 2025

SCDG Edify Productions, Inc. and our affiliates, successors, and assigns (collectively, "SCDG," also referred to as "we," "us," and "our") are committed to ensuring that we act in accordance with applicable data protection and privacy laws when we collect and use information provided to us or information about visitors to our website. This Privacy and Cookie Policy ("Policy") applies to your use of any of our services, our website and affiliated websites (including without limitation merryandbright.movie), or as a result of your relationship with us or to one or more of its officers, directors, employees or contractors, or to any information collected from third parties (collectively, "Website"). The Policy also applies to our marketing and communications activities and any information we collect from you, or use, in conjunction with such activities.

This Policy explains the types of information we collect, the purposes of collecting and processing that information, the legal basis for processing that information, how we may update, manage, export, use, disclose, share, safeguard and delete that information. This Policy describes the measures we take to protect the security of the information and the rights that you have as a data subject with regard to this information. We also tell you how you can reach us to update your contact information, remove your name from our mailing lists, or get answers to questions you may have about our privacy practices.

Please read this Policy carefully. By accessing our Website or by continuing to interact with us, you acknowledge that you have read the following this Policy and you accept all such terms and conditions of this Policy and acknowledge the practices described in this Policy.

This Policy may be updated periodically. We may modify this Policy at any time in our sole discretion by posting a revised version on this page. If we intend to further process your personal data for a purpose other than that for which the personal data were collected, prior to that further processing, we will provide you with information about that other purpose and with additional information necessary to ensure fair and transparent processing.

WHAT DO WE COLLECT AND HOW:

Anonymous and Aggregated Web Traffic Information

General traffic, site usage, browser information, length-of-stay information, and location data is collected and stored in log files. This type of information is collected and shared on an anonymous, aggregated basis meaning that we do not connect this information to your name or other personal information.

Personally Identifiable Information

We collect all or some of the following personal information that you voluntarily provide to us:

• First and last name
• Email address
• Home or physical address
• Telephone number
• Social Security Number
• Any other identifier that permits the physical or online contacting of an individual
• Company and other information, in the following contexts:

Alerts and Announcements: We use your contact information to provide you with updates and upcoming events. We always give you the opportunity to opt-out of these communications.

Contact Us Form: When you are interested in speaking to us, you are directed to a contact form on our website that asks for basic information on how to contact you, and what your matter is concerning. We use this information to contact you regarding our services or events that we feel may be of interest to you.

Other Requests: When you report a problem with our website or services we will collect contact information along with a description of your problem. When you contact us via our email addresses, we will collect your contact information and any information you include in your email.

HOW WE USE THE INFO WE COLLECT:

We process your information for the legitimate interest of communicating with clients, prospective clients, prospective employees, fans, and other users about our services and our events and publications. Processing your information for the purposes described is necessary for us to do what we do. When we use your information, we conduct a balancing test based on the legitimate interest, necessity of processing your information, and how such processing impacts you.

If you have any questions or concerns with us processing your information for this legitimate interest, please email us at merryandbright2025@gmail.com.

We will ask for your consent before using your information for a purpose that extends beyond what you may reasonably expect from a production company and that has a more significant privacy impact.

We occasionally hire other companies to provide limited services on our behalf, including website development and operation, preparing marketing materials, sending postal mail or email, analyzing website use, job applications, processing payments and processing data. We may process payments through a third party credit card processor. We will only provide those companies the information they need to deliver the service, and they are contractually prohibited from using that information for any other reason.

HOW WE SHARE THE INFO WE COLLECT:

We also may disclose your information in special cases. For example, when we believe that we must disclose information to identify, contact or bring legal action against someone who may be violating our Disclaimer, or may be causing injury to or interference with our rights or property, other website users or clients, or anyone else who may be harmed by such activities. We may disclose visitor information when subpoenaed, if ordered or otherwise required by a court of law, arbitrator, or other similar proceeding or the rules governing such a proceeding, for government investigations, with government agencies if required by law, and when we otherwise believe in good faith that any applicable law requires it.

We may combine with other firms or film industry companies. In such transactions, confidential information generally is one of the transferred business assets. In the event of such a transaction, client and site visitor information may be one of the transferred assets and may be disclosed in connection with negotiations relating to a proposed transaction. In such case, the transferred information may become subject to a different privacy policy.

WHAT ARE COOKIES AND HOW DO WE USE THEM:

As part of offering and providing customizable and personalized services, we use cookies and other digital and online tracking technologies (collectively, "cookies") to store and sometimes track information about you to:

• Provide you with personalized content based on your use of our website.
• Enable you to more easily use our website by remembering and using contact information.
• Evaluate, monitor and analyze the use of our site and its traffic patterns to help improve our website and services.

The types of technologies we may use include:

Cookies

A cookie is a small amount of data that is sent to your browser from a Web server and stored on your computer's hard drive. Cookies enable us to identify your browser as a unique user. Cookies may involve the transmission of information from us to you and from you to us. Cookies may also be used by another party on our behalf to transfer information to us in accordance with their privacy policy.

Cookies are small text files that websites and other online services use to store information about users on the users' own computers. Cookies may be used to store a unique identification number tied to your computer so that a website can recognize you as the same user across different visits to the website. You can configure your Internet browser to warn you each time a cookie is being sent or to refuse cookies completely.

We may use necessary cookies, which are required for our Website to function. These cookies allow you to access and navigate our Website. You may disable these cookies by changing your browser settings, but it may affect how the Website functions. We may also use analytics cookies, which provide us with analytics about how you have used our Website. These cookies allow us to analyze which pages are more frequently visited or other operational features that allow us to improve the performance of our Website. You may disable these cookies.

We and the third parties that provide content, functionality, or business services on the website may use cookies to collect information about your browsing activities in order to provide you with more relevant content and promotional materials, on and off the website, and help us understand your interests and improve the website.

Web Beacons

We, along with our third-party partners, may also use technologies called web beacons that communicate information from your Internet browser to a web server. Web beacons can be embedded in web pages, videos, or emails, and can allow a web server to read certain types of information from your browser, check whether you have viewed a particular web page or email message, and determine, among other things, the time and date on which you viewed the web beacon, the IP address of your computer, and the URL of the web page from which the web beacon was viewed. We and our partners use web beacons for a variety of purposes, including to analyze the use of the Website and in conjunction with cookies to improve the website and to provide you with more relevant promotion materials.

Indirect Collection – Social Networking

The website permits you to use a third party social networking platform such as Facebook, Twitter, and LinkedIn. This includes use of social media plugins such as Facebook "Like," and Twitter "Tweet." When you use these social networking platforms and plugins, your username and password for the available service or collected from you on these services may be shared with us. When you use social networking platforms and plugins, you share your information with them and their privacy policy applies disclosure of such information. In addition, they may be able to collect information about you, including your activity or may notify your connections on the social networking platform about your use of the website. Such services may allow your activity to be monitored across multiple websites for purposes of delivering more targeted advertising. Please note that their own privacy polices apply and we encourage you to read them. We may add new social networking plugins and buttons to our website from time to time.

CHOICES YOU HAVE ABOUT YOUR INFO:

If you have signed up to receive e-alerts and marketing emails from us, you can unsubscribe or change your preferences by clicking on the links attached to the email.

You may also send us an email at merryandbright2025@gmail.com to request access to, correct, or delete any personal information that you have provided to us. Please note, we may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

You may have heard about "Do Not Track" (DNT), which is a privacy preference that users can set in their web browsers. Our website does not support DNT codes.

California residents may have additional personal information rights and choices. Please see our Privacy Notice for California Residents below for more information.

HOW WE PROTECT YOUR INFORMATION:

We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorized way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality. No security measures are guaranteed; thus, you are solely responsible for keeping your login and other credentials confidential. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

HOW LONG WE KEEP YOUR INFORMATION:

We keep your information only so long as we need it to provide the service you have requested of us (e-alerts, event information, etc.) and fulfill the purposes described in this Policy. When we no longer need to use your information for the purpose we collected it and there is no need for us to keep it to comply with our legal obligations, we will either remove it from our systems or depersonalize it so that we cannot identify you.

OUR POLICY ON CHILDREN'S INFORMATION:

Our Website is general audience sites not directed at children under the age of 18. If you are under 18 years of age you should not provide information to us without the involvement of a parent or guardian, as we do not collect online contact information without prior parental consent or parental notification, including an opportunity for the parent to prevent use of the information and participation in the activity. We do not knowingly solicit personal information online from, or market online to, children under the age of 13. If we obtain actual knowledge that any information we collect has been provided by a child under the age of 18, we will delete the information.

OUR PRIVACY NOTICE FOR CALIFORNIA RESIDENTS:

Effective Date: March 12, 2025.

This Privacy Notice for California Residents applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you"). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and any terms defined in the CCPA have the same meaning when used in this notice.

INFORMATION WE COLLECT:

Our website collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("personal information"). In particular, our website has collected the following categories of personal information from its consumers within the last twelve (12) months:

Category	Examples	Collected	Shared With
A. Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.	YES	• Suppliers and service providers where necessary to perform functions on our behalf (e.g., infrastructure/IT services providers, providers of services relating to client intake, global travel, finance, customer relationship management, business analytics and marketing and conference and event hosting). • Corporate purchasers - as part of any sale of our assets, transition of service to another provider or in the event of insolvency or bankruptcy • Mandatory disclosures and legal claims (e.g., to comply with any subpoena, court order or other legal process or to comply with any regulatory, governmental or other legally binding request).
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	YES	See Section A above.
C. Protected classification characteristics under California or federal law	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	YES (solely as strictly necessary for employment purposes)	• Suppliers and service providers where necessary to perform functions on our behalf. • Mandatory disclosures and legal claims (e.g., to comply with any subpoena, court order or other legal process or to comply with any regulatory, governmental or other legally binding request).
D. Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES	See Section A above.
E. Biometric information	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO	NO
F. Internet or other similar network activity	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. Web browser type and version and other browsing and Website use and interaction information.	YES	To our service providers to the extent necessary for the provision of IT services on our behalf. For permitted business purposes, such as Website administration and performance, fraud prevention, monitor complies with our Policy and Terms of Use and applicable laws, and market research.
G. IP address and geolocation data	Physical location	YES	To our service providers to the extent necessary for the provision of IT services on our behalf. See Section F above.
H. Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information.	YES	To our service providers to the extent necessary for the provision of IT services on our behalf.
I. Professional or employment-related information	Current or past job history or performance evaluations.	YES	See Section A above.
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	YES (in relation to employees and job applicants)	See Section A above.
K. Inferences drawn from other personal information	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO	NO

Personal information does not include:

• Publicly available information from government records;
• Deidentified or aggregated consumer information; and
• Information excluded from the CCPA's scope, like:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
  • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

We obtain the categories of personal information listed above from the following categories of sources:

• Directly from you. For example, from forms you complete;
• Indirectly from you. For example, from reports of your activity on our website; and
• From third parties, for example, our business partners.

Sources include, but are not limited to, our data subjects, counterparties to transactions or disputes with the data subjects, employers, agents or professional advisers authorized to disclose data on behalf of data subjects, other publicly available or subscription based sources, conference calls and video conferences with clients and other third parties, and interviews as part of any client feedback program.

USE OF PERSONAL INFORMATION:

We may use or disclose the personal information we collect for one or more of the following purposes:

• To provide business services and to respond to inquiries.
• To manage our business operations and administer client relationship programs.
• To provide relevant marketing to you (e.g., information about events or services that may be of interest.
• To personalize your website experience.
• To address compliance and legal obligations (e.g., checking identity of new clients, prevention of fraud/money laundering).
• To consider individuals for employment and contractor opportunities and manage on-boarding procedures, as well as ongoing employment matters.
• For testing, research, analysis, and product development, including to develop and improve our website and services.
• To process your requests.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To help maintain the safety, security, and integrity of our website, services, databases and other technology assets, and business.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information or as otherwise set forth in the CCPA.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our website users is among the assets transferred.
• As related to audio/visual, where required for legal/regulatory reasons, to keep a record of client instructions or other matters discussed, and for purpose of transcribing or preparing a written note of client interviews.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

SHARING PERSONAL INFORMATION:

We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

Disclosure of Personal Information For a Business Purpose

In the preceding twelve (12) months, we disclosed certain categories of California residents' personal information to the categories of third parties as shown in the table above.

Sales of Personal Information

We do not sell personal information. Therefore, in the preceding twelve (12) months, we have not sold the following categories of information:

1. California Customer Records personal information categories.
2. Protected classification characteristics under California or federal law.
3. Commercial information.
4. Biometric information.
5. Internet or other similar network activity.
6. Geolocation data.
7. Sensory data.
8. Professional or employment-related information.
9. Non-public education information.
10. Inferences drawn from other personal information.

YOUR RIGHTS AND CHOICES:

If you are a California resident, California law provides you with certain rights. California Civil Code Section 1798.83 permits you to opt out of the disclosure of your personal information by us to third parties for those third parties' direct marketing purposes. To make such a request, please send a detailed description of the specific content or information us pursuant to the contact information provide below. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal, even when requested. Pursuant to California Civil Code 1798.100 et seq., the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA"), California residents have the following, additional rights:

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Access, Data Portability, and Deletion Rights), we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
  • sales, identifying the personal information categories that each category of recipient purchased; and
  • disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Access, Data Portability, and Deletion Rights), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Exercising Access, Data Portability, and Deletion Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:

• Submitting an email request to merryandbright2025@gmail.com.
• Sending a letter to The Greenhouse Arts & Media, ATTN: SCDG Edify Productions, Inc., P.O. Box 3832, Valley Village, CA 91607.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Making a verifiable consumer request does not require you to create an account with us.

We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

NON-DISCRIMINATION:

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you services.
• Charge you different prices or rates for services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of services.
• Suggest that you may receive a different price or rate services or a different level or quality of services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

GDPR NOTICE:

In compliance with the European Union ("EU") General Data Protection Regulation (Regulation (EU) 2016/679) (as also incorporated into the laws of the UK) and the Data Protection Act 2018 ("EU/UK Data Protection Laws") (collectively, "GDPR"), we may rely upon one or more legal bases defined in the GDPR to collect, use, share and otherwise process the personal information of individual located in the EU, including where:

• Necessary to perform a contract we have with you, such as our terms of engagement, and to provide the services (we refer to this as contractual necessity above);
• You have consented to the processing (in which case you may revoke your consent at any time);
• Necessary for us to comply with a legal obligation, or to establish, exercise or defend legal claims;
• Necessary to protect your vital interests or those of others;
• Necessary in the public interest; and
• Necessary for the purposes of our or a third party's legitimate interests, such as those of clients, partners, staff or others, provided that those interests are not overridden by your interests or fundamental rights and freedoms.

Where we collect, use, disclose and otherwise process your information based on legitimate interests, we may rely on the following interests:

• Provision of services: We use your information to pursue our clients and other impacted individuals' legitimate interests in obtaining and/or benefitting from our assistance, as well as our interests in providing advice and assistance to our clients.
• Keeping our services safe and secure: We use your information in certain instances as necessary to pursue our and your legitimate interests of keeping some of our services, such as our domains, websites, apps, offices and events, safe and secure. For example, we collect IP addresses and process log files to ensure our website and apps are not subject to fraudulent access.
• Marketing our services: We use your information as necessary to pursue our legitimate interests in marketing our services. For example, where permitted by digital marketing law, we may contact you by email to let you know of future events you might be interested in.
• Providing, improving and developing the services: We use your information as necessary to pursue our legitimate interests in tailoring and improving our services. For example, if you are a client, we may send you a survey or questionnaire to understand your experience in obtaining services from us.
• Providing seamless services with our affiliates: In some cases, the services require the engagement of, or sharing of your information with, other companies affiliated with us.

If you are located in the EU, under certain circumstances, you may have certain legal rights under the GDPR, including:

• To access the personal data we maintain about you
• To receive information about how we process your personal data
• To correct your personal data
• To have your personal data erased
• To object to or restrict how we process your personal data
• To request your personal data be transferred to a third party
• To withdraw any consent you may have given us to process your personal data

If you are an EU resident, you have the right to object to our processing that is based on legitimate interests by contacting us at the address or number below. If you are located in the EU and you believe that we have infringed your rights under the GDPR, please contact us by sending an email to merryandbright2025@gmail.com or calling us at: 818.392.4886.

You have the right to lodge a complaint with a supervisory authority, in particular in your applicable Member State.

OUR PRIVACY NOTICE FOR NEVADA RESIDENTS:

Effective Date: March 12, 2025.

This Privacy Notice for Nevada Residents applies solely to all visitors, users, and others who reside in the State of Nevada ("consumers" or "you"). We adopt this notice to comply with Nevada law, which allows Nevada residents to opt out of the sale of certain types of personally identifiable information. While we do not currently sell personal information as defined in Nevada law, you may still submit a verified opt-out request to opt out of any sales. We will record this request and incorporate them in the future if our Policy on selling personal information changes. Opt-out requests may be sent to: merryandbright2025@gmail.com.