California Applicant Privacy Notice

Nothing Bundt Franchising, LLC d/b/a Nothing Bundt Cakes and its affiliates (collectively "Nothing Bundt Cakes" or the "Company") provides this California Applicant Privacy Notice (“Notice”) to explain our practices regarding the collection of Personal Information through our job application process, including our careers website (https://nothing-bundt-cakes-careers.careerplug.com/jobs). Please note that if you interact with us as a consumer or interact with one of our franchised locations as an applicant, you may be subject to additional privacy policies or notices. This Notice explains what Personal Information we collect about California applicants, why we collect it, how we use and share it, and the rights you have relating to your Personal Information under the California Consumer Privacy Act, as amended(the "CCPA").

As used in this Notice, the term "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Personal Information does not include information that is publicly available, deidentified, or aggregated. When we process deidentified data, we will maintain and use the data in deidentified form and not attempt to reidentify the data except as required or permitted by law.

I. How and Why We Collect Your Personal Information

Within the past 12 months, we collected Personal Information about job applicants as described in the chart below. Unless otherwise indicated, the chart also reflects our current practices.

We collect the following information about you, which does not directly fall within the categories listed in the CCPA:

• Languages spoken
• Criminal records information including results of background checks obtained through government agencies such as the US Federal Bureau of Investigation

Unless otherwise specified, the sources of this Personal Information, the purposes for which we use it, and the categories of persons to which we disclose it are the same as those listed for Professional or Employment-Related Information.

In addition to the purposes described above, we may use and disclose any category of Personal Information we collect to respond to law enforcement requests, or as otherwise required or authorized by applicable law, court order, or governmental regulations; to protect our rights and interests and those of others (including our franchisees); to resolve any disputes; to enforce our terms and policies; and to evaluate or conduct a merger, sale, or other disposition of some or all of our assets. We also reserve the right to use Personal Information we collect for any other purpose identified in an applicable privacy notice, click-through agreement, or other agreement between you and us, or otherwise with your consent.

II. How Long We Keep Your Personal Information

We keep the categories of Personal Information described above for as long as necessary or permitted for the purposes described in this Notice or otherwise authorized by law. This generally means holding the information for as long as one of the following apply:

• Your Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information;
• Your Personal Information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the Personal Information was collected;
• The Personal Information is reasonably necessary to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or
• We are otherwise required or permitted to keep your Personal Information by applicable laws or regulations.

Where Personal Information is used for more than one purpose, we will retain it until the purpose with the latest period expires.

III. Disclosures of California Applicant Personal Information

We may disclose any of the categories of Personal Information we collect to our service providers and contractors for business or commercial purposes aligned with the purposes for which we collect it. This includes disclosures to:

• Affiliated brands and companies
• Service providers that perform services on our behalf. These vendors assist us with:
• Performing services (including processing, maintaining, or collecting Personal Information) on our behalf (e.g., providing communications, technical, analytical, web hosting, cloud hosting and application support, among other services)
• Processing your application and assessing your eligibility for employment
• Ensuring security and integrity of Personal Information
• Debugging to identify and repair errors that impair existing intended functionality
• Providing advertising or marketing services on our behalf
• Undertaking internal research for technological development and demonstration
• Undertaking activities to verify or maintain the quality or safety of our services
• Complying with applicable laws and regulations
• Safety and security
• Detecting, protecting against, or addressing malicious, deceptive, fraudulent, or illegal activity
• Otherwise processing, maintaining, or collecting Personal Information on our behalf
• Government authorities when required to meet our legal or regulatory obligations
• Other recipients upon your authorization or request

Other recipients upon your authorization or request Within the preceding 12 months, we have not sold or shared for cross-context behavioral advertising the Personal Information of California residents that we collect in relation to applications for employment at Nothing Bundt Cakes. If you also interact with us as a consumer, please review our California Consumer Privacy Notice for more information about our practices in that context.

IV. Submitting Requests Relating to Your Personal Information

If you are a resident of California, you have the right to submit certain requests relating to your Personal Information as described below. To exercise any of these rights, please submit a request through our webform or call us at 1 (888) 914-9661 and enter the following PIN when prompted: 278285. Please note that, if you submit a request to know, request to delete or request to correct, you will be asked to provide 2-3 pieces of Personal Information that we will match against our records to verify your identity. You may designate an authorized agent to make a request on your behalf; however, you will still need to verify your identity directly with us before your request can be processed. An authorized agent may submit a request on your behalf using the webform or toll-free number listed above. We will not retaliate against you if you choose to exercise any of your privacy rights under the CCPA.

Right to Know. You have the right to know what Personal Information we have collected about you, which includes:

• The categories of Personal Information we have collected about you, including
• The categories of sources from which the Personal Information was collected
• Our business or commercial purposes for collecting or disclosing Personal Information
• The categories of recipients to which we disclose Personal Information
• The categories of Personal Information that we sold, and for each category identified, the categories of third parties to which we sold that particular category of Personal Information
• The categories of Personal Information that we disclosed for a business purpose, and for each category identified, the categories of service providers and contractors to which we disclosed that particular category of Personal Information
• The specific pieces of Personal Information we have collected about you

Right to Delete Your Personal Information. You have the right to request that we delete Personal Information we collected from you, subject to certain exceptions.

Right to Correct Inaccurate Information. If you believe that Personal Information we maintain about you is inaccurate, you have the right to request that we correct that information.

Right to Opt Out of Sales and Sharing of Personal Information. We do sell or share the Personal Information of job applicants.

Right to Limit Use and Disclosure of Sensitive Personal Information. We do not use or disclose Sensitive Personal Information for purposes to which the right to limit use and disclosure applies under the CCPA.

V. How to Contact Us

If you have any questions about how Nothing Bundt Cakes handles your Personal Information or if you need to access this Notice in an alternative format or language, please call us at 1 (888) 914-9661 and enter the following PIN when prompted: 278285.

Our corporate office is located at 5005 Lyndon B Johnson Fwy Suite 600, Dallas, TX 75244. Please direct any mail inquiries to the attention of: Nothing Bundt Cakes Guest Services.

Last Updated: January 20, 2026