IMPOSSIBLE FOODS INC. PRIVACY POLICY

Effective Date: June 1, 2026 This Privacy Policy describes how Impossible Foods Inc. and other members of the Impossible Foods group (“Impossible Foods,” “we,” “us” and “our”) collects, uses, discloses and stores information you provide to us through the Impossible Foods websites, including www.impossiblefoods.com, www.impossiblefoods.com/hk, www.putmeonyourmenu.com (opens in a new tab) , www.pmoym.com (opens in a new tab) , www.buy.impossiblefoods.com, www.thebirdsandthetrees.com (opens in a new tab) , and the services provided on our websites (collectively, the “Site(s)”, which along with the ability to purchase our products, are also referred to as, the “Services”).

This Privacy Policy describes:

Information that we collect when you interact with the Services
How we use and process the information that we collect
How we may share information with third parties
The security of your information

The contact details of the relevant Impossible Foods entities that qualify as controllers of your personal data can be found under section 18 below.

1. User Consent and Incorporation PLEASE REVIEW THIS PRIVACY POLICY CAREFULLY. When you submit information to or through the Services, we collect and process your information as described in this Privacy Policy. By using the Services, you accept the terms of this Privacy Policy, our Terms of Use (opens in a new tab) and agree to our collection, use, disclosure and retention of your information as described in this Privacy Policy. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY POLICY OR OUR TERMS OF USE, YOU ARE NOT AUTHORIZED TO USE THE SERVICES.

2. Links to Other Websites. The Services may contain links and widgets related to third-party websites and services, such as social networks (a “Third Party Service”), with which we have no afﬁliation. A link to or other availability of any Third Party Service does not mean that we endorse it or the quality or accuracy of information presented on it. If you decide to visit a Third Party Service, you are subject to the privacy policy and practices of the third party that operates the Third Party Service and not this Privacy Policy. We encourage you to carefully review the legal and privacy notices of all other digital services that you visit.

3. Information We Collect. We collect personal information if you provide it to us while using the Services. Personal information is information that can be used, alone or in combination with other information, to identify a person and may include contact information such as your ﬁrst name, last name, email address and phone number, social media handles, state or region, country as well as any other personal information you may input as free text into ﬁelds on the forms included in the Services and, if you are providing information about or on behalf of a business, your organization and title, business address, business phone number, number of locations and preferred foodservice distributor. For example, you may provide your email address and other contact information to receive communications from us about our products and services. You may also provide us with personal information when you input information about yourself and your visits to particular restaurants if you would like to see a restaurant serve our products. Supplying personal information to us is voluntary. You can visit the Services without providing personal information, however, some features and services (e.g., signing up for our newsletter, purchasing products or entering sweepstakes) may only be available if you provide personal information. Our website analytics tools may also automatically collect your IP address and/or unique device identiﬁer when you use the Services. We may collect information about your location when you use the Services to ﬁnd the location of restaurants near you that provide our product, as well as information about which of the restaurant locations listed on our Services that you click on. You may also need to provide payment information when using the Services to purchase products, which is processed by our third-party payment processor which processes payments on our behalf and collects your payment information when you order and pay for our products. We also have third party vendors which collect your information to assist us with your order and fulﬁllment. Such information may include payment information such as your credit card number, security code, expiration date and billing address and other contact information such as your telephone number and/or email address. Additionally, in order to ship any purchased goods, we or our third party vendors will collect shipping information such as your address and associated contact information. We also collect non-personal usage data when you use the Services. Usage data is information about an individual’s web or mobile application activity that, by itself, does not identify the individual, such as operating system you are using, the date and time stamp of your visit, domain name, referring URLs, and internet service providers. We collect usage data through the use of cookies and similar data collection tools. For more about cookies, see Section 4 of this Privacy Policy.

4. Cookies and Other Information Collection Tools. Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our site. You can find out more about our use of cookies in our cookie policy available type: entry-hyperlink id: 3bFgcf80lXpokfWDObxBAj.

5. How Information is Used. We may use the information we collect for the purposes set out below. As required under the applicable data protection laws of the United Kingdom ("UK") and European Union ("EU"), we have identified a lawful basis for each purpose for which we process your personal data. The table below sets out each purpose together with the lawful basis on which we rely.

Purpose	Lawful Basis
To provide the Services to you, including processing transactions and sending related communications	Performance of a contract – processing is necessary to perform our contract with you or to take steps at your request before entering into a contract
To improve the Services, including collecting and analysing product reviews and ratings	Legitimate interests – we have a legitimate interest in improving our Services for the benefit of our users
To operate, improve and personalise the products and services we offer, and to give each user a more consistent and personalised experience	Legitimate interests – we have a legitimate interest in developing and improving our products and services and in providing a personalised user experience
To provide you with information about products and services that may be of interest to you, and to learn about your interest in our products and services	Legitimate interests – we have a legitimate interest in marketing our products and services to existing and prospective customers; or Consent – where we are required by law to obtain your prior consent (for example, for electronic direct marketing to new contacts under applicable regulations)
For customer service and security	Legitimate interests – we have a legitimate interest in maintaining the security of our Services and in providing effective customer support
To detect fraud or illegal activities	Legitimate interests – we have a legitimate interest in protecting our business and our users against fraud and unlawful activity; or Legal obligation – where detection or reporting is required by law
For archival and backup purposes in connection with the provision of the Services	Legitimate interests – we have a legitimate interest in maintaining the continuity and integrity of our Services; or Legal obligation – where retention is required by applicable law or regulation
For research and analysis purposes, such as determining trends in consumption of our products and where our products may be in demand	Legitimate interests – we have a legitimate interest in understanding how our products are used and where demand exists
To communicate with users	Performance of a contract – for communications that are necessary to deliver the Services; or Legitimate interests – for other communications relating to our products and services
To fulfil your requests, such as those relating to ordering and payments	Performance of a contract – processing is necessary to fulfil your order or otherwise perform our contract with you
Purposes disclosed to you at the time we collect the information	The applicable lawful basis will be specified at the point of collection
To enforce our Terms of Use or other applicable policies	Legitimate interests – we have a legitimate interest in enforcing our terms and protecting our legal rights
To carry out profiling for advertising purposes, using third party tracking technologies to analyse your interests and behaviour.	Consent – where required by applicable ePrivacy laws (UK PECR / EU ePrivacy Directive)

6. Sharing of Information. We may share and disclose information as described at the time information is collected or as follows: With our Business Partners. If you provide information related to a restaurant or business with which Impossible Foods has a business relationship, we may share the information you provide with that business in order to help our business partners better understand our customers. With Third Party Service Providers Performing Services on Our Behalf, such as Analytics 4, Google Ads, Google Meta (Facebook), LinkedIn, Osano, Pinterest, X (Twitter), The Trade Desk, AppNexus/Xandr, Mediaocean/Mediaplex, Pinterest, Hotjar, HubSpot, BazaarVoice, Click2Cart/SmartCommerce, and TikTok. We share information, including personal information, with our service providers to perform the functions for which we engage them. For example, we may use third parties to host the Services, provide data analysis and research services, to send out email updates about the Services, provide marketing and advertising services for us, remove repetitive information from our user lists, and to help us deliver our products and services to customers and process payments. For Legal Purposes. We also may share information that we collect from users as needed to enforce our rights, protect our property or protect the rights, property or safety of others, or as needed to support external auditing, compliance and corporate governance functions. We will disclose personal information as we deem necessary to respond to a subpoena, regulation, binding order of a data protection agency, legal process, governmental request or other legal or regulatory process. We may also share personal information as required to pursue available remedies or limit damages we may sustain. Corporate Changes. We may transfer information, including your personal information, in connection with a merger, sale, acquisition, reorganization, liquidation or other change of ownership or control by or of us or any afﬁliated company (in each case whether in whole or in part).

7. Security of Your Information. We employ reasonable security measures designed to protect the security of information submitted through the Services. However, the security of information transmitted through the Internet can never be guaranteed. We are not responsible for any interception or interruption of any communications through the Internet or for changes to or losses of data. Users of the Services are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of any of our Services. In order to protect us, you and your data, we may suspend your use of the Services, without notice if any breach of security is suspected. Access to and use of password protected and/or secure areas of the Services are restricted to authorized users only. Unauthorized access to such areas is prohibited.

8. How long we keep your personal data. We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including to comply with any legal or regulatory obligations to which we are subject and, where necessary to establish, exercise or defend legal claims, until the end of the relevant limitation period or until those claims have been resolved. If you would like further information in relation to our retention periods, please contact us using the details set out in the "How to Contact Us" section below.

9. Effective Date and Changes to Privacy Policy. The Effective Date of this Privacy Policy is set forth at the top of this webpage. We may change this Privacy Policy from time to time. Where we propose to make a material change to this Privacy Policy – Including, without limitation, any change that affects the purposes for which we process your personal data, the legal basis on which we rely, the categories of recipients with whom we share your data, or our data retention practices – we will notify you of that change in advance by a prominent notice on the Site no less than 30 days before the change takes effect. For changes that are not material, we will post the updated Privacy Policy to this webpage and update the Effective Date accordingly. We encourage you to review this Privacy Policy periodically to remain informed of our current privacy practices. The amended Privacy Policy supersedes all previous versions.

10. Non-U.S. Visitors. All personal information we collect through the Services is currently processed in the United States ("US") by us or by a party acting on our behalf. Therefore you acknowledge that your personal data may be transferred to the US (and if applicable to other countries) where it will be stored and processed by us for the purposes set out in this privacy policy. For UK and European Economic Area (“EEA”) please note that some territories outside of the UK and / or EEA do not always offer the same standard of data protection as those inside the UK and / or EEA, although we will ensure that your personal data is only ever treated in accordance with this Policy. Where necessary, we have entered into standard European Commission (for transfers from the EEA) or UK (for transfers from the UK) approved form model data protection clauses (“Standard Contractual Clauses”) to ensure the lawfulness of our data transfers. The Standard Contractual Clauses can be consulted on the website of the European Commission: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_nl

11. Children. We do not knowingly collect or maintain personal information from any person under the age of sixteen. No parts of our Services are directed to or designed to attract anyone under the age of sixteen.

12. Your Rights. Privacy laws in some countries, most notably the UK and countries within the EU, provide you with rights and choices about the personal information we collect and hold about you. The specific rights available to you may vary depending in your location and applicable law. In particular, if you are located in the UK or the EU, you have the following rights in respect of your personal information: (a) Right of access. You have a right of access to any personal information we hold about you. You can ask us for a copy of your personal information; confirmation as to whether your personal information is being used by us; details about how and why it is being used; and details of the safeguards which are in place if we transfer your information outside of the United Kingdom or the EEA.

(b) Right to update your information. You have a right to request an update to any of your personal information which is out of date or incorrect. (c) Right to delete your information. You have a right to ask us to delete any personal information which we are holding about you in certain specific circumstances. You can ask us for further information on these specific circumstances by contacting us using the details in the "How to Contact Us"; section below. We will pass your request onto other recipients of your personal information unless that is impossible or involves disproportionate effort. You can ask us who the recipients are, using the contact details in the "How to Contact Us" section below. (d) Right to restrict use of your information: You have a right to ask us to restrict the way that we process your personal information in certain specific circumstances. You can ask us for further information on these specific circumstances by contacting us using the details in the "How to Contact Us" section below. We will pass your request onto other recipients of your personal information unless that is impossible or involves disproportionate effort. You can ask us who the recipients are using the contact details in the "How to Contact Us" section below. (e) Right to stop marketing: You have a right to ask us to stop using your personal information for direct marketing purposes. You also have a right to object to profiling where it is carried out for direct marketing purposes (see "Automated Decision-Making and Profiling" section below). If you exercise this right, we will stop using your personal information for this purpose. (f) Right to data portability: You have a right to ask us to provide your personal information to a third party provider of services. This right only applies where we use your personal information on the basis of your consent or performance of a contract; and where our use of your information is carried out by automated means. (g) Right to object. You have a right to ask us to consider any valid objections which you have to our use of your personal information where we process your personal information on the basis of our or another person's legitimate interest.

If you would like further information in relation to your specific rights, please contact us using the details set out in the "How to Contact Us" section below.

13. Automated Decision-Making and Profiling. (a) We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. If this changes in future, we will inform you. (b) We use third-party tracking pixels and analytics tools to analyse your browsing behaviour and infer your interests, in order to show you targeted advertising for Impossible Foods products. This is carried out through cookies and similar technologies operated by Meta, TikTok, LinkedIn, X, The Trade Desk, AppNexus, Mediaocean, Pinterest, Google Ads/DoubleClick and Hotjar behaviour analytics. As a result, data about your browsing behaviour may be shared with those providers and used to serve you interest-based advertising on third-party platforms. Further detail on these technologies is in our type: entry-hyperlink id: 3bFgcf80lXpokfWDObxBAj.

14. Your California Privacy Rights. Under California’s “Shine the Light” law, California residents who provide certain types of personal information in obtaining products or services for personal, family or household use are entitled to request and obtain from us once a calendar year information about certain types of personal information we shared, if any, with other businesses for their own direct marketing uses. To obtain this information, please contact us here (opens in a new tab) with “Request for California Privacy Information” on the subject line and in the body of your message. California residents also have rights under the California Privacy Rights Act (“CPRA”). To learn more about California residents’ rights under the CPRA and how to exercise such rights, please visit here (opens in a new tab) .

15. Do Not Track. The Services do not support Do Not Track with respect to the Services at this time. Do Not Track is a privacy preference that you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For all the details, including how to turn on Do Not Track, visit www.donottrack.us (opens in a new tab).

16. Notice for Nevada Residents. Under Nevada law, we do not sell your personal information. However, if you are a Nevada resident, you may submit a request that we do not sell any personal information we have collected about you by contacting us here (opens in a new tab).

17. Access and Correction. You may access and change or correct the personal information you provide to us to receive marketing or other communications from us by clicking the link provided in each email that we send to you.

18. Notice and How to Contact Us. Please send all notices regarding this Privacy Policy or if you have any questions about this Privacy Policy or want to exercise your rights as a data subject set out in this Privacy Policy, you can contact us at [email protected].

19. Complaints. If you have a concern about any aspect of our privacy practices, including the way we have handled your personal data, please contact us using the contact details provided in the "How to Contact Us" section above. You can also report any issues or concerns to the relevant supervisory authority in your jurisdiction. In the UK, the main regulatory authority is the Information Commissioner's Office ("ICO") whose contact details can be found on its website at https://ico.org.uk . In the Netherlands, the relevant competent supervisory authority is the Autoriteit Persoonsgegevvents (“AP”), whose contact details can be found at https://autoriteitpersoonsgegevens.nl/. You can also report any issues or concerns to a national supervisory authority in the EU country of your residence or the place of the alleged infringement in respect of compliance with the EU GDPR. You can find a list of contact details for all EU supervisory authorities at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

Last updated: June 1, 2026

IMPOSSIBLE FOODS INC. PRIVACY POLICY

Subscribe to our newsletter