Company: PTHS
Filing Date: 2025-05-09
Form Type: PREM14C
Source: 0001140361-25-018219
Chunk: 581

Company: Pelthos Therapeutics Inc.
Filing Date: 2025-05-09
Form: PREM14C
Chunk 581
---
” or “associates” is, or has been at any time since Merger Partner Incorporation prior to the date of this Agreement, an “interested stockholder” of Public Company or a “beneficial owner” of Public Company Common Stock, as those terms are defined in NRS Chapter 78.

3.24 Privacy and Data Protection .

(a) Merger Partner and each Merger Partner Subsidiary has complied at all times, and currently complies, in each case, in all material respects, with any applicable data protection and privacy Law with respect to their businesses, including, as applicable, with respect to (i) requirements relating to notification and/or registration of processing of personal data with any applicable national data protection regulator, (ii) requests from data subjects under data protection and privacy Laws, (iii) where necessary, the obtaining of consent to the processing of personal data and/or direct marketing activity, and (iv) where necessary, the obtaining of any approval, consultation and/or agreement of any applicable works councils or such similar worker representation bodies. Merger Partner and each Merger Partner Subsidiary have all material rights necessary to process all personal data used in the business of the Merger Partner or Merger Partner Subsidiary, as applicable. Neither Merger Partner nor any Merger Partner Subsidiary has received any written notice or complaint from any individual, third party and/or Governmental Entity, or to the knowledge of Merger Partner, has not been threatened with any written notice or complaint from any individual, third party and/or Governmental Entity (x) alleging

<div align='center'>A-17</div>

#### TABLE OF CONTENTS
non-compliance by Merger Partner or any Merger Partner Subsidiary with any applicable data protection and privacy Law (including any prohibition or restriction on the transfer of data to any jurisdiction) or (y) claiming compensation for or an injunction for non-compliance with any applicable data protection and privacy Law.

(b) Merger Partner and each Merger Partner Subsidiary has established and maintains commercially reasonable technical, physical and organizational controls, policies, procedures, safeguards, measures and security systems, plans and technologies in material compliance with requirements under applicable privacy and data protection Laws. Since Merger Partner Incorporation, no material breach or material security incident in relation to Merger Partner’s or any Merger Partner Subsidiary personal data and/or proprietary data has occurred or, to Merger Partner’s knowledge, is threatened, and