Company: PTHS
Filing Date: 2025-05-27
Form Type: DEFM14C
Source: 0001140361-25-020509
Chunk: 668

Company: Pelthos Therapeutics Inc.
Filing Date: 2025-05-27
Form: DEFM14C
Chunk 668
---
 processing of personal data with any applicable national data protection regulator, (ii) requests from data subjects under applicable data protection and privacy Laws, (iii) where necessary, the obtaining of consent to the processing of personal data and/or direct marketing activity, and (iv) where necessary, the obtaining of any approval, consultation and/or agreement of any applicable works councils or such similar worker representation bodies. Public Company and each of its Subsidiaries have all material rights necessary to process all personal data used in the business of Public Company or such Subsidiary, as applicable. Neither Public Company nor any of its Subsidiaries has received any written notice or complaint from any individual, third party and/or regulatory (x) authority alleging non-compliance by Public Company or any of its Subsidiaries with any applicable data protection and privacy Law (including any prohibition or restriction on the transfer of data to any jurisdiction) or (y) claiming compensation for or an injunction for non-compliance with any applicable data protection and privacy Law.

(b) Public Company and each of its Subsidiaries have established and maintain commercially reasonable technical, physical and organizational controls, policies, procedures, safeguards, measures and security systems, plans and technologies in material compliance with requirements under applicable privacy and data protection Laws. Since January 1, 2021, no material breach or material security incident in relation to Public Company’s or any of its Subsidiaries’ personal data and/or proprietary data has occurred or, to the Public Company’s knowledge, is threatened, and there has been no actual or, to the Public Company’s knowledge, threatened unauthorized or illegal processing of, or accidental or unlawful destruction, loss or alteration of, any of Public Company’s or its Subsidiaries’ personal data and/or proprietary data.

4.28 No Shell Company Status . Public Company is not, and has never been, a “shell company” as such term is defined in Rule 405 under the Securities Act.

<div align='center'>A-34</div>

#### TABLE OF CONTENTS
4.29 No Other Representations or Warranties . Each of Public Company and Merger Sub hereby acknowledges and agrees that, except for the representations and warranties contained in this Agreement, none of Ligand, Merger Partner nor any other Person on behalf of Ligand or Merger Partner makes any express or implied representation or warranty with respect to Merger Partner or its financial condition, business, results of operations, properties, assets, liabilities, or prospects or otherwise or