Legal Foundation and Regulatory Framework

This Data Protection and User Rights Policy establishes the framework through which Moris Media LLC ensures lawful, fair, and structured handling of information across all systems and services. The policy defines the rights available to users and the obligations undertaken by the organisation in managing information.

Moris Media LLC operates under EIN and processes information in accordance with CCPA + CPRA + applicable state privacy laws applicable in United States. Where operations extend across jurisdictions, data protection measures are aligned with applicable cross-border regulatory requirements to ensure consistency and compliance.

This policy forms an integral part of the overall data governance structure and must be read in conjunction with the Privacy Policy and Cookie Policy.

Principles of Data Protection

All data processing activities carried out by Moris Media LLC are guided by structured principles that ensure responsible handling of information. These principles include:

• Lawful and transparent processing of information
• Limitation of processing to defined purposes
• Collection of only necessary and relevant data
• Maintenance of accuracy and integrity of information
• Restriction of storage duration to required timelines
• Protection of data through appropriate safeguards

These principles are implemented across all operational systems to ensure that data protection is embedded within organisational processes.

User Rights Framework

Users located in United States are entitled to exercise specific rights under CCPA + CPRA + applicable state privacy laws in relation to their information. These rights are provided to ensure that users retain control over how their data is processed.

The rights available to users may include:

• Right to access information held by Moris Media LLC
• Right to request correction of inaccurate or incomplete data
• Right to request deletion of data where applicable
• Right to restrict processing in certain circumstances
• Right to withdraw consent for non-essential processing
• Right to object to specific types of processing

Each right is subject to applicable legal conditions and may be exercised through defined procedures.

Right to Access Information

Users have the right to request confirmation regarding whether their information is being processed and to obtain access to such information.

Upon receiving a valid request, Moris Media LLC shall provide:

• Details of the information being processed
• Purpose of processing
• Categories of data involved
• Relevant recipients or categories of recipients

Requests for access must be submitted through authorised communication channels and may require verification of identity.

Right to Rectification and Data Accuracy

Users may request correction of inaccurate, incomplete, or outdated information. Moris Media LLC takes reasonable steps to ensure that information remains accurate and up to date.

Upon verification of the request, necessary corrections are made within a reasonable timeframe. Where correction is not feasible due to legal or operational constraints, users are informed accordingly.

Right to Erasure and Data Removal

Users may request deletion of their information under certain conditions. This right applies where:

• Information is no longer necessary for the purpose of collection
• Consent has been withdrawn and no other legal basis exists
• Processing is unlawful under CCPA + CPRA + applicable state privacy laws

Deletion requests are subject to verification and may be restricted where retention is required for legal, regulatory, or contractual purposes.

Right to Restrict Processing

Users may request restriction of processing in specific circumstances, including:

• Where the accuracy of information is contested
• Where processing is unlawful but deletion is not requested
• Where information is required for legal claims

During restriction, information is not actively processed except where necessary for compliance or protection of rights.

Right to Withdraw Consent

Where processing is based on consent, users have the right to withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

Upon withdrawal:

• Non-essential processing activities are discontinued
• System behaviour is adjusted to reflect updated preferences
• Future processing aligns with user decisions

Users may manage consent through relevant interfaces or by contacting Moris Media LLC.

Right to Object to Processing

Users may object to processing where it is based on legitimate interests or other permissible grounds under CCPA + CPRA + applicable state privacy laws.

Upon receiving an objection, Moris Media LLC evaluates whether overriding legitimate grounds exist. If no such grounds are identified, processing is discontinued.

This right ensures that users can challenge processing that may impact their interests.

Right to Data Portability

Where applicable, users may request their information in a structured and commonly used format. This enables users to transfer their data to another service provider where feasible.

Such requests are processed subject to:

• Verification of identity
• Technical feasibility
• Protection of third-party information

This right supports user autonomy and flexibility in managing their information.

Procedures for Exercising Rights

Users may exercise their rights by submitting requests through the following contact channels:

Email: legal@morismedia.comPhone: +1 (321) 448-1111Address: #99 Wall Street Suite 1079, NY, 10005, United States

Requests must include sufficient information to enable identification and processing. Moris Media LLC may request additional details where necessary to verify identity or clarify the request.

All requests are processed within timelines defined under CCPA + CPRA + applicable state privacy laws applicable in United States.

Verification and Authentication of Requests

To ensure that user rights are exercised securely, Moris Media LLC implements verification procedures before processing requests.

This may include:

• Verification of identity through documentation or system validation
• Confirmation of authority where requests are submitted on behalf of another party
• Assessment of request legitimacy

Requests that cannot be verified may be declined to protect data security.

Limitations and Legal Conditions

Certain rights may be subject to limitations based on legal or operational requirements. These may include:

• Retention obligations under law
• Protection of rights of third parties
• Prevention of fraud or misuse
• Compliance with regulatory requirements

Where limitations apply, Moris Media LLC provides appropriate explanation in accordance with CCPA + CPRA + applicable state privacy laws applicable in United States.

Data Protection Contact and Compliance Oversight

Moris Media LLC maintains structured oversight of data protection practices. Users may contact the organisation for queries, requests, or complaints related to data protection.

Email: legal@morismedia.comPhone: +1 (321) 448-1111

All communications are handled in accordance with applicable legal requirements and internal procedures.

Enforcement of User Rights and Organisational Responsibility

Moris Media LLC is responsible for ensuring that all user rights are respected, enforced, and implemented through structured operational mechanisms. This includes establishing internal procedures, assigning accountability, and maintaining systems that allow for effective response to user requests.

All departments, personnel, and associated service providers are required to adhere to defined data protection standards. Access to user data is controlled and monitored to ensure that rights are not compromised during processing activities.

Failure to comply with internal data protection protocols may result in corrective action, including restriction of access, review of responsibilities, and enforcement measures in accordance with organisational policies.

Timeframe for Response and Resolution

All requests submitted by users are processed within a reasonable timeframe as defined under CCPA + CPRA + applicable state privacy laws applicable in United States. The response timeline begins once a valid and verifiable request is received.

Where requests are complex or require additional verification, the response period may be extended within the limits permitted under applicable law. In such cases, users are informed of the delay and the reasons for extension.

The objective is to ensure that all requests are handled efficiently while maintaining accuracy and compliance.

Refusal or Limitation of Requests

Moris Media LLC reserves the right to refuse or limit requests where permitted under CCPA + CPRA + applicable state privacy laws applicable in United States. Such circumstances may include:

• Requests that are repetitive or excessive
• Requests that cannot be verified
• Requests that conflict with legal or regulatory obligations
• Requests that impact the rights of other individuals or entities

Where a request is refused or limited, the user is provided with a reasoned explanation in accordance with applicable legal requirements.

Handling of Data in Legal and Contractual Contexts

In certain cases, information processed by Moris Media LLC may be subject to legal or contractual obligations that restrict modification or deletion. This includes data required for:

• Compliance with statutory requirements
• Fulfilment of contractual commitments
• Establishment, exercise, or defence of legal claims

In such situations, user rights may be limited to the extent necessary to comply with these obligations. Users are informed of such limitations where applicable.

Grievance Redressal Mechanism

Moris Media LLC has established a structured grievance redressal mechanism to address concerns related to data protection and user rights.

Users may submit complaints regarding:

• Improper handling of information
• Delay or failure in responding to requests
• Unauthorised processing or disclosure

All grievances are reviewed and resolved in accordance with CCPA + CPRA + applicable state privacy laws applicable in United States.

Users may contact:

Email: legal@morismedia.comPhone: +1 (321) 448-1111Address: #99 Wall Street Suite 1079, NY, 10005, United States

The organisation ensures that grievances are addressed within a reasonable timeframe and that appropriate corrective actions are taken where necessary.

Escalation and Regulatory Remedies

Where users are not satisfied with the resolution provided, they may have the right to escalate their concerns to the appropriate regulatory authority under CCPA + CPRA + applicable state privacy laws applicable in United States.

Moris Media LLC cooperates with such authorities and provides necessary information to facilitate resolution of disputes or investigations.

This ensures that users have access to independent remedies where required.

Data Protection in Cross-Border Contexts

For users interacting with Moris Media LLC across multiple jurisdictions, data protection measures are applied in a manner that ensures consistency and compliance.

Cross-border processing is conducted with safeguards that ensure:

• Protection of user rights regardless of location
• Application of appropriate legal standards
• Maintenance of security and confidentiality

Where jurisdiction-specific requirements apply, processing is adjusted to meet those requirements under CCPA + CPRA + applicable state privacy laws applicable in United States.

User Awareness and Education

Moris Media LLC recognises the importance of user awareness in data protection. Efforts are made to ensure that users are informed about:

• Their rights under applicable laws
• Methods to exercise those rights
• Implications of data processing activities

Information is provided through policy documentation, communication channels, and system interfaces to ensure clarity and accessibility.

Integration with Privacy and Cookie Frameworks

This Data Protection and User Rights Policy operates in coordination with the broader privacy framework, including the Privacy Policy and Cookie Policy.

This integration ensures that:

• User rights are consistently applied across all processing activities
• Consent mechanisms align with data protection requirements
• Transparency is maintained across all platforms

Users are encouraged to review related policies to obtain a comprehensive understanding of data handling practices.

Record Maintenance and Compliance Documentation

Moris Media LLC maintains records of user requests, responses, and actions taken in relation to data protection. These records are used for:

• Compliance verification
• Internal audits and reviews
• Demonstrating adherence to legal requirements

Documentation is maintained in a secure and controlled environment and is accessible only to authorised personnel.

Security Measures Supporting User Rights

The protection of user rights is supported by security measures that ensure data integrity and confidentiality. These measures include:

• Authentication protocols for verifying user identity
• Access controls limiting data availability
• Monitoring systems detecting unauthorised activity

These safeguards ensure that user requests are processed securely and that information is not exposed to risk during handling.

Impact of User Rights on Service Delivery

Exercise of user rights may affect how services are delivered. Depending on the nature of the request:

• Certain features may become unavailable
• Processing activities may be limited
• Communication may be adjusted

While Moris Media LLC ensures that core services remain operational, users are informed that the exercise of certain rights may influence system functionality.

Organisational Commitment to Continuous Compliance

Moris Media LLC remains committed to maintaining compliance with evolving legal and regulatory requirements. This includes:

• Updating policies and procedures
• Enhancing systems and controls
• Training personnel on data protection obligations

Continuous improvement ensures that user rights are protected in line with current standards.

Final Provisions and Policy Validity

This Data Protection and User Rights Policy establishes the framework through which Moris Media LLC ensures lawful and responsible handling of information.

All provisions of this policy remain effective unless modified or replaced in accordance with applicable procedures. Users are encouraged to review this policy periodically to remain informed.

Final Acknowledgement

By interacting with the Platform, users acknowledge that they have read, understood, and agreed to the terms of this Data Protection and User Rights Policy.

Users further acknowledge that they have been provided with mechanisms to exercise their rights and that such mechanisms operate in accordance with CCPA + CPRA + applicable state privacy laws applicable in United States.