LandBridge Company LLC Class A (LB) Risk Factors

In March 2021, our Board of Directors reinstated our annual dividend at $0.60 per share, beginning with the quarterly dividend to be paid in June 2021. Our dividend program requires the use of a portion of our cash flow. Our ability to pay dividends will depend on our ability to generate sufficient cash flows from operations in the future. This ability may be subject to certain economic, financial, competitive and other factors that are beyond our control. Our Board of Directors may, at its discretion, decrease the level of dividends or entirely discontinue the payment of dividends at any time. Any failure to pay dividends after we have announced our intention to do so may negatively impact our reputation, investor confidence in us and our stock price.

The retail industry is highly competitive. We compete for sales with a broad range of other retailers, including individual and chain specialty stores, department stores and discount retailers. In addition to the traditional store-based retailers, we also compete with direct marketers or retailers that sell similar lines of merchandise and who target customers through online channels. Brand image, marketing, design, price, service, assortment, quality, image presentation and fulfillment are all competitive factors in both the store-based and online channels. Some of our competitors may have greater financial, marketing and other resources available and trends across our product categories may favor our competitors. We rely to a greater degree than some of our competitors on physical locations in shopping malls and centers and so declines in traffic to such locations may affect us more significantly than our competitors. Some of our competitors sell their products in stores that are located in the same shopping malls and centers as our stores. In addition to competing for sales, we compete for favorable site locations and lease terms in shopping malls and centers. Increased competition, combined with declines in mall and/or online website traffic, could result in price reductions, increased marketing expenditures and loss of pricing power and market share, any of which could have a material adverse effect on our results of operations, financial condition and cash flows.

Our ability to maintain our reputation is critical to our brand images. Our reputation could be jeopardized if we fail to maintain high standards for merchandise quality and integrity. Any negative publicity, including information publicized through traditional or social media platforms and similar venues such as blogs, websites and other forums, may affect our reputation and brand and, consequently, reduce demand for our merchandise, even if such publicity is unverified or inaccurate. Failure to comply with or the perception that the Company has failed to comply with ethical, social, product, labor, privacy and environmental standards, or related political considerations, could also jeopardize our reputation and potentially lead to various adverse consumer actions, including boycotts. Failure to comply with local laws and regulations, to maintain an effective system of internal controls, to maintain the security of customer, associate, third-party and company information or to provide accurate and timely financial statement information could also hurt our reputation. Damage to our reputation or loss of consumer confidence for any of these or other reasons could have a material adverse effect on our results of operations, financial condition and cash flows, as well as require additional resources to rebuild our reputation.

In the fourth quarter of 2018, we completed the sale of La Senza to an affiliate of Regent LP, a global private equity firm. As a result of the La Senza divestiture, we may incur unexpected contingent liabilities, including with respect to leases assumed by the buyer. Our divestiture activities may also present financial and operational risks. Those risks may include difficulties separating personnel, financial and other systems, and indemnities and potential disputes with the buyer. Any of these factors could adversely affect our financial condition and results of operations.

We are subject to income tax in local, national and international jurisdictions. In addition, our products are subject to import and excise duties and/or sales or value-added taxes in many jurisdictions. We are also subject to the examination of our tax returns and other tax matters by the Internal Revenue Service and other tax authorities and governmental bodies. We regularly assess the likelihood of an adverse outcome resulting from these examinations to determine the adequacy of our provision for taxes. There can be no assurance as to the outcome of these examinations. Fluctuations in tax rates and duties, changes in tax legislation or regulation or adverse outcomes of these examinations could have a material adverse effect on our results of operations, financial condition and cash flows. There is increased uncertainty with respect to tax policy and trade relations between the U.S. and other countries, including as a result of any executive action taken or legislative priorities set by the current Biden administration. Major developments in tax policy or trade relations, such as the imposition of unilateral tariffs on imported products, could have a material adverse effect on our results of operations, financial condition and cash flows.

We are, and may increasingly become, subject to various laws, directives, industry standards and regulations, as well as contractual obligations, relating to data privacy and security in the jurisdictions in which we operate. The regulatory environment related to data privacy and security is increasingly rigorous, with new and constantly changing requirements applicable to our business, and enforcement practices are likely to remain uncertain for the foreseeable future. These laws and regulations may be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible that they will be interpreted and applied in ways that may have a material adverse effect on our results of operations, financial condition and cash flows. In the U.S., various federal and state regulators, including governmental agencies like the Consumer Financial Protection Bureau and the Federal Trade Commission, have adopted, or are considering adopting, laws and regulations concerning personal information and data security and have prioritized privacy and information security violations for enforcement actions. Certain state laws may be more stringent or broader in scope, or offer greater individual rights, with respect to personal information than federal, international or other state laws, and such laws may differ from each other, all of which may complicate compliance efforts. For example, the California Consumer Privacy Act (“CCPA”), which increases privacy rights for California residents and imposes obligations on companies that process their personal information, went into effect on January 1, 2020. Among other things, the CCPA requires covered companies to provide new disclosures to California consumers and provide such consumers new data protection and privacy rights, including the ability to opt-out of certain data sharing arrangements of personal information, and the ability to access and delete personal information. The CCPA provides for civil penalties for violations, as well as a private right of action for certain data breaches that result in the loss of personal information. This private right of action may increase the likelihood of, and risks associated with, data breach litigation. Furthermore, in November 2020, California voters passed the California Privacy Rights Act of 2020 (“CPRA”). Effective beginning January 1, 2023, the CPRA imposes additional obligations on companies covered by the legislation and will significantly modify the CCPA, including by expanding California residents’ rights with respect to certain sensitive personal information. The CPRA also creates a new state agency that will be vested with authority to implement and enforce the CCPA and CPRA. Other states (such as Virginia) also plan to pass data privacy laws that are similar to the CCPA, CPRA, and GDPR (described below), further complicating the legal landscape. In addition, laws in all 50 U.S. states require businesses to provide notice to consumers (and, in some cases, to regulators) whose personal information has been accessed or acquired as a result of a data breach. State laws are changing rapidly and there is discussion in Congress of a new comprehensive federal data privacy law to which we would become subject if it is enacted, which may add additional complexity, variation in requirements, restrictions and potential legal risk, require additional investment of resources in compliance programs, impact strategies and the availability of previously useful data and could result in increased compliance costs or changes in business practices and policies. We are also subject to international laws, regulations and standards in many jurisdictions, which apply broadly to the collection, use, retention, security, disclosure, transfer and other processing of personal information. For example, the E.U. General Data Protection Regulation (“GDPR”), which became effective in May 2018, greatly increased the European Commission’s jurisdictional reach of its laws and adds a broad array of requirements for handling personal data. EU member states are tasked under the GDPR to enact, and have enacted, certain implementing legislation that adds to and/or further interprets the GDPR requirements and potentially extends our obligations and potential liability for failing to meet such obligations. The GDPR, together with national legislation, regulations and guidelines of the EU member states and the United Kingdom governing the processing of personal data, impose strict obligations and restrictions on the ability to collect, use, retain, protect, disclose, transfer and otherwise process personal data. In particular, the GDPR includes obligations and restrictions concerning data transparency and consent, the overall rights of individuals to whom the personal data relates, the transfer of personal data out of the European Economic Area ("EEA") or the United Kingdom, security breach notifications and the security and confidentiality of personal data. The GDPR authorizes fines for certain violations of up to 4% of global annual revenue or €20 million, whichever is greater. Recent legal developments in Europe have created further complexity and uncertainty regarding transfers of personal data from the EEA and the United Kingdom to the United States. Most recently, in July 2020, the Court of Justice the European Union (“CJEU”) invalidated the EU-U.S. Privacy Shield Framework (“Privacy Shield”) under which personal data could be transferred from the EEA to the United States. While the CJEU upheld the adequacy of standard contractual clauses, a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism and potential alternative to the Privacy Shield, it made clear that reliance on them alone may not necessarily be sufficient in all circumstances. Further, the United Kingdom’s decision to leave the EU has created uncertainty with regard to data protection regulation in the United Kingdom. As of January 1, 2021, we are also subject to the UK GDPR and UK Data Protection Act of 2018, which retains the GDPR in the United Kingdom’s national law. These recent developments will require us to review and amend the legal mechanisms by which we make and/or receive personal data transfers. As supervisory authorities issue further guidance on personal data export mechanisms, including circumstances where the standard contractual clauses and other mechanisms cannot be used, and/or start taking enforcement action, we could suffer additional costs, complaints and/or regulatory investigations or fines, or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we do business, the geographical location or segregation of our relevant operations, and could adversely affect our financial results. All of these evolving compliance and operational requirements impose significant costs, such as costs related to organizational changes, implementing additional protection technologies, training associates and engaging consultants, which are likely to increase over time. In addition, such requirements may require us to modify our data processing practices and policies, distract management or divert resources from other initiatives and projects, all of which could have a material adverse effect on our results of operations, financial condition and cash flows. Any failure or perceived failure by us to comply with any applicable federal, state or similar foreign laws and regulations relating to data privacy and security could result in damage to our reputation and our relationship with our customers, as well as proceedings or litigation by governmental agencies or customers, including class action privacy litigation in certain jurisdictions, which could subject us to significant fines, sanctions, awards, penalties or judgments, any of which could have a material adverse effect on our results of operations, financial condition and cash flows.

Our success depends in part on management’s ability to effectively manage the life cycle of our brands and to anticipate and respond to changing fashion preferences and consumer demands and to translate market trends into appropriate, salable product offerings in advance of the actual time of sale to the customer. We are dependent on certain product categories, and a decline in consumer demand in these product categories could negatively effect on our results of operations, financial condition and cash flows. Customer demands and fashion trends change rapidly. If we are unable to successfully anticipate, identify or react to changing styles or trends or we misjudge the market for our products or any new product lines, our sales will be lower, potentially resulting in significant amounts of unsold inventory. In response, we may be forced to increase our marketing promotions or price markdowns. These risks could have a material adverse effect on our brand image and reputation as well as our results of operations, financial condition and cash flows.

We believe that our trade names, trademarks and patents are important assets and an essential element of our strategy. We have obtained or applied for federal registration of these trade names, trademarks and patents and have applied for or obtained registrations in many foreign countries. There can be no assurance that we will obtain such registrations or that the registrations we obtain will prevent the imitation of our products or infringement or other violation of our intellectual property rights by others. In particular, the laws of certain foreign countries may not protect proprietary rights to the same extent as the laws of the U.S. If any third-party copies our products or our stores in a manner that projects lesser quality or carries a negative connotation, it could have a material adverse effect on our brand image and reputation as well as our results of operations, financial condition and cash flows. Third parties may assert rights in or ownership of our trademarks and other intellectual property rights, or trademarks that are similar to our trademarks, or claim that we are infringing, misappropriating or otherwise violating their intellectual property rights. We may be unable to successfully resolve these type of conflicts to our satisfaction and may be required to enter into costly license agreements, be required to pay significant royalty, settlements costs or damages, required to rebrand our products and/or be prevented from selling some of our products.

In the operation of our business, we collect, use, transmit and otherwise process a large volume of personal and other confidential, proprietary and sensitive information. Information systems are susceptible to an increasing threat of continually evolving cybersecurity risks. Any significant compromise or breach of our data security, media reports about such an incident, whether accurate or not, or our failure to make adequate or timely disclosures to the public or law enforcement agencies following any such event, whether due to delayed discovery or a failure to follow existing protocols, could significantly damage our reputation with our customers, associates, investors and other third parties, cause the disclosure of personal, confidential, proprietary or sensitive customer, associate, third-party or company information, cause interruptions to our operations and distraction to our management, cause our customers to stop shopping with us and result in significant legal, regulatory and financial liabilities and lost revenues. While we train our associates and have implemented systems, processes and security measures to protect our physical facilities and information technology systems against unauthorized access and prevent data loss, there is no guarantee that these procedures are adequate to safeguard against all data security threats. Despite these measures, we may be vulnerable to targeted or random attacks on our systems that could lead to security breaches, phishing attacks, denial of service attacks, acts of vandalism, computer viruses, malware, ransomware, misplaced or lost data, programming and/or human errors or similar events. Our systems and facilities are also subject to compromise from internal threats, such as theft, misuse, unauthorized access or other improper actions by employees, third-party service providers and other third parties with otherwise legitimate access to our systems, website or facilities (which risks may be heightened as a result of work-from-home policies and technologies implemented in the wake of the COVID-19 pandemic). Furthermore, because the methods of cyber-attack and deception change frequently, are increasingly complex and sophisticated, and can originate from a wide variety of sources, including nation-state actors, despite our reasonable efforts to ensure the integrity of our systems and website, it is possible that we may not be able to anticipate, detect, appropriately react and respond to, or implement effective preventative measures against, all cybersecurity incidents. We may be required to expend significant capital and other resources to protect against, respond to, and recover from any potential, attempted, or existing cybersecurity incidents. As cybersecurity incidents continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. In addition, our remediation efforts may not be successful, or may not be completed in a timely manner. The inability to implement, maintain and upgrade adequate safeguards could have a material adverse effect on our results of operations, financial condition and cash flow. Moreover, there could be public announcements regarding any cybersecurity incidents and any steps we take to respond to or remediate such incidents, and if securities analysts or investors perceive these announcements to be negative, it could, among other things, have a substantial adverse effect on the price of our common stock. While we currently maintain cybersecurity insurance, such insurance may not be sufficient in type or amount to cover us against claims related to breaches, failures or other data security-related incidents, and we cannot be certain that cyber insurance will continue to be available to us on economically reasonable terms, or at all, or that any insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our results of operations, financial condition and cash flows.

Our success depends, in part, on the secure and uninterrupted performance of our and our third-party services providers' and vendors' information technology systems. Our information technology systems, as well as those of our service providers and vendors are vulnerable to damage, interruption or breach from a variety of sources, including cyberattacks, ransomware attacks, telecommunication failures, malicious human acts and natural disasters. Moreover, despite maintaining comprehensive measures, some of our systems, e-commerce environments, servers and those of our service providers and vendors are potentially vulnerable to physical or electronic break-ins, computer viruses and similar disruptive problems. Such incidents could disrupt our operations including our ability to timely ship and track product orders and project inventory requirements, and lead to interruptions or delays in our supply chain. Additionally, these types of problems could result in an actual or perceived breach of confidential customer, merchandise, financial, employee or other important information (including personal information), which could result in damage to our reputation, costly litigation, customer complaints, negative publicity, breach notification obligations, regulatory or administrative sanctions, inquiries, orders or investigations, indemnity obligations, damages for contract breach or penalties for violations of applicable laws or regulations. The increased use of smartphones, tablets and other mobile devices may also heighten these and other operational risks. Despite the precautions we have taken, unanticipated problems or events may nevertheless cause failures in, or unauthorized access to, our and our third-party services providers’ and vendors' information technology systems. Sustained or repeated system disruptions that interrupt our ability to process orders and deliver products to the stores, impact our customers’ ability to access our websites in a timely manner, or expose confidential customer information, merchandise, financial or other important information (including personal information) could have a material adverse effect on our results of operations, financial condition and cash flows. In addition, from time to time, we make hardware, software and code modifications and upgrades to our information technology systems for point-of-sale, e-commerce, mobile apps, merchandising, planning, sourcing, logistics, inventory management and support systems including human resources and finance. Modifications involve replacing existing systems with successor systems, making changes to existing systems or acquiring new systems with new functionality. We are aware of inherent risks associated with replacing and modifying our information technology systems, including risks relative to data integrity and system disruptions. Information technology system disruptions or data corruption, if not anticipated and appropriately mitigated, could have a material adverse effect on our operations, financial condition and cash flows. In addition to our own systems, networks and databases, we use third-party service providers to store, transmit and otherwise process certain of this information on our behalf, and our third-party service providers are subject to similar cybersecurity risks. Due to applicable laws and regulations or contractual obligations, we may be held responsible for any cybersecurity incident attributed to our service providers as they relate to the information we share with them or to which they are granted access. Although we contractually require these service providers to implement and maintain a standard of security (such as implementing reasonable measures), we cannot control third parties and cannot guarantee that a security breach will not occur in their systems.

Our net sales, profit, cash flows and future growth may be affected by negative local, regional, national or international political or economic trends or developments that reduce the consumers’ ability or willingness to spend, including the effects of national and international security concerns such as war, terrorism or the threat thereof. In addition, market disruptions due to natural disasters, significant health hazards or pandemics, or other major events or the prospect of these events could also impact consumer spending and confidence levels. Extreme weather conditions in the areas in which our stores are located, particularly in markets where we have multiple stores, could adversely affect our business. Purchases of our products may decline during periods when economic or market conditions are unsettled or weak. In such circumstances, we may increase the number of promotional sales, which could have a material adverse effect on our results of operations, financial condition and cash flows. The decision by the U.K. to leave the European Union (commonly referred to as “Brexit”) has increased the uncertainty in the economic and political environment in Europe. On December 24, 2020, the U.K. and EU reached a post-Brexit Trade and Cooperation Agreement that contains new rules governing the new relationship between the U.K. and the EU, including with respect to trade, travel and immigration among other things. Our business in the U.K. may be adversely impacted by ongoing uncertainty, fluctuations in currency exchange rates, changes in trade policies, or changes in labor, immigration, tax, data privacy or other laws. Any of these effects, among others, could materially and adversely affect our business, results of operations, and financial condition.

We intend to continue to operate internationally and further expand into international markets, including mainland China, through partner arrangements and/or company-operated stores. The risks associated with international markets include difficulties in attracting customers due to a lack of customer familiarity with our brands, our lack of familiarity with local customer preferences and seasonal differences in the market. Any of these difficulties may lead to disruption in the overall timing of our international expansion efforts or increased costs. Further, entry into other markets may bring us into competition with new competitors or with existing competitors with an established market presence. Other risks include general economic conditions in specific countries or markets, volatility in the geopolitical landscape, restrictions on the repatriation of funds held internationally, disruptions or delays in shipments, occurrence of significant health hazards or pandemics, changes in diplomatic and trade relationships, political instability and foreign governmental regulation. Such expansions will also have upfront investment costs that may not be accompanied by sufficient revenues to achieve typical or expected operational and financial performance. Further, our results of operations and financial condition may be adversely affected by fluctuations in currency exchange rates. See “Fluctuations in foreign currency exchange rates could impact our financial condition and results of operations” below. These risks could have a material adverse effect on our results of operations, financial condition and cash flows.

In March 2020, the coronavirus pandemic was declared a global pandemic by the World Health Organization. This pandemic has negatively affected the U.S. and global economies, disrupted global supply chains and financial markets, and led to significant travel and transportation restrictions, including mandatory closures and orders to “shelter-in-place.” The actions that governments around the world have taken to contain the spread of COVID-19 have resulted in a period of disruption, including closure of our stores, limited store operating hours, reduced customer traffic and consumer spending and delays in manufacturing and shipping of products and raw materials. During this period, we are focused on protecting the health and safety of our customers, employees, contractors, suppliers, and other business partners. We are also working with our suppliers to minimize potential disruptions, while managing our business in response to a changing dynamic. Our business operations and financial performance for 2020 have been materially impacted by the COVID-19 pandemic. All of our stores in North America were closed on March 17, 2020 and almost all remained closed as of the beginning of the second quarter. We reopened our stores by the end of the second quarter 2020 in accordance with local restrictions and where we believed we could provide for the safety and well-being of our employees and customers. Due to the uncertainty of COVID-19 and the speed at which the pandemic continues to impact our markets, we are continuing to assess the situation, including government-imposed restrictions, market by market. We are unable to accurately predict the full impact that COVID-19 will have on our operations going forward due to uncertainties which will be dictated by the length of time that such disruptions continue, which will, in turn, depend on the currently unknowable duration and spread of the COVID-19 pandemic, actions taken to limit the spread, and the public’s willingness to comply with such actions, the availability and efficacy of a vaccine and positive treatments for COVID-19, and the impact of governmental regulations that might be imposed in response to the pandemic. Numerous state and local jurisdictions have imposed, and others in the future may impose, shelter-in-place orders, quarantines, executive orders and similar government orders and restrictions for their residents to control the spread of COVID-19. Such orders, restrictions and changes in consumer behavior have negatively impacted our operations, especially in our stores. In addition to these more near-term impacts, we are unable to accurately predict the full impact COVID-19 will have on our longer-term operations as well, particularly with respect to our current mix of merchandise offerings, event-based categories and store traffic trends. To the extent COVID-19 adversely affects our business, operations, financial condition and operating results, it may also have the effect of heightening many of the other risks described in this “Risk Factors” section, such as those relating to our high level of indebtedness, our need to generate sufficient cash flows to service our indebtedness and our ability to comply with the covenants contained in the agreements that govern our indebtedness.

We are exposed to foreign currency exchange rate risk with respect to our sales, profits, assets and liabilities denominated in currencies other than the U.S. dollar. In addition, our royalty arrangements are calculated based on sales in local currency and, as such, we are exposed to foreign currency exchange rate fluctuations. Although we use foreign currency forward contracts to hedge certain foreign currency risks, these measures may not succeed in offsetting all of the short-term negative impacts of foreign currency rate movements on our business and results of operations. Hedging would generally not be effective in offsetting the long-term impact of sustained shifts in foreign exchange rates on our business results. As a result, the fluctuation in the value of the U.S. dollar against other currencies could have a material adverse effect on our results of operations, financial condition and cash flows.