2025 Natural Grocers Sustainability Report

PLANET

HEALTH

NUTRITION EDUCATION

QUALITY

CREW

ALWAYS AFFORDABLE SM PRICING

COMMUNITY

ANIMAL WELFARE

PEOPLE

DATA PRIVACY AND CYBERSECURITY We take seriously our responsibility to protect the information entrusted to us. We are committed to developing and maintaining processes designed to enhance data privacy and cybersecurity. Our Board of Directors is responsible for oversight of cybersecurity risk. The Board has appointed the Operating Company’s Vice President of Information Technology as the point person for regular reporting to the Board on cybersecurity risks and actions taken to mitigate those risks. We have a dedicated team that is responsible for managing enterprise-wide information security strategy, policy, standards, architecture, and processes. We believe we have implemented data privacy and cybersecurity practices reasonably designed to prevent the loss of customer information. For example, we employ point-to-point encryption to protect customer data on our PIN pads, regularly test system defenses through an independent third party, and have implemented email filtering, spam, and phishing detection services intended to reduce the threat of email attacks. All Crew are trained on cybersecurity practices multiple times per year. More information about our cybersecurity risk management and strategy, and cybersecurity governance can be found in our 2025 Form 10-K. Our Privacy Policy is available at: Privacy Policy. PUBLIC POLICY PRACTICES

GMO Labeling Lawsuit: A Big Victory for Food Transparency

We believe our ability to profitably operate our business depends, in part, upon our access to natural and organic products and dietary supplements. We attempt to protect our interest in this access through ongoing and proactive political advocacy campaigns, including participation in education programs, petitions, letter writing, phone calls, policy conferences, advisory boards, industry groups, public commentary, and meetings with trade groups, office holders and regulators. We may publicly support trade groups, political candidates, government officials, and regulators who support a particular policy we consider important to our business and are aligned with our principles. ETHICS AND COMPLIANCE We seek to operate in an ethical manner and have adopted a written code of ethics to promote a responsible and ethical work environment. We maintain and enforce our code of conduct to protect associates, suppliers, and customers. The Code of Ethics and the Corporate Governance Guidelines are available on the governance section of our investor relations website. Anonymous reporting is available at:

Natural Grocers, the Center for Food Safety, and other plaintiffs challenged improper USDA rules created under the Bioengineered Food Disclosure Standard Act. Natural Grocers lead the lawsuit because the company believes shoppers have a right to clear, accurate, and easy-to-access information about their food. A federal appeals court overturned three of the most significant loopholes, and as a result: retailers and brands have the right to use the name “GMO” as synonymous with bioengineered; labeling must be clearly available on the food packaging; and, all GMO ingredients must be labeled. The USDA must now correct the rules to make labels clearer and more accessible.

Ethics Reporting Hotline (888) 320-0029 www.lighthouse-services.com/vitamincottage reports@lighthouse-services.com Disclosure and Ethics Committee (303) 986-4600 ethics@NaturalGrocers.com

ADDITIONAL INFORMATION ABOUT OUR GOVERNANCE EFFORTS CAN BE FOUND AT: The governance section of our investor relations website Our 2025 Annual Report on Form 10-K Our 2026 Proxy Statement

37

FISCAL YEAR | 2025