Privacy Policy

The Site gathers several types of information from and about users of the Site, including health information, medication information, geographic location, and user preferences. Among other things, this allows the Site to:

• Connect you with licensed healthcare providers for telehealth consultations
• Facilitate the fulfillment of prescribed medications and health protocols
• Process subscription orders and recurring payments
• Provide personalized health and wellness product recommendations
• Coordinate with licensed pharmacies, laboratories, and fulfillment partners on your behalf

The information we collect from or about you (collectively, “Your Information”) allows us to provide our Services and helps us personalize and improve your experience on the Site. Depending on how you use the Site, we may collect the following categories of information directly from you:

• Information about you, including your name, date of birth, address, and other demographic information.
• Information about medications you are seeking, including medication names, dosage, and health goals.
• Information for billing purposes, including billing address, credit or debit card numbers, verification numbers, and expiration dates. Please note that such information may be collected by third-party payment processors or vaulted.
• Applicable health and lifestyle information, including information about your past and present health conditions, weight, prescribed medications, pregnancy conditions, supplements, and blood pressure.
• Information about your purchase transactions, including subscription plans, protocol selections, and fulfillment history.
• Geographic location information from you or your device, including your geolocation data, zip code, region, city, street address, time zone, latitude, and longitude information. Please note that we will not access precise geo-location information from your device unless you grant the Site permission to do so.
• User preferences and quiz responses.
• Technical data and related information, including information about your device, system and application software, peripherals, and other data related to your interactions with the Site.
• Metadata and other information associated with or stored on your device.

We may also collect Your Information outside of the Site if you provide it to us through other means, including communications with our Customer Service team by phone or email. When you use the Site, we automatically collect some categories of information from you, such as information about your use of the Site, including features used, content viewed, dates and times of interactions, and technical data about your device, including operating system, model, device identifier, and IP address.

We may also automatically collect certain technical information relating to you that your web browser automatically sends whenever you visit a website on the Internet, or that is collected when you use a mobile application (see the section “Cookies and Similar Tools” below for more information). For example, we use Google Analytics, a web analytics service provided by Google, Inc. (“Google”) to collect information relating to your use of the Site. Google Analytics uses “cookies,” which are text files placed on your device, to help us analyze how you use our Site. You can find out more about how Google uses data by visiting its website for more information, currently located at https://policies.google.com/technologies/partner-sites.

Information we collect about you may be used for the following purposes:

• Operating the Site, including to provide you the Services and Site features.
• To provide you the information and Services you request when you use the Site.
• To customize your experience when you use the Site, for example to provide you with interactive or personalized elements or provide you with content based on your interests, requests, and location.
• Improve the Site and other Company products or services, including by developing new products and services, performing quality control activities, and conducting data analytics.
• Provide account management, patient care, customer service, and engaging in system maintenance.
• Deliver marketing communications, such as promotional materials or advertisements, including materials and advertisements for Services offered by us and/or services or products offered by third parties that might be of interest to you, either directly to you or through third-party apps or websites.
• Communicate service-related or required notices about the Site to you, which may include communications by email or by text messages (i.e., SMS) at the mobile device number you provide us.
• Detect, prevent, and respond to suspected fraud, intellectual property infringement, violations of our Terms of Use, violations of law, or other misuse of the Site or Services.
• Perform data analytics, including to compile, synthesize, generate, and analyze anonymous usage and other aggregated statistics and information.
• Facilitate telehealth consultations, prescription fulfillment, and protocol coordination with our provider and pharmacy partners.

When permitted by applicable law, we may also:

• Combine Your Information, or information that we collect from third parties, with other information maintained by us, and use that combined information for any of the above purposes.
• De-identify Your Information by removing information typically used to identify you and use that de-identified information for any purpose permitted by law.

Your Information may be disclosed to the following third parties:

• Telehealth service providers and their associated healthcare providers.
• Pharmacies (including 503A and 503B compounding pharmacies) and other partners who help us provide the products or services available through the Site to you.
• Licensed pharmacies, laboratories, and fulfillment partners involved in product fulfillment, quality verification, or service delivery.
• Business partners, who may deliver marketing communications, promotional materials, advertisements, or other information, including about other Services offered by us or services or products offered by third parties that may be of interest to you. You will be given the option to opt out of marketing messages.
• If required to do so by law or if we have a good faith belief that disclosure is necessary to (1) comply with the law or with legal process served on us, (2) protect and defend our rights or property, or (3) to protect someone’s safety.
• Advisors, potential transactional partners, or other third parties related to the consideration, negotiation, or completion of a corporate change of control including a sale to, or merger with another entity. If all or substantially all Company assets or stock is acquired by a third party, we may transfer our user database, including Your Information contained in it, to the third party.
• Service providers who work on our behalf or partner with us to provide or improve the Site or Services or carry out activities on our behalf. Our service providers are required to agree to protect Your Information consistent with this Privacy Policy. We and our service providers may share reports on user demographics and traffic patterns that do not identify you, as well as other information that does not identify you with third parties.
• Payment processors, including our designated payment processing partner, for the purpose of billing, subscription management, and fraud prevention.

Depending on the nature of the services provided, Company may act as a service provider and/or business associate to entities that are “covered entities” under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191 (“HIPAA”). Company does not itself provide medical care, diagnosis, or treatment. Company gathers unique information from you to enable a healthcare provider or pharmacy to provide certain services to you or make certain decisions regarding your health, as described in the sections above. This information may constitute certain health or personal information protected under applicable laws. Company implements administrative, technical, and physical safeguards designed to protect health information in accordance with applicable laws and industry standards.

By using the Site and selecting to use our Services, you give your consent to Company and its third-party service providers to send and disclose to third-party professional entities and their medical providers all of Your Information so that you may receive the selected Services. Further, you consent to the delivery of Your Information to pharmacies, laboratories, compounding facilities, or other healthcare services companies as part of the coordination of desired fulfillment and payment for prescription medications, protocols, and healthcare services recommended as part of the Telehealth Services (as that term is defined in the Terms of Use). One or more of these third-party labs, pharmacies, professional entities, or healthcare providers may or may not be a “covered entity” or “business associate” under HIPAA, and Company may in some cases be a “business associate” of such third party.

Certain provisions of HIPAA may apply with respect to “protected health information,” (“PHI”) as defined under HIPAA, that you provide to us or the labs, pharmacies, professional entities, or healthcare providers. Any medical or health information that you provide may be subject to specific protections under applicable state laws (collectively, with PHI, “Protected Information”) and will be used and disclosed only in accordance with such applicable laws. However, any information that does not constitute Protected Information may be used or disclosed in any manner permitted under our Privacy Policy. Protected Information does not include information that has been de-identified in accordance with HIPAA.

By using the Site and the Services, you also agree that if HIPAA applies to any of the entities providing Services hereunder, any information that you submit that is not intended and used solely for the provision of diagnosis and treatment or prescription fulfillment is not considered Protected Information, and it and its use will only be subject to our Privacy Policy (or that of the applicable third party) and any applicable state laws that govern the privacy and security of such information.

We take reasonable steps to protect your personal information, which is any information that identifies you or could reasonably be linked to you. We also use encryption technology, called Secure Sockets Layer (SSL), to help protect personal information in certain areas of our Site during transport across the Internet. The presence of SSL encryption may be indicated by https in the browser URL or the image of a closed lock or solid key in the browser window.

Unfortunately, there is always some risk that an unauthorized third party may find a way around our security measures. We cannot guarantee that the Internet or any other device or technical system will be 100% secure or error-free. We are not responsible for the security of information you transmit over networks that we do not control, including the Internet and wireless networks. Please note that emails and other communications you send to us are not encrypted, and by communicating with us by email you accept the risk that any personal information contained in the email may be intercepted or accessed by unauthorized parties.

You may opt out of receiving marketing emails by using the unsubscribe information available in any marketing email, or by emailing us at legal@slimdoor.com. To the extent that you use the Site, there are certain messages you may not opt out of receiving, such as non-promotional email messages about Services you have registered for or certain administrative, technical, or safety notices about the Site or our Services.

The Site does not currently respond to “do not track” signals or other mechanisms that provide a method to opt out of the collection of information over time and across websites and online services you may use. If we do so in the future, we will describe how we do so in this Privacy Policy.

The Site and the Services are intended for adults only and are not directed to, nor do we knowingly collect information from, individuals under the age of 18. If you become aware that your child or any individual under your care who is under the age of 18 has provided us with information without your consent, please contact us at legal@slimdoor.com.

Our Site may include links to external third-party websites and online services that are not under our control. We are not responsible for the collection, use, and disclosure of Your Information on those websites and other online services provided by those third parties. We encourage you to review the privacy policies and terms of use of each website and other online service you visit. The inclusion of links to external third-party websites and online services does not imply endorsement of, or association with, such websites and online services by us, or any warranty of any kind, either express or implied.

We use cookies to collect, store, and sometimes track information from your computer or mobile device automatically for statistical purposes to improve the Site. If you use our Site, we will use a cookie, web beacons, and other similar technologies on our website to save your settings and to provide customizable and personalized services. A cookie is a unique numeric code that we transfer to your computer that lets us know your location, the information visited while on our website, and the third-party websites you visited before accessing our website. Web beacons are small pieces of code placed on our website that allow us to obtain information about website usage. We retain the information we receive from the cookies we place on your computer. These cookies do not enable third parties to access any of your personal information. If you prefer not to receive cookies from the Site, then set your browser to refuse all cookies from any websites that you may visit. This will provide you with more control over the acceptance of cookies on your computer. However, it is possible that some portions of the Site will not function properly or may perform more slowly. By using our Site and not disabling cookies, you consent to their use. Please note that other tracking technologies may still function.

We will retain your personal information in accordance with our record retention policies and as permitted by applicable law unless you instruct us to remove it by contacting us at legal@slimdoor.com. We will also retain your personal information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You can update the personal information you have provided to us at any time by writing to:

Attn: Privacy Team/Regulatory Compliance

Slimdoor LLC

legal@slimdoor.com

If you access the Site from outside the United States, please be aware that personal information may be transferred to, stored in, and processed in the United States. Certain governmental authorities may not consider the level of protection of personal information in the United States to be equivalent to that required by other jurisdictions.

Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to request information about how and to whom we disclose certain categories of your personal information for their direct marketing purposes, once per calendar year. You can make this request to us via email at: legal@slimdoor.com

For California residents, please refer to our California Consumer Privacy Act (CCPA) Notice for additional disclosures and rights regarding the categories of personal information we collect, the purposes for which it is used, how it is shared, and your rights under California law including the right to know, the right to delete, the right to opt-out of the sale of personal information, and the right to non-discrimination.

Colorado, Connecticut, Virginia, and Utah each provide their state residents with rights to:

• Confirm whether we process their Personal Information;
• Access and delete certain Personal Information;
• Data portability;
• Opt-out of personal data processing for targeted advertising and sales.

Colorado, Connecticut, and Virginia also provide their state residents with rights to:

• Correct inaccuracies in Your Information, taking into account the information’s nature and processing purpose;
• Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

Nevada provides its residents with a limited right to opt-out of certain sales of Your Information. Company does not sell Your Information to third parties as defined in Nevada law, and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. If you have any questions regarding our data privacy practices or our compliance with Nevada data privacy law, please contact us at legal@slimdoor.com.

To exercise your state-specific privacy rights, please contact us at legal@slimdoor.com.

We may make changes to our Privacy Policy from time to time. When we do so, we will post the revised Privacy Policy on our Site and change the “last updated” date. Please check the “last updated” date at the top of this page to determine if the policy has been modified since you last reviewed it. Your continued use of the Site after that date means you agree to this Privacy Policy and any updates.

We may change this Privacy Policy at any time, as set forth herein, but we will not use personal information that we have already collected for a new purpose that is materially different from those stated in our Privacy Policy at the time that personal information was collected without first obtaining your explicit consent to use it for the new purpose.

If you have any questions about this Privacy Policy, please send them to legal@slimdoor.com. You may also write to us in care of our administrator at:

Attn: Privacy Team/Regulatory Compliance

Slimdoor LLC

legal@slimdoor.com