Healthy Hailey Privacy Policy

We may collect information that you provide directly, including:

• First and last name
• Email address
• Telephone number
• State, city, and ZIP code
• Age range
• The person for whom you are seeking services
• The type of healthcare or wellness service you are interested in
• Preferred contact method
• Responses submitted through our assessment
• Questions, comments, and customer-support communications
• Records of your consent
• Any other information you voluntarily provide

Health-related service interests may include:

• Medical weight-management services
• GLP-1 treatment consultations
• Hormone-health services
• Metabolic-health services
• Men’s and women’s wellness services
• Hair-restoration services
• Longevity and healthy-aging consultations
• Other healthcare and wellness services

Please do not submit medical records, detailed medical histories, prescription records, insurance identification numbers, Social Security numbers, financial account information, or other sensitive information that we do not specifically request.

We may also automatically collect:

• IP address
• Browser and device type
• Operating system
• Approximate location derived from your IP address
• Pages viewed
• Links clicked
• Referring website
• Dates and times of visits
• Cookie and advertising identifiers
• Form interactions
• General website usage, performance, and conversion information

We may receive information from participating providers, advertising platforms, analytics providers, customer-relationship-management platforms, call-tracking providers, referral partners, and other service providers.

We may use personal information to:

• Operate, maintain, and improve HealthyHailey.com
• Process your provider-matching request
• Identify participating providers that may offer the services you requested
• Match you with providers based on service type and location
• Send your information to participating providers or matching partners
• Allow providers or matching specialists to contact you
• Respond to questions and support requests
• Confirm, document, and manage your consent
• Send calls, text messages, or emails you have authorized
• Personalize website content
• Measure website and advertising performance
• Detect and prevent fraud, misuse, and security incidents
• Maintain legal, consent, and compliance records
• Comply with applicable laws and legal processes
• Protect our rights and the rights of others

We will not use consumer health data for a materially different purpose without providing any notice or obtaining any consent required by law.

When you submit an assessment or provider-matching request, we may disclose the information you provide to one or more participating healthcare providers, clinics, telehealth providers, matching networks, lead buyers, or service partners that may be able to respond to your request.

Those parties may contact you by telephone, text message, email, or another method permitted by the consent you provided.

Healthy Hailey does not guarantee:

• That a provider will contact you
• That a provider will accept you as a patient
• That you will qualify for any treatment
• That medication or treatment will be prescribed
• That a service is available in your state
• That insurance will cover any service
• Any specific medical, wellness, financial, or treatment outcome

Each provider is an independent business and maintains its own privacy practices. You should review the provider’s privacy notice before submitting additional medical information directly to that provider.

Participating Providers and Matching Partners

We may provide your contact information, location, requested service category, assessment responses, and consent information to participating providers, clinics, matching networks, lead buyers, or referral partners so they can respond to your request.

Service Providers

We may use companies that assist us with:

• Website hosting
• Form processing
• Customer-relationship management
• Email and text-message delivery
• Telephone communications
• Call tracking
• Analytics
• Advertising measurement
• Security and fraud prevention
• Data storage
• Customer support
• Legal and compliance services

Advertising and Analytics Providers

Subject to applicable law and your privacy choices, we may disclose online identifiers and website-activity information to analytics and advertising providers. We do not intend to send the contents of your health assessment to advertising platforms for targeted advertising.

Business Transactions

Information may be transferred in connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction.

Legal and Safety Purposes

We may disclose information when reasonably necessary to:

• Comply with a law, regulation, subpoena, court order, or legal process
• Respond to a lawful government request
• Investigate fraud, misuse, or security threats
• Enforce our agreements
• Protect the rights, safety, and property of Healthy Hailey, our users, providers, or others

Some state privacy laws define “sale” or “sharing” broadly. These definitions may include transferring personal information for monetary or other valuable consideration, targeted advertising, cross-context behavioral advertising, or certain lead-generation activities.

Healthy Hailey may receive compensation from participating providers or marketing partners when we connect a visitor with a provider.

Depending on applicable law, disclosures to participating providers, lead buyers, advertising providers, or marketing partners may be considered a sale or sharing of personal information.

You may request to opt out by emailing us at healthyhailey@gmail.com with the subject line “Do Not Sell or Share My Personal Information.” Where required by law, we honor qualifying browser-based opt-out preference signals, including Global Privacy Control.

We do not knowingly sell or share the personal information of children.

We may use cookies, pixels, tags, local storage, analytics tools, advertising-measurement technologies, call-tracking tools, and similar technologies. These tools may be used to:

• Operate website features
• Remember preferences
• Measure website traffic
• Understand how visitors use the website
• Detect errors
• Attribute leads and conversions
• Measure advertising campaigns
• Prevent fraud and misuse

You may manage optional cookies through your browser settings. Rejecting optional cookies will not prevent you from completing the provider-matching assessment.

We take steps intended to prevent health-assessment responses from being included in page URLs, advertising pixels, tracking-event names, or advertising-platform parameters.

When you provide your telephone number and agree to the consent language shown with the form, you authorize the specifically identified companies to contact you as described in that consent.

Consent to receive marketing calls or text messages is not a condition of purchasing a product or service. Calls or text messages may be made using automated technology, an automatic telephone dialing system, prerecorded messages, or artificial voices where permitted by law and where you have provided the required consent.

Message and data rates may apply. Message frequency may vary.

You may opt out by:

• Replying STOP to text messages
• Using the unsubscribe link in an email
• Asking a caller to place you on its internal do-not-call list

The consent language displayed directly beside the form controls if it differs from this Privacy Policy.

Information showing that you are seeking a health or wellness service may be considered consumer health data under certain state laws.

Consumer health data we may collect includes:

• The healthcare or wellness service you are interested in
• Interest in GLP-1 consultations
• Interest in hormone-health services
• Interest in metabolic-health services
• Interest in men’s or women’s wellness
• Interest in hair restoration
• Interest in longevity or healthy-aging services
• Age range
• State or ZIP code
• Provider and appointment preferences
• Assessment responses
• Information indicating that you are seeking a health-related service

We may collect and use this information to provide the matching service you requested, identify providers offering the requested service, match you based on location and service availability, send your request to a participating provider, allow a provider or matching specialist to respond, maintain consent and compliance records, prevent fraud and protect security, and comply with applicable law.

We may disclose consumer health data to independent healthcare providers, clinics, telehealth providers, provider-matching networks, lead-management and referral partners, customer-relationship-management providers, and hosting, communications, storage, security, and compliance vendors.

Where required, we will request consent before collecting or sharing consumer health data unless the activity is necessary to provide a service you requested or another legal exception applies. We do not intend to sell consumer health data as defined by applicable consumer-health-data laws without obtaining any separate written authorization required by law.

Healthy Hailey is a healthcare marketing and provider-matching service. It is not automatically subject to the Health Insurance Portability and Accountability Act, or HIPAA, merely because it collects health-related service interests.

Information collected directly by Healthy Hailey for marketing or provider-matching purposes may not be protected by HIPAA. It may still be protected by state privacy laws, consumer-protection laws, and this Privacy Policy.

If Healthy Hailey receives protected health information while acting as a business associate of a HIPAA-covered entity under a written business-associate agreement, that information will be handled according to the agreement and applicable HIPAA requirements.

We retain personal information only for as long as reasonably necessary to:

• Complete provider matching
• Respond to communications
• Maintain consent records
• Honor opt-outs
• Comply with legal and contractual obligations
• Prevent fraud
• Resolve disputes
• Defend legal claims
• Maintain business records

We may retain lead and consent records for up to seven years when reasonably necessary to document authorization, compliance, or communications. Marketing-suppression records may be retained as long as necessary to honor your opt-out request. Consumer health data will be deleted when required by applicable law, subject to legally permitted exceptions and reasonable backup-system schedules.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. These safeguards may include encryption in transit, access controls, multi-factor authentication, role-based permissions, vendor review, secure hosting, logging, monitoring, employee training, and incident-response procedures.

No method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security.

Depending on your state and whether the applicable law applies to Healthy Hailey, you may have the right to:

• Confirm whether we process your personal information
• Access personal information
• Correct inaccurate personal information
• Delete personal information
• Obtain a portable copy of personal information
• Opt out of sale
• Opt out of sharing
• Opt out of targeted advertising
• Opt out of certain profiling
• Limit certain uses of sensitive personal information
• Withdraw consent
• Request a list of certain third parties that received consumer health data
• Appeal our refusal to act on a request
• Receive equal service without unlawful discrimination

You may submit a request by emailing us at healthyhailey@gmail.com. Please describe the right you wish to exercise and provide enough information for us to identify the relevant records. We may need to verify your identity before completing a request. Where permitted, an authorized agent may submit a request for you. We may require proof of the agent’s authority and direct verification from you.

Where applicable, you may withdraw consent for future collection or sharing of consumer health data by emailing us at healthyhailey@gmail.com with the subject line:

Consumer Health Data Request

Please explain whether you are requesting access, deletion, withdrawal of consent, cessation of collection, cessation of sharing, or a list of third parties that received your data. Withdrawal does not affect processing that occurred before your withdrawal became effective.

When required by law and after verification, we will delete covered consumer health data from our active systems and instruct relevant processors, affiliates, or third parties to delete it where required. Deletion from archived or backup systems may occur according to backup cycles and the time periods permitted by applicable law.

We may retain limited information where legally permitted or required, including records needed to document consent or withdrawal, honor future opt-outs, prevent fraud, comply with legal obligations, or respond to litigation or government requests.

Where applicable, you may appeal a denied privacy request by emailing us at healthyhailey@gmail.com with the subject line:

Privacy Request Appeal

Explain why you believe the decision should be reconsidered. We will respond within the period required by applicable law.

California residents may have the right to know the categories and specific pieces of personal information we collect, the sources and purposes of collection, the categories of recipients, request correction, request deletion, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive nondiscriminatory treatment.

During the previous 12 months, we may have collected identifiers, contact information, internet or network activity, approximate geolocation, inquiry and commercial information, inferences, health-related service interests, and audio information if a call was recorded with legally required notice or consent.

To exercise your California rights, email us at healthyhailey@gmail.com.

Washington residents may have rights regarding consumer health data, including rights to access, delete, withdraw consent, and request information about certain third parties that received their data. Healthy Hailey may collect health-service interests and related information for the provider-matching purposes described in this policy. Requests may be submitted to healthyhailey@gmail.com.

Nevada residents may have rights to confirm whether consumer health data is collected, request access, request deletion, request cessation of collection or sharing, obtain information about recipients, and appeal certain decisions. Requests may be submitted to healthyhailey@gmail.com.

Healthy Hailey is intended only for adults who are at least 18 years old. We do not knowingly collect personal information directly from children under 13 or knowingly process health-related matching requests submitted by minors without legally valid authorization. Contact us at healthyhailey@gmail.com if you believe a child has submitted information.

Our website may link to third-party providers, clinics, scheduling systems, telehealth platforms, or other websites. We do not control those third parties or their privacy practices. Information you provide directly to a third party is governed by that party’s privacy policy.

Healthy Hailey is intended for users located in the United States. If you access the website from another country, your information may be transferred to and processed in the United States.

We may update this Privacy Policy periodically. When required by law, we will provide notice and obtain any necessary consent before applying a material change to previously collected consumer health data. The “Last Updated” date above shows when this policy was most recently revised.

Healthy Hailey

Doing business as Healthy Hailey

Privacy Email: healthyhailey@gmail.com

Health Privacy Email: healthyhailey@gmail.com

To submit a privacy request, opt out of sale or sharing, or appeal a decision, email us at healthyhailey@gmail.com with a clear description of your request.