Privacy Policy

VitalPeak, Inc. and its subsidiaries and affiliates ("VitalPeak," "we," "us," or "our") respect your privacy and are committed to protecting your personal information.

In this Privacy Policy, "personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) to you or your household. Personal information does not include information that has been deidentified or aggregated so it can no longer reasonably be used to identify you.

This Privacy Policy explains how we collect, use, and share information about you when you use our websites, mobile applications (if any), social media pages, email communications, and other online services where this Policy is posted (collectively, the "Service"). It also describes choices you may have regarding your information.

If you do not agree with any part of this Privacy Policy, please do not use the Service. This Privacy Policy is written in English. If any translated version conflicts with the English version, the English version controls.

Health Information / HIPAA

VitalPeak may work with medical providers (including clinicians and medical groups) and pharmacies to support clinical care. If we handle Protected Health Information ("PHI") on behalf of a covered entity (such as a medical group) or as a business associate, that information may be governed by a separate Notice of Privacy Practices ("NPP") rather than this Policy. Where applicable, we will provide a link to the relevant NPP within your patient experience.

We collect personal information in the following ways:

A. Information you provide to us

We may collect information you provide when you:

• Create or update an account
• Complete forms or questionnaires
• Purchase products or services
• Contact customer support
• Participate in surveys, promotions, reviews, or referrals
• Communicate with us via email, chat, phone, or social media

B. Information we obtain indirectly

We may receive information from third parties that help us operate, measure, and improve the Service (for example: analytics providers, payment processors, customer support tools, A/B testing tools, marketing platforms, review tools, and fraud-prevention services).

If you choose to sign in using a third-party account (e.g., Google, Apple, Facebook), we may receive information from that provider as permitted by your settings and their privacy policies.

C. Information we collect automatically

When you use the Service, we may automatically collect certain information through cookies, pixels, SDKs, log files, and similar technologies, including device identifiers and usage data. See "Cookies and Similar Technologies" below.

D. Combined information

We may combine information we collect from you with information received from other sources for the purposes described in this Policy.

Depending on how you use the Service, we may collect the following categories of personal information:

1. Identifiers and contact information (e.g., name, email, phone number, shipping/billing address)
2. Account and authentication information (e.g., username, password hash, account settings)
3. Payment and transaction information (e.g., tokenized payment details, purchase history, refunds, shipping status)
4. Personal characteristics and information you submit in forms (e.g., date of birth, photos you upload such as ID images where required)
5. Customer content (e.g., reviews, comments, feedback, support messages)
6. Preferences (e.g., product preferences, communication preferences)
7. Internet or other electronic activity (e.g., pages viewed, time spent, clicks, referring URLs, approximate location, language, session data)
8. Device and network data (e.g., IP address, browser type, operating system, device identifiers, mobile network information)

We use personal information to:

• Provide, operate, and improve the Service
• Create and manage accounts
• Process payments and fulfill orders
• Provide customer support and communicate with you
• Personalize content and user experience
• Perform analytics, debugging, and quality assurance
• Maintain safety, security, and integrity of our systems
• Prevent fraud and protect against malicious or illegal activity
• Develop and market our products and services (where permitted by law)
• Comply with legal obligations and enforce our terms and policies
• Carry out any other purpose disclosed at the time you provide information, or with your consent where required by law

We do not sell your personal information to third parties for their own independent marketing purposes. We may share personal information in the following circumstances:

A. Healthcare providers and clinical partners

We may share information with licensed providers, medical groups, pharmacies, and labs to support your requested services. These entities may be subject to their own privacy obligations and/or a Notice of Privacy Practices.

B. Vendors and service providers

We may share information with vendors who perform services for us, such as:

• Website hosting and infrastructure
• Payment processing
• Order fulfillment and shipping
• Customer support
• Analytics and performance measurement
• Security and fraud prevention
• Marketing and advertising support (where permitted)

Vendors are permitted to use personal information only to perform services for us and must protect it under contractual obligations.

C. With your consent

We may share information with third parties when you direct us to do so or provide consent.

D. Legal and safety disclosures

We may disclose information if we believe in good faith it is reasonably necessary to:

• Comply with law, regulation, legal process, or lawful requests
• Protect our rights, users, and the public
• Enforce agreements and policies
• Detect, prevent, or respond to fraud, security, or technical issues
• Respond to an emergency

E. Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice as required by law.

We may share deidentified or aggregated information for any lawful purpose.

Account access and updates

You can access and update certain account information by signing into your account (if available).

Social sign-on

If you use a third-party login (e.g., Google, Apple, Facebook), anyone with access to that third-party account may be able to access your VitalPeak account. You are responsible for maintaining the security of your third-party accounts.

We use administrative, technical, and physical safeguards designed to protect personal information. However, no internet transmission or storage system can be guaranteed 100% secure. Any transmission of personal information is at your own risk.

You are responsible for keeping your login credentials confidential and for any activity conducted through your account.

We and our service providers may use cookies, pixels, SDKs, web beacons, and similar technologies to collect information about your interactions with the Service.

You can usually control cookies through:

• Our cookie banner / preference center (if available)
• Your browser settings
• Your device or operating system settings

If you disable cookies, some parts of the Service may not function properly. Some third parties may collect information over time and across websites to provide interest-based advertising. We do not control these third parties' technologies or practices.

We may use information about your activity to provide and measure advertising, including interest-based advertising, where permitted by law. Our Service may not respond to "Do Not Track" browser signals.

You can learn more about interest-based advertising and opt-out options through the Network Advertising Initiative (NAI) and the Digital Advertising Alliance (DAA).

The Service is not intended for individuals under 18. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it. If you believe a minor has provided personal information, contact us at privacy@vitalpeakmeds.com.

Depending on your U.S. state of residence, you may have rights regarding your personal information, such as:

• The right to access, correct, or delete certain personal information
• The right to opt out of certain types of processing (e.g., targeted advertising, where applicable)
• The right to appeal certain decisions

To exercise your rights, contact us at privacy@vitalpeakmeds.com. We may need to verify your identity before fulfilling a request.

Our Service may link to third-party websites or services ("Linked Sites"). This Privacy Policy does not apply to Linked Sites. We are not responsible for the privacy practices of Linked Sites. Please review their policies before providing information.

If you post reviews, comments, or other content in public areas of the Service, that content may be visible to others. Please avoid posting sensitive information in public areas. We cannot control how others may use information you choose to share publicly.

The Service is intended for use in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. We will post updates on this page and revise the "Last Updated" date above. Your continued use of the Service after changes become effective means you acknowledge the updated Policy.

If you have questions, concerns, complaints, or requests regarding this Privacy Policy, please contact us: