Do Not Sell or Share My Personal Information

1. Our standing position

Yuvia Holdings LLC has never received monetary consideration for personal information. Yuvia uses the Meta Pixel, a tool provided by Meta Platforms, Inc. ("Meta"), on its home page, on general information pages such as the quiz, how it works, and our specialists, and on the landing pages our Meta ads link to. The Meta Pixel is not used on product, medical intake, checkout, or account pages, or on the landing-page quizzes. On the landing pages it loads only when our server places the visitor's IP address in a U.S. state other than Washington or Nevada; that lookup happens on our own server and the state is not stored.

On the pages where it is used, the Meta Pixel sends Meta a record that a page on our website was viewed, along with device and browser information (such as IP address and browser type), cookie identifiers, and ad-click information, so that Yuvia can measure and deliver its advertising. Under the CCPA, this is "sharing" for cross-context behavioral advertising. Yuvia's server also sends Meta these records (Meta's Conversions API): for a visitor who arrived from a Meta ad, a record when they start a quiz, when they start a medical intake, and when they reach its checkout screen, which carry no product, no answers, and no amount; a checkout record when a visitor submits an intake and saves a card, before any charge, which carries the amount of the first charge (a number only, never the product or plan); and a purchase record only when a physician approves the order and the card is charged, which carries a value that is the same for every order. No intake or checkout-screen record is sent for a visitor who gives a Washington or Nevada address, and a quiz record is sent only when our server places the visitor's IP address in a U.S. state other than Washington or Nevada. These records include identifiers (such as a hashed email address or phone number, and cookie identifiers; the checkout-screen and checkout records also include a hashed first and last name, city, state, ZIP code, country and a hashed customer number), device and browser information, and ad-click information, so that Meta can connect a record to an ad and Yuvia can measure and deliver its advertising. We do not share intake answers, or the health information you give us in them, with Meta or for advertising. If your order ships to Washington or Nevada, neither record is sent unless you tick the separate, optional box at checkout agreeing to it; you can withdraw that agreement at any time by emailing hello@yuvia.health. These records are also "sharing" under the CCPA.

Yuvia also uses the Google Ads tag, a tool provided by Google LLC ("Google"), on its home page and general information pages only. It sends Google a record that a page on our website was viewed, along with device and browser information (such as IP address and browser type), cookie identifiers, and ad-click information, so that Yuvia can measure its advertising. Google's ad personalization and Google signals are turned off for this tag. Yuvia's server may also send Google a checkout record when a visitor submits an intake and saves a card, before any charge, which carries no amount and includes identifiers (such as a hashed email address or phone number) and ad-click information. No record is sent to Google for an order that ships to Washington or Nevada. We do not share intake answers, or the health information you give us in them, with Google or for advertising. Under the CCPA, this is also "sharing" for cross-context behavioral advertising. Yuvia does not disclose personal information to any other third party for cross-context behavioral advertising.

2. What the CCPA means

Under the California Consumer Privacy Act, "sell" and "share" are defined broadly:

• Sell. Disclosing personal information to a third party for monetary or other valuable consideration.
• Share. Disclosing personal information to a third party for cross-context behavioral advertising, even if no money changes hands.

Sharing personal information with service providers and contractors that act on Yuvia's behalf (such as Stripe for payments or Healthie for EHR storage) does not constitute "selling" or "sharing" under the CCPA, because those parties are contractually limited to using the information only to perform services for Yuvia.

3. How to verify

If you would like written confirmation that we have not sold your personal information, or an explanation of how the sharing with Meta described in section 1 applies to you, email hello@yuvia.health with the subject line "Do Not Sell Confirmation Request" and the email address associated with your account. We will respond within 45 days with a written statement.

4. Global Privacy Control

Yuvia honors the Global Privacy Control ("GPC") browser signal. If your browser sends a GPC signal when you visit yuvia.health, we treat it as a request to opt out of the sale or sharing of your personal information. When your browser sends a GPC signal, the Meta Pixel and the Google Ads tag do not load, an order placed from that browser is not reported to Meta or Google, and nothing is shared with Meta or Google from that browser.

5. Limit use of sensitive PI

California residents may also direct us to limit the use of "Sensitive Personal Information" ("SPI") to what is reasonably necessary to provide the goods and services you requested. Yuvia already limits SPI to that purpose, so no additional action is required to exercise this right. If you would like written confirmation, email us at the address in section 7.

6. If our practices change

If Yuvia changes what personal information it shares, or with whom, we will:

• Update this page and our Privacy Policy with the new categories sold or shared and the categories of third-party recipients.
• Keep a clear, conspicuous mechanism for you to opt out on this page.
• Honor any in-effect Global Privacy Control signal automatically.
• Email you advance notice if you have an active Yuvia account.

7. Contact

Questions about this page or California privacy rights generally should be directed to hello@yuvia.health. For the full set of California privacy rights and how to exercise them, see our California Privacy Notice.