California Consumer Privacy Notice

Effective Date: June 2, 2026

Last Updated: June 2, 2026

This California Consumer Privacy Notice supplements our Website Privacy Policy and applies to California residents ("consumers") whose personal information we collect through shrinkMD.com.

This Notice does not apply to (a) Protected Health Information governed by HIPAA, or (b) the personal information of employees and job applicants, which is covered by our California Employee Privacy Notice. It is provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA").

1. Categories of Personal Information We Collect

In the past twelve months, we may have collected the following categories of personal information from consumers:

• Identifiers, such as name, email address, postal address, phone number, and IP address
• Customer records, such as information you provide in forms or communications
• Internet or other electronic network activity, such as browsing and usage information and interactions with the Site
• Geolocation data, such as approximate location derived from IP address
• Inferences drawn from the above to understand preferences and improve the Site

We collect sensitive personal information only where you voluntarily provide it, and we use it only for permitted purposes.

2. Sources of Personal Information

• Directly from you, when you complete forms or communicate with us
• Automatically, through cookies and similar technologies when you use the Site
• From service providers that help us operate the Site

3. Purposes for Collection

We use personal information for the purposes described in our Website Privacy Policy, including operating and improving the Site, responding to inquiries and referrals, communications, security, and legal compliance.

4. Disclosure of Personal Information

In the past twelve months, we may have disclosed personal information to service providers and contractors for business purposes, including hosting, analytics, communications, and payment processing, under written agreements that restrict their use of the information.

5. Sale or Sharing of Personal Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We do not knowingly sell or share the personal information of consumers under 16 years of age.

6. Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes beyond those permitted under the CCPA/CPRA. As a result, the right to limit the use of sensitive personal information may not apply.

7. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Notice and our Website Privacy Policy, consistent with applicable law.

8. Your California Privacy Rights

Subject to certain exceptions, California consumers have the right to:

• Know and access the personal information we have collected about you
• Delete personal information we have collected from you
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information
• Limit the use of sensitive personal information
• Not receive discriminatory or retaliatory treatment for exercising your rights

9. How to Exercise Your Rights

You may submit a request by contacting us at privacy@shrinkMD.com or 1-877-747-4656. We may need to verify your identity before responding. You may use an authorized agent to submit a request on your behalf with appropriate documentation.

10. Do Not Sell or Share My Personal Information

shrinkMD does not sell or share personal information as defined under the CCPA/CPRA. If this practice changes, we will update this Notice and provide the required opt-out mechanism.

11. Contact Us

For questions about this Notice or your California privacy rights, contact us at privacy@shrinkMD.com or 1-877-747-4656.