Date last updated: October 15, 2025

This Privacy Policy explains how Amenities Health (“Amenities Health” or “we”) collects, uses, and discloses personal information through our websites, including www.amenitieshealth.com and its subdomains (the “Sites”), and through our direct health care membership program for personal healthcare navigation services, wellness services, communication services, facilitation of access to telehealth services, and other technology-enabled or personal healthcare related services (“Services”) available through the Sites (the “Platform”). Amenities Health is the data controller of the personal information collected under this Privacy Policy. As used in this Privacy Policy, “personal information” means information that relates to an identified or reasonably identifiable natural person.

Residents of states with a general privacy law (including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia) should refer to the body of this Privacy Policy as well as the “Privacy Rights Under State General Privacy Laws” section below for additional information that may be applicable to them. Note that not all of the state privacy laws apply to Amenities Health’s processing of personal information,
but we will at a minimum comply with those that do.

Note that Amenities Health is not a healthcare provider. The concierge wellness program services available through our Platform are provided by affiliated medical practitioners and network physicians and providers (“Providers”), including, without limitation, UC Irvine Health Susan Samueli Integrative Health Institute, UCI Health,
and through contracted health systems (the “Network”). The applicable Provider including any health system  will handle your protected health information (“PHI”) collected or generated in connection with telemedicine services in accordance with the Health Insurance and Portability Accountability Act (“HIPAA”), as further set forth in the Provider’s Notice of Privacy Practices.

Accordingly, this Privacy Policy does not apply to PHI that is collected from Amenities Health members who log-in to the password-protected sections of the Platform for purposes of registering for or obtaining telemedicine services. The applicable Notice of Privacy Practices is linked below or, if not linked below, will be presented for your review before you provide PHI to the applicable Provider. When Amenities Health processes PHI on behalf of a Provider, through the Platform or otherwise, Amenities Health will do so pursuant to a Business Associate Agreement, on the instructions of the Provider, and in compliance with HIPAA.

1. INFORMATION COLLECTION AND PROCESSING
2. INFORMATION SHARING
3. INFORMATION SECURITY
4. PRIVACY RIGHTS UNDER STATE GENERAL PRIVACY LAWS
5. SUPPLEMENTAL CALIFORNIA NOTICE
6. RETENTION OF YOUR PERSONAL INFORMATION
7. LINKS TO UNAFFILIATED THIRD-PARTY WEBSITES
8. NO USE BY CHILDREN
9. CONTACT US
10. POSTING OF A REVISED PRIVACY POLICY
11. COOKIE POLICY

We collect and process personal information for our internal and Platform-related purposes, and in order to provide, improve, and enhance our Sites, Platform, and other services.

a. Contact or request submissions. When you use a contact or request form on the Sites, we collect personal information from you to evaluate and respond to your request, and we may also use the information to improve our Sites, Platform, or other aspects of our services. The information you provide may include identifiers (such as your name, email address, and telephone number) and the content of any messages (although, for clarity, you should not submit any health-related details to us – rather, such details should only be submitted to a Provider through a password-protected component of the Platform).

b. Member account information. When you register for a membership, in order to create your member account we collect identifiers (such as your name, date of birth, gender, phone number, email address, and password).

c. Membership purchase. When you purchase a monthly membership, we collect identifiers (such as your email address, phone number, and physical address), commercial information (such as the type of membership purchased), and financial information (including payment details, such as your payment card information).

d. Email subscriptions and text messaging. When you subscribe to receive email messages from us, we collect identifiers (such as your name and email address)
and any related details you submit through the Sites. We use that information to send you email messages with marketing information, news, offers, and other updates relevant to our business. We may also send text messages for some or all of those purposes, when permissible by law, with your consent.

e. Communications. We receive information you submit through your communications with us by email, phone, or physical mail or courier service, such as identifiers (including your name and contact information), and we process this information to respond to you and in the normal course of our business operations.

f. Automated data collection; cookies and similar technologies. When you visit our Sites, we and our third-party partners and analytics providers, such as Shopify, collect information by automated means.

We may use cookies and similar technologies to collect identifiers (such as your IP address) and internet or other similar network activity information (such as information about your device, including your browser characteristics, device IDs and characteristics, and operating system version, and information concerning your usage of our Sites, including the link you used to reach a given webpage). We also may collect approximate geolocation data, such as through your IP address. We use this information to determine how many users have visited particular webpages, viewed particular content, or opened messages or alerts, and we may also use such information to improve the performance of the Sites, to improve our marketing activities, and to enforce our Site service terms and prevent malicious conduct.

In some cases, our third-party partners may process information collected by cookies and similar technologies on the Sites. Please see our Cookie Policy for more details.

If your browser offers you the ability to use Global Privacy Control (GPC) to communicate your privacy preferences to us, we honor such signals by opting you out of or restricting cookie technology that may otherwise constitute targeted advertising or a “sale” or “sharing” for targeted advertising under state privacy laws.

We may share any of the categories of personal information listed above for our commercial and other business purposes as described below

a. Affiliates. We may share personal
information with our affiliates, and any successors thereto in the normal course of our business operations. We do so for business purposes, such as to communicate with you and to promote and provide our services. Such affiliates will only use your personal information in a manner that is consistent with this Privacy Policy.

b. Vendors and service providers. We share personal information with vendors and service providers that process such information to perform services for us in connection with the Sites and our other business operations. We require that such vendors and services providers will only use your personal information in a manner that is consistent with this Privacy Policy.

c. Legal and similar disclosures. We may share personal information with law enforcement, the courts, our advisors, attorneys, and others who participate in legal processes or proceedings, if we believe doing so is required or appropriate to: comply with legal requirements and law enforcement requests (such as a court order or subpoena); comply with legal process (such as discovery); or protect your, our, or others’ rights, property, or safety.

d. Merger, sale, or other asset transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your personal information may be shared with the other parties and advisors involved under an obligation of confidentiality in connection with the negotiation of such transaction, and your personal information may be transferred as part of such a transaction (subject to compliance with applicable laws).

e. Analytics Partners. We partner with analytics providers, who collect information via cookies or other tracking technologies on our Sites, to assist us with measuring visits and traffic on our Sites so we can measure and improve the performance of our Sites.

We endeavor to process your information securely, in accordance with this Privacy Policy, and in accordance with information security requirements imposed by applicable law. Note however that certain aspects of Internet communications are inherently not completely secure.

The laws of certain US states provide residents with specific rights regarding their
personal information. For purposes of this Section, “you” refers only to consumers who are residents of a state with an applicable state general privacy law. This Section describes the rights that you may have and explains how to exercise those rights. If you are California resident, see our Supplemental California Notice section below.

Access to Certain Information

You may have the right to request that we disclose certain information to you about our collection and use of your personal information. If we are able to confirm your request, we will disclose to you:

• The categories of covered personal information governed by an applicable state general privacy law that we have collected about you and the categories of sources from which we collected such personal information.
• The business or commercial purposes for collecting such personal information.   
• The categories of such personal information about you that we have disclosed to third parties, shared for targeted advertising purposes, or sold to third parties, the business purpose for such disclosure, and the categories of third parties to whom we have disclosed such personal information.
• The specific personal information we have collected about you.  
• The specific pieces of personal information we have collected about you (note that this may be considered to be a data portability request).

Note that the time period of the information we are required to disclose is limited in certain jurisdictions, and we may choose to provide information subject to such a limitation where it applies.

Deletion and Correction Request Rights

You may have the right to request that we correct inaccurate personal information
and, in certain circumstances, delete the personal information that we collected from you and retained, subject to certain exceptions. When applicable, if we are able to confirm your request, we will delete or correct your personal information in our records, unless an exception applies. For example, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) to provide a service that you requested, detect security incidents, engage in public or peer-reviewed research in the public interest, or comply with a legal obligation.

Personal Information Sale and Sharing Opt-Out and Opt-In Rights

You may have the right to direct us not to share your personal information for purposes of targeted advertising (or otherwise use it for targeted advertising) and not to sell your personal information. To the extent that any cookies or related technologies on the Sites may constitute such sharing or sale, you may
opt-out using our cookie management tool.

Right to Limit Use of Sensitive Personal Information

You may have the right to request that we limit use of your sensitive personal information to certain purposes allowed by law. This right may be “opt-in” or “opt-out” depending on your state of residence.

Right to Opt Out of Automated Decision-making

You may have the right to opt-out of automated decision-making for profiling
purposes in certain instances where such processing would produce legal or other similarly significant effects. At this time, we do not use personal information to make automated decisions about individuals in any situations which would give rise to a legal right to opt out.

Exercising Your Rights

To exercise the rights described above, please submit a request to us by either emailing legal@amenitieshealth.com, using our cookie management tool (for cookies and related technologies), or calling +1 214-308-1902.

Only you, or someone legally authorized to act on your behalf, may make a request
related to your personal information. Your request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or their authorized representative; and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we
cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in your request to verify your identity or authority to make the request and as otherwise necessary for our compliance with applicable law.

Making a request to exercise the above privacy rights does not require you to create an account with us.

Response Timing and Format

We endeavor to respond to requests within forty-five days of receipt. If we require more time (up to ninety days), we will inform you of the reason and extension period in writing.

We will deliver our written response by mail or electronically, at your option. If data portability is a legal requirement, we will endeavor to select a format that is technically feasible and readily useable.

Our response will explain any reasons we cannot fully comply with a request, if applicable.

Right to Request Further Review

You may have the right to appeal our decision if we deny your request. Send an
email to legal@amenitieshealth.com if you would like to request further review. 

Non-Discrimination

We will not discriminate against you for exercising any of your rights under state privacy laws.

This Section further describes our processing of personal information of California residents as contemplated under California law. Please also refer to the preceding Section (above) for a description of rights that California residents have and
how to exercise those rights.

Identifiers

• Source: Directly from you and automatically collected through our Sites
• Purpose of collection and use: See Sections 1.a-1.g
• Categories of parties with whom information is sold or shared: We only sell or “share” information in connection with certain third-party providers of cookies or similar technologies as described above and further set forth in the cookie
  management tool accessible through the “Your Privacy Choices” link in the footer of the Sites
• Categories of parties with whom information is disclosed: See Sections 2.a-2.d

Commercial Information

• Source: Directly from you
• Purpose of collection and use: See Section 1.c
• Categories of parties with whom information is sold or shared: N/A
• Categories of parties with whom information is disclosed: See Sections 2.a-2.d

Internet or other similar network activity

• Source: Automatically collected from our Sites
• Purpose of collection and use: See Section 1.g
• Categories of parties with whom information is sold or shared: We only sell or “share” information in connection with certain third-party providers of cookies
  or similar technologies as described above and further set forth in the cookie
  management tool accessible through the “Your Privacy Choices” link in the footer of the Sites
• Categories of parties with whom information is disclosed: See Sections 2.a-2.d

Financial Information

• Source: Directly from you
• Purpose of collection and use: See Section 1.c
• Categories of parties with whom information is sold or shared: N/A
• Categories of parties with whom information is disclosed: See Sections 2.a-2.d

Geolocation Data

• Source: Automatically collected from our Sites
• Purpose of collection and use: See Section 1.g
• Categories of parties with whom information is sold or shared: We only sell or “share” information in connection with certain third-party providers of cookies
  or similar technologies as described above and further set forth in the cookie
  management tool accessible through the “Your Privacy Choices” link in the footer of the Sites
• Categories of parties with whom information is disclosed: See Sections 2.a-2.d

California "Shine the Light" Law

Please note, we do not rent, sell, or share “personal information” as defined by California Civil Code §1798.83 about you that we collect on the Sites with unaffiliated third parties for their direct marketing purposes.

We will retain your personal information for as long as is necessary to complete the purposes for which it was collected, or as may be required by law.

Individual pieces of personal information may exist in different systems that are used for different business or legal purposes. A different maximum retention period may apply to each use case of the information. Certain individual pieces of information may also be stored in combination with other individual pieces of information, and the maximum retention period may be determined by the purpose for which that information set is used.

The Sites may contain links to unaffiliated third-party websites. This Privacy Policy does not apply to the practices of such other websites, and we are not responsible for the actions and privacy policies of the third parties that operate or interact with those websites.

The Sites and Platform are not intended for use by children. In particular, if you are under the age of 18, you may not use our Sites or Platform. We do not knowingly collect, maintain, or use personal information from children under 18 years old. If we believe that any information has been posted by a child under the age of 18, we will promptly delete that information. Parents may contact us using the methods set forth below to request that information concerned their child be removed from our records.

If you have questions about this Privacy Policy or if you would like to make a suggestion about our privacy practices, please send an email to legal@amenitieshealth.com.

We may make changes to this Privacy Policy from time to time, and the revised version will be effective when it is posted and will apply to personal information received after that date. If we make any material changes, we will provide notice of such changes on the Sites or in any other pertinent location where this Privacy Policy may be posted for a reasonable period of time (which we estimate will be approximately two weeks). We encourage you to review this Privacy Policy periodically, especially if you don’t visit the Sites regularly.

We use cookies and similar technologies (referred to herein simply as “cookies”) to facilitate and improve the performance and security of our Sites and to enhance user experience.

The Sites may utilize or permit several different categories of cookies, as follows:

• Essential cookies – Some cookies may be essential for the proper operation of the Sites. For example, they may facilitate page navigation or assist with security checks.
• Functional cookies – These cookies allow us to remember your preferences and allow us to make the Site experience better for you.
• Performance/analytics cookies – These cookies allow us to analyze how visitors use our Sites and to measure Site performance. This allows us to provide a quality experience by customizing our offering and quickly identifying and fixing any issues that arise. For example, we might use performance cookies to keep track of what content is popular, or to learn what links between pages are most effective or why some pages are receiving error messages.
• Advertising cookies – These cookies may be used to highlight articles, other content, or services that we think will be of interest to you based on your use of the Sites. They may also be utilized by third parties when a third-party content feed has been included in the Site so that you can view videos and social media streams.

Use of cookies on our Sites

We do use or allow certain third parties to serve cookies on the Sites. We may allow third parties to serve cookies to help identify fraudulent or automated traffic on the Sites. In addition, third parties that provide content feeds may serve cookies. We may use third-party cookies to help us with market research, improving functionality, and enforcing Site terms and policies

Specific third-party cookies and associated privacy practices

The Sites may permit the following cookies:

• Shopify - Essential, Functional, Advertising, and Analytics (Cookie Policy)
• Clerk - Essential (Cookie Policy)
• Stripe - Essential, Functional, and Advertising (Cookie Policy)

Opt-outs

Your browser may allow you to disable certain cookies. Moreover, as stated above in our Privacy Policy, if your browser offers you the ability to use a Global Privacy Control (GPC) to communicate your privacy preferences to us, we honor such signals by opting you out of or restricting cookie technology that may otherwise constitute “sharing” for targeted advertising or a “sale” under state privacy laws. Also, the third party listed for a given cookie may provide an opt out tool for that cookie. Note that disabling cookies may in some instances impact the functionality of the Sites. You can also opt-out of certain cookies by using the “Your Privacy Choices” link on our Sites homepages

You may learn more about advertising networks and opt out of receiving personalized advertisements on this browser or device from advertisers who are members of the Network Advertising Initiative or who subscribe to the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising by visiting the opt-out options of each of those organizations. Links to their opt-out sites are set forth below.

Network Advertising Initiative:      

• Browser Opt-Out: http://www.networkadvertising.org/choices  

Digital Advertising Alliance:

• Browser Opt-Out: http://www.aboutads.info/choices  

Note that, when you opt out of personalized advertising, you may continue to see online advertising on the Sites and/or our ads on other websites and online services. Also, given that many opt-outs themselves use a cookie to effectuate an opt-out preference, you may need to opt-out again if you clear cookies on your browser.

Changes to this Cookie Policy

We may revise this Cookie Policy from time to time in order to reflect changes in our use of cookies, changes in the law, changes in our services, or best practices. We encourage you to review this Cookie Policy periodically.