SUPPLEMENTAL PRIVACY RIGHTS

SUPPLEMENTAL PRIVACY RIGHTS

Effective Date: December 20, 2024

CALIFORNIA PRIVACY SUPPLEMENT

This statement supplements our Privacy Policy and applies solely to residents of the State of California. As a California resident, you have additional privacy rights related to your personal information under California law, including the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”) (together, “California Privacy Law”), as described below. Personal information under the California Privacy Law is any information that can identify you or your household, either directly or indirectly, such as your name, address, telephone number, and email address (“Personal Information”). Any terms defined in the California Privacy Law and not defined here have the same meaning when used here.

Shine the Light law

California's “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us using the information in the “How to contact us” section below.

What Personal Information we collect

We collect personal information from you when you voluntarily provide it to us, such as by creating a user account, signing up for email updates, subscribing to newsletters, subscribing to and using our products or services, or responding to our communications. We also collect personal information about you from your use of our website and mobile applications. We have collected Personal Information in the following categories marked by an “X” in the last 12 months:

X Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers;

X Financial or health information: (examples: physical characteristics or description, address, telephone number, bank account number, credit card number, debit card number, financial information, medical information, health insurance information);

X Characteristics of protected classifications under California or federal law;

X Commercial information, including records of personal property, products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies;

X Biometric information;

X Internet or other electronic network activity information, including, without limitation, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement;

X Geolocation data (information that can be used to track an electronic device’s location);

X Audio, electronic, visual, thermal, olfactory, or similar information;

X Professional or employment-related information;

X Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99).

X Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We collect your Personal Information from both you and through our partners and other publicly and commercially available sources as well as through the use of cookies. You can read more about our use of cookies in our Privacy Policy and our Cookies Policy.

How we use your Personal Information

We use your Personal Information for the following business purposes if marked by an “X”:

___ Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.

X Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

X Debugging to identify and repair errors that impair existing intended functionality.

X Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.

X Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.

X Undertaking internal research for technological development and demonstration.

X Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.

For all categories of Personal Information collected, we disclose such information to our service providers and other third parties to help us accomplish the business purposes described above and as further outlined in our Privacy Policy.

Personal Information Requests

As a California resident, you have the right to request certain information regarding our use of your Personal Information, including the following:

The different categories of Personal Information we have collected about you during the last 12 months and the categories of sources from which that information was collected;
The business or commercial purpose for collecting or selling your Personal Information;
The categories of third parties with whom we shared your Personal Information;
Whether we have disclosed or sold your Personal Information to a third party for a business or commercial purpose during the last 12 months and the categories of the Personal Information disclosed or sold; and
The specific pieces of Personal Information we have collected about you.

To submit a request for Personal Information, you must submit a Verifiable Consumer Request following the procedures described in the Verifiable Consumer Request Procedures section below. You may submit a Personal Information request up to twice during a 12-month period.

Selling or sharing of personal information

As a California resident, you have the right to request that we not sell your Personal Information. Please note that we do not, and will not, sell your Personal Information to third parties.

Right to request deletion of personal information

As a California resident, you have a limited right to request that we and all of our service providers delete your Personal Information. You must do so by submitting a Verifiable Consumer Request to delete your Personal Information following the procedures described in the Verifiable Consumer Request Procedures section below. Upon receipt and confirmation of the Verifiable Consumer Request, we will delete your Personal Information from our systems and direct our service providers to do the same at no cost to you. There are exceptions to this right. We may retain your Personal Information for any of the following reasons:

To provide goods or services to you as a consumer;
To detect and resolve issues related to security or functionality;
To comply with legal obligations;
To conduct public interest research;
In the exercise of free speech or the free speech of others; and
For use in internal work processes and purposes that you would reasonably expect based on your relationship with us.

If we determine that we will not delete your Personal Information when you request us to do so, we will inform you and tell you why we are not deleting it.

Non-discrimination

We will not discriminate against you for the exercise of your rights under the California Privacy Law. We will not deny you goods or services, charge a different rate or price to you, or supply a different level or quality of goods to you. We may, however, offer different prices, levels of service or quality to those who share their Personal Information based on the value of the Personal Information provided as permitted by law. To the extent certain of our services require your Personal Information and you choose not to provide the necessary Personal Information, you may not be able to use those services.

Other Privacy Rights

In addition to the rights above, you also have these additional rights as a California resident:

You may object to the processing of your personal information;

You may request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the information;

You can designate an authorized agent to make a request under the California Privacy Law on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the California Privacy Law;

You may request to opt out from future selling or sharing of your personal information to third parties. Upon receiving an opt-out request, we will act upon the request as soon as feasibly possible, but no later than fifteen (15) days from the date of the request submission.

To exercise these rights, you may contact us using the Contact Us information below. If you have a complaint about how we handle your data, we would like to hear from you.

Financial Incentives

“Financial incentive” means a program, benefit, or other offering, including payments to consumers as a compensation, for the disclosure, deletion, sharing, or sale of personal information.

The law permits financial incentives or a price or service difference if it is reasonably related to the value of the consumer’s data. A business must be able to explain how the financial incentive or price or service difference is reasonably related to the value of the consumer’s data. The explanation must include:

A good-faith estimate of the value of the consumer’s data that forms the basis for offering the financial incentive or price or service difference; and

A description of the method the business used to calculate the value of the consumer’s data.

We may decide to offer a financial incentive (e.g., price or service difference) in exchange for the retention, sale, or sharing of a consumer’s personal information.

If we decide to offer a financial incentive, we will notify you of such financial incentive and explain the price difference, as well as material terms of the financial incentive or price of service difference, including the categories of personal information that are implicated by the financial incentive or price or service difference.

If you choose to participate in the financial incentive, you can withdraw from the financial incentive at any time by contacting us at the Contact Us information provided below.

Verifiable consumer request procedures

In order to submit a Verifiable Consumer Request, please submit your name, customer or account email address, and a description of your request with sufficient detail that allows us to properly understand, evaluate, and respond to it, at:

Email: contact@aunicahealth.com

Phone Number: +1 615-208-3261

Mailing Address:

Aunica, Inc.

3811 Bedford Avenue, Suite 101

Nashville, TN 37215

If you maintain an online account with us, we may verify your identity for a request through the normal account authentication process, meaning you will need to sign on with your username and password.

You may assign a designated agent to make a request on your behalf. If you wish to do so, you will need to appoint the designated agent in writing, and we may require a copy of that writing before allowing any request submitted by your designated agent. The designated agent would follow the same procedure outlined above to make a request on your behalf.

If we are unable to confirm your identity or authority to make the request, we may contact you for additional information or deny your request. We will inform you if we cannot verify your identity or authority. We will only use Personal Information provided in a Verifiable Consumer Request to verify your identity or authority to make the request.

We will respond to the request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. The information may be delivered through your account, or, if you do not maintain an account with us, by mail or electronically at your option, and if provided electronically, the information will be in a portable and, to the extent technically feasible, readily useable format that allows you to transmit the information to another entity without hindrance.

We are not required to respond to requests to provide Personal Information to you more than twice in any 12-month period. Any disclosures we provide will only cover the 12-month period preceding the receipt of the request. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

In responding to your request, we are not permitted to disclose or provide you with your Social Security Number, Driver’s License Number, or other government issued identification number, financial account number, any health insurance or medical identification number, an account password, or security questions and answers.

Do not track

We currently do not respond to any Do Not Track signals or similar signals.

Additional rights

The rights set forth here are in addition to the rights contained in our general Privacy Policy. In the event the rights here conflict with those contained in our Privacy Policy, the portion that provides you with the most protection with regard to your Personal Information will prevail.

How to contact us

If you wish to adjust your privacy settings, have requests related to your rights or wish to exercise your rights above, or have any other questions or concerns, please contact us at:

Email: contact@aunicahealth.com

Phone Number: +1 615-208-3261

Mailing Address:

Aunica, Inc.

3811 Bedford Avenue, Suite 101

Nashville, TN 37215

CANADA PRIVACY SUPPLEMENT

If you are in Canada, you have some additional protections under Canadian law. We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

If collection is clearly in the interest of an individual and consent cannot be obtained in a timely way;

For investigations and fraud detection and prevention;

For business transactions provided certain conditions are met;

If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim;

For identifying injured, ill, or deceased persons and communicating with next of kin;

If we have reasonable ground to believe an individual has been, is, or may be a victim of financial abuse;

If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province;

If the disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records;

If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced;

If the collection is solely for journalistic, artistic, or literary purposes;

If the information is publicly available and is specified by the regulations.

VIRGINIA PRIVACY SUPPLEMENT

If you are a resident of Virigina, you may have additional rights under the Virigina Consumer Data Protection Act (“CDPA”).

The information we collect, use, and disclose about you will vary depending on how you interact with us and our Site, goods, and services. To find out more, please visit the following sections in our general Privacy Policy:

PERSONAL INFORMATION

WHAT PERSONAL INFORMATION WE COLLECT

HOW DO WE USE YOUR INFORMATION

WHEN DO WE SHARE YOUR INFORMATION?

Your rights with respect to your personal data

Under the CDPA, you have the:

Right to be informed whether or not we are processing your personal data;

Right to access your personal data;

Right to correct inaccuracies in your personal data;

Right to request deletion of your personal data;

Right to obtain a copy of the personal data you previously shared with us;

Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We will not sell personal data in the future belonging to website visitors, users, and other consumers.

Exercise your rights provided under the Virginia CDPA

More information about our data collection and sharing practices can be found in this privacy notice and our Cookie Policy above.

If you are using an authorized agent to exercise your rights, we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.

Verification process

We may request that you provide additional information reasonably necessary to verify you and your consumer’s request. If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request.

Upon receiving your request, we will respond without undue delay, but in all cases, within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary. We will inform you of any such extension within the initial 45-day response period, together with the reason for the extension.

Right to appeal

If we decline to take action regarding your request, we will inform you of our decision and reasoning behind it. If you wish to appeal our decision, please email us at the address provided in the Contact Us section above. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may contact the Attorney General to submit a complaint.

If you wish to exercise any of these rights, please contact us using the information under the “Contact Us” section above.

COLORADO PRIVACY SUPPLEMENT

If you are a resident of Colorado, you may have additional rights as outlined below:

Personal Information

We collect Personal Information from the numerous categories below for the following purposes:

Category of Personal InformationProcessing Purpose(s)Information Used for Targeting AdvertisingIdentifiers such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. Debugging to identify and repair errors that impair existing intended functionality. Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction. Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the businessNoFinancial or health information: (examples: physical characteristics or description, address, telephone number, bank account number, credit card number, debit card number, financial information, medical information, health insurance informationDetecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. Debugging to identify and repair errors that impair existing intended functionality. Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction. Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business NoCharacteristics of protected classifications under Colorado or federal law (only when you provide such information as part of your profile)
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. Debugging to identify and repair errors that impair existing intended functionality. Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction. Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the businessNoCommercial information, including records of personal property, products or services purchased, obtained or considered, or other purchasing or consuming histories or tendenciesShort-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the businessNoBiometric informationDebugging to identify and repair errors that impair existing intended functionality. Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the businessNoInternet or other electronic network activity information, including, without limitation, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisementDebugging to identify and repair errors that impair existing intended functionality. Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction. Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the businessNoGeolocation data (information that can be used to track an electronic device’s location)Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. Debugging to identify and repair errors that impair existing intended functionality. Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction. Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the businessNoAudio, electronic, visual, thermal, olfactory, or similar informationDetecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. Debugging to identify and repair errors that impair existing intended functionality. Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction. Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the businessNoProfessional or employment-related informationDebugging to identify and repair errors that impair existing intended functionality. Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the businessNoEducation information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)Debugging to identify and repair errors that impair existing intended functionality. Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction. Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the businessNoInferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudesDebugging to identify and repair errors that impair existing intended functionality. Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction. Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the businessNo

Additional Privacy Rights

As a Colorado resident, you may have the additional right to:

Request access to your Personal Information;
Request correction of your Personal Information;
Request deletion of your Personal Information;
Opt-out of the processing of your Personal Information for the purposes of targeted advertising or the sale of your Personal Information.
Obtain your Personal Information in a portable and, if technically feasible, readily usable format which you may transmit to another entity.

If you wish to exercise any of these rights, please contact us using the information under the “Contact Us” section above.

CONNECTICUT PRIVACY SUPPLEMENT

If you are a resident of Connecticut, you may have additional rights under the Connecticut Data Privacy Act (“CTDPA”).

Your rights with respect to your Personal Information

Under the CTDPA, you have the:

• Right to be informed whether or not we are processing your Personal Information;

• Right to access your Personal Information;

• Right to correct inaccuracies in your Personal Information;

• Right to request deletion of your Personal Information;

• Right to obtain a copy of the Personal Information you previously shared with us;

• Right to Opt-Out of the processing of your Personal Information for the purposes of:

o Targeted advertising

o The sale of Personal Information

o Profiling in connection with automated decisions that produce legal or similarly significant effects concerning the consumer.

• Right to appoint an authorized agent to exercise your right to opt-out

Exercising your rights

More information about our data collection and sharing practices can be found in this privacy notice and our Cookie Policy above.

You may contact us by referring to the “Contact Us” section above.

If you are using an authorized agent to exercise your rights, we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.

Verification process

Right to appeal

UTAH PRIVACY SUPPLEMENT

If you are a resident of Utah, you may have additional rights under the Utah Consumer Privacy Act (“UCPA”).

Your rights with respect to Personal Information:

Under the UCPA, you have the right to:

Be informed whether or not we are processing your Personal Information;
Access your Personal Information;
Request deletion of your Personal Information;
Obtain a copy of the Personal Information you previously shared with us;
Opt-out of the processing of your Personal Information for the purposes of:
- Targeted Advertising
- The sale of Personal Information

Under the UCPA, we process the following Personal Information:

Processing of Children’s Personal Data

Utah adopts the provisions of the Children’s Online Privacy Protection Act (COPPA). For more information, refer to the general Privacy Policy.

Non-Discrimination

We will not discriminate against you for the exercise of your rights under the UCPA. We will not deny you goods or services, charge a different rate or price to you, or supply a different level or quality of goods to you. We may, however, offer different prices, rates, levels of service or quality of goods those who share their Personal Information in the event you opt out of targeted based advertising or if the offer is related to your voluntary participation in our loyalty program. To the extent certain of our services require your Personal Information and you choose not to provide the necessary Personal Information, you may not be able to use those services.

Consumer Request Procedure

In order to submit a Consumer Request, please submit your name, customer or account email address, and a description of your request with sufficient detail that allows us to properly understand, evaluate, and respond to it, at:

Email: contact@aunicahealth.com

Phone Number: +1 615-208-3261

Mailing Address:

Aunica, Inc.

3811 Bedford Avenue, Suite 101

Nashville, TN 37215

We will respond to the request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. The information may be delivered to through your account, or, if you do not maintain an account with us, by mail or electronically at your option, and if provided electronically, the information will be in a portable and, to the extent technically feasible, readily useable format that allows you to transmit the information to another entity without hindrance.

We are not required to respond to requests to provide Personal Information to you more than twice in any 12-month period. Any disclosers we provide will only cover the 12-month period preceding the receipt of the request. The response we provide will also explain the reasons we cannot comply a request, if applicable.

Enforcement
The UCPA does not contain a private right of action. However, it does provide for the Utah Attorney General to enforce its provisions. If you feel as though a violation of the UCPA has occurred, please contact the Utah Attorney General.

GENERAL CONSUMER HEALTH DATA PRIVACY SUPPLEMENT

Effective Date: December 20, 2024

This statement supplements our Privacy Policy and explains how we process consumer health data subject to any applicable laws that govern consumer health data as defined in those laws, including, currently, the State of Nevada.

To Whom Does This Policy Apply?

Please note we have a separate policy addressing the Washington State Consumer Health Data laws. This Policy applies to personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status within the meaning of the applicable law (“Consumer Health Data”). It applies only to those individuals protected under the applicable law, including, currently, individuals who reside in Nevada or have their data processed in Nevada, and only individuals who engage with a product or service in an individual or household context, and not in an employment context or as an agent of a governmental entity. This Policy does not apply to personal information excluded from the applicable consumer health data law, including protected information subject to the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”).

What Consumer Health Data Do We Collect?

We collect Consumer Health Data from you when you voluntarily provide it to us by using our products or services, including when you participate in certain of our features such as “You in Review,” when you engage with our Mental Health Companion chat feature, and when you engage with the Aunica community. This may include, for example:

(i) Individual health conditions, treatment, diseases, or diagnosis;

(ii) Social, psychological, behavioral, and medical interventions;

(iii) Health-related surgeries or procedures;

(iv) Use or purchase of prescribed medication;

(v) Bodily functions, vital signs, symptoms, or measurements of the information described in this list;

(vi) Diagnoses or diagnostic testing, treatment, or medication;

(vii) Gender-affirming care information;

(viii) Reproductive or sexual health information;

(ix) Biometric data;

(x) Genetic data;

(xi) Precise location information that could reasonably indicate a consumer's attempt to acquire or receive health services or supplies;

(xii) Data that identifies a consumer seeking health care services; or

(xiii) Any information that we process to associate or identify you with the data described in this list that is derived or extrapolated from nonhealth information, including through machine learning.

How we use your Consumer Health Data

We use your Consumer Health Data to:

Provide and maintain our services;
Communicate with you;
Troubleshoot and improve our services;
Personalize your experiences;
Authenticate your identity;
Provide essential business operations that support the provision of our products and services; and
Comply with legal obligations and respond to legal process;
Serve other purposes for which we provide specific notice at the time of collection and as otherwise authorized or required by law; and
In de-identified form, unless you opt out when you register for an account with us or in your personal account settings, for training of our artificial intelligence (AI) model as described in more detail above.

We may de-identify or anonymize Consumer Health Data so that it cannot reasonably be reidentified by us or by another person, and we may use this de-identified data for any reason permitted by applicable law.

We disclose your Consumer Health Data to our service providers and other third parties to help us accomplish the business purposes described above and as further outlined in our general Privacy Policy.

We may share your Consumer Health Data with others in the following instances:

When legally required to do so;
With third-party vendors on a need-to-know basis in order to provide services to you;
At the request of governmental authorities conducting an investigation;
To verify or enforce compliance with the policies governing our services and applicable laws or to protect against misuse or unauthorized use of our services; and
To a successor entity in connection with a corporate merger, consolidation, sale of assets or other corporate change. Should such a sale occur, we will use reasonable efforts to direct the transferee to use your information in a manner that is consistent with our privacy policy.

Your Rights Under the Consumer Health Data Laws

Under the applicable consumer health data laws, subject to certain exceptions, you may have the following rights:

The right to access or delete Consumer Health Data about you or receive a list of third parties and affiliates with whom your Consumer Health Data was shared or sold (with authorization);
The right, subject to certain exceptions, to withdraw consent relating to the use, sharing, or selling (with authorization) of your Consumer Health Data.

To exercise these rights, please contact us using the Contact Us information provided below.

Additional rights

How to contact us

If you wish to adjust your privacy settings, have requests related to your rights or wish to exercise your rights above, or have any other questions or concerns, please contact us at:

Email: contact@aunicahealth.com

Phone Number: +1 615-208-3261

Mailing Address:

Aunica, Inc.

3811 Bedford Avenue, Suite 101

Nashville, TN 37215

You may be required to submit proof of your identity for these requests to be processed. We will not be able to comply with your request if we are unable to confirm your identity. You may designate an authorized agent to make a request on your behalf subject to proof of identity and authorization.