Privacy Policy

This Privacy Policy informs you (or the entity on whose behalf you are using this Service) (“you” or as the context requires “your”) what personal information Serotonin Enterprises LLC (“Company,” “we,” or “us”), or any of Company’s franchisees, may collect and how Company, or any of Company’s franchisees, uses such information. This Privacy Policy is a part of and incorporated into the Terms of Use (“Terms of Use”) posted to https://www.serotonincenters.com , any Serotonin Enterprises LLC mobile application, and any service or program where this Privacy Policy is posted or linked (collectively, “Website”) and any other written terms and conditions or agreement (“Terms and Conditions”) of Company software application(s) (“App(s)”) (the Website(s) and the App(s) and related services, collectively, the “Service”). Any terms capitalized in this Privacy Policy, but not defined, have the meanings assigned to such terms in the applicable Terms of Use or Terms and Conditions.

At Company, we recognize that privacy of your Personal Information, as defined below, is important. Here is information on what types of personal information we receive and collect when you use and visit our websites including but not limited to Company’s Website, as well as Company’s franchisees’ websites, and how we safeguard your information. We never sell your personal information to third parties.

If you provide information to any of Company’s franchisees, please be advised that the franchisee may have its own privacy policy, terms of use, or terms and conditions. Company does not control its franchisees’ use of your Personal Information. You understand that if you elect to unsubscribe from any marketing communications from one of Company’s franchisees, you will not automatically become unsubscribed from the marketing communications of Company or other franchisees to which you provided your email address, including as authorized under this Privacy Policy. You understand that if you are a member of any of Company’s franchisees, you must contact that franchise directly to learn how to unsubscribe from its communications to you.

BY USING OR ACCESSING THE SERVICE IN ANY MANNER, YOU ACKNOWLEDGE THAT YOU ACCEPT THE PRACTICES AND POLICIES OUTLINED IN THIS PRIVACY POLICY, SUBJECT ONLY TO OUR NOTICE OF PRIVACY PRACTICES (“PRIVACY NOTICE”), AND YOU HEREBY CONSENT THAT WE WILL COLLECT, USE, AND SHARE YOUR INFORMATION IN THE FOLLOWING WAYS. TO THE EXTENT THIS PRIVACY POLICY CONFLICTS WITH OUR PRIVACY NOTICE WITH RESPECT TO YOUR PROTECTED INFORMATION, OUR PRIVACY NOTICE WILL CONTROL. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, YOU MAY NOT USE THE SERVICE. IF YOU USE THE SERVICE ON BEHALF OF SOMEONE ELSE (SUCH AS YOUR CHILD) OR AN ENTITY (SUCH AS YOUR EMPLOYER), YOU REPRESENT THAT YOU ARE AUTHORIZED BY SUCH INDIVIDUAL OR ENTITY TO ACCEPT THIS PRIVACY POLICY ON SUCH INDIVIDUAL’S OR ENTITY’S BEHALF.

Company reserves the right, at any time, to modify this Privacy Policy. If we make revisions that change the way we collect, use, or share Personal Information, we will post those changes in this Privacy Policy. If we make material changes to our Privacy Policy, we may also notify you by other means prior to the changes taking effect, such as by posting a notice on our Website or sending you a notification. You should review this Privacy Policy periodically so that you keep up to date on our most current policies and practices. The effective date of the latest version of our Privacy Policy is located at the beginning of this Privacy Policy.

1. Personal Information Collected by the Service. Company uses information collected from users of the Service to personalize and improve your visit and experience at the Website and for other purposes set out below. Company gathers information in the following ways:

Information You Provide to Company . Through a user’s interactions with the Service, Company collects “Personal Information,” which is information that identifies an individual or relates to an identified individual, as defined under the Florida Information Protection Act of 2014 (“FIPA”), including any information you have provided in connection with your use of the Service, as well as personal information regarding more sensitive areas, such as your government ID and certain other medical or health information, financial information, gender, marriage status, race/ethnicity, or veteran or disability status (“Sensitive Personal Information”) and PHI. Personal Information is collected when you establish an online account, book an appointment, submit a franchise application, or communicate with Company, or any of Company’s franchisees, about the Website or Company’s franchisee’s websites. Company will also collect your Personal Health Information (“PHI”) through client intake documents if you choose to engage in the services of the Website or Company’s franchisee’s websites subsequent to establishing an account.

The specific types of Personal Information we collect will depend upon the Services you use, how you use them, and the information you choose to provide. The types of Personal Information we collect directly from you may include:

• Name, address, telephone number, date of birth, and email address
• Information about your medical conditions, treatment options, physician referrals, lifestyle and personal preferences, prescriptions, genetics, medical photos, and lab results or other related health information, such as your physical and emotional characteristics
• Log-in credentials if you create an account
• Billing information, such as shipping address, credit or debit card number, verification number, and expiration date, collected by our payment processors on our behalf
• Identity verification information (e.g., driver's license or other government-issued ID card or number), and your signature (if required for notarization purposes)
• Information about purchases or other transactions with us
• Information about your customer service and maintenance interactions with us
• Demographic information such as your gender, race/ethnicity, and age, marital status and number of children, and similar information in connection with the Services
• Information about others, such as if you share a family or friend's email address or contact information to allow access to your information or name them as an emergency contact
• User-generated content you post in public online forums on our Services or share with other users
• Any other information you choose to directly provide to us in connection with your use of the Services.

Purposes for How We Use Your Personal Information

In connection with providing you with the Services, we may use your Personal Information for our business purposes to:

• Carry out, improve, and manage the Services and, as applicable, facilitate the provision of health care services to you by physicians or other health care providers and ensure that the physicians or health care providers have the services and support necessary for health care operations.
• Engage in internal research to understand the effectiveness of our Services, improve our Services, and better understand our user base. If we publish or provide the results of this research to others, such research will be presented in a de-identified and aggregate form such that individual users cannot be identified
• Communicate with you about the Services, your use of the Services, or your inquiries related to the Services and send you communications on behalf of physicians or other health care providers utilizing the Services to meet your needs
• Communicate with you (in accordance with applicable legal requirements) by email, postal mail, or phone about surveys, promotions, special events or our products and Services and those of our subsidiaries, affiliates, and parent companies and any of their related businesses and those of our third-party partners
• Provide you with technical support and customer service and troubleshoot any technical issues or errors
• Verify your identity and administer your account, including processing your payments, fulfilling your orders, and verifying the authenticity of your government-issued identification photo
• Ensure that content from our Services is presented in the most effective manner for you and for your computer or device, allow you to participate in interactive features of our Services (when you choose to do so), and as part of our efforts to keep our Services safe and secure
• Provide you with more relevant advertisements and personalized content, and measure or understand the effectiveness of advertising and content we serve to you and others, and to deliver and customize relevant advertising and content to you
• Help us better understand your interests and needs, such as by engaging in analysis and research regarding use of the Services
• Comply in good faith with any procedures, laws, and regulations which apply to us where it is necessary for our legitimate interests or the legitimate interests of others
• Establish, exercise, or defend our legal rights where it is necessary for our legitimate interests or the legitimate interests of others, such as protecting against malicious, fraudulent, or illegal activity

Combined Information . For the purposes discussed in this Privacy Policy, we may combine the Personal Information that we collect through the Services with information that we receive from other sources, both online and offline, and use and share such combined information in accordance with this Privacy Policy.

Uses and Disclosures of PHI

We may use and disclose your PHI for the following purposes:

• Treatment: We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This may include communication with other healthcare providers about your treatment and coordinating your care with other providers.
• Payment: We may use and disclose your PHI to obtain payment for healthcare services provided to you. This may include contacting your insurance company to verify your coverage, billing, and collection activities, and sharing PHI with other healthcare providers, insurance companies, or collection agencies.
• Healthcare Operations: We may use and disclose your PHI for healthcare operations, including quality assessment, improvement activities, case management, accreditation, licensing, credentialing, and conducting or arranging for medical reviews, audits, or legal services.
• As Required by Law: We may use and disclose your PHI when required to do so by federal, state, or local law.
• Public Health and Safety: We may use and disclose your PHI to prevent or control disease, injury, or disability, to report child abuse or neglect, to report reactions to medications or problems with products, and to notify persons who may have been exposed to a communicable disease or may be at risk of spreading a disease or condition.
• Health Oversight Activities: We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure.
• Judicial and Administrative Proceedings: We may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.
• Law Enforcement: We may disclose your PHI for law enforcement purposes, such as to report certain types of wounds or injuries, or to comply with a court order, warrant, or other legal process.
• Research: We may use and disclose your PHI for research purposes when the research has been approved by an institutional review board and privacy protections are in place.
• Organ and Tissue Donation: If you are an organ donor, we may disclose your PHI to organizations that handle organ procurement, transplantation, or donation.
• Workers' Compensation: We may disclose your PHI for workers' compensation or similar programs that provide benefits for work-related injuries or illnesses.
• Military and Veterans: If you are a member of the armed forces, we may disclose your PHI as required by military authorities.
• Inmates: If you are an inmate, we may disclose your PHI to the correctional institution or law enforcement official having custody of you.

Your Rights and Choices

Depending on the state in which you live, you may have legal rights with respect to your information. The types of requests you may be able to make are as follows:

• Information about the categories of information we process, our uses of your information, our sources of such information and our disclosure of such information
• Access to the information that we have collected about you and a copy of certain information in a portable format
• Correct certain information we have about you
• Deletion of the information we have about you

PHI-Specific Rights: You have the following additional rights with respect to your PHI:

• Right to Inspect and Copy: You have the right to inspect and copy your PHI that we maintain, with certain exceptions. To request access, submit a written request to our Privacy Officer. We may charge a reasonable fee for the costs of copying, mailing, or other supplies associated with your request.
• Right to Amend: You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete. To request an amendment, submit a written request to our Privacy Officer, specifying the information you believe is incorrect and why. We may deny your request if we believe the information is accurate and complete, or if we did not create the information.
• Right to an Accounting of Disclosures: You have the right to request an accounting of disclosures of your PHI made by us in the past six years, except for disclosures made for treatment, payment, or healthcare operations, and certain other disclosures. To request an accounting, submit a written request to our Privacy Officer.
• Right to Request Restrictions: You have the right to request a restriction on our use or disclosure of your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request but will consider it. To request a restriction, submit a written request to our Privacy Officer, specifying the restriction you are requesting and to whom it applies.
• Right to Request Confidential Communications: You have the right to request that we communicate with you about your PHI in a certain way or at a certain location. To request confidential communications, submit a written request to our Privacy Officer, specifying how or where you wish to be contacted.
• Right to a Paper Copy of This Notice: You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically. To obtain a paper copy of this Notice, contact our Privacy Officer.
• Right to be Notified of a Breach: You have the right to be notified in the event that we discover a breach of your PHI.

Making Requests: You may make a request by sending us an email at the email address below. Before we disclose, correct or delete information in response to any of these requests, we will need to verify your identity. Depending on the nature of your request, we may contact you for further information if appropriate to verify your identity. Note, however, that we will never ask you for sensitive personal or financial information when verifying your identity, and no employee will ask you to tell them your password. If you are an authorized agent submitting a request on their behalf, we may require proof of the written authorization you have received before processing the request.

Certain information may be exempt from such requests under applicable law. For example, if the request prevents us from completing a transaction you initiated, interferes with our legal obligations, affects legal matters including a customer user's rights to data contained in their account, we cannot verify your identity, or compliance with your request is not legally required and would involve disproportionate cost or effort. But in any event, we will respond to your request within a reasonable timeframe and provide you with an explanation. If we deny your request in whole or in part, the laws in your jurisdiction may provide you with rights to appeal our response. If applicable, we will provide you with information about your appeal options in our response to you.

We will not discriminate against anyone that makes a rights request, but in some cases, we will not be able to provide our Services to you without that information.

Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. We will provide information about how to exercise that right in our response denying the request. You also may have the right to lodge a complaint with a supervisory authority.

Opt-Out Rights

Opt-out of sale of and disclosure of information for online targeted advertising. As explained in the Online Analytics and Advertising section above, and subject to applicable laws as discussed further below, we allow third parties to receive certain information such as cookies, IP address, device identifiers, hashed contact information, browsing behavior, and/or other activity to enable the delivery of targeted advertising to you. These activities may qualify as the "sale" of personal information or "sharing" or processing of personal information for targeted advertising, as defined in applicable law.

Residents of certain states may opt out of the sale of personal information or sharing or processing of their personal information through cookies, pixels, and similar online tools for targeted advertising. If you have a legally recognized browser-based opt out preference signal turned on via your device browser (such as Global Privacy Control), we recognize such preference in accordance and to the extent required by applicable law. Note, if you use a cookie blocker such as Ghostery, it may block visibility of this tool. You can also use an authorized agent to submit a request to opt-out on your behalf if you provide the agent written permission to do so. We may require the agent to submit proof that you have authorized them to submit an opt-out request.

In addition to advertising activities using cookies and pixels, we may also share user email addresses with advertising partners to provide you with more relevant advertising. To opt out of this activity, send us an email at the email address below.

If you opt out, you may still receive advertising, it just may not be tailored to your interests. Please note, if you use different browsers, devices, or services you will need opt out on each browser or device where you want your choice to apply.

Sensitive Data Opt-Out/Opt-In Right. To provide you with more relevant online advertising regarding our products and services, as described immediately above, we may use information about the treatments you have requested or received and similar information.

• This may include the processing of information that is considered "sensitive data" or "sensitive personal information" under applicable laws, such as health information and information about sex life and sexual orientation (collectively referred to herein as "sensitive data").
• You have a right to limit our use of sensitive data for purposes other than to provide the services or goods you request or as otherwise permitted by law, including our and our partner's processing of sensitive data for tailored advertising purposes.
• To opt-out from such additional purposes send us an email or use the Global Privacy Control described above. Depending on your jurisdiction, we may ask for your consent before using your sensitive data.
• If you consent and subsequently change your mind, you can opt out at any time.

Your Marketing Choices. You may instruct us not to use your contact information to contact you by email, postal mail, or phone regarding products, services, promotions, and special events that might appeal to your interests by contacting us using the information below. In commercial email messages, you can also opt out by following the instructions located at the bottom of such emails. Please note that, regardless of your request, we may still use and share certain information as permitted by this Privacy Policy or as required by applicable law. For example, you may not opt out of certain operational emails, such as those reflecting our relationship or transactions with you.

Notice Concerning Do Not Track

Do Not Track ("DNT") is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our websites for third party purposes, and that is why we provide the variety of opt-out mechanisms listed above. However, we do not currently recognize or respond to browser initiated DNT signals. To learn more about Do Not Track, you can do so here. Nevertheless, we strive to recognize universal opt-out signals where legally required.

Collection of Children's Data

Our Services are not directed to or intended for use by anyone under the age of 16. We do not knowingly collect Personal Information from anyone under the age of 16. If we become aware that a child under the age of 16 has provided us with Personal Information, we will take steps to delete that information. If you become aware that a child under the age of 16 has provided us with Personal Information, please contact us as described below.

Retention of Your Information

We keep your information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the Department of Health and Human Services. You will not be retaliated against for filing a complaint.

Revisions to Our Privacy Policy

We reserve the right to change this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. We will make the revised Privacy Policy accessible through the Services, so you should review it periodically. The date this Privacy Policy was last revised is identified at the top of the document. You are responsible for periodically monitoring and reviewing any updates to the Privacy Policy. If we make a material change to the Privacy Policy, we will provide you with appropriate notice in accordance with legal requirements. Your continued use of our websites after such amendments (and notice, where applicable) will be deemed your acknowledgment of these changes to this Privacy Policy.

Notice of Privacy Practices

This Notice of Privacy Practices ("Notice") describes how we may use and disclose your Protected Health Information (PHI) to carry out treatment, payment, or healthcare operations and for other purposes that are permitted or required by law. This Notice also describes your rights regarding your PHI. We are required by law to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, and to abide by the terms of this Notice.

• Advertising Scripts.Advertising scripts, including but not limited to Facebook, record data about visits to or transactions made on the Website. This information is sometimes known as “clickstream data.” Company may use this data to analyze trends and statistics to improve your online experience or our customer service.

• Mobile Device Identifiers.Mobile device identifiers help Company learn more about our users’ demographics and internet behaviors. Mobile device identifiers are data stored on mobile devices that may track mobile device and data and activities occurring on and through it, as well as the applications installed on it. Mobile device identifiers enable collection of Personal Information, such as session data, marketing cookies, webform data, media access control, address and location, and tracking data, including without limitation IP address, domain server, type of device(s) used to access the Service, web browser(s) used to access the Service, referring webpage or other source through which you accessed the Service, other statistics and information associated with the interaction between your browser or device and the Service.

• Cross Device Matching.To determine if users have interacted with content across multiple devices and to match such devices, we may work with partners, including but not limited to Facebook, who analyze device activity data and/or rely on your information (including demographic, geographic and interest-based data). To supplement this analysis, we may also provide de-identified data to these partners. Based on this data, we may then display targeted advertisements across devices that we believe are associated, or use this data to further analyze usage of Service across devices.

• Cookies. We may use some or all of the following types of Cookies:

• Essential Cookies.Essential Cookies are required for providing you with features or services that you have requested. For example, certain Cookies enable you to log into the secure areas of our Service. Disabling these Cookies may make certain features and services unavailable.

• Functional Cookies. Functional Cookies are used to record your choices and settings regarding our Service, maintain your preferences over time and recognize you when you return to our Service. These Cookies help us to personalize our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).

• Performance/Analytical Cookies. Performance/Analytical Cookies allow us to understand how visitors use our Service such as by collecting information about the number of visitors to the Service, what pages visitors view on our Service, how long visitors are viewing pages on the Service, mouse clicks, mouse movements, scrolling activity, and text typed into the Service. Performance/Analytical Cookies also help us measure the performance of our advertising campaigns in order to help us improve our campaigns and the content for those who engage with our advertising. For example, Google Inc. (“Google”) uses cookies in connection with its Google Analytics services. Google’s ability to use and share information collected by Google Analytics about your visits to the Service is subject to the Google Analytics Terms of Use and the Google Privacy Policy. You have the option to opt-out of Google’s use of cookies by visiting the Google advertising opt-out page at https://policies.google.com/technologies/ads or the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout

• Retargeting/Advertising Cookies. Retargeting/Advertising Cookies collect data about your online activity and identify your interests so that we can provide advertising that we believe is relevant to you. For more information about this, please see the section below titled “Information about Interest-Based Advertisements.”

• You can decide whether or not to accept Cookies through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You may also be able to reject mobile device identifiers by activating the appropriate setting on your mobile device. You can also delete all Cookies that are already on your computer. Although you are not required to accept Company’s Cookies, if you block, reject, or delete them, you may have to manually adjust some preferences every time you access the Service as some functionalities may not work.

• To explore what Cookie settings are available to you, look in the “preferences” or “options” section of your browser’s menu. To find out more information about Cookies, including information about how to manage and delete Cookies, please visit http://www.allaboutcookies.org.

• Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities over time and across different websites. Not all browsers offer a Do Not Track option and there is currently no industry consensus as to what constitutes a Do Not Track signal. Please note that, for these reasons and because of our use of Cookies, our Service, like many website operators, do not support “Do Not Track” requests sent from a browser at this time. To find out more about “Do Not Track,” you can visit https://allaboutdnt.com/.

2. Information Received as a Business Associate. Upon your request or with your consent, your health care provider (“Provider”) may share information about you, including your Personal Information and PHI with Company. Company shall only use such information as a “business associate” of a “covered entity” in accordance with any instructions or restrictions provided to Company by your Provider. With regard to such information, Company shall comply with the applicable provisions of Health Insurance Portability and Accountability Act and the regulations promulgated thereunder, and the Health Information Technology for Economic and Clinical Health Act and any regulations promulgated thereunder, to the extent such privacy laws are applicable to business associates.

3. Use of Information Collected By Company. Company uses the Personal Information collected in an effort to improve your experience with the Service, to provide services to you and to communicate with you about information that you request. Company may also use Personal Information to help target specific offers to you and to help Company develop and improve its Service. Additionally, Company may use your Personal Information to do any of the following:

• Respond to user service requests,
• Administer user accounts,
• Respond to your questions and concerns,
• To communicate with users about our products, services, and related issues,
• To administer fees and provide users with invoices or resolve billing issues, and/or
• Conduct research and analysis.

4. SMS Messaging and Consent (A2P Compliance). We may send you SMS messages as part of our marketing and communication efforts. By providing your mobile phone number, you are consenting to receive text messages from us, including but not limited to promotional offers, transactional messages, and updates regarding our services.

• Opt-In Consent. By voluntarily providing your phone number through our website or other communication methods, you are expressly consenting to receive SMS messages from us. You will only receive promotional SMS messages if you have provided prior express written consent, as required by law. Transactional messages, such as appointment confirmations, order updates, or service notifications, may be sent to you without additional promotional consent.

• Opt-Out Mechanism. You may opt out of receiving SMS messages at any time. To unsubscribe, reply "STOP" or "UNSUBSCRIBE" to any SMS you receive from us. Upon receipt of your opt-out request, you will receive one final message confirming your removal from our SMS messaging list. You may also contact us directly at [email protected] be removed from our SMS messaging list.

• Message Frequency and Charges. The number of SMS messages you receive will vary based on your interactions with us. You can expect to receive up to [X messages per week/month] depending on your engagement with our services. Standard message and data rates may apply based on your wireless carrier and service plan. Please contact your mobile carrier for further details.

• Message Content. SMS messages may include service notifications, transactional messages, promotional offers, and other updates related to our services. We will only send SMS messages that align with the purpose you have consented to and will strive to ensure messages respect your privacy and avoid including sensitive information.

• Compliance Statement. Our SMS messaging practices comply with applicable laws and guidelines, including the Telephone Consumer Protection Act (TCPA) and A2P messaging regulations.

5. Sharing of Information with Third Parties. Company will not rent, sell, or otherwise disclose your Personal Information to unrelated third parties without your consent, except as stated in this Privacy Policy. Company may disclose Personal Information to its franchisees, subsidiary, affiliates, and other related companies without your consent. Company may disclose Personal Information to service providers for the purposes of operating our business, delivering, improving, and customizing our products or services, sending marketing and communications related to our business, payment processing, and for other legitimate purposes permitted by applicable law. To the extent permitted by law, Company will disclose Personal Information to government authorities or third parties pursuant to a legal request, subpoena, or other legal process. Company may also use or disclose your Personal Information as permitted by law to perform charge verifications, apply or enforce the Service’s Terms of Use or Terms and Conditions, or protect Company’s rights, interests, or property as well as those of Company affiliates, customers, or Service users. If Company sells all or part of its business or makes a sale or transfer of assets or is otherwise involved in a merger or business transfer, you agree that Company may transfer your Personal Information to a third party as part of that transaction. Company gives residents of certain jurisdictions, the opportunity to opt-out prior to disclosing Personal Information or using Personal Information for a purpose that is incompatible with the purpose for which it was originally collected or subsequently authorized by such individual. Additionally, Company gives residents of certain jurisdictions the opportunity to affirmatively opt-in prior to any additional disclosures of Sensitive Personal Information to a third party not described in this Privacy Policy or to use of Sensitive Personal Information for a purpose that is incompatible with the purpose for which it was originally collected or subsequently authorized by such individual. Exceptions to these requirements may apply where the disclosure of Personal Information is necessary for Company to coordinate with service providers or your selected Provider, carry out its employment law obligations, or for other reasons as permitted by applicable law.

6. Security of Personal Information. Company has reasonable and appropriate safeguards in place to help protect the Personal Information Company collects from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Although Company attempts to protect the Personal Information in our possession, no security system is perfect, and Company cannot promise that your Personal Information will remain absolutely secure in all circumstances.

7. Data Integrity and Purpose Limitation. Company limits the use of Personal Information to ways that are compatible and relevant to the purposes for which the Personal Information was collected or subsequently authorized or for which consent was obtained. Company will take reasonable steps to ensure that Personal Information is reliable for its intended use, accurate, complete, and current.

8. Retention of Personal Information. Company will retain your Personal Information as needed to fulfill the purposes for which it was collected. Company will retain and use your Personal Information as necessary to comply with Company’s business requirements, legal obligations, resolve disputes, protect our assets, and enforce our agreements.

9. Aggregated De-Identified Information. Company may provide aggregated information related to your Personal Information to some of Company’s business partners. This information is used in a collective manner and does not identify you individually in any way. In addition, as set forth in the Terms of Use and/or Terms and Conditions for the Service, Company may, subject to the limitations set out in the Terms of Use or Terms and Conditions, use certain de-identified PHI or Personal Information.

10. Security.

• The security of your Personal Information is important to us. We seek to protect your Personal Information from unauthorized access, use and disclosure using appropriate physical, technical, organizational, and administrative security measures based on the type of Personal Information and how we are processing that data. We endeavor to follow generally accepted industry standards to protect the Personal Information submitted to us, both during transmission and in storage. For example, the Service use industry standard Secure Sockets Layer (“SSL”) technology to allow for the encryption of Personal Information. We store and process your information on our servers in the United States. We maintain what we consider industry standard backup and archival systems. You should also help protect your data by appropriately selecting and protecting your password and/or other sign-on mechanism; limiting access to your computer or device and browser; and signing off after you have finished accessing your account.

• Although we work to protect the security of your account and other data that we hold in our records, for example, by making good faith efforts to store Personal Information in a secure operating environment that is not open to the public, please be aware that no method of transmitting data over the Internet or storing data is completely secure. We cannot and do not guarantee the complete security of any data you share with us, and except as expressly required by law, we are not responsible for the theft, destruction, loss, or inadvertent disclosure of your information or content.

• If, at any time during or after our relationship, we believe that the security of your Personal Information may have been compromised, we may seek to notify you of that development. If a notification is appropriate, we will endeavor to notify you as promptly as possible under the circumstances. If we have your email address, we may notify you by email to the most recent email address you have provided us in your account profile. Please keep your email address in your account up to date. You can update that email address anytime in your account profile. If you receive a notice from us, you can print it to retain a copy of it. To receive these notices, you must check your email account using your computer or mobile device and email application software. You consent to our use of email as a means of such notification. If you prefer for us to use the U.S. Postal Service to notify you in this situation, please email us at [email protected]. Please include your address when you submit your request. You can make this election any time, and it will apply to notifications we make after a reasonable time thereafter for us to process your request. You may also use this email address to request a print copy, at no charge, of an electronic notice we have sent to you regarding a compromise of your Personal Information.

• We retain Personal Information about you consistent with all internal policies and procedures. We may retain Personal Information to comply with our legal obligations, resolve disputes or collect fees owed, or as is otherwise permitted or required by our data retention policies and procedures.

11. Children’s Privacy.

• The Service is not directed to or intended for use by children under 13 years of age. If you are a child under the age of 13, please do not attempt to register for or otherwise use the Service or send us any Personal Information. By accessing, using and/or submitting information to or through the Service, you represent that you are not under the age of 13. As noted in the Terms of Use, we do not knowingly collect or solicit Personal Information from children under the age of 13. If we learn that we have received any Personal Information directly from a child under age 13 without first receiving his or her parent’s verified consent, we will use that Personal Information only to respond directly to that child (or his or her parent or legal guardian) to inform the child that he or she cannot use the Service. We will then subsequently delete that child’s Personal Information. If you believe that a child under 13 may have provided us with Personal Information, please contact us at [email protected].

• If you are between age 13 and the age of majority in your place of residence, you may use the Service only with the consent of or under the supervision of your parent or legal guardian. If you are a parent or legal guardian of a minor child, you may, in compliance with the Terms of Use and Terms and Conditions, use the Service on behalf of such minor child. Any information that you provide us while using the Service on behalf of your minor child will be treated as Personal Information as otherwise provided in this Privacy Policy. If you use the Service on behalf of another person, regardless of age, you agree that Company may contact you for any communication made in connection with providing the Service or any legally required communications. You further agree to forward or share any such communication with any person for whom you are using the Service on behalf.

12. Controlling Your Personal Information and Notifications. If you are a registered user of the Service, you can modify certain Personal Information or account information by logging in and accessing your account. If you wish to close your account, please email us at [email protected]. Company will use reasonable efforts to delete your account as soon as reasonably possible. Please note, however, that Company reserves the right to retain information from closed accounts consistent with our internal data retention policies and procedures. You must promptly notify us if any of your account data is lost, stolen, or used without permission.

13. Links to Third Party Websites from our Website. To the extent that our Website contains links to sites operated by third parties and not related to our products or services (“Linked Websites”), the Linked Websites are not controlled by us and we are not responsible for the privacy practices of those companies. Before disclosing your Personal Information to Linked Websites, we advise you to examine their privacy policies. Disclaimer: Facebook, Twitter, LinkedIn, YouTube, Instagram, nor any other brand mentioned on our site(s) endorse or sponsor this site(s) and are in no way affiliated with Company.

14. Florida Notice Requirement.

• FIPA.

The Florida Information Protection Act of 2014 provides Florida residents with the right to be notified of a security breach regarding their personal information. This section describes your FIPA right to receive notification upon a breach. If you have any questions about this section or whether any of the following applies to you, please contact us at [email protected] and indicate “Florida Notice Requirement” in the subject line of your communication.

• Notice. You have the right to receive proper notice within 30 days if Company determines there to have been a breach or has reason to believe a breach occurred, subject to certain exceptions provided under Fla. Stat. § 501.171(4)(b), Fla. Stat. § 501.171(4)(c) and Fla. Stat. § 501.171(4)(f). You will receive written notice by either mail or e-mail with the following information:

• The date, estimated date, or estimated date range of the breach;

• The description of the Personal Information that was access or reasonably believed to have been accessed; and

• Company’s contact information so you can inquire about the security breach and the Personal Information.

15. Changes to this Privacy Policy. We reserve the right to amend our Privacy Policy at our discretion and at any time. When we make changes to the Privacy Policy, we will notify you by email or through a notice on our website homepage. Use of the information we collect is subject to the Privacy Policy in effect at the time such information is collected.

16. Contact Information. If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Information, and your choices and rights regarding such use, please do not hesitate to contact us at:

Privacy Officer: Joseph Andreetti

Email: [email protected]

Address: Serotonin Enterprises LLC, 7790-100 Wintergarden Vineland Rd, Windermere FL 34786

Phone: (407) 347-0101