Consumer Health Data Privacy Notice

CONSUMER HEALTH DATA PRIVACY NOTICE

Aspen Aesthetics, LLC, dba Fifty 410 Health

Effective Date: August 2026  |  Last Updated: August 2026

This Notice supplements our Privacy Policy and is provided under the Washington My Health My Data Act (RCW 19.373), the Nevada consumer health data law (NRS 603A.400 et seq.), and the consumer health data provisions of the Connecticut Data Privacy Act. It is published separately, as those laws require.

INFORMATION THAT QUALIFIES AS PROTECTED HEALTH INFORMATION UNDER HIPAA IS EXEMPT FROM THESE LAWS AND IS GOVERNED INSTEAD BY HIPAA AND THE APPLICABLE NOTICE OF PRIVACY PRACTICES. THIS NOTICE APPLIES TO CONSUMER HEALTH DATA COLLECTED OUTSIDE THAT SCOPE.

1. CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT

• Individual health conditions, treatments, diseases, symptoms, and diagnoses
• Medications, prescriptions, dosage, and refill activity
• Bodily functions, vital signs, measurements, weight, and BMI
• Efforts to seek health care services, including intake submissions and consultation scheduling
• Information that identifies you as seeking weight management, hair growth, hormone, or longevity treatments
• Data that can be used to infer any of the above, including inferences derived from your interactions with the Services

2. SOURCES OF CONSUMER HEALTH DATA

Directly from you; from the licensed Providers and pharmacies who treat you and fill your prescriptions; from laboratory partners; from our patient intake and portal platform; and from your interactions with our website.

3. PURPOSES FOR COLLECTION AND USE

To provide and coordinate the Services you request; to enable clinical evaluation and prescribing by a licensed Provider; to arrange dispensing, shipping, and refills; to bill and process payments; to communicate with you about your care; to monitor safety and adverse events; to improve the Services; to prevent fraud and diversion; and to comply with law.

4. THIRD PARTIES AND AFFILIATES WITH WHOM WE SHARE CONSUMER HEALTH DATA

We share consumer health data with the following categories of recipients:

• Affiliated professional entities and the independently licensed Providers who evaluate and treat you
• Compounding and dispensing pharmacies that fill and ship your prescriptions
• Laboratory partners that perform ordered testing
• Our patient intake, electronic health record, and patient portal platform
• Cloud hosting and infrastructure providers
• Payment and financing processors
• Shipping and logistics providers
• Customer support, email, and text messaging platforms

To request the specific named entities within any category above, and an active contact for each, email [email protected] and we will provide the current list.

5. WE DO NOT SELL CONSUMER HEALTH DATA

WE DO NOT SELL CONSUMER HEALTH DATA. WE WILL NOT SELL CONSUMER HEALTH DATA WITHOUT FIRST OBTAINING YOUR VALID, WRITTEN AUTHORIZATION THAT MEETS THE REQUIREMENTS OF APPLICABLE LAW.

6. NO GEOFENCING

We do not use geofencing technology within 1,750 feet of any in-person health care facility to identify or track consumers seeking health care services, collect consumer health data, or send notifications, messages, or advertisements related to consumer health data or health care services.

7. YOUR RIGHTS REGARDING CONSUMER HEALTH DATA

You have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data, including a list of all third parties and affiliates with whom we have shared it and an active email or contact for each;
• Withdraw consent to the collection and sharing of your consumer health data; and
• Delete your consumer health data. Upon a valid deletion request, we will delete the data from all of our records, including archived and backup systems, and will notify all affiliates, processors, contractors, and other third parties with which we have shared the data of the deletion request.

Deletion limits. We may retain consumer health data where retention is required by federal or state law, including medical and pharmacy record retention requirements. Where we cannot delete, we will tell you which data we retained and the legal basis.

8. HOW TO EXERCISE THESE RIGHTS

Email [email protected], or write to Privacy Officer, Aspen Aesthetics, LLC dba Fifty 410 Health, 1630 W Prosper Trail, Suite 620, Prosper, Texas 75078.

We will respond within 45 days, with one 45-day extension where reasonably necessary. Requests are free for up to two per twelve-month period. If we deny your request, you may appeal to [email protected] with the subject “Consumer Health Data Appeal”; we will respond within 45 days and, if the appeal is denied, provide instructions for contacting your state Attorney General.

Washington residents may also file a complaint with the Washington State Attorney General at atg.wa.gov/file-complaint.