FAMIA PRIVACY POLICY

1. About This Policy

787 Cloisters, Inc. (“Famia,” “we,” “our,” or “us”) operates the Famia website and related services (the “Service”).

Famia helps consumers discover cosmetic and aesthetic providers, request preliminary quotes or treatment information, upload photos and request details, and communicate with participating providers.

This Privacy Policy explains the information we collect, how we use and share it, and the choices available to you.

Famia is intended for users who are 18 years of age or older.

By using Famia, you acknowledge the practices described in this Privacy Policy. When applicable law requires separate consent for a particular use of sensitive information, we will ask for that consent separately.

2. Information We Collect

The information we collect depends on how you use Famia.

Account Information

When you create or use an account, we may collect information such as:

• Email address;
• Account or user identifiers;
• ZIP code or general location;
• Age-related information, such as age range or confirmation that you are 18 or older;
• Authentication and account-security information; and
• Preferences associated with your account.

We may also receive information necessary to authenticate your account if you choose to sign in through a third-party authentication provider.

Quote Requests, Photos, and Treatment Information

When you create or submit a request, we may collect:

• The treatment, procedure, or service you are interested in;
• Information about your goals, preferences, or concerns;
• Photos you choose to upload;
• Notes or other request details;
• ZIP code or general location;
• Quotes or responses from providers; and
• Information about your interactions with requests and providers.

Photos and information about your appearance, treatment interests, or concerns may be considered sensitive or health-related information under applicable law.

When you submit a quote request, Famia asks you to affirmatively consent to sharing your photos and request details with participating Famia providers so they can review and respond to your request.

Messages and Marketplace Activity

If you communicate through Famia, we may collect and store information such as:

• Message content;
• Conversation participants;
• Timestamps; and
• Information connecting a conversation to a request, provider, or account.

We may also collect information about your activity on Famia, such as requests submitted, quotes received, provider responses, selections, communications, and consultations, appointments, procedures, or other outcomes reported by users.

Information about an appointment or procedure may be based on information reported by users or activity through Famia and should not necessarily be understood as a provider's medical record.

Technical Information

We and our service providers may automatically receive information such as:

• IP address;
• Browser and device information;
• Approximate location;
• Authentication and session information;
• Server and request logs; and
• Security or diagnostic information.

3. Cookies and Similar Technologies

Famia uses cookies and similar technologies to operate, secure, and improve the Service.

These technologies may be used to:

• Keep you signed in;
• Authenticate accounts;
• Recover passwords;
• Preserve progress through certain forms or requests;
• Remember preferences;
• Manage notifications;
• Prevent fraud or abuse; and
• Support technical functionality.

We may also use browser storage, service workers, and similar technologies as necessary to provide Famia.

We may use third-party advertising platforms to promote Famia. If we use advertising or tracking technologies on the Service, we will provide disclosures and choices as required by applicable law.

4. How We Use Information

We may use information collected through Famia to:

• Operate and provide the Service;
• Create, authenticate, maintain, and secure accounts;
• Process quote requests;
• Connect consumers with participating providers;
• Enable providers to evaluate and respond to requests;
• Facilitate communications;
• Send account, request, authentication, and service notifications;
• Provide customer support;
• Verify provider information or participation;
• Detect and prevent fraud, spam, abuse, unauthorized access, and security incidents;
• Maintain and troubleshoot Famia;
• Understand marketplace activity;
• Improve Famia's features and user experience;
• Conduct internal analytics and research;
• Develop new products, services, and features;
• Create aggregated or de-identified information;
• Enforce our policies and agreements;
• Protect Famia, our users, providers, and others;
• Comply with applicable law and legal process; and
• Carry out other purposes disclosed to you when information is collected.

Product Development and New Features

As Famia develops, we may introduce technology-enabled features that help organize, understand, or generate information from content you choose to provide.

These may include features related to matching, recommendations, pricing, analytics, or other improvements to the user experience.

If a new feature involves a materially different use of your photos or other sensitive information, we will provide additional notice and obtain consent where required by applicable law.

Information generated or derived from personal information may itself remain personal or sensitive information when it remains linked or reasonably linkable to an individual.

5. How We Share Information

Participating Famia Providers

When you submit a request and provide consent, participating providers in the applicable Famia market may receive information reasonably necessary to evaluate and respond to your request.

This may include:

• Photos you upload;
• Treatment or service interests;
• Notes or request details;
• Approximate location or ZIP code; and
• Other information you choose to include with your request.

Your Famia account email address is not shared with a provider merely because that provider is able to view your request.

Participating providers are contractually required to use consumer request information only for permitted purposes related to evaluating and responding to the applicable Famia request.

Providers are prohibited from using your photos or request information for unrelated advertising, social media, unrelated marketing, or unrelated model training.

Except as permitted in connection with providing services through Famia or otherwise authorized, providers are also contractually restricted from downloading, copying, retaining, publishing, redistributing, or otherwise reusing user-uploaded photos and request information.

While Famia imposes contractual restrictions on providers, no technical system can completely prevent a recipient from capturing information displayed on a device.

Service Providers

We may share information with companies that help us operate Famia, such as providers of:

• Hosting and data storage;
• Authentication;
• Email delivery;
• Mapping and location services;
• Security;
• Notifications;
• Technical support; and
• Customer communications.

These companies may process information as necessary to provide services to Famia.

Legal and Business Purposes

We may disclose information when reasonably necessary to comply with law or legal process, protect users or Famia, investigate fraud or security incidents, or enforce our agreements.

Information may also be transferred in connection with a merger, acquisition, financing, sale of assets, or similar business transaction.

We may also share information when you direct us to do so or otherwise provide consent.

6. Personal Information Sales and De-Identified Information

Personal Information

We do not currently sell personal information.

We do not sell or license user-uploaded photos or sensitive health-related personal information.

Sharing information with participating providers for the purpose of responding to a request you submit through Famia is part of providing the Famia Service.

If our practices change, we will update this Privacy Policy and provide any notice, consent, or opt-out rights required by applicable law.

Aggregated and De-Identified Information

We may create information that has been aggregated or de-identified so that it cannot reasonably be linked to you.

We may use this information to:

• Understand marketplace trends;
• Improve Famia;
• Conduct research and analytics;
• Develop new products and services; and
• Create business or industry insights.

Subject to applicable law, we may also share or license aggregated or de-identified information for research, analytical, business, or commercial purposes.

User-uploaded photos themselves are not included in datasets that we sell or license.

If information derived from photos or other content is used for analytics, research, or business insights, it will be aggregated or de-identified so that it cannot reasonably be linked to an identifiable individual.

Where we maintain information as de-identified, we will take reasonable measures designed to maintain it in de-identified form.

7. Data Retention and Deletion

We retain personal information for as long as reasonably necessary to provide Famia and for legitimate purposes such as security, fraud prevention, technical operations, dispute resolution, legal compliance, and business recordkeeping.

Different types of information may be retained for different periods.

Depending on the feature, you may be able to delete:

• Quote requests;
• Photos;
• Conversations; and
• Other account information.

You may also contact us to request deletion of personal information associated with your account.

Deleting information from the active Service may not immediately remove every copy. Limited information may remain temporarily in backups, logs, security systems, or records that we are permitted or required to retain.

When information is no longer reasonably necessary, we may delete, aggregate, or de-identify it.

8. Security

Famia uses administrative, technical, and organizational safeguards designed to protect personal information.

These may include:

• Encryption of information in transit;
• Authentication controls;
• Access controls;
• Restrictions on user and provider access;
• Infrastructure security measures; and
• Restrictions on privileged technical access.

Access through ordinary Famia features is generally limited to users who are authorized to access the relevant information.

Authorized personnel may access information when reasonably necessary for support, security, technical troubleshooting, abuse prevention, legal compliance, or operation of the Service.

No online service, database, or transmission method can be guaranteed to be completely secure.

9. Your Choices and Privacy Rights

Depending on the features available to you, you may be able to:

• Review or update certain account information;
• Manage notification preferences;
• Delete certain requests, photos, or conversations; and
• Opt out of promotional communications.

You may also contact us to request access to, correction of, or deletion of personal information associated with you.

Depending on where you live, applicable privacy laws may provide additional rights, including rights related to access, correction, deletion, portability, consent, or certain uses of personal information.

These rights may be subject to applicable legal thresholds, exceptions, verification requirements, and limitations.

To submit a privacy request, contact:

privacy@famiabeauty.com

We may take reasonable steps to verify your identity before completing a request.

We will not unlawfully discriminate against you for exercising applicable privacy rights.

10. Other Important Information

Healthcare Providers

Famia is a technology marketplace and does not itself provide medical diagnosis or treatment.

Participating clinics and healthcare professionals are independent from Famia and are responsible for their own professional services, clinical decisions, diagnosis and treatment, medical records, professional obligations, and privacy practices.

Information you provide through Famia may be health-related or sensitive.

A provider's subsequent collection or use of information may be governed by that provider's own privacy practices and applicable law.

Users Under 18

Famia is intended for users who are 18 years of age or older.

Users are required to confirm that they are at least 18 when creating an account.

We do not knowingly permit individuals under 18 to submit quote requests through Famia.

If we learn that we have collected personal information from an individual under 18 in circumstances inconsistent with our policies or applicable law, we will take appropriate steps to address the information.

Third-Party Services

Famia may link to or integrate with websites, applications, providers, or services operated by third parties.

This Privacy Policy does not govern the independent privacy practices of those third parties.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time as Famia, our technology, or applicable law changes.

When we do, we will update the Effective Date above.

Where required by applicable law, we will provide additional notice or request consent before making a material change to how certain personal information is used.

11. Contact Us

If you have questions about this Privacy Policy, Famia's privacy practices, or your personal information, please contact:

787 Cloisters, Inc. Famia privacy@famiabeauty.com