California Consumer Privacy Notice (CCPA)

I.Notice at Collection

At or before the point of collection, we provide California residents with notice of the categories of personal information we collect and the purposes for which the information will be used. This Notice serves that purpose. Most information collected through the Platform is collected to provide telehealth, support care coordination, fulfill prescriptions, process payments, and operate and secure the Platform.

II.Categories of Personal Information We Collect

In the past 12 months, we may have collected the following CCPA categories of personal information:

• Identifiers — name, postal address, email, phone, IP address, account identifiers, government-issued ID where required.
• Customer records — name, address, payment information.
• Protected classifications — age, sex, gender, marital status, where relevant to clinical care.
• Commercial information — products or services purchased, purchasing histories.
• Internet/network activity — browsing on the Platform, interactions with content and ads, device data.
• Geolocation data — approximate location derived from IP address.
• Audio, electronic, visual — call recordings (where lawful), chat transcripts, support session recordings.
• Professional/employment — limited information if you apply for a role.
• Inferences — preferences, characteristics, or behavior derived from the categories above.
• Sensitive personal information — account log-in plus password, precise geolocation (where applicable), and health information. See Section VI.

We do not sell personal information for money, but the CCPA's broad definition of “sharing” may include certain advertising and analytics activities. See Section VII.

Protected health information (“PHI”) handled by our healthcare partners is governed by HIPAA and is not subject to the CCPA to the extent HIPAA applies. Our Notice of Privacy Practices governs PHI.

III.Sources of Personal Information

• Directly from you when you use the Platform, submit forms, or communicate with us.
• Automatically through cookies, analytics tools, server logs, and device APIs.
• From healthcare providers and clinical partners involved in your care.
• From service providers (e.g., payment processors, identity verification).
• From advertising and analytics partners.

IV.Business Purposes for Collection

• Providing, maintaining, and improving the Platform and services.
• Connecting you with independent licensed clinicians and pharmacies.
• Processing payments and managing subscriptions.
• Communicating with you about your account, orders, and services.
• Security, fraud prevention, debugging, and audits.
• Compliance with legal, regulatory, and audit obligations.
• Limited advertising and analytics consistent with this Notice.

V.Categories Disclosed or Shared with Third Parties

We may disclose categories of personal information to the following recipients for business purposes:

• Independent licensed healthcare providers and clinical partners (for care delivery).
• Service providers and contractors (cloud hosting, payment processing, analytics, communications).
• Pharmacies, laboratories, and device fulfillment partners.
• Government authorities, regulators, and law enforcement when required by law.
• Parties to a corporate transaction (merger, acquisition, financing).
• Advertising and analytics partners, for purposes described in Section VII.

VI.Sensitive Personal Information

We collect sensitive personal information only to provide the services you request, comply with our legal obligations, prevent fraud, and ensure the security and integrity of the Platform. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA's exemptions.

California residents have the right to limit the use and disclosure of sensitive personal information to purposes permitted by the CCPA. See Section IX.

VII.Sale or Sharing of Personal Information

We do not sell personal information in exchange for money. However, the CCPA defines “sharing” to include disclosing personal information for cross-context behavioral advertising, even without monetary payment. To the extent our use of advertising or analytics technologies (such as cookies, pixels, or SDKs from Google or Meta) constitutes “sharing,” you may opt out at any time.

To opt out of sharing for cross-context behavioral advertising:

• Click the “Do Not Sell or Share My Personal Information” link in the website footer (where available).
• Enable the Global Privacy Control (GPC) signal in your browser. We honor GPC for browser-based interactions.
• Email privacy@playfulnights.com with the subject line “CCPA Opt-Out.”

We have not knowingly sold or shared personal information of minors under 16 in the past 12 months.

VIII.Retention

We retain personal information for as long as necessary to provide the services, comply with legal and regulatory obligations (including HIPAA where applicable), resolve disputes, and enforce our agreements. Retention periods are determined by the type of information, the purpose for which it was collected, and applicable legal requirements.

IX.Your California Privacy Rights

Subject to certain exemptions, California residents have the following rights:

• Right to know the categories and specific pieces of personal information collected, the sources, the purposes, and the third parties to whom it was disclosed.
• Right to delete personal information we have collected, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information.
• Right to limit the use and disclosure of sensitive personal information to purposes permitted by the CCPA.
• Right to non-discrimination for exercising your CCPA rights.
• Right to data portability — receive a copy of personal information in a portable format.

X.How to Submit a Request

You may submit a verifiable consumer request by any of the following methods:

• Email: privacy@playfulnights.com with the subject line “CCPA Request.”
• Phone: 888-298-6718
• Mail: Playful Nights, 30 N Gould St, Ste N, Sheridan, WY 82801

Please describe the request and identify the right(s) you wish to exercise. We will respond within the timeframes required by the CCPA.

XI.Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We may require the agent to provide written permission signed by you, and we may require you to verify your own identity directly with us.

XII.Verification of Requests

To protect your information, we verify the identity of every requester before disclosing or deleting personal information. Verification may require matching at least two pieces of information you provide with information we already have on file.

XIII.Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. We will not deny you services, charge you different prices, or provide a different level or quality of service based on your exercise of those rights, except as permitted by law.

XIV.Financial Incentives

We do not currently offer financial incentives in exchange for personal information.

XV.Shine the Light

California's “Shine the Light” law (Civil Code § 1798.83) permits California residents to request certain disclosures regarding our sharing of personal information with third parties for the third parties' direct marketing purposes. To submit such a request, email privacy@playfulnights.com with the subject line “Shine the Light Request.”

XVI.Do Not Track and Global Privacy Control

Some browsers send “Do Not Track” (DNT) signals. There is no industry standard for how websites should respond to DNT signals. We honor the Global Privacy Control (GPC) signal as an opt-out preference for sharing in browser-based contexts.

XVII.Children

The Platform is not directed to children under 18. We do not knowingly collect personal information from individuals under 16 for sale or sharing. If you believe we have collected information from a child, please contact us at privacy@playfulnights.com.

XVIII.Changes to This Notice

We may update this Notice from time to time. Updates will be posted with a revised “Last Updated” date. Continued use of the Platform after the effective date constitutes acceptance of the updated Notice.

XIX.Contact Information