Privacy & Terms

Who We Are

ELANZA Wellness Inc (“we”, “our”, “us” or “ELANZA Wellness”) is committed to protecting and respecting your privacy. ELANZA Wellness is a Delaware registered corporation with offices at: 2042 Bush St, San Francisco, California 94115, USA. Our data protection officer, for the purpose of applicable data protection law, is Catherine Hendy, who may be contacted at info@elanzawellness.com. If you have any questions or would like to discuss further, you can email us. You can find more information about us by clicking here: www.elanzawellness.com.

Scope of This Privacy Policy

This Privacy Policy applies to your use of our services ("Services"), including but not limited to:

- Visiting our website at www.elanzawellness.com, or any website of ours that links to this privacy notice.

- Using other websites or web application(s) associated with us or any other application of ours that links to this privacy notice.

- Using our consumer self-help app, EverythingEndo, available on iOS, Google Play, and as a web app, to help manage endometriosis.

- Engaging with us in other related ways ― including any sales, marketing, or events.

In addition, individually identifiable information that you provide to us for purposes of obtaining healthcare from ELANZA Wellness (such information is also referred to as “Protected Health Information” or “PHI”) will also be subject to ELANZA Wellness’s Health Insurance Portability and Accountability Act Notice of Privacy Practices (the “HIPAA Notice”), which is available below. The HIPAA Notice describes how ELANZA Wellness can use and share your PHI and also describes your rights with respect to your PHI. To the extent that there is a conflict between this Privacy Policy and the HIPAA Notice with respect to PHI, the HIPAA Notice will prevail.

Our Approach

We take the collection, usage, and security of your personal data seriously. We can only use your personal data under law if we have a good reason for doing so. The law provides examples of those reasons, which include:

- To perform or fulfill a contract we have with you.

- If we have a legal duty.

- If it is within our legitimate business interest.

- If there is a public interest reason for doing so.

- If you have given your consent.

A legitimate interest is when we have a business or commercial reason to use your information. But even then, it must not unfairly go against what is right and best for you. If we rely on our legitimate interest, we will tell you what that is.

Questions or Concerns?

Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, contact us at info@elanzawellness.com.

Summary of Key Points

- What Personal Information Do We Process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with ELANZA Wellness and the Services, the choices you make, and the products and features you use.

- Do We Process Any Sensitive Personal Information? We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law.

- Do You Receive Any Information From Third Parties? We may receive information from public databases, marketing partners, social media platforms, and other outside sources.

- How Do You Process My Information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.

- In What Situations and With Which Types of Parties Do We Share Personal Information? We may share information in specific situations and with specific categories of third parties. More information is provided below.

- How Do We Keep Your Information Safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

- What Are My Rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. More information is provided below.

- How Do I Exercise My Rights? The easiest way to exercise your rights is by making a data subject request by contacting us at info@elanzawellness.com. We will consider and act upon any request in accordance with applicable data protection laws.

Types of Personal Data We Collect About You

- Demographic data (e.g. date of birth)

- Lifestyle information (e.g. nutrition or sleep habits)

- Financial data (for payment)

- Health data (e.g. symptoms and treatments)

- Complaints information

- Technical Information (IP / Cookies)

- Location Data

- User login data

You may give us information about you when filling in forms on our website https://www.elanzawellness.com/ (“our site”) or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you subscribe to our services, complete a survey, sign up to a newsletter, post material on our site, report a problem with our site, or request further services. The information you give us may include your name, address, email address, phone number, personal description, and health conditions.

Important: For data privacy reasons, we will only collect information from you directly or via your authorized representative who has confirmed that they are authorized to provide this information on your behalf.

Information We Collect About You

We may collect the following kinds of information when you use the Services:

Information You Provide Directly to Us. For certain activities, such as when you register, use our platform or telehealth services, subscribe to our communications or alerts, or contact us directly, we may collect some or all of the following types of information:

- Contact information, such as your full name, email address, mobile phone number, and address.

- Username and password.

- Payment information, such as your credit card number, expiration date, and credit card security code.

- Information about your names, address details, authorized representative information, health information, and payment card information.

- For health care provider specialists featured, information about your employment, such as your job title, practice area, primary specialty, medical license status, gender, date of birth, languages spoken, educational background, address, photograph, social security number, Tax ID, NPI number, professional license information, and bank account information.

- Personal health information.

- Any other information you provide to us.

Information We Collect Automatically. We may collect certain information automatically when you use our Services, such as your Internet protocol (IP) address, device and advertising identifiers, browser type, operating system, Internet service provider, pages that you visit before and after using the Services, the date and time of your visit, information about the links you click and pages you view within the Services, and other standard server log information. We may also collect certain location information when you use our Services, such as your computer’s IP address, your mobile device’s GPS signal, or information about nearby WiFi access points and cell towers. We may use cookies, pixel tags, Local Shared Objects, and similar technologies to automatically collect this information.

Information We Obtain from Your Health Care Providers and Other Sources. We do not routinely collect this information. However, in certain circumstances and only with your express consent we may collect medical records from your past, current, and future health care providers to inform data analysis and research. This may include information about your diagnosis, previous treatments, general health, laboratory and pathology test results and reports, social histories, any family history of illness, and records about phone calls and emails related to your illness.

What Do We Use Your Personal Information For?

We generally use the information we collect online to:

- Provide and improve the Services.

- Contact you.

- Fulfill your requests for products, services, and information.

- Send you information about additional clinical services or general wellness from us or on behalf of our affiliates and trusted third-party partners.

- Analyze the use of the Services and user data to understand and improve the Services.

- Customize the content you see when you use the Services.

- Conduct research using your information, which may be subject to your separate written authorization.

- Prevent potentially prohibited or illegal activities and otherwise in accordance with our Terms of Use (which can be found at https://www.elanzawellness.com).

- For any other purposes disclosed to you at the time we collect your information or pursuant to your consent.

We may also use your information in the following ways:

- To personalize your experience and to allow us to deliver the type of content and product offerings in which you are most interested.

- Communicate with potential and existing users for marketing purposes.

- Provide and improve quality of services to users.

- Analyze and improve our website in order to better serve you.

- Respond to your customer service requests.

- Send periodic emails regarding your order or other products and services.

- Administer a contest, promotion, survey, or other site feature.

- Quickly process your transactions.

- Marketing and site metrics performance.

- Email marketing (with your consent).

- Accounting purposes.

How We Share Your Personal Data

We are committed to maintaining your trust, and we want you to understand when and with whom we may share the information we collect:

- Health Care Providers, Insurance Companies, and Other Treatment and Payment Purposes. With your express consent, we may share your information with other health care providers involved in your care, including your doctors, hospitals, pharmacies, and other health care providers.

- Vendors and Service Providers. We may share your information with vendors and service providers that provide services to us or perform functions on our behalf.

- Legal Compliance and Protection of ELANZA Wellness and Others. We may disclose your information to comply with applicable laws, regulations, requests from law enforcement, regulatory bodies, or other governmental authorities, to enforce our agreements, and to protect and defend the rights or safety of ELANZA Wellness, our affiliates, or third parties.

- Business Transfers. If we are involved in a merger, acquisition, due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of services to another provider, your information may be transferred as part of such a transaction as permitted by law and/or contract.

- Aggregate or De-Identified Information. We may share aggregate or de-identified information with third parties for research, marketing, analytics, and other purposes, provided such information does not identify a particular individual.

Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal data, including:

- Access and Data Portability. The right to access the information we hold about you and to obtain a copy of that information in a structured, commonly used, and machine-readable format.

- Correction. The right to request that we correct any inaccurate or incomplete information.

- Deletion. The right to request that we delete the information we hold about you, subject to certain exceptions.

- Restriction of Processing. The right to request that we restrict the processing of your information.

- Objection to Processing. The right to object to our processing of your information, including for marketing purposes.

- Withdrawal of Consent. Where we rely on your consent to process your information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at info@elanzawellness.com. We will consider and act upon any request in accordance with applicable data protection laws.

Retention of Your Personal Data

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Data Security

We have implemented appropriate technical and organizational measures to protect the personal data we process. These measures are designed to provide a level of security appropriate to the risk of processing your personal data. However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee that your personal data will be completely secure from unauthorized access or use.

Children's Privacy

Our Services are not intended for use by children under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have inadvertently received personal data from a child under the age of 18, we will delete such information from our records.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, and other factors. When we make changes to this Privacy Policy, we will notify you by updating the "Last Updated" date at the beginning of this Privacy Policy and posting the revised Privacy Policy on our website. We encourage you to review this Privacy Policy periodically to stay informed about our collection, use, and sharing of your personal data.

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email: info@elanzawellness.com

Mail: ELANZA Wellness Inc

2042 Bush St

San Francisco, California 94115, USA

We will respond to your inquiries in accordance with applicable data protection laws.

---

Data Controller Contact Information

- Email: info@elanzawellness.com

To access or manage your personal information, please log in to your account or contact us at info@elanzawellness.com. You can update your preferences, correct information, or request deletion of your account.

We retain personal data as necessary for the duration of the purpose outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

HIPAA Notice of Privacy Practices

Effective Date: May 20, 2024

This Notice Describes How Medical Information About You May Be Used and Disclosed and How You Can Get Access to This Information. Please Review It Carefully.

Who We Are

ELANZA Wellness Inc (“we”, “our”, “us”) is committed to protecting your health information. This Notice applies to all protected health information (PHI) created, received, maintained, or transmitted by ELANZA Wellness.

Our Responsibilities

We are required by law to maintain the privacy and security of your protected health information (PHI). We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information. We must follow the duties and privacy practices described in this Notice and provide you with a copy. We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

Your Rights

When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.

- Get an electronic or paper copy of your medical record: You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. Ask us how to do this.

- Ask us to correct your medical record: You can ask us to correct health information about you that you think is incorrect or incomplete. We may say “no” to your request, but we’ll tell you why in writing within 60 days.

- Request confidential communications: You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address.

- Ask us to limit what we use or share: You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request, and we may say “no” if it would affect your care.

- Get a list of those with whom we’ve shared information: You can ask for a list (accounting) of the times we’ve shared your health information for six years prior to the date you ask, who we shared it with, and why.

- Get a copy of this privacy notice: You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically.

- Choose someone to act for you: If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.

- File a complaint if you feel your rights are violated: You can file a complaint if you feel we have violated your rights by contacting us at info@elanzawellness.com. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

How We Use and Disclose Your Information

We typically use or share your health information in the following ways:

- Treatment: We can use your health information to produce symptom management recommendations or share it with professionals who are treating you.

- Payment: We can use and share your health information to bill and get payment from health plans or other entities.

- Health Care Operations: We can use and share your health information to run our practice, improve your care, and contact you when necessary.

Other Uses and Disclosures

We are allowed or required to share your information in other ways – usually in ways that contribute to the public good, such as public health and research. We have to meet many conditions in the law before we can share your information for these purposes. For more information, see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html.

- Public Health and Safety: We can share health information about you for certain situations such as preventing disease, helping with product recalls, reporting adverse reactions to medications, reporting suspected abuse, neglect, or domestic violence, or preventing or reducing a serious threat to anyone’s health or safety.

- Research: We can use or share your information for health research.

- Comply with the Law: We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.

- Respond to Organ and Tissue Donation Requests: We can share health information about you with organ procurement organizations.

- Work with a Medical Examiner or Funeral Director: We can share health information with a coroner, medical examiner, or funeral director when an individual dies.

- Address Workers’ Compensation, Law Enforcement, and Other Government Requests: We can use or share health information about you for workers’ compensation claims, law enforcement purposes or with a law enforcement official, health oversight agencies for activities authorized by law, and for special government functions such as military, national security, and presidential protective services.

- Respond to Lawsuits and Legal Actions: We can share health information about you in response to a court or administrative order, or in response to a subpoena.

Changes to the Terms of This Notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on our web site.

Contact Information

If you have any questions about this Notice or need further information, please contact us at:

Email: info@elanzawellness.com

Mailing Address: ELANZA Wellness Inc, 2042 Bush St, San Francisco, California 94115, USA

This HIPAA Notice of Privacy Practices applies to ELANZA Wellness Inc.

# 1. Acceptance of Terms

By accessing or using the EverythingEndo app ("the App"), you agree to comply with and be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, you must not use the App.

# 2. Description of Services

EverythingEndo provides a consumer self-management platform for endometriosis, offering on-demand classes, educational content, and tracking tools ("Services"). These Services are designed to support users in managing their condition but are not a substitute for professional medical advice, diagnosis, or treatment.

# 3. Eligibility

You must be at least 18 years old to use the App. By using the App, you represent and warrant that you meet this age requirement.

# 4. User Accounts

To access certain features of the App, you must create an account. You agree to:

- Provide accurate, current, and complete information during the registration process.

- Maintain the security of your password and accept all risks of unauthorized access to your account.

- Notify us immediately if you discover or suspect any security breaches related to the App or your account.

# 5. Privacy Policy

Your use of the App is also governed by our Privacy Policy, which is incorporated into these Terms by reference. Please review our Privacy Policy to understand our practices regarding your personal information.

# 6. User Conduct

You agree not to:

- Use the App for any unlawful purpose or in violation of any local, state, national, or international law.

- Post or transmit any content that is harmful, abusive, defamatory, obscene, or otherwise objectionable.

- Interfere with or disrupt the operation of the App or any servers or networks connected to the App.

- Attempt to gain unauthorized access to any part of the App or to other accounts, computer systems, or networks connected to the App.

# 7. Intellectual Property

All content, features, and functionality of the App, including but not limited to text, graphics, logos, and software, are the exclusive property of EverythingEndo or its licensors and are protected by intellectual property laws. You agree not to reproduce, distribute, modify, or create derivative works of any material from the App without prior written permission.

# 8. Subscriptions and Payments

Certain features of the App may require a subscription or one-time payment. By subscribing or making a payment, you agree to our pricing and payment terms. All payments are non-refundable unless otherwise stated.

# 9. Disclaimers

The App and Services are provided "as is" and "as available" without warranties of any kind, either express or implied. We do not warrant that the App will be uninterrupted or error-free, nor do we make any warranty as to the accuracy, completeness, or reliability of any information available through the App.

# 10. Limitation of Liability

To the fullest extent permitted by law, EverythingEndo shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses resulting from:

- Your use or inability to use the App.

- Any unauthorized access to or use of our servers and/or any personal information stored therein.

- Any interruption or cessation of transmission to or from the App.

# 11. Indemnification

You agree to indemnify, defend, and hold harmless EverythingEndo and its affiliates, officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses, including reasonable attorneys' fees, arising out of or in any way connected with your use of the App or violation of these Terms.

# 12. Changes to Terms

We reserve the right to modify these Terms at any time. If we make changes, we will provide notice through the App or by other means. Your continued use of the App after such notice constitutes your acceptance of the revised Terms.

# 13. Termination

We may terminate or suspend your account and access to the App at our sole discretion, without prior notice or liability, for any reason, including if you breach these Terms.

# 14. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which EverythingEndo is based, without regard to its conflict of law principles.

# 15. Contact Us

If you have any questions about these Terms, please contact us at info@elanzawellness.com.

---

By clicking "Accept" at sign-up or using the EverythingEndo app, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.

Data Recovery Policy

1. Purpose

The purpose of this Data Recovery Policy is to outline the procedures for recovering data in the event of data loss due to system failures, accidental deletion, or other unforeseen events. This policy ensures that EverythingEndo can quickly and efficiently restore user data to minimize disruption and maintain service continuity.

2. Scope

This policy applies to all user data stored within the EverythingEndo app, including but not limited to tracking information, educational content, and account details.

3. Backup Procedures

Regular Backups: All user data is backed up daily to secure, off-site storage locations.
Backup Retention: Backups are retained for a period of 30 days to ensure multiple recovery points.
Backup Security: Backups are encrypted and stored in compliance with relevant data protection regulations to ensure data integrity and confidentiality.

4. Data Recovery Procedures

In the event of data loss, the following steps will be taken to recover user data:

Incident Identification: The data loss incident is identified and reported to the IT support team.
Assessment: The IT support team assesses the extent of the data loss and identifies the most recent, intact backup.
Notification: Users affected by the data loss are notified of the incident and the expected recovery time.
Recovery: The IT support team initiates the data recovery process using the latest backup.
Verification: Once the data is restored, integrity checks are performed to ensure the data is accurate and complete.
Resolution: Users are informed that the data recovery is complete, and normal operations are resumed.

5. User Responsibilities

Data Accuracy: Users are responsible for ensuring the accuracy of the data they enter into the App.
Reporting Issues: Users should promptly report any issues related to data access or integrity to support@everythingendo.com.

6. Review and Testing

Regular Reviews: The data recovery procedures are reviewed annually to ensure their effectiveness and compliance with best practices.
Testing: Periodic recovery tests are conducted to validate the effectiveness of backup and recovery processes.

7. Policy Updates

EverythingEndo reserves the right to update this Data Recovery Policy as necessary. Users will be notified of any significant changes to the policy.

8. Contact Information

For any questions or concerns regarding this Data Recovery Policy, please contact our support team at info@elanzawellness.com.