6. Use and Disclosure of Non-Personal Information

Skin Script may collect, use, share, transfer and otherwise process de-identified and aggregated information that it receives or creates for any purposes in its sole discretion, in compliance with applicable laws. Skin Script is the sole and exclusive owner of such de-identified and aggregated information, including if Skin Script de-identifies Personal Information so that it is no longer considered Personal Information under applicable laws.

7. Information We Do Not Intend to Collect

Sensitive Information. “Sensitive Information” is any data that reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or that involves genetic or biometric data or data concerning health or sexual orientation. We do not intend to collect any Sensitive Information from you. We do not intend to collect this information. Please do not provide Sensitive Information to us.

Children. The Site is not directed at children under 16 years of age. We do not knowingly collect, use, or share Personal Information from children under 16. If a parent or legal guardian learns that their child provided us with Personal Information without his or her consent, please contact us and we will make commercially reasonable attempts to delete such Personal Information.

8. Cookies and Other Tracking Technologies

Cookies & Other Tracking Technologies.

We use cookies, web beacons, pixel tags and other tracking technologies (collectively “Cookies”) on our Site. A Cookie is a small text file that our Site saves onto your computer or device when you use the Site that provides us certain information about your activities. Cookies allow the Site to remember your actions and preferences and recognize you or your browser, along with some information you provided. Web beacons / pixel tags are small graphics on a webpage that monitor your activity when viewing a webpage.

We use these tools to make our Site function properly; provide personalized experiences; tailor our interactions with you; help with our marketing efforts; provide us with valuable data and statistics about the usage and effectiveness of our Site and to help us improve our Site; and help us improve our products and services.

Analytics We use certain cookies and other technologies to perform analytics of the operation of our Site.

• Google Analytics. We may use Google Analytics to collect and process information about your use of the Site. Google sets Cookies on your browser or device, and then your web browser will automatically send information to Google. Google uses this information to provide us with reports that we use to better understand and measure how users interact with our Site. To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ sites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Analytics Cookie Usage on Websites.

Targeted Advertising

Skin Script uses third parties to help us provide targeted advertising (also called "online behavioral advertising" or "interest-based advertising"). Targeted Advertising is the practice of tracking an individual's online activities over time, including searches the person conducts, webpages visited and content viewed in order to deliver targeted advertising based on the person's interests. Specifically, we use

• Google Analytics’ Advertising Features. We have enabled and implemented the following Google Analytics Advertising Feature DoubleClick. To opt out of remarketing advertising provided through Google, to customize your ad preferences, or to limit Google’s collection or use this information, visit Google’s Safety Center and Google’s Ad Settings and follow Google’s personalized ad opt-out instructions. Opting out will not affect your use of the Services.


• Meta’s Advertising Tools. We use the remarketing services of provided by Meta (previously Facebook) on our Site. We use the Meta Custom Audiences to deliver targeted advertisements to website visitors across Meta owned social media platforms, including Facebook and Instagram, based on email addresses that we have collected. You may learn more about Meta Custom Audiences by visiting here. To learn more about Meta’s Privacy Policy including their services and your rights, please click here.

Maps and Video

Maps. The Site may contain maps provided by third parties and/or service providers for your convenience. Skin Script and such other parties may collect data about how you interact with the maps. For example, Google may collect usage data on maps embedded on the Site. Even if you do not interact with the maps, Google may still collect certain information about your interactions with our Portal if you are signed into your Google account when accessing our Portal. Please see Google’s privacy policy for more information.

Videos; Embedded Content. The Site may contain videos and embedded content provided by YouTube, Vimeo and other third parties, including visible content and/or feeds scripts embedded in the Site’ code. YouTube, Vimeo and such third parties may collect data about how you interact with such content. Specifically, our use of YouTube content requires us to implement certain application programming interfaces (APIs) from YouTube, which allow for data collection, disclosure and use by YouTube pursuant to the Google Privacy Policy available here. In addition, if you are signed into your Vimeo account when you visit our Site, Vimeo may associate information collected when you visit our Site with your account. By watching the videos and interacting with such content, you agree to the collection and use of such data. You may revoke YouTube’s access to your data by visiting the Google security settings page available here. Please see Vimeo's privacy policy to learn how Vimeo collects, uses and shares Personal Information.

9. Your Privacy Choices.

We provide you with several choices related to how we collect and use your Personal Information for marketing purposes, including:

1. Marketing Communications; Opt-Out. You may opt out of marketing emails by using the “unsubscribe” link in each email. To opt out of receiving marketing text messages, reply STOP to any text messages you receive from us. (We may send one additional text message to confirm your request). To opt out of other communications, please contact us as set forth in the Contact Us section below. Opting out of marketing communications does not opt you out of other, non marketing communications and messaging.


2. Disabling Cookies. Most browsers automatically accept cookies. You can disable this function, but disabling cookies may impact your use and enjoyment of the Site. Not all features or functions of the Site may work properly if you disable cookies. You cannot disable all cookies, such as cookies that are essential to the functioning of the Site.


3. Change Preferences. To change your preferences with respect to certain online ads and to obtain more information about third-party ad networks and online behavioral advertising, visit National Advertising Initiative Consumer opt-out page or the Digital Advertising Alliance Self-Regulatory Program. Changing your settings with individual browsers or ad networks will not necessarily carry over to other browsers or ad networks. As a result, depending on the opt-outs you request, you may still see our ads.


4. Account. If you have an account with us, you may update certain Personal Information on your account by signing-in and making changes. These changes may not take effect immediately.

10. Social Media

We are active on social media, including Facebook, Instagram, YouTube, and LinkedIn (“Social Media”). Anything you post on Social Media is public information and therefore is not considered Personal Information and will not be treated confidentially. We may post, re-post, or otherwise share on the Site and our Social Media pages any comments or content that you post on our Social Media pages.

Your use of Social Media is governed by the privacy policies and terms of the providers that own and operate those websites and not by this Policy. We encourage you to review those policies and terms.

12. Data Security

We use commercially reasonable technical and organizational measures to help secure Personal Information against loss, misuse, unauthorized access, and alteration appropriate to the type of Personal Information processed. If a breach of your Personal Information occurs, we will notify you of the breach if required under applicable law.

12. Access from Outside the United States

If you access the Site from outside the United States, please be aware that Personal Information may be transferred to, stored in, and processed in the United States. Certain governmental authorities may not consider the level of protection of Personal Information in the United States to be equivalent to that required by other jurisdictions.

13. Third-Party Websites

The Site may link to, or be linked to, websites not controlled by us. We are not responsible for third parties’ privacy policies or practices. This Policy does not apply to any third-party websites or to any data that you provide to third parties. You should read the privacy policy for each website that you visit.

14. Additional Terms Applicable to California Residents Only

YOUR CALIFORNIA PRIVACY RIGHTS.

This Section provides additional terms that apply to California residents. Under the California Consumer Privacy Act of 2018, as amended, including by the California Privacy Rights Act, (“CCPA”), California residents have certain additional privacy rights, with certain exceptions. If you live in California, you may exercise those California privacy rights listed below. In the event of a conflict between this Section and the remainder of this Policy, this Section shall take precedence for California residents. Capitalized terms that are not defined elsewhere in this Policy have the meanings set forth in the CCPA.

Categories of Personal Information We Have Collected. During the past 12 months, we have collected the following categories of Personal Information: Identifiers, Customer Records, Commercial Information, Internet Activity, Geolocation Data, and Professional Information.

Categories Of Personal Information Disclosed For A Business Purpose. During the past 12 months, we have disclosed the following categories of Personal Information for a Business Purpose: Identifiers, Customer Records, Commercial Information, Internet Activity, Geolocation Data, and Professional Information.

Categories of Personal Information Shared. In the last 12 months we have shared the following categories of Personal Information with third parties: Identifiers, Internet Activity and Geolocation Data.

Description of Your California Privacy Rights.

Right to Know: You have a right to request that we disclose certain information about you and our collection and use of your Personal Information over the last 12 months.

Once we receive your request and confirm your identity, we will disclose to you as required under the CCPA:

• The categories of Personal Information we collected from or about you;
• The categories of sources from which the Personal Information was collected;
• The Business or Commercial Purpose for collecting, sharing, or selling your Personal Information;
• The categories of Third Parties with which we have disclosed your Personal Information;
• The specific pieces of Personal Information we have collected about you;
• The categories of Personal Information that we sold, shared or disclosed for a Business Purpose and
• The categories of Third Parties to whom it was disclosed for a Business Purpose.

Right to Request Deletion: You have a right to request that we delete Personal Information we collected from or about you. We will comply with such requests and direct our service providers or third parties to do the same, subject to certain exceptions permitted by applicable law.

Right to Correct: You have the right to correct inaccurate Personal Information that we collect about you. If we receive a verifiable request, we will consider it, taking into account the nature of the Personal Information and the purposes of the processing of the Personal Information. We may deny your request if we are unable to verify your identity or if we determine that the contested personal information is more likely than not accurate based on the totality of the circumstances. We may request that you provide us with documentation that is relevant to your request.

Please note, we may choose to delete the contested personal information as an alternative to correcting it if doing so would not negatively impact you or your consent to our deletion.

Non-Discrimination. You have a right to not receive discriminatory treatment for exercising any of your rights under the CCPA.

How to Exercise Your California Privacy Rights. To exercise your rights under the CCPA, you may contact us at any of the following:

• Email: privacy@skinscriptrx.com
• Phone Number: 480-543-1121
• Mail: 6150 W. Chandler Blvd. Ste #28
• Chandler, AZ 85226

Right to Opt-Out of the Sale or Sharing of Your Personal Information

California residents may direct us not to sell or share your Personal Information at any time (this is your right to “opt-out”).

HONORING OPT-OUT PREFERENCE SIGNALS

As described above, we work with certain advertising partners to show ads that are targeted to your interests. These activities may be considered "sharing" of your personal information under California law. To opt out of these activities, you must either:

Submit a Form. You may request to opt- out using our online form and adjust settings for each device and browser you use with the Site, or Completing our webform at: Opt-out form

Opt-out Preference Signals. California residents may opt out by sending an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) on the browsers or extensions that support such a signal. To download and use a browser supporting the GPC browser signal, click here.

If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. If you use the GPC signal and do not have an account or are not signed into your account, we will only associate the GPC signal with your browser because the link between your browser and account is not known to us.

Who May Exercise Your Rights. If you are a California resident, only you or a person that you authorize to act on your behalf may make a request related to your Personal Information. See the section titled "Using an Authorized Agent" for more information. A parent or legal guardian may make a request on behalf of their child.

Verifiable Consumer Request. You must provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Information, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request.

When we receive your request to exercise your rights under the CCPA, we will: (a) acknowledge receipt of your request; (b) try to match the information you provide in making the request with information we already maintain about you; (c) if required to verify your identity, we may ask you to provide additional information, including Personal Information; and (d) consider various factors when determining how to verify your identity, such as the sensitivity and value of the data, the risk of harm, the likelihood of fraud, etc.

We will only use Personal Information we collect during the verification process for the purpose of verifying your identity. If you maintain an account with us, we may use that account to respond to your request and/or verify your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why.

When We Will Respond To Your Request. We will try to respond to your request within 45 days. If we require additional time, we will inform you of the reason and extension period. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. For data portability requests, we will select a format to provide your Personal Information to you. We may charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded.

Using an Authorized Agent. You have a right to submit requests to exercise your rights under the CCPA through an authorized agent. If you choose to use an authorized agent, you must (a) provide signed, written permission to that authorized agent to submit requests on your behalf, (b) verify your identity directly with the Company, and (c) directly confirm with Company that you granted permission to the authorized agent to submit the request on your behalf. For clarity, you are required to verify the identity of both you and the authorized agent.

We may deny a request from an authorized agent if we do not have proof that they are authorized by you to act on your behalf.

Shine the Light.
Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to obtain: (a) a list of all third parties to whom we may have disclosed your Personal Information within the past year for direct marketing purposes, and (b) a description of the categories of Personal Information disclosed, by contacting us per the “Contact Us” section below.

15. Contact Us

• Skin Script
• Attn: Privacy Department
• 6150 W. Chandler Blvd. Ste #28
• Chandler, AZ 85226
• 480-543-1121
• privacy@skinscriptrx.com