Consumer health data privacy policy

Effective September 25, 2026.

Who this policy covers

This policy explains how EBO2.com ("we," "us," or "our") collects, uses, and shares consumer health data through ebo2.com and app.ebo2.com. It is written for Washington's My Health My Data Act, Nevada's Senate Bill 370, and the consumer health data provisions of Connecticut's data privacy law, and it covers the people those laws protect.

Consumer health data is personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. This policy adds to our privacy policy, which covers all the personal information we handle. Where the two differ on consumer health data, this policy controls.

Consumer health data we collect

The sites do not ask for health information. We collect consumer health data only when you choose to share it:

• Health details you share. A health condition or treatment that you mention in a comment, in a message you send through our contact form, or in a clinic claim.
• Account and contact data linked to them. The account data connected to a comment or clinic claim, such as your email address and, if you add one, your display name, and the name and email address you give with a message.

For example, if you mention in a comment that you have had a particular treatment, or tell us in a message about a condition you are considering EBO2 for, that information is consumer health data.

Comments, and clinic claims made from an account, are coming to app.ebo2.com. This policy will cover them from the day they launch.

We do not collect precise location, and we do not infer anything about your health from the pages you read.

Where it comes from

Only from you, directly: when you write a comment, send us a message, or submit a clinic claim. We do not get consumer health data from anyone else.

Why we collect and use it

We collect and use consumer health data only to:

• provide the feature you asked for, such as answering your message, reviewing your comment and publishing it if it is approved, or handling your clinic claim;
• moderate comments and listings under our terms of use; and
• keep the sites secure, including by detecting and preventing spam and abuse.

We collect only what the feature you asked for needs. Any other collection or use of consumer health data happens only with your separate consent, which you can withdraw at any time.

Approved comments are public, so anyone who reads the page can see what you wrote, including any health details. Please do not post health details that you want to keep private.

Who we share it with

We share consumer health data with the processors that work for us, which handle it on our behalf:

• Vercel, which hosts ebo2.com and app.ebo2.com;
• Supabase, which stores account data, and will store comments, clinic claims, and listing edits, for app.ebo2.com;
• Resend, which delivers contact-form messages to our inbox and sends account emails; and
• Google, which hosts our email inbox and stores the messages you send through the contact form.

Apart from these processors, publishing approved comments at your request, a transfer to a successor that remains bound by this policy if the sites or their operator are sold or merged, and disclosures the law requires, we do not share consumer health data with anyone. We do not sell it.

Your rights

You have the right to:

• confirm whether we collect, share, or sell your consumer health data;
• access it, including a list of all third parties and processors with which we have shared it;
• ask us to correct it if it is inaccurate;
• delete it, including from our processors' systems;
• withdraw any consent you gave us to collect or share it; and
• appeal if we decline your request.

If you ask us to close your account, we delete its account data along with the comments, clinic claims, and listing edits linked to it. We will not discriminate against you for using these rights.

How to exercise your rights and appeal

Send a request through the contact form, choosing "Privacy or data request," or write to us at EBO2.com, 1968 S. Coast Hwy, #1921, Laguna Beach, CA 92651, United States. Tell us which right you want to use. Before we act, we may need to confirm your identity, for example by checking that you control the email address involved. We use information you give us for that check only to verify your request.

We respond within 45 days of receiving your request. If we need more time, we may extend that once, by up to 45 more days, and we will tell you before the first 45 days end.

If we decline your request, in whole or in part, we will tell you why. You can appeal by replying to our decision. We answer appeals in writing within 45 days. If we deny your appeal, we will tell you how to submit a complaint to your state attorney general.

What we do not do

• We do not sell consumer health data.
• We do not use geofencing: we do not draw virtual boundaries around places that provide health care in order to identify or track people who enter them, or to send them messages or ads.
• We do not use consumer health data for advertising, and we do not give it to anyone for advertising.
• We do not let third parties collect consumer health data about you over time and across different websites through our sites.
• We do not collect precise location, and we do not infer health information from the pages you read.
• We do not collect or use consumer health data beyond what a feature you asked for needs, unless you give us your separate consent.

Changes

We may update this policy from time to time. When we do, we will post the new version on this page and change the effective date at the top. If a change is material, it takes effect no sooner than 30 days after we post it, and we will post a notice on the sites and email account holders before then. We will not collect, use, or share consumer health data in a new way without the consent the law requires.

Contact

For questions about this policy or to make a request, use the contact form and choose "Privacy or data request," or write to EBO2.com, 1968 S. Coast Hwy, #1921, Laguna Beach, CA 92651, United States.