Privacy Policy

CADMEN CLINIC

PRIVACY POLICY

At CADMEN Clinic ("CADMEN Clinic") your privacy is important to us. This Privacy Policy describes the information we collect, how we collect it, the reasons we collect it, and how we share or use the information we collect. This Privacy Policy also describes the choices you have with respect to your information, including how you can manage, update, or request to delete it.

Please take a moment to review this Privacy Policy. You may scroll through it or use the headings below. It is important that you understand this Privacy Policy. By using our Platform, you are agreeing to the terms of this Privacy Policy. If you have any questions or concerns about this Privacy Policy, you may Contact Us at any time.

1. Who is CADMEN Clinic?

   CADMEN Clinic is a medical spa operating in Ontario, Canada that helps men and women restore their hair and improve their appearance with effective, safe, and proven treatments. Our medical-grade Services — including PRP Hair Restoration, Exosome Hair Therapy, and Mesotherapy Vitamins — are delivered in person at our clinics by licensed health care providers (each, a "Provider"). Some of the information we collect in the course of providing care is "personal health information" governed by Ontario's Personal Health Information Protection Act, 2004 ("PHIPA"). Our collection and use of your health information is also described in our Notice of Privacy Practices.

2. Key Terms & Definitions and Our Privacy Policy

It is helpful to start by explaining some of the key terms and definitions used in this Privacy Policy.

When does our Privacy Policy apply?

This Privacy Policy describes the types of information we may collect from you when:

• You visit or use our Platform, including our Website;

• We communicate electronically with you (e.g., via e-mail or text message); and

• We communicate with you in person, on the telephone, or through a virtual consultation.

When does our Privacy Policy not apply?

This Privacy Policy does not apply to information collected by any other website operated either by us or by a third party, unless the website is listed above or links to this Privacy Policy. It also does not apply to any website that we may provide a link to or that is accessible from our Platform.

Personal health information that we collect, use, and disclose in the course of providing care is governed primarily by PHIPA and is described in our Notice of Privacy Practices. We will not use or disclose your personal health information for advertising or marketing purposes except as permitted by applicable law and with your consent. We will not sell your personal health information.

Our Privacy Policy and Terms of Use.

This Privacy Policy is incorporated into our Terms of Use, which also apply when you use our Platform.

1. Personal Information

What is Personal Information?

Personal information is information from and about you that may be able to personally identify you. We treat any information that may identify you as personal information. For example, your name and e-mail address are personal information.

What types of Personal Information do we collect?

We may collect and use the following personal information (hereinafter, collectively referred to as "Personal Information"):

Health Information

Some Personal Information we collect is personal health information governed by PHIPA. As set forth above, our collection and use of your health information is described in our Notice of Privacy Practices. We will only collect and use personal health information for the purposes of providing the Services or as otherwise permitted by law. We may combine your health information with other Personal Information that we have obtained from you or, with your consent, from a third party such as your insurer or another health care provider. Your personal health information will not be used for any other purpose without your consent or as otherwise permitted by law.

How do we collect your Personal Information?

We collect most of this Personal Information directly from you. Additionally, we will collect information from you when you visit our Website and fill out forms or book our Services.

We may also collect Personal Information in the following ways:

• When you make payments through the Platform.

• When You Contact Us. When you contact CADMEN Clinic directly, such as when you contact our patient care team, we will receive the contents of your message or any attachments you may send to us, as well as any additional information you choose to provide.

We will also collect information automatically as you navigate through our Platform. We use the following technologies to automatically collect data:

• Cookies. We and our service providers may use cookies, web beacons, and other technologies to receive and store certain types of information whenever you interact with our Platform or Services through your computer or mobile device. A "cookie" is a small file or piece of data sent from a website and stored on the hard drive of your computer or mobile device. Some of the cookies we use are "session" cookies, meaning that they are automatically deleted from your hard drive after you close your browser at the end of your session. We also may use "persistent" cookies, which remain on your device unless deleted by you (or by your browser settings). We and third parties may use session and persistent cookies for analytics and advertising purposes, as described herein. You may refuse to accept browser cookies by activating the appropriate setting on your browser, and you may have similar capabilities on your mobile device. However, if you select this setting you may be unable to access or use certain parts of our Platform or the Services.

• Google Analytics. We use Google Analytics, a web analytics service provided by Google, Inc. ("Google"), to collect certain information relating to your use of our Platform. Google Analytics uses cookies to help us analyze how users use our Website. You can find out more about how Google uses data by visiting www.google.com/policies/privacy/partners/ and www.google.com/analytics/learn/privacy.html.

• Google Ads. The Google Ads remarketing service is provided by Google Inc. You can opt out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: http://www.google.com/settings/ads. For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: https://policies.google.com/privacy?hl=en.

• Facebook Pixel and Instagram. We use Facebook Pixel and Instagram, advertising and analytics services provided by Meta Platforms, Inc. ("Meta"), on our Platform. With their help, we can keep track of what users do after they see or click on an advertisement and better provide advertisements to our target audiences. The data is also saved and processed by Meta. You can review Meta's Data Policy at https://www.facebook.com/about/privacy/ and adjust your ad settings at https://www.facebook.com/settings/?tab=ads#_=_.

• Other third party tools. We use other third party tools which allow us to track the performance of our Platform. These tools provide us with information about errors, Platform performance, and other technical details we may use to improve our Platform and/or the Services.

How do we use your Personal Information?

We may use your Personal Information for the following purposes:

• Provide our Products and Services to you, in a custom and user-friendly way.

• Operate, maintain, administer, and enhance our Platform or the Services, including monitoring and analyzing usage of the Platform and/or the Services.

• For internal testing, research, analysis, and product development, including to develop and improve our Platform and to develop, improve, or demonstrate our Products and Services.

• Provide you with information, Products, or Services that you request from us or that may be of interest to you.

• Promote and market our Platform and/or the Services to you, where permitted by law. For example, we may use your e-mail address or mobile number, with your consent, to send you news, special offers, and promotions. You can opt out of receiving these messages at any time as described below.

• Provide you notices about your account or appointments.

• Contact you in response to a request.

• Notify you about changes to our Platform and/or the Services or any Products we offer.

• Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.

• Anonymize and aggregate information for analytics, reporting, and any other purposes permitted by law.

• Respond to law enforcement requests, court orders, and to carry out our legal and contractual obligations.

• Authenticate use, detect fraudulent use, and otherwise maintain the security of our Platform and the safety of others.

• Administer surveys and questionnaires.

• Any other purpose with your consent.

Mobile Information

• No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.

• Information sharing to subcontractors in support services, such as customer service, is permitted.

• All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

How do we share your Personal Information?

We may share Personal Information with third parties in certain circumstances or for certain purposes, including:

• Our business purposes. We may share your Personal Information (excluding mobile phone information) with our service providers, vendors, and business partners, including our data hosting and data storage partners, analytics and advertising providers, and technology services and support. We may also share your Personal Information with professional advisors, such as auditors, law firms, and accounting firms.

• With your consent. We may share your Personal Information if you request or direct us to do so.

• Compliance with law. We may share your Personal Information to comply with applicable law or any obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries.

• Business transfer. We may share your Personal Information to a buyer or other successor in the event of a merger, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, in which Personal Information held by us about our users is among the assets transferred.

• To enforce our rights. We may share your Personal Information to enforce any applicable terms and conditions and Terms of Use, and to ensure the safety and security of our Services and our users.

Your choices about how we share your Personal Information.

This section of our Privacy Policy explains how to exercise your choices. We offer you choices on how you can opt out of our use of tracking technology and our use of your Personal Information for advertising. We do not control the collection and use of your information collected by third parties. These third parties may aggregate the information they collect with information from their other customers for their own purposes. You can manage interest-based advertising preferences through the Digital Advertising Alliance of Canada's opt-out tool at youradchoices.ca.

Each type of web browser provides ways to restrict and delete cookies. Browser manufacturers provide resources to help you with managing cookies. Please see below for more information.

• Google Chrome

• Microsoft Edge

• Mozilla Firefox

• Safari (Desktop)

• Safari (Mobile)

For other browsers, please consult the documentation that your browser manufacturer provides.

If you do not wish to have your e-mail address or mobile number used by CADMEN Clinic to promote our own Products and Services, you can opt out at any time by clicking the unsubscribe link at the bottom of any e-mail, replying STOP to a text message, or by contacting us. This opt out does not apply to service-related communications, such as appointment confirmations and reminders, related to Services you have booked.

How do I access and correct my Personal Information?

You may Contact Us to access your Personal Information, to inform us of any changes or errors in any Personal Information we have about you so that it is complete, accurate, and current, or to request that we delete your information. Requests to access or correct your personal health information are handled in accordance with PHIPA and our Notice of Privacy Practices. We may not be able to accommodate your request if we believe it would violate any law or legal requirement, or where we are required or permitted to retain the information.

1. Who may use the Services?

CADMEN Clinic operates subject to provincial and federal regulations, and the Platform and/or the Services may not be available in your location. Our clinics and Services are located in and offered to residents of Ontario, Canada. The Platform and/or the Services are intended for users located in Canada. Accessing the Platform and/or obtaining the Services from jurisdictions where content is illegal, or where we do not offer the Platform and/or the Services, is prohibited.

1. Children's Privacy

We do not knowingly collect Personal Information from children under the age of 18. If you are under the age of 18, do not use our Platform or Services or provide any information on or to the Platform or through any of its features. If we learn we have collected or received Personal Information from a child under the age of 18, we will delete it. If you are the parent or guardian of a child under 18 years of age whom you believe might have provided us with their Personal Information, you may Contact Us to request the Personal Information be deleted.

1. Does CADMEN Clinic respond to Do Not Track signals?

Some web browsers have a "Do Not Track" feature. This feature lets you tell websites you visit that you do not want to have your online activity tracked. These features are not yet uniform across browsers. Our Platform is not currently set up to respond to those signals.

1. Data Security

We have taken steps and implemented administrative, technical, and physical safeguards designed to protect against the risk of accidental, intentional, unlawful, or unauthorized access, alteration, destruction, disclosure, or use. The Internet is not 100% secure and we cannot guarantee the security of information transmitted through the Internet. Where you have been given or you have chosen a password, it is your responsibility to keep this password confidential.

The sharing and disclosing of information via the internet is not completely secure. We strive to use best practices and industry standard security measures and tools to protect your data. However, we cannot guarantee the security of Personal Information transmitted to, on, or through our Services. Any transmission of Personal Information is at your own risk.

1. Your Privacy Rights in Canada

Depending on the information at issue, your privacy rights are governed by PHIPA (for personal health information) and PIPEDA (for other personal information collected in the course of commercial activity). Subject to certain exceptions, you have the right to access the personal information we hold about you, to request that it be corrected, and to withdraw your consent to our use of it. To exercise these rights, please Contact Us using the information below. You also have the right to make a complaint to the Information and Privacy Commissioner of Ontario or the Office of the Privacy Commissioner of Canada.

1. Changes to our Privacy Policy

We may update our Privacy Policy periodically to reflect changes in our privacy practices, laws, and best practices. We will post any changes we make on this page with a notice that the Privacy Policy has been updated. If we make material changes to our practices regarding the Personal Information we collect from you, we will notify you by e-mail to the e-mail address specified in your account and/or through a notice on the Platform. The date this Privacy Policy was last revised is identified at the top of the page.

1. Contact Us

If you have any questions, concerns, complaints or suggestions regarding our Privacy Policy or otherwise need to contact us, you may reach our Privacy Officer at info@cadmenclinic.ca, by phone at (416) 551-1137, or by mail at CADMEN Clinic, 240 Queen St W, Floor 2, Toronto, ON M5V 1Z7.