Privacy Policy

Last Updated: June 29, 2026

PatchAid ("PatchAid," "we," "us," or "our") respects the privacy of our customers and has developed this Privacy Policy to demonstrate our commitment to protecting your privacy. This Privacy Policy describes, for you as an individual who uses the PatchAid website, places orders by phone, uses our other services, or who otherwise provides us with information by phone, mobile application, chat, text message, fax, mail, at a retail location, or by other means (collectively, the "Services"), the information we collect, how that information may be used, with whom it may be shared, and your choices about such uses and disclosures.

We encourage you to read this Privacy Policy carefully when using our Services or transacting business with us. By using our Services or otherwise doing business with us, you accept the practices described in this Privacy Policy.

If you have any questions about our privacy practices, please refer to the "How to Contact Us" section below.

QUICK SUMMARY

This summary is provided for convenience and does not replace the full Privacy Policy below.

• We collect information you give us (such as your name, contact details, and payment information), information collected automatically (such as device and usage data through cookies and similar technologies), and information from other sources.
• We use information to fulfill orders, operate and improve our Services, communicate with you, personalize and deliver advertising, and meet legal obligations.
• We share information with service providers and, for advertising purposes, with certain third parties. These advertising-related disclosures may be considered a "sale" or "sharing" of personal information under some state laws.
• Depending on where you live, you may have rights to access, delete, correct, and obtain a copy of your personal information, and to opt out of targeted advertising and the sale or sharing of your personal information. See "Your State Privacy Rights" below.
• We honor the Global Privacy Control (GPC) browser signal as a request to opt out of sale/sharing and targeted advertising where required by law.

INFORMATION WE COLLECT

As described more fully in this section, we may collect information that can identify you ("personal information"), such as your name, phone number, mailing address, and e-mail address, (i) when you (or other users) provide it to us when using our Services, or (ii) from our business partners or other third parties. We may combine the personal information that we receive from different sources. When you provide personal information through our Services, the information may be sent to servers located in the United States.

Information You Provide

We may collect and store any personal information you enter on our Services, provide to us by phone, furnish to our customer service team, or give to us in some other manner. This includes identifying information such as your name, address, e-mail address, and telephone number, and, if you transact business with us, financial information such as your payment method (for example, a credit card number, type, and expiration date, or other payment information). We also may request information about your interests and activities, your gender and age, your opinions about products and services that we offer, and other demographic information. If you choose to share it (for example, in a product review, survey, or message to our customer service team), we may also receive information about your wellness preferences or product usage. Interactions with our Services may be monitored, recorded, and retained, and we may use third-party service providers to collect, store, and analyze information you provide when you use or interact with our Services.

Information From Other Sources

We may periodically obtain both personal and non-personal information about you from affiliated businesses, business partners, contractors, and other third parties, and add it to our account or other records. Examples include updated delivery and address information, purchase history, credit information, and additional demographic information. The categories of third-party sources include advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, social networks, and data brokers.

Information About Others

We may also collect and store personal information about other people that you provide to us. If you use our Services to send another person (a friend, relative, colleague, etc.) a product as a gift, information that may interest them, or messages such as invitations, we may store your personal information and the personal information of each such recipient.

Information Collected Automatically

We and our service providers automatically collect information from your browser and devices when you use our Services. This information may include your IP address, device identifiers, browser type and language, operating system, access times, the content of any cookies that your browser previously accepted from us, the pages and products you view, and the referring website address.

Cookies and Tracking Technologies

We and our service providers use a variety of tracking technologies that collect usage information whenever you interact with our Services. Cookies are pieces of text that a website stores on your device. We use two types of cookies: session cookies, which terminate shortly after you end your internet session, and persistent cookies, which are stored on your device until they expire or are deleted. Both types help provide an enhanced experience by recalling your use of our Services, your shopping preferences, shopping cart information, and your sign-in details.

We also use standard internet technologies such as web beacons (also known as clear gifs, pixel tags, or web bugs) and similar technologies to track your use of our Services, to customize our Services and advertisements, and to measure the effectiveness of our advertising, content, and programming. We may include these technologies in promotional or other e-mail messages or newsletters to determine whether messages have been opened and acted upon.

We may allow third parties, including advertising companies and ad networks, to collect information through tracking technologies when you view or interact with advertisements or use our Services. The collection and use of that information is subject to the third party's own privacy policy. You can learn more about how Google uses information from sites or apps that use its services at google.com/policies/privacy/partners. Some third-party advertising companies participate in the Network Advertising Initiative, which offers a single location to opt out of ad targeting from member companies at networkadvertising.org, and the Digital Advertising Alliance at optout.aboutads.info.

Most browsers allow you to refuse or delete cookies through the browser's settings, but some features of our Services may not function properly if you do. For information about how we respond to browser-based opt-out signals such as the Global Privacy Control, see "Global Privacy Control and Do-Not-Track" below.

Mobile Information

We may collect information from your mobile device if you have downloaded any of our mobile application(s) or interact with our Services on a mobile device. Examples include your approximate or precise geographic location, how you use the application(s), and information about the type of device you use. To opt out of sharing certain information such as location, review the settings on your mobile device or uninstall the application(s).

HOW WE USE INFORMATION WE COLLECT

We may use information that we collect about you to:

• Fulfill your requests for products and services and process and ship your orders;
• Manage returns, refunds, and subscriptions;
• Offer products and services that may be of interest to you;
• Customize the advertising and content that you see on our Services and on other sites and platforms;
• Communicate with you by e-mail, postal mail, telephone, text message, and mobile devices about products, services, orders, and account matters;
• Manage your account and preferences and provide customer support;
• Perform research and analytics and improve our Services, products, and offerings;
• Identify and protect against fraudulent transactions, security incidents, and other misuse of our Services;
• Verify your eligibility for, and deliver prizes in connection with, contests, sweepstakes, and promotions;
• Personalize your experience, including, if you sign up for our text messaging program, sending you reminders such as shopping cart reminders;
• Process payments, evaluate creditworthiness and payment options, and administer financing or installment programs you elect to use;
• Enforce our Terms of Service and other terms, conditions, and policies;
• Operate, manage, and grow our business; and
• Comply with legal obligations and perform other functions as described to you at the time of collection.

TEXT MESSAGING (SMS/MMS) PROGRAM

If you opt in to our text messaging program, you consent to receive recurring automated marketing and transactional text messages (such as order updates, shopping cart reminders, and promotional offers) from or on behalf of PatchAid at the mobile number you provide. Consent to receive text messages is not a condition of any purchase. Message and data rates may apply. Message frequency varies.

By enrolling in or using our text messaging program, you also agree to our Messaging Terms and Messaging Privacy Policy, which govern your participation in the program and the handling of information collected through it.

You can cancel the text messaging program at any time by texting STOP to 22658. After you send the message STOP, we will send you a message to confirm that you have been unsubscribed. For help, text HELP or contact Customer Service using the details below. We will not share your mobile opt-in information or consent with third parties for their own marketing purposes.

HOW WE SHARE INFORMATION WE COLLECT

We will not share your personal information with others except as described below, or except when we inform you in advance and give you the opportunity to opt out where required. We may share personal information with:

• Authorized Service Providers: Companies that perform services on our behalf, such as fulfilling orders, processing payments, delivering packages, providing customer service and marketing assistance, performing analytics, supporting our Services' functionality, and supporting contests, sweepstakes, and surveys. These service providers and contractors may have access to personal information needed to perform their functions but are not permitted to use it for their own purposes.
• Affiliates: Our affiliated companies, which will handle personal information consistent with applicable privacy and security laws and this Privacy Policy.
• Advertising and Analytics Partners: Companies that help us deliver, measure, and personalize advertising across websites, devices, and platforms. As described below, certain of these disclosures may be considered a "sale" or "sharing" of personal information or "targeted advertising" under state law, and you may opt out.
• Business Partners: Businesses with which we partner to offer products, services, promotions, contests, or sweepstakes. When you elect to engage in a particular merchant's offer or program, you authorize us to provide your information to that merchant.
• Legal and Safety: In response to a subpoena, court order, or government request; to establish, exercise, or defend legal rights; to comply with legal requirements; to investigate or prevent fraud, security incidents, or illegal activity; or to protect the rights, property, or safety of PatchAid, our customers, our employees, or others.
• Corporate Transactions: In connection with a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, in which personal information may be transferred as a business asset.

Any third parties to whom we disclose personal information may have their own privacy policies governing their use of that information. We encourage you to review those policies.

Aggregated and Non-Personal Information

We may share aggregated and non-personal information, which does not identify you, with advertisers, partners, affiliates, advisors, investors, and others for analytics, advertising, and general business purposes.

SELLING, SHARING, AND TARGETED ADVERTISING

We use cookies, pixels, and similar technologies to deliver targeted advertising and to measure its effectiveness, and we disclose certain personal information (such as online identifiers, device information, and browsing and purchase activity) to advertising and analytics partners. Under several state privacy laws, these activities may be considered a "sale" or "sharing" of personal information or "targeted advertising," even though we do not exchange your information for money.

You have the right to opt out of the sale or sharing of your personal information and of targeted advertising. You can exercise this right by:

• Using our "Do Not Sell or Share My Personal Information" / "Your Privacy Choices" link, or by submitting a request through our contact page or by calling +1 (866) 230-3615; and
• Enabling the Global Privacy Control (GPC) signal in a supported browser or extension, which we will treat as a request to opt out of sale/sharing and targeted advertising for that browser or device where required by law.

We do not knowingly sell or share the personal information of consumers under 16 years of age, and we do not knowingly process the personal information of minors for targeted advertising.

DATA RETENTION

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include the length of our relationship with you, the nature of the information, our legal and regulatory obligations, the existence of any legal claims or disputes, and our legitimate business needs such as fraud prevention, recordkeeping, and enforcing our agreements. When personal information is no longer needed, we take reasonable steps to delete, de-identify, or anonymize it.

HOW WE PROTECT YOUR PERSONAL INFORMATION

We take reasonable administrative, technical, and physical security measures designed to help safeguard your personal information from unauthorized access, alteration, and disclosure. For example, we limit access to personal information to authorized personnel, use encryption to transmit sensitive personal information, and use firewalls to help prevent unauthorized access. However, no system can be completely secure, and we cannot guarantee the security of your information. You should also take care with how you handle and disclose your personal information and avoid sending sensitive information through insecure e-mail. For information about protecting yourself against identity theft, visit the Federal Trade Commission's website at ftc.gov.

HOW YOU CAN ACCESS AND UPDATE YOUR INFORMATION

If you have an online account with us, you can review and update your personal information by logging into My Account or by contacting us by phone. You may close your account at any time by contacting PatchAid Customer Service. After you close your account, you will not be able to sign in to our Services or access your personal information through our Services, although you may open a new account at any time. If you close your account, we may retain certain information as described in "Data Retention" above and as otherwise permitted by law.

USER-SUBMITTED CONTENT

We may provide areas on our Services where you can post information about yourself or others, create a profile, post reviews, or upload content such as pictures, videos, or audio. Information you post in public areas may be publicly available and may be collected and used by others. We cannot control who reads your postings or what others do with the information you post, so we encourage you to exercise discretion and caution with respect to your personal information.

THIRD-PARTY WEBSITES

Our Services may contain links to websites operated by others that do not operate under this Privacy Policy. These third-party websites may independently collect information, including personal information, from you. We recommend that you review the privacy statements of any third-party websites you visit. Our Privacy Policy applies only to information collected by PatchAid.

CHILDREN'S PRIVACY

Our Services are intended for adults. Our Terms of Service require customers to be 18 years of age or older, and we do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under 13 in a manner inconsistent with the Children's Online Privacy Protection Act (COPPA), we will delete it. If you believe a child has provided us with personal information, please contact us using the details below.

VISITING OUR SERVICES FROM OUTSIDE THE UNITED STATES

This Privacy Policy is intended to cover collection of information on our Services from residents of the United States. If you are visiting our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located. The data protection and other laws of the United States may differ from those of your country. By using our Services, you understand that your information may be transferred to our facilities and to the third parties with whom we share it as described in this Privacy Policy.

GLOBAL PRIVACY CONTROL AND DO-NOT-TRACK

Some browsers and browser extensions support the Global Privacy Control (GPC) or similar universal opt-out signals. Where required by applicable law, we treat a GPC signal as a valid request to opt out of the sale or sharing of personal information and of targeted advertising for the browser or device from which the signal is sent. Because such signals are browser- and device-specific, you will need to enable the signal on each browser and device you use, and signing into an account may be necessary to apply the choice to your account. Apart from GPC where required by law, our Services do not currently respond to other "Do Not Track" signals. To learn more about Do Not Track, visit allaboutdnt.com.

YOUR STATE PRIVACY RIGHTS

A number of U.S. states have enacted comprehensive consumer privacy laws. Depending on your state of residence and subject to certain exceptions, you may have some or all of the following rights:

• Right to Know / Access: To confirm whether we process your personal information and to access that information, including the categories of personal information collected, the sources, the purposes for collecting or sharing it, and the categories of third parties with whom it is shared.
• Right to Delete: To request deletion of personal information we have collected from you, subject to legal exceptions.
• Right to Correct: To request correction of inaccurate personal information.
• Right to a Copy / Data Portability: To obtain a copy of the personal information you previously provided in a portable format.
• Right to Opt Out: To opt out of (i) the sale or sharing of your personal information, (ii) targeted advertising, and (iii) certain profiling that produces legal or similarly significant effects.
• Right to Limit Sensitive Data: Where provided by law, to limit our use and disclosure of sensitive personal information.
• Right to Non-Discrimination: To not receive discriminatory treatment for exercising your privacy rights.
• Right to Appeal: Where provided by law, to appeal our decision regarding your request.

These rights are available, to the extent and in the manner provided by each state's law, to residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and Washington, and to residents of other states as their laws take effect. Specific rights, exceptions, and procedures vary by state, and the state-specific sections below control where applicable.

How to Exercise Your Rights

To submit a request, please contact us here, e-mail us at hello@patchaid.com, or call +1 (866) 230-3615. To protect your information, we may ask you to provide two or three pieces of personal information that we will match against our records to verify your identity before fulfilling certain requests. For security reasons, we do not send sensitive information (such as payment card numbers) in response to a request to access your personal information. We will respond within the timeframe required by applicable law. You may use an authorized agent to submit a request on your behalf; the agent must provide proof of authorization, and we may require you to verify your identity directly.

Right to Appeal

If we decline to take action on your request and your state provides a right to appeal, you may appeal by replying to our response or by contacting us at hello@patchaid.com with the subject line "Privacy Appeal." We will respond in writing within the period required by your state's law. If your appeal is denied, you may contact your state Attorney General.

CALIFORNIA PRIVACY RIGHTS

This section supplements the information above and applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"). It does not apply to information exempt from the CCPA, or to personnel or business-to-business information.

Categories of Personal Information We Collect

In the preceding 12 months, we have collected the following categories of personal information (as defined by the CCPA):

• Identifiers (such as name, alias, postal address, unique personal identifier, online identifier, IP address, e-mail address, account name);
• Personal information categories listed in Cal. Civ. Code § 1798.80(e) (such as name, signature, address, telephone number, payment card or other financial information);
• Characteristics of protected classifications under California or federal law (such as gender and age);
• Commercial information (such as products or services purchased, obtained, or considered, and purchasing histories or tendencies);
• Internet or other electronic network activity information (such as browsing and search history and interactions with our Services and advertisements);
• Geolocation data;
• Audio, electronic, visual, or similar information (such as call recordings or content you submit);
• Inferences drawn from the above to create a profile reflecting preferences and characteristics; and
• Sensitive personal information, which may include a Social Security, driver's license, state identification, or passport number, and account log-in or financial account information in combination with access credentials.

Sources, Purposes, and Disclosures

We collect personal information from you directly, automatically through your use of our Services, from people who refer or purchase for others, and from other companies such as advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, social networks, and data brokers. We use and disclose this information for the business and commercial purposes described in "How We Use Information We Collect" and "How We Share Information We Collect," including performing services, marketing and advertising, maintaining and improving our Services, fraud prevention and security, internal research, and meeting legal obligations.

Sale or Sharing of Personal Information

We "sell" or "share" (as those terms are defined by the CCPA) the categories of personal information below for cross-context behavioral advertising. We do not sell or share sensitive personal information, and we do not knowingly sell or share the personal information of consumers under 16 years of age.

Category of Personal Information Sold or Shared	Categories of Third Parties
Identifiers	Advertising and marketing partners; analytics providers
Personal information records (Cal. Civ. Code § 1798.80(e))	Advertising and marketing partners; analytics providers
Commercial information	Advertising and marketing partners; analytics providers
Internet or other electronic network activity information	Advertising and marketing partners; analytics providers
Geolocation data	Advertising and marketing partners; analytics providers
Inferences	Advertising and marketing partners; analytics providers

Disclosures for a Business Purpose

In the preceding 12 months, we have disclosed each category of personal information listed above to the following categories of service providers and contractors for business purposes: breach/fraud detection and prevention; consulting and business services; mandatory recipients; marketing and advertising; order fulfillment; payment and collection services; research and analytics; security; shipping; social media platforms; technology services; temporary staffing; and website and application developers. Sensitive personal information may be disclosed for these purposes to payment and collection providers, fraud-prevention and security providers, mandatory recipients, technology services providers, temporary staff, and website and application developers.

Your California Rights

California residents have the right to know, access, delete, and correct personal information; the right to opt out of the sale or sharing of personal information; the right to limit the use and disclosure of sensitive personal information; and the right to non-discrimination for exercising these rights. To exercise these rights, see "How to Exercise Your Rights" above. You may also designate an authorized agent as described above.

California "Shine the Light"

California residents may request information regarding our disclosure of personal information to third parties for their own direct marketing purposes. To make such a request, e-mail us at hello@patchaid.com with "California Shine the Light" in the subject line. We may provide this information in a standardized format that is not specific to you.

Financial Incentives

From time to time we may offer incentives such as discounts on products or shipping, contest prizes, and similar offers. In connection with an incentive, we may collect personal information such as your name, e-mail address, and phone number, as described in the specific offer. Where we collect personal information from a California consumer in connection with an incentive, the value of that information is generally calculated as the value of the incentive less our costs of operating the incentive program. Participation is voluntary, you may opt in by following the method described for the offer, and you may withdraw at any time, including, where the incentive relates to marketing e-mails or texts, by unsubscribing.

VIRGINIA, COLORADO, CONNECTICUT, AND OTHER STATE PRIVACY LAWS

If you are a resident of Virginia, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, or Utah, you have the rights described in "Your State Privacy Rights" above to the extent provided by your state's law, which may include the rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling.

We process the categories of personal data described in this Privacy Policy for the purposes described in "How We Use Information We Collect." We obtain opt-in consent before processing sensitive data where required by these laws. We engage in targeted advertising and in activities that may constitute the sale or sharing of personal data; you may opt out as described in "Selling, Sharing, and Targeted Advertising" and "How to Exercise Your Rights" above. The categories of third parties with whom we share personal data include shipping and order-fulfillment companies, payment processors, advertising and marketing companies, social media platforms, fraud-prevention and security companies, research and analytics companies, website and application developers, technology services providers, and temporary staffing providers. Where your state provides a right to appeal a decision on your request, you may appeal as described in "Right to Appeal" above.

Maryland residents: Consistent with the Maryland Online Data Privacy Act, we do not sell sensitive data, we do not sell the personal data of, or process for targeted advertising the personal data of, any consumer we know to be under 18, and we limit our collection of personal data to what is reasonably necessary and proportionate to provide the products and services you request.

CONSUMER HEALTH DATA (WASHINGTON, NEVADA, AND SIMILAR LAWS)

Some states have enacted laws that specifically regulate "consumer health data," including the Washington My Health My Data Act (the "MHMDA") and Nevada Senate Bill 370 ("SB 370"). These laws broadly define consumer health data to include information that could identify a consumer's past, present, or future physical or mental health status. This section applies to consumer health data that we may collect about residents of those states and supplements the rest of this Privacy Policy.

PatchAid sells consumer wellness and nutritional products. We do not require you to provide health information to purchase from us, and we do not diagnose, treat, or make medical determinations about you. We may, however, come into contact with information that one of these laws could treat as consumer health data, for example when you tell us about your wellness goals or product preferences, leave a product review, or contact our customer service team. We may also process information that, combined with other data, could be used to infer a health-related characteristic.

How we use and share consumer health data. Where we collect consumer health data, we use it to provide and fulfill the products and services you request, respond to your inquiries, operate and improve our Services, and meet legal obligations. We collect consumer health data from you directly and, in some cases, automatically through your use of our Services. We may share consumer health data with service providers and processors that perform functions on our behalf (such as order fulfillment, customer service, payment processing, technology, and analytics) and as otherwise described in "How We Share Information We Collect." We do not sell consumer health data, and we do not share consumer health data for cross-context behavioral advertising or targeted advertising. We will obtain your consent before collecting or sharing consumer health data where these laws require consent, and we will not collect or share consumer health data beyond what is necessary to provide a product or service you have requested without separate authorization where required.

Your consumer health data rights. If you are a Washington or Nevada resident, you have the right to confirm whether we collect, share, or sell your consumer health data and to access that data; the right to withdraw consent to our collection and sharing of your consumer health data; and the right to request that we delete your consumer health data. To exercise these rights, please contact us here, e-mail us at hello@patchaid.com with "Consumer Health Data" in the subject line, or call +1 (866) 230-3615. We will verify your request as described in "How to Exercise Your Rights" above and respond within the time required by law. You may use an authorized agent to submit a request on your behalf. We will not discriminate against you for exercising these rights.

NEVADA PRIVACY RIGHTS

Nevada residents have the right to direct us not to sell certain personal information we have collected or will collect about them, as defined under Nevada law. We do not sell personal information as defined by Nevada's statute. To make a request, e-mail us at hello@patchaid.com with "Nevada" in the subject line and include your name, Nevada address, and e-mail address.

NO RIGHTS OF THIRD PARTIES

This Privacy Policy does not create rights enforceable by third parties or require disclosure of any personal information relating to users of our Services beyond what is required by applicable law.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, our Services, or applicable law. When we make material changes, we will revise the "Last Updated" date above and, where required by law, provide additional notice. We encourage you to review this Privacy Policy periodically.

HOW TO CONTACT US

If you have questions about this Privacy Policy or our information-handling practices, or if you would like to exercise your privacy rights, please contact us:

PatchAid — Privacy Contact
Attn: Customer Service
25 Corporate Circle, Suite #118
Albany, NY 12203

Toll-Free: +1 (866) 230-3615
E-mail: hello@patchaid.com
Online: patchaid.com/pages/faq#contact-form