Consumer Health Data Privacy Policy

Effective Date: March 31, 2024

This Consumer Health Data Privacy Policy (the “Policy”) describes how Massage Envy Franchising, LLC and/or ME SPE Franchising, LLC (collectively, “MEF, LLC”, “us”, “we”, or “our”) processes Consumer Health Data in accordance with applicable consumer health data laws when you request products or services from us (“the Services”).

In the event of a conflict between any other MEF policy, statement, or notice and this Consumer Health Data Privacy Policy, this Policy will prevail as to Consumer Health Data processed.

Capitalized terms that are not otherwise defined in this Consumer Health Data Privacy Policy shall be defined as they are in the applicable law.

A. Consumer Health Data We Collect and Why We Collect and Share It

1. Washington Consumer Health Data Privacy Policy

This Washington Consumer Health Data Privacy Policy explains how MEF, LLC Collects the Consumer Health Data of Washington residents and individuals whose Consumer Health Data is Collected in Washington (collectively, “Consumers”, or “you”) pursuant to the Washington My Health My Data Act (“Washington Act”).

We may Collect the following categories of Consumer Health Data about Consumers to the extent necessary to provide a product or service requested by a Consumer, or with a Consumer’s consent. Consumer Health Data we Collect about a Consumer may vary depending on the nature of the Consumer’s interactions with us.

Category of Consumer Health Data Collected and Shared	Categories of Third Parties and Specific Affiliates to Which the Consumer Health Data Is Shared	Purposes for Sharing
Physical or mental conditions or health history that you voluntarily provide for the purposes of receiving the Services requested, Precise Location Information used to identify access to services, data that identifies a Consumer seeking Health Care Services.		· Carrying out our operations and providing Services to Consumers.
Categories of Sources from which Consumer Health Data Is Collected	Purposes for Collection and Use
· Directly from the Consumer. · Collected automatically when the Consumer chooses to enable precise location.	We may Collect and use Consumer Health Data for the following purposes: (i) to fulfill or meet the reason a Consumer provided the information (for example, if a Consumer provides their information to purchase a service); (ii) to provide, support, and personalize our Services for you; (iii) to create, maintain, customize, and secure a Consumer’s account with us; (iv) to process a Consumer’s requests; (v) to provide a Consumer’s with support and to respond to a Consumer’s inquiries, including to investigate and address a Consumer’s concerns or (vi) with a Consumer’s consent.

2. Nevada Consumer Health Data Privacy Policy

This Nevada Consumer Health Data Privacy Policy explains how MEF, LLC Collects the Consumer Health Data of Nevada residents and individuals whose Consumer Health Data is Collected in Nevada (collectively, “Consumers”, or “you”) pursuant to Nevada Senate Bill 370 (“Nevada Act”).

Category of Consumer Health Data Collected and Shared	Categories of Third Parties and Specific Affiliates to Which the Consumer Health Data Is Shared	Purposes for Sharing
Physical or mental conditions or health history that you voluntarily provide for the purposes of MEF providing the Services requested.	· Independent franchise owners	· Carrying out our operations and providing Services to Consumers
Categories of Sources from which Consumer Health Data Is Collected and Manner in Which Consumer Health Data Will Be Processed	Purposes for Collection and Use
· Directly from the Consumer	We may Collect and use Consumer Health Data for the following purposes: (i) to fulfill or meet the reason a Consumer provided the information (for example, if a Consumer provides your information to purchase a service); (ii) to provide, support, and personalize our Services for you; (iii) to create, maintain, customize, and secure a Consumer’s account with us; (iv) to process a Consumer’s requests; (v) to provide a Consumer with support and to respond to your inquiries, including to investigate and address a Consumer’s concerns; (vi) as described to a Consumer when collecting Consumer Health Data; or (vii) for any other purpose, with a Consumer’s consent.

B. Submitting Requests Relating to Consumer Health Data

You may have certain privacy rights relating to your Consumer Health Data (including the right to review or request changes to your Consumer Health Data). To exercise any of these rights, including appeals, please submit a request through our Consumer Portal, or call us at 1-866-690-9108.

1. Your Privacy Rights

a. Washington

i. Right To Access. You have the right to confirm whether we are Collecting, Sharing, or Selling your Consumer Health Data that we Process, including requesting access to a list of all Third Parties and Affiliates – including contact information – with whom we have Shared or Sold Consumer Health Data.

ii. Right to Withdraw Consent. You have the right to withdraw your consent to us Collecting and Sharing your Consumer Health Data.

iii. Right to Delete. You have the right to have us delete your Consumer Health Data.

iv. Right to Appeal. Sometimes we are unable to process requests relating to your Consumer Health Data, in which case, your request will be denied. If you believe we denied your privacy rights request in error, you may appeal for reconsideration of your request.

b. Nevada

i. Right to Access. You have the right to confirm whether MEF, LLC is Collecting, Sharing, or Selling your Consumer Health Data.

ii. Right to obtain a list of Third Parties with whom your Consumer Health Data has been Shared or Sold.

iii. Right to Object. You have the right to object to MEF LLC’s processing (including the collection, sharing, or selling) of your Consumer Health Data.

iv. Right to Delete. You have the right to request that MEF, LLC deletes your Consumer Health Data.

v. Right to Appeal. Sometimes we are unable to process requests relating to your Consumer Health Data, in which case, your request will be denied. If you believe we denied your privacy rights request in error, you may appeal for reconsideration of your request.

C. Changes to the Consumer Health Data Privacy Policy

If MEF, LLC decides to change this Consumer Health Data Privacy Policy, MEF, LLC will post those changes to this page on the Website and other places MEF, LLC deems appropriate. MEF, LLC reserves the right to modify this Consumer Health Data Privacy Policy at any time, so please review it frequently. If MEF, LLC makes material changes to this Policy, MEF, LLC will notify you (in its sole discretion) by posting an updated version and updating the “Effective Date” at the top of this page, by email at the most recent email address, if any, you provided to us, or by means of a notice on the Website and/or Application(s).