Privacy Policy

Introduction

This website is operated by San Francisco Plastic Surgery (collectively the “Company”, “We” or “Us”) respect your privacy and the Company is committed to protecting it through our compliance with this policy.

This policy describes the types of information we may collect from you or that you may provide when you visit this website (our “Website”) and our practices for collecting, using, maintaining, protecting and disclosing that information.

This policy applies to information we collect:

• On this Website
• In email, text, phone and other electronic messages between you and this Website.
• Through mobile and desktop applications you download from this Website, which provide dedicated non-browser-based interaction between you and this Website.

It does not apply to information collected by:

• Us offline or through any other means, including on any other website operated by Company or any third party (including our affiliates and subsidiaries) that may link to or be accessible from or on the Website. Note that patient health information will be governed by a separate HIPAA Notice of Privacy Practices provided by your healthcare provider at the time of services.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. This policy is incorporated into our Terms of Use and creates a contract between the Company and you. If you do not agree with our policies and practices, your sole choice is not to use our Website. By accessing or using this Website, you agree to this privacy policy and the Terms. This policy may change from time to time. All changes are effective immediately when we post them, and apply to all access to and use of the Website thereafter. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Children Under the Age of 16

Our Website is not intended for children under 16 years of age. No one under age 16 may provide any personal information to or on the Website. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on this Website or on or through any of its features/register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website or provide any information about yourself to us, including your name, address, telephone number, email address or any screen name or username you may use. If you are aware that we have inadvertently collected personal information from a child under the age of 16, please write to us using the information on our contact page to request deletion of that information.

Information We Collect About You and How We Collect It

We collect several types of Personal Information from and about users of our Website, including information:

• By which you may be personally identified, such as name, postal address, email address, and telephone number.
• Consumer information, like your preferences or a consumer profile based on your use of the website.
• Insurance information.
• General health information, like your gender, height, weight or generalized medical conditions that you may be seeking information about.
• Social media information, such as social media handles, content and other data shared with us through third-party features that you use on our Site and other services (such as apps, tools, payment services, widgets and plug-ins offered by social media services, like Facebook, Instagram and LinkedIn, that may have referred you to our Site).
• Information about your device, your internet connection, the equipment you use to access our Website, and usage details.

We collect this information:

• Directly from you when you provide it to us.
• Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses and information collected through cookies, pixels, web beacons and other tracking technologies.

Information You Provide to Us

The information we collect on or through our Website may include:

• Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Website, subscribing to our service, posting material, or requesting further services. We may also ask you for information when you enter a contest or promotion sponsored by us, and when you report a problem with our Website.
• Records and copies of your correspondence (including email addresses), if you contact us.
• Your responses to surveys that we might ask you to complete for research purposes.
• Details of transactions you carry out through our Website and of the fulfillment of your orders. You may be required to provide financial and personal information before placing an order through our Website.
• Your search queries on the Website.

Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect your mobile phone number and SMS consent data against unauthorized access, disclosure, alteration, or destruction. Our SMS platform provider(s) are required to maintain appropriate security measures consistent with industry standards and, where applicable, HIPAA. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Mobile Numbers and Text Messaging

The user agrees any mobile phone number(s) provided by them to San Francisco Plastic Surgery shall be unique to that user. The user agrees mobile number(s) provided are not shared with, or common to, other users. If a user changes their mobile phone number(s), it is the user’s responsibility to contact us to update their mobile phone number in a timely manner.

• Message/data rates may apply per phone plan.
• Message frequency varies.
• Some carriers may not be supported.
• Reply STOP to any message to opt out.

SMS Communications and Text Messaging

Collection of Mobile Phone Numbers and SMS Consent

San Francisco Plastic Surgery, operated by Dr. Karen Horton, MD, FACS (‘Practice,’ ‘we,’ ‘us,’ or ‘our’), may collect
your mobile phone number and your consent to receive text messages (SMS/MMS) when you voluntarily provide this
information through our website contact and inquiry form located at https://www.drkarenhorton.com/contact-us-today/,
or through other disclosed opt-in methods.

Types of Messages We Send

Subject to your consent, we may send the following categories of SMS/MMS messages:
Service and Transactional Messages: Appointment reminders, appointment confirmations, post-procedure follow-up
communications, patient support messages, two-factor authentication and one-time passcode (2FA/OTP) messages,
and general alerts and notifications related to your care or account.
Marketing and Promotional Messages (with separate opt-in): Information about cosmetic and reconstructive
procedures, special offers, events, practice news, and other promotional content.

Message Frequency and Carrier Fees

Message frequency varies based on your interactions with our practice and the nature of your consent. Standard
message and data rates may apply based on your mobile carrier plan. We are not responsible for charges imposed
by your carrier.

How We Use Your Mobile Number

Your mobile phone number is used solely to send you the categories of messages to which you have consented. We
do not sell, rent, lease, or share your mobile phone number or SMS consent data with third parties for their own
marketing purposes. Your mobile number may be shared with our SMS platform provider(s) and technology service
partners who assist us in delivering messages, subject to confidentiality and data processing agreements consistent
with HIPAA and applicable privacy law.

Opt-Out / Unsubscribe

You may opt out of receiving SMS messages from us at any time by replying STOP, CANCEL, UNSUBSCRIBE,
QUIT, or END to any message you receive from us. Upon receipt of a valid opt-out keyword, we will send a single
confirmation message and cease all further SMS communications to your number unless you subsequently re-enroll.
You may also opt out by contacting us at [Phone Number] or [Email Address].
A2P 10DLC Compliance Package — San Francisco Plastic Surgery / Dr. Karen Horton Page 8

HELP

For assistance, reply HELP to any message or contact us directly at [Phone Number] or [Email Address].

No Obligation

Consent to receive SMS messages, including marketing messages, is not a condition of receiving medical services,
scheduling consultations, or any other interaction with our practice.

HIPAA Notice

To the extent any SMS communications contain or relate to protected health information (PHI), such communications
are governed by our Notice of Privacy Practices and applicable HIPAA regulations. We encourage patients not to
include sensitive health information in text message replies. For sensitive health matters, please contact our office
directly by phone.

Updates to This Section

We may update this SMS Communications section from time to time. Any material changes will be posted to this
Privacy Policy with an updated effective date. Continued use of our SMS messaging services following such updates
constitutes your acknowledgment of the revised terms.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions and patterns, including:

• Details of your visits to our Website, including traffic data, location data, logs and other communication data and the resources that you access and use on the Website.
• Information about your computer and internet connection, including your IP address, operating system and browser type.

The information we collect automatically may include personal information, or we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize our Website according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
• Flash Cookies. Certain features of our Website may use flash cookies to collect and store information about your preferences and navigation to, from and on our Website. Flash cookies are not managed by the same browser settings as are used for browser cookies.
• Web Beacons. Pages of our Website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs. pixel tags and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
• Javascript which uses third-party services to store data about activities and transactions.
• Trackable telephone numbers which keep track of phone calls made to some phone numbers on this site.
• Offline website data – including both local and remote storage of activities.
• Geo-targeting information about your general location at the time of use of the site.

We may tie this information to personal information about you that we collect from other sources or you provide to us.

By using the Site, you consent to our use of these Tracking Technologies. You can decide if and how your computer will accept a cookie by configuring your preferences or options in your browser. However, if you choose to reject cookies, you may not be able to use certain online products, services or features on the Website. For example, we may not be able to recognize your computer or device, and you may need to log in every time you visit. You can get more information about Cookies and Tracking Technologies, and instructions on how to opt out of these items, you may visit All About Cookies. You may also learn more at the Digital Advertising Alliance or the NAI industry opt-out platform.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

• To present our Website and its contents to you.
• To provide you with information, products or services that you request from us.
• To fulfill any other purpose for which you provide it.
• To provide you with notices about your account/subscription, including expiration and renewal notices.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• To notify you about changes to our Website or any products or services we offer or provide through it.
• To allow you to participate in interactive features on our Website.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.

Your Access to and Control Over Information

You may opt out of any future contacts from us at any time. You can do the following at any time by contacting us via the email address or phone number given on our website. The jurisdiction in which you reside may dictate the rights available to you, but they may include the right to:

• See what data we have about you, if any.
• Change/correct any data we have about you.
• Opt-out of our sharing of certain information.
• Have us delete any data we have about you.
• Express any concern you have about our use of your data.

If applicable, you may exercise any of your rights by submitting a verifiable data subject request to us by using the information in the “Contact Us” section below. You may make a request related to your Personal Information or on behalf of someone for which you have authorization. You must include your full name and email address in your request. We may require you to confirm your identity and/or legal standing for the request as well as your residency to obtain the information.

Please note that we will ask you to verify your identity before responding to such requests, and we may deny your request if we are unable to verify your identity or authority to make the request.

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, for any reason without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

• To fulfill the purpose for which you provide it.
• To allow our service providers to complete a service we have contracted with them to provide.
• For any other purpose disclosed by us when you provide the information.
• With your consent.
• To any potential acquirer, successor or assignee as part of any business transaction for the merger, sale, transfer, assignment or reorganization of our business or assets.
• To comply with any court order, law or legal process, including to respond to any government or regulatory request.

Privacy of Collected Data

We will never use the statistical analytics tool to track or to collect any names or email addresses of visitors to our site. Google will not associate your IP address or device ID with any other data held by Google. Neither we nor Google will link, or seek to link, an IP address or a device ID with the identity of a computer user.

Information About Remarketing

We specifically share your information with Google (including YouTube, Google Analytics, Google AdSense, Google Business Profiles) and Meta (including Facebook and Instagram). We use Google Analytics to help us understand how our customers use the Site. Read more about how Google uses your Personal Information or opt-out of Google Analytics. You have the option to manage Google’s personalized ads by visiting the Google advertising center. You can read more about how Meta uses your Personal Information and how to manage your Meta ad preferences. You can read Vimeo’s privacy policy and information on Vimeo’s video privacy settings. Please note that depending on your settings, the next time you access our Services the analytics may be reactivated, so you may have to disable the technology each time.

This website uses Google remarketing to advertise online using text or image ads on the Google Display Network. Remarketing is a feature that lets us reach people who have previously visited our site, and show them relevant ads when they visit other sites on the Google Display Network.

For websites using remarketing, a third-party DoubleClick cookie is used to enable remarketing for products like AdWords on the Google Display Network. When someone visits our website, a few lines of code will drop an anonymous browser cookie. This cookie is a small file that stores information. The cookie will store the site visit, but does not store any sensitive information, such as visitor name, address or any other piece of information that might personally identify the visitor. The cookie will be enabled for a set period of time, such as 30 or 60 days, at which time, the cookie expires.

What is the Google Display Network?

A group of more than a million websites, videos, and apps where ads can appear. Sites in this network have partnered with Google to show relevant ads.

Opting out of Remarketing

Visitors may opt out of Google’s use of cookies by visiting the Ads Preferences Manager.

Visitors may opt out of a third-party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page.

Do Not Track Signals

Our Site currently does not respond to Do Not Track (“DNT”) signals and operates as described in this Policy, whether or not a DNT signal is received.

Global Privacy Control

Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales. GPC is a web-browser level setting, maintained by either a browser or a browser extension, that is typically set by the user, not the website. In certain regions, when we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.

Changes to Our Privacy Policy

Our Privacy Policy may change from time to time and all updates will be posted on this page. If you feel that we are not abiding by this privacy policy, you should contact us immediately via the email address or phone number given on our website.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, please write to or call us using the information provided on the contact page of our website.