This Privacy Policy explains how BestLife Holdings, Inc. d/b/a Cenegenics (“Cenegenics,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes Personal Data in connection with Cenegenics’ wellness, longevity, and health-related services, including in-person and telehealth consultations, assessments, programs, and related content, delivered through or in connection with the Cenegenics website, the Cenegenics App (patient portal), and any other platforms or applications operated by Cenegenics (collectively, the ‘Service’). It applies to all individuals who access or use the Service (“Users,” “you,” or “your”). By using the Service, you acknowledge that your Personal Data will be handled as described herein. The Service is intended for adults aged 18 and over. For our children’s privacy policy, please see Section 9.

Access to the Cenegenics App is restricted to active Cenegenics members and is available by invitation only. Invitations are issued by Cenegenics at its sole discretion, and if you have received an invitation, your access to and use of the patient portal is governed by this Privacy Policy in addition to any membership agreement between you and Cenegenics.

This Privacy Policy should be read in conjunction with the Cenegenics Terms of Service, which is incorporated herein by reference and forms part of the agreement between you and Cenegenics. You are encouraged to read both documents carefully.

Important Notice: This Policy and HIPAA

Cenegenics is not a covered entity or business associate under the Health Insurance Portability and Accountability Act (HIPAA). Any health, wellness, or body composition information you share with us through the Service is not subject to HIPAA protections and is instead governed solely by our Privacy Policy and applicable U.S. state privacy laws.

Section 1: Types of Personal Data Collected

We collect Personal Data directly from you, automatically through your use of the website and app, and from third-party service providers.

The categories of Personal Data we may collect include:

• Identifiers: first name, last name, email address, phone number, ZIP/postal code, password, profile picture, IP address
• Device and Technical Data: device information, app information, browser information, operating system, device logs, language, trackers, and usage data
• Location Data: city, state, province, country, county, metro area, geography/region, and approximate latitude/longitude
• Usage and Interaction Data: page views, clicks, browsing and search history, application opens, launches, session statistics, session duration, scroll behavior, mouse movements, keypress, touch and motion events, video views, and custom interaction events
• Commercial Data: product interactions and point-of-sale transaction data
• Health and Wellness Data: information you voluntarily provide through forms, assessments, questionnaires, consultations, or program interactions
• Audiovisual Information: photographs, video, or audio recordings where you provide them in connection with the Service. This includes video and audio transmitted through an online platform in connection with telehealth consultations.

Where collected, health, wellness, and similar information may be treated as Sensitive Personal Information under applicable state privacy laws.

Detailed information regarding each category of Personal Data is provided throughout this Privacy Policy and in any supplemental notices presented at or before the time of collection.

Unless otherwise indicated, the Personal Data we request is required to provide the Service. Failure to provide required information may limit our ability to deliver certain features, services, or communications. Where information is identified as optional, you may choose not to provide it without affecting core Service functionality.

We and our third-party service providers may use cookies and similar tracking technologies as described in this Privacy Policy. Users are responsible for any third-party Personal Data they choose to provide, publish, or share through the Service.

Section 2: Mode and Place of Processing

Methods of Processing

We implement reasonable administrative, technical, and physical safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Personal Data is processed using electronic systems, automated tools, and other IT-enabled means in accordance with internal procedures and only as necessary to fulfill the purposes described in this Privacy Policy.

Access to Personal Data may be provided to authorized personnel involved in operating the Service, including teams such as administration, sales, marketing, legal, and IT/system administration, as well as trusted third-party service providers, including hosting providers, technical vendors, communications providers, and other operational support partners acting on our behalf. The categories of third-party recipients with whom we share Personal Data include advertising networks, analytics providers, cloud hosting providers, customer relationship management (CRM) vendors, communications platforms, identity and authentication providers, telehealth and video communication providers through which telehealth consultations are conducted, and infrastructure and security vendors. A current list of applicable service providers may be requested by contacting us at dmca@cenegenics.com.

Place of Processing

Personal Data may be processed at our offices and at other locations where our service providers and business partners operate. Depending on your location, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside your state of residence, including other states within the United States. By using the Service, you acknowledge that such transfers may occur, subject to applicable legal requirements and safeguards.

Section 3: Retention

We retain each category of Personal Data for as long as is necessary to fulfill the purpose for which it was collected, as required to comply with applicable legal, tax, accounting, or regulatory obligations, and as needed to establish, exercise, or defend legal claims. The specific retention period for a given category of data depends on the nature of the data, the purpose for which it was collected, and applicable legal requirements.

Once the applicable retention period expires, Personal Data will be securely deleted, de-identified, or anonymized in accordance with our data retention and disposal practices. Please note that certain privacy rights, including access, correction, deletion, and portability rights, may no longer be available once the data has been permanently deleted or anonymized.

Section 4: Purposes of Processing

We collect and process Personal Data to operate, provide, maintain, and improve the Service; comply with legal and regulatory obligations; respond to lawful requests and enforcement actions; protect our rights, property, users, and third parties; and detect, prevent, and investigate fraud, security incidents, and malicious activity.

We may also process Personal Data for the following purposes:

• Advertising and marketing
• Analytics and performance measurement
• Remarketing and behavioral targeting
• Heat Mapping and Session Recording
• Customer communications and support
• Interaction with third-party platforms and social networks
• Contact and message management
• Hosting, infrastructure, and system administration
• Registration, authentication and account management
• Infrastructure monitoring and troubleshooting
• Platform services and app distribution
• User database and CRM management
• Traffic optimization and content delivery
• Spam, fraud, and bot prevention
• Sales, transactions, and service fulfillment

For additional detail regarding the categories of Personal Data used for each purpose, please see Section 5: Detailed Information on the Processing of Personal Data.

Section 5: Detailed Information on the Processing of Personal Data

We process Personal Data to operate, secure, improve, market, and provide the Cenegenics website and mobile application (the “Service”). Depending on how you interact with the Service, Personal Data may be processed for the following purposes:

5.1 Advertising and Remarketing

We and our service providers may use cookies, trackers, usage data, and identifiers to deliver advertising, measure campaign performance, and provide interest-based or retargeted advertising across websites and platforms. This may include services provided by advertising networks and platforms such as Google, Meta, Microsoft, LinkedIn, AppNexus, and Salesforce.

To the extent that the disclosure of Personal Data to third-party advertising partners, including through the use of cookies, pixel tags, and similar technologies, constitutes a “sale” or “sharing” of Personal Information or the use of Personal Information for “targeted advertising” as those terms are defined under the California Consumer Privacy Act (as amended by the California Privacy Rights Act) (“CCPA/CPRA”) or other applicable state privacy laws, we will provide you with the opportunity to opt out of such processing through the mechanisms described in Section 6 and Section 7 of this Privacy Policy.

5.2 Analytics and Performance Monitoring

We use analytics and session monitoring tools, including Google Analytics, Google Analytics 4, Meta Events Manager, Hotjar, Sentry, and similar services, to understand user behavior, improve functionality, troubleshoot issues, and optimize performance. This may include the use of cookies, session data, usage statistics, heat maps, and session recordings.

5.3 Communications and Marketing

We process contact details such as name, email address, phone number, and postal code to respond to inquiries, provide customer support, send newsletters, promotional communications, SMS/MMS messages, and other service-related notifications. Consent to receive automated calls, texts, prerecorded messages, and, where separately authorized, AI-generated communications, may be obtained in accordance with applicable law, including the TCPA. Users may opt out at any time by following the instructions provided in the communication.

5.4 Account Registration and Authentication

We use Personal Data to create and manage user accounts, authenticate access, and maintain secure user sessions. This may include information such as name, email address, phone number, password, profile image, and related authentication data, including services provided by third-party identity providers such as Auth0.

5.5. Hosting, Infrastructure, and Security

We use third-party hosting, cloud storage, content delivery, traffic optimization, bot detection, spam prevention, and infrastructure monitoring services, including AWS, Cloudflare, WP Engine, Google Play Store, and Apple App Store services, to host and protect the Service and maintain operational integrity.

5.6 Social Media and External Platforms

Our Service may include integrations with third-party platforms and social networks, such as Meta (Facebook/Instagram), X, Google, LinkedIn, and similar services, which may collect usage data and interaction information subject to your settings with those platforms.

5.7 E-Commerce and Service Fulfillment

Where applicable, we process payment and transaction-related information to provide services, complete purchases, and fulfill orders. The specific information collected depends on the payment provider and transaction type.

Section 6: Opting Out of Interest-Based Advertising

You have the right to opt out of the sale, sharing, or use of your Personal Information for targeted advertising. You may exercise this right through the following mechanisms:

• Cookie Preferences Tool: Use the cookie consent banner or cookie settings tool available on our website to manage your advertising preferences.
• “Do Not Sell or Share My Personal Information” Link: Click the “Do Not Sell or Share My Personal Information” link available on our website footer to submit an opt-out request.
• Global Privacy Control (GPC): We honor GPC signals where required by applicable law and treat them as valid opt-out requests of sale and sharing. You can enable GPC through a supported browser or browser extension.
• Third-Party Opt-Out Tools: You may also opt out of interest-based advertising through industry opt-out tools such as the Digital Advertising Alliance’s opt-out portal at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

Please note that opting out of interest-based advertising does not mean you will stop seeing advertisements; it means that the advertisements you see will not be based on your inferred interests derived from tracked browsing behavior.

Section 7: Cookie Policy

We use cookies and similar tracking technologies (“Trackers”), such as pixel tags, unique identifiers, embedded scripts, and local storage technologies, to operate, maintain, and improve our website and Service, personalize user experience, analyze usage, and support advertising and marketing activities.

Trackers used by our Service fall into the following categories:

• Necessary / Technical Cookies: These are required for the operation of the Service, including authentication, account security, fraud prevention, and transaction processing.
• Functional / Preference Cookies: These allow us to remember choices you make, such as language, region, and display preferences, to enhance your experience.
• Analytics / Performance Cookies: These help us understand how users interact with the Service, including pages visited, session duration, and usage patterns, so we can improve performance and usability.
• Advertising / Targeting Cookies: These may be used by us or our advertising partners to deliver more relevant advertising and measure the effectiveness of marketing campaigns across websites and platforms. Under certain U.S. state privacy laws, these activities may be considered “sharing” or use of personal information for targeted advertising. You may opt out of these activities as described in Section 6.

Some Trackers are placed by third-party service providers, such as analytics providers and advertising networks, and are governed by those third parties’ privacy policies.

For example, we use Google Analytics and similar analytics tools to collect information about how Users interact with the Service, including device information, usage data, page views, session duration, and interaction events. Google may use the data collected to measure activity, improve its services, and personalize content and advertising across Google services and partner sites. For more information about how Google collects and processes data, please visit: https://policies.google.com/technologies/partner-sites.

You have several options to manage Trackers:

• Cookie Consent Tools: You may manage your preferences through our cookie consent banner or settings tool, where available.
• Browser Settings: Most web browsers allow you to control cookies through their settings. You may choose to block or delete cookies; however, doing so may impact the functionality of the Service.
• Industry Opt-Out Tools: You may opt out of certain targeted advertising through industry programs such as the Digital Advertising Alliance (DAA) or Network Advertising Initiative (NAI).
• Global Privacy Control (GPC): We recognize Global Privacy Control signals where required by applicable U.S. state laws and treat them as valid requests to opt out of the sale or sharing of personal information for targeted advertising.

We do not respond uniformly to browser Do Not Track (DNT) signals due to the absence of a consistent industry standard. We honor Global Privacy Control (GPC) signals where required by law, including under the CCPA/CPRA and applicable state laws, and treat them as valid opt-out requests of sale and sharing. We are committed to updating our GPC practices as additional states adopt GPC recognition requirements.

Cookies may be either session-based or persistent:

• Session cookies expire when you close your browser.
• Persistent cookies remain on your device until they expire or are deleted.

We may update this Cookie Policy from time to time to reflect changes in our practices, technologies, or applicable law. Updates will be posted on this page with a revised “Effective Date”.

Section 8: State-Specific Information

This section applies to residents of the following states: California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. As additional U.S. state privacy laws come into effect, this list will be updated accordingly. For such Users, this section supplements and, where applicable, supersedes any other provisions of this Privacy Policy. The terms “Personal Information” and “Sensitive Personal Information,” as used in this section, have the meanings assigned to them under applicable state privacy law.

8.1 Notice at Collection

We collect categories of Personal Information including identifiers, internet and device activity, commercial information, approximate and precise geolocation data, audiovisual information, health and wellness information, and inferences derived from such data. In certain cases, this may include Sensitive Personal Information, such as passwords, precise geolocation, and health-related data. We use this information for purposes including service delivery, registration and authentication, analytics, advertising, remarketing, fraud prevention, and customer communications. To the extent any such processing constitutes a sale, sharing, or targeted advertising under applicable law, you may exercise your right to opt out as described in Sections 6 and 8.3.

8.2 Sources of Information

We collect Personal Information directly from you, automatically through your use of our website or app (including cookies and trackers), and from third-party partners such as analytics, advertising, and service providers.

8.3 Your Privacy Rights

California Residents

As a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA):

• Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete. You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct. You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing. You have the right to opt out of the sale or sharing of your personal information.
• Right to Limit Use of Sensitive Personal Information. You have the right to limit our use of sensitive personal information to purposes authorized by the CCPA/CPRA.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Residents of All Other Covered States

If you are a resident of any other state listed at the beginning of this section, you have rights regarding your Personal Information under your state’s applicable privacy law. While the specific rights and exceptions vary by state, these generally include:

• The right to know and access your Personal Information;
• The right to correct inaccurate Personal Information;
• The right to delete your Personal Information;
• The right to data portability;
• The right to opt out of the sale, sharing, targeted advertising, or profiling of your Personal Information where such processing produces legal or similarly significant effects; and
• The right to non-discrimination for exercising your privacy rights.

Where your state’s law requires us to obtain your consent for processing Sensitive Personal Information, we will do so prior to collection. Where your state’s law permits you to opt out of such processing, you may do so by contacting us using the information in Section 8.4 below. To exercise any of these rights, please follow the process described in Section 8.4. We will respond to and honor all valid requests to the extent required by applicable law.

8.4 Exercising Your Rights

How to Submit a Request

To exercise any of the rights described above, please submit a verifiable consumer request to us by:

We will respond to verifiable consumer requests within 45 days of receipt, with an extension of an additional 45 days where reasonably necessary and upon notice to you.

Section 9: Children’s Privacy

Our Service is intended solely for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose Personal Information from children under the age of 13. If you are under 13, please do not use our Service or provide any Personal Information to us. If we become aware that we have inadvertently collected Personal Information from a child under the age of 13 without verifiable parental consent, we will take prompt steps to delete that information from our records. If you believe we may have collected Personal Information from a child under 13, please contact us immediately at dmca@cenegenics.com.

Section 10: Information for International Users

Locations outside the United States are independently owned and operated and act as separate data controllers. We do not control, process, or have access to personal data collected by those locations.

This Privacy Policy governs only the data processing activities of BestLife Holdings, Inc. d/b/a Cenegenics in the United States. If you are located outside the United States and are interacting with a Cenegenics location outside the United States, the privacy practices applicable to that location are governed by the policies of the independently owned and operated entity at that location, not by this Privacy Policy.

If you access our U.S.-based Service from outside the United States, your Personal Data may be transferred to and processed in the United States, where privacy laws may differ from those in your country of residence. By using the U.S. Service, you acknowledge that such processing may occur.

Section 11: Dispute Resolution

PLEASE READ THIS SECTION CAREFULLY. IT AFFECTS YOUR LEGAL RIGHTS, INCLUDING YOUR RIGHT TO FILE A LAWSUIT IN COURT AND YOUR RIGHT TO HAVE CLAIMS HEARD BY A JURY OR AS PART OF A CLASS OR REPRESENTATIVE ACTION.

11.1 Informal Resolution

Before initiating any formal dispute resolution proceeding, you agree to first contact Cenegenics at dmca@cenegenics.com and provide a written description of the dispute, the relief sought, and your contact information. The parties agree to attempt to resolve the dispute informally for a period of thirty (30) days from the date Cenegenics receives your written notice (the “Informal Resolution Period”). If the dispute is not resolved within the Informal Resolution Period, either party may proceed to arbitration as set forth below. Compliance with this informal dispute resolution process is a prerequisite and condition precedent to initiating arbitration.

11.2 Binding Arbitration

EXCEPT AS OTHERWISE PROVIDED IN SECTION 11.5 (EXCEPTIONS TO ARBITRATION), YOU AND CENEGENICS AGREE THAT ANY AND ALL DISPUTES, CLAIMS, OR CONTROVERSIES ARISING OUT OF OR RELATING TO: (A) THE TERMS OF SERVICE; (B) THIS PRIVACY POLICY; (C) YOUR ACCESS TO OR USE OF THE SERVICE; (D) THE COLLECTION, USE, DISCLOSURE, OR HANDLING OF YOUR PERSONAL DATA; OR (E) ANY RELATIONSHIP OR DEALINGS BETWEEN YOU AND CENEGENICS (COLLECTIVELY, “DISPUTES”), SHALL BE RESOLVED EXCLUSIVELY THROUGH FINAL AND BINDING INDIVIDUAL ARBITRATION RATHER THAN IN COURT.

Arbitration is a method of dispute resolution in which a neutral arbitrator, rather than a judge or jury, decides the outcome of a dispute. The arbitrator’s decision is final and binding and may only be reviewed by a court on very limited grounds.

(a) Arbitration Administrator and Rules. Arbitration shall be administered by the American Arbitration Association (“AAA”) under its Consumer Arbitration Rules (the “AAA Rules”) then in effect, except as modified by this Section 11. The AAA Rules are available at www.adr.org or by calling 1-800-778-7879. If the AAA is unavailable or declines to administer the arbitration, the parties shall mutually agree upon an alternative arbitral forum. If the parties cannot agree, a court of competent jurisdiction shall select the arbitral forum.

(b) Arbitrator. The arbitration shall be conducted before a single, neutral arbitrator selected in accordance with the AAA Rules. The arbitrator shall have exclusive authority to resolve any dispute relating to the interpretation, applicability, enforceability, or formation of this arbitration agreement, including any claim that all or any part of this agreement is void or voidable. The arbitrator shall have the authority to grant any relief that would be available in court, subject to the limitations set forth in this Section 11.

(c) Location and Manner. Unless the parties agree otherwise, arbitration shall be conducted in Clark County, Nevada, or, if you prefer, via telephone, video conference, or document submission, in accordance with the AAA Rules. If your claim does not exceed $10,000, you may elect to conduct the arbitration solely on the basis of documents submitted to the arbitrator, unless the arbitrator determines that a hearing is necessary.

(d) Fees and Costs. Payment of arbitration filing fees, administrative fees, and arbitrator fees shall be governed by the AAA Rules, except that Cenegenics will pay your share of any fees that exceed the amount you would have paid had you filed the claim in small claims court. Each party shall bear its own attorneys’ fees and costs unless the arbitrator determines that a claim or defense was frivolous or asserted in bad faith, in which case the arbitrator may award reasonable attorneys’ fees and costs to the prevailing party.

(e) Confidentiality. The arbitration proceedings and all submissions, filings, and decisions shall be kept strictly confidential and shall not be disclosed to any third party, except as may be necessary to enforce the award, as required by law, or as otherwise agreed in writing by both parties.

(f) Award. The arbitrator shall issue a written reasoned decision explaining the essential findings and conclusions on which the award is based. Any arbitration award may be confirmed and enforced in any court of competent jurisdiction.

(g) Opt-Out Right. You may opt out of this arbitration agreement by sending written notice of your decision to opt out to dmca@cenegenics.com, with the subject line “ARBITRATION OPT-OUT,” within thirty (30) days of the date you first access or use the Service. Your opt-out notice must include your name, address, and the email address associated with your account, if any. If you opt out of the arbitration agreement, all other provisions of this Section 11 shall continue to apply. Opting out will not affect your use of the Service or any other rights or obligations under this Privacy Policy.

11.3 Waiver of Jury Trial

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, YOU AND CENEGENICS EACH IRREVOCABLY AND UNCONDITIONALLY WAIVE ANY RIGHT TO A TRIAL BY JURY WITH RESPECT TO ANY DISPUTE, CLAIM, OR CONTROVERSY ARISING OUT OF OR RELATING TO THIS PRIVACY POLICY, YOUR USE OF THE SERVICE, OR THE COLLECTION, USE, DISCLOSURE, OR HANDLING OF YOUR PERSONAL DATA, WHETHER SOUNDING IN CONTRACT, TORT, STATUTE, OR ANY OTHER THEORY OF LAW.

This waiver applies to all proceedings in any court, including any proceeding brought pursuant to Section 11.5 (Exceptions to Arbitration) or any proceeding to enforce, vacate, or modify an arbitration award. Each party acknowledges that this waiver is a material and independently bargained-for element of this dispute resolution agreement and that, absent this waiver, the parties would not have entered into this agreement.

11.4 Class Action and Representative Action Waiver

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, YOU AND CENEGENICS AGREE THAT EACH PARTY MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF, CLASS MEMBER, OR REPRESENTATIVE IN ANY PURPORTED CLASS ACTION, COLLECTIVE ACTION, CONSOLIDATED ACTION, PRIVATE ATTORNEY GENERAL ACTION, OR ANY OTHER REPRESENTATIVE PROCEEDING.

Specifically:

(a) No Class Arbitration. The arbitrator shall have no authority to consolidate the claims of more than one individual, to conduct class-wide arbitration, or to award relief to any person other than the individual claimant.

(b) No Representative Claims. You expressly waive any right to bring or participate in any representative action, including any action under California’s Private Attorneys General Act (“PAGA”) or any equivalent statute under any other state’s law, to the fullest extent permitted by applicable law.

(c) Severability. If any portion of this class and representative action waiver is found to be unenforceable or unlawful for any reason, including with respect to any PAGA or other representative claims that cannot be waived under applicable law: (i) the unenforceable or unlawful portion shall be severed from this Section 11; (ii) any such PAGA or representative claim shall be stayed pending resolution of any remaining arbitrable individual claims; and (iii) the remainder of this Section 11 shall remain in full force and effect.

11.5 Exceptions to Arbitration

Notwithstanding the foregoing, the following Disputes are excluded from the binding arbitration requirement:

(a) Small Claims. Either party may bring an individual action in small claims court, provided that the claim is within the jurisdictional limits of that court and is brought and maintained on an individual basis only.

(b) Injunctive or Equitable Relief. Either party may seek emergency injunctive or other equitable relief in a court of competent jurisdiction to preserve the status quo, prevent irreparable harm, or protect intellectual property rights, pending the resolution of the dispute through arbitration. The pursuit of such interim relief shall not constitute a waiver of either party’s rights to arbitration.

(c) Government Enforcement. Claims brought by or on behalf of a government entity are not subject to arbitration under this agreement.

11.6 Governing Law; Venue

This Privacy Policy and any Disputes that are not subject to arbitration pursuant to Section 11.5 shall be governed by and construed in accordance with the laws of the State of Nevada, without regard to its conflict of law principles. For any Dispute that is not subject to arbitration, the parties irrevocably consent to the exclusive jurisdiction and venue of the state and federal courts located in Clark County, Nevada.

11.7 Severability of Arbitration Agreement

If any provision of this Section 11 (other than the Class Action and Representative Action Waiver in Section 11.4) is found to be invalid, illegal, or unenforceable, that provision shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions of this Section 11 shall continue in full force and effect. If the Class Action and Representative Action Waiver in Section 11.4 is found to be unenforceable in its entirety, then the entirety of this Section 11 shall be null and void, and any Dispute shall be resolved in a court of competent jurisdiction in accordance with Section 11.6, subject to the Jury Trial Waiver in Section 11.3 to the extent permitted by law.

Section 12: Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the Service. When we make material changes, we will update the “Effective Date” date at the top of this Privacy Policy and, where required by applicable law, provide additional notice to you (such as by email or by posting a notice on our website). Changes will take effect immediately. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after the effective date of any update constitutes your acknowledgment of the updated Privacy Policy.