CALIFORNIA CONSUMER PRIVACY ACT (CCPA) NOTICE

Testosteroneshotscom, PC (DBA: Testosterone Shots)

Last Updated: May 15, 2026

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

This Privacy Notice applies to California residents only and supplements the information in Testosterone Shots, PC’s general Privacy Policy. We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”), the California Privacy Rights Act of 2020 (“CPRA”), and other applicable California privacy laws. Any terms defined in the CCPA or CPRA have the same meaning when used in this notice.

IMPORTANT PAYMENT AND PHARMACY DISCLOSURE

Testosterone Shots is an independent telemedicine business and is separate from any licensed pharmacy. Testosterone Shots collects payment only for the patient’s telemedicine consultation, clinical review, care coordination, laboratory services, membership services, and related clinical services.

Testosterone Shots does not collect payment for prescription-only or pharmacy-only medication through Stripe or through its website checkout.

If a licensed provider determines that treatment is medically appropriate, the prescription may be sent to a licensed pharmacy partner. We may disclose Personal Information to the pharmacy as necessary for prescription transmission, care coordination, patient contact, shipping verification, billing verification, medication fulfillment, pharmacist counseling where applicable, and pharmacy compliance.

The pharmacy contacts the patient directly to verify shipping information, verify billing information, and collect payment for the medication. The pharmacy is responsible for medication billing, payment processing, dispensing, pharmacist counseling where applicable, and shipping.

Testosterone Shots does not manufacture, compound, dispense, sell, handle, warehouse, ship, or collect payment for prescription medication.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

I. INFORMATION WE COLLECT

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device, referred to as “Personal Information.”

We may collect the following categories of Personal Information from California consumers:

A. Identifiers

Examples include name, date of birth, email address, phone number, mailing address, shipping address, IP address, account username, device identifiers, cookies, and similar online identifiers.

B. California Customer Records Personal Information

Examples include name, address, telephone number, medical information, health insurance information where provided, and payment card information for telemedicine consultation, clinical review, care coordination, laboratory services, membership services, or other non-pharmacy services.

C. Characteristics of Protected Classifications Under California or Federal Law

Examples include age, sex, gender, and other protected characteristics as voluntarily provided in connection with your healthcare intake or clinical review.

D. Commercial Information

Examples include purchase history, consultation purchases, subscription or membership plan information, treatment program enrollment, transaction records, and billing information related to consultation, clinical review, care coordination, laboratory services, membership services, or other non-pharmacy services purchased through the platform.

Testosterone Shots does not collect payment for prescription-only or pharmacy-only medication through Stripe or through the website checkout.

E. Health and Medical Information / Sensitive Personal Information

Examples include clinical history, current and past medical conditions, medications, allergies, laboratory results, hormone levels, diagnostic test results, prescription history, treatment requests, provider communications, and other health information provided in connection with telehealth consultations, clinical review, treatment, or care coordination.

F. Internet or Other Similar Network Activity

Examples include browser type, device type, IP address, cookies, pages visited, time spent on pages, interaction with the website, app usage, chat activity, and email or customer service communications.

G. Geolocation Data

Examples include general location derived from IP address. Precise location is collected only if voluntarily provided or where required for clinical or legal purposes.

H. Sensory Data

Examples include audio recordings of phone calls with customer support or care coordination staff, where permitted by law.

I. Professional or Employment-Related Information

Examples include occupation or employment-related information, as voluntarily provided during intake.

J. Inferences Drawn From Personal Information

Examples include treatment preferences, health goals, communication preferences, and inferences used to provide personalized healthcare recommendations, support care coordination, improve services, or communicate with you.

II. SOURCES OF PERSONAL INFORMATION

We may obtain the categories of Personal Information listed above from the following sources:

- Directly from you when you register, complete intake forms, request a consultation, communicate with us, or purchase consultation, clinical review, care coordination, laboratory services, membership services, or other non-pharmacy services.

- Automatically as you navigate through our website or platform, including through cookies, pixels, analytics tools, and usage tracking.

- From licensed healthcare providers, clinical staff, medical groups, laboratories, pharmacies, and other healthcare providers involved in your care or care coordination.

- From licensed pharmacy partners when necessary for prescription transmission, patient contact, shipping verification, billing verification, medication fulfillment, pharmacist counseling where applicable, and pharmacy compliance.

- From payment processors and fraud prevention services in connection with payments for telemedicine consultation, clinical review, care coordination, laboratory services, membership services, or other non-pharmacy services.

- From advertising, analytics, customer support, scheduling, and technology vendors.

III. INFORMATION NOT COVERED BY THIS NOTICE

Personal Information does not include:

- Publicly available information from government records.

- De-identified or aggregated consumer information.

- Health or medical information covered by HIPAA and the California Confidentiality of Medical Information Act, to the extent such information is excluded from the CCPA’s scope.

- Information excluded by other sector-specific privacy laws, including the Fair Credit Reporting Act and the Gramm-Leach-Bliley Act.

IV. SENSITIVE PERSONAL INFORMATION

Under the CPRA, the following categories of information we collect may be considered “Sensitive Personal Information”:

- Social Security number, driver’s license, state identification number, or passport number, if provided.

- Account login credentials in combination with security codes or passwords.

- Precise geolocation data, if provided or required.

- Health and medical information, including information collected and analyzed concerning your physical condition, diagnosis, treatment, laboratory results, prescriptions, and clinical care.

- Racial or ethnic origin, where incidentally disclosed during medical intake.

- Contents of mail, email, or text messages when we are the intended recipient.

- Information concerning sex life or sexual orientation, where voluntarily provided and clinically relevant.

We use Sensitive Personal Information only as reasonably necessary to provide requested services, support clinical review, coordinate care, maintain security, comply with law, and perform other purposes permitted by the CPRA.

V. USE OF PERSONAL INFORMATION

We may use or disclose Personal Information for the following business or commercial purposes:

- To fulfill or meet the reason for which the information was provided.

- To provide, manage, and improve telehealth services, clinical review, care coordination, laboratory services, membership services, and related clinical services.

- To support licensed healthcare providers in reviewing your intake, medical history, laboratory results, treatment request, and other clinical information.

- To coordinate prescription transmission with licensed pharmacy partners when a licensed provider determines that treatment is medically appropriate.

- To support pharmacy contact with the patient for shipping verification, billing verification, medication payment collection, dispensing, pharmacist counseling where applicable, shipping, and pharmacy compliance.

- To coordinate laboratory orders and deliver laboratory results.

- To process payments and manage billing for telemedicine consultation, clinical review, care coordination, laboratory services, membership services, or other non-pharmacy services.

- To communicate with you about appointments, treatment updates, clinical review status, lab results, account activity, customer service, and related services.

- To provide email alerts, SMS messages, notices, and updates concerning services that may be relevant to you, where permitted by law.

- To carry out our obligations and enforce our rights under contracts between you and us, including billing and collections for non-pharmacy services.

- To improve our website and platform and conduct testing, research, analysis, security review, and service development.

- To protect the rights, property, or safety of Testosterone Shots, our users, providers, pharmacies, laboratories, vendors, or others.

- To respond to regulatory requests, law enforcement requests, court orders, government requests, or legal obligations.

- To disclose information to service providers and vendors who perform services on our behalf.

- To disclose information to affiliates, subsidiaries, and related entities.

- As otherwise required or permitted by law.

Testosterone Shots does not use Stripe or its website checkout to collect payment for prescription-only or pharmacy-only medication.

VI. SHARING PERSONAL INFORMATION

We may disclose Personal Information to third parties for a business purpose. In the preceding twelve (12) months, we may have disclosed the following categories of Personal Information for a business purpose:

- Identifiers

- California Customer Records personal information categories

- Characteristics of protected classifications

- Commercial information

- Health and medical information

- Internet or other similar network activity

- Geolocation data

- Sensory data

- Professional or employment-related information

- Inferences drawn from Personal Information

- Sensitive Personal Information

We may disclose Personal Information for a business purpose to the following categories of third parties:

- Affiliates, subsidiaries, and related entities

- Service providers and vendors, including payment processors, analytics providers, customer support tools, hosting vendors, scheduling tools, communication vendors, and security vendors

- Licensed healthcare providers and clinical staff involved in your care

- Medical groups and affiliated professional entities

- Licensed pharmacy partners that may receive prescriptions when treatment is approved

- Laboratory networks processing diagnostic test orders

- Payment processors, including Stripe, for payments related to telemedicine consultation, clinical review, care coordination, laboratory services, membership services, or other non-pharmacy services

- Advertising and analytics providers, where permitted by law

- Third parties to whom you authorize us to disclose your Personal Information

- Government agencies, regulators, courts, law enforcement, or other third parties as required or permitted by law

Licensed pharmacy partners are independent third-party entities and are separate from Testosterone Shots. The pharmacy contacts the patient directly to verify shipping information, verify billing information, and collect payment for the medication.

VII. SELLING OR SHARING PERSONAL INFORMATION

We do not sell your Personal Information for monetary consideration.

However, under the CPRA’s broad definition, sharing Personal Information with third-party advertising and analytics providers, such as Meta Pixel, Google Analytics, Google Ads, or similar tools, for cross-context behavioral advertising may constitute “sharing” under California law.

You have the right to opt out of the sale or sharing of Personal Information. To opt out, use the “Do Not Sell or Share My Personal Information” link on our website footer, if available, or contact us at [email protected].

VIII. RETENTION OF PERSONAL INFORMATION

We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this notice, provide services, maintain records, comply with legal and regulatory obligations, resolve disputes, enforce agreements, support clinical and administrative operations, protect security, and satisfy professional or legal recordkeeping requirements.

Retention periods may vary depending on the type of information, purpose of collection, legal requirements, healthcare requirements, and operational needs.

IX. YOUR RIGHTS AND CHOICES

The CCPA and CPRA provide California residents with the following rights regarding Personal Information:

1. Right to Know

You have the right to request that we disclose the categories and specific pieces of Personal Information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting, selling, or sharing it, and the categories of third parties with whom we disclose it.

2. Right to Access / Data Portability

You have the right to receive a copy of the specific pieces of Personal Information we have collected about you in a portable and readily usable format.

3. Right to Correct

You have the right to request that we correct inaccurate Personal Information we maintain about you.

4. Right to Delete

You have the right to request that we delete Personal Information we collected from you and direct our service providers to delete your Personal Information, subject to certain exceptions.

5. Right to Opt Out of Sale or Sharing

You have the right to opt out of the sale of Personal Information and the sharing of Personal Information for cross-context behavioral advertising purposes.

6. Right to Limit Use of Sensitive Personal Information

You have the right to request that we limit our use and disclosure of Sensitive Personal Information to uses necessary to perform the services you request, ensure security and integrity, conduct non-personalized advertising, and perform other purposes permitted under the CPRA.

7. Right to Non-Discrimination

We will not discriminate against you for exercising any CCPA or CPRA rights. We will not deny goods or services, charge different prices, provide a different level of quality, or suggest that you will receive different treatment because you exercised your privacy rights.

X. DELETION REQUEST EXCEPTIONS

We are not required to comply with a deletion request if retaining your Personal Information is necessary to:

- Complete the transaction for which the Personal Information was collected or fulfill a contract with you.

- Provide telemedicine consultation, clinical review, care coordination, laboratory services, membership services, or other requested services.

- Maintain medical, legal, compliance, or business records as required or permitted by law.

- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible.

- Debug products to identify and repair errors.

- Exercise free speech, ensure the right of another consumer to exercise free speech, or exercise another right provided by law.

- Comply with the California Electronic Communications Privacy Act.

- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest, where permitted by law.

- Enable solely internal uses reasonably aligned with your relationship with us.

- Comply with a legal obligation.

- Make other internal and lawful uses of the information compatible with the context in which it was provided.

XI. EXERCISING YOUR RIGHTS

To exercise any of the rights described above, submit a verifiable consumer request to us by:

Phone/Text: 323-283-9219

Email: [email protected]

Website: testosteroneshots.com

Mail:

Testosterone Shots, PC

ATTN: Privacy Officer

638 1/2 N Robertson Blvd

West Hollywood, CA 90069

Only you, or a person legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child, where applicable.

You may make a verifiable consumer request for access or data portability up to twice within a 12-month period.

Your request must provide sufficient information to allow us to reasonably verify your identity and describe your request with enough detail for us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide personal Information if we cannot verify.