Page Title

PRIVACY POLICY

Effective Date: May 1, 2026

Katharos Laboratories, Inc. (“Katharos”, “we”, “us”, or “our”) values your privacy and the

security of your information. This Privacy Policy (the “Policy”) describes how Katharos uses,

discloses, and otherwise processes individually identifiable information (“Personal Information”)

it collects from our website made available at www.katharoslab.com (the “Website”), and our

Products and Services accessible through the Website. 

PLEASE REVIEW THIS PRIVACY POLICY CAREFULLY. It describes how we collect, use,

and disclose information that we obtain about visitors of our Website and users of our Services.

This Privacy Policy is incorporated into our general Terms and Conditions (“Terms”). Any

capitalized terms not defined in this Privacy Policy have the meanings provided in the

Terms. For additional information on the third parties to whom we disclose your information via

the Services, please see the section below on how we disclose information. By visiting the

Website or using our Products or Services, you acknowledge and agree that your Personal

Information will be handled as described in this Policy. 

Privacy laws and guidelines are part of a constantly changing environment. We reserve the right,

at our discretion, to change, modify, add, or remove portions of this Policy at any time. Material

changes will be posted on the Website or otherwise communicated to you. All changes will be

effective immediately upon posting to the Website. 

Supplemental State Privacy Notices

California Residents: If you are a California resident, please see the California Privacy Rights

Notice below for additional rights and information that may apply to you. 

Resident of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland,

Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island,

Tennessee, Texas, Utah, and Virginia: Please see the State Supplemental Privacy Notice

section below for additional rights and terms that may apply to you. 

INFORMATION WE COLLECT ABOUT YOU 

We may collect Personal Information directly from you and from third parties, as well as

automatically through your use of the Website or our Services. 

Information We Collect Directly From You 

We collect the below Personal Information directly from you via this Website and Services,

including via dynamic intake forms where you enter information electronically via our Website. 

Account Information 

You may be able to browse the informational areas of the Website without creating an account.

However, registration is required to use the Services. To register, you may be asked to provide

certain Personal Information, such as your name, date of birth, address, email, phone number, as

well as a user ID and password, and government or other picture ID. 

The email address that you provide is the email address that will be used for correspondence

regarding your account. By providing us with an email address you recognize, understand, and

agree that this is the email address we will use for your account and communications. We are not

responsible for any disclosures that may result from a third party’s access to your email account,

whether or not that access is authorized by you. 

Payment Information 

You are required to provide payment information for all Product orders. Payment information is

processed directly by one of our payment processors in accordance with their respective privacy

policies. For more information about how these payment processors handle personal data, please

review their privacy policies. 

Sensitive Information 

We do not intend to collect any data that reveals your racial or ethnic origin, political opinions,

religious or philosophical beliefs or trade union membership. Due to the nature of our Products

and Services, certain information we collect may be considered “Sensitive Personal Information”

in certain states. Depending upon the state of your residence, you may have additional rights

relating to our use of your Sensitive Personal Information.

Information We Receive from Others 

Katharos may also receive Personal Information about you from third parties. These third parties

consist of social media websites that provide lead information as well as interest based

advertising providers and data analytics providers that may provide us Personal Information

about you.

Information We Collect Automatically 

Account Activity. 

We may collect data about how you use (i) your online account, and (ii) the Website when you

are logged into your account. 

Tracking Technologies.

Like many other websites, we may automatically collect information about your use of our

Website and Services through scripts, cookies, pixels, web beacons, and other tracking

technologies (collectively, “Tracking Technologies”), which information includes: your browser

type and operating system, web pages you view, links you click, your IP address, your internet

service provider, device ID, approximate geographic location, the referring URL that led you to

the Website, data related to how and when you use the Website, and pages visited and average

time spent on the Website. Some of this may be deemed Personal Information. 

We may combine this information with other information that we have collected about you,

including, where applicable, your account information and other Personal Information. Some of

this information may be disclosed with our analytics providers and used for their own advertising

purposes. 

Tracking Technologies enable Katharos to: (i) collect information about your use of the Website;

(ii) understand general Website usage and volume statistical information; (iii) improve the

Services, experience, content and offerings on the Website; (iv) enable advertising and analytics

functionality by tracking your interaction with the Website and Services and collecting

information about how you use the Website and Services; and (v) allow for customized use and

experience of the Website and Services. 

Most browsers automatically accept cookies and Tracking Technologies. You can disable certain

functions by changing your browser settings but disabling cookies and Tracking Technologies

may impact your use and enjoyment of the Website. Not all features or functions of the Website

may work properly if you disable Tracking Technologies. You cannot disable all Tracking

Technologies, such as cookies that are essential to the functioning of the Website. Depending on

where you live, you may also have the ability to consent to the use of certain Tracking

Technologies through our cookie banner or other privacy settings provided on the Website.

Please review our State Supplemental Privacy Notices below for additional information. 

Ad Networks 

We use third-party ad networks (called third-party ad servers or network advertisers) to deliver

ads to you on our behalf across the internet, via email and media streaming services. These third-

party ad networks may place their Tracking Technologies on the Website or in your browser to

collect information about you when you visit the Website (such as browser type, time and date,

browsing or transaction activity, subject of advertisements clicked or scrolled over, or a platform-

provided identifier during your visits to this Website and other websites) to enable those third-

party ad networks to deliver advertisements to you on third-party websites, mobile applications,

email, and media streaming services (including Google, Meta, Snapchat, TikTok, Reddit, and

other social media platforms as further described below) for our Products and Services or those

of third parties that are likely to be of interest to you. 

If you do not want to receive those kinds of advertisements, look for the “Ad Choices” icon in

the advertisements, which will contain a link to the privacy policy of the ad network that will

provide you with information on how to opt-out of receiving such targeted advertising. 

You can also visit the

websites http://www.networkadvertising.org, http://www.aboutads.info, http://www.allaboutcook

ies.org or http://www.youronlinechoices.com to change your consumer preferences with respect

to certain online ads and to obtain further information about third-party ad networks and online

behavioral advertising. 

Pursuant to certain state privacy laws, you may also have the right to opt out of the sale or

sharing of your Personal Information for targeted advertising as detailed below in

our Supplemental State Privacy Notice.

Analytics 

Like many websites, our Website uses analytics tools to collect information about your use of our

Website. Your web browser automatically sends this information to our analytics vendor, such as

the web address of the page that you visit and your IP address. Our analytics providers may also

set cookies or read preexisting cookies. This information may be stored on the vendor´s servers.

Our analytics provider may then use this information to provide us with reports about traffic to

our Website and your visit to our Website (such as the domain from which you access the

internet, the web address of the Website from which you linked to our Website, the time and date

of your visit to the web pages that you view and click-through). We will use this data to improve

our Website structure and content. 

Social Media 

We may be active on social media, including Facebook, X (formerly Twitter), Snapchat,

Instagram, TikTok, and other similar platforms (“Social Media”). Anything you post on Social

Media will not be treated confidentially. We may post (or re-post) on the Website and our Social

Media pages any comments or content that you post or otherwise disclose on Social Media

pages. Your use of Social Media is governed by the privacy policies and terms of the providers

that own and operate those websites and not by this Policy. We encourage you to review those

policies and terms. 

CALIFORNIA’S "DO-NOT-TRACK" REQUIREMENT. WE CURRENTLY DO NOT

HONOR “DO NOT TRACK” REQUESTS. 

HOW WE MAY USE YOUR INFORMATION 

In addition to the uses noted above, we may also use the Personal Information that we collect or

receive about you in order to: 

 provide our Products and Services;

 as stated, or agreed to at the point of collection;

 communicate with you about the Website and your use of our Services and purchase of

our Products, to respond to your inquiries, to provide technical support and assistance, to

deliver any administrative notices or alerts and communications relevant to your use of

the Website or Services, and for other customer service purposes;

 verify your identity in registering and holding an account;

 administer your account, including processing payments and coordinating the fulfillment

of any Product orders;

 provide, operate, analyze usage of and improve the Website and Services;

 tailor the features, performance and support of the Website and Services to you and your

preferences;

 display advertising relating to our Services on our Website and on third-party websites;

 market our services and those of third parties we believe may be of interest to you,

including targeted offers and ads through our Website, third-party websites, and via email

or text message (with your consent, where required by law);

 investigate, prevent, defend against potential violations of Katharos’ Terms and any

illegal activities;

 fulfill any obligation of Katharos as required by law;

 to protect our legal rights or interests, or those of other parties, including to bring a legal

action against you or anyone who may be causing harm to us, the Website, or other users

of the Website; and

 for any other purpose for which you provide your consent. 

We may use Tracking Technologies to: (i) make our Website function properly; (ii) provide

personalized experiences; (iii) tailor our interactions with you; (iv) help with our marketing

efforts; (v) provide us with valuable data and statistics about the usage and effectiveness of our

Website and to help us improve our Website; and (vii) help us improve our services. 

In addition, we may use certain technologies and third-party services to analyze usage and

deliver targeted advertising. Our analytics and ad network providers include, but are not limited

to: 

 Google Analytics. We may use Google Analytics to measure and report how users

interact with our Website, emails, and advertisements to analyze the traffic to our Website

and for the other purposes set forth above. For more information about Google Analytics

and how it collects and processes data, please see “How Google uses information from

Websites or apps that use our services." Google’s ability to use and disclose information

collected by Google Analytics about your visits to the Website is restricted by

Google’s Terms of Service and Privacy Policy.

 If you do not want your Website visit data reported by the Google Analytics JavaScript,

you can install the Google Analytics opt-out browser add-on. This add-on instructs the

Google Analytics JavaScript to prohibit sending visit information to Google Analytics,

but does not prevent information from being sent to the Website itself or in other ways to

other Website analytics services. You can choose not to be included in Google Analytics

by visiting https://tools.google.com/dlpage/gaoptout.

 Google Ads. We may use Google Ads, to serve ads across various Websites. Google uses

Tracking Technologies to collect data about your visits to the Website to generate targeted

advertisements to you on other Websites that you visit. To opt-out of this type of

advertising by Google, to customize your ad preferences, or to limit Google’s collection

or use of such data, visit Google’s My Ad Centre and follow Google’s personalized ad

opt-out instructions.

 Pixels. Some of our ad network providers use include pixels. Pixels are small pieces of

code (also known as an HTML code, JavaScript code, snippet or tag) that are placed on

our Website that allows us and our providers to collect and track data on user behavior

such as page views, clicks, and conversions by our Website visitors and customers when

they have seen or clicked on our advertisements on other websites. This help us and our

providers gain insights into which ads are performing well, which audience types are

engaging with our content, and which actions users are taking after clicking on our ads.

These pixels include:

 Meta Pixel. With the help of Meta Pixel, we may be able to keep track of what users do

after they see or click on an advertisement when using Facebook, Instagram, WhatsApp,

or other Meta account. The data from Meta Pixel is also saved and processed by Meta.

Meta can connect this data with your Facebook, Instagram, WhatsApp, or other Meta

account and use it for its own and others advertising purposes, in accordance with Meta’s

Data Policy, which can be found at https://www.facebook.com/privacy/policy/. To opt out

of Meta using your data, you can visit the Accounts Center from within the settings in

your applicable Meta account. 

 TikTok Pixels. You can learn more about how TikTok may use your data here: TikTok

Privacy Policy and you can manage your advertising preferences with TikTok by visiting

the privacy settings within the TikTok app. 

OPTING OUT OF MARKETING COMMUNICATIONS 

You can stop receiving marketing emails from Katharos by clicking the “unsubscribe” link

included at the bottom of a Katharos marketing email where applicable. You cannot opt out of

transactional emails we need to send you relating to normal business operations. To opt out of all

emails from Katharos, you may email customerservice@katharoslab.com and cancel your

Katharos account. 

HOW WE MAY DISCLOSE YOUR PERSONAL INFORMATION WITH OTHERS 

Personal Information 

We may disclose your Personal Information as follows: 

 with employees and affiliates; 

 with service providers and vendors that we use to support the Website or otherwise in

connection with administering and providing our Products and Services, sending

marketing and other communications and billing and collections; 

 with other third parties as we deem appropriate or necessary to comply with applicable

laws or legal process, such as in response to a subpoena in compliance with applicable

privacy laws, or to enforce our Terms;

 to a buyer or successor in the event of a sale, merger or other transaction that involves the

transfer of such information to the other company;

 law enforcement and other governmental agencies if we believe in good faith are legally

required to disclose that Personal Information;

 when necessary to identify, contact or bring a legal action against someone who may

cause or be causing harm to, or interfering with our or a third party’s legal rights;

 with third parties for marketing, advertising, research or other purposes such as

performing data and statistical analysis and troubleshooting security or other problems

with our Website; and

 when explicitly requested by or consented to by you, or for the purposes for which you

disclosed the Personal Information to us as indicated at the time and point of the

disclosure (or as was obvious at the time and point of disclosure). 

Non-Personally Identifiable Information 

We may disclose aggregated or de-identified information (in other words, information that does

not personally identify you) without restriction, subject to applicable law. Katharos is the sole

and exclusive owner of such de-identified and aggregated information. 

SAFEGUARDING PERSONAL INFORMATION 

We employ reasonable technical, physical, administrative and organizational safeguards to

safeguard Personal Information from loss, misuse, unauthorized access, disclosure, alteration and

destruction. 

While we take commercially reasonable measures to protect your Personal Information from

loss, misuse and alteration, it cannot ensure or guarantee the security of any information you

transmit to us or through the Website or our Services. WE DO NOT COVENANT,

REPRESENT, OR WARRANT THAT THE TRANSMISSION OF YOUR PERSONAL

INFORMATION WILL BE SECURE. 

ACCESS FROM OUTSIDE THE UNITED STATES 

If you access the Website from outside the United States, please be aware that Personal

Information may be transferred to, stored in, and processed in the United States. Certain

governmental authorities may not consider the level of protection of Personal Information in the

United States to be equivalent to that required by other jurisdictions. 

CHILDREN’S PRIVACY

Our Website and Services are not directed to individuals under the age of eighteen (18). We do

not knowingly collect Personal Information from children under the age of 18. If we learn that

we have collected Personal Information from a child under the age of 18, we will promptly

delete that information. If you believe we have collected information from a child under the age

of 18, please contact us immediately at customerservice@katharoslab.com.

THIRD PARTY WEBSITES 

THIS PRIVACY POLICY ONLY APPLIES TO KATHAROS. 

THE WEBSITE MAY LINK TO WEBSITES NOT CONTROLLED BY US. KATHAROS

DOES NOT CONTROL AND IS NOT RESPONSIBLE FOR, HOW THIRD PARTIES

HANDLE YOUR PERSONAL INFORMATION. PLEASE EXERCISE CAUTION AND

CONSULT THE PRIVACY POLICIES POSTED ON EACH THIRD-PARTY WEBSITE FOR

FURTHER INFORMATION. 

WHAT YOU SHOULD DO TO PROTECT YOUR INFORMATION 

Your cooperation is imperative in safeguarding your Personal Information. Choose your account

password carefully, as anyone with access to your account password may be able to assume your

online identity, view and modify your information and communicate with us via the Website, and

take other action. It is your responsibility to prevent disclosure of your password to others, and to

change your password if you feel that its security has been compromised. You should take steps

to protect against unauthorized access to your password, phone, and computer by, among other

things, signing off after using a disclosed computer, choosing a robust password and keeping

your log-in and password private. If you suspect someone has accessed your account or that your

account’s security has otherwise been compromised, please contact us immediately as set forth

below. 

Additionally, you will periodically receive email correspondence from us that may include

information relating to the details of your account. Accordingly, it is critical that you safeguard

your designated email address and restrict access thereto. 

ACCESSING, CORRECTING, UPDATING, AND DELETING YOUR PERSONAL

INFORMATION 

You may access and update certain information or deactivate your account from your profile

page after logging into your account. Additionally, you may at any time request to access, correct

or update any Personal Information by contacting us at customerservice@katharoslab.com.

We will make reasonable efforts to respond promptly to all such requests. In certain

circumstances, we may deny your request, such as if we believe the request would violate any

law or cause the information to be inaccurate. We will inform you of the reason for any such

denial. 

You may at any time make a request for us to delete your Personal Information. We will

promptly attempt to comply with all such requests, unless such requests are in conflict with any

requirements to retain such information pursuant to applicable law or otherwise. When we delete

your Personal Information, it will be deleted from the active database, but may remain in our

archives. We may also retain and continue to use any information that does not personally

identify you. Further, to the extent your Personal Information has been disclosed to third parties,

we may not be able to access such Personal Information or cause the deletion or modification of

such Personal Information by the relevant third parties. 

REPORT VIOLATIONS 

You should report any suspected violations of this Privacy Policy

to customerservice@katharoslab.com.

Shine the Light Disclosure: Your Privacy Rights Regarding Third Party Marketing. 

The California “Shine the Light” law, California Civil Code 1798.83, gives our California

resident customers the right under certain circumstances to request information from us

regarding the categories of Personal Information (as defined in the Shine the Light law) that we

disclose to third parties or affiliates for their direct marketing purposes. To request such

disclosure, contact us at customerservice@katharoslab.com and identify your request as “Shine

the Light”. 

QUESTIONS 

If you have questions or concerns about this Privacy Policy, please contact us

at customerservice@katharoslab.com.

STATE SUPPLEMENTAL PRIVACY NOTICES 

CALIFORNIA PRIVACY RIGHTS NOTICE

THIS SECTION PROVIDES ADDITIONAL PROVISIONS APPLICABLE ONLY TO

RESIDENTS OF CALIFORNIA. If any information in this section conflicts with the main body

of this Policy above, the information in this section controls for California residents. The

California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of

2020 and its implementing regulations (collectively, the “CCPA”) requires us to provide

California residents additional disclosures as set forth below. Capitalized terms used below that

are not defined in this Policy have the meanings given them under the CCPA. 

Personal Information collected in the last 12 months 

Information on the specific data points that we may have collected is set forth above in the

section Information We Collect About You. These data points correspond to the following

categories of Personal Information that we may have collected in the last 12 months as follows: 

 identifiers (such as name, address, email address);

 personal information described in Cal. Civ. Code Section 1798.80;

 characteristics of legally protected classifications under federal or California law;

 commercial information (such as transaction data);

 internet or other network or device activity (such as IP address);

 general geolocation information;

 visual information (such as your picture on your driver’s license); and

 Sensitive Personal Information. 

Purposes of Collecting Personal Information 

We collect the above categories of Personal Information for the purposes set forth in the section

above titled How We May Use Your Information. 

Sources of Personal Information 

We collect the categories of Personal Information from those sources set forth in the section

above titled Information We Collect About You. 

Retention 

We may retain your Personal Information, including Sensitive Personal Information, for as long

as needed or permitted in light of the purpose(s) for which it was obtained and consistent with

applicable law. The criteria used to determine our retention periods include: 

 The length of time we have an ongoing relationship with you;

 Whether there is a legal obligation to which we are subject (for example, certain laws

require us to keep records of your transactions or communications for a certain period of

time before we can delete them); or

 Whether retention is advisable in light of our legal position (such as in regard to

applicable statutes of limitations, litigation, or regulatory investigations). 

Categories of Third Parties to Whom Personal Information is Disclosed 

In the last 12 months, some or all of the above categories of Personal Information may have been

disclosed to the categories of third parties set forth in the section above titled How We May

Disclose Your Information with Others for the applicable business purposes set forth above in

the section titled How We May Use Your Information. 

Sale or Sharing of Personal Information 

We do not sell Personal Information for monetary compensation, however, under California law,

sharing certain data to certain third parties for online marketing and cross-contextual behavioral

advertising may be considered the “sale” or “sharing” of your Personal Information. In the past

12 months, as contemplated by California law, we may have sold or shared the following

categories of Personal Information for purposes of online behavioral advertising to third party ad

networks:

 identifiers;

 internet and other electronic network activity;

 Sensitive Personal Information; and

 Inferences.

You may opt out of our “sale” or “sharing” of your Personal Information as further detailed

below. 

Your California Privacy Rights 

If you are a California resident, subject to certain limitations, the CCPA allows you to make

certain requests about your Personal Information. Specifically, the CCPA allows you to make the

types of requests below at no charge: 

Request to Delete 

The right to request deletion of certain Personal Information we have collected. 

Request to Access 

The right to request access to and, subject to certain exemptions, receive a copy of the specific

pieces of Personal Information that we have collected and to have this delivered, either: (i) by

mail; or (ii) electronically in a portable and, to the extent technically feasible, in a readily usable

format. 

Right to Know 

The right to request information about the Personal Information we have collected about you,

including: 

 categories of Personal Information collected;

 categories of sources of Personal Information;

 business and/or commercial purposes for collecting, selling, or sharing Personal

Information;

 categories of third parties with whom we have disclosed Personal Information;

 categories of Personal Information that we have disclosed with a third party for a

business purpose; and

 categories of third parties to whom their Personal Information has been sold and the

specific categories of Personal Information sold to each category of third party. 

Right to Correction 

The right to request that we correct inaccurate Personal Information. 

Right to Opt Out of the Sale or Sharing of Personal Information 

You have the right to limit uses and disclosures of Personal Information and may request to opt

out of the sale or sharing of your Personal Information for online behavioral advertising by

emailing us at customerservice@katharoslab.com. 

If you are a California resident, you have the right to opt out of the “sale” or “sharing” of your

information for cross-contextual behavioral advertising. To exercise this opt out right, you can

email us at customerservice@katharoslab.com. 

Right to Limit the Use and Disclosure of Sensitive Personal Information 

You have the right to limit our use and disclosure of your Sensitive Personal Information to only

uses that are necessary to perform the Services we provide to you. You may limit the use and

disclosure of Sensitive Personal Information by mailing us at

customerservice@katharoslab.com. 

Right to No Discrimination or Retaliation 

You also have the right to not receive discriminatory treatment or retaliation if you elect to

exercise the above rights. 

Submitting a Request to Delete, Access, Know, or Correct 

If you are a California resident and you would like to make a request to delete, access, know, or

correct your Personal Information under California law, email us

at customerservice@katharoslab.com. Please include your full name, email address and address

associated with your use of our Services, along with an identification of the rights you would like

to exercise, so that we can process your request in an efficient manner. 

Who May Exercise Your Rights 

You may request the above on behalf of yourself or on behalf of a minor if you are the parent or

legal guardian of the minor. In addition, you may authorize an agent to exercise your rights on

your behalf, if you provide the agent with written signed permission. 

Verification of Your Request 

Once we receive your request, we will contact you to confirm receipt of your request. We will

require sufficient information from you in order to verify your identity and the authenticity of

your request. If you do not provide us with sufficient information in your request, we may

request additional information to verify identity and the authenticity of the request. Certain types

of requests may require additional verification, as we are subject to higher standards of

authentication for certain requests. 

If an authorized agent contacts us to exercise the above rights, we will need to verify their

identity as well as your identity. We will also require proof of your written authorization to the

agent to act on your behalf, unless the agent holds a lawful Power of Attorney under applicable

laws, in which case we will require evidence of such Power of Attorney. 

We may deny your request as permitted or as required by law and we may charge a fee to process

or respond to your request if it is excessive, repetitive, or manifestly unfounded. If we deny your

request, you will have the right to appeal within thirty (30) days of our sending the denial by

responding directly to the communication denying your request or by emailing us at

customerservice@katharoslab.com. 

Contact Us 

If you have any questions about this Privacy Information for California Privacy Rights Notice,

please contact us at customerservice@katharoslab.com. 

ADDITIONAL STATE SUPPLEMENTAL PRIVACY NOTICE FOR RESIDENT OF

COLORADO, CONNECTICUT, DELAWARE, INDIANA, IOWA, KENTUCKY,

MARYLAND, MINNESOTA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW

JERSEY, OREGON, RHODE ISLAND, TENNESSEE, TEXAS, VIRGINIA, OR UTAH

This Section explains how to exercise your consumer privacy rights to the extent you are a

resident of one of the above mentioned states (“State Privacy Laws”). If you have any questions

as to whether the following consumer privacy rights apply to you, you can contact us

at customerservice@katharoslab.com. 

Consumer Privacy Rights Under State Privacy Laws

Depending on where you live and subject to certain exceptions, you may have some or all of the

following rights under State Privacy Laws: 

 Right to Request Access. You may have the right to confirm whether or not we are

processing your Personal Information and to access such Personal Information.

 Right to Request Data Portability. You may have the right to obtain a copy of your

Personal Information that you previously provided to us in a portable and, to the extent

technically feasible, readily usable format that allows you to transmit the information to

another business without hindrance, where the processing is carried out by automated

means.

 Right to Know. You may have the right to know what Personal Information we have

collected about you, including the categories of sources from which the Personal

Information is collected, the business or commercial purpose for collecting, selling, or

sharing Personal Information, the categories of third parties to whom we disclose

Personal Information, the categories of Personal Information disclosed to third parties,

and the specific pieces of Personal Information we have collected about you.

 Right to Request Correction. You may have the right to request that we correct inaccurate

Personal Information that we maintain about you.

 Right to Request Specific List of Third Parties. You may have the right to request a list of

the specific third parties with whom we have shared or sold your Personal Information.

 Right to Request Categories of Third Parties. You also may have a right to obtain a list of

the specific third parties to whom we have disclosed your Personal Information. If we do

not maintain this information in a format specific to you, we may provide a list of

specific third parties to whom we have disclosed any consumers’ personal data instead. 

 Right to Request Deletion. You may have the right to request that we delete your Personal

Information that we have collected from or about you. 

 Right to Opt-Out of the Sale of Personal Information, Targeted Advertising, and

Profiling. State Privacy Laws provide consumers a right to opt-out of the sale of Personal

Information and the use of Personal Information for targeted advertising or profiling.

While we do not sell Personal Information for money or engage in profiling in

furtherance of our decisions that produce legal or similarly significant effects, we may

share, disclose or transfer Personal Information for other consideration and this may be

considered a “sale” under certain State Privacy Laws by engaging in targeted advertising.

You have the right to opt-out of the sale of Personal Information and targeted advertising

as further detailed below. 

 Right to Non-Discrimination. The right not to receive discriminatory treatment for

exercising your privacy rights. 

Where permitted under applicable law, we may decline a request (other than for opt outs) if we

are unable to verify your identity (or an agent’s authority to make the request) and confirm the

Personal Information we maintain relates to you. 

How to Exercise Your Rights Under State Privacy Laws

Submitting a Request for Data Portability or to Delete, Access, Know, or Correct Your

Personal Information.

To submit any of the rights above, you may submit your request to us by contacting us

at customerservice@katharoslab.com. Please include your full name, email address and address

associated with your use of our Services, along with an identification of the rights you would like

to exercise, so that we can process your request in an efficient manner. 

Opting-Out of Targeted Advertising. 

You may exercise your right to opt-out of the processing of your Personal Information for

purposes of targeted advertising by emailing us at customerservice@katharoslab.com. 

Consent for Sensitive Personal Information. 

By consenting to our use of your Sensitive Personal Information, you agree that we may use

cookies and other tracking technologies, and allow our advertising partners to use similar

technologies, to process your Personal Information to show you ads promoting Katharos on other

Websites and services. Regardless of whether the information is considered sensitive personal

information, you may opt-out of our use of your Personal Information for targeted advertising at

any time as described above. 

NOTICE FOR TEXAS RESIDENTS: We may sell your sensitive personal data. 

Verification of Your Request 

You must provide sufficient information to allow us to reasonably verify you are the individual

to whom the Personal Information relates, and you must describe your request with sufficient

detail to allow us to properly understand, evaluate, and respond to your request. 

When we receive your rights request (i) we will acknowledge receipt of your request; (ii) we will

try to match the information you provide in making the request with information we already

maintain about you; (iii) in order to verify your identity, we may ask you to provide additional

information, which may include Personal Information; and (iv) we will consider various factors

when determining how to verify your identity, such as the sensitivity and value of the data, the

risk of harm, and the likelihood of fraud. 

We will only use Personal Information we collect during the verification process for the purpose

of verifying your identity. If we are unable to verify your identity as required by applicable laws

and regulations, we will decline to comply with your request, and let you know why. In addition,

we may decline to comply with your request as permitted by the applicable State Privacy Law.

We may charge a fee as permitted by the applicable State Privacy Laws, such as to process or

respond to your request if it is excessive, repetitive, manifestly unfounded, or if we believe the

request is fraudulent or submitted for purposes other than exercising applicable privacy rights. 

Residents of certain states have a right to submit consumer requests using an authorized agent. If

we receive a request from an authorized agent, we will need to verify and authenticate your

identity as the individual to whom the information relates, the agent’s identity, and the agent’s

authority to act on your behalf. We may deny a request from an authorized agent if we do not

have proof that they are authorized by you to act on your behalf. 

Furthermore, a parent or legal guardian may make a request on behalf of their dependent or non-

adult child. We may deny a request if you are unable to prove that you are the custodial parent or

legal guardian. 

Appeals 

If we reject or deny your request, you may appeal our decision within 30 days of receiving our

denial by responding directly to the communication denying your request or by submitting your

appeal to customerservice@katharoslab.com. If we deny your appeal, depending upon your state

of residence, you may have the ability to submit a complaint to your state’s Attorney General. 

De-identified Data Commitment 

We will not attempt to re-identify any de-identified data that we maintain and use.