Privacy

Scope and Applicability

This Privacy Policy describes how Hair and Beyond Rx, operated by Kellen Gardner, collects, uses, discloses, and safeguards personal information when you access or use hairandbeyond.net, our related pages, emails, and any interactive features (collectively, the “Site”). This Policy applies to information collected from individuals in the United States and, where stated, includes disclosures required by U.S. state privacy laws.

By using the Site, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with any part of it, please discontinue use of the Site.

About Us

Controller/Owner: Kellen Gardner (doing business as “Hair and Beyond Rx”)

Postal Address: 700 Ikea Ct, West Sacramento, CA 95605, United States

Contact Email: [email protected]

Information We Collect

Information You Provide

Identifiers and contact details such as name, email address, and postal address when you contact us, subscribe to communications, or submit inquiries.
User content such as messages, feedback, reviews, or survey responses.
Health-related information you choose to provide in free-text fields (for example, information about conditions, treatments, or medications) when asking questions or requesting resources.

Information Collected Automatically

Device and usage data, including IP address, browser type, operating system, device identifiers, referring/exit pages, clickstream data, date/time stamps, and pages or content viewed.
Approximate location information (e.g., city or region) inferred from IP address.
Analytics information, including metrics on traffic sources, page performance, and engagement.
Cookie and tracking data from cookies, pixels, tags, and similar technologies to facilitate Site functionality, analytics, fraud prevention, and to understand content performance. Some partners may associate this information with identifiers for advertising measurement.

Information from Third Parties

Service providers and vendors (e.g., analytics, measurement, and hosting providers) may provide aggregated or de-identified reports and metrics.
Affiliate networks and advertising partners may provide information for referral attribution and campaign measurement.

Sensitive Information

We do not require sensitive personal information to use the Site. If you choose to provide health-related information (which may be considered sensitive under some laws), we will use it only to respond to your inquiry or provide requested resources and will not use or disclose it for marketing or to infer characteristics without your consent.

How We Use Information

To operate, maintain, and improve the Site and our content.
To respond to inquiries, send administrative communications, and provide requested resources.
To analyze Site performance, troubleshoot issues, and perform research and development.
To detect, investigate, and prevent fraud, abuse, and security incidents.
To comply with legal obligations, enforce terms, and protect rights and safety.
For referral attribution and measurement related to affiliate links and partnerships.
With your consent, for any other purpose disclosed at the time of collection.

Cookies and Tracking Technologies

We use the following categories of cookies and similar technologies:

Essential: Necessary for basic Site functionality and security.
Analytics and performance: Help us understand how users interact with the Site to improve content and usability.
Advertising and affiliate measurement: Enable referral attribution and measure the effectiveness of outbound links to third-party pharmacies or services.

You can control cookies through your browser settings and, where applicable, device settings. If you disable certain cookies, parts of the Site may not function properly.

Global Privacy Control (GPC): Where required by applicable law (e.g., California), we treat a valid, user-enabled GPC signal as a request to opt out of sale/sharing of personal information for the browser that sends the signal.

Do Not Track (DNT): The Site does not currently respond to DNT signals. We will honor GPC where mandated.

Disclosures of Personal Information

We may disclose personal information as follows:

Service Providers: With vendors that perform services on our behalf, such as hosting, security, analytics, and communications. These parties are restricted from using personal information for purposes other than providing services to us.
Analytics and Measurement Partners: To obtain insights into Site performance and referral attribution.
Affiliate and Advertising Partners: Limited identifiers and event data may be shared or made available for attribution and measurement when you click outbound links. Under certain state laws, this may be deemed a “sale” or “sharing” of personal information for targeted advertising.
Business Transfers: In connection with a merger, acquisition, or other corporate transaction, subject to standard confidentiality obligations.
Legal and Safety: To comply with applicable laws, lawful requests, and legal processes; to protect the rights, privacy, safety, or property of users, the public, us, or others; and to enforce our terms and policies.
With Your Consent: For any other disclosures for which you provide consent.

We do not disclose personal information for money. However, some of our disclosures for analytics, referral attribution, and advertising measurement may be considered “selling” or “sharing” personal information under certain state privacy laws. You may opt out as described below.

Your Privacy Rights

California (CCPA/CPRA)

California residents have the right to:

Know/access the categories and specific pieces of personal information we have collected about you.
Request deletion of personal information, subject to legal exceptions.
Correct inaccurate personal information.
Opt out of the sale or sharing of personal information, including for targeted advertising.
Limit the use and disclosure of sensitive personal information. We do not use sensitive personal information for purposes that require a right to limit beyond what is necessary to provide the Site or respond to your requests.
Non-discrimination for exercising your rights.

We process verifiable consumer requests within 45 days (with a possible 45-day extension where reasonably necessary, which we will communicate).

Colorado, Connecticut, Virginia, and Utah

Residents of these states may have rights to:

Confirm whether we process your personal data and access it.
Correct inaccuracies.
Delete personal data.
Obtain a portable copy of personal data.
Opt out of targeted advertising, certain profiling, and, where applicable, the sale of personal data.

Appeals: If we deny your request, you may appeal by responding to our decision email and writing “Privacy Appeal” in the subject line. We will inform you in writing of any action taken or not taken, and the reasons, within the period required by law.

Nevada

Nevada residents may opt out of the sale of personal information by contacting us as described below. We do not sell personal information for monetary consideration.

How to Exercise Your Rights

Email: Submit requests to [email protected] with the subject line “Privacy Request.” Please specify the right you wish to exercise and provide sufficient information to verify your identity.
Postal Mail: Send requests to Privacy, Hair and Beyond Rx, 700 Ikea Ct, West Sacramento, CA 95605, United States.

Verification: We may require information reasonably necessary to verify your identity, such as your email address, and, if needed, additional data that we already maintain. Authorized Agents may submit requests if they provide proof of authorization and we can verify the consumer’s identity.

Opt-Out Signals: Where required by law, we treat a valid, user-enabled Global Privacy Control signal as an opt-out request for that browser or device.

Non-Discrimination: We will not deny goods or services, charge different prices, or provide a different level or quality of services because you exercised a privacy right.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to comply with legal, accounting, or reporting obligations; resolve disputes; and enforce agreements. We consider the nature and sensitivity of the data, potential risk of harm from unauthorized use or disclosure, the purposes of processing, and applicable legal requirements to determine appropriate retention periods.

Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children’s Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take appropriate steps to delete it.

Third-Party Websites and Pharmacies

The Site may contain links to third-party websites, pharmacies, or services. If you follow a link, your interactions are governed by that third party’s terms and privacy practices, which may differ from ours. We are not responsible for the privacy or security of information you provide to third parties. Affiliate partners may use cookies or other tracking technologies to attribute referrals and measure performance.

HIPAA and Medical Information

Hair and Beyond Rx is not a healthcare provider, insurance plan, or healthcare clearinghouse, and is generally not a “covered entity” or “business associate” under HIPAA. Information you provide to us through the Site is not protected health information under HIPAA. We handle any health-related information you share in accordance with this Privacy Policy and applicable state privacy laws.

International Users

The Site is operated in the United States. If you access the Site from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your country.

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date below indicates the effective date of the current version. Your continued use of the Site after changes are posted signifies your acceptance of the revised Policy.

Last Updated: September 26, 2025