California Consumer Privacy Act (CCPA) Privacy Notice

Last Updated: August 2025

Introduction

This California Consumer Privacy Act Privacy Notice ("CCPA Notice") applies to California residents and supplements the information contained in our Privacy Policy. Desert Dexa Inc. ("Desert Dexa," "we," "us," or "our") is committed to protecting the privacy of California consumers and providing transparency about our data practices.

Categories of Personal Information We Collect

In the last 12 months, we have collected the following categories of personal information from California consumers:

A. Identifiers

• Real name
• Postal address
• Email address
• Telephone number
• Date of birth
• Unique personal identifier

B. Personal Information Categories Listed in Cal. Civ. Code § 1798.80(e)

• Name
• Address
• Telephone number
• Credit card or debit card number (processed securely through third-party payment processors)
• Medical information related to DEXA scanning
• Health insurance information (if provided, though we do not accept insurance)

C. Protected Classification Characteristics

• Age (40 years or older)
• Sex/Gender

D. Commercial Information

• Records of services purchased or received
• Purchasing history

E. Biometric Information

• Body composition data from DEXA scans
• Bone density measurements
• Body measurements and physiological data

F. Internet or Other Electronic Network Activity Information

• Browsing history on our website
• Search history on our website
• Information regarding interaction with our website

G. Professional or Employment-Related Information

• Current occupation (if voluntarily provided)

H. Medical Information

• Health conditions relevant to DEXA scanning
• Pregnancy status
• Medical history as it relates to bone density and body composition

Categories of Sensitive Personal Information We Collect

We collect the following categories of sensitive personal information:

• Health information related to DEXA scanning
• Biometric data for the purpose of providing DEXA scan services

Sources of Personal Information

We collect personal information from the following sources:

• Directly from you when you book appointments, receive services, or communicate with us
• Automatically when you visit our website
• From third-party service providers (e.g., payment processors, scheduling systems)

Business or Commercial Purposes for Collecting Personal Information

We use personal information for the following business purposes:

• Providing DEXA scanning services
• Processing payments and maintaining billing records
• Scheduling and managing appointments
• Maintaining and analyzing scan results and history
• Communicating with you about our services
• Improving our services and developing new offerings
• Complying with legal obligations
• Protecting against fraud and ensuring security
• Marketing our services and improving our marketing efforts (with your consent)

Categories of Third Parties With Whom We Share Personal Information

We may share your personal information with the following categories of third parties:

• Service providers (e.g., payment processors, appointment scheduling systems, email service providers)
• Advertising partners (with your consent for targeted marketing)
• Healthcare providers (with your explicit consent)
• Legal and regulatory authorities (as required by law)
• Professional advisors (e.g., attorneys, accountants)

Sale or Sharing of Personal Information

We do not sell personal information as defined under the CCPA. We have not sold personal information in the preceding 12 months.

We may share personal information with advertising partners to provide targeted marketing communications with your consent. You have the right to opt-out of such sharing.

Retention of Personal Information

We retain personal information for as long as necessary to provide our services and comply with legal obligations, including medical record retention requirements. You may request deletion of your personal information subject to our legal obligations to maintain certain records.

Your Rights Under the CCPA

As a California resident, you have the following rights:

1. Right to Know

You have the right to request that we disclose:

• The categories of personal information we have collected about you
• The categories of sources from which we collected personal information
• Our business purposes for collecting personal information
• The categories of third parties with whom we share personal information
• The specific pieces of personal information we have collected about you

2. Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.

3. Right to Correct

You have the right to request that we correct inaccurate personal information about you.

4. Right to Opt-Out

You have the right to opt-out of the sale or sharing of your personal information. While we do not sell personal information as defined under CCPA, you can opt-out of sharing with advertising partners.

5. Right to Limit Use of Sensitive Personal Information

You have the right to limit our use of sensitive personal information to purposes necessary to provide our services.

6. Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

How to Exercise Your Rights

To exercise your rights under the CCPA, please contact us using one of the following methods:

Verification Process

To protect your privacy and security, we will verify your identity before responding to your request. We may ask you to provide:

• Your name and contact information
• Information about your past services with us
• Other information necessary to verify your identity

Authorized Agents

You may designate an authorized agent to make a request on your behalf. To do so, you must:

• Provide the agent with written permission to act on your behalf
• Verify your identity directly with us
• Provide us with proof of the agent's authorization

Response Timing

We will acknowledge receipt of your request within 10 business days and will respond substantively within 45 calendar days. If we need additional time, we will notify you of the extension and the reason for it.

California "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We may share personal information with advertising partners for marketing purposes with your consent.

Updates to This Notice

We may update this CCPA Notice from time to time. We will notify you of any changes by posting the updated notice on our website with a new "Last Updated" date.

Contact Information

If you have questions about this CCPA Notice or our privacy practices, please contact us at: