Effective Date: March 12, 2026

Hazel Health, Inc.  and its affiliates and subsidiaries, including Little Otter, Inc. (collectively, "[Hazel Health]" "us," "we," or "our") are committed to protecting the privacy of Personal Information. “Personal Information” includes information that alone, or when in combination with other information, may be used to identify, contact, or locate you.

This Privacy Policy only applies to the limited Personal Information that we collect on our websites (“Sites”) and in connection with communications that originate from the Sites (for example, when you contact us through a webform and we communicate with you by email).

This Privacy Policy does not apply to Personal Information we process on behalf of another organization as a service provider or contractor. For example: 

  • This Privacy Policy does not apply to health information collected in connection with healthcare services provided by our affiliated healthcare providers. This health information is considered “protected health information” (“PHI”) and is regulated by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”). When we handle PHI, we do so as a “business associate” of the affiliated healthcare providers and our use and disclosure of PHI is subject to the affiliated healthcare provider’s HIPAA Notice of Privacy Practices and our agreements with the healthcare provider. For more information about how the affiliated healthcare providers use and disclose your PHI and your rights under HIPAA, please review the [Hazel Health Joint Notice of Privacy Practices] (not this Privacy Policy).
  • The Privacy Policy does not apply to Personal Information contained in “education records” regulated by the Family Educational Rights and Privacy Act (“FERPA”) that we receive from educational agencies or institutions we contract with to provide services (“FERPA PII”). When we handle FERPA PII, we do so as a “school official” with a legitimate educational interest under the direct control of the educational agency or institution, and only as permitted by FERPA and our agreement with the educational agency or institution. For more information about how your educational agency or institution uses and discloses FERPA PII and your rights under FERPA, please review the educational agency or institution’s annual FERPA notice.

This Privacy Policy also does not apply to job applicants or our employees, contractors, or agents. 

Whenever you interact with us on behalf of another individual or entity, you must obtain their consent (or have the legal authority without consent) to share their Personal Information with us.

‍

1. Sources of Personal Information

We collect Personal Information about you from the following sources:

  • Directly from you. We collect Personal Information that you provide to us, including when you contact us through the Sites, sign up for newsletters, or communicate with us.
  • Data collected automatically and through tracking technologies. We may automatically collect information or inferences about you, such as through cookies and other tracking technologies, when you interact with the Sites. This may include information about how you use and interact with the Sites, information about your device, and internet usage information.
  • From third parties, such as service providers, website analytics providers, advertising and marketing technology providers, and fraud prevention or security providers, that help us operate, analyze, and market the Sites.

We may combine information that we receive from the various sources described in this Privacy Policy, including third party sources, and use and disclose the combined information consistent with this Privacy Policy.

2. Types of Personal Information We Collect

We may collect the following types of Personal Information:

  • Identifiers, including your name, email address, physical address, telephone number, other business contact information, and device identifiers (e.g., cookie IDs and IP address).
  • Records about you, including the content, timing, and method of communications you have with us, such as online chats, calls, and emails, and information you share with the Sites.
  • Internet or other electronic network activity information, including your browsing history, search history, preference information (including marketing and purchasing preferences), account settings (including any default preferences), and other information regarding your interactions with and use of the Sites. For more information about cookies and other device data, please see the Cookies and Other Tracking Technologies section of this Privacy Policy.
  • Non-precise geolocation data, including your approximate location based on your IP address.
3. How We May Use Personal Information

We may use Personal Information for the following purposes:

  • To provide you with products and services. For example, we may use Personal Information to make the Sites available to you; provide customer service; communicate with you (including soliciting feedback and responding to requests, complaints, and inquiries); hosting informational webinars; and providing similar services or otherwise facilitating your relationship with us.
  • For our internal business purposes. For example, we may use Personal Information to carry out the day-to-day operation of our business; maintain internal business records; enforce our policies and rules; carry out management reporting; conduct audits; and for IT security and administration purposes.
  • For our internal research and product improvement purposes. For example, we may use Personal Information to verify and maintain the quality and safety of our products and services; improving our products and services; design new products and services; develop and improving automated tools to support internal operations (for example, to route and manage inquiries and provide customer support); evaluate the effectiveness of our advertising and marketing efforts; and debug and repair errors with our systems, networks, and equipment.
  • For legal, safety or security reasons. For example, we may use Personal Information to comply with legal, reporting, and similar requirements; investigate and respond to claims against us, our personnel, and our customers; for the establishment, exercise or defense of legal claims; protect our, your, our customers’, and other third parties’ safety, property or rights; detect, prevent, and respond to security incidents and health and safety issues; and protect against malicious, deceptive, fraudulent, or illegal activity.
  • In connection with a corporate transaction. For example, we may use Personal Information if we acquire assets of another business or sell or transfer all or a portion of our business or assets, including through a sale in connection with bankruptcy and other forms of corporate change.
  • For marketing.  For example, we may use Personal Information we collect to personalize advertising and measure the effectiveness of our marketing; to analyze interactions with us or the Sites, or to send you newsletters, surveys, questionnaires, or information about events or webinars. You can unsubscribe from our email marketing via the link in the email.

We may use anonymized, de-identified, or aggregated information for any purpose permitted by law.

4. How We Disclose Personal Information

We may disclose Personal Information to third parties, including to the categories of recipients described below: 

  • Affiliates and subsidiaries, including parent entities, corporate affiliates, subsidiaries, business units, and other companies that share common ownership, for internal administrative purposes.
  • Service providers that work on our behalf to provide products and services, such as IT providers, Internet service providers, data and web hosting providers, software service providers, email marketing providers, payment processing companies, data analytics providers, and companies that provide business support services, financial administration, and event organization.
  • Professional consultants, such as accountants, lawyers, financial advisors, and audit firms.
  • Vendors necessary to complete transactions you request, such as shipping companies and logistics providers.
  • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes, such as when we disclose information to comply with law or legal requirements, to enforce or apply our policies, terms, and agreements, and to protect our, our customers’, or third parties' safety, property or rights.
  • Other entities in connection with a corporate transaction, such as if we acquire assets of another entity, or sell or transfer all or a portion of our business or assets, including through a sale in connection with bankruptcy and other forms of corporate change.
  •  Advertising and analytics providers, such as social media platforms, website analytics providers, and advertising technology providers that collect information through cookies and similar technologies on the Sites as described in the Cookies and Other Tracking Technologies section below. 

Where these recipients use your Personal Information for their own purposes independently from us, we are not responsible for their privacy practices or personal data processing policies. You should consult the privacy notices of those third-party services for details on their practices. 

We do not share mobile numbers or text messaging opt-in data with affiliates or third parties for their own marketing or promotional purposes.

  • The public, such as when you have an opportunity to make comments regarding us or our products or services that we may share with the public, including comments on our blog posts and reviews on our product pages. Any Personal Information in comments, reviews, or other content that you share in public areas of the Sites may be read, collected, or used by other users or the public. 
  • Entities to which you have consented to the disclosure.

‍

5. Cookies and Other Tracking Technologies

The Sites use the following categories of tracking technologies to collect information about you, your device, and how you interact with the Sites. 

  • Cookies, which are a type of technology that install a small amount of information on a user's computer or other device when they visit a website. Some cookies exist only during a single session and some are persistent over multiple sessions over time.
  • Pixels, web beacons, and tags, which are types of code or transparent graphics. In addition to the uses described below, these technologies provide analytical information about the user experience and help us customize our marketing activities. In contrast to cookies, which are stored on a user's computer hard drive, pixels, web beacons, and tags are embedded invisibly on web pages. 
  • Session replay tools, which record your interactions with the Services, such as how you move throughout the Services and engage with our webforms. In addition to the uses described below, this information helps us improve the Services and identify and fix technical issues visitors may be having with the Services.
  • Embedded scripts and SDKs, which allow us to build and integrate custom apps and experiences on the Services.

We use these technologies for the following purposes:

  • Personalization, such as remembering language preferences and pages and products you have viewed in order to enhance and personalize your experience when you visit the Sites; 
  • Improving performance, such as maintaining and improving the performance of the Sites; 
  • Analytics, such as analyzing how our websites are used. 
  • Advertising, such as conducting advertising and content personalization on the Sites and those of third parties, including interest-based advertising and measuring the effectiveness of advertising campaigns and our communications with you (including identifying how and when you engage with one of our emails); and
  • Security, such as preventing fraud and malicious behavior.

 We may allow analytics and advertising technology providers to collect information through cookies, pixels, and similar technologies on the Sites for the purposes described above.  

Some of the third parties we work with participate with the Digital Advertising Alliance ("DAA") and Network Advertising Initiative ("NAI"). The DAA and NAI provide mechanisms for you to opt out of interest-based advertising performed by participating members at http://www.aboutads.info/choices/ and https://optout.networkadvertising.org/. 

You can also refuse or delete cookies using your browser settings. If you refuse or delete cookies, some of the Sites’ functionality may be impaired. Please refer to your browser’s Help instructions to learn more about how to manage cookies and the use of other tracking technologies. If you change computers, devices, or browsers; use multiple computers, devices, or browsers; or delete your cookies, you may need to repeat this process for each computer, device, or browser. Opting out of interest-based advertising will not opt you out of all advertising, but rather only interest-based advertising from us or our agents or representatives. 

Some browsers have incorporated Do Not Track (“DNT”) preferences.  At this time, we do not honor Do Not Track signals.

6. Data Security and Data Retention

Although we maintain reasonable security safeguards, no security measures or communications over the Internet can be 100% secure, and we cannot guarantee the security of your information. 

Your Personal Information will be retained as long as necessary to fulfill the purposes we have outlined above unless we are required to do otherwise by applicable law. This includes retaining your Personal Information to provide you or your company with the products and services requested and interact with you; maintain our business relationship with you or your company; improve our business over time; ensure the ongoing legality, safety and security of our services and relationships; or otherwise in accordance with our internal retention procedures. Once you or your company has terminated your relationship with us, we may retain your Personal Information in our systems and records in order to ensure adequate fulfillment of surviving provisions in terminated contracts or for other legitimate business purposes, such as compliance, audit, security, and dispute resolution.

‍
7. Children's Privacy

The Sites are intended for a general audience and are not designed for children under 13. We do not knowingly collect Personal Information from children under 13 through the Sites. If you believe that a child under 13 has provided Personal Information to us through the Sites, please contact us at privacy@hazel.co, and we will take appropriate steps to delete that information. This section applies only to information collected through the Sites and does not apply to information processed on behalf of healthcare providers or educational institutions as described above.

‍
8. External Links

The Sites may contain links to external sites or other online services that we do not control, including those embedded in third party advertisements or sponsor information. We are not responsible for the privacy practices or data collection policies of such third-party services. You should consult the privacy notices of those third-party services for details on their practices.

‍
9. Changes

We may update this Privacy Policy from time to time. Any updated Privacy Policy will be effective when posted. Please check this Privacy Policy periodically for updates. 

‍
10. Contact Information

If you have questions regarding this Privacy Policy, please contact us at:

privacy@hazel.co