MD Esthetics Privacy Policy

U.S. Privacy Statement

Effective Date: June 8, 2026

MD Wellness MSO, LLC and its affiliated companies and brands, including MD Esthetics, Glow Med Spa VT, Young Medical Spa and MDE Academy (collectively referred to as “MD Esthetics,” “we,” “our,” or the “Company”), value your privacy and are committed to protecting and responsibly handling personal information.

This Privacy Policy describes how we collect, use, disclose, and safeguard personal information obtained through our digital platforms and services.

This Privacy Policy applies to all websites, mobile applications, and digital platforms operated by the Company, including but not limited to:

• MDEstheticsus.com

• MDEstheticsfranchise.com

• GlowMedSpaVT.com

• YoungMedicalSpa.com

• MDEAcademy.com

and any other websites, landing pages, mobile applications, or digital services that link to this Privacy Policy (collectively, the “Platform”).

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we treat it. By accessing or using our Platform, you agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, do not access or use the Platform.

In addition, please review the Platform’s applicable Terms of Use which governs your use of the Platform. By using our Platform, you agree to the Terms of Use

l and consent to our collection, use, and disclosure of your information as described herein. If you do not agree to these Terms of Use and Privacy Policy, you are not granted permission to access or use the Platform and, therefore, must not access or use the Platform.

Information We Collect

Portions of the Platform automatically collect certain information from your device when you visit the Platform. This information may include:

Types of Personal Information Collected

Personal Contact Information

• Name

• Address

• Phone number

• Email address

• Date of birth

Health and Treatment Information

• Medical history relevant to aesthetic procedures

• Treatment preferences

• Intake forms and consultation notes

Transaction Information

• Payment details

• Purchase history

• Appointment records

• Membership or package purchases

Technical and Usage Information

• IP address

• Browser type

• Device information

• Website interactions

• Referral source and page navigation

Educational Program Information (for individuals participating in MDE Academy or training programs)

• Professional credentials

• Licensing information

• Course enrollment and participation data

Protected Health Information (PHI)

To the extent personal information includes protected health information (PHI), our access, exchange, use, and disclosure of such PHI is described in the Notice of Privacy Practices, which can be found here.

How We Use Personal Information

We use personal information to operate and improve our services, including:

• Scheduling and confirming appointments.

• Providing consultations and medical aesthetic services.

• Processing payments and transactions.

• Providing customer support and follow-up care.

• Delivering appointment reminders and service notifications.

• Operating educational programs and training courses.

• Improving website functionality and user experience.

• Conducting internal analytics and business operations.

• Complying with legal and regulatory obligations.

We only use personal information for legitimate business purposes consistent with how the information was collected.

Information Collected by Third Parties

When you use the Platform, certain third parties may use automatic information collection technologies to collect information about you or your device. Additionally, MD Esthetics may use third-party platforms to manage scheduling, patient communications, and customer relationship management, including systems used for:

• Appointment scheduling

• Intake forms and treatment documentation

• Customer relationship management (CRM)

• Automated appointment reminders

How such third parties collect, use and share personal information that they collect about you or that you provide to them is solely governed by such third party and any applicable license terms, terms of use or privacy policy. We are not responsible for the content or privacy practices of external internet sites or applications and recommend that you read the privacy policy of external sites and applications before disclosing any personal information.

Mobile Information and SMS Communications

As you use the Platform, you may have the option of receiving Short Message Service (SMS), or texts (electronic communications) (collectively “Messages”). MD Esthetics may communicate with patients and customers via such Messages for a variety of reasons such as:

• Appointment confirmations

• Appointment reminders

• Customer support

• Service notifications

SMS Terms and Conditions

• Data Rates: Data Rates from your wireless carrier may apply to your receipt of such messages. Any costs incurred as a result are your responsibility. Messages may come from us directly and/or from third parties on our behalf.

• Consent: By providing your mobile number, you agree to receive live, pre-recorded and artificial voice and electronic communications and by providing your e-mail address you agree to receive e-mail and agree that the device(s) and account(s) that will receive the electronic communications are appropriately secured. Messaging frequency varies.

• Sharing Restrictions: We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with our services. We may share your personal information, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

• Opt-Out Instructions: You may cancel SMS communications at any time by texting STOP to +1 508-419-9008. After sending STOP, you will receive confirmation that you have been unsubscribed. You will no longer receive text messages from us unless you opt in again. You can text HELP for assistance.

Marketing and Advertising

MD Esthetics may send marketing communications about services, promotions, or educational opportunities.

Marketing Opt-Out

Users may opt out of marketing emails at any time using the unsubscribe link in those communications.

Advertising Partners

We may work with advertising partners to improve awareness of our services. These providers may collect non-identifiable website interaction data through cookies or similar technologies. Advertising partners do not receive access to mobile phone numbers or SMS consent data.

Cookies and Tracking Technologies

A “cookie” is a small set of computer data that allows us to maintain records of the activities of users visiting the Platform and/or our networks. Cookies may be used to customize the delivery of content based on your usage patterns, interests, or location. The cookies do not identify users by name however they may identify the IP address of the device you are using.

How We Use Cookies

• Unregistered Users: Unregistered users may have cookies placed on their devices for use in customizing the delivery of content based on usage patterns, interests or location.

• Registered Users: Registered users may have cookies placed on their devices to allow their experience on the Platform to be customized and facilitated. For example, a class registration form may have the User’s name and address entered as a convenience to the User.

Managing Cookies

On your device, you may refuse to accept browser cookies by activating the appropriate setting, and you may have similar capabilities on your device in the preferences for your operating system or browser. If you choose to turn off cookies, you may still be able to access areas of our Platform. Once the cookie feature on your browser is turned off, you might have to “refuse” a cookie each time you encounter one while using our Platform.

Google Analytics

MD Esthetics uses third party service providers, such as Google Analytics, and cookies in order to improve our service, user experience, and to analyze how the Platform is used. Aside from your device’s Internet Protocol address (IP address), which can disclose your general location, the information collected by Google Analytics is anonymized traffic data including length of stay on the Platform, browser information, and device information.

The collected information is used to provide an overview of how people are accessing and using the Platform. For information about how Google Analytics uses data when you use partners’ sites or apps see www.google.com/policies/privacy/partners.

Photography and Media

In the course of providing aesthetic services, MD Esthetics may capture photographs or imaging for purposes including:

• Medical documentation

• Treatment planning and progress tracking

• Internal quality review

Any use of photographs for marketing, educational, or promotional purposes will only occur with separate written consent from the patient.

Data Security

We design our systems with your security and privacy in mind, and we maintain administrative, technical and physical safeguards to protect your personal information from unauthorized access, use, or disclosure. These safeguards vary based on the sensitivity of the information that is collected.

Unfortunately, the transmission of information via the internet is not completely secure. We cannot guarantee the security of your personal information transmitted through our Platform. The safety and security of your information also depends on you: Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Platform.

How We Share Your Information

Only as permitted by applicable law we may share your personal information with our affiliates, partners and other third parties, including subcontractors, to:

• Our service providers: Such as companies (including our affiliates) that perform services on our behalf, for example, companies that help process credit card payments.

• Site Maintenance: Assist us with the maintenance and operation of the Site.

• Marketing and Promotions: Market and promote our provision of services to you, including measuring the success of such efforts.

• Legal Process: Comply with any court order, law, or legal process, including to respond to any government or regulatory request.

• Enforcement: Enforce or apply our Terms of Use.

• Protection: Protect our or others rights, property, or safety.

• Corporate Transactions: Disclose to a buyer or other successor entity in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

In addition, we may disclose your deidentified and anonymized information for commercial purposes, and information prohibited from disclosure pursuant to federal and state law. We do not sell or share personal information for monetary consideration.

COPPA Compliance

The Platform is not directed at children under the age of 13. We comply with the Children’s Online Privacy Protection Act (“COPPA”) and do not knowingly permit registration or submission of personally identifiable information by anyone under 13 years of age without verification of parental consent.

If you believe information of a child under 13 has been submitted, please advise us in writing and we will delete it. If we learn that a child has provided personal information, except as required and authorized by law, we will delete that information from our system.

Your State Privacy Rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. For example, if you live in, among other states, California, Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, your state has a law in effect to provide its residents with specific rights regarding their personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

Summary of Consumer Rights

• Right to Access / Know: You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.

• Right to Delete: You may have a right to request that we delete personal information we maintain about you.

• Right to Correct: You may have a right to request that we correct inaccurate personal information we maintain about you.

• Right of Portability: You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

• Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.

• Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent.

• Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.

• Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

• Nondiscrimination: We will not discriminate or retaliate against you for exercising any of the rights listed above.

How to Exercise Your Rights

If you would like to exercise any of your rights described in this Privacy Policy, you may email us at privacy@mdestheticsus.com.

• To exercise your opt-out rights, please email the address above with the subject line: “Opt-Out Rights”.

• To designate an agent to exercise your rights on your behalf or, if you are a guardian or conservator, to exercise rights on behalf of another, please use the above contact methods.

Required Verification Information

If you choose to contact us directly by any of the methods listed above, you will need to provide us with:

1. Enough information to identify you;
2. Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
3. A description of what right you want to exercise and the information to which your request relates.

If we cannot verify that the person making the request is the person about whom we have collected information or is someone authorized to act on such person’s behalf, then we are not obligated to provide information. Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Response Timeline & Declines

• We endeavor to substantively respond to a verifiable request within forty-five (45) days of its receipt. If reasonably necessary, depending on the type and complexity of the request, we may extend the response time for another forty-five (45) days, so as long as we notify you within the first forty-five (45) day period.

• If we decline to take action regarding your request, we will endeavor to notify you within forty-five (45) days of our receipt of the request. When we do so we will provide a justification for not taking action and provide information on whether there is an appeal process and how to initiate such process.

Request Frequency and Fees

• You can request information free of charge twice per year.

• Depending on your state of residence, any subsequent requests within a twelve (12) month period may result in a reasonable fee not to exceed the actual cost of providing a copy, printout, or photograph of the record in a format other than a standard page.

Social Media Disclaimer

We reserve the right to moderate comments on its social media platforms and may remove any content including advertising, profanity or offensive posts, as well as any off-topic commentary.

Changes to the Privacy Policy

We may revise and update this Privacy Policy from time to time in our sole discretion.

• Immediate Effect: All changes are effective immediately when we post them, and apply to all access to and use of the Platform thereafter.

• Your Continued Agreement: Your continued use of the Platform following the posting of revised Privacy Policy means that you accept and agree to the changes.

• Monitoring Revisions: You are expected to check this page from time to time so you are aware of any changes, as they are binding on you.

Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact:

MD Esthetics

29 Indian Rock Rd, Suite 4

Windham, NH 03087

Email: privacy@mdestheticsus.com