1. Personal, Sensitive, and Non-Personal Data We Collect and How We Use and Disclose It
2. Additional Details About Our Data Practices
   1. Data Collected Automatically: Device ID/Interaction Information
      1. Cookies and Local Storage
      2. Web Beacons
      3. Embedded Scripts
      4. Data Collected through Mobile Devices and SDKs
      5. Session Replay Technology
   2. Data We Receive or Collect from Third Parties
      1. Enhancement Data
      2. Refer-a-Friend
   3.  Data you provide directly
      1. Chat
      2. Sweepstakes, Contests, Promotions
   4. Disclosure of Data
      1. Social Media Interactions
      2. Third Parties Providing Sites on Our Behalf
      3. Business Transitions
3. Third Party Advertising & Analytics/Privacy Controls
4. Loyalty Programs
5. Your Choices
6. Third Party Content, Links To Other Sites, and Noble Panacea Content Found Outside Of The Sites
7. Data Retention
8. Data Security
9. Jurisdiction and Cross-Border Transfer
10. General Audience Sites
11. Changes to Privacy Policy
12. Contact Us
13. Jurisdiction Specific Rights
    1. U.S. States
       1. Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia
       2. Nevada
       3. California
    2. Notice to Australia Residents
    3. Notice to Brazil Residents
    4. Notice to Canadian Residents
    5. Notice to Quebec Residents
    6. Notice to United Kingdom/European/Switzerland Residents
    7. Additional Information if You Are Located in Countries Outside the US, EU/EEA, UK, or Canada
14. Notice to California Residents



e. Data Collected Automatically: Device ID/Interaction Information. Noble Panacea and our third-party business partners (including any third-party service providers or third-party content, advertising, and analytics providers) may use a variety of technologies, including cookies and web beacons, that automatically or passively collect information whenever you access, use, or otherwise interact with the Sites (Device ID/Interaction Information) Device ID/Interaction Information may include, but is not limited to:



Your IP address, mobile device identifier and other unique identifier



Device information, including device model, operating system version, device date and time, mobile network information



Approximate location of your device, which may be collected or inferred through other information we collect, such as IP address.



How you use and interact with the Sites, including your search terms, pages you visit, content you view and add to your shopping basket, time of your last interaction, time spent on the Sites, and your preferences through a unique visitor ID



Device ID/Interaction Information may be collected through the use of the following technologies:



Cookies and Local Storage. Cookies and local storage are text files placed within a browser on a device when it is used to visit the Platform. Certain web browsers and browser add-ons may provide additional local data storage mechanisms. We may use cookies and similar technologies to help keep your use of the Sites more secure, to study traffic patterns on the Sites, to study the effectiveness of our customer communications, to maintain the integrity of the Sites, to measure crash analytics and other maintenance related information, to manage and measure the performance of advertisements displayed on or delivered by or through the Sites, and to personalize your experience through the Platform, such as to recognize you when you return to the Sites. Most browsers provide you with the ability to disable, decline, or clear cookies and local storage; please check your browsers settings for further information. For more information about cookies, please visithttp://www.allaboutcookies.org/orhttp://www.youronlinechoices.eu/.



Pixels. Small graphic images or other web programming code called pixel tags (also known as web beacons, 1x1 GIFs, or clear GIFs may be included in our web pages and email messages. Pixels may be invisible to you, but any electronic image or other web programming code inserted into a web page or email can act as a web beacon. This technology collects the recipient IP address (when opened/click) and approximate location derived based on IP address (city/state level), and device type/browser. Pixels and similar technologies may be used for a number of purposes, including, without limitation, to count visitors to the Sites, to monitor how users navigate the Sites, to count how many emails that were sent were actually opened or to count how many particular links were actually viewed,to count how many particular products were viewed, or for marketing and targeted advertising purposes.



Embedded Scripts. An embedded script is programming code that is designed to collect information about your interactions with the Sites, such as the links you click on. The code is temporarily downloaded onto your device from our server or a third-party service provider, is only active while you are connected to one of the Sites, and is deactivated or deleted thereafter.



Data Collected Through Mobile Devices and SDKs. We use embedded scripts and the tools provided in Software Development Kits (SDKs) to collect information through mobile devices such as the hardware model, operating system and version, identification numbers assigned to your mobile device, such as the ID for Advertising (IDFA) on Apple devices, and the Advertising ID on Android devices, mobile network information, and website usage behavior. SDKs are software packages that contain a set of tools that can be used to help build applications and implement new features in existing apps including those that collect information from your device.



Session Replay Technology.Noble Panacea may record through session replay technology your interactions with the Sites, such as what pages you visit on the Sites, how long you visit those pages, and any links you click or information you provide. We use this information for our internal business purposes, such as for website analytics, to improve the Sites and our products and services, and to address functionality issues such as:



1. User Experience Improvement:



We use session replays to gain insights into how users interact with our website, allowing us to:



Identify pain points and areas where users may encounter usability issues.



Discover where users might get stuck or face obstacles during their online shopping journey.



Make design and functionality improvements to enhance the overall user experience.





2. Conversion Rate Optimization:



Session replays help us understand user behavior during the purchase process. This enables us to:



Identify and address barriers to conversion, such as confusing checkout processes or unexpected errors.



Improve the flow of the checkout process to minimize user drop-offs and cart abandonment.



Enhance the overall shopping experience and increase the likelihood of successful transactions.





3. Bug and Error Identification:



We utilize session replays to promptly identify and resolve technical issues, bugs, and errors that users may encounter on our website. This proactive approach helps prevent potential customers from abandoning our site due to frustration and ensures a seamless online shopping experience.





4. Customer Behavior Insights:



Session replays provide us with valuable data about how customers interact with our products and content. This enables us to:



Understand which products are frequently viewed together, facilitating informed recommendations and product bundling decisions.



Customize the shopping experience for each customer based on their browsing and purchase history, increasing the likelihood of cross-selling and upselling.





5. A/B Testing:



We employ session replays to assess the impact of design changes, new features, or content updates by comparing user behavior before and after implementation. This data-driven approach allows us to make informed decisions about site changes that positively impact the user experience.





6. Customer Support and Training:



Our customer support teams may use session replays to better understand specific customer issues and provide more targeted assistance. Additionally, session replays can be used for training purposes to illustrate best practices to support agents, ensuring consistent and high-quality support.





7. User Feedback Validation:



Session replays serve as a valuable tool for validating and clarifying user feedback. By viewing session replays, we can precisely identify and address the issues users encountered during their sessions, ensuring that user feedback is addressed effectively.





8. Competitive Analysis:



We may analyze session replay data to compare our website's performance and user experience with that of competitors. This analysis helps us understand where our site excels and where it may lag behind, informing our strategy and ongoing improvements.





9. Compliance and Accountability:



Session replays are utilized in a manner consistent with our commitment to transparency and accountability in data handling. We use this data for legitimate purposes, such as improving our website and user experience, and take measures to protect your privacy and security.



In addition, we may use a variety of other technologies that collect similar data for mobile application push messages, security, fraud detection, and maintenance purposes.

f. Data We Receive or Collect from Third Parties.



Enhancement Data. We may receive data about you from third parties, such as data aggregators, joint marketing partners, third party websites, service providers and other business partners. We may also supplement the data we collect with outside records from third parties, such as public databases, publicly available social media pages, and third parties who enhance the information we have about you, in order to provide you with information, services or products you have requested, to tailor content, to offer you opportunities to purchase products or services that we believe may be of interest to you, and for other purposes. The data collected and stored by third parties is subject solely to the third partys privacy practices.



Refer-A-Friend.We may make available a send-to-a-friend, refer a friend, wishlist or similar function that permits you to send content directly to a third party through the Sites. If you send a friend a communication using such functionality, the data you provide about your friend (e.g., name and e-mail address) is used to facilitate the communication and is not used for any other marketing purpose unless we obtain consent from that person. If you disclose any personal data relating to other people, you represent that you have the authority to do so and to permit us to use the data in accordance with this Privacy Policy. For further restrictions related to Canadian residents, please see Section 10(d): Notice to Canadian Residents.

g. Data You Provide Directly.We may ask you to provide data to use when you use the Sites.



Chat.When you participate in a chat feature, Noble Panacea can record, use, and retain your communications and the data you provide in order to assist you during the chat session, provide customer support, to improve our products and services, and for marketing purposes. If you do not consent, please do not continue with chat assistance.



Sweepstakes, Contests, Promotions. We may offer sweepstakes, contests, or other promotions (any, a "Promotion"), that may require registration. By participating in a Promotion, you are agreeing to the provisions, conditions, or official rules that govern the Promotion, which may require specific requirements of you (including, without limitation, and except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness, or other indicia of persona in advertising or marketing materials). If you choose to enter a Promotion, personal data may be disclosed to third parties or the public in connection with the administration of such Promotion, including, without limitation, in connection with winner selection, prize fulfillment, as required by law or permitted by the Promotions terms or official rules (such as on a winners list).

h. Disclosure of Data.We may share the information we have collected about you (including personal information) in the circumstances described below or elsewhere in this Privacy Policy, as disclosed at the time you provide information, or otherwise with your consent



Third Parties to whom You Agree or Direct Us to Share Your Information. We may share your personal information when you expressly consent or otherwise direct us to do so. For example, if you consent to post a testimonial along with your name or if you choose to link your account with a social networking service, other third party application or feature through which information is shared. Please note that we are not responsible for the privacy practices of any third party. If you decide that you do not want to receive communications from a third party, or have questions about their privacy practices, you will need to contact that third party directly.



Social Media Interactions. The Sites may permit or facilitate interactions with an interactive third-party website or service ("Social Media"), such as enabling you to "like" or "share" content. If you choose to share content or otherwise post information from or via the Sites to Social Media, that data may be public, and the third party may have access to data about you and your use of the Sites. You may also choose to participate on Social Media in a way that connects that third-party service with the Sites (such as posting to one of our pages on a Social Media site or signing into the Sites with your credentials from another website or service). Doing so may allow us to collect (or the third party to share) data about you. These third-party Social Media platforms may be able to collect certain data about your visits to the Properties regardless of whether or not you affirmatively interact with the feature and whether or not you are logged into (or have) an account with the third-party platform.



We may also receive data about you if other users of Social Media give us access to their profiles and you are one of their connections or "friends". The data we collect is subject to this Privacy Policy. The data collected and stored by the third party remains subject to the third partys privacy practices, including, without limitation, whether the third party continues to share data with us, the types of data shared, and your choices with regard to what is visible to others on that third-party website or service. The third party may allow you to remove the application or feature, in which case we will no longer collect data about you through the application or feature, but may retain the data previously collected.



Third Parties Providing Services on Our Behalf. We may share data with third parties who perform services on our behalf, such as website hosting, conducting website usage analysis, sending email or other communications, fulfilling orders, providing marketing assistance and data analysis, processing payments (including clearing and processing credit card payments), running promotions, or performing other services. We may provide access to your personal data to such service providers in order for them to perform these services. You can contact us if you want to learn more about how our service providers use your data. Additionally, we may share various information relating to our users and fraudulent or potentially fraudulent activities with our fraud prevention and similar service providers, and they will use this information to help us and their other clients prevent fraudulent and illegal transactions.



Business Transitions. In the event Noble Panacea goes through a transition such as being sold, has all or a portion of its assets acquired or transferred, whether voluntary or involuntary (such as through bankruptcy), or merges or becomes affiliated with any other division, individual or entity (including, without limitation, during the course of any due diligence process), your data will likely be among the assets transferred. We reserve the right, as part of this type of transaction, to assign or otherwise transfer your data and other data we have collected from users of the Sites. By providing your personal data, you agree that we may transfer such data to the acquiring entity without your further consent. Where legally required, we will give you prior notice and if you have the legal right to do so, allow you to object.



Non-Personal Data. Except as expressly prohibited by law, we may share non-personal data that we collect, such as certain Device ID/Interaction Information, aggregate user statistics, and hashed or otherwise de-identified or pseudonymized information (including email addresses), and/or our analyses derived from such information, with third parties in our discretion, including for targeted advertising purposes.



SMS/MMS/RCS Message Data. Notwithstanding anything else in this policy, we do not share personal information we collect specific to our SMS/MMS/RCS text message programs (such as mobile number and record of consent) with third parties for their own direct marketing purposes without your specific consent.

We may use third party business partners, such as analytics companies, ad agencies, network advertisers, and others who provide us with data about the Sites, users, and our advertisements, and who deliver ads to you on our behalf on the Sites and elsewhere online. We and our third-party business partners collect certain data about your visits to and activity on the Sites and other websites and services, including through the Social Media Features, and may use this data to target advertising to you and others and to assess the effectiveness of our advertising. We may also share (or permit third parties to collect) certain data, such as Device ID/Interaction Information, aggregated or de-identified, pseudonymized or hashed data (including email addresses), with these third parties for similar purposes.



These third parties may set and access their own tracking technologies on your device (including cookies, web beacons or other technology) and may otherwise collect or have access to your personal data over time, including about your visits to the Sites as well as other websites and online services, some of which may be personal information or personal data under various state laws. Companies that we share data with, including ad agencies and networks, may use the data, often in combination with their existing data, in order to present more relevant advertisements that may be of interest to you, and to help us and third parties to do the same.



Cookie Opt-Out Tools. To disable sharing through cookies set on our site by third parties for advertising and analytics purposes, please adjust your settings by using our Cookie Preferences To opt out of other forms of processing of your personal data for the purposes of targeted advertising, please complete this form. Certain jurisdictions provide their residents further rights, please see Jurisdiction Specific Rights below regarding additional rights you have.



Global Privacy Controls (GPC). GPC offered by some web browsers are settings that automatically inform websites of your privacy preferences with regard to third party online tracking including exercising your rights and requesting the web application to disable tracking you for certain purposes. When you choose to turn on the GPC setting in your browser, your browser sends a special signal to websites, analytics companies, ad networks, plug in providers, and/or other web services you encounter while browsing to exercise your privacy rights and stop tracking your activity for certain purposes. You can learn more about and set up GPC here .



NAI/DAA Opt-Out. Some of these third-party advertising and analytics providers are members of the Network Advertising Initiative ("NAI") or the Digital Advertising Alliance ("DAA") Self-Regulatory Program for Online Behavioral Advertising. You may want to visit http://www.networkadvertising.org/managing/opt_out.asp, which provides information regarding targeted advertising and "opt-out" procedures of NAI members. You may also want to visit http://www.aboutads.info/choices/, which provides information regarding targeted advertising and offers an "opt-out" by participating companies in the DAA Self-Regulatory Program. To learn more about interest-based advertisements from participating third parties in jurisdictions outside of the United States, please visit the Canadian DAA online choice page at http://youradchoices.ca/choices/ and the European DAA online choice page at http://youronlinechoices.eu/. For mobile applications, you may be able to limit certain advertising practices using the settings on your phone, tablet, or other mobile device. Also, on most mobile devices, you can install the DAAs AppChoices app to make choices about cross-app interest-based advertisements from participating third parties. You may review additional information on opting out of mobile devices at https://www.networkadvertising.org/mobile-choice/.



Google Analytics. We use Google Analytics, which uses cookies and similar technologies to collect and analyze data about use of the Sites and report on activities and trends. This service may also collect data regarding the use of other websites, apps, and online services. You can learn about Googles practices by going to google.com/policies/privacy/partners, and opt out of them by downloading the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout.



Rakuten. We use Rakuten, who may collect certain data when you interact with the Sites, including IP addresses, digital identifiers, information about your web browsing and app usage, and how you interact with our properties and ads for a variety of purposes, such as personalization of offers or advertisements, analytics about how you engage with websites or ads and other commercial purposes. To learn more about Rakuten and their privacy practices, please visit the Rakuten Privacy Policy. To opt-out of Rakuten, please visit Rakuten Privacy Rights Request Form.



Please note that opting out through these mechanisms does not opt you out of being served advertising. You will continue to receive generic ads while online. Your opt-out choices are typically browser and device specific; if you disable your cookies or upgrade your browser after opting out, or if you use different computers or browsers, you will need to indicate your opt-out choices across those other computers and browsers Loyalty Program Disclosures We provide The Noble Program which provides you with loyalty benefits such as points that allow you to earn rewards, gifts, exclusive offers, and similar benefits, the ability to maintain wish lists and your order history. This program is subject to termination at any time at our sole discretion. Additional information available here.



Through The Noble Program, we process: [username, password, and information about your Noble Program participation.



We do not sell or process that data for targeted advertising purposes. The Noble Program does not include loyalty program partners, which is defined as an unaffiliated third party who offers benefits to a companys loyalty program members.



For information regarding how we process all other categories of data please review the Personal, Sensitive, and Non-Personal Data We Collect and How We Use and Disclose It and Disclosure of Data? sections of this Privacy Policy.



Impact of Deletion of Personal Data: If you are a member of The Noble Program member who is eligible to and chooses to exercise your right to delete your personal data, your Noble Panacea account, including the unique membership identification number, any accrued points and Tiers associated with the account, your contact information and any other information tied to your membership account will also be deleted. There is no benefit of The Noble Program that can be extended to you after the deletion of your personal data.



Our program is based on points which accrue to your unique membership identification number based on your purchases or other activities.



Without the ability to relate and track your transactions to the membership identification number that will be deleted as a result of your deletion request, we will be unable to add or deduct points based on your transaction activity or access any previously accrued points.



Once your unique membership identification number is deleted from our systems, we will be unable to recognize your membership identification number to provide you with access to your applicable Tier, order history, wish lists, and other member-only benefits that we may offer from time to time.



If you choose to exercise your data privacy rights such that your membership in The Noble Program is impacted, we will notify you at the contact information you have provided to us, the consequences of your decision at least five (5) days prior to discontinuing your membership or benefits.



If you are a California consumer, please see here for our Notice of Financial Incentive. ][MK1]

Certain content on the Sites may be hosted and served by third parties, and the Sites may contain links to third party websites that Noble Panacea does not control. For example, the Sites may provide links to third party sites through which you can watch videos, purchase merchandise, products or services or which link to a product or service offered by a third party.



The Sites may also contain certain third-party applications, such as email, web browser toolbars, wallpapers, or other downloads or software applications. These links and applications may include, for example, those that use a Noble Panacea logo as part of a co-branding agreement. In addition, Noble Panacea widgets or other Noble Panacea content may be included, among other places, on web pages and websites that are not associated with Noble Panacea and over which we have no control. These third parties may collect Device ID/Interaction Information through the use of their own cookies and web beacons, independently collect data or solicit personal data, and may have the ability to track your use of their sites and services. Noble Panacea is not responsible for the privacy or other practices employed by any third party.

Noble Panacea uses commercially reasonable security measures designed to secure your personal data. However, no system, data transmission over the Internet, wireless transmission, or electronic storage of data can be guaranteed to be 100% secure. Noble Panacea cannot guarantee that the Internet or your device will be completely secure and cannot warrant or ensure the security of any data we collect. You use the Sites and provide us data at your own risk.

Noble Panacea is a US-based company. Please be aware that the data we collect will be transferred to and processed in the United States and other countries. By using the Sites, or providing us with any information, you fully understand and unambiguously consent to this transfer to, and processing, usage, sharing, and storage of your data in the United States and other jurisdictions, for which the privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen. As a result, this data may be subject to access requests from governments, courts, or law enforcement in the United States and other countries according to the laws in those jurisdictions. Your data will also be disclosed to third parties as described in the Personal, Sensitive, and Non-Personal Data We Collect and How We Use and Disclose It section above.

The Sites are general audience and do not target users younger than the age of 18. We do not knowingly collect personal data online from children younger than the age of 18. If you are a parent or guardian and think we have data about your child, please contact us at privacy@noblepanacea.com.

To the extent allowed by applicable law, Noble Panacea reserves the right to change or modify this Privacy Policy at any time and will notify you of material changes by posting the changed or modified Privacy Policy on the Sites. We may also provide notice to you in other ways, such as through contact data you have provided. Any changes will be effective immediately upon the posting of the revised Privacy Policy unless otherwise specified.



Your continued use of the Sites after the effective date of the revised Privacy Policy (or such other act as specified in the revised Privacy Policy) will constitute your consent to those changes to the fullest extent allowed by applicable law. However, Noble Panacea will provide notice and obtain your consent (opt-in or opt-out) ) to the new policy if required by law. Note that you may need to consent to our new policies in order to continue to use the Sites.

If you have any questions about this Policy, please email us at privacy@noblepanacea.com. You can also write to us at:



7700 Irvine Center Drive, Irvine, California 92618, USA, Attn: Data Privacy.

Residents of certain jurisdictions may have the ability to exercise additional rights and choices regarding their personal data. We will take reasonable steps to accommodate your request, but may need to verify your identity before doing so. If you are a resident of the U.S., please see additional information below. If you are a resident of Australia, please see additional information here Residents of Brazil, please see additional information here. Residents of Canada, please see additional information here note that if you are a resident of Quebec, please also see additional information here. Residents of the UK, Switzerland, and EEA, please see additional information here.

s. U.S. States



i. Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia. We set forth above the categories of personal data we process, the purpose for processing personal data, the categories of personal data shared, and the categories of third parties with whom personal data is shared. Residents of Virginia, Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, and Utah have certain privacy rights with respect to this data, as described below. If you are a Consumer residing in one these states (as defined in each states respective law) and would like to exercise your applicable rights, please complete this form [MK2] or call 800-549-1006 to submit a request. If you are a California resident, please see the California Privacy Notice below. If you are a Nevada resident, please see below.



1. Access Your Personal Data/Data Portability (CO, CT, DE, IA, MN, MT, NE, NH, NJ, OR, TN, TX, UT, VA Residents) - You have the right to confirm whether we are processing your personal data and request to access such data, obtain a copy of the personal data previously provided by you to us and, to the extent feasible, in a readily usable format to allow data portability. For Oregon and Minnesota requests, and where otherwise provided by applicable law, this includes a list of third parties with whom we have shared personal information. For Delaware residents, and where otherwise provided by applicable law, you have the right to request a list of the categories of third parties with whom we have specifically shared your personal data.



2. Delete Your Personal Data(CO, CT, DE, IA, MN, MT, NE, NH, NJ, OR, TN, TX, UT, VA Residents) You have the Right to Delete your personal data.



3. Correct Your Personal Data (CO, CT, DE, MN, MT, NE, NH, NJ, OR, TN, TX, VA Residents) You have the Right to Correct the personal data we hold about you.



4. Opt-Out of Sales of Your Personal Data and Targeted Advertising (CO, CT, DE, IA, MN, MT, NE, NH, NJ, OR, TN, TX, VA, UT) You have the right to opt out of the sale of your data. Noble Panacea does not sell personal data to third parties for monetary compensation, as defined by Iowa, Tennessee, Virginia, and Utah laws and therefore does not offer this opt-out right to residents of these states. Other laws define "sale" broadly to include sharing for monetary or other valuable consideration. Sharing of IP addresses or mobile ad IDs with third party advertising vendors and certain other targeted advertising practices may constitute a sale under definitions set forth under other state laws. Please note that opting out of sales and targeted advertising will not opt you out of all advertising. If you would like to opt out of the sale of your personal data, please make a request using the methods to exercise your rights listed above.



a. Cookie-Based Opt-Outs for Sale and Targeted Advertising Noble Panacea engages in online advertising practices (and certain analytics or similar activities) that may be considered a sale and/or targeted advertising under DE, MN, MT, NE, NH, NJ, OR, TN, TX, VA, CO, CT, and UT state laws. To disable sharing through cookies set by third parties that may be considered targeted advertising under such laws, adjust your cookie settings. Please also review the Third-Party Advertising and Analytics section above for information on industry tools and device settings that may be available to you.



b. Authorized Agents Submitting Opt-Out Requests for Sales and Targeted Advertising (CO, CT, DE, MN, MT, NE, NH, NJ, OR, and TX Residents Only) - If you are an authorized agent submitting a request to opt out of sales or targeted advertising on behalf of a Colorado, Connecticut, Delaware, Minnesota, Montana, Nebraska, New Hampshire, or New Jersey, Oregon, or Texas resident, please submit the request pursuant to the above instructions. Where permitted by law, we may require documentation to authenticate the Consumer's identity and that you are authorized to submit the request on the consumer's behalf in order to be able to fulfill your request. Please keep in mind that if we cannot authenticate that you are authorized to act on the Consumer's behalf or we cannot authenticate the Consumer's identity, we may deny the request.



5. Right to Appeal (CO, CT, DE, IA, MN, MT, NE, NH, NJ, OR, TN, TX, and VA Residents) - If, for any reason, you would like to appeal our decision relating to your request and you are a resident of Colorado, Connecticut, Delaware, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, or Virginia, you have the right to submit an appeal and can do so by submitting this form or calling 800-549-1006. Please include your full name, the basis for your appeal, and any additional information to consider.



6. Sensitive Data If you are a Delaware, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Virginia, Colorado, or Connecticut resident or a resident of another state that requires such, we will obtain your consent to the processing of any Sensitive Data (as defined by the applicable state law) we collect. If you are a resident of Iowa, Utah, or another state that requires such, we will notify you at or before the time of collection of Sensitive Data (as defined by Utah law). If you wish to opt out of our processing of your Sensitive Data (as defined by the applicable state law), please complete this form.



7. Opt-Out of Profiling in furtherance of legal or similarly significant effects Noble Panacea does not process your personal data for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects as defined under applicable laws.

>



ii. Nevada. Noble Panacea does not currently sell your covered information as those terms are defined under applicable Nevada law.You may still submit an opt-out request and we will honor that request as required by Nevada law if Noble Panacea were to engage in such a sale in the future. If you are a Nevada resident and would like to opt-out of the sale of your covered information, please submit your request to privacy@noblepanacea.comYour request must include your full name, street address, city, state, zip code, and an email address so that we can contact if needed regarding this request. If you previously provided a phone number, it will assist us in making sure we identify you as someone who wants to opt-out. You may also be required to take reasonable steps as we determine from time to time in order to verify your identity and/or the authenticity of the request. Noble Panacea will respond to your request within sixty (60) days either confirming that your request has been processed or indicating that we need an additional thirty (30) days to complete the request.



iii. California.If you are a California resident, please see our NOTICE TO CALIFORNIA RESIDENTS for additional information about your privacy rights and how to exercise them.

>



t. Notice to Australian Residents.If you are a resident of Australia, the following information applies.



Identity and Contact Information Noble Panacea is located at7700 Irvine Center Drive, Irvine, California 92618, USA. If you have any questions, concerns, or comments about Noble Panacea, please reach out via our contact formon our website or by emailing us at privacy@noblepanacea.com.



Likely Overseas Disclosure Personal Information we collect may be disclosed to overseas recipients that are located in the United States or any other country in which we or our subcontractors maintain facilities. We rely on your consent to facilitate this disclosure in the United States and other jurisdictions, where laws regarding processing of personal information may be less stringent than the Australian Privacy Principles. In certain cases, we may rely on appropriate safeguards such as standard contractual clauses as a basis for the overseas disclosure.



Your Rights to Access and Correct Your Personal Information- You have the right to access and correct inaccuracies in your personal information in our custody and control, subject to certain exceptions prescribed by law. You may request access and corrections of inaccuracies in your personal information we have in our custody or control by emailing or calling to us at privacy@noblepanacea.com or 800-549-1006. We may request certain personal information for the purposes of verifying the identity of the individual seeking access to their personal information records.



Third Party Advertising.As discussed above, we work with certain third-party advertising companies in connection with our online advertising and those companies may set cookies or other tracking technologies in connection with providing advertising related services to us.Please refer to EDAAs choice page at www.youradvertisingchoices.com to learn more about your choices related to advertising with respect to participating EDAA member companies.



Complaints and Resolving Concerns - If you have any questions or comments about this Privacy Notice or if you otherwise have a question or complaint about the manner in which we or our service providers treat your personal information, you may contact us by emailing privacy@noblepanacea.com or calling us at800-549-1006.



You may also obtain further information about your privacy rights from the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. OAIC has authority to investigate complaints and claims for compensation in appropriate cases.



u. Notice to Brazil Residents.If you are a resident of Brazil, the following information applies.



Purposes of processing and legal basis for processing: As explained above, we process personal information in various ways depending upon your use of the Sites. We process personal information on the following legal bases: (1) with your consent; (2) as necessary to perform our agreement to provide Sites; and (3) as necessary for our legitimate interests in providing the Sites where those interests do not override your fundamental rights and freedoms related to data privacy.



Right to lodge a complaint: Users that reside in Brazil have the right to seek information and assistance or lodge a complaint about our data collection and processing actions with theAgncia Nacional de Proteo de Dados, ANPD, www.gov.br/anpd/pt-br.



Transfers: Personal information we collect may be transferred to, and stored and processed in, the United States or any other country in which we or our affiliates or subcontractors maintain facilities. We ensure that transfers of personal information to a third country or an international organization are subject to appropriate safeguards as described in Articles 33-36 of theLei Geral de Proteo de Dados Pessoais(LGDP).



Data Subject Rights: Users that reside in Brazil have the following rights with respect to their personal information:



Withdraw consent: If we have collected personal information with your consent, you have the right to withdraw that consent at any time.



Access: You have the right to request access to personal information we collected about you and information about its use and sharing.



Correction: You have the right to request that we correct the personal information we hold about you if it is inaccurate, incomplete, or outdated.



Erasure: You have the right to request that we erase data we have collected from you in some cases. Please note that we may have a reason to deny your deletion request or delete data in a more limited way than you anticipated, e.g., because of a legal obligation to retain it.



Portability: You have the right, in certain circumstances, to request that we provide your personal information to you in a format that can be transferred to another entity.



Automated Decisionmaking: You have the right to request information about a decision based solely on automated processing, including profiling, and request a review of such decisions.



Verification Procedures: We must verify your identity for everyones protection, so we may require you to provide us with verification information prior to accessing any records containing personal information about you. We do this by:



Asking you to provide personal identifiers we can match against information we may have collected from you previously and confirm your request using the email or telephone account stated in the request; or



We will use the information you provide for verification only for the purpose of verification. We may have a reason under the law why we do not have to respond to your request or respond to it in a more limited way than you anticipated. If we do, we will explain that to you in our response.



v. Notice to Canadian Residents. Quebec residents please also see the Notice to Quebec Residents below.



You may withdraw consent at any time (subject to legal or contractual restrictions and reasonable notice). Subject to certain limits set out in the applicable laws, Canadian residents also have the right to request access to the personal information that Noble Panacea collects and to update or correct personal information if it is inaccurate. We may need to verify your identity before implementing your request.



For residents of Canada who provide us data about a resident of Canada for a Refer-a-Friend feature, you may only refer friends or family with whom you had a direct voluntary two way communication, and with whom you have a personal relationship considering sharing of interests, experiences, opinions, and frequency of communication. You cannot refer the same friend or family member more than once. The email we send will indicate that it has been sent on your behalf and identify you.



Subject to applicable law, if you are a Canadian resident and would like to submit a request to access, correct, or update your personal information, or to withdraw consent to the processing of your personal data, you must submit your request to Majdi Khatib by sending an email to privacy@noblepanacea.com or 800-549-1006. You may also use this contact to submit any requests for information on our privacy practices or to submit a complaint regarding our practices.



Your request or complaint must include your full name, street address, city, province, postal code, and an email address so that we are able to contact you if needed regarding this request.



We cannot properly process requests or complaints that do not come through the designated request mechanism or do not contain sufficient information to allow us to process your request. You may also be required to take reasonable steps as we determine from time to time in order to verify your identity and/or the authenticity of the request. Once your request is processed, absent exemptions, we will provide you with details regarding what personal information we have, how it is used, and with which third parties it is shared.



w. Notice to Quebec Residents.



All Noble Panacea personnel handling personal information will be subject to a duty of confidentiality and to ensure that all personal information is handled in accordance with standard security measures. By using the Sites, you acknowledge and agree that your personal information will be transferred outside of Quebec.



We may use certain technologies that allow you to be identified or profiled. These technologies include the use of cookies, web beacons, embedded scripts, data collected through mobile devices and SDKs, session repay technology, data collected from third-parties or data you provided directly . You may email us at any time to opt-out of such use.



We may use certain technologies that allow you to be located. Such as, when using our mobile app you may opt-in to the collection of your location in order to help you locate products near you. You may turn off the collection of precise location information at any time through the settings on your device.



We will only use your personal information for the purposes stated at the point of collection or as otherwise noted in this privacy policy. Subject to applicable law, if you are a Quebec resident and would like to submit a request to be informed, access, erasure, rectification, data portability, or to withdraw or restrict processing, you must submit your request to privacy@noblepanacea.com or by calling800-549-1006. You may also use this contact to submit any requests for information on our privacy practices or to submit a complaint regarding our practices. Your request or complaint must include your full name, street address, city, province, postal code, and an email address so that we are able to contact you if needed regarding this request.



The Data Protection Officer is in charge of the protection of personal information. You may contact the Data Protection Officer by emailing privacy@noblepanacea.comor calling 800-549-1006.



You may submit a complaint to the Commmision daccs linformation du Qubec (CAI) by visiting: https://www.cai.gouv.qc.ca/a-propos/nous-joindre/.



You and we confirm that it is our wish that this Privacy Policy, any terms of use, and all other related policies be drawn up in English. Vous reconnaissezavoir exig la rdaction en anglais du prsent document ainsi que tous les documents qui s'y rattachent.



x. Notice to United Kingdom/European/Switzerland Residents.



If you are a resident of the United Kingdom (UK), European Economic Area (EEA), or of Switzerland, the following information applies.



Purposes of processing and legal basis for processing: As explained above, we process personal information in various ways depending upon your use of the Sites. We process personal information on the following legal bases: (1) with your consent; (2) as necessary to perform our agreement to provide the Sites; (3) compliance with our legal obligations; and (4) as necessary for our legitimate interests in providing the Sites where those interests do not override your fundamental rights and freedoms related to data privacy such as for:



preventing fraud;



ensuring network and information security, including preventing unauthorized access to our computer and electronic communication systems and preventing malicious software distribution;



supporting internal administration;



improving and developing the Sites;



conducting data analytics analyses to review and better understand consumer interaction; and



direct marketing and advertising purposes.

>Right to lodge a complaint: Users that reside in the UK, EEA, or Switzerland have the right to seek information and assistance or lodge a complaint about our data collection and processing actions with the supervisory authority where they reside. Contact details for data protection authorities are available here. >UK: https://ico.org.uk/ >EEA: https://edpb.europa.eu/about-edpb/board/members_en >Switzerland:https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/links/data-protection---switzerland.html >



Transfers: Personal information we collect may be transferred to, and stored and processed in, the United States or any other country in which we or our affiliates or subcontractors maintain facilities. Transfers of personal data to a third country without an adequacy decision (as that term is understood pursuant to Article 45 of the General Data Protection Regulations (GDPR)) are required to be subject to appropriate safeguards such as standard contractual clauses. In certain cases, we rely on your consent to facilitate transfer, processing, and storage of your data in the United States and other jurisdictions, where laws regarding processing of personal information may be less stringent than the laws in the EEA, UK, and Switzerland.



Data Subject Rights: Users that reside in the EEA, UK, or Switzerland have the following rights with respect to their personal information:



Withdraw consent: If we have collected personal information with your consent, you have the right to withdraw that consent at any time.



Access: You have the right to request access to personal information we collected about you and information about its sources, purposes, and sharing.



Correction: You have the right to request that we correct the personal information we hold about you if it is inaccurate or incomplete.



Erasure: You have the right to request that we erase data we have collected from you. Please note that we may have a reason to deny your deletion request or delete data in a more limited way than you anticipated, e.g., because of a legal obligation to retain it.



Portability: You have the right, in certain circumstances, to request that we provide your personal information to you in a format that can be transferred to another entity.



Restrict Processing: You have the right, in certain circumstances, to request that we limit our processing of your personal information if you are (1) contesting the accuracy of your personal information, (2) asserting that our processing is unlawful; (3) asserting that we no longer need to keep the information for reasons related to the establishment, exercise, or defense of legal claims, or you object to our processing. You have the right, in certain circumstances, to request that we limit our processing of your personal information if you are contesting the accuracy of your personal information; asserting that our processing is unlawful; asserting that we no longer need to keep the information for reasons related to the establishment, exercise, or defense of legal claims, or you object to our processing.



Object: You have the right to object to our processing if we are processing your personal information based on legitimate interests, using your personal information for direct marketing (including profiling), or processing your personal information for purposes of scientific or historical research and statistics.



Automated Decisionmaking: You have the right, in certain circumstances, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you.



Verification Procedures: We must verify your identity for everyones protection, so we may require you to provide us with verification information prior to accessing any records containing personal information about you. We do this by:



Asking you to provide personal identifiers we can match against information we may have collected from you previously and confirm your request using the email or telephone account stated in the request; or



We will use the information you provide for verification only for the purpose of verification. We may have a reason under the law why we do not have to respond to your request or respond to it in a more limited way than you anticipated. If we do, we will explain that to you in our response.





y. Additional Information if You Are Located in Countries Outside the US, EU/EEA, UK, or Canada



In certain jurisdictions with relevant data protection laws, including (without limitation) Argentina, China, Hong Kong, India, Japan, Malaysia, Mexico, Philippines, Singapore, South Africa, and Taiwan, we may require your consent or authorization to use or share your Personal Information for the purposes described in this Privacy Policy. By providing your Personal Information to us, you expressly provide such consent or authorization to the extent it is required.



In addition, you may have additional privacy rights under the law of your country of residence, typically including the rights to access, correct, delete, or object to further processing of your Personal Data. We handle requests to exercise such rights similarly to requests from EU residents under the EU GDPR, as described above.