This Privacy Policy (policy) governs the manner in which Quincy Bioscience (we, us, or our) collects, uses, maintains and discloses information collected from users (each, a "user") of our websites, including but not limited to www.prevagen.com website and quincybioscience.com ("Sites"). This Policy applies to the sites and all products and services we offer to users. By using the sites, you signify your acceptance of this policy and our terms of service. If you do not agree to this policy, please do not use our sites or submit any information, including personal identification information, to us. Your continued use of the sites signifies your understanding and acceptance of the terms in this policy, including any amendments or modifications to it.

California residents: Those resident in California should also view the "NOTICE TO CALIFORNIA USERS" here, in addition to the sections of this Privacy Policy entitled “Information We Collect” and “Information We Use,” to learn more about how the we collect and use personal information, and to learn more about how to exercise California privacy rights.

INFORMATION WE COLLECT

Depending how we interact with you, we may collect, use, store, and transfer different types of information about you.

Personal identification information

You may use many features of the sites without disclosing your personal identification and you are not required to provide personal identification information as a condition of using our sites (unless you are engaged in a financial transaction which requires personal information). We may collect personal identification information from users in a variety of ways, including, but not limited to, when users visit our site, place an order, subscribe to a newsletter or agree to receive emails from us, and in connection with other activities, services, features or resources we make available on our sites. Personal identifiable information users may be asked for, or that we may obtain through the methods described below, as appropriate, includes:

• Identity Data, such as your name, title, age/birth date, and gender
• Contact Information, such as your, email address, mailing address, billing address, and phone number
• Payment Information, such as credit card information, debit card information, and other financial payment.
• Information, specifically any adverse reaction you might have to one of our dietary supplement products and relevant health information that you choose to share with us.
• Correspondence Information, including information you provide in communications with us
• Online Activity Information, such as your activity while using the sites, as well as information we may gather through the use of cookies, web beacons, and other similar tools.
• Device Information such as your IP address, browser information, operating system, and technical information from the device you are using to access the sites.

HOW WE COLLECT INFORMATION

Most information is provided by you directly, for example, if you contact us, sign up for our newsletter, or purchase a product. Other information is collected automatically by tools such as cookies or web beacons. A cookie is a small piece of data stored on your device to help websites and mobile apps remember things about you. Other technologies, including web storage and identifiers associated with your device or preferences may be used for similar purposes. We call all of these technologies "cookies." We use cookies to: maintain settings and preferences; keep records; enable and enhance online advertising; identify new and returning users; keep our sites secure; and measure and analyze data from sites and users, such as what parts of the site users interact with or how long users stay on a particular page.

You can limit the cookies you accept, or you can choose to not accept any cookies, by using other software or your web browser's settings. If you disable some or all of the cookies, the sites may not function completely, properly, or to your satisfaction. Our sites incorporate cookies from the following sources:
Attentive
Google
Hubspot
Rybbon
Hotjar
SegMetrics
StackAdapt
Facebook
Pinterest
Twitter
Shopify

Information may also be collected by third parties and commercially available sources, including social media providers, data aggregators, and public databases.

In the preceding twelve (12) months, we have not sold or shared any personal information.

HOW WE USE COLLECTED INFORMATION

In addition to the above, Quincy Bioscience collects and uses personal information for the following purposes:

– To recognize you and personalize your experience; we may use information in the aggregate to understand how our users as a group use the services and resources provided on our sites, including by supplementing your personal information with data obtained from third parties.

– To learn about users' use of the sites and improve our sites based on the information and feedback received from users to provide better, such as improving navigation and user interface, presentation of information, and users' engagement with the sites.

– To provide and improve customer service, including by responding to a user's specific customer service issue or request.

– To process transactions, including financial transactions, initiated in the course of using the sites.

– To administer a promotion, survey, site feature, marketing campaign, or advertising.

– To send periodic emails to users who request information, and to send users information they agreed to receive about topics we think will be of interest to them, including company news, updates, and related product or service information.

The email address and/or phone number users provide for order processing will be used to send them information and updates pertaining to their order and to address and respond to their inquiries, and/or other requests. If a user decides to opt-in to our email marketing list and/or SMS subscriber list, they will receive emails and/or SMS messages that may include company news, updates, related product or service information, etc. If at any time the user would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email. To opt-out of SMS messages, respond with “STOP” to any text message from Prevagen. We do not sell email addresses or phone numbers to any third party.

-To Comply with Legal Obligations

In the preceding twelve (12) months, we have not sold or shared any personal information.

HOW WE PROTECT YOUR INFORMATION

We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored on our sites. Although we cannot guarantee our measures are 100% secure all of the time, we periodically update our technology in order to improve protection of user information. However, we are not responsible for the theft, destruction, or inadvertent disclosure of your personal information.

Sensitive and private data exchanged between the sites and its users happens over a SSL secured communication channel and is encrypted and protected with digital signatures. We strive to retain your personal information for only as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

HOW WE SHARE YOUR INFORMATION

We do not sell, trade, or rent users personal identification information to others, however, we may share aggregated personal information with our business partners, trusted affiliates and advertisers for the purposes outlined above.

We may use third party service providers to help us operate our business, including the sites, including: hosting our websites, managing databases, performing analyses, sending out communications for us such as newsletters or surveys, processing payments and orders, shipping your orders, or providing certain other components of our sites, and responding to customer service requests.

We may disclose your information to the extent necessary in order to comply with our legal and regulatory obligations, such as to respond to subpoenas, court orders, or other legal process in response to a request for cooperation from law enforcement or another government agency. We may also disclose your information to governmental authorities if necessary and proper to prevent harm to either us or a user, or in connection with a duly initiated investigation. We may disclose your information if we are involved in a merger, acquisition, or sale of all or a portion of our assets.

INFORMATION IN THE UNITED STATES

The sites are operated in the United States and are intended solely for users located in the United States. Quincy Bioscience and its products and services are U.S.-based and therefore, if you are from, or using the sites from, outside the United States, including the European Union or European Economic Area, and you provide us with information, including personal information, please note that information will be transferred, stored, and processed in the United States. This is done either to ensure we are able to provide our services to you, or, where not necessary for the provision of our services (such as in the case of providing you with marketing communications), it is done only with your consent which you grant by the continued use of the site. If you live outside of the United States, by using the sites and/or providing us with any information, you consent to this transfer and processing of your information in the United States. U.S. laws may not afford the same level or protection as those in your country.

THIRD PARTY WEBSITES

Users may find advertising or other content on our sites that link to the sites and services of our partners, suppliers, advertisers, sponsors, licensors, and other third parties. We do not control the content or links that appear on third party sites and are not responsible for the practices employed by websites linked to or from our sites. In addition, third party sites or services, including their content and links, may be constantly changing. These third party sites and services may have their own privacy policies and customer service policies. Browsing and interaction on any third party website, including websites which have a link to any of our sites, is subject to that third party’s terms and policies. We may offer social sharing features or other integrated tools, which let you share actions you take with other media, and vice versa. The use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the third party that provides the social sharing feature. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the third parties that provide these features.

TARGETED ADVERTISING

We may contract with third-party advertising networks that collect information about you through the use of cookies, web server logs and web beacons on our Sites and emails; on third-party Sites and emails; and on our advertising placed on third-party Sites. They use this information to provide advertisements about products and services tailored to your interests (including for companies not affiliated with us). You may see these advertisements on our Site and other Sites or on social media. This process also helps us manage and track the effectiveness of our marketing efforts. To learn more about advertising networks and to opt out of interest-based advertising, visit the Digital Advertising Alliance at www.aboutads.info/choices or the Network Advertising Initiative at www.networkadvertising.org/choices.

CHILDREN'S POLICY

Our Site is not intended for children under 16 years of age. No one under age 16 may provide any Personal Information on the site. We do not knowingly collect Personal Information from children under 16, nor do we knowingly disclose Personal Information of children under 16 to third parties for valuable consideration or for cross-context behavioral advertising. If you are under 16, do not use or provide any information on the on any sites. If we learn we have collected or received Personal Information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us.

NOTICE TO CALIFORNIA USERS

The California Consumer Privacy Act ("CCPA") provides California residents with the additional rights listed below, subject to certain exceptions. This section applies only to those California residents to whom the CCPA applies ("California Resident" or "You") and does not apply to any Personal Information, as defined in the CCPA ("PI"), that is excepted from the CCPA. All capitalized words in this section have the definitions given to them in the CCPA unless noted. In the preceding twelve (12) months, we have not sold or shared any personal information.

California Residents have the right to:

1. Request disclosure of our data Collection and sales practices in connection with you, including the categories of PI we have collected, the source of that PI, our use of that PI and, if the disclosed or Sold to third parties, the categories of PI disclosed or Sold to third parties and the categories of third parties to whom such PI was disclosed or Sold;
2. Request a copy of the specific PI collected about you during the 12 months before your request made under the previous paragraph;
3. Have such PI deleted (with exceptions);
4. Request that your PI not be Sold to third parties, if applicable (Right to Opt Out); and
5. Not be discriminated against because you exercised any of these rights.

Right to Request and Right to Know. You have the right to know and what PI we have Collected about you over the past 12 months, and the right to request that PI, including:

• The categories of PI we have collected about you;
• The categories of sources from which the PI is collected;
• The Business purpose or Commercial purpose for Collection of your PI;
• The categories of Third parties with whom we have shared your PI; and
• The specific PI we have Collected about you.

You may exercise the Right to Request no more than twice a year.
We specifically collect the following either from you directly or through the use of software or Third party databases: your name; email address, phone number, IP address, device and related technical information and identifiers; and in the case of a purchase, your address and payment information.

The following table indicates the categories of PI we collect, the sources of the PI, and the purpose of Collecting the PI.

	Category of PI	Source of PI
1	Identifiers (such as contact information, government IDs, cookies, etc.)	A, B, C
2	Information protected against security breaches (such as your name and financial account, driver’s license, social security number, user name and password, health/medical information)	[NOT COLLECTED]
3	Protected classification information (like race, gender, ethnicity, etc.)	A
4	Commercial information	[NOT COLLECTED]
5	Internet/electronic activity	B,C
6	Geolocation	A, B, C
7	Audio/video data	A
8	Professional or employment related information	[NOT COLLECTED]
9	Education information	[NOT COLLECTED]
10	Biometrics	[NOT COLLECTED]
11	Inferences from the foregoing	A, B, C

Key to Sources:

	Source
A	Individual submitting the information
B	Third party from whom the business receives the information
C	Observing activities and recording the information (i.e., through cookies)

We collect Personal Information for one or more of the following commercial and business purposes:

• Providing you with our products and services;
• Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with laws and other standards;
• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
• Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business;
• Debugging to identify and repair errors that impair existing intended functionality;
• Short-term, transient use, provided the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer's experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction;
• Undertaking internal research for technological development and demonstration; and
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the company, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.

If we collect any additional PI for any other purpose, we will notify you of that purpose at the time we collect the PI for that purpose.

If we disclose PI for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that PI confidential and not use it for any purpose except performing the contract. We share PI with the following categories of Third parties: payment processors and shipment vendors, business consultants, and other service providers. We do not sell PI.

Right to Opt Out. We do not Sell PI. If we do engage in an activity determined to be a Sale of your PI, you have the right to direct us to not Sell your PI. You can do so by clicking on the “Do Not Sell My Information Link” found at the bottom footer of our sites or by clicking here.

Right to Delete. You have the right to request that we delete the PI we have Collected from you (and direct our service providers to do the same). There are a number of exceptions, however, that include, but are not limited to, when the PI is necessary for us or a Third party to do any of the following:

• Complete your transaction;
• Provide you a good or service;
• Perform a contract between us and you;
• Protect your security and prosecute those responsible for breaching it;
• Fix our system in the case of a bug;
• Protect the free speech rights of you or other users;
• Comply with the California Electronic Communications Privacy Act;
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interests that adheres to all other applicable ethics and privacy laws;
• Comply with a legal obligation; or
• Make other internal and lawful uses of the information that are compatible with the context in which you provided it.

Other Rights. You can request certain information about our disclosure of PI to third parties for their own direct marketing purposes during the preceding calendar year. This request is free and may be made once a year. You also have the right not to be discriminated against for exercising any of the rights listed above.
If you are a California Resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your PI to third parties for the third parties’ direct marketing purposes. To make such a request, please send an email to customerservice@prevagen.com. Pursuant to California Civil Code Section 1798.83(c)(2), we do not share your PI with third parties’ direct marketing use without your consent.

Exercising Your California Privacy Rights. To request access to or deletion of your PI, or to exercise any other data rights under California law, please contact us using one of the following methods:

Website: You may fill out the form available on our website, here. We are only able to handle your request if you provide the requested information needed to verify your identity.

Email: You may email us at customerservice@prevagen.com to exercise your California rights. Please include your full name, email address, and other identifying information such that we will be able to verify your identity, along with why you are writing, so that we can properly process your request. We are only able to handle your request if you provide the requested information needed to verify your identity.
Before we take any action on any request exercising a CCPA right, we must reasonably verify your identity. If we attempt to, but cannot do so, we will not be obligated to you under the CCPA. We will reach out to you by the method of communication through which you reached out to us, and let know that we are unable to verify your identity.

Any subsequent interaction with the Site after a request for deletion, or deletion, of PI will require new requests for action on your data.

Response Timing and Format. We aim to respond to a consumer request for access or deletion within 45 days of receiving that request. If we require more time, we will inform you of the reason and extension period in writing.

Notice of Financial Incentive under California Law. We offer our customers rewards programs that provide certain benefits, such as rewards, promotions, and exclusive offers (the “Rewards Programs”). When you sign up for a Rewards Program, we will ask you to provide your name and email address. Because the Rewards Programs involve the collection of personal information, they might be interpreted as a “financial incentive” program under California law. The value of your personal information to us is related to the value of the free or discounted products or services that you obtain in connection with the Rewards Programs, and it is based on the expense related to offering those free or discounted products or services. You may withdraw from participating in a Rewards Program at any time by contacting us at prevagenrewards@prevagen.com. Visit the full program rules at https://prevagen.com/pages/prevagen-rewards-terms-and-conditions.

STATE-SPECIFIC PRIVACY RIGHTS
You may have additional privacy rights under the law of the state in which you live. This section describes those rights for residents of Virginia and Nevada. If you are a resident of California, your privacy rights are described in the NOTICE TO CALIFORNIA USERS section above.

VIRGINIA
You have the right to access, delete, and correct certain personal information we collect about you. When you request access to personal information, you have the right to receive that information in a portable and readily usable format. You also have the right to restrict the use of that personal information for targeted advertising, restrict the sale of that personal information, and control our use of personal information considered sensitive. You also have a right not to receive discriminatory treatment for the exercise of your privacy rights.

You or your authorized agent may submit a request to exercise your access, deletion, and correction rights by submitting a Data Rights Request or calling 877-977-3824, email: customerservice@prevagen.com. If we deny your request, you have the right to appeal our decision.

GOVERNING LAW AND JURISDICTION

This privacy policy shall be governed and interpreted in accordance with the laws of the United States and the State of Wisconsin without regard to its conflict of laws principles. Any disputes arising out of this Privacy Policy shall be adjudicated in Milwaukee County, Wisconsin or a federal court of competent jurisdiction in the Eastern District of the State of Wisconsin.

CHANGES TO THIS PRIVACY POLICY

This policy is reviewed annually, however, we may update this privacy policy at any time. We encourage users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.

Contacting us

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us at:
Quincy Bioscience
726 Heartland Trail, Suite 300
Madison, Wisconsin 53717
Or by email