Privacy Policy

Introduction

Progenitor Biologics, LLC (“DefenAge,” “we,” “us,” or “our”) operates the website DefenAgePRO.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit the Site. This policy applies to all visitors, including California residents, and complies with the California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Act of 2020 (“CPRA”).

This Site is an informational resource for consumers interested in DefenAge PRO Exclusive skincare products. We do not sell products directly on this Site. Products are available exclusively through authorized healthcare providers. No e-commerce transactions, payment processing, or order fulfillment occurs on DefenAgePRO.com.

Please read this policy carefully. By using the Site, you agree to the practices described here. If you do not agree, please discontinue use of the Site.

Information We Collect

We collect information in the following ways:

Information You Provide Directly

• Contact forms: Name, email address, phone number, and message content when you contact us or your healthcare provider through the Site
• Newsletter or SMS sign-up: Email address and/or mobile phone number
• Physician Finder: City, state, or ZIP code you enter to locate a nearby provider (we do not store this after your session ends)

Information Collected Automatically

When you visit the Site, our analytics tools automatically collect certain information, including:

• Device and browser information: Browser type, operating system, device type, screen resolution, and language preference
• Usage data: Pages visited, time spent on pages, click patterns, scroll depth, and referring URL
• Network information: IP address (which may indicate approximate geographic location) and internet service provider
• Cookies and similar technologies: See the “Cookies and Tracking Technologies” section below

Browser Geolocation (Physician Finder Only)

On the Physician Finder page only, your browser may prompt you to share your current location. This uses your browser’s built-in Geolocation API to return approximate coordinates so we can display providers near you. This data is:

• Used only in your current browser session to sort and filter provider results
• Never transmitted to our servers or stored in any database
• Never associated with your identity or any account
• Entirely optional — you can decline the browser prompt, manually enter a ZIP code or city instead, or use the finder without any location input

If you allow location access, your browser may also share the data with Google Maps when the map is rendered. See the “Cookies and Tracking Technologies” section below for details on our Google Maps integration.

Information We Do Not Collect

Categories of Personal Information

Under the CCPA, the following table describes the categories of personal information we have collected from consumers within the preceding 12 months, the sources, the business purpose, and the categories of third parties with whom each category is shared.

We do not collect categories C (protected classifications), E (biometric), H (sensory data), I (professional/employment), J (education), or K (inferences used for profiling) as defined under the CCPA.

How We Use Your Information

We use the information we collect for the following business purposes:

• Respond to your inquiries and contact requests
• Help you locate an authorized DefenAge PRO provider near you
• Send marketing communications you have opted into (email, SMS)
• Analyze Site usage to improve content, layout, and user experience
• Monitor Site performance and diagnose technical issues
• Detect and prevent fraud or abuse
• Comply with legal obligations

We limit our collection and use of personal information to what is reasonably necessary and proportionate to the purposes listed above, consistent with CPRA data minimization requirements.

Sale and Sharing of Personal Information

We do not sell your personal information. We have not sold personal information in the preceding 12 months, and we have no plans to do so.

We do not share your personal information for cross-context behavioral advertising. Our analytics tools (Zoho Analytics, Zoho PageSense, Zoho SalesIQ) are used solely to understand how visitors interact with our own Site. We do not use third-party advertising networks, retargeting pixels, or cross-site tracking for ad targeting purposes.

Because we do not sell or share personal information as defined by the CCPA/CPRA, a “Do Not Sell or Share” opt-out mechanism is not required. However, if you believe your information has been sold or shared in error, please contact us immediately using the information below.

Disclosure to Service Providers

We disclose personal information to the following categories of service providers, who are contractually obligated to use it only for the purposes we specify:

• Zoho Corporation: Website hosting (Zoho Sites), analytics (Zoho Analytics), visitor engagement (Zoho SalesIQ), behavior analysis (Zoho PageSense), CRM, email services, and the serverless backend used by the Physician Finder (Zoho Catalyst). Zoho processes data under a data processing agreement and does not sell personal information. Zoho Privacy Policy
• Google LLC — Google Maps: Used within our Physician Finder to display provider locations on an interactive map. When the map loads, Google may set cookies and process your IP address and (if you granted permission) approximate location. The map is gated by your cookie consent — if you have not accepted functional/marketing cookies, the map is replaced by a placeholder until you click to load it for that session only. Google Privacy Policy
• Google LLC — Google Fonts: Used sitewide to deliver web fonts (Libre Baskerville, Source Sans 3). When fonts load, Google may receive your IP address. No cookies are set by Google Fonts. Google Fonts Privacy FAQ

We do not disclose personal information to any other third parties for their own marketing or commercial purposes.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA. You may exercise these rights free of charge, and we will not discriminate against you for doing so.

Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we have shared it.

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (for example, if we need to retain it to complete a transaction, detect security incidents, or comply with a legal obligation).

Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

Right to Opt Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. As stated above, we do not sell or share your personal information, so this right is not applicable at this time.

Right to Limit Use of Sensitive Personal Information

We do not collect or retain sensitive personal information as defined by the CPRA (such as Social Security numbers, financial account details, racial or ethnic origin, health data, or biometric data). The Physician Finder may request approximate location via your browser’s Geolocation API, but this data is used only within your active browser session, is never transmitted to or stored on our servers, and is not associated with any identifier. Therefore, this right is not applicable at this time.

Right to Non-Discrimination

We will not deny you goods or services, charge you different prices, provide a different quality of service, or suggest any of the above because you exercised any of your privacy rights.

How to Submit a Request

To exercise any of the rights above, contact us using one of these methods:

• Email:info@defenagepro.com
• Phone:(888) 368-5372
• Mail: Progenitor Biologics, LLC — Privacy Request, 5850 El Camino Real, Suite 106, Carlsbad, CA 92008

We will acknowledge your request within 10 business days and respond within 45 calendar days. If we need additional time (up to 45 more days), we will notify you in writing. We may need to verify your identity before fulfilling your request, which may require you to confirm information we already have on file. We will not require you to create an account to submit a request.

Authorized Agents

You may designate an authorized agent to submit a privacy request on your behalf. The agent must provide written authorization signed by you, and we may still require you to verify your identity directly with us. If the agent has a valid power of attorney, we will honor it in accordance with California law.

California “Shine the Light” (Civil Code §1798.83)

Under California Civil Code Section 1798.83, California residents may request information regarding the disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. If this practice changes, we will update this policy and provide you with an opt-out mechanism.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Site. A cookie is a small data file stored on your device by your web browser.

Cookies We Use

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to view, block, or delete cookies. Please note that blocking certain cookies may affect Site functionality. Here are links to cookie management instructions for common browsers:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

Do Not Track

Some browsers transmit a “Do Not Track” (DNT) signal. Because there is no industry-wide standard for DNT, we do not currently respond to DNT signals. If a uniform standard is adopted, we will update this policy accordingly.

Data Retention

We retain personal information only as long as reasonably necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Up to 24 months, then deleted unless an ongoing relationship exists
• Email/SMS subscriber data: Retained until you unsubscribe, then deleted within 30 days
• Analytics data: Aggregated and anonymized within 26 months
• Physician Finder search input: Not stored beyond your browsing session

When retention is no longer necessary, we delete or anonymize the data. Legal or regulatory obligations may require us to retain certain records longer.

Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our Site
• Access controls limiting personnel access to personal information on a need-to-know basis
• Service provider agreements requiring equivalent or stronger security practices
• Regular review of our data collection, storage, and processing practices

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Children’s Privacy

The Site is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have inadvertently collected personal information from a child under 16, we will delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at info@defenagepro.com.

Links to Other Websites

The Site may contain links to third-party websites, including authorized provider websites, social media platforms, and Zoho services. These third-party sites have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policy of every site you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Site after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, your personal information, or wish to exercise your California privacy rights, please contact us: