NOTICE AT COLLECTION OF PERSONAL INFORMATION

Last Updated: [Insert Date]

Table of Contents

1. Categories of Personal Information We Collect & Methods of Collection
2. Purposes for Collecting Personal Information
3. Retention of Personal Information
4. Disclosure, Sharing, and Sale of Personal Information
5. California, Delaware, Virginia, Colorado, and Connecticut Residents’ Rights
6. How to Exercise Opt-Out and Privacy Rights
7. Data Security and Legal Compliance

This Notice at Collection describes how St.GABRIEL’s Pharmaceuticals, LLC (“St.GABRIEL’s”, “we”, “us”, or “our”) collects, uses, and shares personal information when you interact with our websites, digital services, mobile applications, and other platforms (collectively, the “Sites”). This Notice supplements our broader Privacy Policy and provides key information regarding the categories of personal information collected and how it may be used in accordance with applicable federal and state privacy laws.

---

1. Categories of Personal Information We Collect & Methods of Collection

We collect personal information through multiple channels:

• Directly from you when you provide information via forms, quizzes, surveys, consultations, or account creation
• Automatically via technological tools including cookies, pixels, server logs, and device identifiers
• From third-party providers including marketing partners, analytics vendors, and publicly available sources

The categories of personal information we may collect include:

Category of Personal Information	Examples
Identifiers	Full name, username, email address Mailing and billing addresses Phone or mobile numbers IP address, device identifiers, cookies Social media IDs Government-issued identifiers (if required)
Internet or Network Activity	Browsing history on our Sites Search queries Interaction with advertisements or digital services Device usage and logs Smart device sensor data
Payment & Financial Information	Credit/debit card information Billing details Transaction data used for payment verification and fraud prevention
Health & Biometric Information	Skin or dermatological condition data Health concerns or symptoms shared in consultations Uploaded images or videos for product recommendations Derived biometric analysis from facial or body images Inferences regarding health-related traits
Protected Characteristics	Age, gender, race, ethnicity, or other characteristics protected by law
Commercial Information	Products purchased or considered Purchase history, customer loyalty data Service usage data and feedback User-generated content including reviews or surveys
Geolocation Data	Approximate or precise location data Geographic coordinates where permitted
Professional or Employment Information	Occupation, employer, educational history Professional qualifications relevant to research participation or clinical studies
Inferences & Profiling	Derived insights regarding preferences, interests, behaviors, or demographics AI-generated recommendations for products or services

---

2. Purposes for Collecting Personal Information

• Providing requested products, services, or digital tools
• Processing transactions, billing, and order fulfillment
• Communicating regarding products, services, or account updates
• Personalizing content, offers, or recommendations using AI and analytics
• Conducting product development, research, and quality assurance
• Delivering marketing, promotional, or advertising communications where permitted
• Preventing fraud, enhancing security, and ensuring system integrity
• Meeting regulatory, legal, or corporate compliance requirements
• Conducting internal analytics, operational planning, and customer insights
• Managing corporate transactions, partnerships, and collaborations
• Documenting adverse events or product safety reports

---

3. Retention of Personal Information

Personal information is retained only as long as necessary to accomplish the purposes described above, satisfy legal obligations, resolve disputes, and enforce agreements. Retention periods are evaluated based on the type of information, regulatory requirements, and business necessity.

---

4. Disclosure, Sharing, and Sale of Personal Information

St.GABRIEL’s may share personal information with third parties to support legitimate business operations, research, and marketing. Such parties may include:

• Cloud and technology service providers
• Analytics and research vendors
• Payment processors
• Marketing, advertising, and media partners
• Professional advisors and legal counsel

Where applicable under state law, some sharing of personal information may be considered a “sale” or “sharing” for purposes of marketing or targeted advertising. Identifiers or hashed data may be provided to advertising networks to enable cross-device targeting or measurement of campaign effectiveness. We also disclose personal information when required by law, to enforce legal rights, or to protect safety and property.

---

5. California, Delaware, Virginia, Colorado, and Connecticut Residents’ Rights

State	Consumer Rights
California (CCPA/CPRA)	Right to know categories and sources of personal information collected Right to access and request deletion of personal information Right to opt-out of sale or sharing of personal information Right to limit use of sensitive personal information
Delaware	Right to know personal information collected and purposes Right to access personal information maintained by the company Right to request deletion where legally permitted
Virginia (VCDPA)	Right to access and correct personal information Right to obtain a record of processing purposes Right to opt out of targeted advertising
Colorado (CPA)	Right to access, correct, and delete personal information Right to opt out of targeted advertising Right to data portability
Connecticut (CTDPA)	Right to access and correct personal information Right to request deletion where legally permitted Right to opt out of profiling or targeted marketing

---

6. How to Exercise Opt-Out and Privacy Rights

Consumers may exercise their rights by contacting St.GABRIEL’s via our designated privacy channels, including:

• Privacy portal: [Insert Link]
• Email: [Insert Privacy Email]
• Phone: [Insert Privacy Phone Number]

Requests will be processed in accordance with applicable state and federal privacy laws. Verified requests from authorized individuals will be honored in compliance with statutory timelines.

---

7. Data Security and Legal Compliance

St.GABRIEL’s maintains administrative, technical, and physical safeguards designed to protect personal information. While we strive for the highest standards, no system is completely secure, and absolute security cannot be guaranteed. We comply with applicable privacy laws including federal regulations and state-specific requirements (California CPRA, Delaware Online Privacy Act, Virginia VCDPA, Colorado CPA, Connecticut CTDPA), and regularly review our practices to ensure ongoing compliance. St.GABRIEL’s reserves the right to update this Notice at Collection to reflect changes in law, operations, or technology. The most current version will always be posted on our Sites with the updated effective date.