Privacy Policy

Effective Date: April 2026

Introduction

This Privacy Policy ("Privacy Policy") describes the data protection practices of L&O Aesthetics Inc DBA Buena Health (henceforth, "Buena Health") ("Buena Health," "we," "our," or "us") when you interact with us, our application(s), or, website(s). For the purposes of this Privacy Policy, "Personal Information" refers to any information that is linked or reasonably linkable to an identified or identifiable natural person.

We refer to the Websites, and other services provided by Buena Health together in this Privacy Policy as the "Services." This Privacy Policy is incorporated into our Terms of Use. All capitalized terms used in this Privacy Policy but not defined herein have the meanings assigned to them in the Terms of Use.

If you are a California resident, please review the section regarding Privacy Information for California Residents herein for state-specific rights.

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICES.

This Privacy Policy Contains the Following Sections

• The Information We Collect and the Sources of Such Information
• Purposes for How We Use Your Information
• Online Analytics and Advertising
• How We Share and Disclose Your Information
• Your Marketing Choices
• Health Information and Third-Party Services
• How We Protect Your Information
• Privacy Information for California Residents
• Retention of Your Information
• Revisions to Our Privacy Policy
• Contacting Us

The Information We Collect and the Sources of Such Information

We obtain Personal Information about you through the means discussed below when you use the Services. Please note that we need certain types of Personal Information so that we can provide the Services to you. If you do not provide us with such information, or ask us to delete it, the Services may not function as intended.

1. Information You Provide to Us

We collect a variety of Personal Information that you provide directly to us. For example, we collect Personal Information from you through:

• Account and product registration and administration of your account
• Processing your orders and requests for treatment
• Questions, communications, or feedback you submit to us via forms or email
• Requests for customer support and technical assistance, including through online chat functionalities
• Uploads or posts to the Services
• Employment applications you submit

The specific types of Personal Information we collect will depend upon the Services you use, how you use them, and the information you choose to provide. The types of Personal Information we collect directly from you may include:

• Name, address, telephone number, date of birth, and email address
• Information about your medical conditions, treatment options, physician referrals, lifestyle and personal preferences, prescriptions, genetics, medical photos, and lab results or other related health information
• Log-in credentials if you create an account
• Billing information, such as shipping address, credit or debit card number, verification number, and expiration date
• Identity verification information
• Information about purchases or other transactions with us
• Information about your customer service and maintenance interactions with us
• Demographic information
• Information about others, such as emergency contacts
• User-generated content you post in public online forums
• Any other information you choose to directly provide to us

2. Information We Collect Through Automated Means

We collect certain information about your use of the Services and the devices you use to access the Services. We and our service providers may use a variety of technologies, including cookies, SDKs, and similar tools, to assist in collecting this information.

When you use our Website and app, we collect and analyze information such as your IP address, device types, browser types, browser language, operating system, the state or country from which you accessed the Services, software and hardware attributes, referring and exit pages and URLs, platform type, the number of clicks, files you download, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular pages, the terms you use in searches on our Services, the date and time you used the Services, error logs, and other similar information.

Location Information: When you use the Services, we and our service providers may automatically collect general location information from your computer or mobile device. We will ask your permission before collecting your precise GPS location information.

3. Information We Collect from Social Media and Other Content Platforms

When you "like" or "follow" us on Facebook, Instagram, Twitter, or other social media platforms, we may collect some information from you including your name, email address, and any comments or content you post relevant to us.

4. Information We Receive from Other Sources

We work closely with third parties (including physicians, medical professionals, and pharmacies to provide you with the Services, as well as with advertising networks, analytics providers, marketing partners, and search information providers).

Purposes for How We Use Your Personal Information

We may use the Personal Information we collect for the following purposes:

• To provide the Services to you, including facilitating consultations, prescriptions, and treatments
• To create and manage your account
• To process and fulfill orders, including sending confirmations, invoices, and shipping updates
• To communicate with you about products, services, offers, promotions, events, and other news
• To respond to your comments, questions, and requests, and provide customer service
• To monitor and analyze trends, usage, and activities in connection with the Services
• To detect, investigate, and prevent fraudulent transactions and other illegal activities and protect the rights and property of Buena Health and others
• To personalize and improve the Services and provide advertisements, content, or features that match user profiles or interests
• To facilitate contests, sweepstakes, and promotions, and process and deliver entries and rewards
• To carry out any other purpose described to you at the time the information was collected
• To comply with applicable laws, regulations, and legal processes

Online Analytics and Advertising

Online Analytics

We may use third-party web analytics services on the Services, such as those of Google Analytics. These service providers use a variety of tracking technologies such as cookies to analyze how users use the Services. The information collected (described above in "Information We Collect Through Automated Means") may be shared with or collected directly by these services and processed to evaluate your use of the Services.

For information on how Google Analytics collects and processes data, visit: www.google.com/policies/privacy/partners/. You may opt out of having your data used by Google Analytics by visiting: tools.google.com/dlpage/gaoptout.

Online Advertising

The Services may integrate third-party advertising technologies that allow for the delivery of relevant content and advertising on the Services, as well as on other websites you visit. The ads may be based on various factors such as the content of the page you are visiting, information you enter such as your age and gender, your searches, demographic data, user-generated content, and other information we collect from you. These ads may be based on your current activity or your activity over time and across other websites and online services and may be tailored to your interests.

Mobile Advertising

When using mobile applications you may also receive tailored in-application advertisements. Each operating system provides its own instructions on how to limit ad tracking or prevent the advertising identifier from being used for interest-based advertising. We do not control how these platforms or other third-party ad platforms manage any information they collect from you.

Do Not Track

Some Internet browsers may be configured to send "Do Not Track" signals to the online services that you visit. There currently is no consensus among industry participants as to what "Do Not Track" means in this context. Like many other websites and online services, the Services do not currently alter their practices when they receive a "Do Not Track" signal from a visitor's browser.

Information from Other Sources

We may receive information about you from other sources, including through third-party services and organizations. For example, if you access the Services through a third-party application (such as a social media platform or a third-party login service), we may collect information about you from that third party that you have made available via your privacy settings.

Use of AI Technologies

Buena Health may use artificial intelligence (AI) tools and technologies to improve the quality of care and the efficiency of our Services. These tools may be used for purposes such as personalized treatment recommendations, symptom triage, content generation, and communication support. AI outputs are reviewed by qualified healthcare providers where clinically relevant. We do not use AI as a substitute for licensed medical judgment. Your data may be processed by AI systems in accordance with this Privacy Policy and applicable law.

How We Share and Disclose Your Information

We may share or disclose your Personal Information in the following circumstances:

Affiliates

We may share your information with our affiliated companies for purposes consistent with this Privacy Policy.

Health Care Providers

When you request healthcare services through Buena Health, we may share your Personal Information, including health-related information, with licensed healthcare providers, physicians, and medical professionals who provide clinical care, consultations, or prescriptions as part of the Services.

Service Providers

We may employ third-party companies and individuals to facilitate our Services ("Service Providers"), provide the Services on our behalf, perform Services-related services, or assist us in analyzing how our Services are used. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. Examples include payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.

Advertising Networks

We may share certain information with advertising networks and marketing partners, as described in the "Online Analytics and Advertising" section above. We do not share protected health information for advertising purposes without your explicit authorization.

Joint Partners

We may share information with joint marketing partners or co-sponsors of promotions, contests, or events in which you participate.

Protection of Buena Health and Others

We may disclose your Personal Information if required to do so by law or in the good-faith belief that such action is necessary to: comply with a legal obligation; protect and defend the rights or property of Buena Health; prevent or investigate possible wrongdoing in connection with the Services; protect the personal safety of users of the Services or the public; or protect against legal liability.

Business Transfers

If Buena Health is involved in a merger, acquisition, or sale of all or a portion of its assets, your Personal Information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Website of any change in ownership or uses of your Personal Information, as well as any choices you may have regarding your Personal Information.

Public Forums

Certain features of the Services may allow you to post content publicly, such as product reviews, comments, and other communications. Any information you provide in these areas may be read, collected, and used by others who access them. To request removal of your information from public forums, contact us using the information provided below.

Testimonials

We may display personal testimonials of satisfied customers on our Services. With your consent, we may post your testimonial along with your name. If you wish to update or delete your testimonial, please contact us.

Consent

We may share your information with your consent or at your direction.

Aggregate Data

We may share aggregated or de-identified information, which cannot reasonably be used to identify you, for any purpose.

Your Rights and Choices

Depending on your state of residence, you may have the following rights regarding your Personal Information:

• Right to Know / Access: You may have the right to request information about the categories and specific pieces of Personal Information we have collected about you, as well as the categories of sources, purposes, and third parties with whom we share it.
• Right to Delete: You may have the right to request that we delete the Personal Information we have collected from you, subject to certain exceptions.
• Right to Correct: You may have the right to request that we correct inaccurate Personal Information we maintain about you.
• Right to Opt-Out of Sale / Sharing: You may have the right to opt out of the "sale" or "sharing" of your Personal Information, as those terms are defined by applicable law.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: You may have the right to limit the use and disclosure of your sensitive personal information to certain specified purposes.

To exercise any of these rights, please contact us at hola@buenahealth.com or call (213) 619-1144. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

Your Marketing Choices

Email Communications: You may opt out of receiving promotional emails from Buena Health by following the unsubscribe instructions included in those emails. If you opt out, we may still send you non-promotional communications, such as those about your account or our ongoing business relations.

Text Messages: If you have opted in to receive text messages, you can opt out at any time by replying STOP to any message.

Cookies and Tracking: Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of the Services.

Sensitive Data Opt-Out: If you would like to opt out of the collection or use of sensitive personal information beyond what is necessary to provide the Services, please contact us using the information provided below.

Collection of Children's Data

Our Services are not directed to or intended for use by anyone under the age of 16. We do not knowingly collect Personal Information from anyone under the age of 16. If we learn that we have collected Personal Information from a child under the age of 16, we will take steps to delete it as quickly as possible. If you believe that a child under 16 may have provided us with Personal Information, please contact us at hola@buenahealth.com.

Health Information and Third-Party Services

In connection with the Services, your health information may be shared with third-party healthcare providers, pharmacies, and laboratories to facilitate your care. These third parties have their own privacy policies and practices, and Buena Health is not responsible for the privacy practices of these third-party services.

HIPAA Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Buena Health is required by law to maintain the privacy of your Protected Health Information (PHI) and to provide you with notice of our legal duties and privacy practices with respect to your PHI. We are required to abide by the terms of this Notice of Privacy Practices as long as it is in effect.

Uses and Disclosures of PHI

We may use and disclose your PHI for the following purposes:

• Treatment: We may use your PHI to provide, coordinate, or manage your healthcare and related services. This includes sharing information with physicians, pharmacists, and other healthcare providers involved in your care.
• Payment: We may use and disclose your PHI to bill and collect payment for the services and items you may receive from us. For example, we may contact your health insurer to certify that you are eligible for benefits, or we may use your PHI to bill you directly or through a third party.
• Health Care Operations: We may use and disclose your PHI for our healthcare operations, which includes quality assessment, employee review, licensing, and conducting or arranging for other business activities.
• As Required by Law: We may use or disclose your PHI when we are required to do so by law.
• Public Health Activities: We may disclose your PHI for public health activities, including reporting to public health authorities for the purpose of preventing or controlling disease, injury, or disability.
• Health Oversight Activities: We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, inspections, investigations, and licensure actions.
• Judicial and Administrative Proceedings: We may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.
• Law Enforcement: We may disclose your PHI for law enforcement purposes, including in response to a warrant, summons, or similar process.
• To Avert a Serious Threat to Health or Safety: We may use or disclose your PHI when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.
• Workers' Compensation: We may disclose your PHI as authorized by and to the extent necessary to comply with workers' compensation or similar programs.

Your Rights Regarding Your PHI

You have the following rights with respect to your PHI:

• Right to Inspect and Copy: You have the right to inspect and copy your PHI maintained by us. To make such a request, please submit it in writing to our Privacy Officer.
• Right to Request Amendment: If you believe that your PHI is incorrect or incomplete, you may request that we amend it. Your request must be made in writing and must include a reason for the requested amendment.
• Right to an Accounting of Disclosures: You have the right to request an accounting of certain disclosures of your PHI that we have made. Your request must be made in writing.
• Right to Request Restrictions: You have the right to request a restriction or limitation on your PHI that we use or disclose for treatment, payment, or healthcare operations. We are not required to agree to your request, but if we do, we will honor the restriction until you revoke it or we notify you.
• Right to Request Confidential Communications: You have the right to request that we communicate with you about your healthcare in a certain way or at a certain location. For example, you can request that we contact you only by mail or at a specific address.
• Right to a Copy of This Notice: You have the right to a paper copy of this Notice at any time, even if you have agreed to receive it electronically.

Transmission of PHI

Your PHI may be transmitted electronically between Buena Health, our healthcare providers, pharmacies, laboratories, and other service providers using secure electronic methods. By using the Services, you acknowledge and consent to the electronic transmission of your PHI as described herein and in our Terms of Use.

Changes to This Notice

We reserve the right to change this Notice of Privacy Practices at any time. Any revised Notice will be effective for all PHI we already maintain, as well as any PHI we create or receive after the revision. We will post a copy of any revised Notice on our Website.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint. To file a complaint with us, contact our Privacy Officer using the information provided at the end of this Privacy Policy.

Privacy Information for California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your Personal Information. This section describes your rights under the CCPA/CPRA and explains how to exercise those rights.

Categories of Personal Information Collected

In the preceding twelve (12) months, we have collected the following categories of Personal Information:

• Identifiers: such as name, postal address, email address, phone number, date of birth, and IP address
• Personal Information categories listed in Cal. Civ. Code 1798.80(e): such as name, address, telephone number, health insurance information, and medical information
• Protected Classification Characteristics: such as age, gender, and medical conditions
• Commercial Information: such as records of products or services purchased and purchasing histories
• Internet or Similar Network Activity: such as browsing history, search history, and information regarding interactions with our Services
• Geolocation Data: such as approximate and precise location information
• Sensory Data: such as medical photos and audio recordings of customer service calls
• Professional or Employment-Related Information: such as employment history and qualifications (if you apply for a job with us)
• Inferences: drawn from the above categories to create a profile reflecting your preferences, characteristics, and behavior
• Sensitive Personal Information: such as health information, precise geolocation data, and government-issued identification numbers

Your Rights Under the CCPA/CPRA

As a California resident, you have the right to:

• Request that we disclose the categories and specific pieces of Personal Information we have collected about you
• Request that we delete your Personal Information, subject to certain exceptions
• Request that we correct inaccurate Personal Information
• Opt out of the sale or sharing of your Personal Information
• Limit the use or disclosure of your Sensitive Personal Information
• Not be discriminated against for exercising your privacy rights

To exercise your rights, please contact us at hola@buenahealth.com or call (213) 619-1144. You may also designate an authorized agent to make a request on your behalf.

Shine the Light Disclosure

California Civil Code Section 1798.83 permits California residents to request information regarding the disclosure of Personal Information to third parties for their direct marketing purposes. Buena Health does not share your Personal Information with third parties for their own direct marketing purposes.

How We Protect Your Information

We take the security of your Personal Information seriously and use reasonable administrative, technical, and physical safeguards to protect it from unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, secure server infrastructure, and regular security assessments. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Retention of Your Information

We keep your information for no longer than necessary for the purposes for which it is processed. The length of time we retain your Personal Information depends on the purposes for which we collected and use it, and/or as required to comply with applicable laws. When we no longer need your information, we will securely delete or de-identify it in accordance with our data retention policies and applicable law.

Revisions to Our Privacy Policy

We reserve the right to change this Privacy Policy at any time. If we make material changes, we will notify you by email (sent to the email address specified in your account) or by means of a notice on our Website prior to the change becoming effective. We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting your information. Your continued use of the Services after any modifications to this Privacy Policy constitutes your acceptance of such modifications.

State-Specific Provisions

In addition to the privacy practices described in our Notice of Privacy Practices for Protected Health Information, we comply with applicable state-specific privacy laws related to PHI. Residents of certain states may have additional rights under their state's privacy laws. If you are a resident of a state that provides additional privacy rights beyond those described in this Privacy Policy, please contact us using the information provided below to learn more about your rights.

SMS / Text Messaging

If you provide your phone number, you may receive text messages from Buena Health for service-related updates and, if you opt in, marketing messages. By entering your phone number, you are agreeing to receive text messages from Buena Health. Message & data rates may apply. Message frequency may vary. Reply HELP for more information. You can reply STOP or UNSUBSCRIBE to opt-out at any time.

Buena Health will not be liable for any delays in the receipt of any SMS messages, as delivery is subject to effective transmission from your network operator. SMS message services are provided on an "as-is" basis.

Contacting Us

If you have any questions or comments about this Privacy Policy, the ways in which Buena Health collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights, please do not hesitate to contact us:

Buena Health
Privacy Officer: Carlos Savier Osorio
Email: hola@buenahealth.com
Phone: (213) 619-1144
Address: 6101 W Centinela Ave, Suite 160, Culver City, CA 90230

Medical Advice or Services

The content of this website is for informational purposes only and does not constitute professional medical advice, diagnosis, treatment, or recommendations of any kind. Any information provided by Buena Health, whether on its website, through its Services, or otherwise, should not be construed as professional medical advice. Always seek the advice of a physician or other qualified healthcare provider with any questions you may have regarding a medical condition. Never disregard professional medical advice or delay in seeking it because of something you have read on the Buena Health website or through the Services.