DEEP CARE US INC. – PRIVACY POLICY

Last Updated: March 10, 2026

This Privacy Policy explains how Deep Care US Inc. (“Deep Care,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information when you use our website, purchase our Device, use our App, or subscribe to our Services.

INFORMATION FOR CALIFORNIA RESIDENTS: This Policy includes disclosures and rights under the California Consumer Privacy Act, as amended (CCPA/CPRA).

1) CONTACT DETAILS AND CONTROLLER

Deep Care US Inc.
120 Wall Street, 20th Floor, New York, NY 10005
Phone: +1 (332) 529-4645
Email: info@deep-care.com

2) SCOPE

This Policy applies to personal information we collect through:
- our websites and online storefronts that link to this Policy;
- our customer support channels;
- our Device and App, when they connect to our systems; and
- marketing and advertising interactions we manage (subject to your choices).

This Policy does not cover third-party websites, apps, or services that we do not control (for example, payment processors, shipping carriers, app stores, or Flex). Their privacy practices apply.

3) PERSONAL INFORMATION WE COLLECT

We collect personal information from (a) you, (b) your device/browser, (c) our Device/App, and (d) third parties.

3.1 Categories (with examples)

A. Identifiers
Examples: name, email address, phone number, shipping address, account username, device identifiers, online identifiers (cookie IDs).

B. Customer records / account information
Examples: account login details, customer support history, subscription status.

C. Commercial information
Examples: products purchased, order history, shipping details, returns/refunds, warranty/repair interactions.

D. Payment and transaction information
Examples: partial card details (tokenized), payment method type, transaction IDs, billing status. (Note: payment card numbers are typically processed by our payment processors rather than stored by us.)

E. Internet or network activity
Examples: pages viewed, clicks, referral URLs, interactions with ads, browser/device attributes, IP address, approximate location derived from IP.

F. Geolocation information
Examples: approximate location from IP; precise location only if you enable device/app permissions.

G. App/Device and wellness-related data (may be sensitive)
Examples (depending on features you use): wellness metrics, sleep-related information, activity or recovery-related data, settings, and usage patterns.

H. Communications
Examples: emails, chat messages, support tickets, survey answers, reviews.

I. Inferences
Examples: aggregated or inferred preferences or interests (e.g., to personalize your experience or limit fraud).

3.2 Sensitive personal information (as defined by some laws)

We may collect or process certain data that may be considered “sensitive” (e.g., precise geolocation, health or wellness-related data, account credentials), depending on what you choose to use and share.

4) HOW WE USE PERSONAL INFORMATION

We use personal information for the following purposes:

• Provide the Services: fulfill orders, deliver products, enable App functionality, provide subscription features.
• Account management: create and manage accounts, authenticate you, apply preferences.
• Customer support: respond to inquiries, troubleshooting, returns, warranty support.
• Payments and fraud prevention: process transactions, detect and prevent fraud and abuse.
• Shipping and logistics: ship products, provide delivery updates.
• Product improvement: analyze performance, fix bugs, develop new features.
• Marketing and advertising: measure campaigns, show ads, and build audiences (subject to opt-out/choice).
• Legal and compliance: comply with law, enforce our terms, and maintain records.

5) HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to:

• Service providers/Processors: hosting providers, analytics providers, customer support systems, email service providers, and other vendors that process information for us.
• Payment processors: to process payments and manage fraud risk.
• Shipping carriers and logistics partners: to deliver products.
• Advertising partners: to measure ad performance, build audiences, and perform cross-context behavioral advertising, subject to your rights and choices.
• Professional advisors: auditors, insurers, lawyers, and consultants.
• Corporate transactions: if we are involved in a merger, acquisition, or asset sale.
• Legal requirements: law enforcement or regulators when legally required.

6) COOKIES, TRACKING, AND AD TECHNOLOGIES

We use first-party and third-party cookies, pixels, SDKs, and similar technologies for:

• strictly necessary functions (security, checkout, session management),
• analytics and performance measurement, and
• advertising/marketing measurement and targeting.

6.1 Tools we may use (examples)

• Meta Pixel (Facebook/Instagram) to measure advertising performance and build audiences.
• Google Ads conversion tracking (Google tag) to measure conversions and manage ad attribution
• LinkedIn Insight Tag to measure conversions and build website audiences.
• HubSpot tracking to support marketing automation, analytics, and lead management.
• YouTube embeds, potentially in privacy-enhanced mode.
• Matomo analytics (often configured with privacy controls such as IP masking; may be self-hosted or vendor-hosted depending on deployment).

6.2 Your controls

Depending on your location and the law that applies, you can control cookies and tracking by:

• using our cookie preference tool (where available) to opt in/out of analytics and advertising cookies;
• using your browser settings to block or delete cookies;
• using opt-out mechanisms described in Section 8 (California and other U.S. opt-outs) including Global Privacy Control signals (where applicable).

7) DATA RETENTION

We keep personal information only as long as reasonably necessary for the purposes described above, unless a longer period is required or permitted by law.

Retention examples (general guidance):

• Orders, invoices, and tax records: typically retained for the legally required period.
• Account data: retained while your account is active; upon deletion request we delete or de-identify where feasible, subject to legal exceptions.
• Device/App wellness data: retained while you use the Services and as needed to provide features; you may be able to delete certain data in the App or by request.
• Marketing/analytics logs: retained for a limited period and then deleted or aggregated.

Specific retention periods may vary by category and jurisdiction and are described in our notices where required.

8) CALIFORNIA PRIVACY NOTICE (CCPA/CPRA)

This section applies if you are a California resident.

8.1 Categories collected, disclosed, “sold,” or “shared”

As described above, we may collect identifiers, commercial information, internet/network activity, and related data. We may disclose these categories to service providers for business purposes (e.g., payment processing, shipping, analytics).

We do not sell personal information for money. However, we may “share” certain identifiers and internet/network activity with advertising partners for cross-context behavioral advertising, which California law may treat as “sharing.” You have the right to opt out of such sale/sharing.

We do not knowingly sell or share personal information of consumers under 16.

8.2 Your California rights

Subject to certain exceptions, you may have the right to:

• Know/Access: request information about categories and specific pieces of personal information collected, used, disclosed, sold, or shared.
• Delete: request deletion of personal information we collected from you.
• Correct: request correction of inaccurate personal information.
• Opt out of sale/sharing: direct us not to sell or share personal information (including via an opt-out preference signal).
• Limit use/disclosure of sensitive personal information: where applicable.
• Non-discrimination: not be discriminated against for exercising your rights.

8.3 How to submit a request

You (or an authorized agent) may submit requests by:

• Email: info@deep-care.com
• Phone: +1 (332) 529-4645
  We may also provide a webform or self-serve controls in the Site/App.

8.4 Verification and authorized agents

We will verify your identity before fulfilling requests, as required by law. Authorized agents may be required to provide proof of authorization and we may verify the consumer’s identity directly.

8.5 Response timing

We generally respond within 45 days, with extensions permitted by law.

8.6 Opt-out preference signals and Global Privacy Control (GPC)

Where legally required, we treat opt-out preference signals (such as GPC) as a valid request to opt out of sale/sharing for the browser/device and associated profiles, and we aim to propagate that opt-out to relevant advertising/analytics flows.

8.7 “Do Not Sell or Share My Personal Information”

We provide a “Do Not Sell or Share” option through our cookie preference/privacy settings page or a dedicated link on our Site.

9) INTERNATIONAL USERS / GDPR NOTE

If you are located in the EEA/UK/Switzerland and our processing is subject to GDPR, you may have additional rights and disclosures that are provided in a separate EU/EEA privacy notice. Where both notices apply, we will apply the rights and protections required by applicable law.

10) SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No system is 100% secure.

11) CHILDREN

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

12) CHANGES TO THIS POLICY

We may update this Policy from time to time. We will post the updated version with a new “Last Updated” date.