PRIVACY POLICY
Effective Date: May 1, 2026
Katharos Laboratories, Inc. (“Katharos”, “we”, “us”, or “our”) values your privacy and the security of your information. This Privacy Policy (the “Policy”) describes how Katharos uses, discloses, and otherwise processes individually identifiable information (“Personal Information”) it collects from our website made available at www.katharoslab.com (the “Website”), and our Products and Services accessible through the Website.
PLEASE REVIEW THIS PRIVACY POLICY CAREFULLY. It describes how we collect, use, and disclose information that we obtain about visitors of our Website and users of our Services. This Privacy Policy is incorporated into our general Terms and Conditions (“Terms”). Any capitalized terms not defined in this Privacy Policy have the meanings provided in the Terms. For additional information on the third parties to whom we disclose your information via the Services, please see the section below on how we disclose information. By visiting the Websiteor using our Products or Services, you acknowledge and agree that your Personal Information will be handled as described in this Policy.
Privacy laws and guidelines are part of a constantly changing environment. We reserve the right, at our discretion, to change, modify, add, or remove portions of this Policy at any time. Material changes will be posted on the Website or otherwise communicated to you. All changes will be effective immediately upon posting to the Website.
Supplemental State Privacy Notices
California Residents: If you are a California resident, please see the California Privacy Rights Notice below for additional rights and information that may apply to you.
Resident of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia: Please see the State Supplemental Privacy Notice section below for additional rights and terms that may apply to you.
INFORMATION WE COLLECT ABOUT YOU
We may collect Personal Information directly from you and from third parties, as well as automatically through your use of the Website or our Services.
Information We Collect Directly From You
We collect the below Personal Information directly from you via this Website and Services, including via dynamic intake forms where you enter information electronically via our Website.
Account Information
You may be able to browse the informational areas of the Website without creating an account. However, registration is required to use the Services. To register, you may be asked to provide certain Personal Information, such as your name, date of birth, address, email, phone number, as well as a user ID and password, and government or other picture ID.
The email address that you provide is the email address that will be used for correspondence regarding your account. By providing us with an email address you recognize, understand, and agree that this is the email address we will use for your account and communications. We are not responsible for any disclosures that may result from a third party’s access to your email account, whether or not that access is authorized by you.
Payment Information
You are required to provide payment information for all Product orders. Payment information is processed directly by one of our payment processors in accordance with their respective privacy policies. For more information about how these payment processors handle personal data, please review their privacy policies.
Sensitive Information
We do not intend to collect any data that reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership. Due to the nature of our Products and Services, certain information we collect may be considered “Sensitive Personal Information” in certain states. Depending upon the state of your residence, you may have additional rights relating to our use of your Sensitive Personal Information.
Information We Receive from Others
Katharos may also receive Personal Information about you from third parties. These third parties consist of social media websites that provide lead information as well as interest based advertising providers and data analytics providers that may provide us Personal Information about you.
Information We Collect Automatically
Account Activity.
We may collect data about how you use (i) your online account, and (ii) the Website when you are logged into your account.
Tracking Technologies.
Like many other websites, we may automatically collect information about your use of our Website and Services through scripts, cookies, pixels, web beacons, and other tracking technologies (collectively, “Tracking Technologies”), which information includes: your browser type and operating system, web pages you view, links you click, your IP address, your internet service provider, device ID, approximate geographic location, the referring URL that led you to the Website, data related to how and when you use the Website, and pages visited and average time spent on the Website. Some of this may be deemed Personal Information.
We may combine this information with other information that we have collected about you, including, where applicable, your account information and other Personal Information. Some of this information may be disclosed with our analytics providers and used for their own advertising purposes.
Tracking Technologies enable Katharos to: (i) collect information about your use of the Website;(ii) understand general Website usage and volume statistical information; (iii) improve the Services, experience, content and offerings on the Website; (iv) enable advertising and analytics functionality by tracking your interaction with the Website and Services and collecting information about how you use the Website and Services; and (v) allow for customized use and experience of the Website and Services.
Most browsers automatically accept cookies and Tracking Technologies. You can disable certain functions by changing your browser settings but disabling cookies and Tracking Technologies may impact your use and enjoyment of the Website. Not all features or functions of the Websitemay work properly if you disable Tracking Technologies. You cannot disable all Tracking Technologies, such as cookies that are essential to the functioning of the Website. Depending on where you live, you may also have the ability to consent to the use of certain Tracking Technologies through our cookie banner or other privacy settings provided on the Website. Please review our State Supplemental Privacy Notices below for additional information.
Ad Networks
We use third-party ad networks (called third-party ad servers or network advertisers) to deliver ads to you on our behalf across the internet, via email and media streaming services. These third-party ad networks may place their Tracking Technologies on the Website or in your browser to collect information about you when you visit the Website (such as browser type, time and date, browsing or transaction activity, subject of advertisements clicked or scrolled over, or a platform-provided identifier during your visits to this Website and other websites) to enable those third-party ad networks to deliver advertisements to you on third-party websites, mobile applications, email, and media streaming services (including Google, Meta, Snapchat, TikTok, Reddit, and other social media platforms as further described below) for our Products and Services or those of third parties that are likely to be of interest to you.
If you do not want to receive those kinds of advertisements, look for the “Ad Choices” icon in the advertisements, which will contain a link to the privacy policy of the ad network that will provide you with information on how to opt-out of receiving such targeted advertising.
You can also visit the websites http://www.networkadvertising.org, http://www.aboutads.info, http://www.allaboutcookies.org or http://www.youronlinechoices.com to change your consumer preferences with respect to certain online ads and to obtain further information about third-party ad networks and online behavioral advertising.
Pursuant to certain state privacy laws, you may also have the right to opt out of the sale or sharing of your Personal Information for targeted advertising as detailed below in our Supplemental State Privacy Notice.
Analytics
Like many websites, our Website uses analytics tools to collect information about your use of our Website. Your web browser automatically sends this information to our analytics vendor, such as the web address of the page that you visit and your IP address. Our analytics providers may also set cookies or read preexisting cookies. This information may be stored on the vendor´s servers. Our analytics provider may then use this information to provide us with reports about traffic to our Website and your visit to our Website (such as the domain from which you access the internet, the web address of the Website from which you linked to our Website, the time and date of your visit to the web pages that you view and click-through). We will use this data to improve our Website structure and content.
Social Media
We may be active on social media, including Facebook, X (formerly Twitter), Snapchat, Instagram, TikTok, and other similar platforms (“Social Media”). Anything you post on Social Media will not be treated confidentially. We may post (or re-post) on the Website and our Social Media pages any comments or content that you post or otherwise disclose on Social Media pages. Your use of Social Media is governed by the privacy policies and terms of the providers that own and operate those websites and not by this Policy. We encourage you to review those policies and terms.
CALIFORNIA’S “DO-NOT-TRACK” REQUIREMENT. WE CURRENTLY DO NOT HONOR “DO NOT TRACK” REQUESTS.
HOW WE MAY USE YOUR INFORMATION
In addition to the uses noted above, we may also use the Personal Information that we collect or receive about you in order to:
We may use Tracking Technologies to: (i) make our Website function properly; (ii) provide personalized experiences; (iii) tailor our interactions with you; (iv) help with our marketing efforts; (v) provide us with valuable data and statistics about the usage and effectiveness of our Website and to help us improve our Website; and (vii) help us improve our services.
In addition, we may use certain technologies and third-party services to analyze usage and deliver targeted advertising. Our analytics and ad network providers include, but are not limited to:
OPTING OUT OF MARKETING COMMUNICATIONS
You can stop receiving marketing emails from Katharos by clicking the “unsubscribe” link included at the bottom of a Katharos marketing email where applicable. You cannot opt out of transactional emails we need to send you relating to normal business operations. To opt out of all emails from Katharos, you may email support@katharoslab.com and cancel your Katharos account.
HOW WE MAY DISCLOSE YOUR PERSONAL INFORMATION WITH OTHERS
Personal Information
We may disclose your Personal Information as follows:
Non-Personally Identifiable Information
We may disclose aggregated or de-identified information (in other words, information that does not personally identify you) without restriction, subject to applicable law. Katharos is the sole and exclusive owner of such de-identified and aggregated information.
SAFEGUARDING PERSONAL INFORMATION
We employ reasonable technical, physical, administrative and organizational safeguards to safeguard Personal Information from loss, misuse, unauthorized access, disclosure, alteration and destruction.
While we take commercially reasonable measures to protect your Personal Information from loss, misuse and alteration, it cannot ensure or guarantee the security of any information you transmit to us or through the Website or our Services. WE DO NOT COVENANT, REPRESENT, OR WARRANT THAT THE TRANSMISSION OF YOUR PERSONAL INFORMATION WILL BE SECURE.
ACCESS FROM OUTSIDE THE UNITED STATES
If you access the Website from outside the United States, please be aware that Personal Information may be transferred to, stored in, and processed in the United States. Certain governmental authorities may not consider the level of protection of Personal Information in the United States to be equivalent to that required by other jurisdictions.
CHILDREN’S PRIVACY
Our Website and Services are not directed to individuals under the age of eighteen (18). We do not knowingly collect Personal Information from children under the age of 18. If we learn that we have collected Personal Information from a child under the age of 18, we will promptly delete that information. If you believe we have collected information from a child under the age of 18, please contact us immediately at support@katharoslab.com
THIRD PARTY WEBSITES
THIS PRIVACY POLICY ONLY APPLIES TO KATHAROS.
THE WEBSITE MAY LINK TO WEBSITES NOT CONTROLLED BY US. KATHAROSDOES NOT CONTROL AND IS NOT RESPONSIBLE FOR, HOW THIRD PARTIES HANDLE YOUR PERSONAL INFORMATION. PLEASE EXERCISE CAUTION AND CONSULT THE PRIVACY POLICIES POSTED ON EACH THIRD-PARTY WEBSITE FOR FURTHER INFORMATION.
WHAT YOU SHOULD DO TO PROTECT YOUR INFORMATION
Your cooperation is imperative in safeguarding your Personal Information. Choose your account password carefully, as anyone with access to your account password may be able to assume your online identity, view and modify your information and communicate with us via the Website, and take other action. It is your responsibility to prevent disclosure of your password to others, and to change your password if you feel that its security has been compromised. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a disclosed computer, choosing a robust password and keeping your log-in and password private. If you suspect someone has accessed your account or that your account’s security has otherwise been compromised, please contact us immediately as set forth below.
Additionally, you will periodically receive email correspondence from us that may include information relating to the details of your account. Accordingly, it is critical that you safeguard your designated email address and restrict access thereto.
ACCESSING, CORRECTING, UPDATING, AND DELETING YOUR PERSONAL INFORMATION
You may access and update certain information or deactivate your account from your profile page after logging into your account. Additionally, you may at any time request to access, correct or update any Personal Information by contacting us at support@katharoslab.com
We will make reasonable efforts to respond promptly to all such requests. In certain circumstances, we may deny your request, such as if we believe the request would violate any law or cause the information to be inaccurate. We will inform you of the reason for any such denial.
You may at any time make a request for us to delete your Personal Information. We will promptly attempt to comply with all such requests, unless such requests are in conflict with any requirements to retain such information pursuant to applicable law or otherwise. When we delete your Personal Information, it will be deleted from the active database, but may remain in our archives. We may also retain and continue to use any information that does not personally identify you. Further, to the extent your Personal Information has been disclosed to third parties, we may not be able to access such Personal Information or cause the deletion or modification of such Personal Information by the relevant third parties.
REPORT VIOLATIONS
You should report any suspected violations of this Privacy Policyto support@katharoslab.com
Shine the Light Disclosure: Your Privacy Rights Regarding Third Party Marketing.
The California “Shine the Light” law, California Civil Code 1798.83, gives our California resident customers the right under certain circumstances to request information from us regarding the categories of Personal Information (as defined in the Shine the Light law) that we disclose to third parties or affiliates for their direct marketing purposes. To request such disclosure, contact us at support@katharoslab.com and identify your request as “Shine the Light”.
QUESTIONS
If you have questions or concerns about this Privacy Policy, please contact us at support@katharoslab.com
STATE SUPPLEMENTAL PRIVACY NOTICES
CALIFORNIA PRIVACY RIGHTS NOTICE
THIS SECTION PROVIDES ADDITIONAL PROVISIONS APPLICABLE ONLY TO RESIDENTS OF CALIFORNIA. If any information in this section conflicts with the main body of this Policy above, the information in this section controls for California residents. The California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 and its implementing regulations (collectively, the “CCPA”) requires us to provide California residents additional disclosures as set forth below. Capitalized terms used below that are not defined in this Policy have the meanings given them under the CCPA.
Personal Information collected in the last 12 months
Information on the specific data points that we may have collected is set forth above in the section Information We Collect About You. These data points correspond to the following categories of Personal Information that we may have collected in the last 12 months as follows:
Purposes of Collecting Personal Information
We collect the above categories of Personal Information for the purposes set forth in the section above titled How We May Use Your Information.
Sources of Personal Information
We collect the categories of Personal Information from those sources set forth in the section above titled Information We Collect About You.
Retention
We may retain your Personal Information, including Sensitive Personal Information, for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:
Categories of Third Parties to Whom Personal Information is Disclosed
In the last 12 months, some or all of the above categories of Personal Information may have beendisclosed to the categories of third parties set forth in the section above titled How We May Disclose Your Information with Others for the applicable business purposes set forth above in the section titled How We May Use Your Information.
Sale or Sharing of Personal Information
We do not sell Personal Information for monetary compensation, however, under California law, sharing certain data to certain third parties for online marketing and cross-contextual behavioral advertising may be considered the “sale” or “sharing” of your Personal Information. In the past 12 months, as contemplated by California law, we may have sold or shared the following categories of Personal Information for purposes of online behavioral advertising to third party ad networks:
You may opt out of our “sale” or “sharing” of your Personal Information as further detailed below.
Your California Privacy Rights
If you are a California resident, subject to certain limitations, the CCPA allows you to make certain requests about your Personal Information. Specifically, the CCPA allows you to make the types of requests below at no charge:
Request to Delete
The right to request deletion of certain Personal Information we have collected.
Request to Access
The right to request access to and, subject to certain exemptions, receive a copy of the specific pieces of Personal Information that we have collected and to have this delivered, either: (i) by mail; or (ii) electronically in a portable and, to the extent technically feasible, in a readily usable format.
Right to Know
The right to request information about the Personal Information we have collected about you, including:
Right to Correction
The right to request that we correct inaccurate Personal Information.
Right to Opt Out of the Sale or Sharing of Personal Information
You have the right to limit uses and disclosures of Personal Information and may request to opt out of the sale or sharing of your Personal Information for online behavioral advertising by emailing us at customerservice@katharoslab.com.
If you are a California resident, you have the right to opt out of the “sale” or “sharing” of your information for cross-contextual behavioral advertising. To exercise this opt out right, you can email us at support@katharoslab.com
Right to Limit the Use and Disclosure of Sensitive Personal Information
You have the right to limit our use and disclosure of your Sensitive Personal Information to only uses that are necessary to perform the Services we provide to you. You may limit the use and disclosure of Sensitive Personal Information by mailing us at support@katharoslab.com
Right to No Discrimination or Retaliation
You also have the right to not receive discriminatory treatment or retaliation if you elect to exercise the above rights.
Submitting a Request to Delete, Access, Know, or Correct
If you are a California resident and you would like to make a request to delete, access, know, or correct your Personal Information under California law, email us at support@katharoslab.com. Please include your full name, email address and address associated with your use of our Services, along with an identification of the rights you would like to exercise, so that we can process your request in an efficient manner.
Who May Exercise Your Rights
You may request the above on behalf of yourself or on behalf of a minor if you are the parent or legal guardian of the minor. In addition, you may authorize an agent to exercise your rights on your behalf, if you provide the agent with written signed permission.
Verification of Your Request
Once we receive your request, we will contact you to confirm receipt of your request. We will require sufficient information from you in order to verify your identity and the authenticity of your request. If you do not provide us with sufficient information in your request, we may request additional information to verify identity and the authenticity of the request. Certain types of requests may require additional verification, as we are subject to higher standards of authentication for certain requests.
If an authorized agent contacts us to exercise the above rights, we will need to verify their identity as well as your identity. We will also require proof of your written authorization to the agent to act on your behalf, unless the agent holds a lawful Power of Attorney under applicable laws, in which case we will require evidence of such Power of Attorney.
We may deny your request as permitted or as required by law and we may charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded. If we deny your request, you will have the right to appeal within thirty (30) days of our sending the denial by responding directly to the communication denying your request or by emailing us at support@katharoslab.com
Contact Us
If you have any questions about this Privacy Information for California Privacy Rights Notice, please contact us at support@katharoslab.com
ADDITIONAL STATE SUPPLEMENTAL PRIVACY NOTICE FOR RESIDENT OF COLORADO, CONNECTICUT, DELAWARE, INDIANA, IOWA, KENTUCKY, MARYLAND, MINNESOTA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, RHODE ISLAND, TENNESSEE, TEXAS, VIRGINIA, OR UTAH
This Section explains how to exercise your consumer privacy rights to the extent you are a resident of one of the above mentioned states (“State Privacy Laws”). If you have any questions as to whether the following consumer privacy rights apply to you, you can contact us at customerservice@katharoslab.com.
Consumer Privacy Rights Under State Privacy Laws
Depending on where you live and subject to certain exceptions, you may have some or all of the following rights under State Privacy Laws:
Where permitted under applicable law, we may decline a request (other than for opt outs) if we are unable to verify your identity (or an agent’s authority to make the request) and confirm the Personal Information we maintain relates to you.
How to Exercise Your Rights Under State Privacy Laws
Submitting a Request for Data Portability or to Delete, Access, Know, or Correct Your Personal Information.
To submit any of the rights above, you may submit your request to us by contacting us atsupport@katharoslab.com. Please include your full name, email address and address associated with your use of our Services, along with an identification of the rights you would like to exercise, so that we can process your request in an efficient manner.
Opting-Out of Targeted Advertising.
You may exercise your right to opt-out of the processing of your Personal Information for purposes of targeted advertising by emailing us at support@katharoslab.com
Consent for Sensitive Personal Information.
By consenting to our use of your Sensitive Personal Information, you agree that we may use cookies and other tracking technologies, and allow our advertising partners to use similar technologies, to process your Personal Information to show you ads promoting Katharos on other Websites and services. Regardless of whether the information is considered sensitive personal information, you may opt-out of our use of your Personal Information for targeted advertising at any time as described above.
NOTICE FOR TEXAS RESIDENTS: We may sell your sensitive personal data.
Verification of Your Request
You must provide sufficient information to allow us to reasonably verify you are the individual to whom the Personal Information relates, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request.
When we receive your rights request (i) we will acknowledge receipt of your request; (ii) we will try to match the information you provide in making the request with information we already maintain about you; (iii) in order to verify your identity, we may ask you to provide additional information, which may include Personal Information; and (iv) we will consider various factors when determining how to verify your identity, such as the sensitivity and value of the data, the risk of harm, and the likelihood of fraud.
We will only use Personal Information we collect during the verification process for the purpose of verifying your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why. In addition, we may decline to comply with your request as permitted by the applicable State Privacy Law. We may charge a fee as permitted by the applicable State Privacy Laws, such as to process or respond to your request if it is excessive, repetitive, manifestly unfounded, or if we believe the request is fraudulent or submitted for purposes other than exercising applicable privacy rights.
Residents of certain states have a right to submit consumer requests using an authorized agent. If we receive a request from an authorized agent, we will need to verify and authenticate your identity as the individual to whom the information relates, the agent’s identity, and the agent’s authority to act on your behalf. We may deny a request from an authorized agent if we do not have proof that they are authorized by you to act on your behalf.
Furthermore, a parent or legal guardian may make a request on behalf of their dependent or non-adult child. We may deny a request if you are unable to prove that you are the custodial parent or legal guardian.
Appeals
If we reject or deny your request, you may appeal our decision within 30 days of receiving our denial by responding directly to the communication denying your request or by submitting your appeal to support@katharoslab.com. If we deny your appeal, depending upon your state of residence, you may have the ability to submit a complaint to your state’s Attorney General.
De-identified Data Commitment
We will not attempt to re-identify any de-identified data that we maintain and use.
