Uplift Path

State Privacy Rights Notice

Version 1.0 · Effective October 2026

Introduction

This Notice sets out the privacy rights available to residents of states with comprehensive consumer privacy laws and explains how to exercise them with Uplift Path, Inc. It is published separately from the Website Notice of Privacy because the list of states and the rights they grant change frequently, and a standalone notice can be updated without reopening the main policy.

Why This Notice

This Notice applies to personal information collected through upliftpathwellness.com (the "Website") and through general inquiries. It does not apply to Protected Health Information, which is governed by our Notice of Privacy Practices, and it does not replace the Consumer Health Data Privacy Notice, which applies to health-related information collected outside the Health Insurance Portability and Accountability Act. Most state comprehensive privacy laws exempt Protected Health Information, and several exempt covered entities entirely; where an exemption applies we will say so when we respond to your request.

Where We Operate

Uplift Path, Inc. is incorporated in Delaware and delivers services from Ohio. Our Website is accessible across the United States, and we intend to extend services to additional states. We apply the rights in this Notice to residents of any state whose law grants them, and we review the list of covered states before entering a new service area. Residents of states without a comprehensive privacy law may make the same requests, and we will honour them where it is practical to do so.

Your Rights

  • Right to know and to access. Confirm whether we process your personal information and obtain a copy of it.

  • Right to correct. Ask us to correct inaccurate personal information.

  • Right to delete. Ask us to delete personal information we hold about you, subject to legal retention obligations.

  • Right to portability. Receive a copy in a portable and, where technically feasible, readily usable format.

  • Right to opt out. Direct us not to sell or share personal information and not to process it for targeted advertising or for profiling that produces legal or similarly significant effects.

  • Right to limit the use of sensitive personal information, including health information, to what is necessary to provide the services you requested.

  • Right to non-discrimination. Receive the same price and quality of service whether or not you exercise a privacy right.

  • Right to appeal a decision we make about your request.

Sale, Sharing and Targeted Advertising

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for profiling that produces legal or similarly significant effects. We do not use sensitive personal information, including any health-related information, for advertising or for inferring characteristics. Because we do not carry out these activities, no opt-out is required for them, and no "Do Not Sell or Share My Personal Information" mechanism is presented. If this ever changes we will update this Notice and provide the required opt-out before the change takes effect.

Opt-Out Preference Signals

We honour recognized browser-based opt-out preference signals, including Global Privacy Control, where the law requires it. A recognized signal is treated as a valid opt-out for the browser that sends it, without requiring you to create an account or provide additional information.

How to Submit a Request

Submit a written request to privacy@upliftpathinc.com or through the online contact form at upliftpathwellness.com/contact, stating the right you are exercising and giving enough detail for us to locate your information. An authorized agent may submit a request on your behalf with written permission signed by you, or with a valid power of attorney, and we may still contact you directly to confirm the authorization.

We verify identity before acting on a request, using information already in our records or, where necessary, a government-issued photograph identification that is redacted and securely destroyed once verification is complete. We do not use information provided for verification for any other purpose.

Response Timeframes

  • We acknowledge a verified request within five (5) business days.

  • We respond to a state consumer privacy request within forty-five calendar days, which may be extended once by a further forty-five (45) calendar days where reasonably necessary, with written notice of the extension and the reason for it.

  • We respond to a request concerning Protected Health Information within thirty (30) calendar days under the Health Insurance Portability and Accountability Act, which may be extended once by up to thirty (30) calendar days with written notice.

  • If a single request covers both, we respond to each part within the timeframe that applies to it and explain the difference in our response.

Appeals

If we decline your request in whole or in part we will tell you why and how to appeal. An appeal is reviewed by a member of the leadership team who was not involved in the original decision, and we respond in writing within forty-five (45) calendar days. If the appeal is denied, we will give you a method to contact the attorney general or equivalent regulator in your state.

Record Retention and Review

This Notice is reviewed at least annually and whenever the Website, our vendors, our tracking technologies, our service area or applicable law changes. Each published version is retained for at least six years. Reviews and revisions are carried out by the leadership team and reported to the Board of Directors as appropriate.

Contact

Uplift Path, Inc. — Privacy Compliance Contact

If you need this Notice in an alternative format, such as large print, audio or a translated version, or require another accommodation, contact the Accessibility Advocate at advocate@upliftpathinc.com and we will make reasonable efforts to provide the material in the format needed.