Last Updated and Effective Date: September 4, 2025

Sono Bello^® (“Sono Bello” or “We”) respects your privacy and is committed to protecting it through compliance with this Privacy Policy (“Policy”). This Policy describes the types of information we may collect from you or that you may provide when you visit the website at SonoBello.com (our “Website”) or use our services, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Policy applies to information we collect (1) on this Website, (2) in email, text, and other electronic messages between you and Sono Bello, and (3) when you use our services. This Policy does not apply to information that is collected by third parties, including through any content or link accessible from the Website. This Policy is intended to supplement, not supersede any other privacy disclosures we may provide in association with our services. If this Policy and such other disclosures conflict, the other disclosures shall control.

This Policy also does not apply to the protected health information that you may provide to Sono Bello in connection with Sono Bello’s provision of healthcare services. For more information about our privacy practices relating to those activities, please review the relevant Notice of Privacy Practices provided to you. If there are any inconsistencies between the Notice of Privacy Practices and this Policy, the Notice of Privacy Practices will control. 

Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website and services. By accessing or using this Website or utilizing the Sono Bello services, you agree to this Policy. This Policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of this Website and/or our services after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

Table of Contents

1. Personal Information Collected

2. Cookies and Similar Online Tracking Technologies

3. How We Use Your Information 

4. Data Retention  

5. Information We Disclose to Outside Parties

6. Additional Information for California Residents

7. Your Privacy Rights and Choices

8. Children’s Online Privacy Protection Act Compliance

9. How to Contact Us

1. Personal Information Collected

The personal information we collect depends on how you interact with us, the services you use, and the choices you make. We collect information about you from different sources and in various ways when you use our services, including information you provide directly, information collected automatically as you navigate through our Website, and information from third-party data sources, and data we infer or generate from other data. 

We collect information you directly provide to us, such as:

• Individual identifiers and demographic information, such as name, phone number, email address, zip code and date of birth, email address, and telephone number;
• Information that is about you, but does not individually identify you, such as information about your gender or sex; 
• Content and files, such as photographs, videos, documents, and other files you send us. This includes email messages and other communications you send to us; 
• Commercial Information, such as records of personal property, products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies; and 
• Commercial communications, such as the information associated with your requests or inquiries, including for product or service support, assistance, or order information, and any feedback you provide when you communicate with us.

When you use our Website, we may collect information automatically. For example: 

• Online identifiers and device information. When you visit our Website, our web servers automatically log your Internet Protocol (IP) address and information about your device, including device identifiers (such as MAC address); device type; and your device’s operating system, browser, and other software including type, version, language, settings, and configuration.
• Geolocation data. Depending on your device and app settings, we collect geolocation data when you use our apps or online services.
• Usage data. We automatically log your browsing activity on our Website, including the URL of the website from which you came to our Website, pages you viewed, how long you spent on a page, access times, and other details about your use of and actions on our Website. For more information, refer to the section, “Cookies and Similar Online Tracking Technologies.” 
• Information we create or generate. We infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics. For example, we infer your general geographic location (such as city, state, and country) based on IP addresses. 

Information we obtain from third-party sources. We also obtain the types of information described above from third parties. These third-party sources include, for example:

• Third-party applications and services, including social networks you choose to connect with or interact with through our services.
• Third party service providers that collect or provide data in connection with work they do on our behalf, for example companies that determine your device’s location based on its IP address. 
• Publicly available sources. 

When you are asked to provide personal information, you may decline. And you may use web browser or operating system controls to prevent certain types of automatic data collection. But if you choose not to provide or allow information that is necessary for certain services or features, those services or features may not be available or fully functional.

2. Cookies and Similar Online Tracking Technologies

What Are Cookies and Other Tracking Technologies? 

“Cookies” are small text files placed by a website and stored by your browser on your device. A cookie can later be read when your browser connects to a web server in the same domain that placed the cookie. The text in a cookie contains a string of numbers and letters that may uniquely identify your device and can contain other information as well. This allows the web server to recognize your browser over time, each time it connects to that web server.

“Web beacons” or “pixels” are tiny electronic images contained within a website or email. They are used to track the number of users who have visited particular pages and viewed emails and acquire other statistical data. They collect only a limited set of data, such as a cookie number, time and date of page or email view, and a description of the page or email on which they reside. Web beacons and pixel tags cannot be declined. However, you can limit their use by controlling the cookies that interact with them.

How Do We Use Cookies and Other Tracking Technologies? 

We, and our analytics and advertising partners, use these technologies on our website to collect personal data, such as the pages you visit, the links you click on, and similar usage information, identifiers, and device information when you use our services, including personal data about your online activities over time and across different websites or online services. This data is used to analyze how our Website performs, track your interaction with the site, develop inferences, and deliver and tailor interest-based (targeted) advertising. We and/or our partners also share the data we collect or infer with third parties for these purposes. Some of the cookies and tracking technologies we use on our Website are strictly necessary for certain components of the Website to function. All other cookies are optional and may be disabled. 

The following is a description of the types of cookies that may be used when you visit our Website:

• Strictly Necessary Cookies. Strictly necessary cookies are activated without user consent because these are necessary for the Website to work properly, such as setting your privacy preferences or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the Website will not function.

• Advertising Cookies. These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites. If you allow these cookies, your IP address, Third Party identifier (if applicable), and hashed User ID (if applicable) may be shared with our advertising partners for these proposes. If you do not allow these cookies, you will experience less targeted advertising.

• Analytics Cookies. These cookies allow us and our analytics partners to count visits and traffic sources so we can measure and improve the performance of our Website. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our Website, and will not be able to monitor its performance.

• Social Media Cookies. These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

• Functional Cookies. These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

• Session Replay. Session Replay is third-party software used to record a video replay of users’ interactions with the Site. The video replay may include users’ clicks, mouse movements, scrolls, mobile app touches, typing, and other activity taken during the session. We use these replays for research and development purposes, such as to help us troubleshoot problems with the Site, understand how users interact with and use the Site, and identify areas for improvement.

How You Can Manage Cookies:

You have the right to agree to, or opt out of the use of, optional cookies and tracking technologies on the Cookie Banner that appears the first time you visit our Website. You also have the right to opt out of any sales/sharing of personal information by submitting a request via My Privacy Choices, which is available at the bottom of Sono Bello’s website.

You may also set or amend your web browser controls to accept or reject cookies. The following sites contain further information on how to disable cookies or manage your cookie settings on your browser: 

Apple Safari
Google Chrome
Firefox
Internet Explorer

In addition, you may opt-out of some third-party cookies through the Network Advertising Initiative’s Opt-Out Tool.

3. How We Use Your Information

Any of the information we collect from you may be used in one of the following ways:

• To present our Website and related services to you. This includes monitoring, administering and diagnosing problems with the Website, to provide you with information about our services or products you have requested or authorized, and respond to your requests or questions. 
• To improve and secure our Website and related services, including to ensure the secure and reliable operation of the services and the systems that support them, troubleshooting, preventing fraud, and detecting and preventing security incidents;
• For analytics and improvement, including to better understand how you access and use the services and to evaluate and improve our services and business operations and for internal quality control;
• For marketing and advertising. We use your personal information, including your browsing and other activity on the Website, to promote and market our services and to measure our advertising and marketing efforts (i.e., targeted advertising). In some states, we may be required to obtain your consent prior to using or sharing information that constitutes sensitive personal information.
• To comply with the law and our legal obligations, including responding to legal process and related to legal proceedings;
• For business transactions. We use your personal information to consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions, such as financings, and related to the administration of our general business, accounting, auditing, compliance, recordkeeping, and legal functions; and
• For other purposes with your consent.

4. Data Retention

We retain personal information for as long as necessary to provide the services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and for other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the information, the availability of automated controls that enable users to delete data, and our legal or contractual obligations.

5. Information We Disclose to Outside Parties

We may disclose aggregated and anonymized information without restriction.

We may also disclose personal information that we collect or you provide:

• To subsidiaries, affiliates and/or related companies. These include: Body Sculpt Intl LLC; Aesthetic Physicians, P.C.; Aesthetic Physicians of California, Inc.; Aesthetic Physicians of Colorado, P.C.; Aesthetic Physicians of Kansas Professional Association; Sono Bello Aesthetic Physicians, P.C.; and Aesthetic Physicians of Massachusetts PC.
• To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Sono Bello’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Sono Bello about our Website users is among the assets transferred.
• To third parties you authorize as part of your receipt of services from Sono Bello, including, but not limited to, finance companies involved in paying for your care.
• To third parties who we partner with for advertising campaigns and with whom we participate in interest-based (targeted) advertising. This means that our advertising partners may use online tracking technologies, such as cookies, to collect information about your activity on the Site and other online services to help us advertise our services, or use hashed customer lists that we share with them to deliver ads to them and similar users on their platforms.
• For any other purpose disclosed when you provide the information.
• With your consent.

We may also disclose your personal information in the following special cases:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply agreements between us and you, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Sono Bello, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Sono Bello is not a “covered entity” under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and its related regulations and amendments from time to time (collectively, “HIPAA”).  Any medical or health information that you provide that is subject to specific protections under applicable state laws (“Protected Information”) will be used and disclosed only in accordance with such applicable laws. However, any information that does not constitute Protected Information under applicable laws may be used or disclosed in any manner permitted under this Policy. Protected Information does not include information that has been de-identified in accordance with applicable laws.

6. Additional Information for California Residents

California law requires us to disclose the following additional information with respect to our privacy practices. If you are a California resident, this section applies to you in addition to the rest of the privacy policy.

Personal Information We Collect and Disclose for a Business Purpose. We collect the categories of personal information about California consumers identified in the chart below. As further set forth in the chart below, in the past 12 months, we have disclosed California consumers’ personal information to third parties for business or commercial purposes.

Categories of Personal Information	Collected in the last 12 months:	Categories of sources from which information is collected:	Business or commercial purposes for collection, use, and sharing:	Disclosed for business purposes to the following categories of third parties:
Personal identifiers and demographic information (such as first and last name, email address, or unique online identifiers)	YES	As described above in the section “Personal Information Collected”	As described above in the section “How We Use Your Information”	As described above in the section “Information We Disclose to Outside Parties”
Information related to bank accounts, health insurance and other financial information	NO	NA	NA	NA
Characteristics of protected classifications under California or federal law (such as race or gender)	YES	As described above in the section “Personal Information Collected”	As described above in the section “How We Use Your Information,”  excluding Marketing and Advertising	As described above in the section “Information We Disclose to Outside Parties”
Commercial or transactions information (such as records of personal property or products or services purchased, obtained or considered)	YES	As described above in the section “Personal Information Collected”	As described above in the section “How We Use Your Information”  For Marketing and Advertising (only as to services considered or booked)	As described above in the section “Information We Disclose to Outside Parties”
Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application or advertisement)	YES	As described above in the section “Personal Information Collected”	As described above in the section “How We Use Your Information”	As described above in the section “Information We Disclose to Outside Parties”
Biometric information (fingerprints, facial scans, iris scans, voice recordings, or DNA)	NO	NA	NA	NA
Geolocation information	YES	As described above in the section “Personal Information Collected”	As described above in the section “How We Use Your Information”	As described above in the section “Information We Disclose to Outside Parties”
Audio, Electronic, Visual, or Similar Information	Yes	As described above in the section “Personal Information Collected”	As described above in the section “How We Use Your Information,”  excluding Marketing and Advertising	As described above in the section “Information We Disclose to Outside Parties”
Professional or employment-related information	YES	As described above in the section “Personal Information Collected”	As described above in the section “How We Use Your Information,”  excluding Marketing and Advertising	As described above in the section “Information We Disclose to Outside Parties”
Education information	NO	NA	NA	NA
Inferences drawn from the above information about your predicated characteristics and preferences	YES	As described above in the section “Personal Information Collected”	As described above in the section “How We Use Your Information”	As described above in the section “Information We Disclose to Outside Parties”
Other information about you that is linked to the personal information above	YES	As described above in the section “Personal Information Collected”	As described above in the section “How We Use Your Information”	As described above in the section “Information We Disclose to Outside Parties”

In the last twelve (12) months, we have not sold any California consumers’ personal information for monetary consideration. We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.

Your Rights Regarding Personal Information. California residents have certain rights with respect to the personal information collected by businesses.  If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:

For certain categories of personal information, the right to request a list of what personal information (if any) we disclosed to third parties for their own direct marketing purposes in the preceding calendar year and the names and addresses of those third parties;

The right to know the categories and specific pieces of personal information we collect, use, and disclose about you; the categories of sources from which we collected your personal information; our purposes for collecting your personal information; the categories of your personal information that we have disclosed for a business purpose; whether we sold any personal information about you in the past twelve (12) months; and the categories of third parties with which we have shared personal information.

The right to data portability, meaning the right to a copy of the specific personal information we collected about you.

The right to request that we delete the personal information we have collected from you or maintain about you (subject to certain exceptions).

The right to request we correct inaccurate personal information we have collected from you or maintain about you.

The right to limit use and disclosure of sensitive personal information for any purposes other than to provide the services or goods you request or as otherwise permitted by law.

Please refer to the Your Privacy Rights and Choices section below to exercise any of these rights.

Please note that we may deny deletion requests under certain circumstances if the information is necessary for us or our service providers to: 

• Complete the transaction for which we collected the personal information, provide a good or service that has been requested by the consumer, take actions reasonably anticipated within the context of our ongoing business relationship with the consumer, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with the consumer.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on their relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which the consumer provided it.

We will delete or deidentify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action.

We retain personal information we collect from you where we have an ongoing legitimate business need to do so, such as providing you services you have requested or to comply with applicable law.

7. Your Privacy Rights and Choices

Access, Correction, Deletion:  Depending on where you reside, you may have the right to (1) request to know more about and access your personal data, (2) request deletion of your personal data, (3) request correction of inaccurate personal data; and (4) request we limit the use and disclosure of sensitive personal Information. You can make these requests at any time by calling us at 1-800-995-1136 or emailing us at privacy@sonobello.com. After submitting your request, please monitor your email for a follow-up communication from us. We may be required to verify your request by asking you to provide additional information related to your recent interactions with us, such as your name and email.

Opting Out of Marketing Communications: You may opt out of receiving promotional communications from us by following the “unsubscribe” instructions or using “unsubscribe” links within communications we send. You can opt out of automated telephone calls by calling us at 1-800-995-1136 or emailing us at privacy@sonobello.com.

Opting Out of Sales, Sharing, or Targeted Advertising: As described in this Policy, we process personal data to deliver ads targeted to your interests on other companies’ websites. To the extent these activities constitute “sales” or “sharing” of your personal data under applicable state law, you may have the right to opt out of future sales or sharing of your personal data to third parties by submitting a request via My Privacy Choices, which is available at the bottom of Sono Bello’s website.

8. Children’s Online Privacy Protection Act Compliance

We are in compliance with the requirements of COPPA (Children’s Online Privacy Protection Act), we do not knowingly collect any information from anyone under 13 years of age. Our website, products, and services are all directed to people who are at least 13 years old or older. If we learn that we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at privacy@sonobello.com.

9. How to Contact Us

For questions or concerns about this policy or Sono Bello’s privacy practices, please contact us by using the information below.

By phone at: 1-800-995-1136
By email at: privacy@sonobello.com