Consumer Health Data Privacy Policy

Last Updated: January 27, 2026

Ladies First, a brand of Outlaws & Gents Grooming LLC

Introduction

This Consumer Health Data Privacy Policy (“Policy”) describes how Ladies First (“we,” “us,” or “our”) collects, uses, shares, and protects consumer health data. This Policy supplements our general Privacy Policy and provides additional information required by state consumer health data privacy laws.

We are committed to protecting your health data and being transparent about our data practices.

Scope

This Policy applies to “consumer health data,” which includes personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status. This includes information related to:

Health conditions, diseases, or diagnoses
Weight, BMI, and body measurements
Medications, treatments, and procedures
Healthcare provider visits and consultations
Lab results and diagnostic information
Health-related goals and progress
Reproductive and sexual health
Biometric data
Genetic information
Precise geolocation that could indicate health-related activities

Consumer Health Data We Collect

Categories of Health Data

We collect the following categories of consumer health data:

Sources of Health Data

We collect consumer health data from:

Directly from you: Through consultations, forms, questionnaires, and communications
Healthcare providers: Through our telehealth platform
Third-party services: Pharmacies, laboratories (with your consent)

How We Use Consumer Health Data

We use your consumer health data for the following purposes:

Primary Purposes

Providing telehealth consultations and medical care
Processing and fulfilling prescriptions
Monitoring your treatment progress
Communicating with you about your health
Coordinating care with other providers (with your consent)

Secondary Purposes

Improving our services and patient experience
Conducting quality assurance and safety monitoring
Complying with legal and regulatory requirements
Research purposes (in de-identified or aggregated form only)

We may share your consumer health data with:

We Do NOT Sell Your Health Data

We do not sell your consumer health data. We do not share your health data with third parties for their own marketing purposes without your explicit consent.

Other Disclosures

We may disclose consumer health data:

With your consent: For purposes you have authorized
For legal compliance: When required by law, court order, or regulatory requirement
For safety: To prevent serious harm to you or others
To service providers: Who assist us in operating our services (under strict contractual protections)

Your Rights

You have the following rights regarding your consumer health data:

Right to Know

You have the right to know:

What consumer health data we collect about you
How we use and share your health data
Who we share your health data with

Right to Access

You have the right to access your consumer health data. You may request a copy of the health data we maintain about you.

Right to Delete

You have the right to request deletion of your consumer health data, subject to certain exceptions (such as legal retention requirements).

You have the right to withdraw your consent to the collection or sharing of your consumer health data at any time. Note that withdrawal may affect our ability to provide certain services.

Right to Opt Out

You have the right to opt out of:

Sale of your health data (we do not sell health data)
Sharing for targeted advertising (we do not share for this purpose)
Automated decision-making that produces legal or significant effects

Right to Non-Discrimination

We will not discriminate against you for exercising your rights under this Policy.

How to Exercise Your Rights

To exercise any of your rights, you may:

Email us: privacy@itsladiesfirst.com
Submit a request: Through your patient portal
Call us: Contact information available on our website

We will verify your identity before processing your request. We will respond to requests within the timeframes required by applicable law (typically 45 days).

Data Security

We implement robust security measures to protect your consumer health data:

Encryption: Data encrypted in transit and at rest
Access Controls: Role-based access limited to authorized personnel
Monitoring: Regular security monitoring and audits
Training: Employee training on data protection
Vendors: Strict contractual requirements for service providers
Incident Response: Procedures to address security incidents

Data Retention

We retain consumer health data for as long as necessary to:

Provide our services
Comply with legal obligations (including medical record retention laws)
Resolve disputes
Enforce agreements

Medical records are retained in accordance with Texas medical record retention requirements and applicable federal law.

Children’s Health Data

Our services are intended for adults 18 years and older. We do not knowingly collect consumer health data from children under 18.

Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes by:

Posting the updated Policy on our website
Sending you an email notification
Providing notice through our app or patient portal

Your continued use of our services after changes indicates acceptance of the updated Policy.

Contact Us

For questions about this Policy or our health data practices:

Ladies First Privacy Team Ladies First, a brand of Outlaws & Gents Grooming LLC Email: privacy@itsladiesfirst.com Website: itsladiesfirst.com

State-Specific Information

Washington Residents

This Policy is designed to comply with the Washington My Health My Data Act. Washington residents have additional rights as described in this Policy.

Other States

Residents of states with consumer health data privacy laws have rights as described in this Policy. Contact us for state-specific information.

This Consumer Health Data Privacy Policy is effective as of January 27, 2026.