Effective Date: January 1, 2025

1. Introduction

LimitlessXO ("Company," "we," "us," "our") is committed to protecting your privacy and ensuring you have a positive experience on our website (www.limitlessXO.com) and when using our services. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information, including personal health information (PHI) and other sensitive data, in accordance with applicable privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA), the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other relevant privacy regulations.

Please read this Privacy Policy carefully. If you do not agree with our privacy practices, please do not use our website or services. By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We May Collect

We collect information in several ways:

A. Information You Provide Directly

• Contact Information: Name, email address, phone number, mailing address

• Account Information: Username, password, billing address

• Health Information: Medical history, treatment records, consultation notes, diagnostic results, and other protected health information (PHI) related to regenerative medicine services

• Payment Information: Credit card or other payment method details (processed securely through third-party payment processors)

• Communications: Messages, inquiries, feedback, and correspondence you send to us

B. Information Collected Automatically

• Log Data: IP address, browser type, operating system, pages visited, time spent on pages, referral source

• Device Information: Device type, device ID, mobile network information

• Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to enhance user experience and understand how you use our website

C. Information from Third Parties

• Healthcare Providers: Treatment information from your healthcare providers (with appropriate consent)

• Insurance Companies: Information necessary for billing and insurance coordination

• Service Providers: Information from third-party vendors and partners who assist us in our operations

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing Services: Delivering regenerative medicine services, consultations, and treatment

• Account Management: Creating and managing your account, processing payments, and billing

• Medical Treatment: Diagnosing, treating, and monitoring your health conditions

• Communications: Responding to inquiries, sending appointment reminders, and providing customer support

• Marketing and Promotional Communications: Sending newsletters, educational content, promotional offers, and updates (with your consent, as required by law)

• Quality Improvement: Analyzing and improving our services, user experience, and website functionality

• Research and Development: Conducting research to improve regenerative medicine treatments (with appropriate de-identification)

• Legal Compliance: Fulfilling legal obligations and complying with applicable laws, regulations, and court orders

• Fraud Prevention: Detecting, investigating, and preventing fraudulent activities and security threats

4. Legal Basis for Processing Personal Information

We process your personal information on the following legal bases:

• Performance of a Contract: Processing necessary to provide you with our services

• Legal Obligation: Processing required by HIPAA, CAN-SPAM Act, and other applicable laws

• Legitimate Interests: Processing for marketing, quality improvement, and fraud prevention (balanced against your rights)

• Your Consent: Processing when you explicitly opt-in to marketing communications or other activities

5. HIPAA Compliance and Protected Health Information

As a healthcare provider, LimitlessXO is subject to HIPAA regulations. We handle Protected Health Information (PHI) with the highest level of care and confidentiality:

• PHI Use and Disclosure: We use and disclose your PHI only as permitted by HIPAA for treatment, payment, and healthcare operations, unless you authorize otherwise

• Minimum Necessary Standard: We follow the HIPAA "minimum necessary" standard, accessing and using only the minimum amount of PHI needed to accomplish the intended purpose

• Business Associates: Any Business Associates who handle your PHI are required to maintain equivalent privacy and security safeguards

• Your HIPAA Rights: You have the right to access, amend, and receive an accounting of disclosures of your PHI. To exercise these rights, contact our Privacy Officer at info@limitlessXO.com

6. Data Security

We implement comprehensive administrative, physical, and technical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All sensitive information transmitted over the internet is encrypted using SSL/TLS protocols

• Access Controls: Access to personal information is restricted to authorized employees and contractors with a legitimate need to know

• Secure Facilities: Physical access to our facilities is restricted and monitored

• Data Backups: Regular backups of data are maintained and stored securely

• Incident Response: We maintain an incident response plan and will notify you of any security breaches affecting your information as required by law

While we implement strong security measures, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to protecting your information.

7. Third-Party Disclosure and Data Sharing

We may share your information with third parties in the following circumstances:

• Service Providers: We share information with vendors who assist us with payment processing, website hosting, email services, customer support, and analytics. These vendors are contractually obligated to maintain confidentiality and use your information only to provide services to us

• Healthcare Coordination: We may share your PHI with other healthcare providers, pharmacies, and insurers for treatment coordination and billing purposes

• Legal Requirements: We may disclose information when required by law, court order, or governmental authority

• Business Transfers: If LimitlessXO is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction

• With Your Consent: We only share information in ways not described above when we have your explicit consent

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your experience and analyze usage patterns. Types of cookies include:

• Essential Cookies: Required for website functionality (login, security, etc.)

• Performance Cookies: Used to analyze how visitors use our website

• Marketing Cookies: Used to track advertising effectiveness and personalize content

You can control cookie settings through your browser preferences. However, disabling cookies may limit certain website functionality.

9. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Medical Records: HIPAA requires us to maintain medical records for a minimum of 6 years from the date of last treatment (or as required by state law)

• Account Information: Retained while your account is active and for a reasonable period afterward for legal and business purposes

• Marketing Communications: Retained until you unsubscribe or request deletion

When information is no longer needed, we securely delete or de-identify it in accordance with HIPAA and applicable privacy laws.
‍

10. Your Privacy Rights

Depending on your location and applicable laws, you may have the following rights:

A. GDPR Rights (for EU residents):

• Right to Access: You can request a copy of your personal information

• Right to Rectification: You can correct inaccurate or incomplete information

• Right to Erasure ("Right to be Forgotten"): You can request deletion of your data, subject to legal retention requirements

• Right to Restrict Processing: You can limit how we use your information

• Right to Data Portability: You can request your information in a portable format

• Right to Object: You can object to certain types of processing

B. CCPA Rights (for California residents):

• Right to Know: You can request what personal information we collect and how we use it

• Right to Delete: You can request deletion of your personal information

• Right to Opt-Out: You can opt out of the sale or sharing of your personal information

• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

C. HIPAA Rights:

• Right to Access: You can access your medical records

• Right to Amend: You can request amendments to your medical records

• Right to Accounting of Disclosures: You can request an accounting of who has accessed your PHI

11. How to Exercise Your Rights

To exercise any of the privacy rights described above, please submit a written request to:

LimitlessXO Privacy Officer

Email: info@limitlessXO.com

Mailing Address: Charlotte (8810 Blakeney Professional Drive, Suite 100, Charlotte, NC 28277);
Miami (1553 San Ignacio Ave Ste B, Coral Gables, FL 33146)

Phone: Charlotte (704-899-5038); Miami (305-799-4576)

We will respond to your request within the timeframe required by applicable law (typically 30-45 days). We may request verification of your identity before processing your request.

12. Email Marketing and Communications

We comply with the CAN-SPAM Act when sending marketing communications:

• Opt-In: We obtain your consent before sending marketing emails

• Clear Identification: All marketing emails clearly identify LimitlessXO as the sender

• Unsubscribe Option: Every email contains a clear unsubscribe link

• Prompt Unsubscribe: We honor unsubscribe requests within 10 business days

You can manage your email preferences or unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us directly.

13. Children's Privacy

Our website and services are not directed towards individuals under the age of 18 (but may directed to their legal guardians over the age of 18). We do not knowingly collect personal information from children. If we become aware that we have collected information from a minor without parental consent, we will promptly delete such information and terminate the child's account. If you believe we have collected information from a minor, please contact us immediately.

14. International Data Transfers

If you are located outside the United States, your information may be transferred to, stored in, and processed in the United States. By using our website and services, you consent to the transfer of your information to the United States, which may have different data protection laws than your home country. We implement appropriate safeguards, including Standard Contractual Clauses, to protect your information during international transfers.

15. Third-Party Links and Websites

Our website may contain links to third-party websites. This Privacy Policy applies only to LimitlessXO's website and services. We are not responsible for the privacy practices of external websites. We encourage you to review the privacy policies of any third-party sites before providing your information.
‍

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

LimitlessXO

Website: www.limitlessXO.com

Email: info@limitlessXO.com

Mailing Address: Charlotte (8810 Blakeney Professional Drive, Suite 100, Charlotte, NC 28277);
Miami (1553 San Ignacio Ave Ste B, Coral Gables, FL 33146)

Phone: Charlotte (704-899-5038); Miami (305-799-4576)

Data Protection Authority: If you are located in the EU and have concerns about our privacy practices, you have the right to lodge a complaint with your local Data Protection Authority.

17. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Privacy Policy on our website and update the "Effective Date" at the top of this document. If we make material changes, we will provide notice through our website or by email. Your continued use of our website and services after changes become effective constitutes your acceptance of the updated Privacy Policy.

18. Legal Disclaimers

Medical Information Disclaimer: The information provided on our website and in our services is for informational and educational purposes only and should not be considered medical advice. Always consult with a qualified healthcare provider before making any medical decisions. LimitlessXO does not provide medical diagnoses or treatment recommendations through our website.

Limitation of Liability: While we strive to protect your information, we cannot guarantee absolute security. To the extent permitted by law, LimitlessXO will not be liable for any unauthorized access, disclosure, or misuse of your personal information resulting from circumstances beyond our reasonable control.

---

Thank you for trusting LimitlessXO with your regenerative medicine journey. We are committed to protecting your privacy and providing you with exceptional care.

‍