Coit Booking Consumer Health Data Privacy Notice

Effective Date: November 10, 2026
Last Updated: November 10, 2026

This Consumer Health Data Privacy Notice describes how Coit Booking LLC ("Coit," "we," or "us") collects, uses, and shares consumer health data through the Coit Booking mobile application and website (the "Platform"). It is published under Washington's My Health My Data Act (RCW 19.373) and Nevada's consumer health data law (NRS Chapter 603A as amended by SB 370). Coit applies it to all Users in the United States.

This Notice is separate from, and in addition to, the Coit Privacy Policy, which covers all other personal information.

1. Coit Does Not Ask for Health Information

Coit is a booking platform for beauty and grooming services. Coit does not ask for, require, or intentionally collect health information. Consumer health data can reach the Platform only if you choose to write it yourself.

2. Categories of Consumer Health Data We May Collect

The only consumer health data that may be on the Platform is information you choose to share with a Professional, such as:

• allergies or sensitivities to products, dyes, adhesives, or chemicals;

• skin, scalp, hair, or nail conditions;

• other physical conditions you want the Professional to know about before a Service (for example, a pregnancy or a recent procedure that affects the Service).

Coit does not collect biometric data, genetic data, precise location data used to identify visits to health care services, or any information inferred about your health.

3. Sources

Consumer health data comes only directly from you, when you write it in the in-app chat with a Professional linked to a Booking. The chat supports text messages only.

Coit does not obtain consumer health data from any other source.

4. Why We Collect It and How We Use It

Coit uses this information only for these purposes:

1. To deliver it to the Professional you booked, so the Professional can perform the Service you requested safely.

2. To keep the record of your Booking, and to review it if you or the Professional reports a problem, a dispute, or a chargeback about that Booking.

Coit does not use consumer health data for advertising or marketing, does not use it to build profiles, does not analyze it, and does not sell it.

5. Your Consent

The first time you open the chat with a Professional, the Platform shows a notice that anything you write there is stored by Coit and shared with that Professional, with a link to this Notice. By choosing to write health information after seeing that notice, you consent to its collection and to its sharing with the Professional you booked, only for the purposes in Section 4. You can withdraw that consent at any time under Section 8.

Coit will not collect, use, or share consumer health data for any purpose not described in this Notice unless it first tells you about the new purpose and obtains your separate, affirmative consent.

6. Categories of Consumer Health Data Shared and With Whom

The consumer health data described in Section 2 may be shared only with:

Coit has no affiliates. Coit does not sell consumer health data and does not share it with advertisers, data brokers, or any other third party. Coit may disclose it only if required by a valid court order or other legal process, and only to the extent required.

Coit does not use geofencing around health care facilities or any other location.

7. How Coit Protects It

Access to chat content is limited by database rules to the Client and the Professional on that Booking. Coit staff may access it only to handle a report, dispute, or chargeback about that Booking, or to comply with law. The Platform's other security measures are described in the Privacy Policy.

8. Your Rights

You have the right to:

1. Confirm and access: confirm whether Coit collects or shares your consumer health data, get a copy of it, and get a list of all third parties and affiliates with which it was shared, with their contact information.

2. Withdraw consent: withdraw your consent to the collection and sharing of your consumer health data.

3. Delete: have your consumer health data deleted. Coit will delete the chat messages that contain it from its live systems, will notify the processors in Section 6 so they delete it too, and will delete it from backup systems within six months. Deleted messages are also removed from the Professional's view in the Platform. Information the Professional already copied or saved outside the Platform is under the Professional's control; Coit will notify the Professional of your request.

These rights do not require you to delete your Account.

9. How to Exercise Your Rights

Email privacy@coitbooking.com with the subject line "Consumer Health Data Request" from the email address on your Account, saying which right you want to exercise. If you do not have an Account, tell us the email or phone number you used. Coit does not require you to create an Account to make a request. If Coit cannot verify your identity, it will ask for the minimum additional information needed.

• Cost: free, up to twice in any 12-month period.

• Response time: Coit responds within 45 days. If Coit needs more time, it will tell you within those 45 days and explain why, and may extend the period once by up to 45 more days.

10. Appeals

If Coit declines your request, you may appeal by replying to Coit's decision or emailing privacy@coitbooking.com with the subject line "Consumer Health Data Appeal." Coit will respond in writing within 45 days, explaining what it did and why. If Coit denies your appeal, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint, or the attorney general of the state where you live.

11. Changes to This Notice

Coit will post any change to this Notice on this page and update the "Last Updated" date. A change that adds a new category of consumer health data or a new purpose requires your new consent before it applies to you.

12. Contact

Coit Booking LLC
30 N Gould St, Ste N
Sheridan, WY 82801
privacy@coitbooking.com