Security and Privacy Policy

Last Updated: July 23, 2025

PLEASE READ CAREFULLY

BY ACCESSING OR USING OUR WEBSITE, MOBILE APPLICATIONS, SMS MESSAGING, OR RELATED SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS SECURITY AND PRIVACY POLICY AND ALL TERMS INCORPORATED HEREIN. IF YOU DO NOT AGREE, YOU MUST NOT ACCESS OR USE OUR SERVICES.

Information Collected

Our web servers collect domain names of visitors to track navigation patterns. We use cookies, which are small data files placed on your device, to recognize your computer on return visits, enabling us to gather statistical data about site navigation, measure the effectiveness of promotional placements, and improve user experience. Cookies do not collect your name or personal data, and the information gathered is used solely for internal purposes, such as enhancing site functionality, and is shared only with MaxLiving affiliates and third-party service providers, such as website analytics or hosting providers, who assist in these efforts and are bound by confidentiality agreements. You may configure your browser to reject cookies or alert you before one is placed. In certain cases, we collect personal information you voluntarily provide, such as your name, address, telephone number, fax number, or email address, when you request information or services through the Site. For access to electronic annual reports or proxy statements, we collect your tax identification number to verify shareholder status. For our supplier diversity program, we collect information about gender and ethnicity, such as whether your business is female-owned, to support diversity initiatives. We also collect data through SMS messaging when you opt in to receive communications, such as appointment reminders or office notifications, facilitated by third-party service providers, as described in Section 6. The Site and Services are not intended for persons under 13 years of age, and we do not knowingly solicit or collect personal information from or about children or market our services to them, in compliance with the Children’s Online Privacy Protection Act (COPPA).

Use of Collected Information

We do not use domain name information to personally identify you; instead, we aggregate it to measure metrics such as the number of visits, average time spent on the Site, and pages viewed, which helps us improve site content and functionality. When you provide personal information, such as your name or email address, we inform you at the time of collection how it will be used, typically to respond to your inquiry, process your request (e.g., for electronic annual reports or supplier diversity inclusion), or provide tailored information about MaxLiving offerings if you register with one of our business units. We may share your information with other MaxLiving businesses or affiliates only as necessary to fulfill your request or for related purposes. We may also share your information with third-party service providers we hire to perform services, such as website hosting, analytics, or SMS messaging, but these providers are contractually obligated to use your information solely for the services we specify and to maintain confidentiality. We do not share, sell, or lease your personal information to third parties for their marketing purposes. We may disclose your information if you direct us to do so, if required by law (e.g., in response to a court order), or in limited circumstances, such as to prevent fraud or protect your account security.

Links to Other Sites

MaxLiving web site may contain links to other sites such as MaxLiving distributors and sales affiliates. While we try to link only to sites that share our high standards and respect for privacy, we are not responsible for the content, security, or privacy practices employed by other sites.

Security of Collected Information

We maintain robust physical, electronic, and administrative safeguards to protect your personal information from unauthorized or inappropriate access. We use encryption technologies, secure servers, and access controls to secure data during transmission and storage. Access to your information is restricted to MaxLiving employees, affiliates, and third-party service providers who need it to respond to your inquiries or fulfill requests, and these individuals and entities are bound by confidentiality obligations. Employees who misuse personal information are subject to disciplinary action. Despite these measures, no online system is completely secure, and we encourage you to take precautions, such as using strong passwords and avoiding public Wi-Fi when accessing the Site.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example, we keep information collected for inquiries until your request is resolved, and we retain supplier diversity data for the duration of your participation in the program. SMS messaging data, such as opt-in records, is retained as required by the Telephone Consumer Protection Act (TCPA). When information is no longer needed, we securely delete or anonymize it in accordance with applicable legal standards.

HIPPA Compliance

MaxLiving does not process Protected Health Information (PHI) as defined by the Health Insurance Portability and Accountability Act (HIPAA) through the Site or Services, including SMS messaging facilitated by third-party service providers. You are expressly prohibited from transferring, uploading, or sending via SMS any PHI, including but not limited to health records, medical diagnoses, treatment details, or other sensitive health-related information, through the Site, email, comments, reviews, forums, or any communication features provided by the Services. Any attempt to submit PHI through these channels violates this policy, and MaxLiving is not responsible for such submissions, which may be removed at our discretion. If you need to share PHI, you must contact a MaxLiving doctor or authorized representative directly through secure, HIPAA-compliant channels, such as encrypted patient portals or in-person communications. For questions about HIPAA compliance or to report an issue, contact us at discover@maxliving.com or 321-939-3060.

SMS Messaging

If you opt in to our SMS messaging program, facilitated by third-party service providers, we may collect your phone number and other information you provide to send appointment reminders, feedback requests, or office notifications. By opting in, you consent to receive these messages, and message frequency may vary based on your interactions with the Services. Standard message and data rates may apply, as determined by your mobile carrier. Our third-party SMS providers are contractually obligated to use your information solely for delivering these messages and to maintain confidentiality. You may opt out at any time by texting STOP to 321-939-3060, after which you will receive a confirmation message and no further messages unless you opt back in. For assistance, text HELP to 321-939-3060 or contact us at discover@maxliving.com. We do not use SMS data for marketing purposes or share it with third parties except as necessary to provide the service through our contracted providers.

Your Privacy Rights

You have certain rights regarding your personal information, depending on your location and applicable laws. Under the California Consumer Privacy Act (CCPA), California residents may request access to, correction of, or deletion of their personal information, and they may opt out of the sale of their data (though MaxLiving does not sell personal information). To exercise these rights, contact us at discover@maxliving.com. For users in the European Union or United Kingdom under the General Data Protection Regulation (GDPR), where applicable, you have the right to access, rectify, erase, restrict, or object to the processing of your data, and to data portability. We process your data based on your consent or legitimate interests (e.g., providing requested services), and you may withdraw consent at any time by contacting us. You may also review and update information you provided through the Site by contacting us as described in Section 10. We will respond to all requests within the timeframes required by law (e.g., 45 days for CCPA requests, 30 days for GDPR requests).

Phishing / Fraudulent Transactions

Phishing is an illegal practice where fraudsters impersonate legitimate companies like MaxLiving to steal sensitive information, such as financial details or login credentials, through fake emails, texts, or websites. MaxLiving’s official communications, including those from our third-party service providers, are never sent from personal email domains (e.g., Yahoo, Gmail, Hotmail). You must not share Protected Health Information (PHI) or other sensitive data in response to unsolicited requests, as this violates our HIPAA policy (Section 5). To protect yourself, verify the sender’s email address, avoid clicking links or opening attachments in suspicious messages, and access the Site directly by typing www.maxliving.com or using a bookmarked page rather than links from emails. If you suspect a phishing email or text, do not reply, open attachments, or click links, as they may contain malicious code. Instead, forward the message to abuse@maxliving.com or report it to our helpline at 321-939-3060. For more information on avoiding phishing scams, visit http://www.sec.gov/investor/pubs/phishing.htm.

Contacting Us

If you have questions, concerns, or requests regarding this Security and Privacy Policy or our data practices, please contact us at: MaxLiving, LLC, 6404 Old Winter Garden Rd, Orlando, FL 32835, Email: discover@maxliving.com, Phone: 321-939-3060. We welcome your feedback and will respond promptly to your inquiries.

Changes To This Policy

We may update this Security and Privacy Policy to reflect changes in our practices, legal requirements, or industry standards. We will notify you of material changes by posting the updated policy on the Site with a revised “Last Updated” date or, where required by law (e.g., CCPA, GDPR), by emailing you or providing other notice. Your continued use of the Services after such changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically for updates.