Brand entity: Trava Health Group, Inc.
Last updated / Effective Date: October 1, 2026
Generated: 2026-10-01 (CT)

Last updated / Effective Date: October 1, 2026 This Privacy Policy is the one canonical Privacy Policy for Trava Health Group, Inc. (taketrava.com, my.taketrava.com, and any other Trava-branded site or app that links to it). [COUNSEL: retire divergent portal Privacy duplicate after publish.]

PRIVACY POLICY Last updated /  Introduction Trava Health Group, Inc.. and its subsidiaries ("Trava", "we", or "us") owns and operates websites (the "Websites") located at www.taketrava.com and may have previously, now or in the future own and/or operate a Trava mobile application (collectively, the "Platform"). Your access and use of the Platform, any part thereof, or anything associated therewith, including its content ("Content"), any products or services provided through the Platform or otherwise by Trava, and any affiliated website, software application or application owned or operated by Trava (collectively, including the Platform and the Content, the "Service") are subject to this Privacy Policy unless specifically stated otherwise. Capitalized terms not otherwise defined in this Privacy Policy have the same meaning as set forth in the Trava Terms and Conditions ("Terms and Conditions"). We are committed to respecting the privacy of users of the Service. We created this Privacy Policy ("Privacy Policy") to tell you how Trava collects, uses and discloses information in order to provide you with the Service. As with our Terms and Conditions, by creating, registering, or logging into an account through the Service, or otherwise accessing or using the Service, you are automatically accepting and acknowledging the most recent version of this Privacy Policy. If we make any changes to our Privacy Policy, we will post the revised Privacy Policy and update the "Last updated" date of the Privacy Policy. Limitations on Use by Minors Our Service is generally intended for use by individuals who are at least eighteen (18) years of age or such older age as may be required by applicable state laws in the jurisdiction in which an individual utilizes the Service. Individuals who are between the ages of thirteen (13) and eighteen (18) (or such older age of majority) may use the Service for the sole purpose of obtaining a medical consultation for the treatment of acne using topical skincare products (to the extent made available) if a parent or legal guardian provides consent to such use in accordance with the requirements set forth in our Terms and Conditions and the Service. The Service is not designed or intended to attract, and is not directed to, children under thirteen (13) years of age. If we obtain actual knowledge that we have collected personal information through the Platform from a person under thirteen (13) years of age, we will use reasonable efforts to refrain from further using such personal information or maintaining it in retrievable form. Protected Health Information When you set up an account with Trava, you are creating a direct customer relationship with Trava that enables you to access and/or utilize the various functions of the Platform and the Service as a user. As part of that relationship, you provide information to Trava, including but not limited to, your name, email address, shipping address, phone number and certain transactional information, that we do not consider to be protected health information or medical information. Collection of Information We collect any information you provide when you use the Service, including, but not limited to: personally identifying information such as your name and contact data; account registration details; demographic data; browser, device and network information; billing, payment and shipping information; electronic signatures; and photographic or video images submitted for identification, diagnosis or treatment purposes. If you use your mobile device to visit, access or use the Service, additional categories of information that we collect may include your name associated with your mobile device, your telephone number, geolocation, mobile device ID information, and-with your express consent-contacts or other data stored on your mobile device. How Information Is Collected Trava might collect personal and non-personal information directly from you when you visit, access or use the Service; when you register, log in, subscribe, make a payment, answer an online survey or questionnaire, or otherwise interact with us. We may also receive information from Medical Groups, Providers, our partners and identity-verification providers in connection with our Services. Use of Information In connection with providing the Service, we and our affiliates and service providers may use your information to verify your identity and location; administer your account; fulfill requests; process payments; facilitate your use of the Service; communicate with you; provide customer support; improve our services; protect Trava's rights and properties; and comply with applicable law. SMS Messaging Consent

We offer two separate text programs: order and account messages, and marketing messages. Opting into one does not opt you into the other. Marketing messages require prior express written consent, for example by checking a marketing box; consent is not a condition of purchase. Reply STOP to the program you want to leave and reply HELP for help. See the SMS Terms section in our Terms and Conditions at https://taketrava.com/terms-conditions/ for program details and this Privacy Policy at https://taketrava.com/privacy-policy/.

Disclosure of Information

Subject to the limitations described in the Protected Health Information section above, we may disclose your information to third parties in connection with the provision of our Service, as otherwise permitted or required by law, and to vendors that provide services necessary to enable us to operate our business and provide the Service.

Data Retention

Trava may retain your information for as long as it believes necessary to comply with its legal obligations, resolve disputes and/or enforce its agreements; and/or as long as needed to provide you with the products and/or services of Trava.

Transactions

In connection with any transaction that you conduct through the Service, you may be asked to supply certain information relevant to the transaction, including your credit card number and expiration date, billing address, shipping address, phone number and/or email address. Payment processing applications accessible through the Service may be provided by a third-party online payment processing vendor.

Summary of Information Practices

The following table summarizes our personal information collection, use, and sharing practices in the preceding 12 months since we last updated this Policy. As reflected in this table, we may share your personal information with a variety of outside entities.

Category of Personal Information Collected

Examples

Categories of Sources

Commercial/Business Purpose

Categories of Third Parties with Whom Trava Shares Personal Information

Identifiers

Full name, email address, phone number, account login and password, purchase information, billing address, physical address

You, our and third-party cookies and other tracking technologies on our website, and service providers.

Facilitating use of Services and/or products or services, processing payments, marketing, customer, or analytic services, protecting against malicious, deceptive, fraudulent or illegal activity, and enabling or effecting, directly or indirectly, a commercial transaction

Service providers, Medical Groups, Providers, Pharmacies, third parties that assume control over all or part of the business in connection with a merger, acquisition, bankruptcy, or similar event, affiliates, professional advisors, law enforcement authorities, and those involved in legal proceedings, with consent

Unique identifiers or personal identifiers

IP address, online identifiers, mobile device ID, dates of medical visit

You, your mobile device, and our and third-party cookies and other tracking technologies on our website

Processing or fulfilling orders and transactions, debugging to identify and repair errors that impair existing intended functionality, providing customer or analytic services, and enabling or effecting, directly or indirectly, a commercial transaction

Service providers, Medical Groups, Providers, Pharmacies, data analytic providers, payment processors, affiliates, professional advisors, law enforcement authorities, and those involved in legal proceedings, with consent

Internet and other network activity

Browsing activity

Your mobile devices and computers used to access our Site

Marketing, customer, or analytic services and enabling or effecting, directly or indirectly, a commercial transaction

Service providers, data analytic providers, affiliates

Demographic information

Gender, date of birth, zip code

You and our vendors

Marketing, customer, or analytic services, processing or fulfilling orders, transactions and identity verification

Service providers, data analytic providers, affiliates

Audio, electronic, visual, thermal, olfactory, or similar information

Electronic signature, photographic or video images

You

Identification verification or non-diagnosis or treatment purposes, on behalf of Medical Groups/Providers for diagnosis or treatment purposes

Medical Groups and Providers

Commercial Activity

Information about goods or services purchased, obtained, or considered,

Your mobile device

Processing or fulfilling orders and transactions, marketing, customer or analytic services

Service providers, data analytic providers, affiliates

Health and Medical Information

Medical history and other information, symptoms, prescription history, insurance policy, insurance eligibility and coverage, laboratory test results, previous doctors visited

You or Medical Group and/or Providers

Processing or fulfilling orders and transactions

Medical Groups and Providers

Financial Information (Information under California Civil Code 1798.80)

Payment information

You

Processing or fulfilling orders and transactions

Payment processors, buyers on Service, sellers on Service

Geolocation information

Geolocation

Your mobile devices and computers used to access our Site, and our vendors

Confirming location and verifying identity

Medical Groups and Providers

Professional or Employment-related Information

Job history, educational history, employer

Applicants or non-applicant email addresses or signature blocks

Process and evaluate applications for positions with Trava

Service providers such as HR vendors

Swipe horizontally to view the full table.

California Residents

If you are a California resident, you have the right to know what personal information we collect, use, disclose or sell about you under the CCPA. Additionally, you have the right to access and delete your personal information. To exercise these privacy rights and choices, please follow the instructions below.

To request access to or deletion of your personal information, please email privacy@taketrava.com or call 855-872-8279. We may take steps to verify your identity before fulfilling any request. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information.

Miscellaneous

We strive to use reasonable physical, technical and administrative measures to protect information under our control. However, you must keep your Account password secure and your Account confidential. Trava may supplement, amend, or otherwise modify this Privacy Policy at any time. Such changes will be posted on this or a similar page of the Service and shall be deemed effective as of the Last Updated date.

Contacting Us

If you have any questions about this Privacy Policy, please contact us by email at privacy@taketrava.com or by regular mail at: Trava Health Group, Inc., 21175 TX-249 #239, Houston, TX 77070, Attn: Privacy Officer

Related Notices (architecture) This Privacy Policy is the canonical privacy notice for our brand websites, patient portals, and apps that link to it. Additional notices may apply and are incorporated by reference where linked: • Consumer Health Data Privacy Notice (CHD Notice) — [COUNSEL: publish standalone CHD notice; stub only until counsel finalizes] • Notice of Privacy Practices (NPP) — provided by applicable Medical Groups / Providers / covered entities • Your Privacy Choices / Do Not Sell or Share — [COUNSEL / David: operational control + GPC recognition to be built; link when live] If another notice applies to a specific service, that notice controls for that service to the extent of any conflict.

Advertising, Analytics, and Tracking Technologies — [COUNSEL] We and our service providers may use cookies, pixels, tags, SDKs, APIs, server-side technologies, and similar technologies to collect information about how you interact with our websites and services (for example, IP address, browser/device information, advertising identifiers, pages viewed, and whether certain actions were completed). We may use this information to operate and improve our Services, measure advertising, attribute conversions, prevent fraud, and, where permitted, deliver or measure advertising. [COUNSEL: vendor names only after tech audit; categories OK.]

Health Information and Advertising — [COUNSEL] [COUNSEL — sample boundary language adapted from Marketing Advertising/Analytics/Privacy briefing (Kevin PDF); HOLD pending tech audit.] We recognize that health information is particularly sensitive. We do not use or disclose Protected Health Information ("PHI") for advertising in a manner prohibited by HIPAA, where HIPAA applies. We also maintain controls designed to prevent information submitted for diagnosis, treatment, prescription fulfillment, laboratory services, or other clinical purposes from being disclosed to advertising platforms for targeted advertising except where expressly permitted by applicable law and, when required, with appropriate authorization or consent. Certain information collected outside of the clinical context may not constitute PHI under HIPAA but may nevertheless constitute health information, consumer health data, sensitive personal information, or another protected category under applicable state or federal privacy laws. We handle such information in accordance with applicable law.

Where permitted by applicable law and subject to your privacy choices, we may use certain contact information or online identifiers to measure or deliver advertising. We do not use information revealing an individual's diagnosis, treatment, prescription, medical condition, or other protected consumer health information for targeted advertising except where expressly permitted by applicable law and, where required, after obtaining appropriate consent or authorization.

Sale, Sharing, and Targeted Advertising — [COUNSEL] [COUNSEL — sample language from Kevin PDF briefing; pair with operational Your Privacy Choices control (David builds).] Some disclosures of online identifiers and internet activity to advertising partners may constitute a "sale" or "sharing" under certain state privacy laws, even where we do not receive money in exchange for the information. Where required by applicable law, you may opt out of the sale or sharing of your personal information or its processing for targeted advertising via Your Privacy Choices [link TBD — David builds control] and, where legally required, we will honor recognized opt-out preference signals such as the Global Privacy Control (GPC).

Categories of service providers / partners (no invented vendor inventory): analytics; advertising measurement; payment processing; cloud hosting; customer support; pharmacy/fulfillment; telehealth platform; identity verification. [COUNSEL: name specific vendors only after inventory verification — do not invent.]

Contacting Us Email privacy@taketrava.com, support@taketrava.com, or legal@taketrava.com. Phone: 855-872-8279. Mail: 21175 TX-249 #239, Houston, TX 77070.