Introduction

Quantum Vibrant Wellness LLC (“we,” “our,” or “us”) is an Idaho limited liability company owned and operated by Lisa Michelle Brienen, DVM, CVH. We provide veterinary consultation services, educational content, and related resources through our website located at https://quantumvibrant.com (the “Website”).

This Privacy Policy describes how we collect, use, disclose, retain, and protect your personal information when you visit our Website or use our services. This Privacy Policy applies to all visitors and users of our Website, regardless of geographic location within the United States.

By accessing or using our Website, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is intended to be read together with our Terms of Service, available on the Website. If you do not agree with our practices as described herein, please do not use our Website or services.

We are committed to protecting your privacy and handling your personal information responsibly and in compliance with applicable United States federal and state privacy laws.

Information We Collect

We collect personal information that you voluntarily provide to us when you use our services or communicate with us. We do not collect personal information from visitors who merely browse our Website without purchasing services or otherwise contacting us.

Personal Identifiers

When you engage our services, we may collect the following categories of personal information:

• Full name

• Email address

• Telephone number

• Mailing address

Payment Information

Payment information (such as credit or debit card numbers) is collected and processed directly by our third-party payment processor, Elavon. We do not collect, store, view, or have access to your full payment card details.

For more information about how Elavon collects and processes data, please visit: https://www.elavon.com/privacy-policy.html.

Animal and Pet Health Information

In connection with our veterinary consultation services, we collect information about your pet or animal, including:

• Species, breed, and age

• Medical history and current medications

• Veterinary records

• Photographs of your animal

Communications Data

We retain email correspondence and other communications you send to us in connection with scheduling appointments, requesting consultations, or inquiring about our services.

Information We Do Not Collect

We want to be transparent about the limitations of our data collection:

• We do not collect human health information.

• We do not collect IP addresses directly (though our platform providers may collect such data in the course of operating the Website).

• We do not collect personal information from visitors who do not purchase services or contact us directly.

• We do not knowingly collect information from children under the age of 13.

How We Collect Information

We collect personal information through the following methods:

Appointment Scheduling

When you book a consultation through Wix Bookings, the scheduling functionality integrated into our Website platform, you provide your name, contact information, and details regarding the consultation you are requesting.

Email Correspondence

You may provide personal information, including details about your pet’s health and related records, via email when communicating with us about consultations or services.

Payment Processing

When you purchase our services, you provide payment information directly to our payment processor, Elavon. We receive confirmation of payment but do not access or store your payment card details.

Automated Technologies

Our Website platform (Wix/Hostinger) may automatically collect certain technical data through essential cookies and similar technologies as described in the Cookies and Tracking Technologies section of this Privacy Policy.

Purposes and Legal Bases for Processing

We use the personal information we collect for the following purposes:

Service Delivery

• To provide veterinary consultation services, including pet-specific telemedicine consultations for residents of Washington and Idaho

• To provide general educational and informational consultations

• To review veterinary records and animal health information in preparation for consultations

• To communicate with you regarding scheduled appointments and follow-up matters

Payment Processing

• To process and confirm payment transactions through our third-party payment processor

• To maintain records of transactions for accounting and tax purposes

Communications

• To respond to your inquiries and requests

• To provide information about our services when you contact us

Website Operations

• To maintain, improve, and optimize Website functionality and user experience

• To ensure the security and integrity of our Website

Legal Compliance

• To comply with applicable laws, regulations, and legal processes

• To maintain records as required by veterinary licensing authorities

• To establish, exercise, or defend legal claims

We process your personal information based on the following legal grounds: (a) performance of a contract or to take steps at your request prior to entering into a contract (i.e., providing the services you have requested); (b) compliance with legal obligations; and (c) our legitimate business interests, such as improving our Website and services, provided such interests are not overridden by your rights and interests. We do not use your personal information for marketing, advertising, or promotional purposes.

Cookies and Tracking Technologies

What Are Cookies

Cookies are small text files placed on your device when you visit a website. They serve various functions, including enabling the website to recognize your device, remembering your preferences, and providing analytical data about website usage.

Cookies We Use

Our Website uses only essential and functional cookies provided by our website platform (Wix). These cookies are necessary for the basic operation of the Website, such as maintaining session state and enabling core functionality. We do not use advertising cookies, targeting cookies, or cookies for behavioral advertising.

Analytics

Our Website utilizes Google and Wix platform analytics to collect aggregated, non-personally identifiable data about Website usage. This information helps us understand how visitors interact with our Website and allows us to improve content and functionality. Google Analytics may use cookies and collect data such as pages visited, time spent on pages, and referring websites.

For more information about how Google Analytics collects and processes data, please visit: https://policies.google.com/privacy.

Your Cookie Choices

Most web browsers allow you to manage cookie preferences through browser settings. You may be able to set your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling essential cookies may affect the functionality of our Website.

Data Sharing and Third-Party Disclosures

General Policy on Data Sharing

We do not sell, rent, lease, or trade your personal information to any third party. We do not share your personal data with third parties for their own marketing or commercial purposes.

Service Providers

We engage a limited number of third-party service providers to assist in operating our Website and delivering our services. These providers access personal information only to the extent necessary to perform their designated functions and are contractually obligated to protect the confidentiality of your data. Our service providers include:

• Elavon (via Wix/US Bank) — payment processing

• Zoek Marketing — website management, search engine optimization, and analytics

• AudioEye — website accessibility compliance

• Google Analytics — website usage analytics (implemented through Zoek Marketing)

• Wix/Hostinger — website hosting platform, including integrated appointment scheduling (Wix Bookings)

• Microsoft OneDrive — secure cloud storage for client records

Legal Disclosures

We may disclose your personal information if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to:

• Comply with applicable laws or respond to valid legal process (e.g., a subpoena, court order, or regulatory inquiry)

• Protect our rights, property, or safety, or that of our clients or others

• Enforce our Terms of Service or other agreements

• Investigate potential violations of law or report suspected unlawful activity

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via a prominent notice on our Website of any such change in ownership or use of your personal information.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Our general retention practices are as follows:

• Consultation and service records: Retained for a minimum of three (3) years from the date of the last consultation, or longer as required by applicable veterinary licensing regulations.

• Payment transaction records: Retained for a minimum of three (3) years for accounting, tax, and regulatory compliance purposes.

• Email correspondence: Retained for the duration of the client relationship and for a minimum of three (3) years following the last communication.

• Animal health records: Retained for a minimum of three (3) years, or as required by Washington or Idaho veterinary practice regulations, whichever is longer.

Upon expiration of the applicable retention period, we will securely delete or de-identify your personal information, unless further retention is required by law or for the establishment, exercise, or defense of legal claims.

Data Security

We take the security of your personal information seriously and implement reasonable administrative, technical, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in transit: All data transmitted between your browser and our Website is protected by SSL/TLS encryption.

• Secure storage: Client consultation records and animal health information are stored in Microsoft OneDrive Personal Vault with BitLocker encryption.

• PCI compliance: Payment processing is handled in a PCI-compliant environment by Elavon, Wix, and US Bank. We do not store payment card data on our systems.

• Platform security: Our Website is hosted on the Wix platform, which employs industry-standard security measures, including SSL certificates on all hosted websites.

While we strive to use commercially reasonable means to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your data. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and applicable regulatory authorities in accordance with applicable law.

Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information under applicable state privacy laws. Below is a summary of the rights that may be available to you.

Rights Available Under State Privacy Laws

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with applicable consumer privacy statutes may exercise the following rights with respect to their personal information:

• Right to Know/Access: You may request access to the categories and specific pieces of your personal information, the categories of sources from which it was collected, the purposes for which it was collected or used, and the categories of third parties with whom it was shared.

• Right to Delete: You may request deletion of personal information we collected from you, subject to exceptions under applicable law.

• Right to Correct: You may request correction of inaccurate personal information we maintain about you.

• Right to Data Portability: You may have the right to receive your personal information in a portable, readily usable format.

• Right to Opt Out of Sale or Sharing: You may opt out of the sale or sharing of your personal information for targeted advertising.

• Right to Opt Out of Profiling: You may have the right to opt out of profiling that produces legal or similarly significant effects.

• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights, including by denying goods or services, charging different prices, or providing a different level of service.

Please note that we do not sell or share personal information for targeted advertising, nor do we engage in profiling that produces legal or similarly significant effects. Accordingly, while we acknowledge these rights, no affirmative action is required on your part to exercise them.

Exercising Your Rights

To exercise any of the rights described above, submit a request by emailing lisa@quantumvibrant.com, identify the right you wish to exercise, and provide information sufficient for us to verify your identity and locate your records. We will respond to verifiable requests within the timeframes required by applicable law and may confirm information you previously provided to verify your identity.

Authorized Agents

You may designate an authorized agent to submit a privacy rights request on your behalf. Authorized agents must provide proof of written authorization from you and may be required to verify their own identity. We may contact you directly to confirm that you authorized the agent to act on your behalf.

Appeal Process

If we decline to take action on your request, you have the right to appeal that decision. To appeal, please email us at lisa@quantumvibrant.com with the subject line “Privacy Rights Appeal.” We will respond to your appeal within the timeframe required by applicable law. If your appeal is denied, you may have the right to contact your state’s attorney general to lodge a complaint.

California-Specific Disclosures

In addition to the rights described above, California residents are entitled to the following disclosures under the CCPA/CPRA:

• Categories of Personal Information Collected: We collect the categories of personal information described in the Information We Collect section of this Privacy Policy, including identifiers, commercial information, and information provided in connection with our services.

• Sale and Sharing of Personal Information: We have not sold personal information of California consumers in the preceding twelve (12) months, do not sell personal information, and do not share personal information for cross-context behavioral advertising. California residents may submit a “Do Not Sell or Share My Personal Information” request at any time by emailing lisa@quantumvibrant.com.

• Sensitive Personal Information: We do not collect information classified as “sensitive personal information” under the CCPA/CPRA; animal health information is not classified as sensitive personal information under that law.

• Financial Incentives: We do not offer financial incentives or vary prices or services in connection with collecting or deleting personal information.

Children’s Privacy

Our Website and services are intended for individuals who are at least eighteen (18) years of age. We do not knowingly collect, solicit, or maintain personal information from anyone under the age of thirteen (13), in compliance with the Children’s Online Privacy Protection Act (“COPPA”).

Additionally, our services require that users be at least eighteen (18) years old to purchase services. A parent or legal guardian may use our services on behalf of a minor.

If we learn that we have collected personal information from a child under the age of 13 without verified parental consent, we will take immediate steps to delete that information from our records. If you believe that a child under 13 has provided us with personal information, please contact us at lisa@quantumvibrant.com so that we can promptly address the matter.

International Data Transfers

Our Website and services are operated from the United States and are intended primarily for users located within the United States. We store all client data on servers and cloud infrastructure located within the United States.

We do not ordinarily transfer personal information outside of the United States. In the unlikely event that a data transfer outside the United States becomes necessary, we will ensure that appropriate safeguards are in place to protect your personal information in compliance with applicable law.

If you access our Website from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your jurisdiction. By using our Website, you consent to such transfer, storage, and processing.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will post the revised Privacy Policy on our Website with an updated effective date and post a notice on our homepage indicating that the Privacy Policy has been updated.

Your continued use of our Website or services after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If we make changes that materially affect your privacy rights, we will make reasonable efforts to provide advance notice before such changes take effect.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at lisa@quantumvibrant.com.

We will make every reasonable effort to respond to your inquiry promptly and in accordance with applicable law.

Governing Law

This Privacy Policy and any disputes arising out of or related to this Privacy Policy or your use of our Website shall be governed by and construed in accordance with the laws of the State of Idaho, without regard to its conflict of laws principles. Any dispute shall be resolved through the dispute resolution procedures set forth in our Terms of Service, including mediation and binding arbitration administered by the American Arbitration Association in Bannock County, Idaho.