Privacy Policy

Upsize LLC ("Upsize," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit upsizematters.com (the "Site"), contact us, or otherwise interact with Upsize online. By using the Site you agree to the practices described below. If you do not agree, please do not use the Site.

1. About Upsize and the Scope of This Policy

Upsize LLC is a brand and marketing organization. Medical consultations and procedures marketed under the Upsize™ name are provided by independent, separately owned clinics and licensed physicians ("Participating Clinics"). Any medical records, protected health information, and clinical communications generated at a Participating Clinic are governed by that clinic's own privacy notice and, where applicable, the Health Insurance Portability and Accountability Act ("HIPAA"). This Policy covers only information that Upsize LLC itself collects through the Site and our marketing operations, and does not cover information you provide directly to a Participating Clinic. Urosculpt™ is a trademark of a separate company and is not owned or operated by Upsize LLC; any reference to Urosculpt™ training or certification on the Site is a description of credentials held by independent physicians, not a service provided by Upsize LLC.

2. Information We Collect

Information You Give Us

• Contact and consultation requests: name, phone number, email address, city or location, the procedure you are interested in, and any message you include.
• Appointment and booking data: information you submit through our online booking tools, including preferred clinic, date, and any notes.
• SMS opt-in data: the phone number you provide and your opt-in confirmation when you agree to receive text messages from us.
• Correspondence: the content of emails, text messages, chatbot conversations, and phone calls you have with us.

Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, referring URL, pages viewed, time on page, and similar analytics data.
• Cookies and similar technologies: first- and third-party cookies, pixels, local storage, and tracking tags used for analytics and advertising.
• Approximate location: derived from your IP address to surface nearby clinic locations.

Information From Third Parties

• Advertising and analytics platforms such as Google Analytics, Google Ads, Meta, and TikTok may share aggregated or pseudonymous data about how users reach the Site.
• Participating Clinics may share the outcome of a consultation request (for example, whether you booked an appointment) for quality assurance and marketing attribution.

3. How We Use Information

• To respond to consultation, booking, and general information requests.
• To route your inquiry to the appropriate Participating Clinic closest to you.
• To send transactional communications such as appointment confirmations and reminders.
• To send marketing communications (email, SMS, or mail) about Upsize procedures, promotions, and events where you have opted in or where otherwise permitted by law.
• To operate, secure, and improve the Site, including debugging, analytics, A/B testing, and fraud prevention.
• To comply with legal obligations, respond to lawful requests, and enforce our Terms of Service.

4. Text Messages, TCPA, and Carrier Terms

When you check the SMS consent box on a form, request a text back, or reply to an Upsize text message, you agree to receive recurring text messages from Upsize LLC, including customer service, appointment, and promotional messages, sent using an automated system. Consent is not a condition of purchase or of booking a consultation. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help. Carriers are not liable for delayed or undelivered messages. We do not share mobile numbers or SMS opt-in data with third parties for their own marketing; mobile opt-in consent is not shared with affiliates for marketing purposes.

5. How We Share Information

We do not sell your personal information for money. We share information only as described below.

• Participating Clinics and physicians: when you submit a consultation request, we forward the necessary details to the Upsize clinic or physician best positioned to contact you.
• Service providers: hosting, email delivery, SMS gateways, CRM, analytics, call tracking, advertising, customer support, and payment processing vendors that act on our behalf under confidentiality obligations.
• Advertising partners: aggregated or hashed data with platforms such as Google and Meta to measure ad performance and build lookalike audiences. You can limit this as described in Section 8.
• Legal and safety: when required by law, subpoena, court order, or to protect the rights, property, or safety of Upsize, our users, or others.
• Business transfers: as part of a merger, acquisition, financing, reorganization, or sale of assets.
• With your direction: any other party you specifically authorize.

6. Relationship to HIPAA and Clinical Records

Upsize LLC is not a HIPAA-covered entity. The Site is a marketing and information channel, not a medical portal. If you transmit symptoms, medical history, photographs, or other clinical information through the Site, please keep in mind that the Site is not designed for the transmission of protected health information, and such information may be used by us only to route you to an appropriate Participating Clinic. Once you establish a relationship with a clinic, any medical information you share directly with that clinic is subject to that clinic's HIPAA privacy practices, not this Policy.

7. Data Retention

We keep personal information for as long as necessary to fulfill the purposes described in this Policy, to comply with our legal, accounting, and reporting obligations, and to resolve disputes. Inactive consultation leads are typically purged or anonymized within 24 months. You can request earlier deletion as described in Section 9.

8. Cookies, Analytics, and Advertising

We use cookies and similar tools to understand how visitors find and use the Site and to deliver relevant advertising. You can control cookies through your browser settings and opt out of many interest-based advertising programs through:

• Google Ads Settings (adssettings.google.com)
• Google Analytics Browser Opt-Out (tools.google.com/dlpage/gaoptout)
• Digital Advertising Alliance (optout.aboutads.info)
• Network Advertising Initiative (optout.networkadvertising.org)

Where required, we honor Global Privacy Control ("GPC") signals as a valid opt-out of the sale or sharing of personal information for cross-context behavioral advertising.

9. Your U.S. State Privacy Rights

The Site is operated by a California company and is directed to users across the United States. Depending on the state you live in, you may have some or all of the following rights with respect to personal information Upsize LLC holds about you:

• Right to know / access. Confirm whether we are processing your personal information and obtain a copy of it.
• Right to correct. Ask us to correct inaccurate personal information.
• Right to delete. Ask us to delete personal information we collected from you, subject to legal exceptions.
• Right to data portability. Receive a copy of your personal information in a portable, readily usable format.
• Right to opt out of targeted advertising and of the sale or sharing of personal information for cross-context behavioral advertising.
• Right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.
• Right to limit the use of sensitive personal information to purposes permitted by law.
• Right to withdraw consent to marketing communications or to any processing that is based on your consent.
• Right to non-discrimination for exercising these rights, and a right to appeal if we decline a request.

As of the date above, states with comprehensive consumer privacy laws that generally provide the rights listed include California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, New Hampshire, Nebraska, Tennessee, Indiana, Kentucky, Maryland, Minnesota, and Rhode Island. Additional states are continuing to enact similar laws, and we will honor the law of your state of residence to the extent it applies to Upsize LLC and to the information we hold about you.

How to submit a request. Email [email protected] or call 628-246-8999. We verify requests by matching information you provide against information we already hold. You may designate an authorized agent to act on your behalf with written permission and proof of identity. We will respond within the timeframe required by the applicable state law (generally 45 days, with one 45-day extension where permitted).

California Residents (CCPA / CPRA)

Because Upsize LLC is headquartered in California, we treat the California Consumer Privacy Act, as amended by the California Privacy Rights Act, as the baseline for our U.S. privacy program. In the 12 months preceding the date of this Policy, we have collected the following categories of personal information, as defined in Cal. Civ. Code § 1798.140:

CCPA Category	Examples	Sources	Disclosed To
Identifiers	Name, phone number, email, IP address, online identifiers	You, your device, advertising partners	Participating Clinics, service providers, advertising partners
Customer records	Information you submit on forms or in chat	You	Participating Clinics, service providers
Internet / network activity	Browsing history on the Site, referring URLs, interactions with ads	Your device, analytics and ad providers	Analytics and advertising service providers
Geolocation (approximate)	City-level location derived from IP address	Your device	Participating Clinics, analytics providers
Commercial information	Procedures you inquired about and records of those inquiries	You	Participating Clinics, service providers
Inferences	Predicted interest in procedures for ad targeting	Data we and our providers collect	Advertising platforms (in hashed or aggregated form)

We use each category for the business purposes described in Sections 2 and 3. We retain each category only as long as reasonably necessary to accomplish those purposes, consistent with Section 7.

Sensitive personal information. We do not use or disclose "sensitive personal information" as defined by the CPRA for purposes other than those permitted by Cal. Civ. Code § 1798.121(a) and its implementing regulations, so the separate "right to limit" does not apply. If you voluntarily share information about a health condition through the Site, we use it only to respond to your inquiry and route you to a Participating Clinic.

Sale and sharing. We do not sell personal information for money. We may "share" personal information (such as hashed identifiers and online activity) with advertising partners for cross-context behavioral advertising as defined by the CPRA. You can opt out at any time by: (a) emailing [email protected]; (b) enabling the Global Privacy Control in your browser; or (c) using the "Do Not Sell or Share My Personal Information" link in our site footer where available.

Appeal and regulator. If we deny your request, you may appeal by replying to our response with the word "Appeal." After completing our appeal process, California residents may contact the California Privacy Protection Agency (cppa.ca.gov) or the California Attorney General (oag.ca.gov/privacy) if they believe their rights have been violated.

Shine the Light. California residents may request a list of the categories of personal information disclosed to third parties for those third parties' own direct marketing purposes in the prior calendar year. We do not share personal information with third parties for their own direct marketing.

Notice at Collection. This Policy, together with any just-in-time notice presented on a specific form, is our Notice at Collection for purposes of Cal. Civ. Code § 1798.100.

Washington, Nevada, and Connecticut Consumer Health Data

Washington's My Health My Data Act, Nevada's Consumer Health Data Privacy Law, and the amendments to Connecticut's Data Privacy Act regulate "consumer health data." Upsize LLC is not a HIPAA-covered entity, but information you submit about a procedure you are interested in — combined with precise location that reveals a visit to a Participating Clinic — may constitute "consumer health data" under these laws. For residents of these states:

• We use consumer health data only to respond to your inquiry, route you to a Participating Clinic, schedule consultations, measure marketing performance in aggregated form, and comply with law.
• We do not sell consumer health data, and we do not share it with any third party for targeted advertising based on that data.
• We disclose consumer health data to a Participating Clinic only at your request when you submit a consultation form or similar inquiry.
• You may request to know, access, delete, or withdraw consent for the processing of your consumer health data by emailing [email protected].
• Washington residents may file a complaint with the Washington State Attorney General at atg.wa.gov.

Nevada SB 220 (Sale Opt-Out)

Nevada residents have the right to direct certain businesses not to sell covered personal information. We do not currently sell covered personal information as defined under Nevada law, but Nevada residents may submit a verified opt-out request by emailing [email protected].

10. Children's Privacy

The Site and Upsize services are intended for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information to us, contact us and we will delete it.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. No system is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping any account credentials and the devices you use confidential.

12. Users Outside the United States

The Site is directed to users in the United States. If you access the Site from outside the United States, you understand and agree that your information will be transferred to and processed in the United States under U.S. law, which may differ from the privacy laws of your country.

13. Third-Party Sites and Services

The Site may link to third-party websites, financing partners, review platforms, and social media. We are not responsible for the privacy practices or content of those third parties. Review each third party's privacy policy before providing information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, if the changes are material, provide additional notice through the Site or by email. Your continued use of the Site after the effective date of any change constitutes your acceptance of the updated Policy.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Upsize LLC
5 Medical Plaza Dr, Ste 150
Roseville, CA 95608
Phone: 628-246-8999
Email: [email protected]