GO.GLP1GENIUS.COM

STATE PRIVACY POLICY FOR U.S. RESIDENTS

Last updated: October 29, 2025

This State Privacy Policy (“State Privacy Policy”) supplements the information contained in the Privacy Policy of go.glp1genius.com (“Company,” “we,” “us,” or “our”) and applies solely to residents of the following U.S. states: California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. We adopt this State Privacy Policy to comply with these states’ privacy statutes. If any provision of this State Privacy Policy conflicts with our Privacy Policy, this State Privacy Policy controls for residents of the applicable state.

For purposes of this State Privacy Policy, unless otherwise stated, “Personal Data” has the meaning assigned under the applicable state statute and is referred to as “Personal Information” under California law. References to “Sensitive Personal Data” may be called “Sensitive Personal Information” in certain states.

PLEASE REVIEW THIS STATE PRIVACY POLICY, OUR PRIVACY POLICY, AND OUR TERMS OF USE CAREFULLY. YOUR USE OF THIS WEBSITE AND/OR OUR SERVICES SIGNIFIES YOUR AGREEMENT TO THIS STATE PRIVACY POLICY, OUR PRIVACY POLICY, AND OUR TERMS OF USE.

If you are not a resident of one of the states listed above, your privacy rights and our data handling practices are governed by our Privacy Policy. If any state-specific provision conflicts with our Privacy Policy, the state-specific provision controls for that state resident.

TABLE OF CONTENTS:

A. GENERAL INFORMATION APPLICABLE UNDER THE STATE SPECIFIC STATUTES 2

B. CALIFORNIA 3

C. COLORADO……………………………………………………………………………………….6

D. CONNECTICUT……………………………………………………..…………………………….6

E. DELAWARE ………………………………………………………………………………………6

F. INDIANA ……………………………………………………………………………………….…7

G. IOWA….…………………………………………………………………………………………...7

H. KENTUCKY.………………………………………………………………………………………7

I. MARYLAND.……………………………………………………………………………………...8

J. MINNESOTA……………………………………………………………………………………...8

K. MONTANA………………………………………………………………………………………..8

L. NEBRASKA……………………………………………………………………………………….9

M. NEW HAMPSHIRE……………………………………………………………………………….9

N. NEW JERSEY………………………………………………………………………………….….9

O. OREGON……………………………………………………………………………….……...…10

P. RHODE ISLAND………………………………………………………………………………...10

Q. TENNESSEE……………………………………………………………………………………..10

R. TEXAS……………………………………………………………………………………………11

S. UTAH……………………………………………………………………………………………..11

T. VIRGINIA…………………………………………………………………………….…………..11

U. MAKING REQUESTS OR EXERCISING YOUR RIGHT(S) 12

V. APPEALS OF DENIED REQUESTS………………………………….…………………………12

W. CHANGES TO THIS STATE PRIVACY POLICY 12

X. CONTACT US 12

General Information APPLICABLE UNDER THE STATE PRIVACY LAWS

Subject to applicable law and certain limitations, if you reside in one of the states listed above, you may have the following rights in addition to those described in our Privacy Policy:

Right to know/access. You may request additional information about our collection, use, disclosure, sale, or sharing of your Personal Data, including the categories of Personal Data collected; the purposes for which it was collected, sold, or shared; the categories of sources; and the categories of third parties to whom we disclosed or with whom we shared Personal Data.

Right to opt-out of sales, sharing, and targeted advertising. We do not transfer your Personal Data to third parties in exchange for payment. However, we may provide Personal Data to third party partners, such as advertising partners, analytics providers, and social networks, who assist us in advertising and measuring our services. Because these parties may use the data we provide for their own purposes, our provision of data to these parties may be considered a “sale,” “sharing,” or “targeted advertising” under certain state laws. You can opt-out by enabling a recognized browser or device-based opt-out preference signal (such as Global Privacy Control), by visiting go.glp1genius.com/limit-sensitive-info, or by emailing [email protected].

Right to limit the use or sharing of Sensitive Personal Information. We may collect limited Sensitive Personal Information, specifically certain health-related information that you voluntarily provide to facilitate referrals to licensed medical providers or to tailor marketing related to your inquiry. We do not sell or share Sensitive Personal Data, and we do not use it to infer characteristics about you beyond limited, necessary purposes permitted by law. If we ever use or disclose Sensitive Personal Data beyond these purposes, you may exercise your right to limit such use and disclosure using the methods described in Section U.

Other state rights. Depending on your state, you may also have right to correct inaccuracies; request deletion; obtain a portable copy (data portability); opt out of profiling in furtherance of decisions that produce legal or similarly significant effects; and appeal a decision we make regarding your request.

Universal opt-out signals. Where required by law, we recognize and honor browser or device-based opt-out preference signals, including Global Privacy Control (“GPC”), as an opt-out of “sale,” “sharing,” and, where applicable, “targeted advertising,” for the browser or device sending the signal and, if reasonably possible and you are logged in, for your account.

Advertising and analytics technologies. We may use advertising and analytics technologies (such as Google Analytics, Google Ads, Meta Ads, and TikTok Ads) to measure performance and provide interest-based advertising. You can control data collection and use through browser settings, available add-ons, ad preferences, our site-level opt-out tools, and recognized universal opt-out signals where applicable.

CALIFORNIA

Any terms defined in the California Consumer Privacy Act, as amended by the California Privacy Rights Act, have the same meaning when used in this Section B.

Residents of California may have the right to:

Request we delete any of your Personal Information that we collected from you and still retain, subject to certain exceptions.

Direct us not to sell your Personal Information at any time.

As applicable under the California Privacy Rights Act, request we (i) correct inaccuracies in their Personal Information; and/or (ii) direct us not to use certain sensitive information.

Request that we provide your Personal Information in a portable and, to the extent technically feasible, readily usable format.

Request we disclose certain information to you about our collection, use, disclosure, and sale of your Personal Information over the past twelve (12) months. We do not sell any of your Personal Information nor transfer your personal data to third parties in exchange for payment. However, as noted below and in our Privacy Policy, we may provide your personal data to third party partners, such as advertising partners, analytics providers, and social networks, who assist us in advertising our products and services to you. Because these third parties may use the data we provide for their own purposes (such as to improve their ad delivery), our provision of data to these parties may be considered a data “sale” or “sharing” as those terms are defined under the CCPA and other applicable state privacy laws.

Within the past twelve (12) months, the following categories of Personal Information described in §1798.80(e) of the California Civil Code have been “sold” or “shared” (as defined under the CCPA) to third parties (including advertising partners) who assist us in advertising our services:

Identifiers (e.g., a device identifier)

Online activity information (e.g., information about devices and browsers across certain business sites that use the services and IP addresses associated with those devices, browsers, and usage data).

Geolocation Data (e.g., IP addresses).

You can opt-out of targeted advertising and any related data “sharing” by visiting[https://go.glp1genius.com/contact-us],[https://go.glp1genius.com/do-not-share-my-data] or by emailing [[email protected]].

Within the past twelve (12) months, we collected and/or disclosed (for business purposes) the following categories of Personal Information from users:

Category:

Category Examples:

Collected:

Disclosed:

Identifiers

A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other identifiers.

Yes

Yes. We may disclose this data, pursuant to applicable law, to third-party vendors, service providers, contractors, or agents who perform services on our behalf and require access to such information to do so. We may also disclose this data in connection with a business transfer or merger, or to law enforcement, courts, governments, and regulatory agencies.

Commercial information

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Yes

Internet or other similar network activity

Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.

Yes

Geolocation data

Physical location or movements.

Yes

Inferences drawn from other person information

Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Yes

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

A name, physical characteristics or description, address, number, driver’s license or state identification card number, or payment or any other financial information.

Some information included in this category may overlap with other categories.

Yes

Purpose of Collection: Where “Yes” is indicated under “Collected” above, we collect the Personal Information to assist us in providing the services, advertising and promoting the services, complying with law, and for related Business Purposes and Commercial Purposes as each of those terms are defined in § 1798.140 of the CCPA.

We will not discriminate against anyone exercising any of their rights under the CCPA.

We may collect limited Sensitive Personal Information as defined in § 7027(m) of the CCPA, when you voluntarily provide it to us to facilitate referrals to licensed medical providers or to tailor marketing related to your inquiry. We do not sell or share Sensitive Personal Information, and we do not use Sensitive Personal Information to infer characteristics about you beyond what is reasonably necessary to provide the services you request, to ensure security and integrity, to perform short-term, transient uses, to provide non-personalized advertising, or for other purposes permitted by California law.

You may request certain information regarding our disclosure of Personal Information to third parties for business purposes. All Personal Information will be retained in accordance with the CCPA and all other applicable governing laws.

You have the right to exercise your right to know and access, delete, and opt-out:

Right to Know and Access: You have the right to request from us: (i) the categories of Personal Information we have collected about you, the categories of sources from which the Personal Information is collected, the business purpose or commercial purpose for collecting the Personal Information, the categories of third parties with whom we share Personal Information, the categories of Personal Information we have shared and the reasons we shared it; and (ii) a copy of the specific pieces of Personal Information we have collected about you in the preceding twelve (12) months.

Right to Delete: You have the right to request that we delete the Personal Information we collect from you if applicable. In certain situations, we are not required to delete your Personal Information, such as to services requested by you, to comply with a legal obligation, to engage in research, to secure our Websites or other online services, or to otherwise use your Personal Information internally in a lawful manner that is compatible with the context in which you provided the information.

Right to Opt-Out: We recognize and honor GPC as an opt-out of “sale” or “sharing” under the CCPA. Please refer to Section U for additional opt-out methods.

As of July 1, 2025, we have received, complied, and denied the following number of requests for California residents in the preceding twelve (12) months:

Request

Received

Complied

Denied

Average Response Time

Request to Know

0 Days

Request to Delete

0 Days

Request to Opt-out

0 Days

COLORADO

Any terms defined in the Colorado Privacy Act have the same meaning when used in this Section C of this State Privacy Policy.

Residents of Colorado may have the right to:

Confirm whether we process their Personal Data;

Access and delete certain Personal Data;

Correct inaccuracies in their Personal Data, taking into account the information’s nature and processing purpose;

Data portability;

Opt-out of Personal Data processing for targeted advertising and sales;

Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects; and

Opt-in before we process Sensitive Data.

Please refer to Section A for more information or instructions related to your rights under this Section C. Please refer to Section U for opt-out information.

Connecticut

Any terms defined in the Connecticut Act Concerning Personal Data Privacy and Online Monitoring have the same meaning when used in this Section D of this State Privacy Policy:

Residents of Connecticut may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-out of the processing of Personal Data for purposes of targeted advertising, the sale of Personal Information, or profiling in furtherance of decisions that produce legal or similarly significant effects; and

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section D. Please refer to Section U for opt-out information.

Delaware

Any terms defined in the Delaware Personal Data Privacy Act have the same meaning when used in this Section E of this State Privacy Policy:

Residents of Delaware may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section E. Please refer to Section U for opt-out information.

Indiana

Any terms defined in the Indiana Consumer Data Protection Act have the same meaning when used in this Section F of this State Privacy Policy:

Residents of Indiana may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-out of the processing of Personal Data for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of decisions that produce legal or similarly significant effects; and

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section F. Please refer to Section U for opt-out information.

Iowa

Any terms defined in the Iowa Consumer Data Protection Act have the same meaning when used in this Section G of this State Privacy Policy:

Residents of Iowa may have the right to:

Confirm whether we process their Personal Data;

Access or delete certain Personal Data;

Data portability;

Opt-out of the processing of Personal Data; and

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section G. Please refer to Section U for opt-out information.

KENTUCKY

Any terms defined in the Kentucky Consumer Data Protection Act have the same meaning when used in this Section H of this State Privacy Policy:

Residents of Kentucky may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section H. Please refer to Section U for opt-out information.

MARYLAND

Any terms defined in the Maryland Online Data Privacy Act of 2024 have the same meaning when used in this Section I of this State Privacy Policy:

Residents of Maryland may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section I. Please refer to Section U for opt-out information.

MINNESOTA

Any terms defined in the Minnesota Consumer Data Protection Act have the same meaning when used in this Section J of this State Privacy Policy:

Residents of Minnesota may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section J. Please refer to Section U for opt-out information.

MONTANA

Any terms defined in the Montana Consumer Data Privacy Act have the same meaning when used in this Section K of this State Privacy Policy:

Residents of Montana may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section K. Please refer to Section U for opt-out information.

NEBRASKA

Any terms defined in the Nebraska Data Privacy Act have the same meaning when used in this Section L of this State Privacy Policy:

Residents of Nebraska may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section L. Please refer to Section U for opt-out information.

NEW HAMPSHIRE

Any terms defined in the New Hampshire Privacy Act have the same meaning when used in this Section M of this State Privacy Policy:

Residents of New Hampshire may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section M. Please refer to Section U for opt-out information.

NEW JERSEY

Any terms defined in the New Jersey Data Privacy Act have the same meaning when used in this Section N of this State Privacy Policy:

Residents of New Jersey may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section N. Please refer to Section U for opt-out information.

OREGON

Any terms defined in the Oregon Consumer Privacy Act have the same meaning when used in this Section O of this State Privacy Policy:

Residents of Oregon may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section O. Please refer to Section U for opt-out information.

RHODE ISLAND

Any terms defined in the Rhode Island Data Transparency and Privacy Protection Act have the same meaning when used in this Section P of this State Privacy Policy:

Rhode Island residents may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section P. Please refer to Section U for opt-out information.

TENNESSEE

Any terms defined in the Tennessee Information Protection Act have the same meaning when used in this Section Q of this State Privacy Policy:

Residents of Tennessee may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section Q. Please refer to Section U for opt-out information.

TEXAS

Any terms defined in the Texas Data Privacy and Security Act have the same meaning when used in this Section R of this State Privacy Policy.

Residents of Texas may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-in before we process Sensitive Personal Data.

Please refer to Section A for more information or instructions related to your rights under this Section R. Please refer to Section U for opt-out information.

UTAH

Any terms defined in the Utah Consumer Privacy Act have the same meaning when used in this Section S of this State Privacy Policy.

Residents of Utah may have the right to:

Confirm whether we process their Personal Data;

Access and delete certain Personal Data;

Data portability; and

Opt-out of Personal Data processing for targeted advertising and sales.

Please refer to Section A for more information or instructions related to your rights under this Section S. Please refer to Section U for opt-out information.

VIRGINIA

Any terms defined in the Virginia Consumer Data Protection Act have the same meaning when used in this Section T of this State Privacy Policy.

Residents of Virginia may have the right to:

Confirm whether we process their Personal Data;

Access, correct, or delete certain Personal Data;

Data portability;

Opt-out of Personal Data processing for targeted advertising and sales;

Correct inaccuracies in their Personal Data, taking into account the information’s nature and processing purpose; and

Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

Please refer to Section A for more information or instructions related to your rights under this Section T. Please refer to Section U for opt-out information.

MAKING REQUESTS OR EXERCISING YOUR RIGHT(S)

State residents, or their authorized agents, exercising their rights under state laws, including under the CCPA, may make verifiable requests by emailing us at [[email protected]] with “Opt-Out Rights” in the subject line or by visiting go.glp1genius.com/contact-us.

A request or exercise of your right(s) must provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized agent, and should include: (i) the state of which you are a resident; (ii) a description of your request/exercise of your right, with sufficient detail that allows us to properly understand, evaluate, and respond; and (iii) identifying personal information. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm your information.

We will only use your information provided in the request to verify the requestor’s identity or authority to make said request. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Appeals of denied requests

If we deny your privacy request (for example, a request to access, delete, correct, opt out of sale or sharing, or to limit the use of Sensitive Personal Information), you may appeal our decision. To submit an appeal, please use any of the methods listed in Section U and include “Privacy Rights Appeal” in your subject line or request header. We will review and respond to your appeal within the timeframe required by applicable state law and will provide a written explanation of our decision. If your appeal is denied, we will inform you of any further options for escalation available to you under applicable law, which may include contacting your state Attorney General or other regulatory authority.

CHANGES TO THIS STATE PRIVACY POLICY

We may from time to time change the Privacy Policy, but we will always post those changes on this page so that you are always aware of what information we collect, how we use it, and under what circumstances we disclose it. If we make material changes to this State Privacy Policy, we will notify you here, by e-mail, and/or by means of a notice on our Website.

CONTACT US

We welcome your comments and questions regarding our privacy policies. If you have any questions about this State Privacy Policy, please contact us at [email protected] or by visiting go.glp1genius.com/contact-us.