Privacy Policy

1. What information do we collect?

In Short: We collect limited usage data automatically and any personal information you choose to send us.

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you contact us by email, express an interest in obtaining information about us or our products, or otherwise interact with us. This may include:

• Names
• Email addresses
• Mobile phone numbers, if you give us one and consent to receive text messages
• Company name and job title, if provided
• The contents of your communications and messages

Sensitive Information. We do not process sensitive information through this website. Please do not send us health information by email; if you are a Hale user, use the Hale app instead.

Information automatically collected

When you visit our website, we automatically collect certain information to understand how the site is used. Our analytics provider, Statsmatic, records:

• Pages visited and referring websites
• Time spent on each page
• A random visitor identifier stored in your browser

Statsmatic does not use cookies. To count returning visitors, it stores a randomly generated identifier in your browser's local storage. This identifier is not linked to your name, email, or any other information about you, and it is not used to track you across other websites. You can remove it at any time by clearing your browser's site data. If your browser sends a Do-Not-Track signal, Statsmatic does not run at all. Our analytics, hosting, and network providers also receive your IP address and browser details when your browser connects to them, and may record them in server logs to deliver the website and protect it from abuse.

2. How do we process your information?

In Short: We process your information to operate and improve our website, respond to you, keep our Services secure, and comply with law.

We process your personal information for the following reasons:

• To operate and deliver our website
• To respond to inquiries and communicate with you
• To understand aggregate usage trends and improve our website
• To protect our Services, including detecting and preventing fraud and abuse
• To comply with legal obligations

3. What legal bases do we rely on to process your personal information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law.

We may process your information where you have given us specific permission (i.e., express consent), where your permission can be inferred (i.e., implied consent, such as when you email us and we reply), where it is necessary for our legitimate interests in operating and securing our website, or where we are required to do so by law.

4. When and with whom do we share your personal information?

In Short: We may share information in specific situations described in this section and/or with the following third parties. Mobile numbers and SMS consent are never shared with anyone.

We may need to share your personal information in the following situations:

No mobile information is shared. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories below exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties.

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. Mobile numbers and SMS consent data are excluded from any such transfer.

Affiliates. We may share your information with our affiliates, including Hale Health, in which case we will require those affiliates to honor this Privacy Notice. This does not include mobile numbers or SMS consent data, which are never shared with affiliates.

We use the following service providers to operate this website:

• Statsmatic. Privacy-first website analytics
• Google Fonts. Web font delivery
• Hosting and network providers. Website hosting, content delivery, and security
• Email provider. Receiving and responding to messages you send us
• SMS provider. Delivering text messages you have consented to receive, and nothing else

We do not sell, rent, or trade your personal information.

5. How do we handle text messages?

In Short: If you ask us to text you, we use your number only for that. We never share it.

If you provide your mobile number and consent to receive text messages from us, we use that number only to send the messages you asked for.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories described in this notice exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties.

We share your mobile number only with the messaging provider that delivers the messages on our behalf, and only so that it can deliver them. It may not use your number for any other purpose.

Message and data rates may apply. Message frequency varies. Reply STOP at any time to cancel, or HELP for help. Opting out of text messages does not opt you out of other communications you have asked for.

6. What is our stance on third-party websites?

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to, but are not affiliated with, our Services.

The Services may link to third-party websites, online services, or applications that are not affiliated with us. We do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. The inclusion of a link to a third-party website does not imply an endorsement by us. Any data collected by third parties is not covered by this Privacy Notice. You should review the policies of such third parties and contact them directly to respond to your questions.

7. Do we use cookies and other tracking technologies?

In Short: We do not use cookies, advertising pixels, or cross-site tracking. Our analytics store one random identifier in your browser.

Our website does not set cookies and does not use advertising or remarketing technologies. Our analytics provider, Statsmatic, stores a single randomly generated visitor identifier in your browser's local storage so that we can distinguish new visitors from returning ones. It contains no personal information and is used only to produce aggregate statistics about our own website.

You can prevent this by enabling your browser's Do-Not-Track setting, which stops our analytics from running, or by clearing your browser's site data for our website.

8. How does this notice relate to Hale?

In Short: Hale has its own privacy policy, which governs your health information.

Horizon Group develops Hale, a personal health AI assistant available at https://hale.med. This website only describes Hale; it does not collect any of the health information you store in Hale. If you use Hale, please review the Hale Privacy Policy, which explains how Hale protects your health information, including its HIPAA-related practices.

9. Is your information transferred internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

We are based in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed by us and by the third parties with whom we share it, in the United States and other countries.

10. How long do we keep your information?

In Short: We keep your information only as long as we need it for the purposes described in this notice.

Requesting Early Deletion

You may request deletion of your personal information at any time by contacting us at hello@horizon-group.io. We will process deletion requests within the timeframes specified in Section 14.

11. How do we keep your information safe?

In Short: We protect your personal information through technical and organizational security measures.

Technical Security Measures

• Encryption in Transit: All data transmitted between you and our website is encrypted using TLS 1.2 or higher
• Access Controls: Multi-factor authentication for administrative access and the principle of least privilege
• Infrastructure Security: Regular security patches, firewall protection, and DDoS protection

Data Breach Response

In the event of a security breach affecting your personal information, we will:

• Notify you within seventy-two (72) hours of confirming the breach
• Provide details about the nature and scope of the breach
• Describe measures taken to address the breach
• Cooperate with regulatory authorities as required

Limitations

Despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

12. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to persons under 18 years of age.

Our Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from persons under 18. If we learn we have collected personal information from a person under 18, we will delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@horizon-group.io.

13. What are your privacy rights?

In Short: You may request access to, correction of, or deletion of your personal information at any time.

Depending on where you live, you may have the right to request access to the personal information we hold about you, ask us to correct or delete it, object to or restrict its processing, and withdraw any consent you have given. If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority.

To exercise any of these rights, contact us at hello@horizon-group.io.

14. Controls for Do-Not-Track features

Most web browsers include a Do-Not-Track ("DNT") feature or setting you can activate to signal your preference not to have data about your online browsing activities monitored and collected. We honor DNT signals: when your browser sends one, our website analytics do not run and no analytics data is collected about your visit. We also honor Global Privacy Control (GPC) signals as described below.

15. Do United States residents have specific privacy rights?

In Short: If you are a resident of California or other US states with privacy laws, you have specific rights regarding your personal information.

California Residents (CCPA/CPRA)

You have the right to:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

We honor Global Privacy Control (GPC) signals as a valid opt-out request.

Categories of Personal Information

In the preceding 12 months, we may have collected the following categories of personal information:

Other US State Privacy Rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive privacy law, you may have the right to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of targeted advertising, sale of personal data, and profiling.

How to Exercise Your Rights

Email us at hello@horizon-group.io with the subject line "Privacy Request - [Your State]" and include your name, state of residence, and the specific right you wish to exercise. We may need to verify your identity before fulfilling your request. You may also designate an authorized agent to submit a request on your behalf. We will respond within forty-five (45) days. If we need more time (up to an additional 45 days), we will notify you of the reason and extension period in writing.

Right to Appeal

If we decline to take action on your request, you may appeal by emailing us at hello@horizon-group.io with the subject line "Privacy Appeal." If your appeal is denied, you may contact your state's Attorney General.

16. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date and will be effective as soon as it is accessible. If we make material changes, we may notify you by prominently posting a notice of such changes on our website.

17. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at hello@horizon-group.io or contact us by post at:

18. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To make a request, please email us at hello@horizon-group.io.