Privacy Policy | Gold Standard Regenerative
Legal

Privacy Policy

Version 2.0 · Effective June 25, 2026

1. About GSS

GSS is a Utah limited liability company that provides marketing, education, coordination, and concierge services in connection with regenerative medicine, aesthetic services, and medical tourism. GSS is not a medical provider, hospital, clinic, laboratory, pharmacy, telemedicine provider, or any other type of healthcare facility. GSS is not a HIPAA covered entity or business associate. All medical care is provided by independent licensed providers and facilities located outside the United States.

2. Scope of This Policy

This Privacy Policy applies to information we collect through the Site, through our intake forms, through our email and SMS communications, through our customer service interactions, and through marketing campaigns and lead generation activities. This Privacy Policy does not apply to:

3. Information We Collect

3.1 Information You Provide Directly

When you contact us, submit an intake form, request information, or otherwise communicate with us, you may provide:

3.2 Information Collected Automatically

When you use the Site, GSS and its service providers may collect:

3.3 Information From Third Parties

We may receive information about you from:

4. Sensitive Personal Information

Some information we collect, including health-related information, sexual orientation or sex-life information, government-issued identification, financial account information, and precise geolocation, may be classified as "sensitive personal information," "sensitive data," or "special category data" under applicable law. We collect this information only with your knowledge and only to the extent reasonably necessary for the purposes described in this Policy, and we apply heightened protections to it. Where applicable law requires, we will obtain your separate, affirmative consent before collecting or using sensitive personal information.

We do not use sensitive personal information for purposes other than: (a) coordinating the services you have requested; (b) communicating with you about those services; and (c) complying with our legal obligations. We do not sell sensitive personal information.

5. Purposes for Which We Use Your Information

We use information to:

6. How We Share Information

6.1 Service Providers

We share information with vendors and service providers that perform services on our behalf, including payment processors, customer relationship management providers, email and SMS service providers, hosting and information technology providers, analytics providers, advertising platforms, and professional advisors (legal, accounting, insurance). These providers are bound by confidentiality obligations and are permitted to use the information only as needed to perform their services for GSS.

6.2 Independent Foreign Medical Providers

With your authorization, we will share intake and contact information with the independent foreign medical provider you select. Once shared, that provider is the controller of the information and processes it under its own privacy practices and the laws of its jurisdiction (typically Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, "LFPDPPP," for Mexican providers).

6.3 Advertising and Analytics Partners

We share certain online identifiers and behavioral data with advertising and analytics partners (e.g., Meta, Google) for the purposes described in Section 10 and in our Cookie Policy. Where applicable law requires, we will obtain your consent before sharing data with these partners. Depending on the laws of your state of residence, this sharing may be classified as a "sale" or "sharing" of personal information for which you have an opt-out right (see Section 11).

6.4 Legal and Safety

We may disclose information when we believe in good faith that disclosure is necessary to: (a) comply with applicable law or a lawful request from a governmental authority; (b) protect the rights, property, or safety of GSS or others; (c) investigate fraud or violations of our terms; or (d) respond to a subpoena, court order, or other legal process.

6.5 Business Transfers

We may share information in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or other business transaction. We will provide notice on the Site of any change of control affecting your information.

7. Cross-Border Data Transfers

Information you provide may be transferred to, stored in, and processed in countries other than your country of residence, including Mexico (for transfers to your selected medical provider) and the United States (for transfers among GSS systems and U.S.-based service providers). Data protection laws in these countries may differ from those in your home jurisdiction. By providing information to us, you understand and consent to these transfers.

8. Data Retention

We retain personal information only as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it was collected. When information is no longer needed, we securely delete or de-identify it. You may request deletion of your information in accordance with Section 11.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, and destruction. No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for safeguarding any account credentials you maintain with us and for the security of the devices you use to interact with the Site. If we experience a data security incident affecting your personal information, we will notify you in accordance with applicable law.

10. Cookies, Pixels, and Tracking Technologies

The Site uses cookies, pixels, software development kits, and similar tracking technologies. These technologies allow us and our partners to recognize you on return visits; maintain your session and preferences; analyze Site traffic and performance; measure the effectiveness of advertising; and show you relevant advertising on the Site and on third-party platforms.

Third-party tracking technologies in use on the Site may include (without limitation): Google Analytics, Google Ads conversion tracking, the Meta Pixel, and other advertising and analytics tools. For a current list of tracking technologies, the categories of data they collect, their retention periods, and how to manage your preferences, please see our Cookie Policy.

Where applicable law requires consent before placing non-essential tracking technologies, GSS will request your consent through a cookie consent banner. You may withdraw your consent at any time.

11. Your Rights and Choices

11.1 Universal Choices

Regardless of where you live, you may:

11.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

GSS does not "sell" personal information in exchange for money. However, our use of certain advertising technologies (including the Meta Pixel and Google Ads) may constitute "sharing" of personal information for cross-context behavioral advertising under California law. You may opt out of this sharing by clicking the "Do Not Sell or Share My Personal Information" link in the Site footer, by managing your cookie preferences, or by enabling a Global Privacy Control signal in your browser.

To exercise other rights, please contact us at coo@goldstandardregenerative.com or call (385) 535-6027. We will verify your request and respond within forty-five (45) days (which may be extended by an additional forty-five (45) days where reasonably necessary). You may designate an authorized agent in writing to make requests on your behalf.

Notice at Collection (California). We collect the categories of personal information described in Section 3 for the purposes described in Section 5. We do not collect personal information for purposes other than those disclosed in this Policy. We retain personal information for the periods described in Section 8. We do not knowingly sell or share the personal information of consumers under sixteen (16) years of age.

11.3 Residents of Other States With Comprehensive Privacy Laws

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Kentucky, Rhode Island, Indiana, or any other state with a comprehensive consumer privacy law in effect, you may have the following rights, subject to the limitations of your state's law:

To exercise these rights, please contact us at coo@goldstandardregenerative.com or call (385) 535-6027. We will verify your request and respond within the time period required by your state's law (typically forty-five (45) days, with possible extension). If we deny your request, you may appeal our decision; instructions will be provided with our response. If your appeal is denied, you may contact your state attorney general to submit a complaint.

11.4 Global Privacy Control and Do Not Track Signals

GSS honors Global Privacy Control ("GPC") signals broadcast by your browser as an opt-out of sale and sharing for cross-context behavioral advertising, in jurisdictions where GPC is recognized as a legally binding opt-out mechanism. GSS does not currently respond to Do Not Track ("DNT") browser signals, because no industry standard for honoring DNT has been adopted.

11.5 Nevada Residents

Nevada residents may submit a verified request to opt out of the sale of certain "covered information" under Nevada Revised Statutes Chapter 603A. While GSS does not sell covered information as defined under Nevada law, Nevada residents may submit such a request to coo@goldstandardregenerative.com.

12. Children's Privacy

The Site is intended for adults aged eighteen (18) and older. GSS does not knowingly collect personal information from anyone under the age of eighteen (18). If we learn that we have collected personal information from a person under eighteen (18), we will delete that information promptly. If you believe we have collected information from a person under eighteen (18), please contact us at coo@goldstandardregenerative.com.

13. HIPAA Notice

GSS is not a "covered entity" or a "business associate" as those terms are defined under the federal Health Insurance Portability and Accountability Act ("HIPAA") and its implementing regulations. HIPAA does not govern GSS's collection, use, or disclosure of your information. Information you provide to GSS is governed by this Privacy Policy and applicable state privacy law. Independent foreign medical providers to whom you are referred typically are not subject to HIPAA, because they are not U.S.-based covered entities. The privacy of information once it is in the possession of a foreign medical provider is governed by that provider's policies and the laws of its jurisdiction.

14. Third-Party Links and Services

The Site may contain links to third-party websites and services. We are not responsible for the privacy practices of those parties. We encourage you to review their privacy policies before submitting information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Material changes will be communicated through a notice on the Site or, where required, by direct notice to you. Your continued use of the Site after a change takes effect constitutes your acceptance of the revised Policy.

16. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights:

Global Strategic Solutions, LLC
Attn: Privacy
Provo, Utah
Email: coo@goldstandardregenerative.com
Telephone: (385) 535-6027