Privacy Policy

Effective date: 10/01/2026
Last updated: 11/10/2026

Your privacy is important to us. It is Belite Medical Center’s policy to respect your privacy and comply
with any applicable law and regulation regarding any personal information we may collect about you,
including across our website, https://belite.com/, and other sites we own and operate.

Personal information is any information about you which can be used to identify you. This includes
information about you as a person (such as name, address, and date of birth), your devices, payment
details, and even information about how you use a website or online service.

In the event our site contains links to third-party sites and services, please be aware that those sites
and services have their own privacy policies. After following a link to any third-party content, you
should read their posted privacy policy information about how they collect and use personal information.
This Privacy Policy does not apply to any of your activities after you leave our site.

SMS Data Collection

• SMS Data Collection: We collect phone numbers and message content for SMS communications. Your phone number is used solely for SMS messages about your care and our services, including appointment scheduling and reminders, follow-up care information, office logistics, billing questions, general healthcare updates, and promotional offers related to our medical services.
• Opt-Out Mechanism: You may opt out of SMS communications at any time by replying STOP to any message or by contacting us at 703-359-9200 or belitemed@gmail.com.
• Data Retention: SMS communications and associated data are retained for as long as required by law and then deleted.
• TCPA Compliance: We comply with the Telephone Consumer Protection Act (TCPA) and maintain a list of numbers requesting not to receive marketing messages.
• Third-Party Sharing: All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

Information We Collect

Information we collect falls into one of two categories: “voluntarily provided” information and
“automatically collected” information.

“Voluntarily provided” information refers to any information you knowingly and actively provide us when
using or participating in any of our services and promotions.

“Automatically collected” information refers to any information automatically sent by your devices in the
course of accessing our products and services.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web
browser. It may include your device’s Internet Protocol (IP) address, your browser type and version, the
pages you visit, the time and date of your visit, the time spent on each page, and other details about your
visit.

Additionally, if you encounter certain errors while using the site, we may automatically collect data about
the error and the circumstances surrounding its occurrence. This data may include technical details about
your device, what you were trying to do when the error happened, and other technical information relating
to the problem. You may or may not receive notice of such errors, even in the moment they occur, that they
have occurred, or what the nature of the error is.

Please be aware that while this information may not be personally identifying by itself, it may be possible
to combine it with other data to personally identify individual persons.

Personal Information

We may ask for personal information — for example, when you submit content to us or when you contact us —
which may include one or more of the following:

• Name
• Email
• Phone/mobile number

Legitimate Reasons for Processing Your Personal Information

We only collect and use your personal information when we have a legitimate reason for doing so. In which
instance, we only collect personal information that is reasonably necessary to provide our services to you.

Collection and Use of Information

We may collect personal information from you when you do any of the following on our website:

• Use a mobile device or web browser to access our content
• Contact us via email, social media, or on any similar technologies
• When you mention us on social media

We may collect, hold, use, and disclose information for the following purposes, and personal information
will not be further processed in a manner that is incompatible with these purposes:

• to provide you with our platform’s core features and services
• to enable you to customise or personalise your experience of our website
• for analytics, market research, and business development, including to operate and improve our
website, associated applications, and associated social media platforms
• to deliver you personalized and targeted advertising tailored to your interests

We may combine voluntarily provided and automatically collected personal information with general
information or research data we receive from other trusted sources. For example, our marketing and market
research activities may uncover data and insights, which we may combine with information about how visitors
use our site to improve our site and your experience on it.

Cookies and Other Tracking Technologies

We and our service providers use cookies, pixels, and similar tracking technologies to operate the site,
understand how it is used, and, where you have consented, to measure and personalize advertising.

We sort these technologies into four categories:

1. Necessary — required for the site to function and to remember your cookie choice. These cannot be
turned off. Example: our cookie-consent preference cookie.

2. Analytics — help us understand how visitors use the site (pages viewed, time on site, general
location by IP). These are only set after you consent.
• Google Analytics (Universal Analytics property UA-233182576-1 and GA4 property G-LL72C7348K) —
sets _ga, _gid, _ga_LL72C7348K, _gat_gtag_UA_233182576_1. Retention: up to 14 months.
• TruConversion — visitor behavior/heatmap analytics (app.truconversion.com).

3. Advertising / Measurement — used to measure and, where consented, personalize ads.
• Google Ads / Google Tag Manager conversion tracking (container GTM-PH965MC, ad account
AW-1002612421) — sets _gcl_au and communicates with googleads.g.doubleclick.net to record
ad-conversion and remarketing signals. Retention: up to 90 days.

4. Functional — enable specific on-site features.
• Trustindex — displays our Google review widget (cdn.trustindex.io) and may set cookies to
cache reviews and detect repeat visits.
• Icegram — powers the on-site “Text BeLite” popup/messenger bar (does not set third-party
advertising cookies, but records interaction with the popup).

Your choice: A cookie banner appears on your first visit. Choosing “Accept All” enables Analytics,
Advertising, and Functional cookies as described above. Not Accepting keeps only Necessary cookies active.

Third-party booking tools: Scheduling an appointment through our “Book Appointment” links takes you to
SimplyBook.me (belitecom.simplybook.me) which is
operated by third party on their own domains, with their own cookies and privacy policies, which we do not
control. Please review those companies’ privacy policies before booking.

Notice at Collection: Sensitive Personal Information

Some information we collect through the analytics and advertising cookies described above (such as cookie
or device identifiers combined with your interest in our services) may be considered “sensitive personal
information,” or a “sale” or “share” of personal information, under California, Colorado, Connecticut, and
Virginia law, even though we do not sell information for money. You can opt out of this at any time by sending a Global Privacy Control (GPC) signal from your browser,
which we treat as a valid opt-out request.

We do not operate any form, questionnaire, or intake tool on this website that collects health information —
our site has no fields beyond its search box, and every “Book Appointment” link takes you to a separate
scheduling site (SimplyBook.me) outside our control. Because this site is about weight-loss medical
treatment, however, the analytics and advertising cookies described above could still be treated by some
state laws (e.g., Washington’s My Health My Data Act) as sharing an inference about your health interests
with Google — the opt-out above applies to that as well.

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it
within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure,
copying, use or modification.

Although we will do our best to protect the personal information you provide to us, we advise that no method
of electronic transmission or storage is 100% secure and no one can guarantee absolute data security.

You are responsible for selecting any password and its overall security strength, ensuring the security of
your own information within the bounds of our services. For example, ensuring you do not make your personal
information publicly available via our platform.

How Long We Keep Your Personal Information

We keep your personal information only for as long as we need to. This time period may depend on what we
are using your information for, in accordance with this privacy policy. For example, if you have provided us
with personal information such as an email address when contacting us about a specific enquiry, we may
retain this information for the duration of your enquiry remaining open as well as for our own records so
we may effectively address similar enquiries in future. If your personal information is no longer required
for this purpose, we will delete it or make it anonymous by removing all details that identify you.

However, if necessary, we may retain your personal information for our compliance with a legal, accounting,
or reporting obligation or for archiving purposes in the public interest, scientific, or historical research
purposes or statistical purposes.

Age Restrictions and Children’s Privacy

Our services are intended for adults seeking weight-loss and related medical care. We do not knowingly
direct our services to, or collect personal information from, anyone under the age of 18, and we do not
knowingly collect personal information about children under the age of 13.

Disclosure of Personal Information to Third Parties

We may disclose personal information to:

• a parent, subsidiary or affiliate of our company
• third-party service providers for the purpose of enabling them to provide their services, including
(without limitation) IT service providers, data storage, hosting and server providers, analytics,
error loggers, debt collectors, maintenance or problem-solving providers, professional advisors, and
payment systems operators
• our employees, contractors, and/or related entities
• our existing or potential agents or business partners
• credit reporting agencies, courts, tribunals, and regulatory authorities, in the event you fail to pay
for goods or services we have provided to you
• courts, tribunals, regulatory authorities, and law enforcement officers, as required by law, in
connection with any actual or prospective legal proceedings, or in order to establish, exercise, or
defend our legal rights
• third parties, including agents or sub-contractors who assist us in providing information, products,
services, or direct marketing to you
• third parties to collect and process data
• an entity that buys, or to which we transfer all or substantially all of our assets and business

Third parties we currently use:

• Google (Google Analytics, Google Tag Manager, Google Ads/DoubleClick) — analytics and ad measurement
• TruConversion — visitor behavior analytics
• Trustindex — Google review display widget
• Icegram — on-site messaging/popup widget
• SimplyBook.me — third-party appointment scheduling
• Klara — HIPAA-compliant patient messaging
• MailChimp / Constant Contact — email marketing (for subscribers who opt in)

Your Rights and Controlling Your Personal Information

Your choice: By providing personal information to us, you understand we will collect, hold, use, and
disclose your personal information in accordance with this privacy policy. You do not have to provide
personal information to us, however, if you do not, it may affect your use of our website or the products
and/or services offered on or through it.

Information from third parties: If we receive personal information about you from a third party, we will
protect it as set out in this privacy policy. If you are a third party providing personal information about
somebody else, you represent and warrant that you have such person’s consent to provide the personal
information to us.

Marketing permission: If you have previously agreed to us using your personal information for direct
marketing purposes, you may change your mind at any time by contacting us using the details below.

Access: You may request details of the personal information that we hold about you.

Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete,
irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take
reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.

Non-discrimination: We will not discriminate against you for exercising any of your rights over your
personal information. Unless your personal information is required to provide you with a particular service
or offer (for example providing user support), we will not deny you goods or services and/or charge you
different prices or rates for goods or services, including through granting discounts or other benefits, or
imposing penalties, or provide you with a different level or quality of goods or services.

Notification of data breaches: We will comply with laws applicable to us in respect of any data breach.

Complaints: If you believe that we have breached a relevant data protection law and wish to make a
complaint, please contact us using the details below and provide us with full details of the alleged
breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome
of our investigation and the steps we will take to deal with your complaint. You also have the right to
contact a regulatory body or data protection authority in relation to your complaint.

Opt out of communications: You may opt out of receiving communications from us, including marketing and
promotional messages, at any time. To do so, use the opt-out facilities provided in the communication. For
example, you can click the “unsubscribe” link included in any marketing email we send you, reply “STOP” or
“UNSUBSCRIBE” to any SMS messages we send you, or contact us directly using the contact information provided
in this privacy policy. In certain cases, we may request additional information to verify your identity
before processing your opt-out request.

Please be aware that even if you opt out of communications, we may still contact you when necessary for
non-promotional purposes, including, but not limited to, managing your account, responding to service
inquiries, or providing important updates related to your use of our services.

We do not share mobile phone numbers, text messaging originator data, or text messaging consent data with
third parties or affiliates, excluding aggregators and providers of the text message services.

Business Transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we
would include data, including your personal information, among the assets transferred to any parties who
acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may, to the
extent permitted by applicable law, continue to use your personal information according to this policy,
which they will be required to assume as it is the basis for any ownership or use rights we have over such
information.

Limits of Our Policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control
over the content and policies of those sites, and cannot accept responsibility or liability for their
respective privacy practices.

Changes to This Policy

At our discretion, we may change our privacy policy to reflect updates to our business processes, current
acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we
will post the changes here at the same link by which you are accessing this privacy policy.

If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as
applicable, any new uses of your personal information.

Additional Disclosures for U.S. States Privacy Law Compliance

The following section includes provisions that comply with the privacy laws of these states (California,
Colorado, Delaware, Florida, Virginia, and Utah) and is applicable only to the residents of those states.
Specific references to a particular state (in a heading or in the text) are only a reference to that state’s
law and applies only to that state’s residents. Non-state specific language applies to all of the states
listed above.

Do Not Track / Global Privacy Control

Some browsers send a “Do Not Track” signal; we do not currently respond to that legacy signal. However,
where our cookie-consent tool detects a Global Privacy Control (GPC) signal from your browser, we treat it
as a valid request to opt out of the sale/sharing of your personal information and the use of Analytics and
Advertising cookies described above, consistent with Virginia, California, Colorado, and Connecticut law.

We adhere to the standards outlined in this privacy policy, ensuring we collect and process personal
information lawfully, fairly, transparently, and with legitimate, legal reasons for doing so.

California Privacy Laws – CPPA

Under California Civil Code Section 1798.83, if you live in California and your business relationship with
us is mainly for personal, family, or household purposes, you may ask us about the information we release to
other organizations for their marketing purposes. To make such a request, please contact us using the
details provided in this privacy policy with “Request for California privacy information” in the subject
line. You may make this type of request once every calendar year. We will email you a list of categories of
personal information we revealed to other organisations for their marketing purposes in the last calendar
year, along with their names and addresses. Not all personal information shared in this way is covered by
Section 1798.83 of the California Civil Code.

California Notice of Collection

In the past 12 months, we have collected the following categories of personal information enumerated in the
CCPA:

• Identifiers, such as name, email address, phone number, account name, IP address, and an ID or number
assigned to your account.
• Internet activity, such as your interactions with our service.
• Geolocation data.

For more information on information we collect, including the sources we receive information from, review
the “Information We Collect” section. We collect and use these categories of personal information for the
business purposes described in the “Collection and Use of Information” section, including to provide and
manage our Service.

Right to Know and Delete

You have rights to delete your personal information we collected and know certain information about our
data practices in the preceding 12 months. In particular, you have the right to request the following from
us:

• The categories of personal information we have collected about you;
• The categories of sources from which the personal information was collected;
• The categories of personal information about you we disclosed for a business purpose or sold;
• The categories of third parties to whom the personal information was disclosed for a business purpose
or sold;
• The business or commercial purpose for collecting or selling the personal information; and
• The specific pieces of personal information we have collected about you.

To exercise any of these rights, please contact us using the details provided in this privacy policy.

Shine the Light

In addition to the rights discussed above, you have the right to request information from us regarding the
manner in which we share certain personal information as defined by applicable statute with third parties
and affiliates for their own direct marketing purposes.

To receive this information, send us a request using the contact details provided in this privacy policy.
Requests must include “Privacy Rights Request” in the first line of the description and include your name,
street address, city, state, and ZIP code.

Contact Us

For any questions or concerns regarding your privacy, you may contact us using the following details:

Belite Medical Center
belitemed@gmail.com
https://belite.com/privacy-policy/