An information service. Not a clinic. No medical advice.See a doctor before any scalp treatmentPrices appear only with a source and a dateNo partner clinic yet, waitlist open in the USNo promises of results
Exosome Hair LossGet matched
Menu

Privacy Notice

What we collect, why, who sees it, how long we keep it and what you can do. We do not sell your details, and we share nothing with a clinic without your separate consent.

Version en-US-2026-10-15-3. Effective October 15, 2026.

Who we are

Pharma Coa S.L., 4354 collins avenue, Miami Beach , operates Exosome Hair Loss. Contact: [email protected]. In this notice, "we" means that company.

What we collect

  • The waitlist form: your name, mobile number, ZIP code, what you are looking into and, if you add it, your email. What you are looking into may say something about your health. We therefore handle it as consumer health data, and our Consumer Health Data Privacy Policy gives that part its own page.
  • A consent record: when you sent the form, which wording you saw (en-US-2026-10-15-3), that you said you were an adult, and your IP address cut short. The cut-short address only helps us block floods of sign-ups, and it is blanked after a day.
  • Page counts: a tiny message when a page opens or a button is pressed, carrying the page path and the referring site, with no cookies, no name and no full IP address. These counts are removed after 25 months.

Nothing else is collected from you through this site.

Why, and on what basis

We use the form details to keep you on a waitlist by state and to email you about it. We also use your mobile number to call or text you about it. Our basis is your consent, given with one box on the form that covers the waitlist, email, calls and texts. We keep a coded proof of those consents, and we use page counts to see which pages are read.

Who gets your details

For now, only us and the provider that hosts the site and keeps the data for us, under a contract that limits it to our instructions. No sale, and no advertising use. There is no partner clinic.

When that changes, so will this notice, and before a clinic is sent anything you will be asked twice over: a separate consent that names the clinic and, if it pays us for your contact, a separate signed authorization to sell, which you may revoke. Say no, and nothing leaves.

Calls and texts

The one consent box on the form covers phone contact too. The subject is your waitlist spot and clinics opening near you; it can be marketing, and it may use automated systems. Consent is not a condition of any purchase. To end the calls and texts, answer STOP, email [email protected], or use any other clear signal. All calls and texts stop promptly, at the latest within 10 business days, and we send one final text to confirm. Your number is kept in coded form on a do-not-contact list, so we do not start again. Contact hours are 8 a.m. to 8 p.m. where you live. Message and data rates may apply.

How long we keep it

  • Waitlist entry (name, mobile number, email, ZIP code, interest): removed automatically once 12 months have passed since you joined, by a clean-up that runs every day. Ask sooner and it goes sooner.
  • Cut-short IP address: blanked after 24 hours.
  • Page counts: removed after 25 months.
  • Proof of consent: kept for 3 years after the entry is removed. It consists of a scrambled fingerprint of your phone number and email that cannot be reversed, the dates and wording versions you accepted, the channels you picked and the adult confirmation. No name, ZIP code, interest or readable contact detail is in it. Its job is to show what you agreed to and to make a withdrawal stick.
  • Short-lived backups may sit at our hosting provider after a deletion.

Your rights by state

Where you live may give you rights to know what we hold, get a copy, correct it, delete it, withdraw consent and appeal. Write to [email protected]: we reply within 45 days and delete within 30 days once your request is confirmed. In Washington, for instance, the My Health My Data Act asks for separate consent to collect consumer health data and a separate authorization to sell it. The form carries the first, and the second would come before any sale. A refusal can be appealed by replying to it, and the Consumer Health Data Privacy Policy links to the Attorney General complaint pages.

Privacy choices by state

We do not sell personal information. We do not share it for cross-context behavioral advertising or use it for targeted advertising. We set no advertising cookies, so there is no opt-out switch to flip. If you want us to delete your details or stop contacting you, write to [email protected] with the subject "Privacy choice".

Children

This site is for adults. The form asks you to confirm that you are 18 or older. We do not knowingly collect details from anyone under 18, and if we find we have, we delete them.

Security

The site is served over HTTPS. Form details are stored by a service provider and are available only to the people who run the waitlist. No system is perfectly secure.

Changes

If we change this notice or a consent text, we will change the version number above and ask again where the law requires it.