State Privacy Law Addendum

This State Privacy Law Addendum ("Addendum") supplements the Harbor Privacy Policy and applies solely to residents of certain U.S. states that have enacted comprehensive privacy or health data protection laws. This Addendum does not apply to individuals who reside outside of those states.

This Addendum is incorporated into and forms part of Harbor's Privacy Policy. Capitalized terms not defined here have the meanings set forth in the Privacy Policy or Terms of Service.

1. Purpose of This Addendum

Certain U.S. states provide residents with additional rights regarding their personal information, including health-related data. This Addendum explains:

• Which states are covered
• The types of rights available under applicable state laws
• How Harbor responds to and processes privacy requests
• Where to find state-specific privacy notices

If you reside in one of the states listed below, the corresponding state notice applies to you in addition to the main Privacy Policy.

2. States Covered by This Addendum

As of the Effective Date, this Addendum applies to residents of the following states:

• California
• Virginia
• Colorado
• Connecticut
• Utah
• Washington

Harbor may update this Addendum from time to time as additional state privacy laws take effect.

3. Summary of State Privacy Rights

Depending on your state of residence, you may have the right to:

• Request access to the personal information we collect about you
• Request correction of inaccurate personal information
• Request deletion of certain personal information
• Opt out of certain forms of targeted advertising, where applicable
• Limit or withdraw consent for the processing of certain data, including health-related data
• Appeal a decision if we deny a privacy rights request

The scope and availability of these rights vary by state and are subject to legal exceptions.

4. Exercising Your Privacy Rights

To submit a privacy-related request, please contact us at:

Email: legal@visitharbor.com

Please include:

• Your full name
• The email address associated with your account
• Your state of residence
• A description of your request

We may require verification of your identity before processing your request. We will respond within 14 days, as required or permitted by applicable law.

If your request is denied, you may have the right to appeal the decision. Instructions for submitting an appeal will be provided in our response.

5. Sale and Sharing of Data

Harbor does not sell consumer health data.

Harbor may share limited personal data for advertising, analytics, or operational purposes as permitted by applicable law and as described in the Privacy Policy.

Harbor does not use data brokers and does not transfer personal data internationally at this time.

6. Relationship to Healthcare Providers

Harbor operates a technology platform and does not provide medical care. Licensed healthcare providers accessed through the platform control medical records and clinical decision-making. Certain health information may be subject to additional protections under state health privacy laws.

7. State-Specific Privacy Notices

Additional details regarding your rights under specific state laws are available at the links below:

• California Resident Privacy Notice
• Virginia Resident Privacy Notice
• Colorado Resident Privacy Notice
• Connecticut Resident Privacy Notice
• Utah Resident Privacy Notice
• My Health My Data Privacy Policy (Washington Consumer Health Data Privacy Notice)

Each notice provides information required by the applicable state law and should be read together with Harbor's Privacy Policy and this Addendum.

8. Changes to This Addendum

We may update this Addendum from time to time to reflect changes in applicable law or our data practices. Any updates will be posted with a revised effective date.

9. Contact Information

If you have questions about this Addendum or your privacy rights, contact:

SC Studios Inc.
169 Madison Ave, STE 38418
New York, NY 10016
Email: legal@visitharbor.com