Legal

Privacy Policy

Last Updated: March 9, 2026  |  Effective Date: March 9, 2026

CoRise ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or interact with us. This policy complies with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the California Online Privacy Protection Act (CalOPPA), and other applicable federal and state laws.

1. Information We Collect

We collect the following types of personal information: Information You Provide Directly: • Full name, email address, phone number • Professional license type and credentials • Practice type and specialty areas • Tour booking preferences and scheduling information • Membership inquiry details • Messages, comments, or other communications you send us • Payment and billing information (processed securely through third-party providers) Information Collected Automatically: • IP address, browser type, device information, and operating system • Pages visited, time spent on pages, and navigation paths • Referring website URLs • Cookies and similar tracking technologies • Location data (city/region level based on IP) Information from Third Parties: • Analytics providers (e.g., Google Analytics) • Payment processors • Marketing and advertising platforms

2. How We Use Your Information

We use the personal information we collect for the following purposes: • Service Delivery: To process tour bookings, membership inquiries, and provide our coworking and therapy room rental services • Communications: To respond to your inquiries, send booking confirmations, and provide customer support • Marketing: To send promotional materials, newsletters, and updates about our services (with your consent) • Improvement: To analyze website usage, improve our services, and enhance user experience • Legal Compliance: To comply with applicable laws, regulations, and legal processes • Safety & Security: To protect against fraud, unauthorized access, and other security threats • Business Operations: To manage our facilities, process payments, and maintain records

3. Legal Basis for Processing (CCPA/CPRA Compliance)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information. Categories of Personal Information Collected: • Identifiers (name, email, phone, IP address) • Professional or employment-related information (license type, credentials) • Internet or electronic network activity (browsing history, interactions with our website) • Commercial information (membership inquiries, service preferences) We do NOT: • Sell your personal information to third parties • Share your personal information for cross-context behavioral advertising • Collect or process sensitive personal information beyond what is necessary to provide our services • Knowingly collect information from individuals under 16 years of age

4. Your California Privacy Rights (CCPA/CPRA)

As a California resident, you have the right to: • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you • Right to Delete: Request deletion of your personal information, subject to certain exceptions • Right to Correct: Request correction of inaccurate personal information • Right to Opt-Out: Opt out of the sale or sharing of your personal information (note: we do not sell your data) • Right to Limit Use: Limit the use and disclosure of sensitive personal information • Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights To exercise these rights, contact us at info@corise.us or call (909) 321-6565. We will respond to verifiable requests within 45 days.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience: • Essential Cookies: Required for basic website functionality (session management, security) • Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics) • Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness Managing Cookies: You can control cookies through your browser settings. Disabling cookies may limit some website functionality. Google Analytics: We use Google Analytics to collect anonymized usage data. Google's privacy policy applies to their processing of this data. You can opt out using the Google Analytics Opt-out Browser Add-on. Do Not Track: We honor Do Not Track (DNT) signals sent by your browser.

6. Data Sharing and Disclosure

We may share your information with: • Service Providers: Companies that help us operate our business (payment processors, email services, analytics providers, scheduling tools) under contractual obligations to protect your data • Legal Requirements: When required by law, subpoena, court order, or government regulation • Business Transfers: In connection with a merger, acquisition, or sale of assets • With Your Consent: When you have given us explicit permission We require all third-party service providers to respect the security of your personal information and treat it in accordance with applicable law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including: • Encryption of data in transit (SSL/TLS) • Secure data storage with access controls • Regular security assessments and updates • Employee training on data protection practices • Limited access to personal information on a need-to-know basis While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including: • Active members: For the duration of your membership plus 3 years • Tour bookings and inquiries: Up to 2 years after your last interaction • Website analytics data: Up to 26 months • Legal and compliance records: As required by applicable law You may request deletion of your data at any time by contacting us.

9. Children's Privacy

Our services and website are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

10. Third-Party Links

Our website may contain links to third-party websites or services (e.g., scheduling platforms, social media). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us: CoRise 4684 Ontario Mills Pkwy, Ste 200 Ontario, CA 91764 Email: info@corise.us Phone: (909) 321-6565 For complaints regarding our data practices, you may also contact the California Attorney General's office at oag.ca.gov.