PART 1: About This Privacy Policy and Using Our Site and Tools

This Privacy Policy applies to NailAndToe.com (“NnT”) and its partners. NailAndToe.com may share information among its subsidiaries or sites that it owns or controls, but it is always protected under the terms of this Privacy Policy.

The NnT Web site contains links to other sites. Once you enter another Web site (whether through an advertisement, service, or content link), be aware that NnT is not responsible for the privacy practices of these other sites. We encourage you to look for and review the privacy statements of each and every Web site that you visit through a link or advertisement on NnT.

PART 2: Non-Personal Information We Collect About You

Even if you do not register with NnT, we collect Non-Personal Information about your use of our Web site, special promotions and newsletters.

A. Cookies

We collect Non-Personal Information about your use of our Web site and your use of the Web sites of selected sponsors and advertisers through the use of Cookies. Every computer accesses a NnT Web site is assigned a different Cookie by NnT. The information collected by Cookies (i) helps us dynamically generate advertising and content on Web pages or in newsletters, (ii) allows us to statistically monitor how many people are using our Web site and selected sponsors' and advertisers' sites, (iii) how many people open our emails, and (iv) for what purposes these actions are being taken. We may use Cookie information to target certain advertisements to your browser or to determine the popularity of certain content or advertisements. Cookies are also used to facilitate a user's log-in, as navigation aides and as session timers. Cookies used by NnT and NnT Health Manager are also used to restrict underage use of the tools.

Most browser software can be set to reject all Cookies. Most browsers offer instructions on how to reset the browser to reject Cookies in the "Help" section of the toolbar. If you reject our Cookies, certain of the functions and conveniences of our Web site may not work properly but you do not have to accept our Cookies in order to productively use our site. We do not link Non-Personal Information from Cookies to Personally Identifiable Information without your permission and do not use Cookies to collect or store Personal Health Information about you.

B. Web Beacons

We use Web Beacons to collect Non-Personal Information about your use of our Web site and the Web sites of selected sponsors and advertisers, and your use of special promotions or newsletters. The information collected by Web Beacons (i) allows us to statistically monitor how many people are using our website and selected sponsors' and advertisers' sites, (ii) how many people open our emails, and (iii) for what purposes these actions are being taken. Our Web Beacons are not used to track your activity outside of our Web sites or those of our sponsors'. We do not link Non-Personal Information from Web Beacons to Personally Identifiable Information without your permission and do not use Web Beacons to collect or store Personal Health Information about you.

C. Third Parties Collecting Non-Personal Information on NnT's Behalf

Third parties under contract with NnT may use Cookies or Web Beacons to collect Non-Personal Information about your usage of NnT's sites, and this information may used by NnT to tailor the advertising you may see on sites within the networks of these third parties. This Non-Personal Information is anonymous and does not contain any personal information about you. These third parties may collect this information, on our behalf, to help NnT target our advertising on these third party sites. These third parties have agreed not to use this non-personal cookie or web beacon information except to help us target our advertising on these sites and have agreed to not link any non-personal cookie or web beacon information collected by them on our sites to Personally Identifiable Information they or others collect from other sites. If you browser is set to reject cookies, this Non-Personal Information will not be sent to these third parties.

PART 3: Personally Identifiable Information We Collect About You

We collect Personally Identifiable Information, like your name, email address, telephone number, and zip code, you provide to us when you register as a member of NnT and/or when you update your member profile and/or when you use search and submission functions. We use the Personally Identifiable Information that you provide to respond to your questions, provide you the specific services you select, send you emails about Web site maintenance and updates, and inform you of significant changes to this Privacy Policy.

A. Newsletters & Emails to You

At registration and at various times as you use NnT, you will be given the option of receiving recurring informational/promotional newsletters via email from NnT and/or directly from third parties. These emails will not contain Personal Health Information. When you sign up for our email newsletters or at any time, you can choose to Opt-In to receiving additional promotional emails from NnT or our Sponsors. In order to subscribe to NnT newsletters via email, we need your contact information, like name and email address. You can unsubscribe from the newsletters by simply clicking on the "unsubscribe" link at the bottom of any email newsletter. An email to our automated unsubscribe service will be created on your computer. Click the "send" button. You will then be unsubscribed from that newsletter within two to three business days. You may also unsubscribe or change any of your email preferences by clicking on the applicable links in your email newsletter or by changing your profile settings by clicking on any of the view/manage links at the bottom of your NnT Newsletter. If you experience difficulties with our automated unsubscribe service, please use our Customer Support Form. NnT Customer Service will manually unsubscribe you from that newsletter in two to three business days. In some cases, when you click on a link or an advertisement on our site, in an e-mail or newsletter, your browser may be momentarily directed to the website of a third party which, acting on behalf of NnT, notes or "counts" your response to the e-mail or newsletter before re-directing your browser to your selected destination; this re-direction process may not be apparent to you.

B. Email a Friend

If you choose to use our Email a Friend service to tell a friend about our site or newsletter, we will ask you for your name, your email address and your friend's email address. We will automatically send your friend a one-time email inviting him or her to visit the site using your name and email address as the from email address. NnT does not use your name, your email address or your friend's email information and the information you provide using this service for any other purpose. We will only use the information you provide to send the email you request.

C. Emails You Send to NnT

This Privacy Policy does not apply to content, business information, ideas, concepts or inventions that you send to NnT by email. If you want to keep content or business information, ideas, concepts or inventions private or proprietary, do not send them in an email to NnT. We try to answer every email within 48 business hours, but are not always able to do so.

D. Web site Registration and Interactive Tools on NnT

After you have registered as a member of NnT, you may choose to use certain NnT interactive content, tools and services that may ask you to voluntarily provide other types of information about yourself including Personal Health Information.

E. Subscription Services

From time to time, NnT offers users the opportunity to register for paid subscription services. Each subscription service has its own Service Agreement that governs your use of the service and the information we collect to provide the service, including your credit card information. The Service Agreement will be disclosed to you at the time of registration for that subscription service.

PART 4: Disclosure of Your Information

Except as described in this Privacy Policy or as specifically agreed to by you, NnT will not disclose any Personally Identifiable or Personal Health Information it gathers from you on our website. We may only release Personally Identifiable or Personal Health Information to third parties: (1) to comply with valid legal requirements such as a law, regulation, search warrant, subpoena or court order; or (2) in special cases, such as in response to a physical threat to you or others, to protect property or defend or assert legal rights. In the event that we are legally compelled to disclose your Personally Identifiable or Personal Health Information to a third party, we will attempt to notify you unless doing so would violate the law or court order. In addition, we may disclose Personal Information as described below.

A. Disclosure to NnT Health Operations and Maintenance Contractors

NnT operations and maintenance contractors sometimes have limited access to your Personally Identifiable Information in the course of providing products or services to NnT. These contractors include vendors and suppliers that provide us with technology, services, and/or content for the operation and maintenance of our Web site. Unless you have Opted-out of receiving emails and newsletters from NnT, these contractors also may have access to your email address to send newsletters or special promotions to you on our behalf or to send emails to you for purposes such as conducting market research on our behalf. Access to your Personally Identifiable Information by these contractors is limited to the information reasonably necessary for the contractor to perform its limited function for NnT. We also contractually require that our operations and maintenance contractors 1) protect the privacy of your Personally Identifiable Information consistent with this Privacy Policy, and 2) not use or disclose your Personally Identifiable Information for any purpose other than providing us with products and services as required by law.

B. Disclosure to Third Party Contractor Websites

Certain content and services offered to you through our website are served on Web sites hosted and operated by a company other than NnT ("Third Party Contractor Web sites"). NnT does not disclose your Personally Identifiable Information to these Third Party Contractor Web sites without your consent, but you should be aware that any information you disclose once you access these other Web sites is not subject to this Privacy Policy. NnT does not endorse and is not responsible for the privacy practices of these Third Party Contractor Web sites. You should review the privacy policy posted on the other Web site to understand how that Third Party Contractor Website collects and uses your Personally Identifiable Information. NnT makes an effort to make it obvious to you when you leave our website and enter a Third Party Contractor Web site, either by requiring you to click on a link or by notifying you on the site before you visit the third party site. In addition, if you see a phrase such as "Powered by" or "in association with" followed by the name of a company other than NnT, then you are on a Web site hosted by a company other than NnT.

NnT also provides links to sites provided by Third Party Contractor Websites that have business arrangements with NnT to pay commissions based on sales of products or services generated through NnT. An example of this would be "Ad links" from Yahoo on our Search pages.

C. Disclosure to or by Co-branded Channel Partners

NnT is a contractor and provides co-branded content and services to Channel Partner Web sites hosted and operated by companies other than NnT Channel Partner Websites. You can only access these co-branded content and services only through the Channel Partner Web site, and usually from the health section of these other Web sites. The co-branded NnT pages that you may access through a Channel Partner Web site may have different registration processes and opportunities for information collection, and Personally Identifiable Information that you provide on these pages may be shared with the Channel Partners. NnT does not share Personal Health Information with Channel Partner Web sites without your consent. Each of these co-branded NnT Web sites has its own privacy policy posted on that site, which explains what information is disclosed by NnT to the Channel Partner and vice versa. If you visit one of these co-branded NnT sites, please read the privacy policy that is posted on that site, as well as the individual privacy policy of the Channel Partner Web site.

D. Disclosure to Linked Sites

In addition to the Third Party Contractor Web sites that you may access as described above, for your convenience there are links to Third Party Web sites operated by companies that are not affiliated with the NnT Web site and that do not have contracts to provide content or services through the NnT Web site. These links may be found in advertisements, referenced within content, or placed beside the names or logos of sponsors. NnT does not disclose your Personal Information to these Third Party Websites without obtaining your consent. NnT does not endorse and is not responsible for the privacy practices of these sites. If you choose to link to one of these Third Party Web sites, you should review the privacy policy posted on this other website to understand how that Third Party Web site collects and uses your Personally Identifiable Information.

PART 5: How NnT Handles Privacy and Security Internally

Here are some of the security procedures that NnT uses to protect your privacy:

• Requires both a personal username (log-in name) and a password in order for users to access their Personally Identifiable Information or Personal Health Information.
• Requires a public 'nickname' different from the username and password, used for any public forums like message boards.
• Uses firewalls to protect information held in our servers.
• Utilizes Secure Socket Layer (SSL) encryption in transmitting Personally Identifiable Information to our servers. In order to take advantage of encryption technology, you must have an Internet browser which supports 128-bit encryption.
• Closely monitors the limited number of NnT employees who have potential access to your Personally Identifiable Information.
• Requires all NnT employees to abide by our Privacy Policy and to be subject to disciplinary action if they violate it.
• Backs-up our systems to protect the integrity of your Personally Identifiable and Personal Health Information.
• Despite NnT's efforts to protect your Personally Identifiable Information and Personal Health Information, there is always some risk that an unauthorized third party may find a way around our security systems or that transmissions of your information over the Internet may be intercepted.

PART 6: Changes to this Privacy Policy

Personally Identifiable Information - We will inform you if a material change to the Privacy Policy, which means a change that expands the permissible uses or disclosures of Personally Identifiable Information allowed by the prior version of the Privacy Policy. Your continued use of the NnT Web site will indicate acceptance of the changes. You may of course choose to Opt-out of continuing to use the NnT Web site. Please exit the site immediately if you do not agree to the terms of this Privacy Policy or any revised policy.

Personal Health Information - We will inform you if a material change in the Privacy Policy is made that involves the use of your Personal Health Information, and your express Opt-in authorization will be requested. If you choose to not accept the new privacy policy, then the current privacy policy conditions will remain in effect, so long as NnT continues to make the functionality available. NnT reserves the right to discontinue or limit functionality in all its products.

Non-Significant Changes - NnT may make non-significant changes to the Privacy Policy that do not affect Personally Identifiable Information or Personal Health Information. For these instances, NnT may not notify you of such non-significant changes.

If we decide to change our privacy policy, we will post those changes to this privacy statement, the home page, and other places appropriate throughout our site so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.

We reserve the right to modify this privacy statement at any time, so please review it frequently. If we make material changes to this policy, we will notify you here, by email, and by means of a notice on our home page.

PART 7: Glossary

Browser: Short for Web browser, a browser is a software application used to locate and display Web (Internet) pages. The most popular browsers are AOL, FireFox, Microsoft Internet Explorer, and Netscape Navigator. In addition, most modern browsers can present multimedia information, including sound and video, though they require plug-ins for some formats.

Cache (also called cache memory): Once your Web browser accesses a Web page, it references that page and the graphics on it within your computer's "cache" (or more simply, your computer takes a "snapshot" of every page you visit and stores it in the "cache".) The next time you visit that same page, your download time will be quicker as the images and much of the page is already available on your computer for your browser to reference instantly instead of waiting for the page and images to download again. NnT Health Manager does not cache pages.

Channel Partner Web site: A third party Web site to whom NnT provides content and services for that web site's health channel.

Click Stream Information: A record of all the pages you have visited during your visit to a particular Web site or the services you accessed from the site or from an email. Click Stream Information is associated with your browser and not with you personally. It records the archives of your browser.

Cookie: A small data file that is stored on the hard drive of the computer you use to view a Web site. Cookies are placed by that site or by a third party with a presence on the site, such as an advertiser using a Web Beacon (see definition below) and are accessible only by the party or site that placed the Cookie (i.e. a Cookie placed on your computer by NnT isn't accessed by any other site you visit but a Cookie placed on your computer by an advertiser may be accessed by any site on which that same advertiser has a presence). Cookies can contain pieces of Personally Identifiable Information (PII). NnT Health encrypts any PII it stores in its Cookies. These Cookies often are used to make the site easier to use. For example, if you check a box to ask that we store your user name on your computer so that you don't have to enter it each time you visit the site, it's stored in a Cookie on your computer.

Encryption: The translation of data into a secret code. Encryption is the most effective way to achieve data security. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt it. Encryption is a common technique for providing security in computer systems.

Firewall: A system designed to prevent unauthorized access to or from a public or private network. Firewalls can be implemented in both hardware and software, or a combination of both. Firewalls are frequently used to prevent unauthorized Internet users from accessing private portions of public networks. All messages entering or leaving the network pass through the firewall, which examines each message and blocks those that do not meet the specified security criteria.

Nickname: On NnT, as part of your registration, you will be required to provide a Nickname in addition to a username (log-in name) and a password. The NnT Nickname is the name that will appear on any of your public forum postings. This public nickname should be different from the username that you use when you log on to NnT. NOTE: Once you establish a Nickname on NnT, you cannot change it without registering with a new account.

Non-Personal Information: Information that is not traceable back to any individual and cannot be used to identify an individual. For example, Click Stream Information is Non-Personal Information, as is information such as gender, age, city and state when not linked with other Personally Identifiable Information.

Opt-In: Means you are actively indicating your preference to participate in a program, email, feature, tool, or enhancement on a Web site. Typically, if you "Opt-in" you must provide certain information, usually Personally Identifiable Information, to the Web site or otherwise actively indicate your choice or preference to participate in the Web site program. For example, if you wish to receive a diabetes newsletter by email from NnT, you must enter your email address and choose the type of newsletter by checking a box next to a statement such as: "Yes, I'd like to receive a free subscription to NnT's Diabetes Newsletter."

Opt-Out: Means that if you do not take some action you are indicating your preference to participate in a program, email, feature, tool or enhancement on a Web site. Typically, if you "Opt-out" you must uncheck a box next to a stated preference or otherwise take some action to indicate your preference not to participate in a program. For example, if you do not wish to receive promotional emails from NnT or its sponsors, you must uncheck the box in your email preference center that states: "Please send me special offers and communications from NnT and/or its partners that would interest me."

Password: A secret series of characters, typically alphanumeric (meaning it consists of both letters and numbers) that enables a user to access a file, computer, or program. The user must enter his or her password before the computer or system will respond to commands. The password helps ensure that unauthorized users do not access the system. In addition, data files and programs may require a password.

Ideally, the password should be something that nobody could guess. In practice, many people choose a password that is easy to remember, such as their name or their initials. This is one reason it is relatively easy to break into many computer systems.

Personal Health Information (PHI): When your Personally Identifiable Information (PII) is combined with known health characteristics. For example, if you indicated that you have a certain disease or condition, when that information is combined with your PII, it becomes Personal Health Information.

Personally Identifiable Information (PII) (also called Personal Information): Information that can be traced back to an individual (contrast with Non-Personal Information and Aggregate Information). Examples of PII include your name, home address, telephone number, email address, and Social Security number.

If other pieces of information are linked to PII, they also become PII. For example, if you use a nickname to chat online and give out your real name while chatting, your nickname becomes PII when linked with other PII.

Security Questions: NnT requires you to answer two security questions, usually called Challenge-Response questions. We will use the answers you provide to these questions to help you in the event you forget your username or password. In order to help maintain your privacy, we require an EXACT match against what you submitted during your registration process. Correct spelling and short answers can help ensure that you will succeed with retrieving your username or resetting your password.

Server: A computer that provides services to other computers. A "Web server" stores Web site files and "serves" them to people who request them.

SSL (Secure Sockets Layer): A security protocol developed by Netscape for transmitting private information via the Internet. SSL works by using a private key to encrypt data that's transferred over the SSL connection. Both Microsoft Internet Explorer (http://www.webopedia.com/TERM/S/Internet_Explorer.htm) and Netscape Navigator (http://www.webopedia.com/TERM/S/Navigator.htm) support SSL, and many Web sites use the protocol to obtain confidential user information, such as credit card numbers. By convention, URLs that utilize an SSL connection start with https: instead of http.

Username: A name used to gain access to a computer system or program. Usernames, and often passwords, are required in shared systems, such as the Internet. In most such systems, users can choose their own usernames and passwords. Usernames are also required to access some bulletin board and online services.

Virus: A program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes. Viruses can also "replicate" themselves by copying their code to other computers. All computer viruses are manmade. A simple virus that can make a copy of itself over and over again is relatively easy to produce. Even such a simple virus is dangerous because it will quickly use all available memory and bring the system to a halt. An even more dangerous type of virus is one capable of transmitting itself across networks and bypassing security systems. There are numerous virus protection programs available. See the "How You Can Protect Yourself" section.

Web Beacons (also often referenced as "clear GIFs", "Web bugs", "1-by-1 GIFs", "Single-Pixel GIFs", "1 x 1 Pixels", or "clear Pixels"): Tiny graphic image files, imbedded in a Web page in GIF, JPEG or HTML format, that provide a presence on the Web page and send back to its home server (which can belong to the host site, a network advertiser or some other third party) information from the User's browser, such as the IP address, the URL of the page on which the beacon is located, the type browser that is accessing the site and the ID number of any Cookies on the User's computer previously placed by that server. Web Beacons can also be used to place a Cookie on the User's browser.