Privacy Notice for California Residents

Privacy Statement – California

This Privacy Notice for California Residents applies only to California residents and supplements WellMedr's general Privacy Policy. It explains how Wellmedr LLC ("WellMedr," "we," "us," or "our") collects, uses, discloses, retains, sells, and shares Personal Information and describes California residents' rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA").

This Notice applies to Personal Information collected through wellmedr.com, our account and intake experiences, transactions, communications, customer support, and related services.

"Personal Information," "Sensitive Personal Information," "sell," and "share" have the meanings given to them by the CCPA.

Information We Collect

During the preceding 12 months, we collected the categories of Personal Information identified below. The examples are illustrative, and we may not collect every example from every consumer.

Categories of Personal Information Collected by WellMedr

We retain Personal Information only for as long as reasonably necessary for the purposes described in this Notice, including to provide services, maintain transaction and account records, meet legal and professional obligations, prevent fraud, resolve disputes, and enforce agreements. Retention periods vary based on the nature of the information, the relationship involved, and applicable legal requirements.

Sources of Personal Information

We collect Personal Information:

• Directly from you, including through forms, account registration, checkout, uploads, and communications;
• Automatically from your browser or device when you use our website;
• From people acting at your direction;
• From service providers involved in payments, hosting, communications, security, support, fulfillment, and shipping;
• From licensed healthcare providers, pharmacies, and related service providers when needed to coordinate a service you request; and
• From advertising, analytics, referral, and business partners.

Personal Information Does Not Include

Personal Information does not include publicly available information, lawfully obtained truthful information that is a matter of public concern, or deidentified or aggregated information. It also does not include information outside the CCPA's scope, such as certain medical information governed by HIPAA or the California Confidentiality of Medical Information Act, where an exemption applies.

Sensitive Personal Information

Depending on the service or relationship, we may collect Sensitive Personal Information such as account credentials; government identification information when necessary; payment-account information handled through secure payment systems; racial or ethnic origin; citizenship or immigration status; genetic information; and information concerning health, sex life, or sexual orientation.

We use Sensitive Personal Information only as reasonably necessary to provide requested services, process transactions, secure accounts, prevent fraud, provide support, maintain quality and safety, or comply with law. Where California law provides a right to limit a particular use or disclosure, you may submit that request through Your Privacy Choices.

Use of Personal Information

We may use Personal Information to:

• Provide, coordinate, and support products or services you request;
• Create and manage accounts, process payments, and fulfill orders or subscriptions;
• Communicate with you about transactions, services, support, and—with your choices respected—marketing;
• Operate, personalize, analyze, and improve our website and services;
• Maintain security, detect fraud, troubleshoot errors, and protect legal rights;
• Comply with legal, tax, accounting, regulatory, and recordkeeping obligations; and
• Carry out another purpose disclosed to you at collection or with your consent.

Sharing Personal Information

We may disclose Personal Information for business purposes to service providers and contractors that support hosting, website operations, payments, communications, customer service, security, analytics, fulfillment, shipping, professional services, and related operations.

We may also disclose information to licensed healthcare providers and pharmacies involved in a service you request, to government or legal recipients when required, and to a successor in connection with a merger, financing, acquisition, or sale of assets.

During the preceding 12 months, we disclosed Categories A, B, C, D, F, G, H, I, and K for the business purposes described above. The categories disclosed depend on the service and recipient.

For CCPA compliance, we treat the use of third-party advertising technology as "sharing" when it may support cross-context behavioral advertising. During the preceding 12 months, we shared limited information from Categories A, D, F, G, and K with advertising networks, social-media platforms, and advertising analytics providers for that purpose.

We do not share medical intake answers, diagnoses, prescription details, provider communications, laboratory results, complete payment-card numbers, account passwords, or text-message opt-in consent for cross-context behavioral advertising.

You may opt out through Your Privacy Choices or by using a browser that sends a recognized Global Privacy Control signal.

Selling Personal Information

WellMedr does not sell Personal Information as "sale" is defined by the CCPA and has not sold Personal Information during the preceding 12 months. We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age.

Your Rights and Choices

Subject to applicable exceptions, California residents have the right to:

• Know and access the Personal Information we collected, used, disclosed, sold, or shared, including categories, sources, purposes, recipients, and specific pieces of information;
• Data portability for eligible information in a readily usable format;
• Correct inaccurate Personal Information we maintain;
• Delete Personal Information we collected from you;
• Opt out of the sale or sharing of Personal Information;
• Limit certain uses or disclosures of Sensitive Personal Information where the right applies; and
• Receive equal service and pricing without unlawful discrimination for exercising a CCPA right.

Deletion Request Exceptions

We may retain information when reasonably necessary or legally permitted to complete a transaction, provide a requested service, maintain safety and security, prevent fraud or illegal activity, debug systems, exercise legal rights, comply with a legal or professional recordkeeping obligation, conduct qualifying research, enable lawful internal uses consistent with your relationship with us, or establish, exercise, or defend legal claims.

Exercising Access, Data Portability, Correction, and Deletion Rights

You may submit a California privacy request using any of these methods:

• Online: Your Privacy Choices
• Email: privacy@wellmedr.com
• Toll-free telephone: 1-888-397-6905
• Mail: Wellmedr LLC, Attn: Privacy, 7901 4th Street North, Suite 300, St. Petersburg, FL 33702

Please identify the right you wish to exercise and provide enough information for us to understand and respond to your request. You do not need to create an account. We may verify your identity by matching information you provide with information we already maintain.

We will use verification information only for verification, security, fraud prevention, and legal compliance.

You may use an authorized agent. We may require proof of authorization and may contact you directly to confirm your identity and authorization. Opt-out and limitation requests do not require identity verification, although we may request limited information needed to apply the choice.

Response Timing and Format

We will confirm receipt of requests to know, delete, or correct within 10 business days and generally respond within 45 calendar days. If reasonably necessary, we may extend the response period by up to 45 additional calendar days and will notify you.

We will process opt-out and applicable limitation requests as soon as feasibly possible and no later than 15 business days.

We will provide eligible information electronically or by mail in a readily usable format. We generally do not charge a fee, but may charge a reasonable fee or deny a request that is manifestly unfounded, excessive, or repetitive, as permitted by law.

Non-Discrimination

We will not deny goods or services, charge a different price, provide a different level or quality of service, or retaliate against you because you exercised a CCPA right, except as permitted by law.

Changes to Our Privacy Notice

We may update this Notice from time to time. We will post the updated version on this page and revise the "Last updated" date. If a change is material, we will provide additional notice where required.

Contact Information

Additional Disclaimer

WellMedr provides technology and administrative services that help connect consumers with independent licensed healthcare providers and pharmacies. Medical decisions are made by licensed providers, and dispensing decisions are made by licensed pharmacies. This Notice addresses privacy rights and does not provide medical or legal advice.