Consumer Health Data Privacy Notice

OndaRx respects the privacy of information related to your health and wellness. This Notice describes how we collect, use, and share consumer health data and the rights available to you under applicable consumer health privacy laws.

This Notice applies only to consumer health data subject to those laws. It does not apply to information that is exempt, including certain information protected under HIPAA.

Depending on how you use OndaRx, we may collect health and wellness information such as:

• Health history, conditions, symptoms, and treatment information;
• Medications, allergies, and laboratory information;
• Height, weight, and other health measurements;
• Information related to weight management, hormone health, sexual wellness, hair growth, and longevity;
• Information submitted through medical intakes, questionnaires, account interactions, and communications; and
• Information that may indicate or allow us to infer your health interests or use of healthcare services.

We may use consumer health data to:

• Provide and administer the services you request;
• Facilitate medical evaluation, treatment, prescriptions, pharmacy fulfillment, and laboratory testing;
• Communicate with you about your care, orders, and account;
• Provide customer support;
• Operate, secure, and improve our services; and
• Comply with applicable legal and regulatory requirements.

We may receive consumer health data directly from you, through your use of our services, and from healthcare providers, pharmacies, laboratories, and service providers involved in providing or supporting the services you request.

We may share consumer health data as necessary to provide and support the services you request, including with:

• Licensed healthcare providers;
• Healthcare technology service providers;
• Pharmacies and fulfillment partners;
• Laboratories;
• Service providers supporting our operations; and
• Other parties when you direct us to do so or when permitted or required by law.

Depending on applicable law, you may have the right to:

• Confirm whether we collect, use, or share your consumer health data;
• Access consumer health data we maintain about you;
• Request correction or deletion;
• Withdraw consent for certain collection or sharing;
• Obtain information about certain parties with whom your data has been shared; and
• Appeal certain decisions regarding your privacy request.

To exercise your consumer health data rights, contact us at:

Email: hello@ondarx.com

We may take reasonable steps to verify your identity before processing your request.

Residents of Washington and Nevada may have additional rights regarding consumer health data under their respective state laws. OndaRx will process qualifying requests in accordance with applicable law.

We may update this Notice from time to time. When we do, we will update the date above and provide any additional notice required by law.

Questions about this Notice or our consumer health data practices may be directed to:

Email: hello@ondarx.com