Consumer Health Data Privacy Notice

Categories of consumer health data we collect

Depending on how you interact with our Sites and Services, we may collect the following categories of consumer health data:

• Health conditions, treatment, diseases, or diagnosis
• Social, psychological, behavioral, and medical intervention
• Health-related surgeries or procedures
• Use or purchase of prescribed medication
• Bodily functions, vital signs, symptoms, or measurements of other categories of consumer health data
• Diagnoses or diagnostic testing, treatment, or medication
• Gender-affirming care information
• Reproductive or sexual health information
• Biometric data
• Genetic data
• Data that identifies that you are seeking health care services

Depending on how you interact with our Sites and Services, we will collect consumer health data for the following purposes and uses:

• Arranging a Consult. When you seek to arrange a consult, you may provide us with basic health questionnaire responses, current medications, allergies, relevant medical history, photos you upload (where applicable), and other health information you share as part of requesting or attending a consult.
• Membership and order processing. When you select a membership plan or make an order, you may provide us with your prescription information, diagnoses, plan information, order history, the status of your consults and shipments, your tracking numbers, and any information you provide in customer-service correspondence as necessary to complete the order.

In addition, several of the categories of personal data we collect may be considered consumer health data depending on the context and extent of information you provide to us. To view the full list of categories of personal data we may collect, please see the “Personal data that you give us” section of our Privacy Policy.

For the personal data we collect to be considered consumer health data it must alone or with other data, identify the consumer and allow an inference about the consumer’s health. We do not currently make inferences regarding your health with these other categories of personal data.

If we deidentify your consumer health data, we will only process it in a deidentified fashion and will not attempt to reidentify it.

In addition to the purposes stated above, we may process consumer health data for purposes allowed under applicable law, such as to prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or any activity that is illegal under applicable law; preserve the integrity or security of our systems; or investigate, report, or prosecute those responsible for any such action that is illegal under applicable law.

Categories of sources from which we collect consumer health data

We receive consumer health data directly from you. In some cases, we may receive health data about you from other sources. This includes healthcare providers, pharmacies, government entities, advertising networks, data brokers, operating systems and platforms, mailing list providers, social networks and advertising and marketing partners.

Sharing of consumer health data

We share all of the categories of consumer health data listed above.

We share consumer health data with the following categories of third parties and specific affiliates:

• Service Providers
• Operating Systems and Platforms
• Data Analytics Providers
• Advertising Networks
• Social Media Networks
• Specific affiliates

Your privacy rights

Under applicable law, you may have certain privacy rights regarding your consumer health data, including the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data;
• Access your consumer health data, including a list of all third parties and affiliates with whom we shared or sold your consumer health data and an active email address or other online mechanism that you may use to contact any third parties;
• Withdraw your consent from our collection and sharing of your consumer health data; and
• Delete your consumer health data.

To exercise your rights, please submit a request by emailing us at customer-experience@ccrxpharm.com. If legally required, we will comply with your request upon verification of your identity. To do so, we will ask you to verify data points based on information we have in our records. If we refuse to take action regarding your request, you may appeal our decision by replying to the email you received from us in response to your request.