U.S. Consumer Health Data Privacy Policy

Introduction / How this Notice Applies to You

This U.S. Consumer Health Data Privacy Policy (“Consumer Health Policy” and “Policy”) applies to U.S. Consumer Health Data that Redi.Health, Inc. and its affiliates (“Redi”, “we”, “our”, “us”) collects about U.S. residents (“U.S. Consumers”) who are subject to U.S. law, pertaining to consumer health data (“U.S. Consumer Health Data Acts”). Specifically, this Consumer Health Data Privacy Policy complies with the Nevada Consumer Health Data Act, NRS Chapter 603A and the Washington My Health Data Law, RCW 19.373.

“Consumer Health Data” as used in this Consumer Health Policy means personal information that is linked or reasonably linkable to a U.S. Consumer that Redi uses to identify that individual’s past, present, or future physical or mental health status.

This Consumer Health Policy does not apply to information we may collect about you that is exempt from the U.S. Consumer Health Data Acts that includes, without limitation, the following:

• Information that is “protected health information” or “PHI” under HIPAA, which includes health information
• Personal information intermingled with PHI that is subject to HIPAA that we maintain in our capacity as a health care provider under HIPAA
• Personal information collected in connection with our recruitment and pre-screening of clinical trial participants and in the operation of clinical trials and related research efforts, including the provision of expanded access to drugs that are the subject of clinical trials
• Personal information used only for public health activities and purposes
• Personal information subject to the Fair Credit Reporting Act
• Personal information that federal or state law expressly authorizes use to collect or share, including when we function as a manufacturer under FDA regulations
• Information that has been deidentified in accordance with HIPAA deidentification requirements
• Publicly available information
• Information collected about U.S. Consumers when acting in their capacity as employees, independent contractors, or job applicants

When we refer to “Consumer Health Data” in this Consumer Health Policy, it does not include any of the categories of personal information listed above.

What Consumer Health Data Do We Collect About You

We collect the following categories of Consumer Health Data:

• Medical and physical health conditions and biometric information;
• Geolocation information that could reasonably indicate your attempt to acquire or receive health services or supplies;
• Information about health-related conditions, treatment, diseases, or diagnoses
• Medical interventions, treatments, and medication obtained or prescribed
• Bodily functions, vital signs, symptoms, or measurements of other types of consumer health data
• Diagnoses or diagnostic testing, treatment, or medication
• Data that identifies individuals seeking health care services
• Reproductive or sexual health information
• Any inferences of the above categories of health information derived or extrapolated from non-health information
• Other information that may be used to identify your health condition

For What Purposes Does Redi Collect Your Consumer Health Data

We collect and use U.S. Consumer Health Data for the following purposes:

• To provide information about and provide our products, services and programs, including patient support programs
• To manage our relationship with you, including customer service or to respond to your inquiries about our products and services
• Undertake activities to verify or maintain the quality or safety of a product, service, or device that is owned, manufactured by, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us
• For advertising and marketing purposes, including measurement of the effectiveness of our advertisements and marketing programs
• To comply with the law and our legal obligations, to respond to legal process and related legal proceedings

What Are the Sources of Consumer Health Data

We collect your Consumer Health Data from the following sources:

• Directly from you when you share it with us, from your interactions with our products and services, including:
  • data from connected devices or profiles, with permission; and
  • data submitted by you.
• With your permission, we and our business partners may collect your health data over time and across different internet websites or online services when you use any internet website or online service.
• Consumer Health Data collected from devices, including:
  • data collected through websites and apps
  • data from mobile and internet-connected devices with permission;
  • data collected when contacting or visiting Redi, such as call recordings; and
  • data from cookies, web beacons, and similar technologies on websites or third-party websites.
• From our business partners.
• Drawn from other information we collect to provide inferences about preferences, characteristics, attributes, and abilities drawn from collected data

Consumer Health Data We May Share With Third Parties or Affiliates

We may share Consumer Health Data:

• as required or permitted by law to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property or the rights, property or safety of others, including to law enforcement agencies, and judicial and regulatory authorities, to private attorneys who issue subpoenas or otherwise serve us with legal process and, to the extent required, the individuals or entities they represent
• with authorized representatives, including family members, caregivers, and legal representatives
• with our affiliates for the purposes described in this Consumer Health Policy. Our affiliates are here:

We do not allow third parties to collect Consumer Health Data over time and across different Internet websites or online services when you use our websites or online services

What Are My Consumer Rights and How Do I Exercise Them?

Consumers as defined above have the following rights with respect to their Consumer Health Data:

• Right to Know: The right to confirm whether we are collecting, sharing, or selling their Consumer Health Data
• Right to Know Third Parties: The right to obtain a list of all third parties with whom we have shared or sold their Consumer Health Data
• Right to Delete: The right to request that we delete their Consumer Health Data Additionally, U.S. Consumers have a right to request that we stop collecting, sharing, or selling Consumer Health Data.

To exercise these rights, please contact us at privacy@redi.health or via this form. We may require additional information to authenticate that you made the request(s). If we are unable to authenticate the request(s) using commercially reasonable efforts and asking for additional information, we will not be able to comply with the request. We will respond to deletion requests within 30 days from when we receive your request and will respond to other requests within 45 days. In some circumstances, we may need additional time to process your request. If we expect your request is going to take us longer than normal to fulfill, we will let you know. If your request is denied, you may appeal that decision as specified in our letter or denial. We will process and respond to your appeal within the time permitted by the U.S. Consumer Health Data Acts.

Material Changes to this Policy

We may change this Consumer Health Policy from time to time and will notify you by notice on our mobile application and in this Consumer Health Policy of material changes.

Contact Us

If you have questions about this Consumer Health Policy or want to obtain more information about our privacy practices, please contact us at privacy@redi.health or by mail at 80 E Rich St Suite 660, Columbus, OH 43215.