California Privacy Statement

We have collected the following categories of Personal Information from California consumers:

• Category A — Identifiers, such as name, address, date of birth, email address, phone number, emergency contact details, and unique identifiers such as your IP address or cookies. (Collected: Yes)
• Category B — Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name, signature, address, telephone number, medical information, health insurance information, or financial information. (Collected: Yes)
• Category C — Characteristics of protected classifications under California or federal law, such as gender, age, or marital status. (Collected: Yes)
• Category D — Commercial information, such as payment information and records of products or services purchased. (Collected: Yes)
• Category E — Biometric and health information, such as medical conditions and health information you provide. (Collected: Yes)
• Category F — Internet or other similar network activity, such as browsing history, chat transcripts, cookies, device information, IP address, and interactions with our Platform. (Collected: Yes)
• Category G — Geolocation data. (Collected: No)
• Category H — Sensory data, such as audio recordings of phone calls or medical interviews. (Collected: Yes)
• Category I — Professional or employment-related information, such as your occupation. (Collected: Yes)
• Category J — Non-public education information. (Collected: No)
• Category K — Inferences drawn from other Personal Information, such as consumer preferences and communication preferences. (Collected: Yes)

We obtain the categories of Personal Information listed above from the following categories of sources:

• Directly from you, for example when you complete an intake form or contact us.
• Automatically as you navigate through and interact with our Platform.
• From third parties that interact with us in connection with the services we perform, such as medical providers and pharmacies.

• Information that is lawfully made available from federal, state, or local government records ("Publicly Available Information").
• De-identified or aggregate consumer information (as such terms are defined in the CCPA).
• Information excluded from the CCPA's scope, such as health or medical information covered by HIPAA and the California Confidentiality of Medical Information Act (CMIA), or personal information covered by certain sector-specific privacy laws such as the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA), and the Driver's Privacy Protection Act.

Sensitive Personal Information means information that reveals:

• Your social security, driver's license, state identification, or passport number.
• Your account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials.
• Your precise geolocation.
• Your racial or ethnic origin, religious or philosophical beliefs, or union membership.
• The contents of your mail, email, and text messages unless we are the intended recipient.
• Your genetic data, biometric information processed for the purpose of uniquely identifying you, and personal information collected and analyzed concerning your health, sex life, or sexual orientation.

We may use or disclose the Personal Information we collect for one or more of the following business purposes:

• To fulfill or meet the reason for which the information is provided.
• To provide you with information, products, or services.
• To provide you with email alerts, event registrations, and other notices concerning our products or services.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collections.
• To improve our website and present its contents to you.
• For testing, research, analysis, and product development.
• As reasonably necessary and proportionate to protect the rights, property, or safety of us, our clients, or others.
• To respond to regulatory and/or law enforcement requests and as required by applicable law, court order, or governmental regulations.
• To third-party service providers who perform services on our behalf, and to our affiliates and subsidiaries.

We may disclose your Personal Information to a third party for a business purpose. We disclose your Personal Information to the following categories of third parties:

• Our affiliates.
• Service providers and vendors.
• Third parties to whom you authorize us to disclose your Personal Information in connection with products or services we provide to you.
• Other third parties as required or permitted by law.

• Access and Data Portability. You have the right to request that we disclose certain information to you about our collection and use of your Personal Information, including the categories of information we collected, the sources, our business or commercial purpose, the categories of third parties with whom we share it, and the specific pieces of Personal Information we have collected about you.
• Correction. You have the right to request that we correct inaccurate Personal Information about you.
• Limit Use of Sensitive Personal Information. You have the right to request that we limit the use and disclosure of your Sensitive Personal Information, subject to certain exceptions.
• Deletion. You have the right to request that we delete (and direct our service providers to delete) your Personal Information from our records, subject to certain exceptions.

We do not have to comply with a deletion request where retaining the information is necessary for us or our service providers to, among other things:

• Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, or otherwise perform our contract with you.
• Detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity.
• Debug products to identify and repair errors that impair existing intended functionality.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.