Privacy Policy

Introduction

This Privacy Policy ("Privacy Policy") describes the data protection practices of meds.you Holdings, LLC and its affiliates, including meds.you (collectively, "meds.you", "we", "our", or "us"), including when you visit any meds.you website or subdomain that links to this Privacy Policy, use any affiliated mobile applications (the "Apps"), or otherwise provide data to meds.you. We refer to the Websites, Apps, and other services provided by meds.you together as the "Services." This Privacy Policy is incorporated into our Terms of Use.

meds.you operates as a holding company and brand portal. This Privacy Policy, including the HIPAA Notice of Privacy Practices below, applies to the meds.you homepage and all brands operating under meds.you Holdings, LLC.

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICES.

The Information We Collect and the Sources of Such Information

We obtain information about you through the means discussed below when you use the Services. Please note that we need certain types of information so that we can provide the Services to you. If you do not provide us with such information, or ask us to delete it, you may no longer be able to access or use part or all of our Services.

1. Information You Provide to Us

We collect a variety of information that you provide directly to us, including through:

• Account and product registration and administration of your account
• Questions, communications, or feedback you submit to us via forms or email
• Your participation in research and surveys
• Requests for customer support and technical assistance
• Newsletter and email sign-up forms

The types of data we collect directly from you include:

• Name, address, telephone number, date of birth, and email address
• Log-in credentials, if you create an account
• Billing information, such as credit or debit card number, verification number, and expiration date, collected by our payment processors on our behalf
• Information about purchases or other transactions with us
• Information about your customer service interactions with us
• Any other information you choose to directly provide to us in connection with your use of the Services

2. Information We Collect Through Automated Means

When you use our Websites, we collect and analyze information such as your IP address, browser types, browser language, operating system, referring and exit pages and URLs, the number of clicks, domain names, landing pages, pages viewed, the amount of time spent on particular pages, the date and time you used the Services, error logs, and other similar information.

3. Our Use of Cookies and Similar Online Tools

To collect the information in this section, we and our service providers use web server logs, cookies, tags, SDKs, tracking pixels, and other similar tracking technologies. You can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the Help section of your browser for more information.

4. Information We Receive From Other Sources

We work closely with third parties including sub-contractors in technical and advertising networks, analytics providers, and search information providers. Such third parties will sometimes provide us with additional information about you.

Purposes for How We Use Your Information

In connection with providing you with the Services, we may use your information to:

• Carry out, improve, and manage the Services
• Engage in internal research to understand the effectiveness of our Services
• Communicate with you about the Services, your use of the Services, or your inquiries
• Communicate with you by email, postal mail, or phone about surveys, promotions, and special events
• Provide you with technical support and customer service
• Verify your identity and administer your account
• Ensure that content from our Services is presented in the most effective manner for you
• Measure the effectiveness of advertising and content we serve to you and others
• Comply in good faith with any procedures, laws, and regulations which apply to us
• Establish, exercise, or defend our legal rights

Online Analytics and Advertising

We may use third-party web analytics services such as Google Analytics to collect and analyze usage information through cookies and similar tools. We may also use third-party advertising technologies that use cookies and other technologies to deliver relevant content and advertising.

We do not sell your personally identifiable information such as your name, email address, or phone number. However, because of the CCPA's broad definitions, making certain online identifiers available to advertising partners may be considered a sale under the CCPA. To opt out, visit the Network Advertising Initiative Consumer Opt-Out or the Digital Advertising Alliance Consumer Opt-Out links.

Do Not Track: We do not currently recognize or respond to browser-initiated DNT signals.

How We Share and Disclose Your Information

Affiliates and Subsidiaries: We may share information we collect within the meds.you Holdings, LLC group to deliver products and services to you and ensure a consistent level of service.

Health Care Providers and Services: We share your information with health care providers to schedule and fulfill appointments, provide health care services, and for other treatment, payment, or health care operations purposes, including pharmacy services.

Service Providers: We provide access to or share your information with select third parties who use the information to perform services on our behalf, including billing, sales, marketing, advertising, analytics, research, customer service, data storage, IT and security, fraud prevention, and payment processing.

Protection of meds.you and Others: We may access, retain, and disclose the information we collect and maintain about you if required to do so by law or in a good faith belief that such access, retention, or disclosure is reasonably necessary to: (a) comply with legal process; (b) enforce our Terms of Use or other contracts with you; (c) respond to claims that any content violates the rights of third parties; (d) respond to your requests for customer service; and/or (e) protect the rights, property, or personal safety of meds.you, its agents and affiliates, its users, and/or the public.

Business Transfers: As we continue to develop our business, we may buy, merge, or partner with other companies. In such transactions, user information may be among the transferred assets.

Consent: We may also disclose your information in other ways you direct us to and when we have your consent.

Your Marketing Choices

You may instruct us not to use your contact information to contact you by email, postal mail, or phone regarding products, services, promotions, and special events by messaging us within your patient portal or contacting us at care@meds.you. In commercial email messages, you can also opt out by following the instructions located at the bottom of such emails.

Third Party Services and Notice About Health Information

This Privacy Policy does not address, and we are not responsible for, the privacy or data practices of any third parties, including physicians and other health care providers using the Services, mobile device manufacturers, or any other third-party website or service to which our Services may contain a link. The collection, use, and disclosure of your information by such third parties will be subject to their own privacy policies, not this Privacy Policy.

How We Protect Your Information

meds.you takes a variety of technical and organizational security measures to protect your information against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet, and no means of electronic or physical storage, is absolutely secure. You acknowledge and accept that we cannot guarantee the security of your information transmitted to, through, or on our Services.

Privacy Information for California Residents

If you are a California resident, California law requires us to provide you with additional information regarding how we collect, use, and share your personal information as defined in the California Consumer Privacy Act (CCPA).

The CCPA allows you to request that we:

• Inform you about the categories of personal information we collect or disclose about you, the categories of sources of such information, the business or commercial purpose for collecting your personal information, and the categories of third parties with whom we share personal information.
• Provide access to and/or a copy of certain information we hold about you.
• Delete certain information we have about you.

Sale of Personal Information: meds.you does not, and will not, sell information that identifies you such as your name, email address, phone number, or postal address.

Shine the Light: We do not share your personal information with third parties for their own direct marketing purposes.

To exercise any of your California privacy rights, message us within your patient portal or email us at care@meds.you with your full name, email address, and residential address associated with your use of our Services.

Privacy Information for Nevada Residents

Under Nevada law, certain Nevada consumers may opt out of the sale of personally identifiable information for monetary consideration. We do not engage in such activity; however, if you are a Nevada resident, you may submit a request to opt out of any potential future sales under Nevada law by messaging us within your patient portal or emailing care@meds.you.

Retention of Your Information

We keep your information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws.

HIPAA Notice of Privacy Practices for Protected Health Information (PHI)

Effective Date: July 14, 2026

This Notice is provided on behalf of meds.you, its affiliated brands, and the licensed healthcare providers and pharmacies that deliver care through them — including LocumTele, our physician group, and Rush Pharmacy, our fulfillment pharmacy. It describes how these entities may use and disclose your Protected Health Information (PHI) to carry out treatment, payment, or healthcare operations and for other purposes permitted or required by law. We are required by law to maintain the privacy of your PHI, provide you with this Notice, and abide by its terms.

Uses and Disclosures of PHI:

• Treatment: To provide, coordinate, or manage your healthcare and related services, including communication with other healthcare providers.
• Payment: To obtain payment for healthcare services, including billing and collection activities.
• Healthcare Operations: For quality assessment, improvement activities, case management, accreditation, licensing, credentialing, and medical reviews, audits, or legal services.
• As Required by Law: When required to do so by federal, state, or local law.
• Public Health and Safety: To prevent or control disease, report child abuse or neglect, report reactions to medications, or notify persons who may have been exposed to a communicable disease.
• Health Oversight Activities: To health oversight agencies for audits, investigations, inspections, and licensure.
• Judicial and Administrative Proceedings: In response to a court or administrative order, subpoena, or other lawful process.
• Law Enforcement: For law enforcement purposes as required by law.
• Research: For research approved by an institutional review board with privacy protections in place.
• Workers Compensation: For workers compensation or similar programs.

Your Rights Regarding PHI:

• Right to Inspect and Copy: You may inspect and copy your PHI, with certain exceptions. We may charge a reasonable fee for copying or mailing costs.
• Right to Amend: You may request an amendment to your PHI if you believe it is incorrect or incomplete.
• Right to an Accounting of Disclosures: You may request an accounting of disclosures of your PHI made in the past six years, except for disclosures made for treatment, payment, or healthcare operations.
• Right to Request Restrictions: You may request a restriction on our use or disclosure of your PHI. We are not required to agree but will consider your request.
• Right to Request Confidential Communications: You may request that we communicate with you about your PHI in a specific way or at a specific location.
• Right to a Paper Copy of This Notice: You may receive a paper copy of this Notice upon request.
• Right to be Notified of a Breach: You have the right to be notified in the event of a breach of your PHI.

Complaints: If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the Department of Health and Human Services. You will not be retaliated against for filing a complaint. Contact: message us within your patient portal, or care@meds.you

State-Specific Privacy Provisions

New York: We comply with the New York State Confidentiality of Information Law, which provides additional privacy protections for HIV-related information, mental health records, and genetic testing results. Written consent is required before disclosing such information.

Texas: We comply with the Texas Medical Privacy Act, which requires consent for certain disclosures of PHI and specific requirements for the destruction of PHI.

Florida: We comply with Florida privacy laws, which provide additional protections for mental health records, HIV/AIDS-related information, and substance abuse treatment records. Written consent is required before disclosing such information.

Illinois: We comply with Illinois privacy laws related to mental health records, HIV/AIDS-related information, and genetic testing results. Written consent is required before disclosing such information.

California: We comply with the Confidentiality of Medical Information Act (CMIA), as well as California privacy laws related to marketing, sale of PHI, and minors rights. Additional protections apply as required by California law.

Revisions to Our Privacy Policy

We reserve the right to change this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. The date this Privacy Policy was last revised is identified at the top of the document. Your continued use of our Services after changes are posted constitutes your acceptance of those changes.

Contact Us

meds.you Holdings, LLC

30 N Gould St, Sheridan, WY 82801

care@meds.you