CONSUMER HEALTH DATA PRIVACY NOTICE

Last Updated: August 4, 2025

This Consumer Health Data Privacy Notice (“Privacy Notice”) describes how InstaRx, Inc. (“InstaRx,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal data in connection with our websites, mobile applications, and other online services that link to this Privacy Notice (collectively, the “Services”), as well as offline services and interactions.

If you are a resident of certain U.S. states, please also review the Supplemental U.S. State Privacy Disclosures section below for additional information about your rights and our practices.

Types of Personal Data We Collect

We may collect the following categories of personal data:

Identifiers: Name, email address, phone number, mailing address, IP address, account username, and other similar identifiers.
Records: Financial information such as payment card details, billing address, and purchase history.
Demographic Information: Age, gender, and other demographic details.
Internet or Network Activity: Browsing history, search history, and information regarding your interactions with our Services, advertisements, and other online services.
Geolocation Data: General location information derived from your IP address.
Audio, Visual, or Similar Information: Photos, videos, or audio recordings you provide to us.
Professional or Employment Information: Job title, employer, and professional qualifications.
Inferences: Inferences drawn from any of the above to create a profile about you, reflecting your preferences, characteristics, behavior, and attitudes.
Sensitive Personal Data: Health information including medical history, prescriptions, treatment information, insurance information, and other health-related data necessary to provide our Services.

Sources of Personal Data

We collect personal data from the following sources:

Directly from you: When you create an account, complete a health questionnaire, make a purchase, contact us, or otherwise interact with our Services.
Automatically through tracking technologies: When you use our Services, we may automatically collect certain information through cookies, pixels, web beacons, and similar technologies.
From third parties: We may receive personal data from healthcare providers, pharmacies, laboratories, payment processors, identity verification services, marketing partners, and other third parties.
From publicly available sources: We may collect information from public records and other publicly available sources.

How We Use Personal Data

We use personal data for the following purposes:

Provide our Services: To facilitate telehealth consultations, process prescriptions, fulfill orders, manage your account, and provide customer support.
Operate our business: To manage and improve our operations, conduct internal analytics, perform quality assurance, and maintain our technology infrastructure.
Research and improvement: To develop new products and services, improve existing ones, and conduct research and analysis.
Legal and safety: To comply with legal obligations, enforce our terms, protect our rights and the rights of others, and ensure the safety and security of our Services.
Marketing and advertising: To send you promotional communications, personalize advertising, and measure the effectiveness of our marketing campaigns. You may opt out of marketing emails at any time by following the unsubscribe instructions in each email.

How We Disclose Personal Data

We may disclose personal data to the following categories of recipients:

Affiliates: Our parent companies, subsidiaries, and other affiliated entities.
Service providers: Third parties that perform services on our behalf, including payment processors, shipping providers, cloud hosting services, analytics providers, and customer service platforms.
Professional consultants: Auditors, lawyers, accountants, and other professional advisors.
Law enforcement and government agencies: When required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights or the safety of others.
Corporate transactions: In connection with a merger, acquisition, sale of assets, reorganization, bankruptcy, or other corporate transaction.
Business partners: Third parties with whom we jointly offer products or services.
The public: Information you choose to make publicly available through our Services.
With your consent: Other third parties when you have given us your consent to do so.

For a list of our third-party partners, please visit our Third Party Partners page.

Cookies and Other Tracking Technologies

We and our third-party partners use cookies and similar tracking technologies to:

Personalization: Remember your preferences and settings to personalize your experience.
Performance: Ensure our Services function properly and load efficiently.
Analytics: Understand how visitors use our Services, which pages are most popular, and how users navigate through the site.
Advertising: Deliver relevant advertisements and measure their effectiveness.
Security: Detect and prevent fraud, unauthorized access, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.

Data Security and Retention

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure data storage, and regular security assessments.

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The retention period may vary depending on the context of the processing and our legal obligations.

Children’s Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we learn that we have collected personal data from a child under 18, we will take steps to delete such data as soon as possible. If you believe we have inadvertently collected information from a child under 18, please contact us immediately.

External Links

Our Services may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Notice does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.

Supplemental U.S. State Privacy Disclosures

California – Shine the Light

Under California’s “Shine the Light” law (Civil Code Section 1798.83), California residents who have provided personal data to a business with which they have established a business relationship may request disclosure of the categories of personal data shared with third parties for their direct marketing purposes during the preceding calendar year. To make such a request, please contact us using the information provided below.

If you are a California resident, you may also have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, access, delete, and correct your personal data, as well as the right to opt out of the “sale” or “sharing” of personal data, as those terms are defined under the CCPA.

Nevada and Washington

Nevada residents may opt out of the sale of certain covered information by contacting us at the email address below. Washington residents may have additional rights regarding the collection and use of consumer health data under the Washington My Health My Data Act.

Texas and Nebraska

Residents of Texas and Nebraska may have additional rights with respect to their personal data under applicable state privacy laws. Please contact us for more information about exercising your rights.

Changes

We may update this Privacy Notice from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by updating the “Last Updated” date at the top of this notice and, where required by law, provide additional notice (such as posting a statement on our website or sending you a notification). We encourage you to review this Privacy Notice periodically.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Notice or our privacy practices, please contact us at:

Email: privacy@instarx.com

Address: InstaRx, Inc., 15061 Springdale St. Suite 206, Huntington Beach, CA 92649