California Privacy Notice

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("Personal Information").

We have collected the following categories of Personal Information from California consumers since January 1, 2024 on the Blissley Platform:

We obtain the categories of Personal Information listed above from the following categories of sources:

• Directly from you when you register, complete intake forms, or use the Platform.
• Indirectly from you through information we collect in the course of providing services, including activity on our website.
• From independent licensed physicians and pharmacies involved in your care.
• From third-party service providers who assist us in operating our platform and delivering our services.

Personal Information does NOT include:

• Information lawfully made available from federal, state, or local government records.
• De-identified or aggregate consumer information.
• Health or medical information covered by HIPAA and the California Confidentiality of Medical Information Act (CMIA).
• Personal information covered by sector-specific privacy laws including the Fair Credit Reporting Act (FCRA) and the Gramm-Leach-Bliley Act (GLBA).

Sensitive personal information means information that reveals:

• Your social security, driver's license, or passport number.
• Your account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials.
• Your precise geolocation.
• Your racial or ethnic origin, religious or philosophical beliefs, or union membership.
• Contents of your mail, email, and text messages unless Blissley is the intended recipient.
• Your genetic data.
• Processing of biometric information for the purpose of uniquely identifying you.
• Personal information collected and analyzed concerning your health.
• Personal information collected and analyzed concerning your sex life or sexual orientation.

We may use or disclose the Personal Information we collect for one or more of the following business purposes:

• To fulfill or meet the reason for which the information is provided.
• To facilitate telehealth consultations and healthcare services provided by independent licensed physicians.
• To coordinate prescription fulfillment with independent licensed third-party pharmacies.
• To provide you with information, products, or services you have requested.
• To provide you with email alerts, SMS messages, and other notices concerning our products or services.
• To carry out our obligations and enforce our rights arising from contracts entered into between you and us, including for billing and subscription management.
• To improve our website and present its contents to you.
• For testing, research, analysis, and product development.
• To protect the rights, property, or safety of us, our patients, or others.
• To respond to regulatory and/or law enforcement requests and as required by applicable law, court order, or governmental regulations.
• To third-party service providers who perform services on our behalf.
• As otherwise required or permitted by law.

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

We may disclose your Personal Information to a third party for a business purpose. We disclose your Personal Information for a business purpose to the following categories of third parties:

• Independent licensed physicians and affiliated clinical networks (such as CareValidate).
• Independent licensed compounding pharmacies.
• Our affiliates and subsidiaries.
• Service providers and vendors who assist in platform operations, payment processing, and customer support.
• Third parties to whom you authorize us to disclose your personal information.
• Other third parties as required or permitted by law.

The CCPA and CPRA provide California residents with specific rights regarding their Personal Information.

To exercise the access, data portability, correction, or deletion rights described above, please submit a verifiable consumer request to us by:

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify your identity.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We reserve the right to amend this Privacy Notice at our discretion and at any time. When we make material changes to this Privacy Notice, we will notify you by email or through a notice on our website.

If you have any questions or comments about this notice, our Privacy Policy, the ways in which we collect and use your personal information, your options and rights regarding such use, or wish to exercise your rights under California law, please contact us at: