This Consumer Health Data Privacy Notice (“Notice”) is provided by PureTek Corporation, doing business as PharmaPure® (“PharmaPure,” “we,” “us,” or “our”). This Notice supplements, and should be read together with, our general Privacy Policy. In the event of a conflict between this Notice and our general Privacy Policy regarding the handling of consumer health data, this Notice controls. This Notice describes how we collect, use, share, and protect consumer health data in connection with your use of our website at pharmapure.com and your purchase of PharmaPure products. It is provided as a separate and distinct privacy notice in accordance with the requirements of Washington’s My Health My Data Act (RCW 19.373), Nevada SB 370 (consumer health data privacy provisions), and Connecticut’s consumer health data provisions within the Connecticut Data Privacy Act (CTDPA), as amended by Public Act 23-56.

This Notice applies to consumers who are residents of Washington, Nevada, Connecticut, or any other jurisdiction that provides consumer health data protections, and whose interactions with PharmaPure may involve the collection, use, or sharing of consumer health data as defined under applicable law. This Notice applies to our website at pharmapure.com and our sale and distribution of PharmaPure products. This Notice does not apply to any sites, products, applications, platforms, or other services not directly linking to this Notice.

Please read this Notice carefully to understand our policies and practices regarding your consumer health data and how we will treat it. If you do not agree with our policies and practices, you should not use the sites, products, applications, platforms, or other services linking to this Notice.

Other privacy policies may apply for your personal information that is not consumer health data. To view our general privacy policy describing how we treat other personal information, visit pharmapure.com.

Consumer Health Data We May Collect About You

For purposes of this Notice, “consumer health data” means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status. In the context of PharmaPure’s business, this includes information that may reveal or allow a reasonable inference about a consumer’s health status, such as the purchase of health-related dietary supplements (e.g., products designed to complement GLP-1 medication-based weight management programs), browsing behavior on product pages related to specific health conditions or wellness goals, information submitted through contact forms or product reviews that references health conditions or medications, and any data from which a reasonable inference can be drawn that a consumer is managing a particular health condition.

PharmaPure recognizes that the purchase of certain products—including our Sugar Blocker GLP-1 Support line—may foreseeably reveal that a consumer uses GLP-1 medications or is engaged in a weight management program. We treat such purchase and browsing data as consumer health data to the extent required by applicable law. We may collect the following categories of consumer health data:

• Purchase and Transaction Data: Records of purchases of health-related products, including product names, quantities, purchase dates, and order history, to the extent such records reveal or allow an inference about a consumer’s health status.
• Browsing and Interaction Data: Information about your interactions with health-related product pages, including pages viewed, search queries entered on our website related to health topics, and time spent on health-related content.
• Consumer-Provided Health Information: Information you voluntarily provide through contact forms, customer service communications, product reviews, or surveys that references health conditions, medications, symptoms, or wellness goals.
• Inferred Health Data: Information we may reasonably infer about your health status based on your purchases or browsing patterns (e.g., the inference that a consumer purchasing GLP-1 support products may be using GLP-1 medications for weight management).
• Device and Technical Data: To the extent that cookies, analytics tools, or similar technologies collect data from your interactions with health-related product pages, such technical data (e.g., IP address, browser type, device identifiers) may constitute consumer health data when linked to health-related browsing activity.

We use these categories of consumer health data for the following purposes:

• Order Fulfillment: To process, fulfill, and ship your orders for PharmaPure products.
• Customer Service: To respond to your inquiries, requests, and customer support communications.
• Account Management: To create and manage your account, process returns or exchanges, and maintain order history.
• Product Improvement: To understand how consumers interact with our products and website in order to improve product offerings, website functionality, and user experience.
• Analytics: To analyze trends, usage patterns, and aggregate data related to the use of our website and products. We use analytics in a manner that minimizes the identifiability of individual consumers where possible.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• Safety and Security: To detect, prevent, or address fraud, security incidents, or technical issues.
• Marketing and Communications: With your prior opt-in consent, to send you promotional materials, newsletters, or other marketing communications related to PharmaPure products.

We will not collect, use, or share consumer health data for purposes that are materially different from those disclosed in this Notice without first obtaining your consent.

Consent

PharmaPure is committed to obtaining your affirmative, voluntary, opt-in consent before collecting or sharing your consumer health data, as required by applicable law. Before we collect consumer health data, we will present you with a clear and conspicuous consent mechanism that identifies the specific categories of consumer health data to be collected, describes the purpose(s) for which the data will be collected, used, or shared, identifies the categories of third parties, if any, with whom the data may be shared, and provides you with the ability to affirmatively consent (e.g., by checking an unchecked checkbox, clicking an “I Agree” button, or similar affirmative action).

Your consent to the collection or sharing of consumer health data is entirely voluntary. You are not required to provide consent as a condition of purchasing PharmaPure products, although certain features or services may be unavailable if consent is not provided.

PharmaPure does not knowingly collect consumer health data from individuals under the age of 18. Our products and website are intended for adults.

Consumer Health Data Sources

We collect consumer health data through the following means:

• Direct Interactions: We collect information you provide directly when you place an order for a health-related product through our website, create an account or profile on pharmapure.com, submit a contact form, customer inquiry, or support request, leave a product review or testimonial, or participate in surveys, promotions, or other voluntary communications.
• Automated Collection: We collect certain information automatically when you visit our website, including through cookies and similar tracking technologies, web analytics tools (e.g., Google Analytics or similar services), and server logs and other standard technical data collection methods.
• Third-Party Sources: We may receive information from third-party service providers that assist us with order fulfillment, payment processing, marketing, or analytics, to the extent such information constitutes consumer health data.

Consumer Health Data Disclosures

PharmaPure may share consumer health data with the following categories of third parties, subject to applicable consent requirements: payment processors that process transactions on our behalf, shipping and fulfillment providers that deliver orders to consumers, analytics providers that help us understand website usage and improve our services, marketing and advertising partners (only with your prior opt-in consent), professional advisors in connection with legal, accounting, or compliance matters, and government agencies or law enforcement when required by applicable law, regulation, legal process, or enforceable governmental request.

When we share consumer health data with third-party service providers, we require them by contract to use the data only for the purposes for which it was shared, implement reasonable security measures to protect the data, not further sell or share consumer health data, and comply with all applicable consumer health data privacy laws.

PharmaPure may share consumer health data with affiliates of PureTek Corporation for the purposes described in this Notice, subject to the same obligations and restrictions.

We may also disclose consumer health data in connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, subject to applicable law and any required consents.

Sale of Consumer Health Data

PharmaPure does not sell consumer health data. We do not sell, as that term is defined under the Washington My Health My Data Act (RCW 19.373), Nevada SB 370, the Connecticut Data Privacy Act, or other applicable consumer health data privacy laws, any consumer health data to third parties in exchange for monetary or other valuable consideration.

If PharmaPure’s practices regarding the sale of consumer health data change in the future, we will update this Notice to reflect the change, obtain a valid authorization from each affected consumer before selling any consumer health data (including a clear description of the data to be sold, the purpose of the sale, and the identity of the purchaser, to the extent required by applicable law), and provide consumers with the right to opt out of the sale of their consumer health data.

Your Privacy Rights

Depending on your state of residence, you may have the following rights with respect to your consumer health data:

• Right to Confirm Collection: You have the right to confirm whether PharmaPure is collecting, sharing, or selling your consumer health data.
• Right to Access: You have the right to request access to the consumer health data we have collected about you, including the specific categories of data collected and the purposes for which it was used.
• Right to Withdraw Consent: You have the right to withdraw your consent to the collection, use, or sharing of your consumer health data at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before you withdrew consent.
• Right to Delete: You have the right to request that we delete consumer health data we have collected from or about you, subject to certain exceptions permitted by law (e.g., data necessary to complete a transaction you requested, data required for legal compliance, or data needed to detect security incidents).
• Right to Opt Out of Sale and Targeted Advertising: You have the right to opt out of the sale of your consumer health data and the use of your consumer health data for targeted advertising purposes.
• Right to Correct: Connecticut residents have the right to request correction of inaccuracies in their consumer health data.

Right to Non-Discrimination: PharmaPure will not discriminate against you for exercising any of your rights under applicable consumer health data privacy laws.

How to Exercise Your Rights

To exercise any of the rights described above, you may submit a request by email at privacy@puretekcorp.com or by phone at (818) 837-5880.

To protect your privacy, we will verify your identity before processing your request. We may ask you to provide information that matches data we already maintain about you, such as your name, email address, and order history.

We will acknowledge receipt of your request and respond within the timeframes required by applicable law. Generally, Washington requires us to fulfill a deletion request within 30 calendar days of receipt, unless an extension applies. Connecticut requires us to respond to a consumer rights request within 45 calendar days, with one 45-day extension if reasonably necessary. For Nevada, we will respond within the timeframes required by Nevada SB 370.

You may designate an authorized agent to submit a consumer rights request on your behalf. We may require the authorized agent to provide proof of authorization and may verify your identity directly.

Geofencing Prohibition

In compliance with Washington’s My Health My Data Act (RCW 19.373.040), PharmaPure does not use geofencing technology around any healthcare facility—including hospitals, clinics, mental health facilities, pharmacies, or other medical service providers—for the purpose of identifying or tracking consumers entering or leaving a healthcare facility, collecting consumer health data from consumers at or near a healthcare facility, or sending targeted notifications, advertisements, or communications to consumers based on their proximity to a healthcare facility. This prohibition applies to all of PharmaPure’s operations, websites, applications, and third-party service providers acting on our behalf.

Data Security

PharmaPure implements reasonable administrative, technical, and physical safeguards designed to protect consumer health data from unauthorized access, use, disclosure, alteration, and destruction. These measures include, but are not limited to, encryption of consumer health data in transit and at rest, access controls limiting access to consumer health data to authorized personnel, regular review and assessment of security practices and policies, and contractual requirements for third-party service providers to maintain adequate security measures. No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your consumer health data, we cannot guarantee its absolute security.

Data Retention

PharmaPure retains consumer health data only for as long as reasonably necessary to fulfill the purposes for which it was collected, as described in this Notice, unless a longer retention period is required or permitted by law. Upon expiration of the applicable retention period, or upon fulfillment of a valid deletion request, consumer health data will be deleted or de-identified in accordance with applicable law.

Changes to This Notice

PharmaPure may update or modify this Consumer Health Data Privacy Notice from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Notice, we will update the “Last Updated” date at the top of this Notice, post the revised Notice on our website at pharmapure.com, and where required by applicable law, notify you of the changes by email, a prominent notice on our website, or other reasonable means. Where applicable law requires renewed consent for material changes to this Notice, we will obtain your consent before applying the updated practices to your consumer health data.

Contact Information