PRIVACY NOTICE — HEALTH INFORMATION

Last Updated: April 5, 2026

This Notice describes how your health information may be used and disclosed, and how you can access this information. Please review it carefully.

- - - - - - - - - - - - - - - - - - - -

1. WHO THIS NOTICE APPLIES TO

This Privacy Notice ("Notice") applies to the health information that GetMedKits and the independently licensed healthcare providers who provide services through our platform create, receive, maintain, or transmit in connection with the telehealth services provided through our platform. Health information includes information about your health condition, the healthcare services you receive, and payment for those services, when that information can be linked to you individually.

- - - - - - - - - - - - - - - - - - - -

2. OUR DUTIES REGARDING YOUR HEALTH INFORMATION

We are committed to maintaining the privacy and security of your health information, as required by applicable federal and state law. We are committed to providing you with this Notice of our privacy practices. We will follow the terms of this Notice currently in effect. We will notify you if a breach of your unsecured health information occurs. We will not use or disclose your health information without your written authorization, except as described in this Notice.

- - - - - - - - - - - - - - - - - - - -

3. HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

The following describes the ways we may use and disclose your health information without your written authorization:

For Treatment

We may use and disclose your health information to provide, coordinate, or manage your healthcare and related services. For example, we may share your health history, medications, and intake information with the independently licensed physician who reviews your case and makes prescribing decisions. We may share your prescription information with the compounding pharmacy that prepares your medications.

For Payment

We may use and disclose your health information to obtain payment for healthcare services provided to you. For example, we may use your information to process your payment, issue refunds, or manage billing inquiries. Because this is a cash-pay service, we do not submit claims to health insurers or government programs on your behalf.

For Healthcare Operations

We may use and disclose your health information for our healthcare operations, which include quality assessment and improvement activities, reviewing the performance of our providers, training, business planning, customer service, and other administrative functions necessary to run our service. For example, we may use your information to evaluate the quality of care you received or to improve our processes.

- - - - - - - - - - - - - - - - - - - -

4. OTHER PERMITTED USES AND DISCLOSURES

We may also use or disclose your health information without your authorization in the following circumstances:

As Required by Law: We may use or disclose your health information when required to do so by federal, state, or local law.

Public Health Activities: We may disclose your health information to public health authorities for purposes such as preventing or controlling disease and reporting adverse reactions to medications.

Health Oversight Activities: We may disclose your health information to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure actions.

Judicial and Administrative Proceedings: We may disclose your health information in response to a court order, subpoena, discovery request, or other lawful process.

Law Enforcement: We may disclose your health information to law enforcement officials in certain limited circumstances, such as to comply with a court order or grand jury subpoena.

Serious Threat to Health or Safety: We may use or disclose your health information when we believe in good faith that disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Workers' Compensation: We may disclose your health information as authorized by and to the extent necessary to comply with workers' compensation or similar programs.

De-identified Information: We may use or disclose information that has been de-identified so that it cannot be linked to you. De-identified information is not subject to the protections of this Notice.

- - - - - - - - - - - - - - - - - - - -

5. USES AND DISCLOSURES THAT REQUIRE YOUR WRITTEN AUTHORIZATION

We will obtain your written authorization before using or disclosing your health information for purposes not described in this Notice, including:

Marketing: We will not use or disclose your health information for marketing purposes without your written authorization, except for face-to-face communications and promotional gifts of nominal value as permitted by applicable law.

Sale of Health Information: We will not sell your health information without your written authorization.

Psychotherapy Notes: We do not create or maintain psychotherapy notes. If we ever do, we will not use or disclose them without your written authorization except as permitted by law.

Other Uses: Any other use or disclosure of your health information not described in this Notice will be made only with your written authorization.

You may revoke your authorization at any time by contacting us in writing. Your revocation will not affect any uses or disclosures already made in reliance on your prior authorization.

- - - - - - - - - - - - - - - - - - - -

6. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

You have the following rights regarding the health information we maintain about you:

Right to Access and Obtain Copies

You have the right to inspect and obtain a copy of your health information maintained by us, including medical records, billing records, and other records used to make decisions about your care. To request access, submit a written request to us using the contact information in Section 9. We may charge a reasonable cost-based fee for copies. We will respond to your request within 15 business days. In certain limited circumstances permitted by law, we may deny your request and will explain the reason for the denial and your right to have the denial reviewed.

Right to Request Amendment

You have the right to request that we amend your health information if you believe it is incorrect or incomplete. Your request must be in writing and must explain why the amendment is needed. We may deny your request if we did not create the information, if the information is not part of the records used to make decisions about you, if the information is already accurate and complete, or if the information is not available for inspection. If we deny your request, we will explain the reason and your right to submit a statement of disagreement.

Right to an Accounting of Disclosures

You have the right to request a list (accounting) of certain disclosures we have made of your health information. This accounting does not include disclosures made for treatment, payment, or healthcare operations, disclosures made to you, disclosures you authorized in writing, or disclosures to persons involved in your care. Your request must be in writing and must specify the time period (not longer than six years and not before the effective date of this Notice). The first accounting in any 12-month period is free. We may charge a reasonable cost-based fee for additional requests.

Right to Request Restrictions

You have the right to request that we restrict certain uses and disclosures of your health information for treatment, payment, or healthcare operations. You also have the right to request a restriction on disclosures to persons involved in your care or payment for your care. We are not required to agree to your requested restriction, except in one circumstance: if you pay for a service entirely out of pocket (in full, not submitted to a health plan), you have the right to request that we not disclose health information related to that service to a health plan for payment or healthcare operations purposes, and we are required to honor that request. Since this is a cash-pay service and we do not bill insurance or government programs, this restriction applies by default to all services provided through GetMedKits.

Right to Request Confidential Communications

You have the right to request that we communicate with you about your health information in a specific way or at a specific location. For example, you may ask us to contact you only by email rather than by phone, or to send information to a specific address. We will accommodate reasonable requests. You do not need to explain why you are making the request.

Right to a Paper Copy of This Notice

You have the right to obtain a paper copy of this Notice at any time, even if you previously agreed to receive the Notice electronically. To request a paper copy, contact us using the information in Section 9.

- - - - - - - - - - - - - - - - - - - -

7. BREACH NOTIFICATION

If a breach of your unsecured health information occurs, we will notify you as required by law. Notification will be provided without unreasonable delay and no later than 60 days after discovery of the breach. If required by Texas law, we will also notify the Texas Attorney General. The notification will describe the nature of the breach, the types of information involved, the steps you should take to protect yourself, what we are doing to investigate and mitigate the breach, and how to contact us for more information.

- - - - - - - - - - - - - - - - - - - -

8. CHANGES TO THIS NOTICE

We reserve the right to change this Notice at any time. Any changes will apply to all health information we maintain, including information created or received before the change. When we make material changes, we will update the "Last Updated" date at the top of this Notice and make the revised Notice available on our website. You may request a copy of the current Notice at any time by contacting us.

- - - - - - - - - - - - - - - - - - - -

9. COMPLAINTS AND CONTACT INFORMATION

If you believe your privacy rights have been violated, you may file a complaint with us or with the appropriate regulatory authority. You will not be penalized or retaliated against for filing a complaint.

To file a complaint with GetMedKits or to exercise any of your rights under this Notice, contact us:

Email: [email protected]

Phone: +1 (346) 220-0227

You may also file a complaint with:

U.S. Department of Health and Human Services Office for Civil Rights

Online: hhs.gov/ocr/complaints

Phone: 1-877-696-6775

Mail: U.S. Department of Health and Human Services, 200 Independence Avenue S.W., Washington, D.C. 20201

Texas Attorney General

Online: texasattorneygeneral.gov/consumer-protection

Phone: 1-800-621-0508

Our designated privacy contact for health information inquiries is available at [email protected].