Consumer Health Data Privacy Policy

We collect Consumer Health Data from the following categories of sources:

• Directly from you when you share it with us and from your interactions with our products and services, including our patient assistance or similar programs that we may offer;
• With your permission, we and our third-party providers and business partners may collect your health data over time and across different internet websites or online services when you use any internet website or online service of the regulated entity; and
• From third parties and business partners, including those involved with the patient savings or similar programs that we may offer.

We collect, process, and disclose Consumer Health Data for the following business purposes:

• To provide, operate, maintain, and protect our Website;
• To analyze and improve our Website, including developing new products or services;
• To provide and facilitate our products and services, including any patient assistance and related discount, savings, education, or support programs that we may offer;
• To identify potential research opportunities and to facilitate and conduct research for potential publication;
• To communicate with you, respond to your inquiries, and to send you information by email, postal mail, telephone, text message, notifications, or other means about our products and services;
• To promote and conduct educational or promotional events, including those that may be in person and to support our marketing and advertising activities, including delivering personalized advertising;
• To enhance and help us better understand your browsing experience, needs, and preferences and provide consistent, personalized services and experiences across our Website;
• To protect the security or integrity of the Website, including to perform security analyses to verify that the Website is working properly and have not been compromised based on our legitimate interests;
• To protect us, our users, and the public, and comply with applicable law, regulation, or legal process, including to validate user information for fraud and risk detection purposes, resolve disputes and protect the rights of users and third parties, respond to claims and legal process (such as subpoenas and court orders), fulfill our reporting obligations (such as pharmacovigilance reporting), monitor and enforce compliance with our contracts, including our Terms of Use, and otherwise detect, prevent, or stop any activity that may be illegal, unethical, or legally actionable; and
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by us about our customers is among the assets transferred.

We disclose some or all of the above categories of Consumer Health Data for the purposes described above with the following third parties and affiliates:

• Within our corporate family as described at the beginning of this Policy;
• As legally required in relevant legal proceedings and otherwise to the extent required or explicitly authorized by applicable law;
• To other companies we collaborate with for research and development activities related to clinical trials and/or products and services jointly offered or developed by us and that company; and
• To data analytics and advertising and marketing providers.

Your Privacy Rights

Depending on your place of residency, you may have some or all of the following rights regarding your Consumer Health Data, subject to applicable law and certain exceptions:

• Right to Confirm and Access: If you ask us, we will confirm whether we are collecting, sharing, or selling your Consumer Health Data. At your request, we will provide a list of all third parties and affiliates with whom we have shared or sold your Consumer Health Data. You may request that we provide you with a copy of the Consumer Health Data that we maintain about you.
• Right to Correct: If your Consumer Health Data that we maintain is inaccurate and you would like us to correct it, you may request that we make changes to it.
• Right to Withdraw Consent: Where we have relied on your consent or authorization for certain processing of your Consumer Health Data, you may withdraw that consent or authorization at any time.
• Right to Delete: You may request that we delete Consumer Health Data that we maintain about you.
• Right to Appeal: If we deny your request to exercise any of the above rights, you may request to appeal this decision.

To exercise any of the above rights, you or your authorized agent may do so by following instructions in “Contact Us” below. In order to process your request, we may ask you to verify your identity by confirming your name, email address, phone number, or other identifiable information that we have in our records, such as most recent interaction with us, if applicable.

Updates to this Policy

We may update this Policy from time to time and notify you in accordance with law, which may include email or other notice posted to the Website. Any changes to this Policy will become effective when we notify you of the changes. Your use of the Website following any such updates will constitute your acceptance of such updates.