Health Data Privacy Policy

AmalfiDuo™ is operated by BeMediq LLC, doing business as AmalfiDuo™ (“AmalfiDuo,” “we,” “our,” or “us”).

We recognize that information concerningsexual health, reproductive health, medications, relationships, and treatmentinterests is highly sensitive. This Consumer Health Data Privacy Policyexplains how we collect, use, share, and protect Consumer Health Data underWashington’s My Health My Data Act, Nevada’s Consumer Health Data Privacy Law,and other applicable state consumer health data laws.

This policy applies to Consumer Health Datathat is not protected health information governed by the Health InsurancePortability and Accountability Act (“HIPAA”). Information maintained by anindependent healthcare provider, pharmacy, or business associate and governedby HIPAA is subject to that organization’s Notice of Privacy Practices.

Consumer Health Data is personal informationthat identifies or can reasonably be linked to an individual and reveals orpermits an inference about that person’s past, present, or future physical ormental health.

For AmalfiDuo, this may include information concerning:
- Sexualdesire, arousal, performance, erectile function, orgasm, intimacy, ordiscomfort
- Reproductivehealth, pregnancy, breastfeeding, menstrual history, or menopause
- Medicalconditions, symptoms, diagnoses, allergies, surgeries, and health history
- Bloodpressure, age, height, weight, and other health measurements•
- Prescriptionmedications, over-the-counter products, vitamins, and supplements
- Treatmentinterests, prescriptions, medication use, and healthcare services requested
- Responses tointake forms, eligibility questions, symptom assessments, and healthquestionnaires
- Websiteactivity that may reveal an interest in a health condition or treatment
- Health-relatedinferences generated from information you provide

Depending on how you interact with AmalfiDuo, we may collect:
Identifiers and contact information:
Name, date of birth, email address, telephone number, mailing address, account information, and IP address.

‍Health information:
Symptoms, medical history, health conditions, allergies, current medications, supplements, health measurements, pregnancy status, and treatment goals.

‍Sexual and reproductive health information:
Information about desire, arousal, performance, erectile function, orgasm, intimacy, reproductive health, menstrual history, or menopause.

‍Intake and treatment information:
Answers to health questionnaires, treatment selections, provider-review status, prescriptions, refill information, and treatment-related communications.

‍Transaction and fulfillment information:
Payment status, order history, shipping information, refill preferences, subscription status, and customer-support records.

‍Device and usage information:
Browser type, device type, operating system, approximate location derived from an IP address, pages viewed, and interactions with our website.We do not knowingly collect precise geolocation information unless it is necessary for a service you requested and any required notice or consent has been provided.

We may collect Consumer Health Data from:
- You directly
- Your authorized representative
- Your browser, device, and interactions with our website
- Independent healthcare providers and provider networks
- Dispensing pharmacies
- Telehealth, payment, identity-verification, hosting, security, communications, analytics, and customer-support providers
- Information generated or inferred from your use of the AmalfiDuo platform

We may use and process Consumer Health Data to:
- Operate and improve the AmalfiDuo platform
- Present relevant treatment pathways and intake questions
- Facilitate evaluation by licensed, independent healthcare providers
- Communicate about provider requests, treatment decisions, prescriptions, orders, and refills
- Facilitate prescription processing and pharmacy fulfillment
- Process payments, shipments, cancellations, and account requests
- Provide patient and customer support
- Verify identity and service availability
- Protect against fraud, misuse, security threats, and unauthorized access
- Meet legal, regulatory, safety, and recordkeeping obligations
- Conduct internal analytics and improve the user experience
- Create aggregated or de-identified information that is not reasonably capable of identifying you

We do not use clinical intake responses, diagnoses, prescriptions, provider communications, or authenticated patient-portal information for targeted advertising.

Collection and sharing of Consumer Health Datagenerally require your consent or must be necessary to provide a product orservice you requested. Where required by law, we obtain your separate,affirmative consent before collecting Consumer Health Data and, distinct fromthat consent, before sharing it for a purpose that is not necessary to providea product or service you requested.

We disclose Consumer Health Data only whenreasonably necessary to provide the products and services you request, tooperate and protect the AmalfiDuo platform, to comply with applicable law, orto fulfill another purpose described in this policy. We do not disclose everycategory of Consumer Health Data to every recipient described below — eachrecipient receives only what is reasonably necessary for its role.
We may share Consumer Health Data when reasonably necessary with:
‍
Independent healthcare providers: We disclose information to Beluga Health, P.A. and participating provider networks so that licensed, independent providers can evaluate treatment requests, communicate with patients, exercise independent clinical judgment, prescri bewhen medically appropriate, and provide follow-up care.
‍
‍Dispensing pharmacies: To process prescriptions, compound medications when applicable, dispense treatment, provide pharmacy support, and arrange delivery.

Technology and operational service providers: Wedisclose limited information to vendors that provide telehealth technology,hosting, cybersecurity, identity verification, payment processing,communications, and customer-support services. These vendors receive only theinformation reasonably necessary to perform their services and arecontractually bound to privacy and security obligations consistent with thispolicy.

Professional advisers: We may disclose limitedinformation to attorneys, auditors, insurers, accountants, and complianceadvisers when reasonably necessary to obtain professional advice or protect ourlegal rights

‍Legal and safety disclosures: We maydisclose information when required or expressly permitted by applicable law,regulation, court order, subpoena, or other valid legal process, or whenreasonably necessary to address fraud, a security incident, or a serious andimminent safety risk

‍Business transactions: Informationmay be disclosed in connection with a proposed or completed merger,acquisition, financing, restructuring, bankruptcy, or transfer of some or allof our business assets, subject to applicable privacy law and appropriateconfidentiality protections

‍Corporate affiliates: [BeMediq LLC does not currently share Consumer Health Data with any corporate affiliate. Ifthis changes, each affiliate will be identified here by legal name before anysuch sharing occurs.]

The categories of Consumer Health Datadisclosed to the recipients above are limited to what is reasonably necessaryfor each recipient’s role, drawn from the categories described in Section 2.

Where Consumer Health Data constitutesprotected health information (“PHI”) under HIPAA, it is used or disclosed onlyas permitted by HIPAA and applicable law — including for treatment, payment,and health care operations, pursuant to a valid authorization, or as otherwiserequired by law. Vendors and subcontractors that handle PHI on behalf of acovered entity or business associate are required to enter into a BusinessAssociate Agreement consistent with HIPAA before receiving PHI.

AmalfiDuo does not sell Consumer Health Data.

We do not disclose clinical intake responses, diagnoses, prescription information, provider communications, or treatment records for targeted or cross-context behavioral advertising, and we do not permit third-party advertising technologies to collect information entered into clinical intake forms, authenticated patient accounts, provider communications, prescription records, or patient-portal pages.

We use cookies and similar technologies wherenecessary to operate, secure, and improve our website. Public, non-clinicalpages of our website may use limited analytics technologies that collect deviceand interaction information, such as pages viewed. Where required by law, weobtain consent before collecting or sharing health-related browsinginformation.

‍Cross-site collection. Third-party analytics or advertising technologies may collect information about your activity over time and acrossother websites or online services only as disclosed through our cookie controlsand general Privacy Policy, and only where permitted by applicable law andconsented to when required.

‍Geofencing. We do not use geofencing technology to establish a virtual boundaryaround any mental health facility, reproductive or sexual health facility, orother in-person healthcare facility for the purpose of identifying or trackingconsumers, collecting their consumer health data, or sending themnotifications, messages, or advertisements.

We may collect Consumer Health Data from:
- You directly
- Your authorized representative
- Your browser, device, and interactions with our website
- Independent healthcare providers and provider networks
- Dispensing pharmacies
- Telehealth, payment, identity-verification, hosting, security, communications, analytics, and customer-support providers
- Information generated or inferred from your use of the AmalfiDuo platform

To exercise your Consumer Health Data rights, email: support@amalfiduo.com
‍Use the subject line: Consumer Health DataRequest

Please describe the right you wish to exerciseand provide enough information for us to locate your records and authenticateyour identity. We may request additional information when reasonably necessaryto verify the request.

You are not required to create a new accountto submit a request, although we may ask you to use an existing account whenappropriate.

To appeal a denied request, email the sameaddress with the subject line: Consumer Health Data Appeal

Explain why you believe the decision should bereconsidered. We will review the appeal and respond within the period requiredby applicable law. If the appeal is denied, we will provide information aboutcontacting the appropriate state attorney general where required.

Authorized representatives may submit requestswhere permitted by law. We may request evidence of their authority and mayverify the request directly with you.

We maintain administrative, technical, andphysical safeguards designed to protect Consumer Health Data from unauthorized access, alteration, loss, misuse, or disclosure. No electronic system or methodof transmission is completely secure, and we cannot guarantee absolutesecurity.

We retain Consumer Health Data only for aslong as reasonably necessary to:
- Provide theservices you requested
- Maintaintransaction and account records
- Meet legal,regulatory, tax, accounting, security, and fraud-prevention obligations
- Resolvedisputes and enforce agreements

When information is no longer needed, wedelete or de-identify it in accordance with our retention practices andapplicable law.

Independent healthcare providers and dispensing pharmacies maintaintheir own records under separate legal, professional, and contractualrequirements.

AmalfiDuo services are intended only foradults aged 18 and older.

We do not knowingly collect Consumer Health Data from anyone under 18. If we learn that such information was submitted, wewill take appropriate steps to delete it.

We may update this policy to reflect changesin our services, technology, vendors, or legal obligations.

We will post the revised policy with a new“Last Updated” date. Material changes may also be communicated through thewebsite, email, account notification, or another appropriate method. Whererequired, we will obtain consent before collecting, using, or sharingadditional categories of Consumer Health Data or using existing data for amaterially different purpose.

Questions, privacy requests, and appeals maybe directed to::

• BeMediq LLCd/b/a AmalfiDuo

• Email: support@amalfiduo.com

• Address: 8911 N Capital of Texas Hwy suite 4200/1013, Austin, TX 78759