Consumer Health Data Privacy Policy

Last Updated: 1/29/2026

Nextmeds, Inc. (collectively, "Nextmeds," "our," "we," or "us") values and respects the privacy of its customers and visitors. While operating our business and interacting with you, we may collect, use, and share "Consumer Health Data" as defined by U.S. state consumer health data privacy laws, such as the Washington My Health, My Data Act and Nevada SB370 (collectively, "Consumer Health Data Privacy Laws"). Consumer Health Data Privacy Laws apply to consumers residing in certain states whose consumer health data is collected by Nextmeds ("Consumers," "you," or "your") and provide Consumers with specific rights regarding their Consumer Health Data. This Consumer Health Data Privacy Policy ("Consumer Health Data Privacy Policy") supplements our Política de privacidad ("Privacy Policy") and applies solely to such Consumers.

This Consumer Health Data Privacy Policy provides you with detailed information about how we and our subsidiaries, divisions, affiliates, brands and other companies that link to this Consumer Health Data Privacy Policy collect, use, and share your Consumer Health Data, and describes your choices and rights. We encourage you to read this Consumer Health Data Privacy Policy carefully and if you have any questions to contact us using the methods listed below.

We reserve the right to make changes to this Consumer Health Data Privacy Policy at any time and for any reason. Any changes will be reflected in a revised Consumer Health Data Privacy Policy posted on our website (the "Website") and we will alert you that there has been a change by updating the "Last Updated" date displayed on the Consumer Health Data Privacy Policy. If we determine that such changes materially affect your privacy rights, we will provide additional notice to you at the email address specified in your account. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Website and this Consumer Health Data Privacy Policy to check for any changes.

Definitions

"Consumer Health Data" is defined for purposes of this Consumer Health Data Privacy Policy and the Consumer Health Data Privacy Laws as personal information that is linked or reasonably linkable to a Consumer and that identifies the Consumer's past, present, or future physical or mental health status.

Consumer Health Data does not include: (a) publicly available information, such as information from government records, information we reasonably believe you made available to the general public, or unrestricted information you have disclosed or made available; (b) deidentified or aggregated consumer information we maintain in deidentified form and do not attempt to re-identify except as required or permitted by law; (c) health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"); and (d) personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act ("FCRA") and the Gramm-Leach-Bliley Act ("GLBA").

Categories of Consumer Health Data Collected, Purposes for Collection, Use, and Sharing

We may collect your Consumer Health Data in a variety of ways, including when you provide information directly to us through our agents or our Website, and through or from your doctor or other medical professional, as well as from our service providers and business partners.

Categories of Consumer Health Data we may collect, use, disclose, and share include data regarding: (a) health conditions, treatments, symptoms, diseases, diagnosis, medical conditions, medical recommendations, mental health conditions, and mental health information; (b) health history information; (c) use or purchase of prescribed medication; (d) data that identifies a consumer seeking health care services or referrals; (e) gender, reproductive, or sexual health information; (f) consultations and information relating to consulting with a physician; (g) height and weight information; (h) records of your communications and requests with us or one of our partner companies; and (i) any other health or medical information.

We collect, use, and disclose the above-described Consumer Health Data to offer our products and services to you, as directed by you. We may share Consumer Health Data with third party providers to advertise and market our services to you.

Your Rights

Subject to certain legal limitations and exceptions, Consumer Health Data Privacy Laws provide you with certain rights you may exercise:

• The Right to Confirm. You may request that we confirm whether we collect, share, or sell your Consumer Health Data.
• The Right to Access and Request Copies. You may request to access or request a copy of your Consumer Health Data, including a list of all third parties and affiliates with whom we shared or sold the Consumer Health Data.
• The Right to Correct. You may request that we correct your Consumer Health Data.
• The Right to Withdraw Consent. You may request to withdraw your consent from our collection and sharing of your Consumer Health Data.
• The Right to Delete. You may request that we delete your Consumer Health Data.

In order to exercise any of the rights detailed in this Consumer Health Data Privacy Policy, please contact us at privacy@nextmeds.com. Exercising your rights under this Consumer Health Data Privacy Policy will not result in any discrimination by us. We will treat you the same as any other user.

We may require additional information from you to help us verify your identity and state or country of residence, and to process your request. The verification steps may vary depending on the sensitivity of the information and whether you have an account with us. If we are unable to verify your identity, we may deny your requests. You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent's permission to do so and verify your identity directly.

If you make a request to exercise any of the applicable rights and we are unable to comply with your request, or if you disagree with or dispute our decision, you may request to appeal our decision. To appeal any data rights decision, please contact us by email at privacy@nextmeds.com with the subject line "Data Rights Request Appeal." If you are still not satisfied with our response after you complete the appeal process with us, you may file a complaint with the Washington state Attorney General through their complaint filing system, available here.

Contact Us

If you have questions or comments about this Consumer Health Data Privacy Policy, please contact us at privacy@nextmeds.com.