Cerium Medical Consumer Health Data Privacy Notice

Effective Date: [8/20/26]

This Cerium Medical Consumer Health Data Privacy Notice (“Notice”) supplements the Cerium Medical Privacy Notice and applies to Consumer Health Data (as defined below) subject to the Washington State My Health My Data Act, Nevada’s Consumer Health Data Privacy Law (SB 370), the Connecticut Data Privacy Act, and similar state laws (collectively, “Consumer Health Data Laws”).

This Notice is available to persons with disabilities. To access this Notice in an alternative, downloadable format, please click here.

Our Collection and Use of Consumer Health Data

The term “Consumer Health Data” as used in this Notice means any personal information that is used to identify your physical or mental health condition or diagnosis. The data we collect depends on the context of your interactions with us and, in most cases, is information that you decide to share with us to provide our telehealth services. Consumer Health Data does not include information that is considered deidentified under the Consumer Health Data Laws. Examples of Consumer Health Data that Cerium Medical may collect include current and past medical conditions, symptoms and health concerns, medications and treatments, allergies, height, weight, body composition, and weight-management history, hormone levels and hormone-related symptoms, sexual and reproductive health information, information concerning erectile dysfunction, libido, hair loss, thyroid function, metabolism, energy, mood, and other wellness concerns, information regarding hormone, cholesterol, glucose, and other relevant health markers, lifestyle information, such as diet, exercise, sleep, and health or treatment goals, and information regarding diagnoses, treatment plans, prescriptions, treatment response, progress, and other information discussed or generated during consultations, assessments, follow-up visits, or other interactions with healthcare providers. 

We may process and/or use this information for the following purposes:

• in the provision of medical, telehealth, and telemedicine services and providing you with our platform for such services;
• to communicate with you, including responding to your questions and comments;
• administrative purposes including providing customer service or verifying customer information;
• undertaking internal research for product development, quality, or safety;
• complying with legal and regulatory obligations; 
• in connection with a corporate transaction, such as if we acquire assets of another business, or sell or transfer all or a portion of our business or assets including through a sale in connection with bankruptcy and other forms of corporate change;
• for marketing, such as marketing our products or services. For example, we may use Consumer Health Data we collect to personalize advertising to you or to send you newsletters, surveys, questionnaires, promotions, or information about events or webinars; and 
• other purposes we may notify you about or for which you provide your consent or authorization. 

Sources From Which Your Consumer Health Data Is Collected

The Consumer Health Data we collect may come from various sources, including:

• Directly from you. We may collect Consumer Health Data you provide to us directly, such as when you partake in telehealth services, contact us through our digital properties and websites, interact with us in person, sign up for offers or newsletters, communicate with us, place or customize orders, or sign up for an account or other services.
• From third parties. We may collect Consumer Health Data from third parties, such as licensed healthcare practitioners who provide the telehealth services, our affiliated companies and subsidiaries, or other parties who interact with us.

Our Disclosure of Consumer Health Data

We may share the categories of Consumer Health Data set forth above as follows:

• Providers: We may disclose your Personal Information to licensed health care practitioners who provide the Services. 
• Affiliates and Subsidiaries: We may share your Consumer Health Data internally or with our affiliates and subsidiaries as needed for the purposes listed above. 
• Service Providers: We work with a variety of service providers who help us process your Consumer Health Data, such as to facilitate the provision of our services or that perform business or operational services for us or on our behalf, such as website hosting, infrastructure provisioning, IT services, payment processing services, legal, and administrative services.
• Business Transactions: We may take part in or be involved with a business transaction, such as a merger. We may share Consumer Health Data with a third party during the negotiation of or in connection with such a transaction to the extent permitted by applicable law.
• Legal Obligations and Rights: We may share Consumer Health Data with third parties: in connection with the establishment, exercise, or defense of legal claims; to comply with laws or to respond to lawful requests and legal processes; to submit reports to regulatory agencies; to protect our rights and property and the rights and property of others, including to enforce our agreements and policies; to detect, suppress, or prevent fraud; to protect the health and safety of us and others; or as otherwise required by applicable law.
• With Your Consent: We may share Consumer Health Data about you to certain other service providers or publicly with your consent or at your direction.

In the event we process deidentified data derived from Consumer Health Data, we will maintain and use deidentified data without attempting to reidentify you except as permitted by law and will contractually obligate any recipients of such data to satisfy these criteria.

Exercising Your Privacy Rights

Some Consumer Health Data Laws provide certain rights with respect to Consumer Health Data, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions.

To exercise any of your privacy rights under Consumer Health Data Laws, or if you have any questions about your privacy rights, please do not hesitate to contact us at:

E-mail: [customerservice@ceriummedical.com].

Phone: [+1 224-335-8545 ]

If we decline or are unable to take action regarding your request, we will notify you with our reasons and will provide instructions for how you can appeal the decision. If the appeal is unsuccessful, you may raise a concern or lodge a complaint with the applicable attorney general or other regulatory authority in your state.

With respect to Consumer Health Data that may be collected or shared through cookies, pixels, or similar tracking technologies in connection with your use of our platform, you may withdraw your consent to future collection or sharing by using [consent withdrawal method]. 

Changes to this Consumer Health Data Privacy Notice

From time-to-time, we may change this Notice. We will post any changes on this page. If we change the Notice significantly, we will notify you by adding a prominent notice on our websites and services; by sending you an email notification; or via other appropriate communication channels, as required by applicable law. To the maximum extent permitted by applicable law, any changes will become effective when we post the updated Notice, and your use of our services following these changes means that you accept the updated Notice. We encourage you to review this Notice when you use our services to stay aware of our information practices.