California Privacy Notice

# California Privacy Notice _Last updated: June 2026_ This notice supplements our Notice of Privacy Practices and applies to California residents under the California Consumer Privacy Act as amended by the CPRA. ## Important scope note Most information we hold about patients is **medical information governed by HIPAA and California's Confidentiality of Medical Information Act (CMIA)**, which is exempt from CCPA/CPRA. This notice covers the limited non-medical information we collect (for example, marketing email addresses from people who have not become patients). ## Categories we collect - Identifiers: name, email, phone, postal address - Internet activity: first-party, event-level usage of our site (no cross-site tracking) - Commercial information: orders and subscription status ## We do not sell or share We do **not** sell personal information, and we do **not** "share" personal information for cross-context behavioral advertising. We have not done so in the preceding 12 months. We do not use or disclose sensitive personal information for purposes requiring a right to limit. ## Your rights California residents may request, up to twice in 12 months, free of charge: - **To know** the categories and specific pieces of personal information we hold - **To delete** personal information (subject to legal retention duties — medical records have mandatory retention periods) - **To correct** inaccurate personal information - **Non-discrimination** for exercising any right ## How to exercise rights - From your account: **Account → Your data** - Email: privacy@upliftrx.co We verify requests by matching information you provide against our records. An authorized agent may act for you with written permission. ## Contact UpLiftRx, Inc. — Houston, TX · privacy@upliftrx.co