Privacy Policy / Cookie Policy

This Privacy Policy contains the following sections:

• The Information We Collect and the Sources of Such Information
• Purposes for How We Use Your Information
• Online Analytics and Advertising
• How We Share and Disclose Your Information
• Your Marketing Choices
• Third Party Services and Notice About Health Information
• How We Protect Your Information
• Privacy Information for California Residents
• Privacy Information for Nevada Residents
• Retention of Your Information
• Revisions to Our Privacy Policy
• Contacting Us

THE INFORMATION WE COLLECT AND THE SOURCES OF SUCH INFORMATION

We obtain information about you through the means discussed below when you use the Services. Please note that we need certain types of information so that we can provide the Services to you. If you do not provide us with such information, or ask us to delete it, you may no longer be able to access or use part or all of our Services.

1. Information You Provide to Us

We collect a variety of information that you provide directly to us.

For example, we collect information from you through:

• Account and product registration and administration of your account
• Processing your orders and requests for treatment
• Questions, communications, or feedback you submit to us via forms or email
• Your participation in research and surveys
• Requests for customer support and technical assistance, including through online chat functionalities
• Uploads or posts to the Services
• Employment applications you submit

The specific types of information we collect will depend upon the Services you use, how you use them, and the information you choose to provide. The types of data we collect directly from you includes:

• Name, address, telephone number, date of birth, and email address
• Information about your medical conditions, treatment options, physician referrals, prescriptions, and lab results or other related health information, such as your physical and emotional characteristics
• Log-in credentials, if you create an account
• Billing information, such as shipping address, credit or debit card number, verification number, expiration date, and identity verification information, collected by our payment processors on our behalf
• Information about purchases or other transactions with us
• Information about your customer service and maintenance interactions with us
• Demographic information such as your gender and age
• User-generated content you post in public online forums on our Services
• Any other information you choose to directly provide to us in connection with your use of the Services.

2. Information We Collect Through Automated Means

We collect certain information about your use of the Services and the devices you use to access the Services, as described in this Section. As discussed further below, we and our service providers (which are third party companies that work on our behalf), may use a variety of technologies, including cookies and similar tools, to assist in collecting this information.

Our Websites. When you use our Websites, we collect and analyze information such as your IP address, browser types, browser language, operating system, the state or country from which you accessed the Services, software and hardware attributes (including device IDs) referring and exit pages and URLs, platform type, the number of clicks, files you download, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular pages, the terms you use in searches on our sites, the date and time you used the Services, error logs, and other similar information.

Our Apps. When you use our Apps, we automatically receive certain information about the mobile phone, tablet, or computer used to access the Apps, including a mobile device identifier, IP address, operating system, version, Internet service provider, browser type, domain name and other similar information, whether and when you update the Apps, date and time of use, and how you use the Apps, including time spent in different portions of the Apps.

Location Information. When you use the Services, we and our service providers may automatically collect general location information (e.g., IP address, city/state and or postal code associated with an IP address) from your computer or mobile device. This information allows us to enable access to content that varies based on a user's general location (e.g., to provide you with accurate sales tax information and to deliver content customized to your location).

We will ask your permission before collecting your precise GPS location information. In such instances, we will use your precise geo-location information to provide customized services, content, promotional offers and other information that may be of interest to you. If you no longer wish for us and our service providers to collect and use GPS location information, you may disable the location features on your device. Please see your device manufacturer settings.

Our Use of Cookies and Similar Online Tools. To collect the information discussed in this Section, we and our service providers use web server logs, cookies, tags, SDKs, tracking pixels, and other similar tracking technologies. We use these technologies to offer you a more tailored experience.

• A web server log is a file where website activity is stored.
• An SDK is a set of tools and/or code that we embed in our Apps and software to allow third parties to collect information about how users interact with the Services.
• A cookie is a small text file that is placed on your computer or mobile device when you visit a site, that enables us to: (i) recognize your computer/device; (ii) store your preferences and settings; (iii) understand the parts of the Services you have visited and used; (iv), enhance your user experience by delivering and measuring the effectiveness of content and advertising tailored to your interests; (v) perform searches and analytics; and (vi) assist with security and administrative functions.
• Tracking pixels (sometimes referred to as web beacons or clear GIFs) are tiny electronic tags with a unique identifier embedded in websites, online ads and/or email that are designed to: (1) collect usage information like ad impressions or clicks and email open rates; (2) measure popularity of the Services and associated advertising; and (3) access user cookies.

As we adopt additional technologies, we may also gather information through other methods.

Please note that you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the "Help" section of your browser for more information (e.g., Internet Explorer; Google Chrome; Mozilla Firefox; or Apple Safari). Please note that by blocking, disabling, or managing any or all cookies, you may not have access to certain features or offerings of the Services.

3. Information We Collect From Social Media and Other Content Platforms

When you "like" or "follow" us on Facebook, Instagram, Twitter, or other social media sites, we may collect some information from you including your name, email address, and any comments or content you post relevant to us. We also collect your information if you sign up for one of our promotions or submit information to us through social media sites.

4. Information We Receive From Other Sources

We work closely with third parties (including, for example, third parties from whom we may receive information about you) and may receive information about you from them. These third parties may include our business partners, subcontractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies, our corporate affiliates, or other companies that provide services to us. We may combine the information we receive from other sources with information we collect through the Services. In those cases, we will apply this Privacy Policy to any personal information received, unless we have disclosed otherwise.

PURPOSES FOR HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

• To provide, maintain, and improve our Services
• To process your orders and requests for treatment
• To communicate with you about your account, orders, and services
• To send you marketing communications (with your consent where required)
• To personalize your experience and provide tailored content
• To conduct research and analytics
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms

ONLINE ANALYTICS AND ADVERTISING

We work with third-party analytics and advertising companies to help us understand how users use our Services and to serve ads. These companies may use cookies, web beacons, and other tracking technologies to collect information about your use of our Services and other websites. For more information about how to opt out of interest-based advertising, please see the "Your Marketing Choices" section below.

HOW WE SHARE AND DISCLOSE YOUR INFORMATION

We may share your information in the following circumstances:

• With healthcare providers and pharmacies to provide services
• With service providers who perform services on our behalf
• With our corporate affiliates
• In connection with a business transfer or merger
• To comply with legal obligations or protect our rights
• With your consent or at your direction

YOUR MARKETING CHOICES

You can opt out of receiving marketing communications from us by following the unsubscribe instructions in those communications or by contacting us through the Patient Portal. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related communications.

THIRD PARTY SERVICES AND NOTICE ABOUT HEALTH INFORMATION

Some of the information we collect through the Services (e.g., medical information), is subject to various health data privacy laws, including HIPAA. This health information is protected under those laws and is not subject to the same uses and disclosures as other personal information described in this Privacy Policy. For more information about how we protect your health information, please see our Notice of Privacy Practices.

HOW WE PROTECT YOUR INFORMATION

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

PRIVACY INFORMATION FOR CALIFORNIA RESIDENTS

If you are a California resident, you have certain rights under the California Consumer Privacy Act ("CCPA"). Please note that some of the information we collect through the Services (e.g., medical information), is subject to various health data privacy laws, and is therefore not subject to the CCPA.

Your California Privacy Rights

CCPA Rights Disclosure. If you are a California resident, the CCPA allows you to make certain requests about your personal information. Specifically, the CCPA allows you to request us to:

• Inform you about the categories of personal information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we share/disclose personal information.
• Provide access to and/or a copy of certain information we hold about you.
• Delete certain information we have about you.

The CCPA further provides you with the right to not be discriminated against (as provided for in applicable law) for exercising your rights.

Please note that certain information may be exempt from such requests under California law. For example, we need certain information in order to provide the Services to you. We also will take reasonable steps to verify your identity before responding to a request.

If you are a California resident and you would like to exercise any of your data rights under California law, please email us at telehealth@leguprecovery.com.

Please include your full name, email address and residential address associated with your use of our Services, along with the rights you would like to exercise, so that we can process your request in an efficient manner. If you would like to receive a copy of your medical record in connection with your request, please indicate that in your email message. By requesting your medical record in this way, you are agreeing to receive your medical record in an unencrypted email message.

Third Parties

Like many companies with an internet presence, we do work with third parties that provide marketing and advertising services to us, including interest-based advertising services, and these third parties may place tags, pixels, cookies, beacons, and other similar tracking mechanisms on our Website and App and collect your online identifiers. Because of the CCPA's broad definitions of "sale" and "personal information," making certain online identifiers available to these companies so that they can provide marketing and advertising services to Leg Up Recovery may be considered a "sale" under the CCPA. To opt out of sharing your information with participating third parties for interest-based advertising, please visit the Network Advertising Initiative's Consumer Opt-Out link, the Digital Advertising Alliance's Consumer Opt-Out link, and Your Online Choices. Please note that these opt-outs are device and browser based, so you will need to opt out on each of your devices and browsers.

Shine the Light Disclosure. The California "Shine the Light" law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not share your personal information with third parties for their own direct marketing purposes.

PRIVACY INFORMATION FOR NEVADA RESIDENTS

Under Nevada law, certain Nevada consumers may opt out of the sale of "personally identifiable information" for monetary consideration (as such terms are defined under Nevada law) to a person for that person to license or sell such information to additional persons. We do not engage in such activity; however, if you are a Nevada resident who has purchased services from us, you may submit a request to opt out of any potential future sales under Nevada law by emailing telehealth@leguprecovery.com. Please note we will take reasonable steps to verify your identity and the authenticity of the request. Once verified, we will maintain your request in the event our practices change.

RETENTION OF YOUR INFORMATION

We keep your information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws.

REVISIONS TO OUR PRIVACY POLICY

We reserve the right to change this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. We will make the revised Privacy Policy accessible through the Services, so you should review it periodically. The date this Privacy Policy was last revised is identified at the top of the document. You are responsible for periodically monitoring and reviewing any updates to the Privacy Policy. If we make a material change to the Privacy Policy, we will provide you with appropriate notice in accordance with legal requirements. Your continued use of our Websites or Apps after such amendments (and notice, where applicable) will be deemed your acknowledgment of these changes to this Privacy Policy.

CONTACTING US

If you have any questions about this Privacy Policy or Leg Up Recovery's privacy practices, please contact us at:

For general questions, you may also visit the Patient Portal at https://patient.leguprecovery.com/login.

Last updated: December 29, 2025