To enable us to provide you with a delightful pharmacy experience, we may collect or you may be asked to share personal information with us. SymfoniRx is committed to safeguarding the privacy and security of your personal information that you or others provide to us. This SymfoniRx Privacy Policy describes the privacy practices of SymfoniRx and all of its subsidiaries (“SymfoniRx,” “we,” or “us”).

By using or accessing SymfoniRx’s pharmacy services and programs (both online and in person), SymfoniRx’s website, mobile application including social media, products, and other technology platforms (collectively, the “Services”), you understand and agree that your personal information will be subject to the practices and policies outlined in this Privacy Policy, and you consent to the collection, use, and sharing of your personal information in the ways outlined in this Privacy Policy. If you don’t agree to this Privacy Policy, you shouldn’t and aren’t be permitted to use or access any of the Services. You may print a copy of this Privacy Policy. If you have a disability, you may access this Privacy Policy in an alternative format by contacting info@symfonirx.com.

Certain information that SymfoniRx collects may be considered “protected health information” or “PHI” under the Health Insurance Portability and Accountability Act (“HIPAA”). This Privacy Policy does not cover our collection, use, or protection of such PHI. Please make sure to carefully review our HIPAA Notices of Privacy Practices (“HIPAA Notice”), which instead applies to the protection and use of PHI.

Use of the Services is also subject to our Terms of Service (our “Terms”), which incorporates this Privacy Policy.

1. What does this Privacy Policy cover?

This Privacy Policy covers how we treat your “personal information,” which is identifiable information about you. This includes information referred to as “personally identifiable information,” “personal data,” or “personal information” under data privacy laws, rules, and regulations that protect you and that apply to SymfoniRx.

When we say, “you,” we mean users of SymfoniRx’s Services.

This Privacy Policy doesn’t cover the practices of third parties that we don’t own, control, or manage, including any third-party websites or services. While we try to only work with third parties that share our respect for your privacy, we don’t take responsibility for their policies, so we encourage you to carefully review the privacy policies of the third-party websites or services that you access.

2. What categories of personal information do we collect?

We may collect the following categories of personal information from you when you visit our website before becoming a customer of SymfoniRx by submitting information regarding a prescription or if you only purchase non-prescription products from SymfoniRx:

• Identifiers (such as name, personal email address, personal zip code, and driver’s license, or other forms of identification);
• Commercial information (such as transaction history);
• Internet or other network or device activity (such as IP address or usage data);
• The general location of the device that you are using to access the Services;
• Legally protected classifications (such as gender);
• Voice recordings made during calls with our pharmacy experience team; and

Other information that identifies or can be reasonably associated with you that you have voluntarily provided to us.

3. How, when, and why do we collect personal information about you?

We may collect personal information from you from the following sources:

From or on behalf of You. We collect personal information about you when you visit our website, communicate with us, or otherwise make use of or interact with any of the Services. If a family member or another authorized representative is using the Services on your behalf, we may also collect information about you through them.

From Your Use of the Services or Interaction with SymfoniRx. When you visit our website, we may gather personal information about your device’s general location, either from your IP address or from your use of the Services, or from location-based personal information that you elect to provide through your use of a mobile or other Internet-enabled device. We may also receive personal information through Cookies (as defined below).

From Our Vendors and Business Partners. We may receive personal information about you from our vendors or business partners who assist us with, for example, marketing or promotional services, advertisements, communications, or other personal information gathering. We may use analytics providers to collect and analyze personal information about how you interact and engage with the Services.

4. How do we process your personal information?

We may use, store, summarize, disclose, or otherwise handle your personal information we collect about you in the following ways:

To provide you with the Services you’ve requested and to personalize your experience, including:

• To process your orders for non-prescription products, including any applicable discounts (note that prescription medication orders are covered by the HIPAA Notice);
• To respond to your service requests;
• To respond to communications that we receive from you, to contact you when necessary or requested, and to send you personal information about SymfoniRx or the Services; and
• To provide you with information that we believe will be of value to you in protecting and managing your health, which may be customized based on orders you’ve filled at SymfoniRx or other information that you’ve provided us.

For any legitimate business purpose, including:

• To improve the Services, including, for example, testing, internal analytics, and product development;
• To market our Services;
• To create aggregated and de-identified data, and
• To provide any legitimate business service or product.

For legal matters, including:

• To fulfill our legal obligations under applicable law, regulation, court order, or other legal process;
• To protect the rights, property, security, or safety of you, SymfoniRx, users of the Services, or the public, including detecting and protecting against error, fraud, and other unauthorized or illegal activities; and
• To resolve any disputes and enforce our Terms and any other agreements or matters with you or others.

To consider, prepare for, or carry out a corporate transaction, including:

• An acquisition of SymfoniRx, or one or more of our business units, or of some or all of our assets; and
• In the context of some other business acquisition transaction or other transaction in which a third party combines or collaborates with us or one or more of our business units.

5. Why and how do we disclose your personal information we collect to third parties?

We disclose your personal information if you’ve permitted us to do so or as listed in this Privacy Policy.

We do not sell your personal information to any third party for monetary or other valuable compensation.

We may disclose your personal information to the following categories of third parties for the following reasons:

• To our vendors and business partners who have been engaged to enable us to provide the Services that you’ve requested, to personalize your experience, or perform business functions on our behalf, including our advertising partners who help us market our services and provide you with other offers that may be of interest to you;
• To a law enforcement agency or other government agency, a court or other tribunal, attorney, or a third party for the legal matters and corporate transactions described in Section 4 above;
• To a third party if such disclosure is required in order for us to fulfill our legal obligations under applicable law, regulation, court order, or other legal process;
• To establish or exercise our legal rights or to defend against claims; and
• To protect the rights, property, security, or safety of you, SymfoniRx, our customers, or the public.

6. How do you correct and update your personal information?

You can correct or update your personal information by updating your account through the Services or by contacting us at info@symfonirx.com or (718) 935-1033. It may take us up to thirty (30) days to process your request.

7. How do we safeguard your information?

SymfoniRx follows generally accepted industry practices for protecting your personal information, including encryption of sensitive data at rest and in transit, anti-malware detection and prevention mechanisms, and real-time monitoring and response for potential security threats to protect personal information. Although we work to protect the security of your account and information, please be aware that no method of transferring personal information over the Internet, through a system, or via electronic data storage is completely secure, and therefore, we can’t guarantee absolute security.

8. Will this Privacy Policy change?

We may change this Privacy Policy at any time. However, we’ll give you prior notice of any major changes by placing a notice on the Services, by sending you an email, or by some other manner, and we’ll let you know when the modified Privacy Policy will become effective. Your continued use of the Services after the new effective date will be considered as assent to the new Privacy Policy.

9. What else do you need to know?

Internet and Other Electronic Network Activity Tracking. SymfoniRx and our third-party service providers use tracking technologies (collectively, “Cookies”) and browser local storage technology to manage your identity, store your preferences, track how you interact with the Services, and make your experience more consistent. You can control how local storage works in your browser settings; however, disabling the local storage functionality on your browser may prevent you from being able to access and use our website.

Website tracking technologies are small pieces of data placed on your computer, tablet, phone, or similar device when you use that device to access the Services. Cookies help us in many ways to make your use of the Services more enjoyable and meaningful. We may use these types of Cookies to enable our servers to recognize your web browser, tell us how and when you visit and use the Services, analyze trends, learn about our customer base, and operate and improve the Services (local storage may also perform these functions).

We may use certain types of Cookies, such as pixels, which are embedded on unauthenticated pages of our website (which are pages for which you have not provided login credentials) in order to track and provide advertising. We may also use Cookies in our relationships with our vendors and business partners to assist us in better understanding customers of our Services through our customers’ interactions with the Services.

Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as

10. Other Privacy Rights

Symfonirx intends to provide you with all privacy rights to which you are entitled by law. If you believe you are entitled to exercise privacy rights under any other applicable law, please email us at info@symfonirx.com or write to Symfonirx at:

1336 Utica Ave, Brooklyn, NY 11203 (Attention: Legal Department).

11. Questions or Concerns

If you have any questions or concerns regarding privacy while using the Services, please contact us at info@symfonirx.com or call us at 718-935-1033.