Consumer Health Data Privacy Policy

EveryONE Medicines
CONSUMER HEALTH DATA PRIVACY POLICY
Updated: 30 August 2024

This Consumer Health Data Privacy Policy explains how Everyone Medicines Inc. and its subsidiaries (“EveryONE Medicines”) collect, use, share, and protect “consumer health data” as defined under applicable U.S. state laws, and the privacy rights and choices you have with respect to such data.

This Consumer Health Data Privacy Policy supplements our Website Privacy Notice. If you are a participant in a clinical study, clinical trial, or other health-related research, you should receive a separate privacy notice regarding the personal data (including any “Protected Health Information” or “PHI”) we process for such research purposes. That privacy notice – and not this Consumer Health Data Privacy Policy – governs our processing of such personal data.

1. Categories of Consumer Health Data We Collect

   We collect the following categories of consumer health data:

   • Social, psychological, behavioral, and medical interventions.
   • Measure of bodily functions, vital signs, symptoms, such as information about wellness, fitness, and nutrition.
   • Data that identifies a consumer seeking health care services.
   • Genetic data, such as information you share with us about your specific gene mutation and other information contained in a genetic report.
   • Information about your health conditions, treatment, diseases, or diagnosis, or use of prescribed medications, such as information about your health history, symptoms and/or treatment, allergies, medications you may be taking, or other health-related information.
   • Any inferences of the above categories of health data derived or extrapolated from non-health information

2. Categories of Sources of Consumer Health Data

   We collect consumer health data directly from you (or those authorized to provide the data on your behalf, such as your caregiver or authorized representative), in connection with these activities:

   • When you (or a caregiver or authorized representative on your behalf) submit an inquiry through our website to assess whether an individual meets the criteria for development of an individualized therapy.
   • When you (or a caregiver or authorized representative on your behalf) choose to contact us via other means (such as via telephone or mail).

3. Purposes For Which We Collect And Use Consumer Health Data

   We collect and use consumer health data as provided below:

   • To process your requests or respond to your inquiries. This includes assessing whether an individual meets the criteria for development of an individualized therapy in response to your request or inquiry.
   • For research and development purposes, including to analyze and improve our products and services. As part of these activities, we may create aggregated, de-identified, or other anonymous data from consumer health data we collect.
   • For compliance and protection, including to comply with legal obligations, defend against legal claims or disputes, protect the security and integrity of our products and services, and identify and investigate fraudulent, harmful, unauthorized, unethical, or illegal activity.
   • At your direction or with your consent, if you choose to provide consumer health data to us for any other purpose, as disclosed at the time you provide such information

4. Disclosures of Consumer Health Data

   We may disclose the categories of consumer health data described above to:

   • Processors or service providers, who assist us in providing products and services to you, such as hosting, research, and analytics. This may also include our affiliates that may provide services to us from time to time, specifically, EveryONE Medicines Ltd.
   • Authorities and others, such as law enforcement, government authorities, and private parties, where we believe in good faith to be necessary or appropriate to comply with the law or protect our legitimate interests.
   • Business transferees, such as acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, EveryONE Medicines (including, in connection with a bankruptcy or similar proceedings).
   • Other third parties, where applicable, at your direction or with your consent

5. Your Rights

   Depending on your location, you may request the following in relation to your consumer health data:

   • Confirm whether we are collecting, sharing, or selling your consumer health data, and to access your consumer health data.
   • Delete your consumer health data.
   • Withdraw your consent from our collection or sharing of your consumer health data.

   How to submit requests. Please contact us at privacy@everyonemedicines.com. You are entitled to exercise the rights described above free from discrimination.

   Appeal. If your request to exercise a right under consumer health data privacy laws is denied, you may appeal that decision by emailing us at privacy@everyonemedicines.com. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint, or other regulatory authority as applicable.

6. Changes to This Consumer Health Data Privacy Policy

   We reserve the right to modify this Consumer Health Data Privacy Policy at any time. If we make material changes to this Consumer Health Data Privacy Policy, we will notify you by updating the date of this Consumer Health Data Privacy Policy and posting it on our website. If required by law we will also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via email or another appropriate manner. Any modifications to this Consumer Health Data Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of our services after the effective date of any modified Consumer Health Data Privacy Policy indicates your acceptance of the modified Consumer Health Data Privacy Policy.