Alori Health California Privacy Notice

Effective Date: April, 23 2026

This California Privacy Notice applies only to California residents (“consumers” or “you”) and supplements the information contained in Alori Health’s general Privacy Policy. We adopt this Notice to comply with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable California privacy laws. Any terms defined in the CCPA or CPRA have the same meaning when used in this Notice.

I. Information We Collect

We may collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“Personal Information”).

Depending on your interactions with Alori Health, we may have collected the following categories of Personal Information from California residents in the preceding twelve (12) months:

Category A. Identifiers

Examples may include:

• name;

• mailing address;

• email address;

• phone number;

• account name;

• date of birth;

• online identifiers;

• IP address; and

• other similar identifiers.

Collected: Yes

Category B. Personal Information Listed in California Customer Records Statute

Examples may include:

• name;

• address;

• telephone number;

• signature;

• payment-related information;

• insurance-related information where applicable;

• medical information; and

• other information described in Cal. Civ. Code § 1798.80(e).

Collected: Yes

Category C. Characteristics of Protected Classifications

Examples may include:

• age;

• gender;

• marital status;

• disability status; and

• other protected classification information where collected and permitted by law.

Collected: Yes

Category D. Commercial Information

Examples may include:

• products or services purchased or considered;

• subscription or program enrollment;

• payment history;

• order details; and

• transaction-related information.

Collected: Yes

Category E. Biometric or Health-Related Information

Examples may include:

• health information;

• medical conditions;

• symptoms;

• blood pressure or other health metrics;

• lab-related information; and

• other health-related details you provide.

Collected: Yes

Category F. Internet or Other Similar Network Activity

Examples may include:

• browsing activity;

• website usage;

• account activity logs;

• chat or email transcripts;

• cookies and similar tracking information;

• browser type;

• device information; and

• interactions with our website or platform.

Collected: Yes

Category G. Geolocation Data

Examples may include:

• approximate location inferred from IP address or device information.

Collected: Limited, where applicable

Category H. Sensory Data

Examples may include:

• audio recordings of calls;

• customer service recordings; and

• other audio or similar information where permitted by law.

Collected: Yes, where applicable

Category I. Professional or Employment-Related Information

Examples may include:

• occupation;

• employment information you provide; and

• related profile details.

Collected: Yes, where applicable

Category J. Non-Public Education Information

Examples may include:

• education records protected by FERPA.

Collected: No

Category K. Inferences Drawn from Personal Information

Examples may include:

• preferences;

• interests;

• behavioral patterns;

• account preferences; and

• similar inferences used to improve services or communications.

Collected: Yes

II. Sources of Personal Information

We may collect the categories of Personal Information listed above from the following categories of sources:

• directly from you;

• indirectly from you through your use of the website or platform;

• from independent licensed providers, affiliated healthcare partners, pharmacies, laboratories, and related service partners;

• from payment processors and service providers;

• from analytics providers, advertising partners, and website tools;

• from communications you send to us; and

• from other third parties who interact with us in connection with the services we provide.

III. Information Not Included in This Notice

This Notice does not apply to:

• publicly available information made lawfully available from government records;

• de-identified or aggregated information;

• information excluded from the CCPA/CPRA scope;

• protected health information governed by HIPAA;

• medical information governed by the California Confidentiality of Medical Information Act (CMIA); or

• information governed by other sector-specific privacy laws where applicable.

IV. Sensitive Personal Information

Under California law, certain Personal Information may be considered Sensitive Personal Information. Depending on the context, this may include:

• Social Security number, driver’s license number, or passport number;

• account log-in credentials or financial account information in combination with access credentials;

• precise geolocation;

• racial or ethnic origin;

• religious or philosophical beliefs;

• union membership;

• contents of mail, email, or text messages where Alori Health is not the intended recipient;

• genetic data;

• biometric information used for unique identification;

• health information;

• information about sex life or sexual orientation; and

• other categories defined as sensitive under applicable California law.

We use Sensitive Personal Information only as reasonably necessary to provide requested services, operate the business, maintain security and integrity, comply with legal obligations, and for other purposes permitted by California law.

V. How We Use Personal Information

We may use or disclose Personal Information we collect for one or more of the following business or commercial purposes:

• to fulfill the reason for which the information was provided;

• to create, administer, and maintain your account;

• to provide requested products, services, subscriptions, consultations, communications, or support;

• to process payments, billing, and related transactions;

• to coordinate healthcare-related services with independent licensed providers and related partners;

• to improve our website, platform, products, and services;

• to conduct internal testing, analysis, research, and development;

• to personalize your experience;

• to provide customer support;

• to send service-related messages, updates, reminders, and other communications;

• to send marketing or promotional communications where permitted by law;

• to protect the rights, safety, and property of Alori Health, our users, or others;

• to detect, prevent, or investigate fraud, unlawful activity, or security incidents;

• to comply with legal obligations, court orders, and regulatory requirements; and

• as otherwise permitted or required by law.

We will not collect additional categories of Personal Information or use collected Personal Information for materially different, unrelated, or incompatible purposes without providing any required notice.

VI. Sharing and Disclosure of Personal Information

We may disclose your Personal Information to third parties for business purposes. Depending on the context, these third parties may include:

• affiliates;

• service providers and vendors;

• payment processors;

• independent licensed providers and healthcare partners;

• pharmacies, laboratories, and related healthcare support entities;

• advertising, analytics, and technology partners;

• third parties you authorize us to work with; and

• other parties as required or permitted by law.

In the preceding twelve (12) months, we may have disclosed categories of Personal Information for business purposes consistent with this Notice and our general Privacy Policy.

VII. Sale or Sharing of Personal Information

Alori Health does not sell Personal Information in exchange for money.

However, California law defines “sell” and “share” broadly. Depending on the tools used on our website, certain advertising or analytics practices could be considered “sharing” under California law. Where required, California residents may exercise applicable opt-out rights.

VIII. Your California Privacy Rights

If you are a California resident, you may have the following rights under California law, subject to applicable exceptions:

Right to Know

You may request that we disclose:

• the categories of Personal Information we collected about you;

• the categories of sources from which the information was collected;

• the business or commercial purpose for collecting, selling, or sharing the information;

• the categories of third parties to whom we disclose Personal Information;

• the categories of Personal Information disclosed for business purposes; and

• the specific pieces of Personal Information we collected about you.

Right to Correct

You may request that we correct inaccurate Personal Information we maintain about you.

Right to Delete

You may request that we delete Personal Information we collected from you, subject to legal exceptions.

Right to Opt Out of Sale or Sharing

You may request to opt out of the sale or sharing of your Personal Information, where applicable.

Right to Limit Use and Disclosure of Sensitive Personal Information

You may request that we limit the use and disclosure of Sensitive Personal Information, subject to exceptions permitted by law.

Right to Non-Discrimination

We will not discriminate against you for exercising your California privacy rights.

IX. Deletion Request Exceptions

We may deny a deletion request where permitted by law, including where retention of the information is necessary to:

• complete a transaction or provide a requested service;

• perform a contract;

• detect or protect against security incidents, fraud, or illegal activity;

• debug and repair errors;

• exercise free speech or ensure another person’s right to exercise free speech;

• comply with legal obligations;

• engage in certain research in the public interest where permitted by law;

• enable internal uses reasonably aligned with consumer expectations; or

• otherwise use the information internally in a lawful manner compatible with the context in which it was provided.

X. How to Exercise Your California Privacy Rights

To exercise your California privacy rights, you may submit a verifiable consumer request by contacting us at:

Email: support@alorihealth.com
Phone: (786) 618-2694
Address: 66 W Flagler Street, Suite 900, PMB 12277, Miami, FL 33130

Your request must provide sufficient information to allow us to reasonably verify your identity or authority to act on behalf of another California resident.

Only you, or a person authorized to act on your behalf under California law, may make a verifiable consumer request related to your Personal Information. You may also make a request on behalf of your minor child where permitted by law.

We may need to request additional information to verify your identity before responding.

XI. Response Timing and Format

We aim to respond to verifiable consumer requests within 45 days of receipt. If we need more time, we may extend the response period by up to 90 days where permitted by law and will inform you of the reason for the extension.

If you have an account with us, we may deliver our response through your account. Otherwise, we may respond by email or mail, at your option where applicable.

We generally do not charge a fee to process or respond to your request unless the request is excessive, repetitive, or manifestly unfounded, in which case we may charge a reasonable fee or decline the request as permitted by law.

XII. Non-Discrimination

We will not discriminate against you for exercising your California privacy rights. Unless permitted by law, we will not:

• deny you goods or services;

• charge you different prices or rates;

• provide you with a different level or quality of goods or services; or

• suggest that you may receive different pricing, service levels, or quality for exercising your rights.

XIII. Changes to This California Privacy Notice

We may update this California Privacy Notice from time to time in our discretion. When we do, we will post the updated version on our website and revise the effective date at the top of this Notice.

Your continued use of the Platform after changes are posted means you accept the updated Notice to the extent permitted by law.

XIV. Contact Information

If you have questions or comments about this Notice, our privacy practices, or your California privacy rights, please contact:

Alori Health
Email: support@alorihealth.com
Phone: (786) 618-2694
Address: 66 W Flagler Street, Suite 900, PMB 12277, Miami, FL 33130

Important Platform Disclosure

Alori Health is a patient management and technology platform that works with independent licensed providers and related healthcare partners. Alori Health does not directly provide medical care or pharmacy services, and payment does not guarantee that a prescription will be written or dispensed.

Medical services are provided by independent licensed providers. Information on this website is provided for informational purposes only and is not a substitute for professional medical advice, diagnosis, or treatment. If you have questions or concerns about your health, consult a qualified healthcare provider.

This website is an advertisement for services and not for any specific prescription medication.