**Effective Date:** [Effective Date]
**Last Updated:** [Effective Date]

This Privacy Policy explains how **BioConnect Health**, together with its affiliated professional medical practice(s) and licensed providers (collectively, "BioConnect," "we," "us," or "our"), collects, uses, discloses, and protects information in connection with our website at bioconnecthealth.com and our telehealth services, including peptide therapy, hormone optimization, medical weight and metabolic health, and longevity services (collectively, the "Services").

> **Note on health information.** Certain health information we create or receive when providing care to you as a patient is "Protected Health Information" (PHI) governed by the Health Insurance Portability and Accountability Act ("HIPAA"). Our uses and disclosures of that PHI are described in our separate **Notice of Privacy Practices (NPP)**, which controls over this Policy with respect to PHI. This Policy governs information collected through our website and our general business operations.

**Information you provide when you contact us or request a consultation.** Name, email address, phone number, state of residence, and any information you include in a consultation request or message.

**Registration and intake information.** When you become a patient, we collect account details and health-related information through intake questionnaires, medical history, current medications, symptoms, and your health and wellness goals.

**Clinical and laboratory information.** Lab test results, provider assessments, prescribed protocols, dosing, and treatment and monitoring records.

**Payment and transaction information.** Billing name, payment card or payment method details (processed by our third-party payment processor — we do not store full card numbers), billing address, and purchase history.

**Shipping information.** Mailing address and delivery details for lab kits, medications, and materials.

**Communications.** Records of your communications with us, including messages, appointment scheduling, and support requests.

**Information collected automatically.** IP address, device and browser type, operating system, pages viewed, referring URLs, and usage activity, collected through cookies and similar technologies (see Section 6).

You must be **18 years of age or older** to use the Services. We do not knowingly collect information from minors.

2. How We Use Information

We use information to:

- provide, coordinate, and deliver telehealth consultations and treatment;
- evaluate eligibility, review labs, and support provider clinical decision-making;
- fulfill and ship lab kits, medications, and materials;
- process payments, memberships, and subscriptions;
- schedule appointments and send appointment, refill, and follow-up reminders;
- communicate with you about your care, account, and (where permitted) new services and offers;
- operate, secure, analyze, and improve the Services and our website;
- comply with legal, regulatory, licensing, and professional obligations; and
- detect, prevent, and address fraud, security, and safety issues.

Uses and disclosures of PHI for treatment, payment, and healthcare operations are governed by our Notice of Privacy Practices.

3. How We Share Information

We do not sell your personal information. We share information as follows:

**Affiliated providers and medical practices.** With the licensed providers and professional entities who deliver your care.
**Pharmacies.** With compounding and dispensing pharmacies to fill and ship prescriptions ordered by your provider.
**Laboratories.** With clinical laboratories to order and process lab testing.
**Service providers.** With vendors that support us, including telehealth platform, hosting, payment processing, shipping and logistics, communications/SMS, scheduling, and analytics providers, under contractual confidentiality obligations. Vendors who handle PHI do so as HIPAA business associates.
**Legal and safety.** Where required by law, subpoena, regulatory or licensing authority, or legal process, or to protect the rights, safety, or property of BioConnect, our patients, or others.
**Business transfers.** In connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality protections and applicable law.
**With your direction or authorization.** As you otherwise direct or authorize.

4. Text Messaging and Calls

If you provide your phone number, you consent to receive calls and text messages from us related to your care, appointments, and account, and, where you opt in, promotional messages. Message and data rates may apply. You can opt out of text messages by replying **STOP** and get help by replying **HELP**. Opting out of promotional messages will not stop transactional or care-related messages necessary to provide the Services. We handle your number in accordance with applicable law, including the Telephone Consumer Protection Act.

5. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information, including safeguards required by the HIPAA Security Rule for PHI. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Cookies and Analytics

Our website uses cookies and similar technologies to operate the site, remember preferences, measure traffic, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality. We do not use PHI for third-party advertising, and we configure tracking technologies on health-related pages consistent with applicable guidance. We respond to recognized browser-based opt-out preference signals where required by law.

7. Data Retention

We retain information for as long as needed to provide the Services, maintain medical records as required by law, comply with legal, regulatory, and licensing obligations, resolve disputes, and enforce our agreements. Medical record retention periods are set by applicable state and federal law.

8. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of certain personal information, and to opt out of certain processing. Note that information governed by HIPAA and medical-record laws is generally exempt from state consumer-privacy statutes and is instead subject to your rights under HIPAA and our **Notice of Privacy Practices**. To exercise a right regarding non-PHI information, contact us at **info@bioconnecthealth.com**. We will verify and respond as required by law and will not discriminate against you for exercising your rights.

**Consumer health data.** Some states regulate consumer health data outside of HIPAA. Where those laws apply, we collect and use such data only to provide the Services you request and as otherwise permitted by law, and we obtain consent where required.

9. State Availability

The Services are offered only in states where our providers are licensed and where telehealth and applicable laws permit. Availability of services, medications, and protocols may vary by state.

10. Third-Party Links

Our website may link to third-party sites we do not control. This Policy does not apply to those sites, and we encourage you to review their privacy practices.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last Updated" date and, where required, provide additional notice. Your continued use of the Services after an update constitutes acceptance of the revised Policy.

12. Contact Us

**BioConnect Health**
Attn: Privacy
3581 North Federal Highway
Boca Raton, FL 33431

Email: **info@bioconnecthealth.com**
‍Phone: **(561) 828-1024**

For questions about PHI and your rights as a patient, please refer to our **Notice of Privacy Practices** or contact us at the address above.