Consumer Health Data Privacy Notice

Effective date: September 18, 2026 · Last updated: September 18, 2026

Rely Telehealth Plus, Inc. d/b/a Row Telehealth (“Row Telehealth”, “we”, “our”, or “us”) provides this Notice under the Washington My Health My Data Act (RCW 19.373), the Nevada consumer health data law (NRS 603A.400 and following), and the consumer health data provisions of the Connecticut Data Privacy Act. Those laws require this Notice to be published separately from our general Privacy Policy, which it supplements.

Who this Notice covers

Under Washington’s My Health My Data Act, a consumer is a Washington resident, or an individual whose consumer health data is collected in Washington, acting in an individual or household capacity. You do not have to live in Washington to qualify under the second category. This Notice also describes protections for Nevada and Connecticut residents to the extent their laws apply. The rights and obligations described here apply only where the relevant law covers the individual, the entity, the information, and the processing involved, and remain subject to that law’s exclusions and exemptions. None of these laws treat an individual acting in an employment context as a consumer.

Protected health information under HIPAA is handled separately. Row Telehealth is a covered entity under the Health Insurance Portability and Accountability Act. Health information that is protected health information is governed by our HIPAA Notice of Privacy Practices, and each of these state laws exempts it. This Notice applies to consumer health data that remains within the scope of the applicable state law.

1. Categories of consumer health data we collect

• Health conditions, treatments, symptoms, and diagnoses you report to us
• Medications, prescriptions, dosing, and refill activity
• Bodily measurements, including height, weight, and body mass index
• Efforts to seek health care services, including starting or completing a health assessment, creating a patient account, or scheduling a visit
• Information that identifies you as seeking weight management, peptide therapy, sexual health, or hair loss treatment
• Data that can be used to infer any of the above from your interactions with our website or patient portal

2. Sources of consumer health data

Directly from you, through the health assessment and patient portal at try.rowtelehealth.com and through your communications with us. From the licensed providers who evaluate and treat you. From the pharmacies that fill your prescriptions. From laboratory partners when testing is ordered. From your interactions with this website.

3. Purposes for collection and use

To provide and coordinate the services you request. To enable clinical evaluation and prescribing by a licensed provider. To arrange dispensing, shipping, and refills. To bill and process payments. To communicate with you about your care. To monitor safety and adverse events. To improve our services. To prevent fraud and diversion. To comply with law.

How we process consumer health data

We collect, record, organize, store, retrieve, review, transmit, and delete consumer health data as reasonably necessary for the purposes above. Automated systems route information to the appropriate provider, pharmacy, laboratory, payment processor, or service provider. Clinical decisions are made by a licensed provider exercising independent medical judgment.

4. Third parties and affiliates with whom we share consumer health data

Depending on the services you request, the categories shared may include contact and identity information, care-seeking and intake information, health history, symptoms, measurements, and treatment preferences, prescription and refill information, laboratory information, billing and payment-status information, fulfillment and shipping information, communications, and technical or security information. We limit each disclosure to the categories reasonably necessary for the recipient’s role.

We share consumer health data with the following categories of recipients:

• Independently licensed providers and professional entities that evaluate and treat you, currently our provider network, LocumTele
• Compounding and dispensing pharmacies that fill and ship your prescriptions, currently Rush Pharmacy
• Laboratory partners that perform ordered testing
• The patient intake, electronic health record, and patient portal platform that operates try.rowtelehealth.com
• Cloud hosting and infrastructure providers
• Payment processors
• Shipping and logistics providers
• Customer support, email, and messaging platforms

Affiliates. Row Telehealth does not currently share consumer health data with a corporate affiliate as that term is defined by these laws. Independent providers, pharmacies, laboratories, and service providers are treated as third parties for purposes of this Notice.

To request the named third parties within any category above, with an active contact for each, email support@rowtelehealth.com and we will provide the current list.

We do not permit any third party to collect consumer health data through our website over time and across unrelated websites for targeted advertising. This website does not deploy third-party analytics or advertising pixels.

5. We do not sell consumer health data

We do not sell consumer health data. We will not sell consumer health data without first obtaining your valid, written authorization that meets the requirements of applicable law.

6. No geofencing

We do not use geofencing technology within 2,000 feet of any in-person health care facility to identify or track consumers seeking health care services, to collect consumer health data, or to send notifications, messages, or advertisements related to consumer health data or health care services.

7. Your rights regarding consumer health data

You have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data, and access that data, including a list of all third parties and affiliates with whom we have shared it and an active email address or other contact for each
• Withdraw consent to the collection and sharing of your consumer health data
• Review and correct consumer health data we maintain about you, subject to identity verification and medical-record and legal requirements
• Delete your consumer health data. On a valid deletion request, we will delete the data from our records, including archived and backup systems, and will notify all affiliates, processors, contractors, and other third parties with which we have shared the data of the deletion request

Deletion limits. We may retain consumer health data where retention is required by federal or state law, including medical and pharmacy record retention requirements. Where we cannot delete, we will tell you which data we retained and the legal basis. Deletion from archived or backup systems may be delayed where applicable law allows, including for up to six months under Washington law. During that period the data will not be restored to an active system except as permitted by law.

Consent

Where consent is required, the request will describe the categories of consumer health data involved, the purpose, and how the data will be used. A request for consent to share consumer health data will be presented separately from a request to collect it, and consent will not be bundled into general terms of service.

8. How to exercise these rights

Email support@rowtelehealth.com with the subject “Consumer Health Data Request”, or write to Privacy Officer, Rely Telehealth Plus, Inc. d/b/a Row Telehealth, 3905 Crescent Park Drive, First Floor, Riverview, FL 33578. We may need to verify your identity before acting on a request. Do not include health details in the email itself. We will ask for anything we need through the secure patient portal.

We will respond within 45 days, with one 45-day extension where reasonably necessary. Requests are free for up to two per twelve-month period. If we deny your request, you may appeal by emailing support@rowtelehealth.com with the subject “Consumer Health Data Appeal”. We will respond to the appeal within 45 days and, if the appeal is denied, provide instructions for contacting your state Attorney General.

Consumers protected by Washington’s My Health My Data Act may also file a complaint with the Washington State Attorney General at atg.wa.gov/file-complaint.

9. Material changes to this Notice

If we make a material change affecting consumer health data already collected, we will post the revised Notice and, where required, provide additional notice through a direct channel such as email or the patient portal before the change takes effect. We will obtain affirmative consent before collecting, using, or sharing additional categories of consumer health data, or using data for a materially different purpose, when applicable law requires consent.