Privacy Policy

Introduction

This Privacy Policy (“Privacy Policy”) supplements Blair Health Inc. (U.S.) (“Blair Health,” “we,” “us,” or “our”) Terms of Service and describes how we collect, use, maintain, protect, and disclose Personal Data through your use of our website, mobile applications, and related services (collectively, the “Services”). By “Personal Data,” we mean information that is personally identifiable to you.

Please read this Privacy Policy carefully to understand our policies and practices regarding your Personal Data and how we will treat it. If you do not agree with this Privacy Policy, your choice is not to use the Services. By accessing or using the Services, you agree to this Privacy Policy.

This Privacy Policy may change from time to time. Your continued use of the Services after changes are posted constitutes acceptance of those changes.

Protected Health Information

Please see Blair Health’s Notice of Privacy Practices to understand how we protect, use, and disclose your protected health information as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and related laws and regulations.

If your Personal Data is considered protected health information (“PHI”), we treat it in accordance with HIPAA and the Notice of Privacy Practices. If this Privacy Policy ever conflicts with HIPAA obligations or the Notice of Privacy Practices, HIPAA and the Notice of Privacy Practices will govern.

Children Under the Age of 18 and Majority

The Services are not intended for children under the age of 18. We do not knowingly collect Personal Data from minors. If we learn we have collected Personal Data from a child under 18, we will delete it promptly.

If you access or use the Services, you represent that you are at least 18 years old or have the legal authority or parental consent to use the Services under applicable law.

Personal Data We Collect About You

We collect the following categories of Personal Data:

• Contact information: Name, postal address, email, phone number
• Payment information: Credit or debit card information (for payment purposes only)
• Demographic data: Date of birth, gender, location
• Usage data: Website traffic data, location data, referring/exit pages, date and time of visits, error information, clickstream data, and resource access logs
• Identifiers and device information: IP address, device ID, operating system, browser, settings, cookies, language preferences
• Sensitive Personal Data: Health information (self-reported symptoms, assessments, treatment data, inferred preferences), government ID or insurance information, account credentials (username/password), sensitive demographic data (e.g., race, ethnicity)
• User Contributions: Content or communications you provide through the Services

How We Collect Your Personal Data

We collect Personal Data:

• Directly from you (e.g., forms, account registration, telehealth consultations, purchases, support requests)
• Automatically through cookies, pixels, analytics tools, and similar technologies as you interact with the Services
• Through inferences from your activity on the platform to personalize your experience
• From third-party business partners or service providers (e.g., labs, pharmacies, payment processors)

Automatic Data Collection Technologies

We use automatic data collection to improve the user experience and personalize your Services. This includes:

• Cookies (browser and mobile): Used to store preferences and session data
• Pixels: For analytics and marketing tracking (e.g., Meta, Google)
• Analytics tools: e.g., Mixpanel, to understand usage patterns

You may refuse cookies in your browser settings; however, some parts of the Services may not function properly if cookies are disabled.

How We Use Your Personal Data

We use your Personal Data to:

• Provide and maintain the Services
• Facilitate telehealth consultations and care delivery
• Manage billing and subscriptions
• Communicate with you about appointments, updates, and promotional offers (with consent)
• Personalize your experience and recommendations
• Meet legal, regulatory, and security obligations

Disclosure of Your Personal Data

We may disclose your Personal Data:

• To healthcare providers, labs, pharmacies, and service partners involved in your care
• To third-party service providers supporting operations (IT, analytics, payment processing, etc.)
• In connection with a merger, acquisition, restructuring, or asset transfer
• To comply with court orders, legal requirements, or regulatory investigations
• With your explicit consent for other purposes

We may also disclose aggregated, non-identifiable information without restriction.

Choices About How We Use and Disclose Your Personal Data

You have choices to control cookies, promotional communications, and targeted advertising.

• You can disable cookies in browser settings.
• You can opt out of promotional communications at any time via unsubscribe links or emailing us.
• You can opt out of targeted advertising through industry sites like www.aboutads.info and www.networkadvertising.org.

Your Rights Regarding Your Personal Data

Depending on where you live, you may have rights under state privacy laws (e.g., CCPA, Washington, Nevada, Colorado, Connecticut, Oregon, Texas, Utah, Virginia):

• Right to know and access: Learn what data we collect and how it’s used
• Right to delete: Request deletion of your Personal Data
• Right to correct: Request correction of inaccurate data
• Right to opt out: Opt out of sale or sharing of personal information for advertising
• Right to limit: Limit use of sensitive personal information

You may exercise these rights by emailing privacy@blairhealth.com. We may need to verify your identity before fulfilling requests.

Do Not Track Signals

Blair Health does not currently respond to browser “Do Not Track” signals.

Data Security

We maintain administrative, technical, and physical safeguards to protect your Personal Data, including encryption of information in transit and at rest.

While we work to secure your data, no system is 100% secure. You are responsible for keeping your account credentials confidential.

California Privacy Rights

California residents have specific rights under the California Consumer Privacy Act of 2018 (CCPA), including the right to access, delete, and opt out of certain data uses. Blair Health does not sell your personal information for monetary value, but some data sharing may be considered a “sale” under the CCPA. Full disclosures are available upon request.

Other State-Specific Rights

Residents of Washington, Nevada, Colorado, Connecticut, Oregon, Texas, Utah, and Virginia may have additional rights. Contact privacy@blairhealth.com to exercise these rights.

International Users

Blair Health’s Services are operated in the U.S. and are not intended to subject Blair Health to the laws or jurisdiction of any non-U.S. country. If you access the Services from outside the U.S., your data will be transferred to and processed in the U.S.

Changes to This Privacy Policy

We may update this Privacy Policy at any time. Material changes will be communicated through the Services or by email. Continued use of the Services constitutes acceptance of the updated policy.

Contact Information

If you have any questions, concerns, complaints, or requests related to this Privacy Policy, contact:

You may also contact the U.S. Department of Health and Human Services Office for Civil Rights if your privacy rights are not addressed to your satisfaction.