For California Residents - PeachesRx Privacy Notice

This notice applies exclusively to California residents and supplements PeachesRx's general Privacy Statement. It complies with the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and related California privacy laws.

Information We Collect

PeachesRx collects "Personal Information" - data that identifies, relates to, describes, or could reasonably be linked with a particular consumer or device.

Categories of Personal Information Collected Since January 1, 2025

Category A: Identifiers — Account Name, Address, Beneficiary Name, Beneficiary Relationship, Client ID Number, Client Reference Number, Contract Number, Date of Birth, Date of Death, Driver's License Number, Email Address, Emergency Contact Name, Emergency Contact Number, Employee Identification Number, Name, Passport Number, Phone Number, Policy Number, Policy Rating Information. Collected: Yes

Category B: California Customer Records (Cal. Civ. Code § 1798.80(e)) — Name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, financial information, medical information, or health insurance information. Collected: Yes

Category C: Protected Classification Characteristics — Gender, Age, Citizenship Status, Disability, Marital Status. Collected: Yes

Category D: Commercial Information — FEIN, HH Premium, Home Value, Income Line of Business, Lines of Insurance Purchased, Net worth, Payment Information, Pension Dollar Amounts, Personal Property Records, Policy Count by Product, Policy Number, Property Address, Property Ownership, Vehicle Information. Collected: Yes

Category E: Biometric Information — Blood Sample, Health Information, Medical Conditions, Medical Information, Urine Sample, Vital Information. Collected: Yes

Category F: Internet or Similar Network Activity — Advertising Recall, App Usage, Browser Type, Chat Transcripts, Cookies, Device, Email Transcripts, HM Drive Usage, Interaction with Website, IP Address, Location, My Account Activity Log, Web Message Transcripts, Web Site Usage. Collected: Yes

Category G: Geolocation Data — Direction of Travel, Latitude, Longitude, Rate of Acceleration, Rate of Speed, Survey Location. Collected: No

Category H: Sensory Data — Audio Recordings of Historic Transfer Requests, Audio Recordings of Medical Interviews, Audio Recordings of Phone Calls. Collected: Yes

Category I: Professional or Employment-Related Information — Annual Salary, Bank Account Information, Educator vs Non Educator, Employer Name, Employment Location, Employment Status, Hire Date, Household Income, Job Title, Length of Service, Number of years working in Education, Occupation, Occupation Code, Percentage of Increase, Resume, Tenure, Termination Date, Transfer Date, Work History. Collected: Yes

Category J: Non-Public Education Information (FERPA) — Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. Collected: No

Category K: Inferences Drawn from Other Personal Information — Paperless Preferences, Login Email, Security Preferences, Address Preferences, Consumer Preferences, Attitudes, Psychographic data, Survey Comments, Investment Strategy, E-delivery Preferences. Collected: Yes

Sources of Personal Information

• Directly from clients or their agents through documents provided for services
• Indirectly from clients through service delivery and website activity
• From third parties that interact with PeachesRx in connection with services

Information Not Included as Personal Information

• Publicly available information from federal, state, or local government records
• De-identified or aggregate consumer information
• Information excluded from CCPA scope: Health/medical information covered by HIPAA and California Confidentiality of Medical Information Act; Information covered by Fair Credit Reporting Act, Gramm-Leach-Bliley Act, California Financial Information Privacy Act, or Driver's Privacy Protection Act of 1994

Sensitive Personal Information

Sensitive personal information reveals:

• Social Security, driver's license, or passport number
• Account login, financial account, debit card, or credit card number with security codes, passwords, or credentials
• Precise geolocation
• Racial or ethnic origin, religious or philosophical beliefs, or union membership
• Contents of mail, email, and text messages (unless PeachesRx is the intended recipient)
• Genetic data
• Processing of biometric information for unique identification
• Personal information concerning health
• Personal information concerning sex life or sexual orientation (unless publicly available)

Use of Personal Information

PeachesRx may use or disclose collected Personal Information for:

• Fulfilling the reason information was provided
• Issuing and servicing policies and offering other insurance or financial products
• Providing information, products, or services
• Sending email alerts, event registrations, and notices about products, services, events, or news
• Carrying out obligations and enforcing rights from contracts, including billing and collections
• Improving the website and presenting its contents
• Testing, research, analysis, and product development
• Protecting the rights, property, or safety of PeachesRx, clients, or others
• Responding to regulatory/law enforcement requests and complying with applicable law
• Using information as described when collecting or as set forth in the CCPA
• Disclosing to third-party service providers performing marketing or services
• Disclosing to affiliates and subsidiaries
• As otherwise required or permitted by law

PeachesRx will not collect additional Personal Information categories or use collected information for materially different, unrelated, or incompatible purposes without notice.

Sharing Personal Information

PeachesRx may disclose Personal Information to third parties for business purposes. In the preceding twelve months, no categories of personal information were disclosed to third parties for business purposes.

Third Parties Receiving Personal Information

• Affiliates
• Service Providers and Vendors
• Third parties authorized by consumers in connection with products or services provided
• Independent contractor insurance agents
• Other third parties as required or permitted by law

Selling Personal Information

"We do not sell your personal information to anyone."

Your Rights and Choices

Access to Specific Information and Data Portability Rights

Consumers have the right to request disclosure of information about collection and use of Personal Information collected on or after January 1, 2025. Upon verification, PeachesRx will disclose:

• Categories of Personal Information collected
• Categories of sources for collected Personal Information
• Business or commercial purpose for collection or sale
• Categories of third parties with whom Personal Information is shared
• Specific pieces of Personal Information (data portability) if specifically requested
• If sold or disclosed for business purposes, separate lists identifying: Sales with Personal Information categories each recipient purchased; Disclosures for business purpose with categories each recipient obtained

Correction Requests

Consumers may request correction of personal information. After verification, PeachesRx will evaluate the requested correction against information from other sources and disclose actions taken.

Opting Out of Use and Disclosure of Sensitive Personal Information

Consumers may request limitation of Sensitive Personal Information use and disclosure, subject to exceptions. PeachesRx uses Sensitive Personal Information to perform expected services, ensure security and integrity, conduct non-personalized advertising, perform services on behalf of the business, and undertake activities to improve or enhance services.

Deletion Request Rights

Consumers may request deletion of Personal Information from records. PeachesRx will comply and direct Service Providers to delete, subject to exceptions.

Deletion Request Exceptions

PeachesRx or Service Providers need not comply with deletion requests when Personal Information is maintained to:

• Complete transactions, provide goods/services requested, take reasonably anticipated actions, or perform contracts
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute responsible parties
• Debug products to identify and repair errors impairing intended functionality
• Exercise free speech or another consumer's free speech rights or other legal rights
• Comply with California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.)
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest adhering to ethics and privacy laws, when deletion may render research impossible or seriously impair it, with prior informed consent
• Enable solely internal uses reasonably aligned with consumer expectations based on the relationship
• Comply with legal obligations
• Make other internal and lawful uses compatible with the context in which information was provided

Exercising Access, Data Portability, and Deletion Rights

To exercise these rights, submit a verifiable consumer request by:

• Visiting peachesrx.com
• Emailing [email protected]

Only the consumer or an authorized representative registered with the California Secretary of State may make a verifiable consumer request. Consumers may also request on behalf of minor children.

Access or data portability requests may be made twice within a 12-month period. Verifiable consumer requests must:

• Provide sufficient information allowing reasonable identity verification or authority to request on behalf of a California resident
• Describe the request with sufficient detail for proper understanding, evaluation, and response

Creating an account is not required. Personal Information will only be used to verify the requestor's identity and/or authority. PeachesRx cannot respond if it cannot verify identity, authority, or confirm the information relates to the consumer.

Response Timing and Format

PeachesRx endeavors to respond within 45 days. If more time is needed (up to 90 days), it will provide written notice of the reason and extension period. For account holders, written responses are delivered to the account. For non-account holders, responses are delivered by mail or electronically at the consumer's option.

Disclosures cover only the 12-month period preceding the request's receipt. Responses explain reasons for non-compliance if applicable. For data portability requests, PeachesRx will select a readily usable format allowing transmission without hindrance.

Fees

PeachesRx does not charge fees for processing or responding to verifiable consumer requests unless excessive, repetitive, or manifestly unfounded. If fees are warranted, a cost estimate and rationale are provided before completion. Excessive, repetitive, or manifestly unfounded requests may be denied.

Non-Discrimination

"We will not discriminate against you for exercising any of your CCPA rights." PeachesRx will not:

• Deny goods or services
• Charge different prices or rates, including through discounts or penalties
• Provide different levels or quality of goods or services
• Suggest different prices, rates, or service levels or quality

Changes to Privacy Notice

PeachesRx reserves the right to amend this Privacy Notice at its discretion and any time. Changes are communicated via email or notice on the website homepage.

Contact Information

For questions or comments about this notice, privacy practices, options, rights, or to exercise California law rights:

• Website: https://peachesrx.com
• Email: [email protected]
• Postal Address: PeachesRx, [email protected]

PeachesRx uses CareGLP, a patient management platform working with independent physicians and practitioners. PeachesRx and CareGLP do not directly provide medical or pharmacy services, and payment does not guarantee prescription writing or dispensing. Medical Services are provided via independent providers and Usable Health, PC. Information provided is for informational purposes only and not a substitute for professional medical advice, diagnosis, or treatment. This site is an advertisement for services, not specific medications.