PRIVACY POLICY

Effective As of May 11, 2021.

We at CareMax Pharmacy LLC., have developed an online and mobile platform entitled, collectively, and are committed to maintaining the privacy and security of our users’ personal information. Through this privacy statement, CareMax Pharmacy wants to assure you of our commitment to privacy and security and the efforts we undertake to strive to maintain the privacy and security of your personal information. This privacy policy describes how we collect, use, and disclose information through the CareMax Pharmacy website and the YPO Platform, which includes the YPO mobile application.

Our privacy philosophy is based on the concept of fair information practices. This means we provide you with notice of how we manage and collect information so that you can have a more informed understanding of how we operate. Our policy regarding the collection and use of your information via this Platform is set forth below. Where necessary, we use the term “Website” to refer to the CareMax Pharmacy website as seen from a desktop computer through a standard browser or as seen through a browser on a mobile device such as a phone or a tablet, and “Mobile App” to refer to the mobile YPO application purchased through an application marketplace like Google Play or the Apple AppStore.

About this policy

Agreement to Privacy Policy

Your access and use of this Platform is subject to your agreement with this policy, along with the CareMax Pharmacy Website Terms & Conditions of Use and the YPO Mobile App End User Agreement. By using this Platform, you expressly agree to the terms of this Privacy Policy and consent to the collection and use of information as discussed in this Privacy Policy. If you do not agree with the below Policy, please do not use or access any part of the Platform for any purpose.

Modifications to Privacy Policy

We retain the flexibility to update this policy. We may periodically update this policy to describe how new Website, Platform or Mobile App features may affect our use of your information and to let you know of new controls and features that we may provide you. We will NOT apply changes to this policy retroactively to information We have previously collected.

Applicability of this Privacy Policy

This Privacy Policy sets forth the privacy practices of the CareMax Pharmacy website and the YPO Platform. Although we strive to provide your local participating pharmacy with your privacy preferences, such participating pharmacy is independently owned and has its own privacy practices. Please contact your local pharmacy for any additional information on how your pharmacy uses your personal information. We do not control your pharmacy’s use of your personal information.

Notice of what information we collect and how it’s used

We collect several types of information:

Personally Identifiable Information

If you provide it to us, we collect and retain personally identifiable information, including, but not limited to, your name, gender, date of birth, telephone number, cell phone number, mailing address, email address and your prescription information (which we collect in the course of providing services to you under the YPO Platform). We use this information in order to assist you with prescription refills at participating pharmacies, with finding a CareMax Pharmacy , with receiving coupons and other offers to use at a participating pharmacy, and/or other communications with your pharmacies and other health care organizations as permitted by law.

Additionally, any personally identifiable information that you voluntarily provide when using this Platform may be used to provide you with information, products or services that you may request from your local participating pharmacy. Communications may occur either via text messaging, email, or push notifications and you will have the opportunity to set your preferences for certain communications related to your prescriptions within the Platform.

We may also use such information to communicate to you special offers and featured items from your participating pharmacy, CareMax Pharmacy, our affiliates, partners, and other suppliers and vendors. If you are receiving additional communications and special offers, you may opt out of receiving such additional information at any time by contacting us using the contact information below or as outlined in the applicable communication. We will implement your opt-out request within a commercially reasonable time.

Your local participating pharmacy will also have access to your personally identifiable information you submit via this Platform, and your other protected health information as defined under HIPAA, and will use such information as necessary to provide you the information, products and services that you may request. Your pharmacy has its own privacy practices and YPO has no control over or responsibility for your local pharmacy’s use of information that you may provide to it.

We may also use your personally identifiable information to customize your browsing experience and communicate with you and otherwise respond to your questions and suggestions.

We may share your personally identifiable information with our suppliers and vendors or with other third parties to enable them to provide services for us or to you. We require those suppliers and vendors to comply with all applicable data privacy laws and regulations, including HIPAA. We do not sell, lease or rent your personal information.

Mobile App

When you use Our Mobile App, We may also collect geo-location information to assist you in quickly finding places or receiving relevant location information, such as where participating pharmacies are found. If you do not want the Mobile App to obtain location data, you can disable the location function on your mobile device, in which case you may not receive relevant information. Location information is not saved or stored beyond what is necessary to ensure a consistent and functional application.

We also collect information that identifies the type of device you are using and a unique identifier that identifies you as a user of the Mobile App. Our Mobile App uses this information to enhance your use of the App by: (i) determining the applicable End User License that applies to you, (ii) checking the device’s network connectivity status, and (iii) saving location information about your favorite pharmacies you access on the Mobile App.

The Mobile App can launch certain other applications on your mobile device: (i) if you select an email link in the Mobile App, your email application will be launched; (ii) if you select a phone number, your phone dialer app will be launched.

Cookies and other web technologies

When you use the Site, We use web technologies such as cookies in order to recognize you and your preference information, facilitate better administration of the Platform, and provide you with a better user experience over time. These cookies may be temporary or permanent. We capture the paths taken as you move from page to page (i.e., your "click stream" activity). Information we collect is used to enhance your use of the Platform in ways like these:

• To arrange the mobile application in the most user-friendly way
• To customize your browsing experience
• To analyze trends in Platform usage
• To communicate special offers and featured items to you from Us, your pharmacy or other organizations
• To respond to your question or suggestions

Temporary cookies are used to complete transactions with this Website and for other purposes such as counting the number of visits to our Websites. These temporary cookies are eliminated when you exit your browser. A permanent cookie may also be stored on your computer by your browser. When you log in, this type of cookie tells us such this as whether you've visited us before or if you are a new visitor. The cookie doesn't obtain any personal information about you or provide us with any way to contact you, and the cookie doesn't extract any information from your computer.

Most Web browsers are initially set up to accept cookies. You can reset your Web browser to refuse all cookies or to indicate when a cookie is being sent. However, certain features of the Site may not work if you delete or disable cookies.

We may also log and track IP addresses for systems administration purposes and for reporting usage trends. Your IP address is usually associated with the physical place from which you enter the Internet. IP addresses are not used to track an individual user’s session or location. This information only helps us determine how often different areas of our Platform are visited. We may combine non-personal information collected automatically with any previously submitted personal information that we may have received from you.

We may also use the services of third parties to provide us with services such as, but not limited to, site analytics. These third parties may view, edit or set their own cookies. The use of these technologies by these third parties is subject to their own privacy policies and is not covered by this privacy statement

Other Use and Ownership

We reserve the right to share your information collected from this Platform (including personal information) with third parties if required to do so by law or if we believe such action is necessary in order to:

• conform with the requirements of the law or to comply with legal process served upon us;
• protect or defend our legal rights or property, or that of another customer or user; or
• investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of the terms and conditions of using this Platform.

We maintain full rights to any information collected through this Website or Platform, and may freely collect, use and disclose such information unless prohibited by this Privacy Policy or applicable law.

SMS Texts and Push Notifications

If you choose to receive features or services from Us that require the sending of text messages, we will use your cell phone number as provided to us to send such messages. The below additional terms apply to the text message services.

Your carrier's standard text messaging rates and other charges, including for data usage, may apply. You must be at least eighteen (18) years of age to use our YPO alert services. If you have any questions, please contact customer service.

To update your general communication preferences, you can go the “View and Manage Your Account” page which allows you to indicate whether you wish to be contacted via email, text or push notifications should the pharmacist try to reach out to you regarding your prescription request.

To update your communication preferences for refill and pill reminders, you can take the following steps:

From a desktop computer:

• From the “Prescription History tab, select edit next to the active reminder you want to change
• “Edit Reminder” window will open. From the drop down select “none”
• Select “Update” to save changes

From a mobile device:

• From the “Reminders” section, select pill or refill reminders and then the individual reminder to change
• To change the notification method, select the new preference from available options under “Method”
• To turn the reminder off completely, move the status from “ON” to “OFF” then select “Save”

Please note that after updating your general communication preferences or communication preferences for refill and pill reminders, you may still receive other text messages, such as, "CareSync Ready,” “Refill Ready” and “Rx Problem” messages if you have previously opted-in to receiving them and have not opted out of receiving those messages.

You can also opt out of receiving all text messages by sending "STOP" to the number distributing the text message. Your carrier's standard text messaging rates and other charges may apply.

You can also opt out of receiving all push notifications by following the steps below for your respective phone platform:

Android:

• From “Settings,” select “Application Manager”
• Choose the CareMax Pharmacy application from the list
• Uncheck the “Notifications” box

• From “Settings,” chose the CareMax Pharmacy application from the list
• Select Notifications (badges, sounds, banners) and unselect “Allow Notifications”

HIPAA at CareMax Pharmacy

As a key provider of services and technology to the healthcare industry, CareMax Pharmacy Systems, Inc. and its affiliated companies collectively, (" CareMax Pharmacy ") have implemented programs to address the transaction standards, and the privacy and security implications of the rules promulgated pursuant to the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), as amended by the Health Information Technology for Economic and Clinical Health (“HITECH”) Act, and as may be amended from time to time. However, any protected health information that you may submit via this Platform, as that term is defined in HIPAA, is subject to your pharmacy's Notice of Privacy Practices and YPO only receives that information as a Business Associate of your pharmacy.

Choice

During the registration process at the pharmacy, you will be able to choose your preferred channel of communication (email, text or push notifications) and types of communication (Rx Ready and/or Refill Reminder and/or Pill Reminder). If you choose to change your channel or type of communication, you can do so by updating your preferences on the Website or Platform, which includes the Mobile App.

Access to your information

We will maintain your personally identifiable information and allow you to update it at any time by logging into your account to access your information. We will also take steps to make sure that any updates that you provide are processed in a timely and complete manner.

Additional items

Security of your information

We use recognized industry safeguards to help protect personally identifiable information from unauthorized access or use. If you are required to transmit sensitive to us through our Platform, we will provide you access to our secure server that allows encryption of your data as it is transmitted to us. We will help protect personally identifiable information stored on the Platform's servers from unauthorized access using commercially available computer security products (such as firewalls and encryption), as well as carefully developed security procedures and practices.

Linking to other Websites

Please remember that when you use a link to go from the Website or Platform to another website, this Privacy Policy is no longer in effect and YPO has no control over those websites or their policies and practices. Any browsing and interaction on any other website, including any website that has a link on this Website or Platform, is subject to the rules and policies of that website. We encourage you to read the rules and policies of the websites you visit to further understand their procedures for collecting, using, and disclosing personal information before providing that website with your personal information.

Important Note Regarding Children

No part of this Platform is directed toward children under 13 years of age and YPO does not knowingly collect or use information from children under 13 through this Platform.

Customer Service and Recourse

If you have any questions about this privacy statement, our information handling practices, or any other aspects of your privacy and the security of information, please send an email to office@caremaxpharmacy.com or call us at 904-551-9026. Our mailing address is: Law Department, 2789 Park St, Jacksonville, FL 32205 ATTN: Privacy Officer.

California's Shine the Light law

California's Shine the Light law provides California residents with the right, subject to certain exceptions, to receive disclosures about any sharing of their personal information with other companies.

If you are a California resident and you provided your personal information to Us, then, once each calendar year, you may submit a written request for information about the information we shared, if any, with other companies for their use in direct marketing. To submit your written request, please email us at the address above with "Request for California Privacy" in the letter subject line. You must include sufficient detail for us to locate your file; at a minimum, your name and postal address.

Within 30 days of receiving your request, we will send you a list of the categories of personal information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties.