Website Privacy Notice

1. Scope

This Notice covers website visits, access-interest registrations, email subscriptions, partnership inquiries, and related correspondence.

It does not cover the processing of health information within a TIVRA consumer application, clinical workspace, enterprise program, or research study. Those experiences are subject to their own applicable privacy disclosures, agreements, and permissions.

Submitting a website form does not create a patient relationship, establish a partnership, enroll you in research, or authorize access to your health records.

2. Information We Collect

Information you provide

Depending on your interaction, we collect:

• • Email address.
• • Name, if provided.
• • Organization and professional role, if provided.
• • Selected product or partnership interest.
• • Inquiry content and correspondence.
• • Communication preferences.

We may also record when and where a submission occurred, its purpose, and the notice or consent information associated with it.

Required fields are identified on the relevant form. You may browse the website without submitting an inquiry or subscribing to communications.

Technical information

When you access the website, your browser transmits information to the systems delivering it. This may include your IP address, browser and device characteristics, requested pages or resources, request times, and technical error information.

We use this information for website delivery, reliability, troubleshooting, security, and misuse prevention.

Sources

We receive information directly from you, from your browser or device, and from providers supporting our website and communications. We may also receive business contact information from someone authorized to make an inquiry on your behalf.

3. Health-Related Information

An interest in a health-related product may reveal sensitive information, depending on the circumstances and applicable law.

Our public marketing forms are not designed to collect medical records, detailed symptoms, diagnoses, patient identifiers, wearable exports, or confidential clinical materials. Please do not submit these materials.

If unnecessary sensitive information is submitted, we may delete it, restrict access, or direct you to an appropriate information-exchange process.

A website submission does not authorize health-data analysis, research participation, connected-device access, or disclosure of identifiable health information to clinicians, employers, payers, or research partners.

Where additional health-data disclosures or permissions are legally required, this general Notice does not replace them.

4. How We Use Information

We use personal information to:

• • Operate, maintain, and protect the website.
• • Respond to inquiries and correspondence.
• • Manage interest in product access and availability.
• • Send communications you requested.
• • Discuss and evaluate potential partnerships.
• • Record and respect communication preferences.
• • Investigate errors, misuse, and security incidents.
• • Comply with legal obligations.
• • Establish, exercise, or defend legal claims.

We limit our use to these purposes and other purposes lawfully disclosed to you before the relevant processing occurs.

5. Email Communications

If you request access or availability updates, we use your email address for the updates described at signup. Registration does not guarantee access, a particular launch date, or availability in your location.

Where offered, broader promotional subscriptions are separate from submitting an inquiry. Partnership inquiries do not automatically enroll you in promotional communications.

You may unsubscribe using the link in an email or by contacting info@tivrahealth.com.

We may retain limited suppression records to honor your preferences. Unsubscribing does not prevent us from responding to a separate inquiry or sending communications required by law.

6. How We Disclose Information

We disclose information where necessary for the purposes described in this Notice to:

Website and infrastructure providers: Providers supporting hosting, storage, website delivery, maintenance, and security.

Submission and communication providers: Providers supporting forms, email delivery, correspondence, and subscription management.

Professional advisers: Legal, accounting, and other advisers subject to appropriate confidentiality obligations.

Legally authorized recipients: Authorities or other parties where disclosure is required by applicable law or valid legal process.

Recipients involved in protecting rights and security: Where necessary and lawful to address fraud, misuse, security incidents, or threats to rights or safety.

Business transaction participants: Parties involved in a proposed or completed financing, merger, acquisition, restructuring, or asset transfer, subject to applicable confidentiality requirements and legal safeguards.

Service providers process information for the functions they perform for us, subject to applicable contractual and legal requirements.

An ordinary partnership inquiry does not authorize the exchange of patient records or identifiable health information.

7. Advertising and Tracking

We do not sell personal information collected through this website.

We do not disclose website personal information for cross-context behavioral advertising or use it for targeted advertising.

Our marketing website uses essential functionality rather than advertising pixels, retargeting tools, or session-replay technologies.

Our Cookies & Similar Technologies Notice describes applicable device-storage technologies. If our practices change, we will update the relevant disclosures and implement legally required controls before introducing the changed processing.

8. International Processing

TIVRA is a United States company. Information may be processed in the United States and in other countries where our providers operate.

Those countries may have privacy laws that differ from those in your location.

International processing remains subject to applicable legal requirements. Where transfer safeguards are required, the applicable arrangements must provide a lawful basis for the transfer, including any required contractual protections or supplementary measures.

To request information about the processing locations and transfer safeguards applicable to your information, contact info@tivrahealth.com.

Submitting a form does not waive your privacy rights or constitute blanket consent to international transfers.

9. Retention and Deletion

We retain personal information for as long as reasonably necessary for the purposes described in this Notice and applicable legal requirements.

Retention depends on:

• • Whether a subscription remains active and relevant.
• • Whether an inquiry or partnership discussion remains ongoing.
• • Whether follow-up is reasonably anticipated.
• • Whether technical information remains necessary for troubleshooting, security, or an investigation.
• • Whether limited records are needed to honor communication preferences.
• • Applicable legal obligations, limitation periods, disputes, and preservation requirements.

When information is no longer required, we delete it or render it no longer identifiable, as appropriate.

Deleted information may remain temporarily in backups until removed through the applicable backup cycle. Any retained copies remain subject to restrictions on access and use.

10. Security

We take reasonable measures intended to protect personal information against unauthorized access, use, disclosure, alteration, and loss.

No transmission method, website, or storage system can guarantee absolute security.

Please do not send medical records, patient identifiers, detailed health information, or confidential materials through public marketing forms or ordinary email.

11. Your Privacy Rights

Depending on applicable law, you may have rights to:

• • Access your personal information.
• • Correct inaccurate information.
• • Request deletion.
• • Obtain a portable copy.
• • Restrict or object to processing.
• • Withdraw consent.
• • Opt out of certain processing.
• • Submit a request through an authorized agent.
• • Appeal a refusal of a privacy request.

To exercise your rights, email info@tivrahealth.com with the subject “Privacy Request.”

Describe your request and provide sufficient information for us to locate the relevant records. Do not send medical records or identity documents unless an appropriate verification process is requested.

We may take proportionate steps to verify your identity or an agent’s authority. We respond within applicable legal deadlines. Certain requests may be subject to lawful exceptions.

If we refuse a request, we will explain the reason and any available appeal rights. Submit an appeal to info@tivrahealth.com with the subject “Privacy Request Appeal.” We will review it and communicate the outcome within the applicable legal period.

We will not unlawfully discriminate against you for exercising your rights. You may also submit a complaint to the relevant regulator.

12. European and UK Privacy Rights

Where European or UK data protection law applies, our legal bases depend on the activity:

Consent: For requested subscriptions and optional promotional communications where consent is required.

Pre-contractual steps: For responding to a request concerning a potential service where this basis applies.

Legitimate interests: For managing business correspondence, operating and protecting the website, preventing misuse, and protecting legal rights, subject to the applicable balancing requirements.

Legal obligations: For processing required by law.

You may withdraw consent without affecting the lawfulness of earlier processing.

We do not request special-category health information through public marketing forms. Processing that requires an additional legal condition must satisfy that condition before it occurs.

You may complain to a competent supervisory authority, including in your place of habitual residence, work, or the alleged infringement.

13. Automated Processing

Website tools may automatically validate submissions, prevent spam, route inquiries, and deliver requested communications.

These functions do not perform individualized clinical assessments.

Illustrative website demonstrations do not analyze your health information. Registering interest does not authorize automated decisions about your health, care, insurance, or employment.

14. Children

Our signup and inquiry forms are intended for adults aged 18 or older. We do not invite children to submit information.

If you believe a child has submitted personal information, contact info@tivrahealth.com so we can investigate and take appropriate action.

15. Third-Party Websites

Third-party websites and services have their own privacy practices. Review their notices before providing information.

This Notice does not govern an independent third party simply because our website links to it.

16. Changes to This Notice

We may update this Notice when our practices or applicable requirements change. The effective date identifies the version in effect.

Where required, we will provide additional notice or obtain consent before materially different processing begins. Continued website use does not substitute for legally required consent.

17. Contact

TIVRA Health Inc. Email: info@tivrahealth.com