Privacy Policy

1. Personal Information We Collect

Information you provide to us:

• Contact information, such as your first and last name, phone number, and email address.
• Account information, such as the username and password you use to log into your account.
• Identification information, such as your date of birth, Social Security number, business details, government identification, and photo.
• Payment information, needed to complete any transactions with us, including your name, payment card information, and billing information.
• Health and wellness information, such as details about your symptoms, conditions, medications, or treatment preferences that you voluntarily provide when using the Services.
• Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online.
• Marketing information, such as your preferences for receiving our communications, and details about how you engage with our communications.
• Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Personal information we collect automatically:

We, our service providers and our business partners may automatically log information about you, your computer or mobile device, and your interactions over time with our Services and our communications. We collect this information using cookies, pixels and other similar technologies. This information includes:

• Device data, such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings and general location information such as city, state or geographic area.
• Online activity data, such as pages or screens you viewed, the website you visited before browsing to the Services, navigation paths between pages or screens, information about your activity on a page or screen, access times, and whether you have opened or otherwise engaged with our communications, such as our marketing emails or clicked links or files within them. We also employ session replay technologies that allow us to replay and view actions you take within the Services.
• Precise location. With your consent, we may collect your location information through the device you use to access the Services. You can disable location sharing through your device settings.

Personal information we obtain from third parties:

• Social media information. We may maintain pages on social media platforms, such as Facebook, X (formerly Twitter), Instagram, LinkedIn, and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use and processing of your personal information.
• Third-party login information. When you link, connect, or login to the Services with a third-party service (such as Google), you direct the service to send us information controlled by that service or as authorized by you via your privacy settings at that service.
• Other sources. We may obtain personal information (e.g., demographic information) from other third parties, such as marketing partners, publicly-available sources, data providers, and healthcare intermediaries such as medical professionals and pharmacies with whom we partner to provide the Services.

2. How We Use Personal Information

We use personal information for the following purposes or as otherwise described at the time of collection:

• To provide, operate and maintain the Services. We use personal information to operate, maintain, and provide you with our Services, including to facilitate payments and optimize your user experience.
• To facilitate your login to the Services via third-party identity and access management providers.
• To establish and maintain your user account on the Services, including personalizing your user experience.
• To communicate with you about the Services. We will respond to your requests, questions and feedback, and communicate with you about our Services, including by sending announcements, updates, security alerts and support and administrative messages.
• To improve, monitor, personalize, and protect our Services, including troubleshooting, testing, research, and keeping the Services secure.
• For research and development. We may use personal information for research and development purposes, including to analyze and improve the Services and our business. We may create aggregated, de-identified, or anonymized data for lawful business purposes.
• For marketing and advertising. We, our service providers, and our third-party marketing and advertising partners may collect and use personal information for direct marketing communications and interest-based advertising, as permitted by law.
• For surveys and promotions. We may allow you to participate in surveys and promotions, collecting and using your personal information to facilitate your participation.
• For compliance and protection. We use your personal information to comply with our legal obligations, enforce our terms and conditions, prevent fraudulent or illegal activity, and defend against legal claims.

3. How We Disclose Personal Information

We may disclose your personal information in the following ways:

• Affiliates and Subsidiaries. We may share information we collect within any Bond Health member or group to deliver products and services to you, ensure a consistent level of service, and enhance your customer experience.
• Service providers. We may disclose your personal information to third-party companies and individuals that provide services on our behalf or help us operate our Services (such as hosting, information technology, customer support, email delivery, and website analytics services).
• Healthcare partners. We may share your personal information with licensed medical professionals, pharmacies, laboratories, and other healthcare providers as necessary to deliver telehealth and wellness services through our platform.
• Advertising partners. We may disclose your personal information to third-party advertising companies for interest-based advertising purposes, which may collect information on the Services through cookies and other automated technologies.
• Professional advisors. We may disclose your personal information to lawyers, auditors, bankers, and insurers, where necessary in the course of professional services rendered to us.
• Authorities and others. We may disclose your personal information to law enforcement, government authorities, and private parties as necessary for compliance and protection purposes.
• Business transferees. We may disclose your personal information to acquirers and other relevant participants in business transactions involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of our business or assets.
• With your instruction or permission. We may disclose personal information to a relevant third party where you give us permission to do so.

4. Your Privacy Rights and Choices

Opt-out of marketing communications:

You may opt-out of marketing-related emails and other communications by following the opt-out or unsubscribe instructions in the communications you receive from us or by contacting us as provided in the “Contact Us” section below. You may continue to receive Services-related and other non-marketing communications.

Personal information requests:

Depending on your location and the nature of your interactions with our Services, you may request the following in relation to your personal information:

• Information about how we have collected and used your personal information.
• Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
• Correction of personal information that is inaccurate or out of date.
• Deletion of personal information that we no longer need to provide our Services or for other lawful purposes.
• Opt out of the sharing or use of your personal information for interest-based advertising.

To make a request, please email us or write to us as provided in the “Contact Us” section below. We may ask for specific information from you to help us confirm your identity. You are entitled to exercise the rights described above free from discrimination.

Account deactivation and deletion:

If you have an account on our Services, you may deactivate and delete your account by contacting us as described in the “Contact Us” section below. Note that deactivating your account may not cause us to fully delete all of your personal information. To request complete deletion, please submit a data deletion request as described in the “Personal information requests” section.

How to control cookies:

You can limit online tracking by blocking cookies in your browser, using privacy browsers or plug-ins such as Privacy Badger, Ghostery, or uBlock Origin, or by using the following opt-out tools:

• Digital Advertising Alliance for Websites: optout.aboutads.info
• Network Advertising Initiative: optout.networkadvertising.org
• Google Analytics opt-out: tools.google.com/dlpage/gaoptout

Do Not Track:

Some Internet browsers can be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit www.allaboutdnt.com.

5. Other Sites and Services

Our Services may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions. This Privacy Policy does not apply to such third-party sites or services.

6. Job Applicants

If you apply for a job through the “Careers” portion of our Websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history, and other information of the type that may be included in a resume. We use this information to facilitate our recruitment activities, process employment applications, monitor recruitment statistics, and respond to surveys. We may also use this information as necessary to comply with relevant laws, protect our rights, or assist in preventing any violation of law.

7. Security

We use reasonable organizational, technical and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration and destruction of personal information we maintain. However, no method of transmission over the Internet, and no means of electronic or physical storage, is absolutely secure. As such, we cannot guarantee the security of your personal information and any such transmission of personal information is at your own risk.

Where we have given you (or where you have chosen) a password that enables you to access the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

8. Retention of Personal Information

Where required under applicable laws, we retain personal information only for as long as is necessary to fulfil the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations or until you withdraw your consent (where applicable).

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we use personal information and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements.

9. Children’s Privacy

The Services are not intended for use by children under 18 years of age. If we learn that we have collected personal information through the Services from a child under 18 without the consent of the child’s parent or guardian as required by law, we will delete it.

10. Changes to This Privacy Policy

We reserve the right to change this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. We will make the revised Privacy Policy accessible through the Services, so you should review it periodically. The date this Privacy Policy was last revised is identified at the top of the document. You are responsible for periodically monitoring and reviewing any updates to the Privacy Policy. If we make a material change to the Privacy Policy, we will provide you with appropriate notice in accordance with legal requirements.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us by email at privacy@bond.health

12. SMS and Text Message Communications

This section describes how Bond Health handles mobile phone numbers and text message (SMS) consent. It applies to text messages Bond Health sends to you. The full terms of our text message program, including message types and how to opt out, are set out in Section 10 of our Terms of Service.

12.1 Mobile Information We Collect

When you consent to receive text messages from Bond Health, we collect your mobile phone number, a record of the consent itself (the date, time, and the method by which it was given), and delivery metadata generated when a message is sent, such as whether the message was delivered and whether you replied with an opt-out keyword.

12.2 How We Use Mobile Information

We use your mobile phone number solely to send the categories of messages you consented to receive, and to maintain records demonstrating that consent. These messages may include:

• Prescription and order status updates, including when a request has been reviewed by a provider.
• Appointment reminders and reminders to complete an outstanding health questionnaire.
• Account, security, and verification notifications, including one-time passcodes.

We do not send marketing or promotional text messages on this program.

12.3 How We Disclose Mobile Information

We disclose your mobile phone number only to the communications service providers that transmit the messages on our behalf (for example, our SMS gateway provider), and only for the purpose of delivering the messages you requested. These providers are contractually prohibited from using your number for any other purpose. We do not disclose mobile information to advertising partners, data brokers, or affiliates for marketing purposes, and the “Advertising partners” disclosure described in Section 3 does not apply to mobile phone numbers or SMS consent data.

12.4 Your Choices

You may withdraw your consent at any time by replying STOP to any message you receive from us. You will receive a single confirmation message and no further messages will be sent. Reply HELP for help, or contact us at privacy@bond.health. Message frequency varies. Message and data rates may apply. Consent to receive text messages is not a condition of receiving care or of purchasing any product or service.

12.5 Retention of Mobile Information

We retain your mobile number and the associated record of consent for as long as you remain opted in, and afterwards only for as long as needed to honor your opt-out and to demonstrate compliance with applicable law, including the Telephone Consumer Protection Act.

13. For California Residents

If you are a California resident, California law requires us to provide you with additional information regarding how we collect, use, and share your “personal information” (as defined in the California Consumer Privacy Act (“CCPA”)).

13.1 Categories of Personal Information We Collect and Disclose

Throughout this Policy, we describe the specific pieces of personal information we collect from and about our users. Under the CCPA, we are also required to list the “categories” of personal information we collect and the categories of third parties to which we disclose personal information.

Please note: Some information collected through the Services (e.g., medical information) is subject to health data privacy laws and is not subject to the CCPA.

13.2 Business Purposes for Using Personal Information

We use the personal information we collect for the following business purposes:

• Manage, facilitate, and improve the Services
• Conduct research, marketing, and analytics
• Communicate with users
• Provide technical support and customer service
• Ensure security and prevent fraud
• Comply with legal obligations and defend against legal claims

13.3 Your California Privacy Rights – CCPA Disclosure

Under the CCPA, you may request that we:

• Inform you about the categories of personal information we collect or disclose, the sources of such information, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Provide access to and/or a copy of certain personal information we hold about you.
• Delete certain personal information we have about you.

You also have the right not to be discriminated against for exercising your rights under the CCPA.

To exercise your rights, submit your request via our webform or email us at: california-privacy@bond.health. Include your full name, email address, and residential address associated with your use of our Services, along with the rights you wish to exercise.

13.4 Sale of Personal Information

Bond Health does not and will not sell information that identifies you (e.g., name, email address, phone number, postal address). However, we work with third parties that provide marketing and advertising services, including interest-based advertising. These third parties may place tracking technologies (e.g., cookies, pixels) on our Website and App and collect online identifiers. Under the CCPA, this may be considered a “sale.”

This does not apply to mobile information. Mobile phone numbers and text message consent data are excluded from the practices described above: they are never sold, rented, or shared with third parties or affiliates for marketing or promotional purposes, and they are never disclosed to advertising partners. See Section 12 for how mobile information is handled.

To opt out of sharing your information for interest-based advertising, visit the Network Advertising Initiative’s Consumer Opt-Out link, the Digital Advertising Alliance’s Consumer Opt-Out link, or Your Online Choices. Note: These opt-outs are device and browser specific.

13.5 Shine the Light Disclosure

California’s “Shine the Light” law allows residents to request information about how we share certain categories of personal information with third parties for their direct marketing purposes. Bond Health does not share your personal information with third parties for their own direct marketing purposes.