Effective Date: October 20, 2025

Apollo Rx, LLC, doing business as Apollo Care, together with its affiliates and subsidiaries (collectively, “Apollo Care”) respects your concerns about privacy. This Privacy Notice describes the types of personal information we collect, how we use the information, with whom we may share it, the choices available regarding our use of the information, and how you can contact us about our privacy practices.

This Privacy Notice also serves as our “notice at collection” for California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

This Privacy Notice applies only to personal information we collect through apollocare.com and any other online services that link to this notice (collectively, “Digital Services”) and other personal information we may collect about individuals offline. This Privacy Notice does not address personal information processed in connection with Copay Program Management Services or Hub Services where we act as a service provider, or data processor, on behalf of our clients who remain the data controllers.

Click on one of the links below to jump to the listed section:

• Information We Obtain
• How We Use the Information We Obtain
• Information We Share
• Your Choices
• How We Protect Personal Information
• Retention of Personal Information
• Children’s Privacy
• Links to Third-Party Services and Features
• Updates to Our Privacy Notice
• How to Contact Us

1. Information We Obtain

We obtain personal information about you in different ways and from various sources. This includes information we collect when you interact with our Digital Services or contact us. The types of personal information we collect, or have collected in the past 12 months, include the following categories as defined by the California Consumer Privacy Act (CCPA):

• Identifiers, such as name, telephone number, postal address and email address;
• Professional or employment-related information, such as job title, company name, industry and professional and employment background;
• Education information, such as resume and any additional application information provided to us (for example, employment history and education); and
• Internet or other electronic network activity information, such as browsing activity on our pages viewed, links clicked, access dates and times, and device identifiers (e.g., IP address, browser type, operating system, and general location information); and
• Other information you choose to provide, such as through emails or other communications, and through other features of our Digital Services.

Sources of Personal Information

We obtain these categories of personal information from:

• You directly (for example, when you submit a form or communicate with us); and
• Your device automatically (through cookies and analytics tools when you visit our website).

Automated Data Collection

When you interact with our Digital Services or open our emails, we may obtain certain information by automated means, such as cookies, pixel tags, server or device logs and other technologies.

These technologies help us:

1. Understand how you use and interact with our Digital Services;
2. Measure and improve the usability and performance of our site and communications; and
3. Detect and prevent security incidents or technical issues.

We use Google Analytics on our Digital Services to understand how visitors use our site. Other than this analytics tool, we do not use third-party services that track your online activities over time and across third-party websites or apps. Our Digital Services are not designed to respond to ‘do not track’ signals from browsers.

Your browser may tell you how to be notified about certain types of automated collection technologies and how to restrict or disable them. Please note, however, that without these technologies, you may not be able to use all of the features of our Digital Services. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device.

2. How We Use the Information We Obtain

We may use the personal information we obtain about you for the following business purposes, as defined under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Provide our Digital Services;
• Communicate with you, respond to inquiries and offer support;
• Perform analytics and conduct market, trend and statistical research;
• Compile, de-identify or aggregate personal information (to the extent we process de-identified information, we will maintain and use the information in de-identified form and will not attempt to re-identify the information unless permitted by applicable law);
• Operate, evaluate and improve our business (including developing new products and services; improving and analyzing our products and services; managing our communications; and performing accounting, auditing and other internal functions);
• Manage career opportunities with us, including for recruitment purposes, candidate screening and evaluation and employee onboarding;
• Maintain and enhance the safety and security of our products and services, prevent misuse and troubleshoot technical issues;
• Verify your identity and protect against fraud and other criminal activity, claims and other liabilities;
• Exercise our rights and remedies and defend against legal claims; and
• Comply with and enforce applicable legal requirements, relevant industry standards and Apollo Care policies, including the Terms of Use for this website and other terms and conditions.

We also may use the information in other ways for which we provide specific notice at the time of collection.

Third-Party Analytics Services

We may use third-party analytics services on our Digital Services, such as Google Analytics. The providers of these analytics services use technologies such as cookies and web beacons to help us analyze your use of our Digital Services. The information collected through these means may be disclosed to or collected directly by these services. To learn more about Google Analytics, please visit https://www.google.com/policies/privacy/partners/.

3. Information We Share

We may share, or may have shared within the past 12 months, the categories of personal information we obtain about you (as described above) with certain categories of third parties, including:

• Service Providers, Agents and Subcontractors: We share personal information with vendors and other entities to perform services for us on our behalf, such as technology and communications, advertising and marketing, analytics, fraud detection, security, customer service.
• Affiliated Entities: We may share personal information with our affiliates.
• Business Transfers: We reserve the right to transfer any personal information we have about you in the event of a potential or actual sale or transfer of all or a portion of our business or assets (including in the event of an actual or anticipated merger, acquisition, joint venture, reorganization, divestiture, dissolution or liquidation).
• Others: We may disclose personal information (1) if we are required or permitted to do so by applicable law, regulation, or legal process (such as a court order or subpoena); (2) in response to requests by government officials and agencies, such as law enforcement authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual fraud, illegal activity, security, or technical issues; or (6) otherwise with your consent or as directed by your representative.

4. Your Choices and California Privacy Rights

Your Choices

We offer you choices in connection with certain of the personal information we collect about you. To update your preferences, limit the communications you receive from us, or submit a request, please contact us as indicated in the How To Contact Us section of this Privacy Notice. You can unsubscribe from our marketing mailing lists by following the “Unsubscribe” link in our emails.

California Privacy Rights

If you are a California resident, you have the right to request access to, deletion of, or correction of your personal information, and to request information about how we collect, use, and disclose personal information. You also have the right to opt out of any sale or sharing of your personal information (though we do not sell or share such information).

You may exercise these rights by contacting us as described in the How to Contact Us section below. We will verify your identity before responding to certain requests, as required by law.

How We Protect Personal Information

We maintain administrative, technical and physical safeguards designed to protect personal information against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure or use.

Retention of Personal Information

To the extent permitted by applicable law, we typically retain personal information we obtain about you for as long as it is needed (1) for the purposes for which we obtained it and in accordance with the terms of this Privacy Notice, which generally means that we will keep your personal information for the duration of our relationship; (2) to take into account applicable statute of limitation periods and comply with applicable laws; or (3) for legitimate business purposes to the extent permitted by applicable law.

When determining the retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.

Children’s Privacy

Our Digital Services are designed for a general business audience and are not directed to children. In connection with the Digital Services, we do not knowingly solicit or collect personal information from children under the age of 13 without parental consent. If we learn that we have collected personal information from a child under age 13 without parental consent, we will either seek parental consent or promptly delete that information. If you believe that a child under age 13 may have provided us with personal information without parental consent, please contact us as specified in the How To Contact Us section of this Privacy Notice.

Links to Third-Party Services and Features

For your convenience and information, our Digital Services may provide links to other online services (such as websites or social media platforms), and may include third-party features such as apps, tools, widgets and plug-ins. These online services and third-party features may operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, are subject to the privacy statements of these parties, which we strongly suggest you review. To the extent any linked online services or third-party features are not owned or controlled by Apollo Care, we are not responsible for these third parties’ information practices.

Updates to Our Privacy Notice

We may update this Privacy Notice from time to time and without prior notice to you to reflect changes in our personal information practices. We will indicate at the top of the policy when it was most recently updated.

5. How to Contact Us

You can update your preferences, ask us to remove your information from our mailing lists, submit a request or ask us questions about this Privacy Notice by contacting us at [email protected] or by navigating to our Contact Us form.