Notice of Privacy Practices

Effective date: August 12, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our commitment

Strong Pharma, Inc. is required by law to protect the privacy of your protected health information (PHI), to provide you this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect.

Privacy Officer. Strong Pharma has designated a Privacy Officer responsible for our privacy practices. You may contact the Privacy Officer at hello@strongpharma.org or 888-754-7914 with any question about this Notice or your privacy rights.

How we may use and disclose your health information

For Treatment. To compound and dispense your medications and coordinate with your prescriber(s), including the telehealth providers who evaluate you and issue prescriptions.

For Payment. To obtain payment for the medications we dispense — for example, billing you or a responsible party in connection with your prescription.

For Health Care Operations. For quality assessment and improvement, compliance, recall handling, and business management.

Business Associates. We may share PHI with contractors who perform services for us (shipping, IT, the intake platform), under written Business Associate Agreements that protect your information.

Other permitted or required disclosures

We may use or disclose your PHI without your authorization when required or permitted by law, including: as required by law; for public health activities (such as adverse-event or recall reporting, or a state Prescription Drug Monitoring Program where applicable); to health oversight agencies and boards of pharmacy; for judicial and administrative proceedings; to law enforcement as permitted; to avert a serious threat to health or safety; and for workers’ compensation.

Uses requiring your authorization

Most uses and disclosures not described above will be made only with your written authorization, including marketing (beyond what is permitted) and any sale of PHI. You may revoke an authorization in writing at any time, except to the extent we have already relied on it.

Your rights

To exercise any right, contact our Privacy Officer at hello@strongpharma.org or 888-754-7914.

Our duties

We are required to maintain the privacy of your PHI, provide this Notice, follow its terms, and notify you of breaches of unsecured PHI. We may change this Notice and make the revised Notice effective for PHI we already have; a current copy will be posted here.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer (hello@strongpharma.org · 888-754-7914) or with the U.S. Department of Health and Human Services, Office for Civil Rights (200 Independence Ave SW, Washington, DC 20201 · 1-877-696-6775 · www.hhs.gov/ocr). You will not be retaliated against for filing a complaint.