Privacy Policy

VEVARX PRIVACY NOTICE

Effective Date: June 10, 2026

Last Updated: October 23, 2026

This Privacy Notice describes how VevaRx LLC ("VEVArx," "we," "us") collects, uses, discloses, and protects personal information through the VEVArx website, vevarx.com (the "Site").

Key Privacy Points

We hope you read this entire Privacy Notice, but here are the key points:

• VEVArx does not provide medical advice, diagnosis, or treatment. Medical care is provided by independent, licensed healthcare providers through TelegraMD ("Healthcare Provider"). For more information, please visit telegramd.com.
• Our online assessment (quiz) helps you see whether a program may be a fit. Your quiz answers (such as height, weight, BMI, and goals) are used in your browser to show your results. We do not send your height, weight, or BMI to our customer database, to Meta, or to Google.
• If you choose to give us your first name, email, and (optionally) mobile number, we store them in our customer relationship management (CRM) system so we can contact you about your plan.
• Checkout, intake, and your medical information are handled on shop.vevarx.com and the patient portal, which are operated by TelegraMD, not VEVArx, and are subject to TelegraMD's privacy policies.
• We use cookies for site analytics and, where allowed, the Meta Pixel to measure our advertising. We never send your quiz answers, health information, name, email, or phone number to Meta. You can accept or decline advertising cookies at any time (see "Cookies and Your Choices" below).
• We do not sell your personal information or your consumer health data.

Table of Contents

1. Information We Collect
2. Cookies and Your Choices
3. Use of Information
4. Disclosure of Information
5. Your Rights and Choices
6. Protection of Information
7. Children
8. Updates and Changes to This Notice
9. Contacting Us

1. Information We Collect

Information you provide to us. Depending on how you use the Site, you may provide:

• Contact information, such as your first name, email address, and mobile phone number;
• Your text-message and email consent choices;
• Answers to our online assessment, such as height, weight, goal weight, preferred time frame, prior medication use, and the medication and plan you are interested in; and
• Any other information you choose to send us, such as when you email us.

How the assessment works. Your assessment answers are processed in your browser to calculate your BMI and show your results. When you submit the contact form, we send only your first name, email, mobile number (if provided), your consent choices, the page you were on, and the advertising campaign that brought you to the Site (such as UTM codes or an ad click ID) to our CRM. Your assessment answers are not sent to our CRM. When you continue to checkout, your medical intake is completed with TelegraMD.

Information collected automatically. When you use the Site, we and our service providers may automatically collect information such as browser and device type, IP address, approximate location (city/state derived from IP address), pages viewed, links clicked, the website that referred you, and cookie or other browser identifiers. See "Cookies and Your Choices" below.

Information from your Healthcare Provider and checkout. TelegraMD may share limited information with us about orders placed through shop.vevarx.com, such as an order number, the order amount, and payment status, and, as permitted by our agreements and applicable law, other information needed to support your care and service. Our handling of information we receive from them is subject to our agreements with them and applicable law.

2. Cookies and Your Choices

Cookies are small text files stored on your device when you visit a website. We also use similar technologies such as pixels, JavaScript, and browser local storage. We use the following types:

• Necessary: needed for the Site to work and to remember your cookie choice (for example, the "vx_consent" cookie).
• Analytics: Google Analytics, provided by Google LLC, helps us understand how visitors use the Site, such as which pages are visited, how visitors arrived, and general device and approximate location information. For our assessment, Google Analytics records only that a step was finished. We do not send your answers, measurements, goals, medication or plan choices, name, email, or phone number to Google Analytics. Because some pages relate to specific treatments, the pages you view may indicate a treatment you are interested in. You can opt out with the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout). Learn more at policies.google.com/technologies/partner-sites.
• Advertising measurement (Meta Pixel): with your permission where required, we use the Meta Pixel, provided by Meta Platforms, Inc., to measure how well our Facebook and Instagram ads work. The Meta Pixel may receive: that a page was viewed, that a product page was viewed, that the assessment was completed, and that a checkout button was clicked, along with the page address, your browser and device information, IP address, and Meta's cookie identifiers ("_fbp" and "_fbc"). We have turned off Meta's automatic collection of form fields and button text. We never send Meta your assessment answers, health information, name, email, or phone number.
• Purchase measurement: if you accept advertising cookies, we may pass Meta's anonymous browser identifiers to our checkout page. If this feature is turned on, when an order is placed we may tell Meta that a purchase occurred, with the order amount, a scrambled order reference, and those browser identifiers only. No name, email, phone, address, medication, product, or health information is sent.

Your cookie choices. When you first visit, a banner lets you Accept or Decline advertising cookies, and you can change your choice at any time:

Your privacy choices

• Washington, Nevada, and Connecticut residents: we do not load the Meta Pixel unless you click "Accept." If we cannot tell which state you are in, we treat you the same way.
• All other visitors: the Meta Pixel loads unless you click "Decline."
• Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out, and we do not load the Meta Pixel.
• Your choice is saved in a cookie and in your browser for one year. If you clear your cookies or use a different browser or device, you will be asked again.
• You can also block or delete cookies in your browser settings, though some features may not work as expected. Learn more at allaboutcookies.org. We do not respond to "Do Not Track" browser signals other than GPC.

These third-party services process information under their own privacy policies (Google: policies.google.com/privacy; Meta: facebook.com/privacy/policy).

3. Use of Information

VEVArx uses personal information to:

• Operate, provide, and improve the Site and our services, and connect you with the Healthcare Provider;
• Respond to you and send confirmations, updates, and support messages;
• Send marketing emails and, if you opt in, text messages;
• Measure and improve our website and advertising, as described in "Cookies and Your Choices";
• Conduct business operations such as auditing, security, fraud prevention, accounting, and analytics;
• Protect against, investigate, and respond to misuse of the Site or unlawful behavior;
• Comply with legal requirements and establish, exercise, or defend our legal rights; and
• Create aggregated or de-identified information, which we do not attempt to re-identify.

4. Disclosure of Information

We do not sell personal information. VEVArx may disclose information:

• To TelegraMD, its affiliated medical professionals, and the licensed pharmacies they use, to provide your care and fill prescriptions;
• To vendors and service providers that help us run our business, such as website hosting (Netlify), our CRM and email/text-message platforms, analytics (Google), and advertising measurement (Meta, limited as described above), who may use it only to provide services to us;
• To current or future parents, subsidiaries, and affiliates under common control with VEVArx;
• As required by law, such as in response to a subpoena, court order, or government request;
• When we believe disclosure is appropriate to investigate or prevent illegal activity, fraud, or other wrongdoing; to protect the rights, property, or safety of VEVArx, our customers, or others; and to enforce our agreements;
• As part of, or in anticipation of, a merger, acquisition, asset sale, bankruptcy, or other corporate transaction; and
• With your consent or at your direction.

5. Your Rights and Choices

Marketing emails. If you give us your email, we may send you marketing emails about our services and offers. You can unsubscribe at any time using the link in any marketing email or by emailing info@vevarx.com. You may still receive non-marketing messages about services you requested.

Advertising cookies. See "Cookies and Your Choices" above.

Privacy rights. Depending on where you live, you may have the right to know what personal information we have about you, to access, correct, or delete it, to opt out of targeted advertising, and to withdraw consent. To make a request, email info@vevarx.com. We may need to verify your identity. If we deny your request, you may appeal by replying to our decision; if your appeal is denied, you may contact your state Attorney General. We will not discriminate against you for exercising your rights.

Data retention. We keep personal information for as long as needed for the purposes described in this Notice, including to send you messages you have agreed to receive, or as required by law, and then delete or de-identify it.

SMS Communications

Collection and use of phone numbers. If you give us your mobile number and check the text-message consent box, we will use it to send you recurring automated marketing and informational text messages about your plan, offers, and our services. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. We may also use your number to respond to your requests.

Opting out. Reply STOP to any message to stop receiving texts; you may receive one final message confirming your opt-out. Reply HELP for help, or email info@vevarx.com. If you change your mobile number, please let us know so we do not text the wrong number.

Sharing. We share your phone number only with service providers that help us deliver text messages, who are contractually required to use it only for that purpose. Text-messaging opt-in data and consent are not shared with any third parties for their own marketing or any other purpose.

6. Protection of Information

VEVArx uses physical, technical, and administrative safeguards designed to protect personal information. No system is completely secure, and we cannot guarantee the security of your information. Please provide detailed health or medical information only through the Healthcare Provider's intake and patient portal, not by email. If a data security breach involving your personal information occurs, we will provide notice as required by applicable state and federal law, including California Civil Code § 1798.82 and the FTC Health Breach Notification Rule where it applies.

7. Children

Our services are intended only for adults 18 years of age or older. The Site is not directed to individuals under 18, and we do not knowingly collect personal information from them. If we learn that we have collected personal information from a minor, we will take reasonable steps to delete it.

8. Updates and Changes to This Notice

We may update this Privacy Notice from time to time. We will post the updated Notice on this page and change the "Last Updated" date. If we make a material change to how we use or share consumer health data, we will ask for your consent where required by law.

9. Contacting Us

If you have questions about VEVArx's privacy practices, or to submit a privacy request or complaint, please email info@vevarx.com. You can also make privacy requests directly to your Healthcare Provider as described in its privacy policies.

VEVArx Consumer Health Data Privacy Policy

Last Updated: October 23, 2026

This Consumer Health Data Privacy Policy ("CHD Policy") supplements the VEVArx Privacy Notice and applies to "consumer health data" ("CHD") as defined in the Washington My Health My Data Act ("MHMDA"), Nevada SB 370 ("Nevada CHD Law"), the Connecticut Data Privacy Act, and similar state laws on health or sensitive data. Capitalized terms not defined here have the meanings given in the Privacy Notice. Information that the Healthcare Provider collects and maintains as protected health information under the Health Insurance Portability and Accountability Act ("HIPAA") is governed by the Healthcare Provider's HIPAA notice, not this CHD Policy.

Categories of CHD we collect

• Bodily measurements you enter in our assessment, such as height, weight, goal weight, and the BMI calculated from them (processed in your browser and not sent to our CRM, Meta, or Google);
• Your interest in weight-management treatment and the medication or plan you choose, and whether you have used similar medications before;
• Information that identifies you as seeking health care services, such as your contact details submitted through our weight-management assessment, or that you placed an order; and
• Information that could be used to infer health interests, such as visits to treatment pages, approximate location, and browser identifiers.

Sources of CHD. Directly from you; automatically through your use of the Site; and from the Healthcare Provider and checkout operator (limited order information).

Why we collect and use CHD. To provide the services you request, including showing your assessment results and connecting you with the Healthcare Provider; to contact you as you have agreed; to operate, secure, and improve the Site; to measure our advertising as described in "Cookies and Your Choices," with your consent where required; and to comply with law and protect our rights.

How we share CHD. We do not sell CHD. We may share the categories above with: the Healthcare Provider, its medical professionals, and pharmacies, to provide your care; our service providers (such as hosting, CRM, email and text-message platforms, and analytics), who process it on our behalf; Meta, limited to the page-view, product-view, assessment-completed, checkout-click, and (if enabled) anonymous purchase events described in the Privacy Notice, and for Washington, Nevada, and Connecticut residents only after you click "Accept"; affiliates; government or legal authorities when required by law; and a successor in a corporate transaction. We may also share CHD at your direction or with your consent.

Consent. Where required by the MHMDA, the Nevada CHD Law, or other law, we collect and share CHD only with your consent, or as necessary to provide a service you requested. You can withdraw consent to advertising cookies at any time with the "Your privacy choices" button above, and you can withdraw other consents by emailing info@vevarx.com.

Your CHD rights. Subject to exceptions, you may have the right to (1) confirm whether we collect, share, or sell your CHD and get a list of the third parties and affiliates we share it with; (2) access your CHD; (3) delete your CHD; and (4) withdraw your consent to our collection or sharing of your CHD. To exercise these rights, email info@vevarx.com. We may need to verify your identity, but we will never ask for your password or sensitive financial information to do so. If we deny your request, you may appeal by emailing info@vevarx.com; if your appeal is denied, you may contact your state Attorney General.

Updates to this CHD Policy. We may update this CHD Policy from time to time and will post the updated version here with a new "Last Updated" date. If we make a material change, we will obtain your consent where required by law.

Contact us. Questions about this CHD Policy can be sent to info@vevarx.com.