Privacy Policy

Effective Date: August 17, 2026

Evolve BioRx (“Evolve BioRx,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you provide when using evolvebiorx.com (the “Website”) and related services.

This Privacy Policy explains the types of information that may be collected through the Website, how that information may be used and disclosed, and the choices available to you.

1. About Evolve BioRx

Evolve BioRx provides patient-navigation and referral services that help individuals access telehealth services offered by independent licensed healthcare providers.

Evolve BioRx does not independently diagnose medical conditions, prescribe medications, or provide medical treatment. Clinical services, including medical evaluations, diagnoses, treatment decisions, and prescriptions, are provided by independent licensed healthcare providers through our telehealth partners.

Certain information submitted as part of the telehealth process may constitute Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

Where HIPAA applies, PHI is handled in accordance with applicable HIPAA requirements, the privacy practices of the applicable healthcare provider, and applicable agreements between Evolve BioRx, its telehealth technology providers, healthcare providers, pharmacies, and other authorized service providers.

2. Information We Collect

Depending upon how you use the Website and telehealth services, information collected may include:

• Name
• Email address
• Telephone number
• Mailing or shipping address
• Date of birth
• Account or login information
• Device, browser, IP address, and Website usage information
• Communications with customer support
• Payment and transaction information
• Information you voluntarily provide when requesting information or support

When you enter the clinical telehealth process, additional health-related information may be requested, including:

• Medical history
• Current or previous medical conditions
• Symptoms
• Medications and supplements
• Allergies
• Laboratory or diagnostic information
• Treatment history
• Pharmacy information
• Photographs or documents submitted for clinical review
• Provider communications
• Prescription information
• Other information necessary to evaluate your eligibility for treatment

Health information collected as part of healthcare services may qualify as PHI and may be subject to HIPAA.

3. How We Use Information

We may use personal information to:

• Operate and maintain the Website
• Provide patient-navigation and referral services
• Facilitate access to telehealth services
• Create and manage accounts
• Connect users with licensed healthcare providers
• Facilitate communications relating to provider review, treatment, pharmacy fulfillment, or customer support
• Process transactions
• Verify identity and prevent fraud
• Respond to questions and requests
• Improve Website functionality and user experience
• Maintain security and protect our systems
• Comply with legal and regulatory requirements
• Enforce our terms and policies

PHI may also be used or disclosed by covered healthcare providers for purposes permitted by HIPAA, including treatment, payment, and healthcare operations, as described in the applicable Notice of Privacy Practices.

4. Telehealth Technology and Service Providers

Evolve BioRx works with third-party technology providers, healthcare providers, pharmacies, payment processors, fulfillment providers, and other vendors necessary to facilitate the telehealth experience.

These parties may receive information when necessary to perform their respective functions.

Where a service provider handles PHI on behalf of a HIPAA-covered entity, appropriate contractual and privacy safeguards, including Business Associate Agreements where required, may apply.

Access to PHI is limited to persons and organizations authorized to receive the information for legitimate healthcare, administrative, legal, or operational purposes.

5. How Health Information May Be Used or Disclosed

Where HIPAA applies, PHI may generally be used or disclosed for purposes including:

Treatment

Health information may be used or shared with physicians, healthcare professionals, pharmacies, laboratories, or other persons involved in providing or coordinating your care.

Payment

Health information may be used or disclosed when necessary for billing, payment processing, reimbursement, or other payment-related activities.

Healthcare Operations

Health information may be used for healthcare operations such as quality assessment, compliance, auditing, credentialing, administrative activities, fraud prevention, and improvement of healthcare services.

As Required by Law

Health information may be disclosed when required by federal, state, or local law.

Public Health and Safety

Health information may be disclosed for legally permitted public-health activities, including reporting certain diseases, adverse events, suspected abuse or neglect, or preventing serious threats to health or safety.

Legal and Governmental Requirements

Health information may be disclosed when legally permitted or required in connection with judicial or administrative proceedings, workers’ compensation matters, law-enforcement activities, health oversight activities, or other governmental functions.

For uses or disclosures requiring your authorization under applicable law, your written authorization will be obtained.

6. Your Rights Regarding Protected Health Information

When your health information is maintained by a HIPAA-covered healthcare provider, you may have rights that include:

Access to Your Records

You may request to inspect or obtain a copy of health information maintained about you. Electronic copies may be available when records are maintained electronically.

Request Corrections

If you believe information in your health record is incorrect or incomplete, you may request that the healthcare provider amend or correct the record. A request may be denied in certain circumstances permitted by law, but you may generally submit a written statement of disagreement.

Request Restrictions

You may ask that certain uses or disclosures of your health information be restricted. Healthcare providers are not required to agree to every requested restriction except where specifically required by law.

Confidential Communications

You may request that communications regarding your health information be sent to you using a particular method or at an alternative location when permitted by law.

Accounting of Disclosures

You may request information regarding certain disclosures of your PHI made during the period permitted by law.

Obtain a Paper Copy of the Notice of Privacy Practices

You may request a paper copy of the applicable Notice of Privacy Practices at any time, even if you have previously agreed to receive it electronically.

Authorize Others to Receive Your Records

You may provide written authorization allowing your healthcare information to be disclosed to another person or organization. You may generally revoke such authorization in writing, except to the extent action has already been taken in reliance on it.

7. Complaints Concerning Health Information

If you believe your privacy rights regarding PHI have been violated, you may submit a complaint to the healthcare provider responsible for maintaining your medical information.

You may also submit a complaint to the United States Department of Health and Human Services, Office for Civil Rights.

You will not be retaliated against for filing a privacy complaint.

Questions regarding which healthcare provider maintains your health information or where to direct a privacy request may be sent to:

Evolve BioRx
Email: [email protected]

We will direct the request to the appropriate healthcare provider or privacy contact when necessary.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, or disclosure.

Healthcare providers and service providers responsible for PHI are required to maintain safeguards appropriate to their obligations under applicable privacy and security laws.

No Internet-based system can be guaranteed to be completely secure, and users should exercise reasonable care when transmitting information electronically.

9. Data Retention

Information may be retained for as long as reasonably necessary to provide services, fulfill legal and contractual obligations, resolve disputes, enforce agreements, maintain business records, and comply with applicable healthcare record-retention requirements.

Medical records and PHI may be subject to retention requirements established by healthcare providers and applicable federal or state law.

10. Cookies and Similar Technologies

The Website may use cookies and similar technologies to maintain functionality, understand Website performance, improve user experience, and protect against fraud or misuse.

We do not intentionally use Website advertising technologies to disclose PHI for targeted advertising in violation of applicable law.

11. Third-Party Websites and Services

The Website may contain links to websites, patient portals, pharmacies, payment platforms, or other services operated by third parties.

Those organizations maintain their own privacy and security practices. Their policies govern information provided directly to them except where applicable law or contractual obligations provide otherwise.

12. Children

The Website and services are intended for adults unless expressly stated otherwise.

We do not knowingly solicit personal information directly from children in violation of applicable law.

13. State Privacy Rights

Depending upon your state of residence, you may have additional rights concerning personal information or consumer health information.

Nothing in this Privacy Policy limits rights provided under applicable state or federal law.

14. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices, services, technologies, or legal obligations.

The effective date at the top of this page indicates when this Privacy Policy was most recently revised.

15. Contact Us

For questions regarding this Privacy Policy or Evolve BioRx’s handling of personal information, contact:

Evolve BioRx
Website: evolvebiorx.com
Email: [email protected]

For questions concerning medical records, treatment information, or HIPAA rights, we may direct you to the healthcare provider or privacy officer responsible for the applicable medical record.