Effective date: December 1, 2025

Strategies4RXSavings Corporation, doing business as StrategiesRx (“Company,” “we,” “us,” or “our”), describes in this Privacy Policy how we collect, use, disclose, and protect information in connection with the Savings Hub Membership website, tools, databases, and related services (the “Services”). This Policy is incorporated into our Terms of Use.

1. Scope

This Policy applies to information we collect from business users of the Services (for example, independent pharmacies, healthcare organizations, and employers, and their personnel) in the United States. The Services are intended for business use and are not directed to consumers or children. We design the Services to minimize the collection of information about individual patients and to avoid receiving Protected Health Information (“PHI”) as defined by HIPAA.

2. Summary of Key Points

• We design the Services to avoid receiving PHI. Do not input PHI into the platform unless we have a separate, duly executed Business Associate Agreement (BAA) in place.
• We use information to provide and improve the Services, operate accounts and billing, secure the Services, and comply with law.
• We do not “sell” personal information or “share” it for targeted advertising as those terms are defined by certain state privacy laws. If our practices change, we will update this Policy and provide any required choices.
• We may create de-identified or aggregated information that does not identify individuals and use it for analytics, product development, and other lawful purposes.

3. Information We Collect

The information we collect generally falls into the following categories:

A. Account and Billing Information

Business contact names, titles, organization names, email addresses, phone numbers, mailing addresses, user IDs, role/seat data, and subscription details. Payment card information is processed by our payment processor and is not stored by us in full.

B. Usage and Device Information

When you use the Services, we automatically collect:

• IP address and general location information derived from IP address;
• device and browser type, operating system, and settings;
• pages or screens viewed, features used, timestamps, and clickstream data;
• log and diagnostic information related to performance, security, and usage.

C. Support and Communications

Content of messages you send us (for example, through email or support forms), any attachments you choose to provide (please do not include PHI), and related metadata such as time and date of communications.

D. Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve the Services. See “Cookies and Analytics” below.

We do not intentionally collect:

• patient medical records or charts;
• Social Security numbers;
• insurance ID numbers; or
• other sensitive identifiers of individual patients, except as may be explicitly governed by a separate BAA.

4. Sources of Information

We collect information:

• directly from you or your organization (for example, when you create an account, subscribe, or contact support);
• automatically through your use of the Services; and
• from service providers that support our operations (for example, payment processors, hosting providers, and analytics vendors).

5. PHI, HIPAA, and Business Associate Status

The Services are designed to avoid receipt of PHI. You must not input PHI into the platform unless we have agreed in writing to accept PHI and a separate, duly executed Business Associate Agreement (BAA) is in place.

In the absence of such a BAA, we do not act as your Business Associate as defined under HIPAA and do not accept PHI. If support requires PHI, you must limit disclosures to the minimum necessary and use secure channels.

If PHI is inadvertently submitted through the Services without a BAA in place, we may delete or de- identify such information, and you remain responsible for any required notices, mitigation, or regulatory reporting. You are solely responsible for your own HIPAA compliance and for ensuring that your use of the Services complies with HIPAA and other applicable privacy and security laws.

6. How We Use Information

We use the information we collect for the following purposes:

• Provide, operate, maintain, and secure the Services
• Authenticate users and manage accounts, seats, and permissions
• Process payments and billing, and communicate with you about your subscription
• Provide support, training, and service notices (including security and product updates)
• Analyze usage and performance to improve and develop features and content
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Enforce our Terms of Use and other agreements
• Comply with applicable laws, regulations, and legal processes

We may also create de-identified or aggregated information derived from your use of the Services and use and disclose that information for analytics, product development, program reporting, and other lawful business purposes.

7. How We Disclose Information

We disclose information in the following circumstances:

A. Service Providers

We share information with service providers that perform services on our behalf under appropriate confidentiality and data-protection obligations, including:

• hosting and infrastructure;
• payment processing;
• analytics and performance monitoring;
• security and fraud prevention;
• email delivery and communications;
• customer support tools.

B. Legal and Safety

We may disclose information to comply with applicable law, regulation, legal process, or governmental request; to enforce our agreements; or to protect the rights, property, or safety of the Company, our users, or the public.

C. Business Transfers

We may disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction. Any successor entity will be subject to this Policy or a policy that is at least as protective of your information.

We do not sell your personal information, and we do not share personal information for targeted advertising as defined by certain state privacy laws. If that changes, we will update this Policy and provide required notices and opt-out mechanisms.

8. Cookies and Analytics

We use cookies and similar technologies to operate and improve the Services.

• Essential cookies: required to operate core features of the Services (for example, authentication and security). These cannot be disabled via cookie preferences.
• Performance/analytics cookies: help us understand how the Services are used so we can improve functionality and user experience.

Controls: Most browsers allow you to manage cookies through settings. If you block or delete cookies, some features of the Services may not function properly.

We may use third-party analytics services that collect information about your use of the Services over time to help us understand usage patterns. These providers are contractually restricted from using the information they collect on our behalf for their own purposes, except as permitted by applicable law (for example, to improve their analytics services).

9. Data Security

We implement reasonable technical and organizational measures designed to protect information under our control from loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, no method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

If you believe your account or credentials have been compromised, contact us immediately at info@strategies4rxsavings.com.

10. Data Retention

We retain information for as long as reasonably necessary to:

• provide and support the Services;
• comply with legal, accounting, and reporting obligations;
• resolve disputes; and
• enforce our agreements.

We may retain de-identified or aggregated information for longer periods where permitted by law.

11. Children’s Privacy

The Services are not directed to children and are intended for business use. We do not knowingly collect personal information from children under 13 (or under 16 where a higher age is required by applicable law). If you believe a child has provided personal information to us, please contact us so we can delete it.

12. State Privacy Rights (e.g., CA, CO, CT, VA and similar laws)

Depending on your state of residence, you may have certain rights regarding personal information we hold about you in your individual capacity (for example, as a contact person for a business customer). These rights may include the ability to request:

• Access to, or a copy of, personal information we hold about you
• Correction of inaccurate personal information
• Deletion of personal information, subject to legal exceptions
• Information about how we used or disclosed personal information

Because we do not “sell” personal information or “share” it for targeted advertising, the corresponding opt-out rights are not applicable to our current practices. If our practices change, we will update this Policy and provide the required opt-out mechanisms.

Appeals: If we deny your request, you may appeal by emailing info@strategies4rxsavings.com with the subject line “Privacy Request Appeal.”

To exercise applicable rights, email us at info@strategies4rxsavings.com. We may request information to verify your identity and authority and will process your request consistent with applicable law. Where permitted by law, you may designate an authorized agent to act on your behalf.

We will not discriminate against you for exercising your privacy rights.

13. International Users

The Services are intended for use in the United States. If you access the Services from outside the United States, you understand and consent that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

14. Third-Party Links and References

References to third-party programs, foundations, manufacturers, discounts, or websites are for identification only and do not imply endorsement. Those third parties have their own terms and privacy policies, which we do not control. We are not responsible for the privacy or security practices of third-party websites, programs, or services.

15. Changes to this Policy

We may update this Policy from time to time. If changes are material, we will provide notice by posting the revised Policy and/or by email. The “Effective date” at the top of this Policy will indicate when it was last updated. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.

16. Contact Us

Questions or privacy requests may be sent to info@strategies4rxsavings.com.

Mailing address:
Strategies4RXSavings
241 Star Pointer Way
Spring Hill, TN 37174