California Consumer Privacy Notice

This California Notice works alongside — and does not replace — our HIPAA Notice of Privacy Practices, which governs the medical information created during your clinical relationship with the providers and pharmacies made available through Ongo, and our Consumer Health Data Privacy Notice, which covers Washington and Nevada consumer health data laws. Health information you share as part of a medical evaluation, prescription, or treatment is generally governed by our HIPAA Notice, not this one. This California Notice covers personal information we collect outside that clinical relationship (for example, through our website, app, marketing, and online eligibility quiz).

In the preceding 12 months, we have collected the following categories of personal information about California residents:

• Identifiers — name, email, mailing/shipping address, phone number, IP address, and online/device identifiers
• Customer records — billing and shipping information, payment details
• Commercial information — your order, purchase, and subscription history
• Internet or network activity — how you browse and interact with our website, app, and ads
• Geolocation data — general or, where applicable, precise location
• Audio/electronic information — customer-service call recordings and messages
• Sensitive personal information — including account login credentials, and health-related information revealed by your activity on our site or eligibility quiz (for example, if you searched or expressed interest in weight-loss treatment or specific medications)
• Inferences — preferences and characteristics we derive from the above

We collect personal information directly from you (your account, our eligibility quiz, and your communications with us), automatically through cookies and similar technologies, from your devices, and from service providers, advertising partners, and analytics providers.

We use personal information to provide and operate our services, process your eligibility and connect you with providers, coordinate prescription fulfillment, process payments, provide customer support, secure and improve our services, communicate with you, market our services, and comply with legal obligations.

In the preceding 12 months, we have "shared" certain personal information — including identifiers, general internet activity, and inferences — with our advertising partners, Google Ads and Meta Ads, for purposes that may be considered cross-context behavioral advertising under California law.

We have not sold personal information for monetary payment. We do not share information about specific treatments, medications, or health conditions you've viewed or searched for with these advertising partners. You can opt out of this sharing as described under "Your California Privacy Rights" below.

We disclose personal information to the vendors who help us run our business: pharmacies that fill your prescriptions, Stripe (payment processing), 100ms (video and voice consultations), Twilio (chat and messaging), and Google Ads and Meta Ads (advertising).

If you are a California resident, you have the right to:

• Know/Access — what personal information we've collected about you, where it came from, and who we've shared it with
• Delete your personal information, subject to certain exceptions
• Correct inaccurate personal information
• Opt out of sale/sharing of your personal information, including for targeted advertising
• Limit the use of sensitive personal information where we use it beyond what's needed to provide our services
• Non-discrimination — we won't treat you differently for exercising these rights
• Appeal a decision if we deny your request

To exercise your rights: info@ongoweightloss.com, or call 1-888-655-5267.

To opt out of sale/sharing or limit sensitive personal information use: Click "Your Privacy Choices" in our website footer. We also honor the Global Privacy Control (GPC) browser signal automatically — if your browser or extension sends a GPC signal, we treat it as a valid opt-out request.

We'll respond to your request within 45 days (we may extend this once, by another 45 days, if needed). We may need to verify your identity first. You can also have someone else (an "authorized agent") submit a request on your behalf.

If we deny your request, you can ask us to reconsider by contacting us at info@ongoweightloss.com or calling 1-888-655-5267. You can also file a complaint with the California Privacy Protection Agency (cppa.ca.gov) or the California Attorney General (oag.ca.gov/privacy).

We retain each category of personal information for as long as reasonably necessary to fulfill the purposes described in this Notice, using criteria that include: the length of your relationship with us, the length of time needed to provide the products or services you've requested, and any retention period required by law. Sensitive personal information collected through our eligibility quiz is retained only as long as necessary to evaluate your treatment request and connect you with a Provider, unless a longer period is required to comply with applicable law.

Ongo Weight Loss, LLC

• Email: info@ongoweightloss.com
• Phone: 1-888-655-5267
• Mailing Address: 8 The Green Ste Suite A, Dover, DE 19901, USA