About the Site

The Site gathers several types of information from and about users of the Site, including medication information, geographic location and user preferences. Among other things, this allows the Site to:

• Check the prices of your medication at multiple pharmacies near you;
• Show you comparable prices for your medication using information received from third parties;
• Send you a discount card if requested; and
• Provide coupons for your use at the pharmacy of your choice.

Accounts and sign-in

If you register or sign in, we use authentication systems operated on infrastructure provided by cloud service providers to verify your credentials and keep your session active. Operational messages (such as verifying your email address or helping you regain access to your account) may be delivered through transactional communications vendors we engage for that purpose. We may use third-party security and fraud-prevention services to help protect accounts and the Site. How long sessions last and how sign-out works are designed to balance convenience and security; details may change as we update our systems.

Categories of Information We Collect

The information we collect from or about you allows us to provide our services and helps us personalize and improve your experience on the Site. You may print or download a discount card to use our service without registering with us or creating an account. Depending on how you use the Site, we may collect the following categories of information directly from you:

• Information about medications you are seeking to fill (such as medication names and dosage) and your preferred pharmacy.
• Information about your purchase transactions, including purchases using our discount card, including drug name and pharmacy location.
• Geographic location information from you or your device, including your geolocation data, zip code, region, city, street address, time zone, latitude and longitude information. Please note that we will not access precise geo-location information from your device, unless you grant the Site permission to do so.
• User preferences.
• Account and authentication information when you register or sign in, such as email address, account identifiers, and data your browser stores to maintain your session.
• Technical data and related information, such as information about your device, system and application software, peripherals and other data related to your interactions with the Site.
• Metadata and other information associated with or stored on your device.

We may also collect information directly from you outside of the Site if you provide it to us, for example, if you send Customer Service a request or email. When you use the Site, we automatically collect some categories of information from you, such as information about your use of the Site (for example, features used, content viewed, dates and times of interactions) and technical data about your device, such as operating system, model, device identifier, and IP address. Server logs may record request metadata (such as requested paths, response status, duration, and whether you appear to have an active session) for security, debugging, and operations. We may also automatically collect certain technical information relating to you, which your web browser automatically sends whenever you visit a website on the Internet, or which is collected when you use a mobile application (see the section "Cookies and Similar Tools" below for more information). We may use third-party analytics, tag management, and measurement services that rely on cookies and similar technologies to help us understand traffic, conversions, and how the Site is used. Those providers process information subject to their own terms and privacy notices.

How We Use the Information We Collect

Information we collect about you may be used for the following purposes:

• Operating the Site, including to provide you the Service features.
• To provide you the information and services you request when you use the Site.
• To customize your experience when you use the Site, for example to provide you with interactive or personalized elements or provide you with content based on your interests, requests, and location.
• Improve the Site and other Company products or services, including by developing new products and services, performing quality control activities, and conducting internal analytics and marketing research (for example, measuring how features are used, campaign effectiveness, and aggregated trends), including through third-party analytics and advertising tools when you have not opted out as described under "Cookies and Similar Tools" below.
• Provide account management, patient care, customer service, and engaging in system maintenance.
• Deliver marketing communications, such as promotional materials or advertisements, including materials and advertisements for services offered by us and/or third parties that might be of interest to you, either directly to you or through third party apps or websites.
• Communicate service-related or required notices about the Site to you, which may include communications by email or by text messages (i.e., SMS) at the mobile device number you provide us.
• Detect, prevent, and respond to suspected fraud, intellectual property infringement, violations of our Terms of Service, violations of law, or other misuse of the Site.
• Perform analytics, including to compile, synthesize, generate, and analyze usage statistics and aggregated or de-identified information for internal reporting and product decisions.
• Monitor your use of the BIN/PCN/RXGroup/Member ID or other information we provide to you.

When permitted by applicable law, we may also:

• Combine the information you provide us, or that we collect from third parties, with other information maintained by us, and use that combined information for any of the above purposes.
• De-identify your information by removing information typically used to identify you and use that de-identified information for any purpose permitted by law.

How We Share Information We Collect

Depending on how you use the Site, your information may be shared with pharmacy and scheduling partners, payment processors, transactional email and messaging providers, cloud hosting and infrastructure providers, analytics, advertising, and affiliate-measurement providers, security and fraud-prevention vendors, and other service providers and subprocessors we engage to host, secure, operate, or improve the Site. The specific companies we use may change over time; this Policy describes categories of recipients so that our practices remain accurate even as vendors change.

Your information may also be disclosed to the following third parties:

• Pharmacies and other partners who help us provide the services available through the Site to you, including scheduling and fulfillment where you choose to use those features.
• Business partners, who may deliver marketing communications, promotional markets, advertisements, or other information, including about other services offered by us and/or third parties, that may be of interest to you. You will be given the option to opt out of marketing messages. If required to do so by law or if we have a good faith belief that disclosure is necessary to (1) comply with the law or with legal process served on us; (2) protect and defend our rights or property; or (3) to protect someone's safety.
• Advisors, potential transactional partners, or other third parties related to the consideration, negotiation, or completion of a corporate change of control resulting from, for example, a sale to, or merger with another entity. If all or substantially all our assets or stock is acquired by a third party, whether by merger, acquisition, reorganization or otherwise, we may transfer our user database, including personal information contained in it, to the third party.
• Service providers who work on our behalf or partner with us to provide or improve the Site or related products or services or carry out activities on our behalf. Our service providers are required to agree to protect your personal information consistent with this Privacy Policy.

Note: All other use case categories exclude text messaging origination opt-in data and consent; this information will not be shared with any third parties. We and our service providers may share reports on user demographics and traffic patterns that do not identify you, as well as other information that does not identify you with third parties.

Information Security

We take reasonable steps to protect your personal information, which is any information that identifies you or could reasonably be linked to you. Systems that support the Site—including authentication and related functions—are hosted with cloud and infrastructure providers using configurations and safeguards appropriate to the sensitivity of the data we process, consistent with our security program and any required business associate or similar agreements. Individual vendors maintain their own compliance programs and certifications; not every component is subject to the same standards.

We use encryption and other industry-standard safeguards for data in transit and at rest where appropriate, secure handling of credentials and session data, and controls over access to systems and secrets. Specific technical measures may evolve as threats and best practices change.

Encrypted connections may be indicated by https in the browser URL or a lock icon in the browser window. These indications may not be present in all mobile experiences.

Unfortunately, there is always some risk that an unauthorized third party may find a way around our security measures. We cannot guarantee that the Internet or any other technical system will be 100% secure or error-free. We are not responsible for the security of information you transmit over networks that we do not control, including the Internet and wireless networks. Please note that e-mails and other communications you send to us are not encrypted, and by communicating with us by email you accept the risk that any personal information contained in the email may be intercepted or accessed by unauthorized parties.

Your Choices

You can manage certain non-essential cookies and similar tools through the cookie banner and "Manage" preferences on the Site. Essential cookies (including those needed to keep you signed in) may still be used for core functionality. You may opt out of receiving marketing emails by using the unsubscribe information available in any marketing email, or by emailing us at contact@travelwithwandr.com. To the extent that you use the Site, there are certain messages you may not opt out of receiving, such as non-promotional email messages about programs or services you have registered for or certain administrative, technical, or safety notices about the Site or our products or services.

The Site does not currently respond to "do not track" signals or other mechanisms that provide a method to opt out of the collection of information over time and across websites and online services you may use. If we do so in the future, we will describe how we do so in this Privacy Policy. Visit the following website, for more information on this developing area: https://www.allaboutdnt.org.

Information About Minors

The Site is intended for adults only and are not directed to, nor do we knowingly collect information from, individuals under the age of 18. If you become aware that your child or any individual under your care who is under the age of 18 has provided us with information without your consent, please contact us at the contact information listed below.

California Residents

Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to request information about how and to whom we disclose certain categories of your personal information for their direct marketing purposes, once per calendar year. You can make this request to us via email at contact@travelwithwandr.com or by calling toll-free at 302-251-2302.

If you are a resident of California, please see our California Privacy Notice for additional provisions that apply to you.

Links to Other Websites

Our Site may include links to external third-party websites and online services that are not under our control. We are not responsible for the collection, use, and disclosure of your information on those websites and other online services provided by those third parties. We encourage you to review the privacy policies and Terms of Service of each website and other online service you visit. The inclusion of links to external third-party websites and online services does not imply endorsement of, or association with, such websites and online services by us, or any warranty of any kind, either express or implied.

Cookies and Similar Tools

We and our service providers use cookies, local storage, pixels, and similar technologies for several purposes:

• Essential / session: Cookies or similar technologies may be used so the Site can recognize your session when you are signed in and provide core account-based features.
• Preferences: We may store your choices about optional cookies (for example, in browser storage) so we can remember whether you have accepted or declined non-essential analytics and related technologies.
• Analytics, advertising, and affiliate measurement: When you have not opted out (see the cookie banner and "Manage" preferences), we may load scripts or SDKs from third-party analytics, advertising, tag-management, or affiliate partners. Those providers may set their own cookies or read identifiers to measure site usage, conversions, and campaigns. Their use is subject to their respective privacy policies and, where applicable, consent settings we surface on the Site.

Web beacons and similar tags may be used to understand how pages and messages are viewed. Blocking or deleting cookies may limit certain features; some portions of the Site may not function properly or may perform more slowly if you restrict cookies broadly.

Retention

We will retain your personal information in accordance with our record retention policies and as permitted by applicable law unless you instruct us to remove it by contact us at contact@travelwithwandr.com. We will also retain your personal information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You can update the personal information you have provided to us at any time by writing to the program administrator at Wandr Health, Inc./Manifest Pharmacy. Attn: Privacy Team/Regulatory Compliance, 5632 Van Nuys Blvd, Unit #3240, Sherman Oaks, CA 91401

Access from Outside the United States

If you access the Site from outside the United States, please be aware that personal information may be transferred to, stored in, and processed in the United States. Certain governmental authorities may not consider the level of protection of personal information in the United States to be equivalent to that required in other jurisdictions.

Changes and Updates

We reserve the right to change our technical design, infrastructure, business and commercial partners, service providers, subprocessors, and similar elements of our operations, and to change how we use information you have provided to us or that we collect through your use of the Site, at any time, consistent with applicable law. Updated practices will be reflected in this Privacy Policy or related notices when we deem appropriate.

We may make changes to our Privacy Policy from time to time. When we do so, we will post the revised Privacy Policy on our Site and change the "last updated" date. Please check the "last updated" date at the top of this page to determine if the policy has been modified since you last reviewed it. Your continued use of the Site after that date means you agree to this Privacy Policy and any updates, except where applicable law requires a different process.

Contact Us

If you have any questions about this Privacy Policy, please send them to contact@travelwithwandr.com or you may call us at 302-251-2302 Monday-Friday 8am-5pm Eastern Time. You may also write to us in care of our administrator at:

Attn: Privacy Team/Regulatory Compliance
Wandr Health, Inc.
5632 Van Nuys Blvd, Unit #3240
Sherman Oaks, CA 91401