Privacy Policy

Last Updated: April 1, 2026

POPPY HEALTH (“POPPY,” “WE,” “US,” OR “OUR”) OPERATES A PLATFORM THAT CONNECTS INDIVIDUALS WITH LICENSED PRACTITIONERS AND ENABLES ACCESS TO PERSONALIZED HERBAL CARE AND RELATED PRODUCTS (THE “SERVICES”). THIS PRIVACY POLICY DESCRIBES HOW WE COLLECT, USE, DISCLOSE, AND PROTECT YOUR PERSONAL INFORMATION WHEN YOU ACCESS OR USE THE SERVICES OR OTHERWISE COMMUNICATE WITH US. BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTAND THIS PRIVACY POLICY.

PERSONAL INFORMATION WE COLLECT We collect personal information that identifies, relates to, describes, or could reasonably be linked to you. The types of personal information we collect depend on how you interact with the Services. We may collect information directly from you, including your name, email address, phone number, shipping and billing address, account credentials, and communications with us. When you use intake forms or interact with practitioners, we may collect information about your symptoms, health concerns, goals, and any materials you choose to upload, such as images or documents. We also collect transaction-related information, including purchases, subscriptions, payment confirmations, and order history. We may collect certain information automatically when you use the Services, including your IP address, browser type, device information, and information about how you interact with our website, such as pages viewed, time spent, and navigation behavior. We may use cookies and similar technologies to support functionality, analytics, and performance improvements. We may also receive information from third parties that support our operations, such as payment processors, analytics providers, or fulfillment partners, to the extent necessary to provide the Services.

SOURCES OF PERSONAL INFORMATION We collect personal information from several sources, including directly from you when you provide it through forms, account registration, purchases, or communications; automatically from your device and browser when you interact with the Services; and from third-party service providers that assist in operating the platform, processing payments, fulfilling orders, or supporting communications.

HEALTH-RELATED INFORMATION Some information you provide may relate to your health or wellness (“Health Information”). This may include intake responses, symptom descriptions, images, and communications related to your care. We use Health Information to facilitate practitioner review, support personalized recommendations, and improve the quality and safety of the Services. Poppy is not a healthcare provider; however, we recognize the sensitivity of Health Information and apply safeguards aligned with healthcare privacy principles in handling such information. Health Information may be shared with practitioners as necessary to provide Services to you.

HOW WE USE YOUR INFORMATION We use your personal information for business and operational purposes, including to provide, operate, and improve the Services; to connect you with practitioners; to process transactions and fulfill orders; to manage your account; to communicate with you regarding your care, purchases, or inquiries; to provide customer support; to personalize your experience; to monitor and analyze usage; to detect, prevent, or investigate fraud or misuse; and to comply with legal obligations.

We may also use your information to send you promotional communications, subject to your preferences, and you may opt out of such communications at any time.

HOW WE DISCLOSE PERSONAL INFORMATION We may disclose your personal information to third parties in certain circumstances. We share information with practitioners to enable them to review your information and provide recommendations. We share information with service providers that support our operations, including providers of intake processing, data storage, communications, analytics, payment processing, and fulfillment services. These service providers are authorized to use your information only as necessary to perform services on our behalf and are expected to protect it. We may disclose information to fulfillment partners to prepare and deliver products to you. We may also disclose information as required by law, in response to legal process, or to protect our rights, users, or the integrity of the Services. In the event of a business transaction such as a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We do not sell your personal information.

COOKIES AND TRACKING TECHNOLOGIES We use cookies and similar technologies to operate and improve the Services. These technologies allow us to recognize your browser or device, remember preferences, analyze usage, and enhance performance. You may control cookies through your browser settings; however, disabling cookies may affect the functionality of certain features of the Services.

DATA RETENTION We retain personal information for as long as necessary to provide the Services, fulfill transactions, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the nature of the information and the purposes for which it is used.

DATA SECURITY We implement administrative, technical, and organizational safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Despite these efforts, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

COMMUNICATIONS We may communicate with you via email, text message, or other electronic means regarding your account, care, transactions, or updates to the Services. You may opt out of promotional communications at any time, but we may continue to send service-related or transactional messages. We recommend that you avoid sending sensitive information through unsecured communication channels.

YOUR RIGHTS AND CHOICES Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, or delete your information, or to opt out of certain uses. To exercise these rights, you may contact us using the contact information below. We may take reasonable steps to verify your identity before fulfilling your request, as required by applicable law.

THIRD-PARTY SERVICES AND LINKS The Services may include links to or integrations with third-party websites or services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies before providing information to them.

INTERNATIONAL DATA TRANSFERS Your information may be transferred to, stored, and processed in countries other than your country of residence. By using the Services, you acknowledge that your information may be transferred to and processed in the United States or other jurisdictions, which may have different data protection laws than those in your country.

CHILDREN’S DATA The Services are not directed to children under the age of 13. We may collect personal information about minors only when such information is provided by a parent or legal guardian or with appropriate consent, as required by applicable law. If we collect a date of birth or other information indicating that a user is under 13, we will require parental or legal guardian consent prior to permitting continued use of the Services.

If we become aware that we have collected personal information directly from a child under 13 without appropriate consent, we will take reasonable steps to delete such information. If you are a parent or legal guardian and believe that a child has provided us with personal information without your consent, you may contact us using the contact details below to request deletion of that information. We do not sell or share (as those terms are defined under applicable law) personal information of individuals under 16 years of age.

CHANGES TO THIS PRIVACY POLICY We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Services. We will post the updated policy on this page and update the “Last updated” date. Your continued use of the Services after such updates constitutes your acceptance of the revised policy.

CONTACT If you have questions about this Privacy Policy or wish to exercise your rights, you may contact us at: support@poppyhealth.co