Contact us

LastUpdatedOctober7,2026

This Privacy Policy describes how Corexa Pharmacy, LLC (“Corexa Pharmacy,” “we,” “us,” or “our”) protects your information. It has two parts:

If Part I and Part II conflict regarding protected health information, Part I (the Notice of Privacy Practices) controls. A printable copy of the Notice of Privacy Practices is available here or upon request.

PartI:NoticeofPrivacyPractices

EffectiveJanuary1,2026|Version5704033-PAAS-2018-3.0

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Corexa Pharmacy LLC will ask you to sign an Acknowledgement that you have received this Notice of Privacy Practices (Notice). This Notice describes how Corexa Pharmacy LLC may use and disclose your protected health information in accordance with the HIPAA Privacy Rule. It also describes your rights and Corexa Pharmacy LLC’s duties with respect to protected health information about you.

Section A: Uses and Disclosures of Protected Health Information

  1. Treatment, Payment and Health Care Operations
    1. We will use your health information to provide treatment. This may involve receiving or sharing information with other health care providers such as your physician. This information may be written, verbal, electronic or via facsimile. This will include receiving prescription orders so that we may dispense prescription medications. We may also share information with other health care providers who are treating you to coordinate the different things you need, such as medications, lab work or other appointments. We may also contact you to provide treatment-related services, such as refill reminders, treatment alternatives and other health related services that may be of benefit to you.
    2. We will use your health information to obtain payment. This will include sending claims for payment to your insurance or third-party payer. It may also include providing health information to the payer to resolve issues of claim coverage.
    3. We will use your health information for our health care operations necessary to run the pharmacy. This may include monitoring the quality of care that our employees provide to you and for training purposes.
  2. PermittedorRequiredUsesandDisclosures
    1. Our pharmacists, using their professional judgment, may disclose your protected health information to a family member, other relative, close personal friend or other person you identify as being involved in your

Corexa Pharmacy LLC | Privacy Policy | Last Updated 10/07/2026                            Page 1 of 8

354 Eagles Landing Drive | Lakeland, FL 33810 NCPDP: 5704033 | Effective: 10/07/2026

health care. This includes allowing such persons to pick up filled prescriptions, medical supplies or medical records on your behalf.

  1. We also have contracts with entities called Business Associates that perform some services for us that require access to your protected health information. Examples may include companies that route claims to your insurance company or that reconcile the payments we receive from your insurance. We require our Business Associates to safeguard any protected health information appropriately.
  2. Under certain circumstances Corexa Pharmacy LLC may be required to disclose health information as required or permitted by federal or state laws. These include, but are not limited to:
    1. To the Secretary of Health and Human Services for investigations into our compliance with HIPAA rules and to respond to patient complaints.
    2. To the Food and Drug Administration (FDA) relating to adverse events regarding drugs, foods, supplements and other health products or for post-marketing surveillance to enable product recalls, repairs or replacement.
    3. To public health or legal authorities charged with preventing or controlling disease, injury or disability.
    4. To law enforcement agencies as required by law or in response to a valid subpoena or other legal process.
    5. To health oversight agencies (e.g., licensing boards) for activities authorized by law such as audits, investigations and inspections necessary for Corexa Pharmacy LLC’s licensure and for monitoring of health care systems.
    6. In response to a court order, administrative order, subpoena, discovery request or other lawful process by another person involved in a dispute involving a patient, but only if efforts have been made to tell the patient about the request or to obtain an order protecting the requested health information.
    7. As authorized by and as necessary to comply with laws relating to worker’s compensation or similar programs established by the law.
    8. Whenever required to do so by law.
    9. To a Coroner or Medical Examiner when necessary. Examples include: identifying a deceased person or to determine a cause of death.
    10. To Funeral Directors to carry out their duties.
    11. To organ procurement organizations or other entities engaged in procurement, banking or transplantation of organs for the purpose of tissue donation and transplant.
    12. To notify or assist in notifying a family member, personal representative or another person responsible for the patient’s care of the patient’s location or general condition.
    13. For certain research purposes.
    14. To a correctional institution or its agents if a patient is or becomes an inmate of such an institution when necessary for the patient’s health or the health and safety of others.
    15. When necessary to prevent a serious threat to the patient’s health and safety or the health and safety of the public or another person.
    16. As required by military command authorities when the patient is a member of the armed forces and to appropriate military authority about foreign military personnel.
    17. To authorized officials for intelligence, counterintelligence and other national security activities authorized by law.
    18. To authorized federal officials so they may provide protection to the president, other authorized persons or foreign heads of state or to conduct special investigations.

Corexa Pharmacy LLC | Privacy Policy | Last Updated 10/07/2026                            Page 2 of 8

354 Eagles Landing Drive | Lakeland, FL 33810 NCPDP: 5704033 | Effective: 10/07/2026

xix.  To a government authority, such as social service or protective services agency, if Corexa Pharmacy LLC reasonably believes the patient to be a victim of abuse, neglect or domestic violence but only to the extent required by law, if the patient agrees to the disclosure or if the disclosure is allowed by law and we believe it is necessary to prevent serious harm to the patient or to someone else or the law enforcement or public official that is to receive the report represents that it is necessary and will not be used against the patient.

  1. During an emergency or disaster relief situation, if you are unconscious or unable to tell us your preference, we may share information to lessen a serious and imminent threat to health or safety.
  2. We may contact you for fundraising efforts, but you can request that we not contact you again.
  3. Authorized Use and Disclosure
    1. Use or disclosure other than those previously listed or as permitted or required by law, will not be made unless we obtain your written Authorization in advance. You may revoke any such Authorization in writing at any time. Upon receipt of a revocation, we will cease using or disclosing protected health information about you unless we have already taken action based on your Authorization.
    2. Substance Use Disorder (SUD) Treatment Information
      1. A patient’s 42 CFR Part 2 qualifying treatment record (or information contained in the record) may be redisclosed in accordance with the permissions contained in the HIPAA regulations or (when received) pursuant to a Part 2 release.
        1. Exception: Part 2 SUD treatment records will not be used or disclosed for civil, criminal, administrative or legislative proceedings against a patient—absent patient consent or appropriately signed and executed court order/subpoena.

c.  Your Authorization is always required for Marketing purposes, Sale of your information, and any sharing of Psychotherapy notes.

  1. MoreStringentLaws
    1. Some states may have laws that are more stringent than HIPAA. Please refer to the end of the Notice for the laws that may apply.

SectionB:Patient’sRights

  1. RestrictionRequests
    1. You have a right to request a restriction be placed on the use and disclosure of your protected health information for purposes of carrying out treatment, payment or health care operations. Restrictions may include requests for not submitting claims to your insurance or third-party payer or limitations on which persons may be considered personal representatives.
    2. Corexa Pharmacy LLC is not required to accept restrictions other than payment related uses not required by law that have been paid in full by the individual or representative other than a health plan.
    3. If we do agree to requested restrictions, they shall be binding until you request that they be terminated.
    4. Requests for restrictions or termination of restrictions must be submitted in writing to the Privacy Officer listed in Section D of this Notice.
  2. Alternative Means of Communication
    1. You have a right to receive confidential communications of protected health information by alternate methods or at alternate locations upon reasonable request. Examples of alternatives may be sending information to a phone or mailing address other than your home.
    2. Corexa Pharmacy LLC shall make reasonable accommodation to honor requests.

Corexa Pharmacy LLC | Privacy Policy | Last Updated 10/07/2026                            Page 3 of 8

354 Eagles Landing Drive | Lakeland, FL 33810 NCPDP: 5704033 | Effective: 10/07/2026

c. Requests must be submitted in writing to the Privacy Officer listed in Section D of this Notice.

  1. Access to Health Information
    1. You have a right to inspect and copy your protected health information. The designated record set will usually include prescription and billing records. You have the right to request the protected health information in the designated record set for as long as we maintain your records.
    2. You have the right to have requested records provided to you in a timely fashion.
    3. You have the right to request that your protected health information be provided to you in your preferred format, including an electronic format if available.
    4. You have the right to have your information disclosed to another person or third-party that you choose.
    5. Requests may be submitted in writing to the Privacy Officer listed in Section D of this Notice.
    6. Any costs or fees associated with copying, mailing or preparing the requested records will be charged prior to granting your request.
    7. Corexa Pharmacy LLC may deny your request for records in limited circumstances. In case of denial, you may request a review of the denial for most reasons. Requests for review of a denial must also be submitted to the Privacy Officer listed in Section D of this Notice.
  2. Amendments to Health Information
    1. If you believe that your protected health information is incomplete or incorrect, you may request an amendment to your records. You may request amendment to any records for as long as we maintain your records.
    2. Requests must be submitted in writing to the Privacy Officer listed in Section D of this Notice.
    3. Requests must include a reason that supports the amendment to your health information.
    4. Corexa Pharmacy LLC may deny amendment requests in certain cases. In case of denial, you have the right to submit a Statement of Disagreement. We have the right to provide a rebuttal to your statement.
  3. AccountingofUsesandDisclosures
    1. You have the right to request an accounting of uses and disclosures that are not for treatment, payment or health care operations. This accounting may include up to the six years prior to the date of request and will not include an accounting of disclosures to yourself, your personal representatives or anything authorized by you in writing. Other restrictions may apply as required in the Privacy Rule.
    2. Requests must be submitted in writing to the Privacy Officer listed in Section D of this Notice.
    3. The first accounting in any 12-month period will be provided to you at no cost. Any additional requests within the same 12-month period will be charged a fee to cover the cost of providing the accounting. This fee amount will be provided to you prior to completing the request. You may choose to withdraw your request to avoid paying this fee.
  4. Notice of Privacy Practices
    1. You have a right to receive a paper copy of this Notice even if you previously agreed to receive a copy electronically.
    2. You have a right to request a revised or updated copy of this notice.
    3. Please submit a request to the Privacy Officer listed in Section D of this Notice.

Corexa Pharmacy LLC | Privacy Policy | Last Updated 10/07/2026                            Page 4 of 8

Section C: Corexa Pharmacy LLC’s Duties

354 Eagles Landing Drive | Lakeland, FL 33810 NCPDP: 5704033 | Effective: 10/07/2026

Corexa Pharmacy LLC is required by law to maintain the privacy of protected health information, to provide individuals with notice of its legal duties and privacy practices with respect to protected health information, and to notify affected individuals following a breach of unsecured protected health information.

Corexa Pharmacy LLC is required to abide by the terms of this Notice. We reserve the right to change the terms of this Notice and to make the new notice provisions effective for all protected health information that we maintain. Any such revised Notice will be made available upon request.

SectionD:ContactingUs

  1. AdditionalQuestions,SubmittingRequestsorComplaints
    1. If you have questions about this Notice or how Corexa Pharmacy LLC uses and discloses your protected health information please contact our Privacy Officer below.
    2. You may obtain forms needed for request submission from our pharmacy or from our Privacy Officer.
    3. If you believe your privacy rights have been violated you may file a complaint with our Privacy Officer or with the Secretary of Health and Human Services. You will not be retaliated against for filing a complaint.
  2. PrivacyOfficer

NikulPanchal,RPh,BCNPPIC/Privacy Officer Corexa Pharmacy LLC

354 Eagles Landing Drive Lakeland, FL 33810

Toll-Free: 844-277-4276

Phone: 727-896-0001

  1. Secretary of Health and Human Services, Office for Civil Rights
    1. For online complaint forms and contact information for the Regional OCR offices: https://www.hhs.gov/ocr/privacy/index.html
    2. Email: OCRComplaint@hhs.gov for assistance or questions about complaint forms

SectionE:StateSpecificRequirements

Version #: 5704033-PAAS-2018-3.0

Effective Date: This Notice of Privacy Practices is effective as of January 1, 2026.

PartII:WebsitePrivacyPractices

EffectiveOctober7,2026

Part II explains how Corexa Pharmacy collects, uses, shares, and protects information when you visit www.corexarx.com, place an order online, create an account, or communicate with us by email or text message (together, the “Website”). Part II should be read together with our Terms and Conditions of Use and Sale. By using the Website, you acknowledge this Privacy Policy.

Corexa Pharmacy LLC | Privacy Policy | Last Updated 10/07/2026                            Page 5 of 8

1.InformationWeCollect

354 Eagles Landing Drive | Lakeland, FL 33810 NCPDP: 5704033 | Effective: 10/07/2026

  1. Information You Provide.When you use the Website, you may provide your name, date of birth, mailing and shipping address, email address, phone number, account login information, order details, and communications with us. When you place an order for pharmacy products, you may also provide prescription, prescriber, allergy, medication, health, and insurance information, which is protected health information handled under Part I of this Privacy Policy.
  2. Payment Information. Payment card information is entered into and processed by our PCI DSS-compliant

third-party payment gateway. Corexa Pharmacy does not store full payment card numbers on its systems. We may retain limited payment details, such as card type and last four digits, for order records and customer service.

  1. Information Collected Automatically. When you visit the Website, we and our service providers may automatically collect technical information such as IP address, browser and device type, operating system, referring web pages, pages viewed, and dates and times of visits, using cookies and similar technologies (see Section 5).
  2. Information from Others. We may receive information about you from your prescribers, other pharmacies (for prescription transfers), your insurance plan, our payment processor and shipping carriers, and affiliated companies that refer you to us at your request, such as Tollo Care, LLC d/b/a Health Lives Here (HLH).
  1. HowWeUseInformation

We use the information we collect to:

  1. Process, verify, fill, ship, and track your orders and prescriptions;
  2. Create and manage your account and provide customer and pharmacist support;
  3. Process payments, refunds, and billing disputes, and prevent fraud;
  4. Send transactional communications, such as order confirmations, refill reminders, and shipping notifications;
  5. Operate, secure, maintain, and improve the Website;
  6. Comply with legal and regulatory obligations, including pharmacy, controlled substance, and recordkeeping laws; and
  7. Send marketing communications only where permitted by law and, where required, with your consent or HIPAA authorization.
  1. HowWeShareInformation

WEDONOTSELLYOURPERSONALINFORMATIONORYOURPROTECTEDHEALTHINFORMATION.

We share information only as needed to provide our services and as permitted by law, including with:

  1. Service providers that support our operations, such as payment processors, shipping carriers, website hosting, pharmacy software, and customer communication providers, under contracts requiring them to protect your information (including HIPAA business associate agreements where required);
  2. Your prescribers, other pharmacies, and health plans, for treatment and payment purposes as described in Part I;
  3. Affiliated companies under common ownership with Corexa Pharmacy, only as permitted by HIPAA and other applicable law;

Corexa Pharmacy LLC | Privacy Policy | Last Updated 10/07/2026                            Page 6 of 8

354 Eagles Landing Drive | Lakeland, FL 33810 NCPDP: 5704033 | Effective: 10/07/2026

3.1MobileInformation.No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except service providers that deliver our messages on our behalf.

  1. TextMessage(SMS)Communications

If you provide your mobile number and consent, Corexa Pharmacy may send you text messages about your orders, prescriptions, refill reminders, shipping updates, and account. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe at any time, or reply HELP for help, or call 844-277-4276. Consent to receive text messages is not a condition of purchase. Mobile carriers are not liable for delayed or undelivered messages.

  1. Cookies and Tracking Technologies
    1. Cookies. The Website uses cookies and similar technologies that are necessary for the Website to function (such as the shopping cart and checkout) and, with your consent where required, for analytics and Website performance. You can accept, reject, or change your cookie preferences at any time using the “Manage consent” link on the Website, and you can also control cookies through your browser settings.
    2. Health Information and Tracking.Corexa Pharmacy does not use tracking technologies to disclose protected health information to third parties for advertising or any other purpose not permitted by HIPAA. We do not use third-party tracking technologies on pages where you log in, enter prescription or health information, or check out, except as necessary to provide the service and under appropriate agreements.
    3. Do Not Track and Global Privacy Control. We honor Global Privacy Control (GPC) browser signals as a request to opt out of non-essential cookies where required by applicable law.
  1. Data Security

We use administrative, technical, and physical safeguards designed to protect your information, including encrypted (SSL/TLS) connections, access controls, and workforce training. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please protect your account password and notify us immediately at support@corexarx.com if you suspect unauthorized access. We will notify affected individuals of breaches as required by law.

  1. DataRetention

We retain information for as long as needed to provide our services and to meet legal, regulatory, accounting, and recordkeeping requirements, including pharmacy record retention requirements under federal and state law.

When information is no longer needed, we dispose of it securely.

  1. YourChoicesandRights
    • Account information: you may review and update your account information by logging in or contacting us.
    • Marketing emails: use the “unsubscribe” link in any marketing email. You will continue to receive transactional messages about your orders and prescriptions.

Corexa Pharmacy LLC | Privacy Policy | Last Updated 10/07/2026                            Page 7 of 8

354 Eagles Landing Drive | Lakeland, FL 33810 NCPDP: 5704033 | Effective: 10/07/2026

8.1 State Privacy Rights.Depending on where you live, you may have additional rights under state law regarding personal information that is not protected health information, such as the right to know, access, correct, or delete your information, and to opt out of targeted advertising or sales. Certain states, including Washington, Nevada, and Connecticut, provide specific rights regarding consumer health data. To exercise any of these rights, contact us at support@corexarx.com or 844-277-4276. We will verify your request and respond within the time required by applicable law, and we will not discriminate against you for exercising your rights. You may appeal a denial of your request by replying to our response.

  1. Children’s Privacy

The Website is not directed to children under the age of 13, and we do not knowingly collect personal information online from children under 13. Orders for minor patients must be placed by a parent or legal guardian. If you believe a child has provided us with personal information online, contact us and we will delete it as appropriate.

  1. Third-PartyWebsites

The Website may link to third-party websites and services, such as the HLH application, payment providers, carriers, and manufacturer or pricing-program websites. This Policy does not apply to those websites, and we are not responsible for their privacy practices. Please review their privacy policies.

  1. UnitedStatesOnly

The Website is intended for use by individuals located in the United States. Information is processed and stored in the United States.

  1. ChangestoThisPolicy

We may update this Privacy Policy from time to time. Changes take effect when posted on the Website with a revised “Last Updated” date. If we make material changes, we will provide notice on the Website or by other appropriate means.

13. Contact Us

If you have questions about this Policy or our privacy practices, or want to exercise your privacy rights, please contact our Privacy Officer:

Corexa Pharmacy, LLC – Privacy Officer

Nikul Panchal, RPh, BCNP, PIC/Privacy Officer 354 Eagles Landing Drive, Lakeland, FL 33810

Toll-Free: 844-277-4276 | Phone: 727-896-0001 | Fax: 727-896-0002

Email: support@corexarx.com | Website: www.corexarx.com