Sage Matters LLC

Online Privacy Policy

Last Updated: June 22, 2026

1. Please Read Carefully

This Online Privacy Policy describes the information that Sage Matters LLC (“we” or “Company”) collects about you though our website(s), mobile application, and any other services we provide (collectively, the “Services”), how we use and share that information, and the privacy choices we offer. This policy applies to information we collect when you access or use our website(s) and mobile application (collectively, the “Platform”), when you use our Services or when you otherwise interact with us.

2. Changes to this Online Privacy Policy

We may change this Online Privacy Policy from time to time. If we make changes, we will notify you by posting the updated policy on our Platform and revising the “Last Updated” date above. We encourage you to review the Online Privacy Policy whenever you use our Services to stay informed about our information practices and about ways you can help protect your privacy.

3. Confidentiality of Health Information

Company understands that information about your health is personal. We are committed to protecting your privacy and handling your information in accordance with applicable privacy and security laws, including HIPAA and HITECH where applicable. When we support healthcare providers, telehealth partners, pharmacies, laboratories, payment processors, technology vendors, or other service providers in connection with the Services, we use appropriate contractual, administrative, technical, and physical safeguards designed to protect your information.

Company does not sell protected health information. Company does not knowingly use protected health information submitted through medical intake forms, patient portal communications, or clinical workflows for targeted advertising.

Set forth below is Company’s Notice of Privacy Practices.

4. Collection of Information

4.1. Information You Provide

We collect information you provide, such as when you email us, sign up through our Platform, or submit information through our Platform. We may collect, but are not limited to collecting, the following information: your name, gender, email address, mailing address, phone number, date of birth, payment and bank information provided.

4.2. Children

The Services are not intended for individuals under 18 years of age. Company does not knowingly collect or maintain personally identifiable information from persons under 18 years of age. If Company learns that personally identifiable information from a person under 18 years of age has been collected, Company will take appropriate steps to delete this information. To make such a request, please contact us at [email protected].

4.3. Information We Collect from Your Use of the Services

We collect information about you when you use our Platform, including, but not limited to the following:

• Account Information. When you register with us using the Platform to create an account and become a registered user, you will need to provide us with certain personally identifiable information to complete the registration, including information that can be used to contact or identify you and payment or other billing information in some cases.
• Device Information. We may automatically collect certain information about the computer or devices (including mobile devices) you use to access the Services. For example, we may collect and analyze information such as (a) IP addresses, geolocation information (as described in the next section below), unique device identifiers and other information about your mobile phone or other mobile device(s), browser types, browser language, operating system, the state or country from which you accessed the Services; and (b) information related to the ways in which you interact with the Services, such as: referring and exit pages and URLs, platform type, the number of clicks, domain names, landing pages, pages and content viewed and the order of those pages, the amount of time spent on particular pages, the date and time you used the Services, the frequency of your use of the Services, error logs, and other similar information. As described further below, we may use third-party analytics providers and technologies, including cookies and similar tools, to assist in collecting this information.
• Location Information. We may collect general location information, such as state, region, zip code, or IP-based location, to help determine service availability, comply with applicable law, support security and fraud prevention, and improve the Services. We do not use precise location information for clinical decision-making unless you provide that information as part of the Services or it is otherwise necessary and appropriate for the Services.
• Cookies and Other Electronic Technologies. We may use the tools outlined below in order to better understand users. As we adopt additional technologies, we may also gather additional information through other methods.
  • Cookies: “Cookies” are small computer files transferred to your computing device that contain information such as user ID, user preferences, lists of pages visited and activities conducted while using the Services. We use Cookies to help us improve or tailor the Services by tracking your navigation habits, storing your authentication status so you do not have to re-enter your credentials each time you use the Services, customizing your experience with the Services, and for analytics and fraud prevention.
    
    We may use cookies and similar technologies on public website pages for basic site functionality, security, analytics, and, where appropriate, general marketing measurement. We do not knowingly use protected health information, medical intake responses, patient portal activity, prescription information, or clinical communications for targeted advertising. If we use advertising or marketing pixels, they should be limited to general public website pages and should not be placed on secure patient intake, patient portal, checkout, or clinical communication pages unless permitted by applicable law and configured with appropriate safeguards.
    
    For more information on cookies, visit https://www.allaboutcookies.org.
  • Web Beacons: “Web Beacons” (a.k.a. clear GIFs or pixel tags) are tiny graphic image files imbedded in a web page or email that may be used to collect anonymous information about your use of our Services, the websites of selected advertisers, and the emails, special promotions or newsletters that we send you. The information collected by Web Beacons allows us to analyze how many people are using the Services, using the selected advertisers’ websites or opening our emails, and for what purpose, and also allows us to enhance our interest-based advertising.
  • Platform Analytics. We may use third-party analytics services to understand general use of our public website, improve navigation, identify errors, and make the Platform easier to use. We do not intentionally configure analytics tools to collect protected health information, medical intake responses, patient portal messages, prescription information, payment card information, or the text you enter into clinical forms. Analytics tools should not be used on secure patient intake, patient portal, checkout, or messaging pages unless they are configured in a manner consistent with applicable privacy and security requirements.
  • Mobile Device Identifiers: Mobile device identifiers are data stored on your mobile device that may track mobile device and data and activities occurring on and through it, as well as the applications installed on it. Mobile device identifiers enable collection of personal information (such as media access control, address and location) and traffic data. Mobile device identifiers help Company learn more about our users’ demographics and internet behaviors.

4.4. Information from Third Parties

We may obtain additional information about you from third parties such as marketers, partners, researchers, and others. We may combine information that we collect from you with information about you that we obtain from such third parties and information derived from any other subscription, product, or service we provide.

4.5. Aggregate or De-identified Data

We may aggregate and/or de-identify information collected by the Services or via other means so that the information is not intended to identify you. Our use and disclosure of aggregated and/or de-identified information is not subject to any restrictions under this Online Privacy Policy, and we may disclose it to others without limitation for any purpose, in accordance with applicable laws and regulations.

5. Use of Information

We use the information that we collect for the following purposes:

• To send you administrative, transactional, service-related, and care-coordination communications.
• To send you marketing communications about Sage Matters products or services, where permitted by law and subject to your communication preferences.
• To understand general website usage, improve our public website, maintain security, prevent fraud, and improve the Services.
• To coordinate with healthcare providers, telehealth partners, pharmacies, laboratories, payment processors, technology vendors, and other service providers as reasonably necessary to provide the Services.
• To comply with applicable laws, regulations, legal processes, and professional obligations.

We may use third-party service providers to process and store personal information in the United States and other countries.

6. Sharing of Information

We may share personal information about you as follows:

• With healthcare providers, telehealth partners, pharmacies, laboratories, payment processors, technology vendors, customer support vendors, and other service providers as reasonably necessary to provide, maintain, secure, and improve the Services.
• With professional entities, clinicians, pharmacies, laboratories, and other healthcare-related partners involved in your care, prescription fulfillment, diagnostic testing, payment, or care coordination.
• With vendors and service providers who perform services on our behalf, subject to appropriate contractual restrictions and safeguards where required.
• In connection with, or during negotiation of, a merger, sale of Company assets, financing, acquisition, divestiture, or similar business transaction, subject to appropriate confidentiality protections.
• If we believe disclosure is reasonably necessary to comply with applicable law, regulation, legal process, governmental request, court order, subpoena, or professional obligation.
• To protect the rights, safety, property, or security of Company, our users, our service providers, or the public.
• With your consent or authorization.

We do not sell protected health information. We do not knowingly share protected health information submitted through medical intake forms, patient portal communications, or clinical workflows for third-party targeted advertising.

7. Communications and Marketing Preferences

When you provide contact information, we may use it to send you service-related, administrative, transactional, care-coordination, and account-related communications. Where permitted by law, we may also send you marketing communications about Sage Matters products or services. You may opt out of marketing communications at any time by using the unsubscribe link in an email or by contacting us at [email protected].

Opting out of marketing communications will not prevent us from sending you important administrative, transactional, legal, security, account, or care-related communications.

8. Social Media and Third Party Platforms

Certain sections or functionalities on our Services may permit you to share information on third party social media sites or platforms such as Facebook, Instagram, LinkedIn, Twitter, or other similar sites (collectively, “Social Media Sites”). Company does not own or control such Social Media Sites, and posting your information on Social Media Sites is subject to the third party’s Online Privacy Policy and other legal terms, which may not provide privacy protections with which you agree. Company is not responsible for any act or omission of any Social Media Platform, nor are we responsible for the consequences of your choosing to share your information on Social Media Sites.

9. Security

We take reasonable measures, including administrative, technical, and physical safeguards, to help protect personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, Company cannot ensure or warrant the security of any information you transmit to us or from our online products or services, and you do so at your own risk.

10. Your Privacy Choices

10.1. How You Can Access and Update Your Information

You may update or correct information about yourself at any time or by emailing us at [email protected].

10.2. Cookies

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject cookies; however, our Services may not function properly if you do so.

10.3. Options for Opting out of Cookies and Mobile Device Identifiers

If you are interested in more information about interest-based advertising and how you can generally control cookies from being put on your computer to deliver tailored advertising, you may visit the Network Advertising Initiative’s Consumer Opt-Out link, the Digital Advertising Alliance’s Consumer Opt-Out link or TRUSTe’s Advertising Choices Page to opt-out of receiving tailored advertising from companies that participate in those programs.

Please note that even after opting out of interest-based advertising, you may still see Company’s advertisements that are not interest-based (i.e., not targeted toward you). Also, opting out does not mean that Company is no longer using its tracking tools—Company still may collect information about your use of the Services even after you have opted out of interest-based advertisements and may still serve advertisements to you via the Services based on information it collects via the Services.

10.4. How Company Responds to Browser “Do Not Track” Signals

We are committed to providing you with meaningful choices about the information collected on our Platform for third-party purposes, and that is why we provide above the Network Advertising Initiative’s “Consumer Opt-out” link, Digital Advertising Alliance’s Consumer Opt-Out Link, and TRUSTe’s Advertising Choices page. However, we do not recognize or respond to browser-initiated Do Not Track signals, as the Internet industry is currently still working on Do Not Track standards, implementations and solutions. For more information about DNT signals, visit https://allaboutdnt.com.

10.5. Links to Other Websites

Our Services may contain links to other websites and those websites may not follow the same privacy practices as Company. We are not responsible for the privacy practices of third party websites. We encourage you to read the privacy policies of such third parties to learn more about their privacy practices.

10.6. No Rights of Third Parties

This Online Privacy Policy does not create rights enforceable by third parties.

10.7. How to Contact Us

Please contact us with any questions or concerns regarding this Online Privacy Policy at [email protected].

11. Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Company is dedicated to maintaining the privacy of your protected health information (“PHI”). PHI is information about you that may be used to identify you (such as your name, social security number or address), and that relates to (a) your past, present or future physical or mental health or condition, (b) the provision of healthcare to you, or (c) your past, present, or future payment for the provision of healthcare. In conducting its business, Company may receive and create records containing your PHI.

This Notice is in effect from the date noted above until Company replaces it. Company reserves the right to change the terms of this Notice at any time, as long as the changes are in compliance with applicable law. If Company changes the terms of this Notice, the new terms will apply to all PHI that it maintains, including PHI that was created or received before such changes were made. If Company changes this Notice, it will post the new Notice on its Platform and will make the new Notice available upon request.

12.1 Uses and Disclosures of PHI

Company may use and disclose your PHI in the following ways:

• Treatment, Payment and Healthcare Operations. Company is permitted to use and disclose your PHI for purposes of (a) treatment, (b) payment and (c) healthcare operations. For example:
  • Treatment. Company may disclose your PHI to a physician in connection with the provision of treatment to you.
  • Payment. Company may use and disclose your PHI as reasonably necessary to support payment-related activities, including billing, payment processing, refunds, chargebacks, membership administration, prescription fulfillment, laboratory testing, and related administrative support. Sage Matters does not represent that its Services will be covered by insurance unless expressly stated.
  • Healthcare Operations. Company may use and disclose your PHI in connection with its healthcare operations, such as providing customer services and conducting quality review assessments. Company may engage third parties to provide various services for Company. If any such third party must have access to your PHI in order to perform its services, Company will require that third party to enter an agreement that binds the third party to the use and disclosure restrictions outlined in this Notice.
• Authorization. Company is permitted to use and disclose your PHI upon your written authorization, to the extent such use or disclosure is consistent with your authorization. You may revoke any such authorization at any time.
• As Required by Law. Company may use and disclose your PHI to the extent required by law.
• Special Circumstances. The following categories describe unique circumstances in which Company may use or disclose your PHI:
  • Public Health Activities. Company may disclose your PHI to public health authorities or other governmental authorities for purposes including preventing and controlling disease, reporting child abuse or neglect, reporting domestic violence and reporting to the Food and Drug Administration regarding the quality, safety and effectiveness of a regulated product or activity. Company may, in certain circumstances disclose PHI to persons who have been exposed to a communicable disease or may otherwise be at risk of contracting or spreading a disease or condition.
  • Workers’ Compensation. Company may disclose your PHI as authorized by, and to the extent necessary to comply with, workers’ compensation programs and other similar programs relating to work-related illnesses or injuries.
  • Health Oversight Activities. Company may disclose your PHI to a health oversight agency for authorized activities such as audits, investigations, inspections, licensing and disciplinary actions relating to the healthcare system or government benefit programs.
  • Judicial and Administrative Proceedings. Company may disclose your PHI, in certain circumstances, as permitted by applicable law, in response to an order from a court or administrative agency, or in response to a subpoena or discovery request.
  • Law Enforcement. Company may, under certain circumstances, disclose your PHI to a law enforcement official, such as for purposes of identifying or locating a suspect, fugitive, material witness or missing person.
  • Decedents. Company may, under certain circumstances, disclose PHI to coroners, medical examiners and funeral directors for purposes such as identification, determining the cause of death and fulfilling duties relating to decedents.
  • Organ Procurement. Company may, under certain circumstances, use or disclose PHI for the purposes of organ donation and transplantation.
  • Research. Company may, under certain circumstances, use or disclose PHI that is necessary for research purposes.
  • Threat to Health or Safety. Company may, under certain circumstances, use or disclose PHI if necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
  • Specialized Government Functions. Company, may in certain situations, use and disclose PHI of persons who are, or were, in the Armed Forces for purposes such as ensuring proper execution of a military mission or determining entitlement to benefits. Company may also disclose PHI to federal officials for intelligence and national security purposes.

12.2 Your Rights Regarding Your PHI

You have the following rights regarding the PHI maintained by Company:

• Confidential Communication. You have the right to receive confidential communications of your PHI. You may request that Company communicate with you through alternate means or at an alternate location, and Company will accommodate your reasonable requests. You must submit your request in writing to Company.
• Restrictions. You have the right to request restrictions on certain uses and disclosures of PHI for treatment, payment or healthcare operations. You also have the right to request that Company limits its disclosures of PHI to only certain individuals involved in your care or the payment of your care. You must submit your request in writing to Company. Company is not required to comply with your request. However, if Company agrees to comply with your request, it will be bound by such agreement, except when otherwise required by law or in the event of an emergency.
• Inspection and Copies. You have the right to inspect and copy your PHI. You must submit your request in writing to Company. Company may impose a fee for the costs of copying, mailing, labor and supplies associated with your request. Company may deny your request to inspect and/or copy your PHI in certain limited circumstances. If that occurs, Company will inform you of the reason for the denial, and you may request a review of the denial.
• Amendment. You have a right to request that Company amend your PHI if you believe it is incorrect or incomplete, and you may request an amendment for as long as the information is maintained by Company. You must submit your request in writing to Company and provide a reason to support the requested amendment. Company may, under certain circumstances, deny your request by sending you a written notice of denial. If Company denies your request, you will be permitted to submit a statement of disagreement for inclusion in your records.
• Accounting of Disclosures. You have a right to receive an accounting of all disclosures Company has made of your PHI. However, that right does not include disclosures made for treatment, payment or healthcare operations, disclosures made to you about your treatment, disclosures made pursuant to an authorization, and certain other disclosures. You must submit your request in writing to Company and you must specify the time period involved (which must be for a period of time less than six years from the date of the disclosure). Your first accounting will be free of charge. However, Company may charge you for the costs involved in fulfilling any additional request made within a period of 12 months. Company will inform you of such costs in advance, so that you may withdraw or modify your request to save costs.
• Breach Notification. You have the right to be notified in the event that Company (or a Company Business Associate) discovers a breach of unsecured PHI.
• Paper Copy. You have the right to obtain a paper copy of this Notice from Company at any time upon request. To obtain a paper copy of this notice, please contact Company at [email protected] or by calling +17068136368.
• Complaint. You may complain to Company and to the Secretary of the Department of Health and Human Services if you believe that your privacy rights have been violated. To file a complaint with Company, you must submit a statement in writing to Company at [email protected]. Company will not retaliate against you for filing a complaint.
• Further Information. If you would like more information about your privacy rights, please contact Company at [email protected] or by calling +17068136368 and ask to speak to the Privacy and Security Officer. To the extent you are required to send a written request to Company to exercise any right described in this Notice, you must submit your request to Sage Matters LLC at [email protected], or by mail at 111 Little Redfish Lane, Santa Rosa Beach, Florida 32459.