California Privacy Notice

Effective: July 27, 2026

This California Privacy Notice supplements the information contained in our Privacy Policy and applies solely to California residents. This notice is provided pursuant to the California Consumer Privacy Act of 2018 ("CCPA") as amended by the California Privacy Rights Act ("CPRA").

Categories of Personal Information We Collect

We have collected the following categories of personal information from consumers within the last twelve (12) months:

A. Identifiers

Names, postal addresses, email addresses, phone numbers, and identification numbers.

B. Financial Information

Bank account numbers, credit card numbers, debit card numbers, and other financial information.

C. Health and Biometric Data

Medical conditions, blood and urine samples, vital signs, biometric information, and health-related data necessary for the provision of services.

D. Internet or Network Activity

IP addresses, cookies, website interaction data, browsing history, chat transcripts, and other electronic network activity information.

E. Professional or Employment Information

Job titles, salary information, employer details, and other professional data.

F. Protected Classifications

Age, gender, disability status, and other characteristics of protected classifications under California or federal law.

G. Sensory Data

Audio, electronic, visual, or similar information collected during telehealth consultations.

H. Inferences

Inferences drawn from the above categories to create a profile reflecting preferences, characteristics, and behavior.

Note: We do NOT collect precise geolocation data or education records under FERPA.

Personal Information Does Not Include

Information lawfully made available from federal, state, or local government records ("publicly available information")
De-identified or aggregate consumer information, as those terms are defined in the CCPA
Information excluded from the CCPA's scope, including health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data, and personal information covered by certain sector-specific privacy laws such as the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994

Sensitive Personal Information

Sensitive personal information means information that reveals:

Your Social Security, driver's license, or passport number
Your account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to the account
Your precise geolocation
Your racial or ethnic origin, religious or philosophical beliefs, or union membership
The contents of your mail, email, and text messages, unless Modern Metabolic Medicine is the intended recipient of the communication
Your genetic data

Unless the information is publicly available, sensitive personal information also includes the processing of biometric information for the purpose of uniquely identifying you, and personal information collected and analyzed concerning your health or concerning your sex life or sexual orientation.

We use your sensitive personal information to perform the services you reasonably expect. We may also use it to ensure the security and integrity of your personal information, to perform services on behalf of our business, and to undertake activities to improve or enhance our services.

Sources of Personal Information

We collect personal information from:

Directly from you when you create an account, complete intake forms, or interact with our platform
Indirectly through your use of the platform (e.g., cookies, analytics)
Third-party service providers, including medical providers and payment processors

Categories of Third Parties We Disclose Information To

In the preceding twelve (12) months, we have disclosed personal information for a business purpose to the following categories of third parties:

Licensed healthcare providers and affiliated medical groups treating you
Pharmacies dispensing and shipping your medication
Service providers performing professional or technical support functions on our behalf
Payment processors and financing providers
Analytics providers for our platform
Legal, regulatory, and law enforcement bodies where required by law

How We Use Personal Information

We use the personal information we collect for the following purposes:

To fulfill our service contracts and provide requested services
To improve platform functionality and user experience
To conduct research and analytics
To respond to legal requests and prevent harm
To provide customer support
To communicate about services and updates

Your Rights Under the CCPA/CPRA

As a California resident, you have the following rights:

Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you
Right to Access: You have the right to request access to the personal information we hold about you
Right to Correction: You have the right to request correction of inaccurate personal information
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions
Right to Limit Use of Sensitive Data: You have the right to limit the use and disclosure of your sensitive personal information
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

Access and Data Portability Requests

Once we receive and verify your request, we will disclose to you any of the following, in accordance with your request:

The categories of personal information we collected about you
The categories of sources for the personal information we collected about you
Our business or commercial purpose for collecting that personal information
The categories of third parties with whom we share that personal information
The specific pieces of personal information we have collected about you (a data portability request), if you specifically request it
If we have sold or disclosed your personal information for a business purpose, two separate lists identifying, for sales, the categories of personal information each category of recipient purchased, and, for disclosures for a business purpose, the categories each category of recipient obtained

Correction Requests

After we receive and verify your request, we will evaluate the requested correction against information we receive from other sources, and we will tell you what actions we took in response to your request.

Exceptions to Deletion

We (or our service providers) do not have to comply with a deletion request for personal information we maintain in order to:

Complete the transaction for which we collected the personal information, provide a good or service you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities
Debug products to identify and repair errors that impair existing intended functionality
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.)
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when deletion may render impossible or seriously impair the research, if you previously provided informed consent
Enable solely internal uses reasonably aligned with consumer expectations based on your relationship with us
Comply with a legal obligation
Make other internal and lawful uses of the information that are compatible with the context in which you provided it

Sale of Personal Information

We do not sell your personal information to anyone.

How to Exercise Your Rights

To submit a request, please contact us using one of the following methods:

Phone: (469) 459-3723
Email: hello@snagrx.com
Website: snagrx.com

We must verify your identity or authority to make the request and confirm that the personal information relates to you. To do so, we collect your name, email address, and phone number to verify your identity. We also may contact you by email or telephone to verify your identity and ask additional questions so that we can match your identity with the data we hold about you. In some instances, we may ask you to declare under penalty of perjury that you are the consumer whose personal information is the subject of the request.

Authorized Agents

You also may designate an authorized agent to make a request for you. To use an authorized agent, you or your authorized agent must:

Submit proof that the authorized agent is registered with the California Secretary of State and that you have authorized them to act on your behalf,
Submit evidence that you have provided the authorized agent with power of attorney pursuant to the California Probate Code, or
Provide the authorized agent written and signed permission to act on your behalf, verify your identity with us, and directly confirm with us that you have provided the authorized agent permission to submit the request.

We may deny a request from an authorized agent who does not submit sufficient proof to act on your behalf.

Only you, or a person registered with the California Secretary of State whom you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may make a request for access or data portability no more than twice within a 12-month period. Your request must give us enough information to reasonably verify your identity or your authority to make the request, and enough detail for us to understand, evaluate, and respond to it. Making a request does not require you to create an account with us, and any personal information you provide will be used only to verify the requester's identity or authority.

Response Timing and Format

We will respond to verifiable consumer requests within 45 days. The response period may be extended by an additional 45 days (up to 90 days total) when reasonably necessary, and we will notify you in writing of the reason and the extension period. If you have an account with us, we will deliver our written response to that account. If you do not, we will deliver it by mail or electronically, at your option. Any disclosures we provide will cover only the 12-month period preceding our receipt of the request. Our response will also explain the reasons we cannot comply with a request, if that applies. For data portability requests, we will select a format that is readily usable and should allow you to transmit the information from one entity to another without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that a request warrants a fee, we will provide you with a cost estimate and the reason before completing it. We also reserve the right to deny excessive, repetitive, or manifestly unfounded requests.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

Deny you goods or services
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties
Provide you a different level or quality of goods or services
Suggest that you may receive a different price or rate for goods or services, or a different level or quality of goods or services

Changes to This Notice

We reserve the right to amend this notice at our discretion and at any time. When we make changes, we will notify you by email or through a notice on our website.

Additional Disclaimer

SnagRx is a patient management platform that works with independent physicians and practitioners who provide services using the SnagRx platform. SnagRx does not directly provide medical or pharmacy services, and payment does not guarantee the writing or dispensing of a prescription. Medical services are provided by independent providers. The information provided on this website is for informational purposes and is not a substitute for professional medical advice, diagnosis, or treatment. If you have questions or concerns about your health, please talk to your doctor. This site is an advertisement for services and not for any specific medication.

Contact Information

Modern Metabolic Medicine, Inc.
1811 Silverside Road, Suite 260
Wilmington, New Castle County, Delaware 19180
Email: hello@snagrx.com
Phone: (469) 459-3723