Consumer health data privacy Policy

Last Revised: August 28, 2026
Consumer Health Data Privacy Policy
This Consumer Health Data Privacy Policy explains how Rezera and its affiliates collect, use, share, and protect “consumer health data” as defined under applicable U.S. state laws (including the Washington My Health My Data Act), and the privacy rights and choices you have, in connection with our websites, online services and other online interactions and communications (collectively, our “Services”). In this Consumer Health Data Privacy Policy, “Rezera,” “we,” “us” and “our” refer to Rezera, Inc. and its affiliates, including NodThera Limited.

This Consumer Health Data Privacy Policy supplements our Privacy Policy. To the extent of any conflict with respect to consumer health data, this Consumer Health Data Privacy Policy controls.

This Consumer Health Data Privacy Policy does not apply to information collected in connection with clinical trials or other research conducted in accordance with applicable research protections (such as the federal Common Rule, FDA human subject protection regulations, or good clinical practice guidelines), to information governed by the Health Insurance Portability and Accountability Act (HIPAA), or to other information exempt from applicable consumer health data laws. The handling of information collected in connection with our clinical trials, research and adverse event reporting is described in the separate privacy notices provided at the time of collection.

1. Categories of Consumer Health Data We Collect
We collect the following categories of consumer health data:

• Information about your health conditions, treatment, diseases, or diagnosis. For instance, if you contact Rezera with questions about our programs, product candidates, or clinical trials, you may choose to provide health-related information about yourself or others.
• Health and safety information you report to us, such as information about symptoms, adverse events, or your experience with a product, where not collected in an exempt clinical trial or regulated safety-reporting context.
• Health information we obtain from other sources, such as healthcare organizations (including healthcare providers and industry and patient groups/associations), research organizations (such as clinical trial investigators or contract researchers), and data providers, in each case to the extent it constitutes consumer health data.
• Inferences drawn from personal information we collect that constitute consumer health data, such as inferences about your health interests or conditions based on the pages of our website that you visit (for example, pages about specific disease areas or clinical trials).

2. Categories of Sources of Consumer Health Data
We collect consumer health data:

• Directly from you, such as when you contact us or otherwise communicate with us;
• From third-party sources, such as healthcare organizations, research organizations, and data providers; and
• Automatically, through cookies and similar technologies that log your interactions with our website, as described in the “Automatic data collection” section of our Privacy Policy.

3. Purposes For Which We Collect And Use Consumer Health Data
We collect and use consumer health data as provided below:

• To provide you with the services and information you have requested. This may include using consumer health data to communicate with you, including to respond to your questions, requests, and feedback.
• For research and development. We may use consumer health data for research and development purposes, including to analyze and improve our Services and our business. As part of these activities, we may create aggregated, de-identified, or other anonymous data from consumer health data we collect.
• For safety and regulatory purposes. We may use consumer health data to monitor, track, and report adverse events and to comply with our pharmacovigilance and other safety-reporting obligations.
• For compliance and protection. We may use consumer health data to comply with legal obligations, defend against legal claims or disputes, protect the security and integrity of our Services, and identify and investigate fraudulent, harmful, unauthorized, unethical, or illegal activity.
• At your direction or with your consent. We may also use consumer health data you provide to us for other purposes as disclosed at the time you provide your information or otherwise with your consent.

We do not use consumer health data for marketing or advertising purposes, and we do not sell consumer health data.

4. With Whom We Share Consumer Health Data
We may share consumer health data with:

• Affiliates. Within the Rezera corporate group, for purposes consistent with this Consumer Health Data Privacy Policy (specifically, NodThera Limited).
• Service providers. Companies and individuals that provide services on our behalf or help us operate our Services or our business (such as hosting, information technology, customer support, and email delivery services, and website analytics services).
• Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.
• Authorities and others. Law enforcement, government and regulatory authorities (including health and medicines regulators in connection with safety reporting), and private parties, as we believe in good faith to be necessary or appropriate for the safety, compliance, and protection purposes described above.
• Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Rezera or our affiliates (including, in connection with a bankruptcy or similar proceedings).

We do not share consumer health data with advertising partners, data brokers, or other third parties for marketing or advertising purposes. Where required by applicable law, we will obtain your consent before collecting or sharing consumer health data other than as necessary to provide services you have requested, and we will not sell consumer health data without your valid authorization.

5. Your Rights
Depending on your location, you may request the following in relation to your consumer health data:

• Confirm whether we are collecting, sharing, or selling your consumer health data, and access your consumer health data, including a list of the third parties and affiliates with whom we have shared it and their contact information;
• Delete your consumer health data; and
• Withdraw your consent to our collection or sharing of your consumer health data.

How to submit requests. To exercise these rights, please contact us at [email protected]. We will not discriminate against you for exercising your rights, and we may need to verify your identity before acting on your request.

Appeal. If we deny your request, you may appeal our decision by emailing us at [email protected] with the subject line “Appeal.” If your appeal is unsuccessful, you can raise a concern or lodge a complaint with competent regulators, including the Attorney General of your state (for Washington residents, at www.atg.wa.gov/file-complaint).

6. Changes to This Consumer Health Data Privacy Policy
We reserve the right to modify this Consumer Health Data Privacy Policy at any time. If we make material changes, we will notify you by updating the date of this Consumer Health Data Privacy Policy and posting it on our websites and online services. If required by law, we will also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via email or another manner through our Services. Any modifications will be effective upon our posting the modified version (or as otherwise indicated at the time of posting).