Legal

Notice of Privacy Practices

Pepcision, Inc.

Effective Date: July 8, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Important: Pepcision is not a Covered Entity under the Health Insurance Portability and Accountability Act (HIPAA) or its implementing regulations. We are issuing this Notice of Privacy Practices voluntarily to provide transparency about the personal information and limited health-related information we collect and handle through our Platform (www.Pepcision.com and associated applications).

Pepcision, LLC. (“Pepcision,” “we,” “us,” or “our”) operates a technology platform that allows consumers to access health and wellness products and facilitates connections to independent telehealth services and prescription fulfillment.

The independent telehealth services provider is Arora Health and Aesthetics HUB, P.A. (a Florida corporation); Arora Health of CA, PC; Arora Health of NJ, PC; Arora Health of NY, PC; and Arora Health of KS, PC; each entity, respectively, a Florida, California, New Jersey, New York, and Kansas professional associations (collectively “Arora”).

Clinical and treatment-related Protected Health Information (PHI) — including medical records, diagnoses, prescriptions, and information used for your care — is created, maintained, and used by our independent telehealth partner Arora and its licensed healthcare providers, as well as licensed pharmacies that are available through this platform.

Arora’s handling of your PHI is governed exclusively by Arora’s own Notice of Privacy Practices, which is provided to you during the telehealth process or available upon request from Arora.

Prescription fulfillment and dispensing is performed by independent licensed 503A compounding pharmacies (each “the Pharmacy”). The Pharmacy’s use and disclosure of your information is governed by the Pharmacy’s own Notice of Privacy Practices.

Pepcision’s role is limited to operating the Platform, facilitating access to Arora, coordinating certain administrative functions, and processing orders for wellness products. Any limited information Pepcision receives or transmits is handled in accordance with our agreements with Arora and the Pharmacy, applicable law, and this Notice.

Information Covered by This Notice

This Notice describes our practices with respect to:

Personal information you provide when creating an account, browsing, or purchasing wellness products.
Limited health-related information you submit through the Platform (e.g., wellness goals, symptoms, or intake information used to request telehealth consultations).
Information necessary to coordinate services between you, Arora, and the Pharmacy.

It does not describe how Arora or the Pharmacy use or disclose your clinical or prescription information. Please review their respective Notices of Privacy Practices for those details.

How We May Use and Disclose Information

We may use and disclose the information we collect for the following purposes (with examples):

To Provide and Improve Our Platform and Services

We use your information to operate the Platform, process orders, manage your account, provide customer support, and improve our services.

Example: We use your contact and order information to ship wellness products to you.

To Facilitate Access to Telehealth and Prescription Services

We may use limited information to connect you with Arora for telehealth consultations and to transmit necessary details to the Pharmacy for prescription fulfillment when a prescription is issued.

Example: We may share basic account and order details with Arora so they can schedule your consultation and with the Pharmacy so they can fill and ship your prescription.

For Payment and Transaction Processing

We process payments for products and services through secure third-party processors.

For Legal and Safety Purposes

We may use or disclose information as required or permitted by law, to respond to legal requests, protect rights and safety, prevent fraud, or comply with regulatory obligations.

With Service Providers

We share information with vendors who assist us (e.g., hosting, analytics, shipping, payment processing). These parties are contractually required to protect the information.

Business Transfers

In the event of a merger, acquisition, or sale of assets, information may be transferred as part of the transaction.

Other Uses and Disclosures

Other uses and disclosures not described in this Notice will be made only with your written authorization (where required) or as otherwise permitted or required by applicable law. You may revoke an authorization at any time, subject to certain limitations.

We do not sell personal information for monetary consideration in the traditional sense. Any sharing for targeted advertising or similar purposes (if applicable) will be done in accordance with applicable consumer privacy laws and with appropriate notices or opt-out mechanisms.

Redisclosure: Information disclosed pursuant to this Notice may be subject to redisclosure by the recipient and may no longer be protected by this Notice or by HIPAA (to the extent it applied).

Your Rights Regarding Your Information

You have the following rights with respect to the information Pepcision maintains. Note that many rights related to clinical medical records must be exercised directly with Arora or the Pharmacy under their respective Notices of Privacy Practices.

Right to Request Restrictions: You may request restrictions on certain uses and disclosures. We are not required to agree to all requests.
Right to Confidential Communications: You may request that we communicate with you in a specific manner or at a specific location.
Right to Inspect and Copy: You may request to inspect and obtain a copy of the information we maintain about you (subject to certain exceptions and fees, if applicable).
Right to Amend: You may request that we amend information you believe is incorrect or incomplete.
Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your information.
Right to a Paper Copy of This Notice: You may request a paper copy of this Notice at any time.
Right to Be Notified of a Breach: In the event of a breach of unsecured information that we maintain, we will notify affected individuals as required by applicable law.

To exercise any of these rights, please contact us using the information below. For rights related to clinical records held by Arora or the Pharmacy, please contact them directly.

Our Duties

Although Pepcision is not a Covered Entity under HIPAA, we are committed to protecting the privacy and security of the information entrusted to us. We will:

Maintain appropriate safeguards for the information we collect.
Abide by the terms of this Notice that are currently in effect.
Provide this Notice upon request and make it available on our Platform.

We reserve the right to change the terms of this Notice at any time. Any changes will apply to all information we maintain, including information created or received before the change. We will post the revised Notice on our Platform with a new effective date and make it available upon request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services (HHS). You will not be retaliated against for filing a complaint.

To file a complaint with Pepcision, contact us using the information below.

Pepcision, LLC
18117 Biscayne Blvd, 60258
Miami, FL 33160
www.Pepcision.com
Email: privacy@Pepcision.comTo file a complaint with HHS, visit https://www.hhs.gov/ocr or call 1-800-368-1019.

To file a complaint with HHS, visit https://www.hhs.gov/ocr or call 1-800-368-1019.

Contact for Further Information

For questions about this Notice or our privacy practices, or to exercise your rights, please contact:

Pepcision, LLC
18117 Biscayne Blvd, 60258
Miami, FL 33160
www.Pepcision.com
Email: privacy@Pepcision.com