OPTIMIZE HEALTH PARTNERS, LLC

PRIVACY POLICY

Email, SMS & Marketing Communications

Effective Date: March 23, 2026

Optimize Health Partners, LLC ("OHP," "we," "us," or "our") is committed to protecting the privacy of individuals who interact with our services, including through our website, email communications, and SMS (text message) programs. This Privacy Policy explains how we collect, use, share, and safeguard your personal information in connection with:

• Our email marketing and communications programs managed through Mailchimp (an Intuit company);

• Our SMS/text messaging programs and mobile communications; and

• Our broader healthcare analytics platform, Medicaid services, and business operations.

By providing your contact information, subscribing to our communications, or engaging with OHP, you agree to the practices described in this Privacy Policy. This Policy applies to all communications originating from OHP and is intended to comply with applicable federal and state laws, including the CAN-SPAM Act, the Telephone Consumer Protection Act (TCPA), HIPAA (where applicable), and applicable state privacy statutes.

We collect personal information you voluntarily provide when you:

• Subscribe to our email newsletter or marketing communications;

• Opt in to receive SMS/text messages from OHP;

• Submit contact forms, requests for proposals, or inquiries;

• Register for webinars, events, or demonstrations; or

• Engage with us through business or partnership discussions.

The personal information collected may include: name, job title and organization, business email address, phone number (for SMS), mailing address, Medicaid program affiliation, and communication preferences.

When you interact with our email communications or website, we and our service providers (including Mailchimp) may automatically collect:

• Email open rates, click-through rates, and engagement data;

• Device type, operating system, and email client information;

• IP address and approximate geographic location; and

• Date and time of interactions.

We may receive information from publicly available government databases, state Medicaid program directories, professional association records, and referrals from business partners, solely for the purpose of conducting legitimate B2B outreach relevant to OHP's healthcare analytics and Medicaid services.

OHP uses the personal information we collect for the following purposes:

• Email Communications: To send you email newsletters, product updates, and communications via Mailchimp regarding our healthcare analytics platform, Medicaid analytics services, and related OHP offerings;

• SMS Communications: To send you transactional and promotional text messages via SMS where you have opted in, including program updates, service announcements, and relevant healthcare intelligence insights;

• Business Correspondence: To respond to inquiries, proposals, and business development discussions;

• Personalization: To tailor communications to your role, program type (Medicaid, Medicare, commercial), or geographic market;

• Analytics & Improvement: To analyze engagement metrics and improve the relevance and effectiveness of our communications;

• Legal Compliance: To comply with applicable legal obligations and protect the rights and interests of OHP; and

• List Management: To manage our subscriber lists, process opt-out requests, and honor your communication preferences.

Important Notice Regarding Protected Health Information (PHI): OHP's email and SMS marketing programs do not transmit Protected Health Information (PHI) as defined under HIPAA. Where OHP serves as a Business Associate to covered entities, PHI is handled exclusively through secure, HIPAA-compliant channels governed by a separate Business Associate Agreement (BAA), not through general marketing communications.

We use Mailchimp, operated by The Rocket Science Group LLC (an Intuit company), to manage our email subscriber lists, design and deliver email campaigns, and track email engagement analytics. By subscribing to OHP email communications, your information will be processed by Mailchimp in accordance with their Privacy Policy, available at https://www.intuit.com/privacy/statement/.

Mailchimp processes data on our behalf as a data processor. OHP remains the data controller for your personal information stored in our Mailchimp account. We have ensured that our use of Mailchimp complies with applicable email marketing laws, including the CAN-SPAM Act.

We may also use other third-party service providers for SMS delivery, CRM management, analytics, and business operations. These providers are contractually required to handle your information solely on our behalf and in accordance with applicable privacy laws. We do not sell your personal information to third-party service providers.

OHP will only send SMS messages to individuals who have expressly opted in to receive text communications from us. By providing your mobile phone number and opting in, you consent to receive recurring text messages from OHP. Message frequency may vary. Standard message and data rates may apply depending on your mobile carrier.

You may opt out of OHP SMS communications at any time by replying STOP to any text message you receive from us. You may also opt out by contacting us directly at the information provided in Section 11. After opting out, you will receive one final confirmation message. No further SMS messages will be sent unless you opt in again.

For help with our SMS program, reply HELP to any OHP text message, or contact us directly. OHP is not responsible for any errors or delays in SMS messages caused by your mobile carrier.

All marketing email communications from OHP comply with the CAN-SPAM Act of 2003 and applicable state law. Specifically:

• Every marketing email will clearly identify OHP as the sender;

• Every marketing email will include a valid physical postal address for OHP;

• Every marketing email will include a clear and conspicuous unsubscribe mechanism;

• OHP will honor opt-out requests within ten (10) business days; and

• We will not use deceptive subject lines or misleading header information.

To unsubscribe from OHP email communications, click the "Unsubscribe" link in any email, or contact us directly at the information provided in Section 11. Once we process your unsubscribe request, we will not send further marketing emails. Note that you may still receive transactional or legally required communications.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Email subscriber data is retained while your subscription is active and for a reasonable period thereafter in accordance with Mailchimp's data retention policies;

• SMS opt-in records, including consent records and opt-out logs, are retained for a minimum of four (4) years to demonstrate TCPA compliance; and

• Business correspondence and inquiry records are retained consistent with applicable record-keeping requirements.

When your information is no longer needed, we will securely delete or de-identify it in accordance with our data retention and destruction policies.

OHP implements reasonable and appropriate technical and organizational security measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using industry-standard TLS protocols;

• Access controls and role-based permissions limiting access to personal information;

• Use of reputable, security-certified third-party platforms, including Mailchimp; and

• Periodic review of our security practices and provider agreements.

Despite these measures, no data transmission or storage system is completely secure. We encourage you to use strong passwords and exercise caution when transmitting sensitive information. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

• Access: The right to access the personal information we hold about you;

• Correction: The right to request correction of inaccurate or incomplete information;

• Deletion: The right to request deletion of your personal information, subject to certain legal exceptions;

• Opt-Out: The right to opt out of marketing email and SMS communications at any time (see Sections 5 and 6);

• Portability: The right to data portability where technically feasible; and

• Complaints: The right to lodge a complaint with your applicable regulatory authority.

To exercise any of these rights, please contact us using the information in Section 11. We will respond to your request within a reasonable timeframe consistent with applicable law. We will not discriminate against you for exercising your privacy rights.

OHP's communications and services are directed to healthcare professionals, government program administrators, and business stakeholders. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete that information.

For questions, concerns, opt-out requests, or to exercise your privacy rights, please contact OHP at:

Optimize Health Partners, LLC

Attn: Privacy Officer

Email: privacy@optimizehealthpartners.com

Website: www.optimizehealthpartners.com

Nashville, Tennessee

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Effective Date" at the top of this Policy and, where appropriate, notify you by email or prominent notice on our communications.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued engagement with OHP communications following notification of changes constitutes your acceptance of the updated Policy.

This Privacy Policy was last reviewed and approved by Optimize Health Partners, LLC on March 23, 2026.

This document does not constitute legal advice. Consult qualified legal counsel for compliance with applicable federal and state privacy laws.