Privacy Policy

US Med Retail Privacy Notice

Last Updated: June 29, 2026

At US Med Direct, LLC (“US Med Retail,” “we,” “us,” or “our”) we value that our customers, business partners, and other users of our Services (defined below) trust us with their Personal Data. This US Med Retail Privacy Notice (“Privacy Notice”) tells you about our current privacy practices and those of the preceding year in connection with US Med Retail’s Services. This Privacy Notice describes what Personal Data we collect and how we may use, share, or manage it. It also explains your rights and choices regarding the Personal Data about you that we process. Please review this Privacy Notice before using our Services or sharing any Personal Data with us.

As used in this Privacy Notice, “Personal Data” refers to any information that directly or indirectly identifies you specifically. Data that is indirectly identifiable includes, for example, data that can be used to identify you as an individual when combined with other pieces of information that are reasonably available. Personal Data does not include information that is publicly available, de-identified, or aggregated, such that it can no longer be used to identify you as an individual.

US Med Retail is the controller of your Personal Data.

When you use our Services and give us your Personal Data, you agree that we will process your Personal Data in accordance with this Privacy Notice, including any terms specific to your location. If you do not agree with the practices described in this Privacy Notice, please do not give us your Personal Data or use our Services. Where required by applicable law, we will not collect, use, or disclose your Personal Data without first obtaining your consent. This Privacy Notice is available to persons with disabilities. To access this Notice in an alternative, downloadable format, please click here.

If you have any questions about this Privacy Notice, please email AHSprivacy@cardinalhealth.com.

Contents

1. Purpose and Scope

2. Personal Data We Collect

3. How Your Personal Data is Collected

4. How We Use and Share Your Personal Data

5. Your Privacy Rights and Choices

6. Links to Other Services

7. Security of Our Services

8. Retention of Personal Data

9. Children’s Privacy

10. Additional Information for US Consumers

11. Changes to this Privacy Notice and Contacting Us

1. Purpose and Scope

This Privacy Notice applies when you use our website and other services, tools, and online applications or when you interact with us in other ways, such as through our customer service, at our in-person events, if you are visiting one of our offices, or from third party sources (collectively, “Services”). It also explains your rights and choices regarding the Personal Data you give us. Some of our affiliates and business units have their own privacy notices for their own websites, mobile apps, or other services. This Privacy Notice only covers such other businesses, websites, apps, and services when they link to or provide you with this Privacy Notice. If you do not agree with the practices described in this Privacy Notice, please do not give us your Personal Data or use our Services.

Please note that our products are only intended for and can only be sold to individuals located in the United States.

If you are located in the United States, please note US Med Retail is not covered by the Health Insurance Portability and Accountability Act (“HIPAA”), and this Privacy Notice does not apply to Protected Health Information (“PHI”). Some of our affiliates and business lines may be regulated by HIPAA and have a HIPAA Notice of Privacy Practices which governs their use, collection, and disclosure of PHI. Use and disclosure of your data may be governed by multiple privacy notices if you obtain services from multiple business lines, as separate privacy notices may be applicable to each business with which you engage. Your data will only be used as specified by each business in its respective notice.

If you have any questions about this Privacy Notice, please email AHSprivacy@cardinalhealth.com.

2. Personal Data We Collect

Depending on how you use our Services, we may collect different kinds or amounts of Personal Data about you. This could include any or all of the types of Personal Data that follow.

·Identifiers, such as your name, contact details, account number, registration information (including username and password), payment details, and IP Address and other online identifiers.

·Internet Activity Information, such as how you interact with our Services, social media pages, or marketing and advertising, the websites that refer you to us, the pages you visit, links or buttons you click, your browser or device type, internet service provider, and user preferences.

·Commercial Information, such as purchase and order history, as well as payment or other financial information.

·Audio, Electronic, Visual, or Similar Information, such as call or video recordings, including through the use of CCTV if you visit one of our offices, pictures taken at our events, email or text exchanges, direct messages you exchange with us, and chat logs from your communications with us.

·Sensitive Personal Data as set forth under some data protection laws, including account access credentials (like usernames or account numbers combined with password or other security/access code to access an account), debit and credit card information, and medical or health information.

·Any other information you voluntarily provide to US Med Retail.

3. How Your Personal Data is Collected

When you use our Services, we may collect Personal Data from you, your browser or device, and other sources, which are described in more detail below.

Personal Data Collected from You

We may ask you to provide Personal Data at different times and places on our Services. For example, we may collect Personal Data from you when you:

·Register or create an account

·Purchase products

·Subscribe to, or interact with, our email updates and newsletters

·Respond to a voluntary survey

·Contact customer service or make use of our customer support tools

·Connect with, link to, or “share” our Services via social media

·Visit our offices

·Register for or attend one of our in-person events or congresses

·Provide ratings, reviews, or feedback

Please be aware that we may not be able to manage your account or provide you with the products or services you request if you do not give us Personal Data that is marked as required. You also may not be able to use all features of our Services.

If you give us Personal Data of another person, you must make sure they have seen this Privacy Notice and that you have their permission before giving their Personal Data to us.

Personal Data Collected through Automated Means

Device or Browser: Certain information is automatically collected from your device or browser and analyzed when you interact with our Services, our marketing or advertising, our social media pages, and our email communications. Some of this information is collected by others on our behalf.

Cookies and Other Tracking Technologies: We use cookies, web beacons/pixel tags, and other tracking technologies (collectively, “cookies”) to recognize and collect information about you when you visit our websites or mobile apps. Cookies are small bits of data cached or stored on your computer or mobile device. These cookies may be delivered in a first-party or third-party context. For example, we may collect information about your browser type and version, operating system, user language, viewed web pages, links that are clicked, IP address, screen resolution, and web pages visited before and after visiting our websites or mobile apps. Our emails to you also may contain tracking technologies to help us understand when you open an email or click links within it.

By collecting this information, we can better understand how you interact with us and our Services, give you a more personal and optimized online experience by recognizing your preferences, improve our Services, fulfill contracts with our business partners, help confirm receipt of and response to our emails, conduct marketing or advertising, and provide more effective customer service. For more information on the cookies we use, and your choices related to them, please visit our Cookie Notice.

We use Google Analytics to collect usage details. You can learn more about privacy and Google Analytics by visiting https://support.google.com/analytics/answer/6004245, and opt out of collection of your data by using the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout. We may also use cookies set by other third-party services.

Personal Data Collected from Other Sources

We may also receive your Personal Data from various other sources, such as our affiliates, advertising networks, business partners, contractors, data analytics providers, or social media networks.

4. How We Use and Share Your Personal Data

We use Personal Data for:

·Managing, Operating and Improving our Services, including providing the website or social media page you are interacting with, or facilitating access to an event you are attending;

·Customer Service, including answering your questions or responding to your requests;

·Communications, such as sending you reminders or updates, administrative messages, service bulletins, informational materials about US Med Retail or our business partners, educational materials, or other information you request;

·Fulfillment, including creating your online account, processing purchase orders, tracking and keeping you informed about your order status, along with performing accounting, auditing, payment processing, billing and reconciliation, and for other recordkeeping and internal administrative purposes;

·Customer Experience, including evaluating and improving our Services; serving content and allowing you to use interactive features; developing our products and services; performing analytics and conducting customer research; and validating your eligibility to access or use certain products or services, such as those only available to healthcare professionals;

·Personalization, such as when you set your preferences on our Services or when we enhance our data to better understand you and your interests;

·Direct Marketing, including sending you information about offers, promotions, or our products or services we think might interest you;

·Promotions, including administering our online surveys or special offers, or those of our business partners;

·Security and Integrity, including fraud prevention, public safety, data security, or enforcement of our policies and procedures;

·Compliance with the Law or our legal requirements, including cooperating with and responding to law enforcement requests or as otherwise required by applicable law, court order, or government regulations, protecting our rights and interests or those of others, and resolving any disputes; and

·Analytics, including performing data analytics (such as market research, trend analysis, financial analysis, and customer segmentation).

We may combine Personal Data we obtain through the Services with other information for the purposes described above. We may aggregate or de-identify Personal Data and use it for the purposes described above and for other purposes to the extent permitted by laws applicable to us.

We may disclose any Personal Data we collect to the following recipients for the purposes outlined above:

·Our Affiliates and Business Partners. Our affiliates and business partners may use your Personal Data for the purposes described above. For example, we sometimes operate as a service provider to our business partners and will disclose Personal Data we collect on their behalf with them. We may share your Personal Data with the manufacturer of a medical product that you order and purchase on our website so that we can fulfill your order and address legal and regulatory obligations.

·Service Providers. We engage contractors, suppliers, and other vendors who provide services on our behalf and at our instruction, such as assisting with processing and fulfilling orders; delivery and logistics; data storage; fraud prevention; data and Services analytics, including the placement and use of cookies; our communications, advertising, and marketing, including the effectiveness of our advertising and marketing efforts; or other services in support of our business.

·Advertising Partners. We partner with third parties who assist us in serving advertising regarding the Services to others who may be interested. These third parties may use tracking technologies to collect or receive information from the Services and elsewhere on the internet and use that information to provide measurement services and target ads. Third parties may allow other companies to access information about you so that they may market other products you may be interested in.

·Professional Advisors. Any Personal Data we collect may be provided to our professional advisors, including accountants, auditors, consultants, and lawyers, when reasonably necessary for our professional advisors to perform services for us and give us appropriate advice.

·Corporate Event. Any and all Personal Data we collect may be given to another company in the event of a sale, merger, or other acquisition of some or all of our assets or business, or as part of the negotiation or evaluation of such sale, merger, or other acquisition.

·Legal. We may use and disclose any Personal Data as reasonably necessary to comply with the law or our legal requirements, cooperate with and respond to law enforcement requests, or as otherwise required by applicable law, court order, or government regulations; to protect our rights and interests or those of others; to resolve any disputes; to enforce our policies; or to prevent harm.

5. Your Privacy Rights and Choices

Direct Marketing: You may choose to opt out of receiving direct marketing, commercial emails, and other educational materials from us about our products and services by following the instructions contained in the communications we send or, at any time, by signing into your account and adjusting your communication preferences. Please allow five (5) business days for your request to be processed. Please also note that even if you unsubscribe, we may still send you transactional or administrative communications, including, for example, to manage any account you have with us, respond to your requests, execute agreements with you, provide you with products you order, and manage your transactions.

Cookies and Tracking Technologies: You may disable certain cookies and tracking technologies at any time by adjusting your browser settings or taking other actions to opt out of cookies and tracking technologies. Please be aware, however, that if you disable cookies, you may not be able to take full advantage of all of the features of our Services. For more information on how to control and disable cookies, please visit our Cookie Notice.

Privacy Rights under Certain Laws: In some locations, privacy or data protection laws may give you certain rights with respect to your Personal Data. These rights include the right to know what Personal Data we process about you and to request access to it, to correct inaccuracies or update Personal Data, to ask us to delete Personal Data, or obtain a copy of your Personal Data. You also may have the right to object to, opt out of, or ask that we restrict our processing of your Personal Data, including restricting the processing of certain Personal Data considered sensitive, targeted advertising/“sharing” and/or sale of Personal Data, and automated profiling in instances where such processing would produce legal or other similarly significant effects.

To find out more about your legal rights or to exercise any privacy rights that apply to you, please contact us at AHSprivacy@cardinalhealth.com or 800.926.0834 (free of charge in the United States). In your email, please include your full name, zip code or postal code, the email address at which you prefer to be contacted, and the privacy right(s) you are requesting, such as the removal of information about a particular transaction or the correction of specific information. Please check your incoming email messages in case we need to ask you more questions about your request. We also recognize requests to opt out of targeted advertising/“sharing” and/or sale of Personal Data submitted via Global Privacy Control.

Certain laws allow an authorized agent acting on your behalf to make privacy requests, which they may do by following the instructions above. If an authorized agent submits a request for you, we may ask you to verify your own identity or confirm the request directly with us.

Subject, for certain rights, to appropriate verification of your identity, which may include asking you for additional information to match the information we have, US Med Retail will honor the privacy rights provided to you by applicable law. You can expect that US Med Retail will respond to your privacy request within the required time period under applicable law, unless we reach out to explain that it will take us longer. If we cannot fulfill your privacy request in whole or in part, we will explain why. It is our policy not to disclose any information in response to a privacy request that may adversely affect the privacy of other persons unless legally required to do so.

If you have any questions about our response to your privacy request, please contact us at AHSprivacy@cardinalhealth.com. We may deny certain requests, or fulfill some only in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.

While we will always try to assist when you have concerns about the privacy of your Personal Data and appreciate an opportunity to do so, if you have concerns about how we manage your Personal Data or respond to your requests, you may be able to file a complaint with your local data protection authority or privacy regulator.

6. Links to Other Services

For your convenience and information, our Services may contain links to other websites and apps unaffiliated with US Med Retail. We do not control or monitor and are not responsible for the privacy practices or the content of these websites and apps we link to. We urge you to review the relevant privacy policies prior to use to ensure that you are comfortable with their privacy practices.

7. Security of Our Services

US Med Retail takes steps to manage the privacy of your Personal Data and the security of the Services. We have implemented administrative, technical, and physical security controls that are designed to safeguard Personal Data. Despite these efforts, it is impossible to guarantee 100% security in all circumstances.

8. Retention of Personal Data

US Med Retail retains Personal Data as long as necessary to fulfill the purposes for which your Personal Data was collected, unless a longer retention period is necessary, the Personal Data is required to fulfill a legal obligation, or we are otherwise permitted to retain the Personal Data for other uses. For example, we generally retain Personal Data used for:

·Managing your account for as long as the account is active and for a period afterward that may correspond to any period allowed for returns, recalls, or other administrative needs related to the products or services purchased.

·Communications with you for the length of time necessary to provide administrative or transactional communications related to products or services purchased from us.

·Security and integrity for the length of time the Personal Data is useful for enhancing the security of our Services; as needed in connection with our obligations to protect our Services or products from fraud, malicious, or illegal activity; to meet our legal obligations; or to ensure our rights and those of others as well as our policies are enforced.

Where Personal Data is used for more than one purpose, we will retain the Personal Data until the purpose with the longest retention period expires.

9. Children’s Privacy

US Med Retail does not expect that any portion of its Services will be used by persons under the age of 16, and we do not knowingly collect Personal Data from anyone under the age of 16. If we learn that we have received Personal Data from someone under the age of 16, we will delete that information in accordance with applicable law.

10. Additional Information for US Consumers

Residents of certain US states (“consumers”) have rights under comprehensive state privacy laws. These states include:

· California

· Colorado

· Connecticut

· Delaware

· Indiana

· Iowa

· Kentucky

· Maryland

· Minnesota

· Montana

· Nebraska

· New Hampshire

· New Jersey

· Oregon

· Rhode Island

· Tennessee

· Texas

· Utah

· Virginia

We recognize the privacy rights of consumers residing in any state with an active consumer privacy law applicable to US Med Retail. If you are a resident of a state with an active consumer privacy law, and you want to ask for additional information about your rights, you may contact us at AHSprivacy@cardinalhealth.com. You can exercise your rights as described in the “Your Privacy Rights and Choices” (Section 5) section above.

This information supplements other parts of this Privacy Notice. Please read this information in conjunction with the other portions of our Privacy Notice. We have described the Personal Data we collect (Section 2, “Personal Data We Collect”) and the sources from which we collect Personal Data (Section 3, “How Your Personal Data is Collected”). We have also explained our purposes for collecting Personal Data and how we disclose it to others (Section 4, “How We Use and Share Your Personal Data”). Finally, you can find information about how to exercise your privacy rights (Section 5, “Your Privacy Rights and Choices”) and how we retain Personal Data (Section 8, “Retention of Personal Data”) above.

Sales of Personal Data and Targeted Advertising

State privacy laws may permit consumers to opt out of the sale of Personal Data, including when that Personal Data is provided to others in exchange for non-monetary value or to facilitate targeted advertising. Although US Med Retail does not “sell” your Personal Data in exchange for money, we use of cookies and similar technologies, which may be considered a “sale” of Personal Data under some privacy laws. To opt out of these “sales” or other targeted advertising, please contact us at AHSprivacy@cardinalhealth.com. Our website is also designed to honor Global Privacy Control.

Automated Decision making and Profiling

State privacy laws may provide you with the right to opt out of automated profiling in certain instances where such processing would produce legal or other similarly significant effects. At this time, we do not use Personal Data to make automated decisions about you in any situations where you may have a legal right to opt out.

Your California Privacy Rights

In addition to the rights described in the “Your Privacy Rights and Choices” (Section 5) section above, California’s “Shine the Light” law permits customers in California to request certain details about how certain types of their information are shared with third parties for those third parties’ own direct marketing purposes. If you are a California resident, you may opt out of such disclosures by emailing AHSprivacy@cardinalhealth.com.

Processing of Sensitive Personal Data

US Med Retail does not use or disclose sensitive Personal Data (as defined under state consumer privacy laws) for purposes that would give rise to the right to limit the use and disclosure of this data.

List of Third Parties to Which Personal Data is Disclosed

If you are a resident of Oregon, Rhode Island, or Minnesota, you have the right to request a list of the specific third parties to which we have disclosed your Personal Data.

Right to Appeal

If we deny your request, you may have the right to appeal our decision.

Additional Disclosures for California Residents

Your California Privacy Rights

In addition to the rights described in the “Your Privacy Rights and Choices” (Section 5) section above, California’s “Shine the Light” law permits customers in California to request certain details about how certain types of their information are shared with third parties for those third parties’ own direct marketing purposes. If you are a California resident, you may opt out of such disclosures by emailing AHSprivacy@cardinalhealth.com.

California Notice at Collection

You have the right to receive notice of the categories of personal information we collect, and the purposes for which those categories of personal information will be used.

The following chart describes our practices with regard to the collection, use, and retention of your personal information if you are a customer, website visitor, or business contact. If you are a candidate for employment, please see our supplemental California Notice of Collection for Job Candidates below.

The categories we use to describe the information are those listed in the California Consumer Privacy Act (“CCPA”). Certain personal information may fall into multiple categories, and in some circumstances, how we use and how long we keep the information within each category will vary.

The examples of personal information listed below are illustrative and do not represent a complete description of the information we process.

US Med Retail does not use or disclose sensitive personal information (as defined under the CCPA) for purposes that would give rise to the right to limit the use and disclosure of this data. Additionally, US Med Retail does not use or disclose Personal Data for profiling or automated decision making (as defined under the CCPA) in any way that would give rise to the right to opt out of these uses or disclosures.

We do not “sell” your data to third parties for monetary value. However, we do use cookies and other tracking technologies for targeted advertising, which constitutes a “sale” under the CCPA. We also “share” your information through the use of cookies and tracking technologies for targeted advertising purposes.

Consumer Health Data Privacy Laws

Washington State’s My Health My Data Act, Nevada’s Consumer Health Data Privacy Law (SB 370), and similar state laws may regulate how we process “Consumer Health Data,” or Personal Data that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. For consumers in those states, this notice is supplemented by our Consumer Health Data Privacy Notice.

11. Changes to this Privacy Notice and Contacting Us

We reserve the right to modify this Privacy Notice at any time. You can see when this Privacy Notice was last revised by referring to the date it was “Last Updated” at the top of the Privacy Notice.

If you have any questions or comments about our privacy practices or this Privacy Notice, or if you would like to receive a copy of this Privacy Notice in an alternate format or language, please contact us at: