SCOPE

The Peak Health Services ("Peak Health") Statement of Online Privacy Practices ("SOPP") describes how we collect information when you visit or use Peak Health's public facing website peakhealthservices.net. It also describes how we use and share such information and explains your privacy rights and choices.

Peak Health's Online Services are intended for a U.S. audience. "You" means an individual who visits our Online Services and does not refer to a business or other entity or to individuals outside the U.S.

The Peak Health business address is 200 Pine Street W, First Floor, Wilson, NC 27893. You can contact us by email at appointment@peak-health.net or ask for the Privacy Officer when calling 252-237-5090.

LINKING TO OTHER SITES

Accessing any third-party website that may be linked to the Peak Health website is done at the user's discretion. If you choose to link to websites not controlled by Peak Health, we are not responsible for the privacy or security of these sites, including the accuracy, completeness, reliability, or suitability of their information. If you are asked to provide information on one of these sites, we urge you to carefully study their privacy policies before sharing.

OTHER IMPORTANT NOTICES

Peak Health provides wellness program services to employers. Our privacy notices do not reflect the privacy practices of employers and we are not responsible for their privacy policies or practices.

This SOPP supplements the Peak Health Services, LLC Notice of Privacy that applies to information that we collect about individuals who choose to participate in our wellness programs. Please review these additional notices to learn how we may use and disclose your health information.

WHAT INFORMATION DOES PEAK HEALTH COLLECT?

When you visit the Peak Health website or otherwise interact with us online, we may collect the following information automatically:

• Your browser type (such as Google Chrome, Microsoft Edge,).
• Your Internet Protocol or "IP" address or other unique device identifiers.
• The presence of any software on your device that may be necessary to view our site.
• Configuration information about the device you are using, including, but not limited to, your device type, web browser type and version, operating system type and version, display/screen settings, and language preferences.
• Website analytics information.
• Search engine traffic referral information.

If an individual chooses to participate in the wellness program we may collect the following information as well:

• Individual health-related activities and behaviors and whether the individual has or had certain medical conditions (e.g., cancer, diabetes, or heart disease) – collected through a voluntary health risk assessment or "HRA".
• Biometric and fitness screening data that includes metrics such as blood pressure, heart rate, weight, height, waist circumference, body fat percentage, and cardiovascular fitness.
• Biomarkers from blood screening tests that highlight potential thyroid disease, diabetes, elevated cholesterol levels, kidney and liver function abnormalities, anemia and infectious diseases.

HOW DOES PEAK HEALTH USE THE INFORMATION COLLECTED?

The information we collect online helps Peak Health to:

• Analyze our site usage and enhance the user's experience.
• Make business decisions including to conduct risk assessments and audits, perform market research, and develop and improve products and services.
• Defend against risks to security:
• Monitor network activity logs
• Detect security incidents and conduct data security investigations
• Guard against malicious, deceptive, fraudulent, or illegal activity

We only use personal information that we have about you when we have a legal basis to use such personal information under applicable data protection laws. If an individual chooses to participate in the wellness program, Peak Health will use the information collected in conjunction with the program as described in the "Peak Health Notice of Privacy and Wellness Release".

HOW DOES PEAK HEALTH SHARE THE INFORMATION IT COLLECTS?

Peak Health shares your information in different ways as permitted and required by law. For example, we may share your information with:

• Service providers that provide various services to us, such as those we use to help detect and prevent fraud or help support or services.
• Government entities and other third parties as needed for legal or similar purposes, such as responding to requests from regulators or law enforcement.

If you choose to participate in the wellness program, please see the Peak Health Notice of Privacy and Wellness Release and the "Notice Regarding Wellness Program" for more information on how your personal information may be shared and how you may be able to limit certain types of sharing.

WHAT IF I AM VISITING THE PEAK HEALTH WEBSITE FROM OUTSIDE THE UNITED STATES?

Our sites are intended only for U.S. residents and we do not knowingly collect personal data or information via our websites of residents of other jurisdictions

HOW DOES PEAK HEALTH RETAIN RECORDS?

We store your personal information as long as it is required to meet our contractual and legal obligations, or if we have a legitimate business need to do so. Please see the "Peak Health Notice of Privacy and Wellness Release" and the "Notice Regarding Wellness Program" for more information on how your personal information may be retained.

TECHNOLOGIES WE USE

Peak Health uses cookies to help operate its website and facilitate your user experience. A cookie is a small piece of information about an Internet session that may be created when a user accesses a website. Cookies may be used to learn how visitors use a site, for login access and authentication purposes, or to allow the company to track users across their domains and services. Peak Health, through its public facing website, does not use third-party cookies and does not collect or store any personally identifiable information about you.

CONTROL YOUR ONLINE AND OTHER PRIVACY PREFERENCES

You can control your marketing preferences, email, direct mail and telemarketing preferences, along with the sharing of your personal information via our automated voice response line at 866-858-5158 via email; tihcompliance@truist.com

• At this time, we do not currently respond to browser "do not track" signals or other mechanisms that allow you to tell websites you do not want to have online activities tracked.

PROTECTING YOUR CHILDREN

Peak Health strictly follows the federal guidelines of the Children's Online Privacy Protection Act (COPPA), which gives parents control over what type of information is collected online about their children. We do not knowingly collect, maintain, or use personally identifiable information from children under age 13 on our websites. We are not responsible for the data collection and use practices of nonaffiliated third parties that may be linked from our websites. Visit the Federal Trade Commission's COPPA Website for more information.

HOW DOES PEAK HEALTH PROTECT ME FROM FRAUD AND SECURE INFORMATION?

To protect personal information from unauthorized access and use, we use security measures that comply with applicable federal and state laws. These measures may include device safeguards, secured files and buildings, as well as oversight of our third-party service providers to help protect the confidentiality and security of information. Please see the Peak Health Notice of Privacy and Wellness Release and the Notice Regarding Wellness Program for more information on how your personal information may be secured.

HOW CAN I MAKE SURE MY INFORMATION IS ACCURATE, AND USE MY INDIVIDUAL RIGHTS?

Keeping your account information accurate and up to date is very important. If your account information is incomplete, inaccurate or not current, please contact us as described above or work with the nurse who is assisting you with your assessment.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We will ask you to verify your identity to help us respond efficiently to your request.

Under non-U.S. data protection laws, you may have the right to complain to a data protection authority about our collection and use of your personal information.

HOW WILL PEAK HEALTH NOTIFY ME ABOUT ONLINE PRIVACY PRACTICES UPDATES?

Peak Health's Online Privacy Practices may be revised from time to time, so please review them periodically. Any changes will become effective when we post the revised Practices on the site (Please note the effective date listed at the top of this page). If we revise our Online Privacy Practices in a material way, we will provide a conspicuous notice on our website when any changes take effect.

HOW CAN I CONTACT PEAK HEALTH?

If you have any questions or comments on our Online Privacy Practices, please contact us by email at appointment@peak-health.net or ask for the Privacy Officer when calling 252-237-5090.