Privacy Policy

Introduction

WellBridge Health Inc. ("Wellbridge," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at https://wellbridge.ai (the "Website").

Scope of This Policy: This Privacy Policy applies solely to information collected through our marketing Website. It does NOT apply to: (a) our InsightsRX platform or other products and services, which are governed by separate agreements and Business Associate Agreements with our customers; (b) information collected offline; or (c) information collected by third parties that may link to or be accessible from our Website.

By accessing or using our Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Use. If you do not agree with our policies and practices, please do not use our Website.

IMPORTANT NOTICE REGARDING PROTECTED HEALTH INFORMATION (PHI)

This Website is not intended for the submission of Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA). Please DO NOT submit any patient names, medical conditions, treatment information, or other health-related data through our contact forms or any other feature on this Website. HIPAA protections do not apply to information submitted through this Website. If you are a patient or caregiver seeking medical information, please consult your healthcare provider. If you inadvertently submit PHI, please contact us immediately at privacy@wellbridgehealth.com so we can take appropriate action.

Important Disclosures for Healthcare Stakeholders

This Website Does Not Collect Protected Health Information

Wellbridge provides AI-powered clinical pharmacy solutions to healthcare organizations. However, this marketing Website is not designed or intended to collect Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Please DO NOT submit the following through this Website:

Patient names, medical record numbers, or other patient identifiers
Medical conditions, diagnoses, or treatment information
Prescription or medication information related to identifiable individuals
Health insurance information
Any other information that could identify an individual patient

HIPAA protections and Business Associate Agreement obligations do not apply to information submitted through this Website. If you inadvertently submit PHI, please contact us immediately at privacy@wellbridgehealth.com so we can take appropriate action.

No Medical Advice

The content on this Website is for informational purposes only and is intended for healthcare professionals and business decision-makers. Nothing on this Website constitutes medical advice, diagnosis, or treatment recommendations. No pharmacist-patient, physician-patient, or other healthcare provider-patient relationship is created through use of this Website.

Washington My Health My Data Act Disclosure

For residents of Washington State: This marketing Website is designed exclusively for business-to-business communications with healthcare professionals and organizations evaluating our clinical pharmacy solutions. The Website is not directed at consumers or individuals seeking personal health information, and is not designed or intended to collect "consumer health data" as defined under the Washington My Health My Data Act (MHMDA). Information you provide about your professional role (such as your job title, employer, or the type of healthcare organization you represent) is professional and employment-related information, not consumer health data. Please do not submit information about personal health conditions, personal medical treatments, symptoms, or any individual patient information through this Website. Such information is not requested, is not necessary for us to respond to your professional inquiry, and its submission is expressly discouraged. If you are a Washington resident and believe we have inadvertently collected consumer health data about you, please contact us at privacy@wellbridgehealth.com to exercise your rights under MHMDA, including confirmation of collection, access, deletion, and withdrawal of consent.

Sensitive Data Categories We Do NOT Intentionally Collect

Through this Website, we do not intentionally collect the following categories of sensitive personal information:

Health or medical information
Biometric data
Precise geolocation data
Financial account numbers, debit or credit card numbers
Social Security numbers or government-issued identifiers
Racial or ethnic origin
Religious or philosophical beliefs
Sexual orientation or sex life
Union membership
Genetic data
Contents of mail, email, or text messages (unless directed to us)

Information We Collect

Information You Provide Directly

When you interact with our Website, you may voluntarily provide us with the following information:

Contact Information: Name, email address, company name, job title, and any message content you submit through our contact form or demo request form.
Communications: Information contained in any correspondence you send to us, including via email or the Website.

Information Collected Automatically

When you visit our Website, our web server may automatically collect limited technical information necessary for the Website to function, such as:

Device Information: Browser type, operating system, and device type.
Network Information: IP address and general geographic location at the country or region level.
Referral Information: The website that referred you to our Website, if applicable.

Note: We do not currently use analytics cookies or tracking pixels on this Website. If we implement such technologies in the future, we will update this Privacy Policy accordingly.

How We Use Your Information

We use the information we collect for the following purposes:

Respond to Inquiries: To respond to your contact form submissions, demo requests, and other communications.
Marketing Communications: To send you information about our products, services, industry insights, and company news (with your consent where required by law).
Business Operations: To maintain, protect, and improve our Website and business operations.
Security: To protect against unauthorized access, misuse, or security incidents.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.

Legal Basis for Processing (EEA/UK/Switzerland)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

Consent: For marketing communications, we process data based on your explicit consent, which you may withdraw at any time.
Legitimate Interests: For processing business contact information to respond to inquiries, conduct B2B marketing to corporate email addresses, improve our Website, and ensure security. We have conducted balancing tests to ensure our legitimate interests do not override your fundamental rights and freedoms.
Contract Performance: Where processing is necessary to take steps at your request prior to entering into a contract.
Legal Obligation: Where we are required to process data to comply with applicable law.

How We Share Your Information

We may share your information in the following limited circumstances:

Service Providers: With third-party vendors who perform services on our behalf, such as website hosting (Hostinger), email services, and customer relationship management systems. These providers are contractually obligated to protect your information and use it only for the services they provide to us.
Business Transfers: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
Legal Requirements: When required by law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
With Your Consent: In other circumstances where we have obtained your explicit consent.

Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The specific retention period depends on the nature of the information and the purposes for which it is used. When we no longer have a legitimate business need to process your personal information, we will either delete or anonymize it.

Information submitted through our contact forms is sent to us via email and is retained in accordance with our standard business communication practices. We do not store contact form submissions in a separate database on our website server

Your Privacy Rights - United States

Depending on your state of residence, you may have specific privacy rights under applicable state law. We are committed to honoring the privacy rights of all U.S. residents to the extent required by applicable law.

Rights Available Under State Privacy Laws

The following rights may be available to residents of states with comprehensive privacy laws, including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Tennessee, Minnesota, Maryland, Nebraska, New Hampshire, New Jersey, Indiana, Kentucky, and Rhode Island:

Right to Know/Access: Request information about the personal information we have collected about you.
Right to Portability: Receive a copy of your personal information in a portable, readily usable format.
Right to Deletion: Request deletion of your personal information, subject to certain exceptions.
Right to Correction: Request correction of inaccurate personal information.
Right to Opt Out: Opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and certain profiling activities.
Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights.

California-Specific Disclosures (CCPA/CPRA)

Categories of Personal Information Collected: We may collect the following categories of personal information: (a) Identifiers (name, email address, IP address); (b) Professional or employment-related information (company name, job title); (c) Internet or other electronic network activity information (limited to technical information necessary for website functionality).
Sources: We collect personal information directly from you when you submit forms on our Website, and our web server may automatically collect limited technical information.
Business or Commercial Purpose: We collect this information for the business purposes described in Section 4 of this Privacy Policy.
Categories Sold or Shared: We have not sold or shared (for cross-context behavioral advertising) personal information in the preceding 12 months.
Authorized Agent: You may designate an authorized agent to make a request on your behalf. To do so, you must provide the agent with written permission, and we may require you to verify your identity directly with us.

California "Shine the Light" (Civil Code § 1798.83)

California residents may request information regarding the disclosure of their personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

Nevada Privacy Rights

Nevada residents have the right to opt out of the sale of their personal information under Nevada Revised Statutes Chapter 603A. We do not sell your personal information as defined under Nevada law. If you are a Nevada resident and would like to submit an opt-out request, please contact us at privacy@wellbridgehealth.com.

Right to Appeal

If we decline to take action on your privacy rights request, you have the right to appeal our decision. To appeal, please contact us at privacy@wellbridgehealth.com with the subject line "Privacy Rights Appeal" and include a description of the original request and the reason for your appeal. We will respond to your appeal within the timeframe required by applicable law.

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@wellbridgehealth.com or use the contact information in Section 14. We will respond to verifiable requests within the timeframes required by applicable law (typically 45 days, with extensions available in certain circumstances). We may need to verify your identity before processing your request.

Your Privacy Rights - International

European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and applicable local law:

Right of Access: Request a copy of your personal data.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data ("right to be forgotten").
Right to Restriction: Request restriction of processing of your personal data.
Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
Right to Object: Object to processing based on legitimate interests, including direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

We will respond to your request within one month. You also have the right to lodge a complaint with your local data protection supervisory authority.

Brazil (LGPD)

If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD), including the right to access, correct, anonymize, block, or delete personal data, as well as the right to receive information about entities with which your data has been shared.

Canada (PIPEDA and Provincial Laws)

If you are located in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws (including Quebec's Law 25), including the right to access and correct your personal information.

International Data Transfers

Wellbridge is based in the United States. If you are accessing our Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or rely on other transfer mechanisms recognized under applicable law to ensure that your personal data receives an adequate level of protection.

Email Marketing and Communications

If you opt in to receive marketing communications from us, or if we contact you based on a legitimate business interest, we will comply with all applicable laws:

CAN-SPAM Act (United States): All marketing emails will include our physical address, a clear unsubscribe mechanism, and accurate subject lines. We will honor unsubscribe requests within 10 business days.
CASL (Canada): We will obtain express consent before sending commercial electronic messages to Canadian recipients, unless an exception applies. You may withdraw consent at any time.
GDPR/PECR (EEA/UK): We will obtain consent before sending marketing communications to individuals, unless we have a lawful basis (such as legitimate interest for B2B communications to corporate contacts). You may opt out at any time.
Unsubscribe: Every marketing email will contain an easy-to-use unsubscribe link. We will process your opt-out request promptly and maintain suppression lists to prevent future contac

Data Security

We implement appropriate technical and organizational measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypting data in transit using TLS/SSL and implementing access controls to limit who can view personal information.

Wellbridge maintains SOC 2 Type 1 certification and HIPAA compliance for our InsightsRX platform. More information is available at our Trust Center.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Children's Privacy

Our Website is intended for healthcare professionals and business decision-makers and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 13 as defined by the Children's Online Privacy Protection Act (COPPA). If you are between 13 and 18 years of age, please do not submit personal information through this Website without the consent of a parent or guardian. If we learn that we have collected personal information from a child without appropriate parental consent, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child, please contact us immediately at privacy@wellbridgehealth.com.

* * *

This Privacy Policy is effective as of January 1, 2026.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, please contact us:

WellBridge Health Inc.

Attn: Privacy Officer

7901 4th St N, #20677

St. Petersburg, FL 33702

Email: privacy@wellbridgehealth.com

Website: https://wellbridge.ai/contact

For data subjects in the European Union, you may also lodge a complaint with your local supervisory authority.

Third-Party Links

Our Website may contain links to third-party websites, including our Trust Center hosted by Delve. These third-party sites have separate and independent privacy policies. We have no responsibility or liability for the content, privacy practices, or activities of these linked sites. We encourage you to review the privacy policies of any third-party sites you visit.

Testimonials

We may display testimonials from satisfied customers on our Website. We only publish testimonials with the express consent of the individual providing the testimonial. Testimonials reflect the personal experiences and opinions of those individuals and are not intended to represent or guarantee that any user will achieve the same or similar results. If you have provided a testimonial and wish to have it updated or removed, please contact us at privacy@wellbridgehealth.com.

Accessibility

Wellbridge is committed to ensuring digital accessibility for people with disabilities. We continually work to improve the accessibility of our Website to ensure equal access for all users. If you experience any difficulty accessing any part of this Website or have suggestions for improvement, please contact us at privacy@wellbridgehealth.com or use the contact information above. We will work with you to provide the information or service you need in an accessible format.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this Privacy Policy and provide a prominent notice on our Website. Where required by law, we may provide additional notice. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Website after any changes constitutes your acceptance of the updated Privacy Policy.