State Specific Privacy Addenda

Last updated: May 29, 2025

Introduction

This State Specific Privacy Addendum (the “State Specific Privacy Addendum”) supplements the information contained in Oar Health, Inc.’s (“Oar,” “we,” “our,” or “us”) Privacy Policy and describes our collection and use of Personal Information (as defined below pursuant to applicable state consumer privacy laws). 

Please click the links below for information relating to specific rights Oar provides to residents of the respective state. 

Personal Information We Collect and Disclose

The following chart outlines the Personal Information that we may collect about you and the categories of third parties to whom we may disclose your Personal Information.

Oar will not collect additional categories of Personal Information without providing you notice. As further described below, we do not “sell” any categories of Personal Information for monetary or other valuable consideration.

Sources of Personal Information

Oar obtains the categories of Personal Information listed above from the following categories of sources:

• Directly from you. For example, from forms or surveys you complete or products and services you purchase.

• Indirectly from you. For example, from observing your actions on our Website.

Purposes for Our Collection of Your Personal Information

We limit the collection, use, retention, and sharing of Personal Information to that which is reasonably necessary and proportionate to achieve the business purpose for which the Personal Information was collected or processed (for example, please refer to the “Use of Personal Information” section of our Website Privacy Policy). 

We will not process Personal Information for purposes that are neither reasonably necessary nor compatible with the purposes for which the Personal Information is processed as described in the Privacy Policy without your consent.

Information For Nebraska Residents

Introduction

This Nebraska Privacy Addendum (this “Nebraska Privacy Addendum”) supplements the information contained in Oar Health, Inc.’s (“Oar,” “we,” “our,” or “us”) Privacy Policy and applies solely to all visitors, users, and others who reside in the State of Nebraska (“Consumers” or “you”). We adopt this Nebraska Privacy Addendum to comply with the Nebraska Data Privacy Act (“NDPA”) and any terms defined in the NDPA have the same meaning when used in this Nebraska Privacy Addendum. We may update this Nebraska Privacy Addendum at any time as necessary in the event of changes to the NDPA. 

Applicability

This Nebraska Privacy Addendum applies to information that we collect on our Website that is linked or reasonably linkable to an identified or identifiable individual, including pseudonymous data used in conjunction with additional information that reasonably links the data to an identifiable individual (“Personal Information”). 

However, publicly available information that we collect from government records and deidentified data (when deidentified as described in the NDPA) is not considered Personal Information under the NDPA and this Nebraska Privacy Addendum does not apply to such information. This Nebraska Privacy Addendum also does not apply to protected health information covered by the Health Insurance Portability and Accountability Act (“HIPAA”), health records, or other exempted data under the NDPA.

This Nebraska Privacy Addendum also does not apply to Personal Information collected from Nebraska residents acting in a commercial or employment context, such as employees, job applicants, contractors, or similar individuals. 

Sale of Personal Information

We do not “sell” your Personal Information as the term is defined under the NDPA as meaning “the exchange of personal data for monetary or other valuable consideration by the controller to a third party.” 

Nebraska Consumer Data Requests

The NDPA provides Nebraska residents with specific rights regarding their Personal Information. This section describes your NDPA rights and explains how to exercise those rights. For more information on how you or your Authorized Agent can exercise your rights, please see Exercising Your Consumer Rights. 

• Confirmation and Access. You have the right to confirm whether we process your Personal Information and to request access to that Personal Information we have collected and maintain about you except that we will not confirm or provide Personal Information that we believe would disclose our trade secrets. You may exercise this right as described below. 

• Correction. You have the right to correct any inaccuracies in your Personal Information processed by us, taking into account the nature of the Personal Information and the purposes of the processing of your Personal Information. We may also not be able to accommodate your request to change the Personal Information if we believe it would violate any law or legal requirement or cause the Personal Information, or the information associated with the Personal Information to be incorrect.

• Deletion. You have the right to request that we delete all of your Personal Information. We cannot delete your Personal Information except by also deleting your user account. However, we may not accommodate a request to erase your Personal Information if we believe the deletion would violate any law or legal requirement or cause any information associated with the Personal Information to be incorrect.

• Portability. To the extent we maintain your Personal Information in a digital format, you have the right to request that we provide you a copy of, or access to, all or part of such Personal Information in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the Personal Information to another controller without hindrance.

• Right to Opt-Out of Certain Processing. To the extent applicable, you have the right to opt-out of processing your Personal Information for the purposes of: (i) targeted advertising; (ii) the sale of your Personal Information; or (iii) profiling in furtherance of a decision that produces a legal or similarly significant effect concerning the consumer. This would include a decision that results in the provision or denial of health care services. 

Please note, however, that Oar does not sell or process Personal Information for purposes of targeted advertising or profiling within the meaning of the NDPA.

• Non-Discrimination. We will not discriminate against you for exercising any of your NDPA rights. Unless permitted by the NDPA, we will not do any of the following as a result of you exercising your NDPA rights: (a) deny you goods or services; (b) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (c) provide you a different level or quality of goods or services. However, we may offer you certain financial incentives permitted by the NDPA that can result in different prices, rates, quality levels, or selection of goods and services (including the possibility of offering our services for no fee), if you have exercised your rights to opt-out of certain processes as described above or if the offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.

Exercising Your NDPA Rights

For more information on how you or your Authorized Agent can exercise your NDPA rights described above, please see Exercising Your Consumer Rights. If applicable, you may also make a Consumer Request on behalf of your minor child. To designate an Authorized Agent, see Authorized Agents below. Personal Information provided in response to a request to exercise these rights may be provided free of charge twice per Nebraska resident annually.

This Nebraska Privacy Addendum was last updated on May 29, 2025.

Information For Texas Residents

Introduction

This Texas Privacy Addendum (this “Texas Privacy Addendum”) supplements the information contained in Oar Health, Inc.’s (“Oar,” “we,” “our,” or “us”) Privacy Policy and applies solely to all visitors, users, and others who reside in the State of Texas (“Consumers” or “you”). We adopt this Texas Privacy Addendum to comply with the Texas Data Privacy and Security Act (“TDPSA”) and any terms defined in the TDPSA have the same meaning when used in this Texas Privacy Addendum. We may update this Texas Privacy Addendum at any time as necessary in the event of changes to the TDPSA. 

Applicability

This Texas Privacy Addendum applies to information that we collect on our Website that is linked or reasonably linkable to an identified or identifiable individual, including pseudonymous data used in conjunction with additional information that reasonably links the data to an identifiable individual (“Personal Information”). 

However, publicly available information that we collect from government records and deidentified data (when deidentified as described in the TDPSA) is not considered Personal Information under the TDPSA and this Texas Privacy Addendum does not apply to such information. This Texas Privacy Addendum also does not apply to protected health information covered by the Health Insurance Portability and Accountability Act, health records, or other exempted data under the TDPSA.

This Texas Privacy Addendum also does not apply to Personal Information collected from Texas residents acting in a commercial or employment context, such as employees, job applicants, contractors, or similar individuals. 

Sale of Personal Information

We do not “sell” your Personal Information as the term is defined under the TDPSA as meaning the “sharing, disclosing, or transferring of personal data for monetary or other valuable consideration by the controller to a third party.” 

Texas Consumer Data Requests

The TDPSA provides Texas residents with specific rights regarding their Personal Information. This section describes your TDPSA rights and explains how to exercise those rights. For more information on how you or your Authorized Agent can exercise your rights, please see Exercising Your Consumer Rights. 

• Confirmation and Access. You have the right to confirm whether we process your Personal Information and to request access to that Personal Information we have collected and maintain about you except that we will not confirm or provide Personal Information that we believe would disclose our trade secrets. You may exercise this right as described below. 

• Correction. You have the right to correct any inaccuracies in your Personal Information processed by us, taking into account the nature of the Personal Information and the purposes of the processing of your Personal Information. We may also not be able to accommodate your request to change the Personal Information if we believe it would violate any law or legal requirement or cause the Personal Information or the information associated with the Personal Information to be incorrect.

• Deletion. You have the right to request that we delete all of your Personal Information. We cannot delete your Personal Information except by also deleting your user account. However, we may not accommodate a request to erase your Personal Information if we believe the deletion would violate any law or legal requirement or cause any information associated with the Personal Information to be incorrect.

• Portability. To the extent we maintain your Personal Information in a digital format, you have the right to request that we provide you a copy of, or access to, all or part of such Personal Information in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the Personal Information to another controller without hindrance.

• Right to Opt-Out of Certain Processing. To the extent applicable, you have the right to opt-out of processing your Personal Information for the purposes of: (i) targeted advertising; (ii) the sale of your Personal Information; or (iii) profiling in furtherance of a decision that produces a legal or similarly significant effect concerning the consumer. This would include a decision that results in the provision or denial of health care services. 

Please note, however, that Oar does not sell or process Personal Information for purposes of targeted advertising or profiling within the meaning of the TDPSA. 

• Non-Discrimination. We will not discriminate against you for exercising any of your TDPSA rights. Unless permitted by the TDPSA, we will not do any of the following as a result of you exercising your TDPSA rights: (a) deny you goods or services; (b) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (c) provide you a different level or quality of goods or services. However, we may offer you certain financial incentives permitted by the TDPSA that can result in different prices, rates, quality levels, or selection of goods and services (including the possibility of offering our services for no fee), if you have exercised your rights to opt-out of certain processes as described above or if the offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.

Exercising Your TDPSA Rights

For more information on how you or your Authorized Agent can exercise your TDPSA rights described above, please see Exercising Your Consumer Rights. If applicable, you may also make a Consumer Request on behalf of your minor child. To designate an Authorized Agent, see Authorized Agents below. Personal Information provided in response to a request to exercise these rights may be provided free of charge twice per Texas resident annually.

This Texas Privacy Addendum was last updated on May 29, 2025.

Exercising Your Consumer Rights

To exercise the rights described above, please submit a request (a “Consumer Request”) to us by either: 

• Calling us at: (201) 308-3120

• Visiting :https://www.oarhealth.com   

• Emailing us at: privacy@oarrx.com

Only you, or your Authorized Agent that you authorize to act on your behalf, may make a Consumer Request related to your Personal Information. If applicable, you may also make a Consumer Request on behalf of your minor child. To designate an Authorized Agent, see Authorized Agents below. 

All Consumer Requests must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an Authorized Agent of such a person. This may include:

  • Verifying Personal Information that we may already have about you, such as your name, address, telephone number, and/or other similar information. 

• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We are unable to fulfill your request or provide you with Personal Information if we cannot authenticate that the Personal Information that is the subject of your request relates to you through commercially reasonable efforts. In this case, we may request additional information, which we will only use to authenticate you. 

Making a Consumer Request does not require you to create a password-protected, online account with us. However, if you do have such an account, we may require you to use it in order to make your request. Doing so will enable us to consider your requests through that account to authenticate that the Personal Information that is the subject of your request relates to you.

Authorized Agents

You may authorize your agent to exercise your rights under the applicable state privacy laws described above. We may request that your Authorized Agent submit proof of identity and that they have been authorized to exercise your rights on your behalf. We may deny a request from your Authorized Agent to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights. 

Response Timing and Format

We will generally process Consumer Requests within 45 days of its receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing. If we cannot comply with your request, we will provide you with an explanation of the reasons we cannot comply with the request. 

We do not charge a fee to process or respond to your Consumer Request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. 

Appeals Process

You may appeal a refusal by us to take action on your request to exercise any of the above rights within a reasonable period of time after we provide you notice of such refusal by contacting us through the contact information listed below.  

Within 45 days after we receive your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including any explanations for the reasons for the decision. If we require more time, and if an extension is permitted under your state law, we will inform you of the reason and extension period in writing. If your appeal is denied, you may lodge a complaint with the Attorney General in your state through his/her contact information available at: 

• Texas Attorney General 

• Nebraska Attorney General

Personal Information of Children

Oar understands the importance of protecting children’s privacy in the interactive online world. Our Website is not intended for individuals under 18 years of age. We do not knowingly collect Personal Information from anyone under 18. If you are under 18, you may not use the Website or provide any Personal Information on or through it. This includes registering for an account, using any interactive features, or submitting any Personal Information such as your name, address, telephone number, email address, screen name, or username.

If we learn that we have collected or received Personal Information from a child under 18, we will delete that information. If you believe we may have received Personal Information directly from a child under 18, please contact us at privacy@oarrx.com.

Changes to this State Specific Privacy Addendum

Oar reserves the right to amend this State Specific Privacy Addendum, and any state specific addenda, at our discretion and at any time. When we make changes to this State Specific Privacy Addendum or any state specific addenda, we will post the updated addendum on the Website and update the addendum’s last updated date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this State Specific Privacy Addendum, or any state specific addenda, the ways in which Oar collects and uses your information described above and in the Privacy Policy, your choices and rights regarding such use, or wish to exercise your rights, please do not hesitate to contact us at:

Phone: (201) 308-3120
Website: https://www.oarhealth.com 
Email: privacy@oarrx.com

Postal Address: 
Oar Health
10 Jay St, Suite 102
Brooklyn, NY 11201