Last modified: May 7, 2025

This Consumer Health Personal Data Privacy Policy describes Recordati Rare Diseases’ (“RRD,” “we,” “us,” or “our”) privacy practices for “consumer health personal data” as defined under applicable U.S. state laws.

Consumer health data is any data that is linked or reasonably linkable to a specific individual and that identifies that individual’s past, present, or future physical or mental health status that Company collects or controls the collection of (“consumer health data”).

This Policy applies to the sites, products, applications, platforms, or other services linking to this Policy. This Policy does not apply to any sites, products, applications, platforms, or other services not directly linking to this Policy.

Please read this Policy carefully to understand our policies and practices regarding your consumer health data and how we will treat it. If you do not agree with our policies and practices, you should not use the sites, products, applications, platforms, or other services linking to this Policy.

Other privacy policy may apply to your personal information that is not consumer health data or if you live in a state that does not have a consumer health data privacy law.  To view our privacy policy describing how we treat other personal information, visit https://www.recordatirarediseases.com/us/privacy-policy.

Consumer Health Data We May Collect About You

We collect and use different types of consumer health data from and about you, including:

• Information about any of the following:
• individual health conditions, treatment, diseases, or diagnoses;
• diagnostic testing, treatment, or medication;
• >use or purchase of prescribed medication;
• social, psychological, behavioral, or medical interventions;
• health-related surgeries and procedures;
• bodily functions, vital signs, symptoms, or measurements of physical or mental health status.
• Data identifying a consumer seeking health care services. Health care services means any service provided to a person to assess, measure, improve, or learn about a person’s mental or physical health, including but not limited to:
• individual health conditions, status, diseases, or diagnoses;
• social, psychological, behavioral, and medical interventions;
• use or purchase of medication;
• diagnoses or diagnostic testing, treatment, or medication; or
• an IP address, a device identifier
• Any inferences of the above categories derived, extrapolated, or inferred from non-health information.

We use these categories of consumer health data for the following purposes:

• Fulfilling the purposes for which you provided the data or that were described when it was collected.
• Performing the services or providing the goods that you request from us and responding to your questions or requests for information.
• Improving our products and services.
• Notifying you about changes to our sites, applications, products, or services
• Facilitating services and operations performance, security, and integrity, including:
• undertaking activities to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted consumer health data or that otherwise threaten to compromise the performance, security, or integrity of our business; and
• performance analytics, identity verification and authorization, site and application optimization, and quality control.
• Recordkeeping and auditing.
• Complying with our legal obligations and risk management, audit, investigations and reporting, and other legal and compliance reasons.

Consumer Health Data Sources

We collect consumer health data from the following sources:

• You, including when you request certain health-related products and services, and sign up for email lists or programs.
• Your device when you visit or interact with our sites, applications, or services, including through cookies, web beacons, and similar technologies that automatically send us information when you browse, use, visit, or otherwise interact with our sites, applications, or services.
• Authorized/legal representatives, family members, and caregivers.

Consumer Health Data Disclosures

We do not sell your consumer health data.

We may disclose any of the consumer health data categories listed above to processors, service providers, and contractors that help us provide products and services to you.

We instruct these processors, service providers, and contractors to only use consumer health data as permitted by our contracts with them and consistent with applicable law.

We may also disclose consumer health data as permitted by applicable law, including:

• With your consent.
• To prevent, detect, protect from, or respond to security incidents, identity theft, fraud, harassment, or malicious or deceptive activities.
• To a third party acquiring our assets if Company sells its business or otherwise is part of a merger, acquisition, bankruptcy, or other transaction involving a third party taking control of our assets or business.
• To investigate, report, or take legal action to protect our rights, property, and safety and the rights, property, and safety of others.
• To protect your or others’ vital interests, including health and safety.

Your Privacy Rights

You have specific rights with respect to your consumer health data. You have the right to:

• Request confirmation that we collect, share, or sell your consumer health data.
• Request access to your consumer health data that we have collected or control, including:
• a list of all third parties and affiliates that we have shared or sold your consumer health data to; and
• the email addresses or other online method to contact those third parties and affiliates.
• Withdraw your consent for our collection and sharing of your consumer health data.
• Request that we delete your consumer health data.

Contact Information

To exercise any of your rights, or to make an inquiry or comment about this Policy or our privacy practices, contact us at: or via our toll-free number: 877-408-1435