Consumer Health Data Privacy Notice

Biotia, Inc. ("Biotia," "we," "us," or "our") is a life sciences company committed to protecting and respecting your privacy and personal information. This Consumer Health Data Privacy Notice (this "Notice") explains our practices for handling information we may collect and use about website visitors, prospective customers, researchers, institutional partners, and others with whom we interact in making our website, www.biotia.io, which includes our e-commerce store and patient portal (collectively, the "Website"), available. This Notice primarily applies to individuals who interact with Biotia in a direct-to-consumer capacity and who may be a customer or prospective customer of Biotia.

Please read this Notice carefully before providing us with your consumer health data so you understand our practices regarding your consumer health data.

This Notice is provided pursuant to the Washington My Health My Data Act (RCW 19.373.005 to 19.373.900) and similar U.S. laws. The laws of your state or country of residence may not regulate our handling of your consumer health data. As such, you may or may not be entitled to exercise or receive the rights and information described herein.

Relationship to HIPAA and Other Health Privacy Laws

Biotia's DTC testing services are offered directly to consumers and are generally not covered by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") because such services do not involve HIPAA-covered transactions. However, if Biotia partners with healthcare providers or health plans, or if you submit test results to your healthcare provider, HIPAA may apply to certain of those interactions, which is outside the scope of this Notice. This Notice governs Biotia's handling of consumer health data outside of any HIPAA-covered context. If you have questions about how your healthcare provider handles your information, please contact them directly.

Categories of Consumer Health Data We Collect

"Consumer health data" is any personal information that is linked or reasonably linkable to a "consumer" (as that term is defined in applicable laws, but often meaning a resident of the state to which the law pertains) and that identifies the consumer's past, present, or future physical or mental health status.

When you visit our informational website at biotia.io, we may collect consumer health data that can be inferred from your browsing activity or that is directly provided by you in response to a survey or quiz, including:

• Interest in specific health conditions, diseases, or diagnoses based on pages viewed or content accessed;
• The specifics of any current or frequent health conditions;
• Search queries related to diagnostic testing, symptoms, or treatment options;
• Information indicating interest in our direct-to-consumer (DTC) testing services or related healthcare services.

When you purchase and use one of our diagnostic test kits, we collect sensitive consumer health data, including:

• Biological Samples: We collect biological samples that you provide using our test kits (such as urine, saliva, blood, swabs, or other specimen types, depending on the test). These biological samples are consumer health data under applicable law and are processed at our laboratory facilities for analysis.
• Diagnostic and Laboratory Results: We generate diagnostic test results from the analysis of your samples, which may include identification of pathogens, biomarkers, genetic variants, or other clinically relevant findings depending on the type of test.
• Account and Order Information: We collect information you provide when creating an account, purchasing a test kit, or submitting a sample, including your name, contact information, date of birth, shipping address, and payment information.
• Health History and Symptoms: We may collect information about your symptoms, health history, or other health-related information you provide when using our testing service, such as through intake questionnaires.
• Genomic or Sequencing Data: Depending on the test, our laboratory analysis may generate genomic, microbial, or other sequencing data from your sample.

How We Collect Consumer Health Data

When you visit our informational website, we collect consumer health data:

• Directly from you: When you create an account, subscribe to newsletters, complete a quiz, fill out contact forms, or otherwise voluntarily provide information to us.
• Automatically: Through cookies, pixels, and similar tracking technologies that collect information about your browsing behavior, pages visited, search queries, and interactions with our website content. This may include information that reveals health interests based on the content you access.
• From third parties: From analytics providers and advertising partners who provide us with information about website visitors.

When you purchase and use one of our diagnostic test kits, we collect consumer health data:

• Directly from you: When you create an account, place an order for a test kit, complete intake questionnaires about your symptoms or health history, and provide contact and payment information.
• From your biological sample: When you submit your biological sample using our test kit. The sample is shipped to our laboratory facilities where it is processed and analyzed to generate diagnostic results, which may include pathogen identification, biomarker analysis, genetic sequencing, or other testing methodologies depending on the test.
• Through our laboratory analysis: Our laboratory generates diagnostic test results based on analysis of your sample, which constitutes consumer health data that we create about you.
• From your communications with us: When you contact our customer support team with questions about your test results or our services, or when you provide feedback or participate in surveys.

How We Use Consumer Health Data

Biotia uses the consumer health data we collect for the following purposes:

• Processing your biological sample at our laboratory facilities and generating diagnostic test results;
• Delivering test results to you through your account portal, email, or other communication methods you select;
• Fulfilling orders for test kits, processing payments, and arranging shipping and logistics;
• Providing customer support and responding to your inquiries about your test results or our services;
• Analyzing website traffic, user behavior, and engagement to improve our informational website and services;
• Preventing fraud, detecting security threats, and protecting the integrity of our systems and services;
• Complying with applicable legal obligations, including laboratory licensing requirements, quality assurance standards, and responding to valid legal process.

In addition to the above, Biotia may, with your consent, collect and use your consumer health data for marketing Biotia's products and services, including sending promotional communications. When data is collected and used for this purpose via the deployment of automated data collection technologies on our Website, we will first obtain your consent to such data collection and disclosure practices. Note, however, that we may not actually disclose your consumer health data for marketing or targeted advertising purposes, even if we have your consent to do so.

How We Share Your Consumer Health Data

Biotia may share your consumer health data with the following categories of recipients:

Service Providers

We share consumer health data with vendors and service providers who process information on our behalf, including:

• Laboratory partners and testing facilities that assist with sample processing and analysis;
• Shipping and logistics providers who transport test kits and biological samples;
• Cloud hosting, data storage, and IT infrastructure providers;
• Payment processors and financial services providers;
• Customer service and communications platforms.

Third Parties

With your consent, we may share your consumer health data with:

• Healthcare providers you designate to receive your test results;
• Marketing partners, only for data collected through our informational website, not for data from our DTC testing service.

Legal, Transactional, and Regulatory Disclosures

We may disclose consumer health data without your consent when required or permitted by law, including:

• To comply with valid legal process, such as a court order, subpoena, or regulatory investigation;
• To report certain test results or other public health information to state or federal health authorities as required by law;
• To protect the safety of individuals or the public;
• In connection with a merger, acquisition, bankruptcy, or other corporate transaction involving Biotia's assets.

How You Can Exercise Your Rights

Subject to certain exceptions, the laws of your state of residence may afford you the right to:

1. Confirm whether Biotia is collecting, sharing, or selling your consumer health data and to access such data, including a list of all third parties and affiliates with whom Biotia has shared or sold the consumer health data.
2. Withdraw consent from the collection or sharing of your consumer health data.
3. Delete your consumer health data.

Where the collection or use of your consumer health data is necessary for us to provide a product or service you have requested from us, we may collect and use your consumer health data without your consent. If we collect or use your consumer health data for other purposes, however, we will obtain your consent for such processing, where the law requires us to do so. Where consent is the basis for processing your consumer health data and where law permits, you have the right to withdraw your consent to such processing.

How to Exercise Your Rights

To exercise any of the rights described above, you may: (1) log into your account and use the privacy settings available in your account dashboard; or (2) contact us at privacy@biotia.io.

For consumer health data collected from you through our use of automatic technologies on our Website, you can withdraw your consent to processing for certain purposes by configuring your Cookie Preferences accordingly. Your actions only apply to the browser or device you are using to interact with our Website and not to other devices or browsers. If you clear your cookies or change your preferences on a particular browser or device, or use another browser or device to interact with our Website, you may need to withdraw consent using these tools again.

We will verify your identity before processing your request. For requests related to DTC testing data, we may require you to verify your identity through your account credentials or by providing information that matches our records. We will respond to your request within 45 days of receipt, though we may extend this period by an additional 45 days if reasonably necessary, in which case we will notify you of the extension.

If we deny your request, we will explain the reason for the denial. You may appeal a denial by contacting us at privacy@biotia.io. If your appeal is unsuccessful, you may file a complaint with your state's attorney general or other applicable regulatory authority (e.g., for Washington residents, the Washington State Attorney General at www.atg.wa.gov/file-complaint).

Changes to This Notice

We may update this Notice periodically to reflect changes to our privacy practices or applicable laws. If we make material changes to how we collect, use, or share your consumer health data, we will notify you by email (if you have an account with us) or by posting a prominent notice on our Website prior to the changes taking effect. The "Last Updated" date at the top of this Notice indicates when it was last revised.

Contact Us

If you have questions about this Notice, our privacy practices, or wish to exercise your rights regarding your consumer health data, please contact us at:

Biotia, Inc.

Email: privacy@biotia.io

Postal Address: 30-02 48th Ave, Suite 260, Long Island City, NY 11101

Phone: +1 (917) 730-1829