Privacy Policy

Introduction & Scope

Parcel Health Inc. ("Parcel Health," "we," "us," or "our") appreciates your interest in our products and your visit to our websites, offices, or corporate events. We are committed to protecting your privacy, and we provide this notice to explain how we collect, use, disclose, and safeguard personal data.

This privacy policy applies to the websites, mobile applications, and social media profiles and pages operated by Parcel Health (together, the "Web Services"), to our Tully Tube text message reminder program (the "Reminder Program"), and to products delivered, services performed, or offerings made by Parcel Health (together, the "Products and Services"). It describes our processing of personal data relating to you:

• As a representative or contact person of our business customers, suppliers, contractors, and business prospects, including where you use our customer portals
• As a user of our Web Services, or a subscriber to our newsletter or other communications from us
• As a user of the Reminder Program, which sends medication reminder text messages to people who sign up with their mobile number
• As a participant in a corporate event organized by us (campaigns, conferences, customer events, and similar), or as a visitor to our offices or facilities ("Premises")

Parcel Health is based in the United States. Our Products and Services are offered to businesses in the United States, and the Reminder Program is offered to individuals with a United States mobile number. Our Web Services are not directed at individuals outside the United States.

This policy does not apply to personal data we process on behalf of our business customers under a separate written agreement, where those customers determine the purposes and means of processing. In those cases, the customer's own privacy notice governs, and you should direct requests to them.

Contents

1. How to contact us
2. Personal data we process
3. How we collect personal data
4. Why we process your personal data
5. Tully Tube text reminders (SMS)
6. Cookies and similar technologies
7. Who we share your personal data with
8. Where your personal data is processed
9. Security of your personal data
10. How long we keep your personal data
11. Your privacy rights
12. Notice for US state residents
13. Notice for visitors in the EEA and UK
14. Protected health information
15. Information about children
16. Social media widgets
17. External websites and linking
18. Changes to this policy
19. Disclaimer
20. Copyright

How to contact us

If you have questions or concerns about this privacy policy, our use of cookies, the Reminder Program, or any other privacy matter, please contact us:

Email: privacy@parcelhealth.co
Mail: Parcel Health Inc., 201 N Braddock Ave, Pittsburgh, PA 15208, United States

If you use the Reminder Program, you can also reply HELP to any reminder text for help, or STOP to stop all reminders.

If your request or question relates to an ongoing business relationship, you are also welcome to contact your regular Parcel Health point of contact, who will route it to the appropriate person.

Personal data we process

We collect the following categories of personal data, which you or your employer (as a business customer, supplier, contractor, or business prospect) may provide to us, or which we may collect automatically or from third parties:

Contact and identity data
Name, job title, employer, business email address, business phone number, mailing address, country.

Commercial and transaction data
Orders, quotes, purchase orders, shipping and delivery details, invoices and payment status, product interests, account and portal credentials.

Communications data
The content of messages, form submissions, emails, chat conversations, and call records or notes; your marketing preferences and subscription status.

Web Services usage data
IP address, device and browser type, operating system, referring URL, pages viewed, links clicked, time spent, approximate location derived from IP address, and similar analytics data collected through cookies and comparable technologies.

Marketing and engagement data
Email opens and clicks, campaign engagement, lead scores, event registration and attendance, and advertising interaction data.

Reminder Program data, where you sign up for text reminders: your mobile phone number, the dose times and number of days you choose, an optional nickname, your consent to receive texts (including the date, time, and method of sign-up), the replies you send (such as STOP, SNOOZE, TAKEN, and HELP), the doses you log as taken, and message delivery status. See Tully Tube text reminders (SMS).

Recruitment data, where you apply for a role with us: the information contained in your application, CV, and related correspondence.

Premises visit data, where you visit us in person: name, company, host, and time of visit.

Apart from the Reminder Program data described above, we do not intentionally collect sensitive personal information (such as health, biometric, racial or ethnic origin, or precise geolocation data) through the Web Services, and we ask that you not submit such information to us through our forms. The Reminder Program does not ask for your name, the names of your medications, or your medical conditions, and we ask that you not include them in a nickname or in replies.

How we collect personal data

We collect personal data about you when you:

• Fill in a contact, quote request, or content download form on one of our Web Services
• Request information about a product or service, or place an order
• Sign up to receive news, updates, or marketing communications
• Sign up for the Reminder Program, or reply to a reminder text
• Participate in or attend an event or campaign
• Apply for a job with Parcel Health
• Communicate with us, including via email, phone, text message, live chat, or social media
• Visit or use our Web Services, where certain information is collected automatically
• Visit our Premises in person

We may also receive personal data from third parties, including business contact and firmographic data from lead generation and data enrichment providers, referrals from partners, and publicly available professional sources such as company websites and professional networking platforms. We do not obtain Reminder Program data from third parties; it comes only from you.

Why we process your personal data

We process your personal data in order to:

• Respond to your enquiries, quote requests, and support requests
• Manage and perform our contracts with business customers, suppliers, and contractors, including order fulfillment, shipping, and invoicing
• Send the medication reminders you have asked for, and act on your replies
• Send newsletters and marketing communications, where you have subscribed or where permitted by applicable law
• Understand how visitors use our Web Services, and improve their performance and usability
• Deliver and measure the effectiveness of our advertising
• Improve our Products and Services and develop new offerings
• Secure our Web Services and prevent fraud and abuse
• Evaluate candidates who apply for roles with us
• Comply with our legal, tax, accounting, and regulatory obligations
• Establish, exercise, or defend legal claims

Analytics and advertising cookies are used only with your consent. Our cookie banner defaults these categories to off, and you may change or withdraw your choice at any time using the cookie preferences link in our website footer.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Tully Tube text reminders (SMS)

This section describes how we handle personal data in the Reminder Program. Where it differs from other sections of this policy, this section controls for Reminder Program data.

What the Reminder Program is

The Reminder Program is a free service that sends text messages to remind you to take a dose at the times you choose. There is no account or password. You control it entirely by replying to any reminder:

• STOP cancels every reminder. You will receive one final text confirming that you have been unsubscribed, and no further messages after that.
• SNOOZE sends the reminder again a short time later.
• TAKEN logs that dose for you.
• HELP sends you help information by text.

Message frequency varies with the dose schedule you set. Message and data rates may apply. The full program terms are in our Terms & Conditions.

What we ask for, and what we don't

We ask for your mobile number, your dose times, how many days you want reminders, and, if you like, a nickname to use in your texts. We never ask for your name, the names of your medications, or an account or password.

How we use Reminder Program data

We use Reminder Program data only to:

• Send the reminders you scheduled and respond to your replies
• Keep a record of your consent and of any opt-out, so that we honor your choices
• Operate, secure, troubleshoot, and improve the Reminder Program, including using de-identified, aggregated statistics (for example, how many reminders are snoozed)
• Comply with legal obligations and respond to lawful requests

We do not use Reminder Program data for advertising, marketing, or lead generation. We do not send marketing messages through the Reminder Program. We do not place advertising cookies, pixels, or tags on the pages used to sign up for or manage reminders.

Doses you log are private

When you reply TAKEN, that log is kept for you. We do not share it with your pharmacy, prescriber, health plan, employer, or anyone else, except with the service providers that operate the Reminder Program on our behalf (described below) or where the law requires it.

Mobile information is not shared for marketing

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with, sold to, or rented to any third party, affiliate, or lead generator. This applies regardless of anything else in this policy, including the sections on cookies and who we share personal data with.

We share Reminder Program data only with service providers that process it on our behalf to deliver the Reminder Program, such as our SMS provider (Twilio) and wireless carriers, our cloud hosting providers, and our workflow automation tools. These providers are contractually restricted from using the data for any other purpose.

Keeping and deleting Reminder Program data

When you reply STOP, or when your reminder period ends, we stop sending reminders. We delete your dose schedule, nickname, and dose logs within 30 days. We keep your mobile number and the record of your consent and opt-out for 4 years, solely so that we can honor your opt-out and demonstrate compliance with telecommunications law. You can ask us to delete your Reminder Program data at any time by emailing privacy@parcelhealth.co; we may keep a minimal opt-out record so that we do not text you again.

If you change or give up your mobile number, please reply STOP first, so that reminders are not sent to the number's next owner.

Cookies and similar technologies

What are cookies?

Cookies are small text files stored on your device by your web browser. They collect and store information about your interactions with websites, which can be used to enhance your experience, remember your preferences, and analyze browsing activity. We also use related technologies including pixels, tracking beacons, and local storage; we refer to all of these as "cookies" in this section.

Your choices

When you first visit our website, we present a consent banner. Analytics and marketing cookies are set to "off" by default and are only placed on your device after you opt in. Strictly necessary cookies do not require consent and cannot be disabled through the banner.

You can change or withdraw your cookie preferences at any time by clicking the cookie preferences link in our website footer.

Marketing cookies are not used on the pages used to sign up for or manage Reminder Program texts.

1. Strictly necessary cookies

These cookies are essential for the basic functionality and security of our website. Without them, the site would not work properly. They are set without your consent because the site cannot function otherwise.

2. Analytics and performance cookies

These cookies help us understand how visitors interact with our website so that we can improve its performance and usability. These are only set if you consent.

We use Google Analytics 4 and Google Tag Manager. We have enabled Google Consent Mode, so Google's tags do not store analytics or advertising identifiers until you opt in.

3. Marketing cookies

These cookies track visitors across websites so that advertising can be made more relevant, and so that we can measure the effectiveness of our campaigns. These are only set if you consent.

Because we operate the Meta Pixel and the LinkedIn Insight Tag, consenting to marketing cookies means personal data about your website visit may be shared with those platforms for cross-context behavioral advertising. This never includes Reminder Program data. See Notice for US state residents for how to opt out under applicable US state law.

Cookies set by Meta, LinkedIn, and Google are placed on those companies' own domains. Withdrawing consent stops further data collection through our website, but we cannot delete cookies stored under a third party's domain. You can manage those directly through your browser settings or the relevant platform's ad preferences.

Managing cookies in your browser

You can also manage or disable cookies through your browser settings. Note that disabling certain cookies may affect your ability to use some features of our website.

• Google Chrome: Settings → Privacy and security → Third-party cookies
• Safari: Settings → Privacy → Manage Website Data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Microsoft Edge: Settings → Cookies and site permissions

Some of the cookies we use are session cookies, which expire when you close your browser. Others are persistent cookies, which remain on your device until deleted or until they reach the expiration listed above.

Who we share your personal data with

We do not sell your personal data for money. We do not share mobile information or text messaging opt-in data and consent with third parties or affiliates for marketing or promotional purposes; see Tully Tube text reminders (SMS).

We share personal data with:

Parcel Health personnel. We restrict access to authorized employees, contractors, and agents who need it to perform their roles, and who are subject to confidentiality obligations.

Service providers and processors who process personal data on our behalf under written agreements that restrict their use of the data. Our principal categories and providers include:

Reminder Program data is shared only with the providers needed to operate the Reminder Program, and never with our advertising, CRM, or email marketing providers.

Business partners, such as distributors and fulfillment partners, where necessary to deliver Products and Services you have requested. Reminder Program data is not shared with business partners, including pharmacies that dispense in Tully Tubes.

Professional advisors, including lawyers, auditors, accountants, and insurers, where necessary for them to provide services to us.

Authorities and third parties, where we are required to do so by law, court order, or regulatory request, or where disclosure is necessary to establish, exercise, or defend legal claims, or to protect the rights, property, or safety of Parcel Health, our customers, or others.

Corporate transactions. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal data may be transferred as part of that transaction, subject to the protections described in this policy, including the restriction that Reminder Program data will not be used for marketing or promotional purposes.

Where you consent to marketing cookies, information about your website visit is shared with Meta, LinkedIn, and Google, which act as independent controllers for advertising purposes. Their own privacy policies govern their use of that data.

Where your personal data is processed

Parcel Health is based in the United States, and personal data we collect is stored and processed in the United States. Some of our service providers operate infrastructure or support functions in other countries, and personal data may be processed in those locations on our behalf under written agreements requiring appropriate safeguards.

If you access our Web Services from outside the United States, you understand that your personal data will be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.

Security of your personal data

We maintain appropriate organizational, technical, and contractual measures designed to protect personal data against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. These include encryption in transit, access controls and least-privilege permissions, multi-factor authentication on business systems, credential management, vendor security review, and staff security training.

Text messages are not encrypted end to end and can be read by anyone with access to your phone. This is one reason the Reminder Program does not ask for your name or medication names.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, please contact us immediately at privacy@parcelhealth.co.

How long we keep your personal data

We retain personal data only as long as necessary to fulfill the purposes described in this policy, or as required by applicable law.

Your privacy rights

Depending on where you live, you may have some or all of the following rights in relation to your personal data:

• Access — obtain confirmation of whether we process your personal data, and a copy of it
• Correction — correct inaccurate or incomplete personal data
• Deletion — request deletion of your personal data
• Portability — receive your personal data in a structured, commonly used, machine-readable format
• Opt out of targeted advertising — see Notice for US state residents
• Withdraw consent — withdraw consent at any time where processing is based on consent, including cookie consent and consent to receive reminder texts (reply STOP)
• Opt out of marketing — unsubscribe from marketing emails using the link in any message, or by contacting us
• Non-discrimination — not receive discriminatory treatment for exercising your rights

To exercise any of these rights, email privacy@parcelhealth.co. We will respond within the timeframe required by applicable law — generally 45 days under US state privacy laws, extendable where permitted.

We may need to verify your identity before acting on a request, typically by confirming that you control the email address or mobile number associated with the data. Authorized agents may submit requests on your behalf with written proof of authorization.

Notice for US state residents

This section applies to residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Washington, Nevada, and other US states with comprehensive or health-data privacy laws, and supplements the sections above.

Categories of personal information collected and disclosed

In the preceding 12 months, we have collected the categories of personal information described under Personal data we process, which map to the following statutory categories: identifiers; commercial information; internet or other electronic network activity information; professional or employment-related information; geolocation data (approximate, derived from IP address); inferences drawn from the foregoing (such as lead scores and product interest); and, for Reminder Program users, information that may be treated as health-related or consumer health data under some state laws (your dose schedule and dose logs).

We collect this information from the sources described under How we collect personal data, for the purposes described under Why we process your personal data, and we disclose it to the categories of recipients described under Who we share your personal data with.

We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.

Consumer health data

Reminder Program data may be considered "consumer health data" under laws such as Washington's My Health My Data Act and Nevada's consumer health data law. We collect it only with your consent, and only to provide the reminders you request, as described under Tully Tube text reminders (SMS). We do not sell it, use it for advertising, or share it except with the service providers that operate the Reminder Program. You may access or delete it, or withdraw your consent, by replying STOP or emailing privacy@parcelhealth.co.

Sale and sharing

We do not sell personal information for money. However, our use of the Meta Pixel, the LinkedIn Insight Tag, and Google advertising tags on our marketing website may constitute "sharing" for cross-context behavioral advertising under the California Consumer Privacy Act, or "targeted advertising" or a "sale" under other state laws, because information about your website visit is disclosed to those platforms. Reminder Program data is never sold or shared for advertising.

How to opt out of sharing and targeted advertising

You have the right to opt out. You can do so in any of these ways:

1. Decline or withdraw marketing cookie consent using our cookie banner, or the cookie preferences link in our website footer. This is the most direct method and takes effect immediately.
2. Use a Global Privacy Control (GPC) signal. We honor GPC signals transmitted by your browser or extension as a valid opt-out request for the browser in which they are sent.
3. Email us at privacy@parcelhealth.co with the subject line "Do Not Sell or Share My Personal Information."

We have not knowingly sold or shared the personal information of consumers under 16 years of age.

Additional state rights

Residents of applicable states also have the rights listed under Your privacy rights, including the right to know, delete, correct, and obtain a portable copy of their personal information, and the right to appeal a denial of a request. To appeal, reply to our decision or email privacy@parcelhealth.co with "Privacy Request Appeal" in the subject line. If your appeal is denied, you may contact your state Attorney General.

California "Shine the Light": California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. Send requests to privacy@parcelhealth.co.

Notice for visitors in the EEA and UK

Parcel Health does not offer Products and Services, including the Reminder Program, to individuals in the European Economic Area, the United Kingdom, or Switzerland, and our Web Services are not directed at those regions. We do not accept orders in EU or UK currencies, ship to those regions, send reminder texts to non-US numbers, or target advertising there.

If you visit our Web Services from one of those regions, the following applies:

• We rely on your consent for analytics and advertising cookies, which are off by default and which you may decline or withdraw at any time through our cookie banner or the cookie preferences link in our website footer. Declining does not affect your ability to use our Web Services.
• Personal data you provide will be transferred to and processed in the United States.
• You may request access to, correction of, or deletion of your personal data, and object to processing for direct marketing, by emailing privacy@parcelhealth.co. We will honor these requests regardless of your location.

If your organization is evaluating Parcel Health as a vendor and requires a data processing agreement or further information about our practices, please contact privacy@parcelhealth.co.

Protected health information

Parcel Health provides packaging products and related services to pharmacies, health systems, and other healthcare organizations. Our Web Services are not intended for the submission of protected health information (PHI) or patient data, and we ask that you do not submit PHI through our web forms, chat, or email.

Where Parcel Health receives PHI in the course of providing Products and Services to a covered entity or its business associate, that PHI is handled under a separate Business Associate Agreement and in accordance with HIPAA, not under this privacy policy.

The Reminder Program is offered by Parcel Health directly to you, not on behalf of your pharmacy, prescriber, or health plan. Information you give us for the Reminder Program is therefore generally not PHI under HIPAA. We protect it as described in this policy, including the commitments in Tully Tube text reminders (SMS).

Information about children

Our Web Services and Products and Services are directed at businesses, business professionals, and adults, not at children. The Reminder Program is available only to people aged 18 or older. A parent or caregiver aged 18 or older may sign up their own mobile number to receive reminders about doses for someone in their care. We do not knowingly collect personal data from children under 13.

If you believe we have collected information from a child, please contact privacy@parcelhealth.co and we will delete it.

Social media widgets

Our Web Services may use social media widgets and links that allow you to engage with our content on third-party platforms (LinkedIn, Facebook, Instagram, YouTube, X, and others). These third parties may collect information and set their own cookies. Please refer to the privacy policy of the relevant platform to understand how they process your data.

External websites and linking

Links from our websites

We link to other websites to offer you related and useful information. Those third-party websites are outside our control and are not covered by this privacy policy. If you access other websites using links we provide, the operators of those websites may collect your personal data. Parcel Health is not liable for personal data you submit to third-party websites. Your browsing and interaction on any third-party website or service is subject to that third party's own terms and policies.

External links to Parcel Health websites

Linking from an external website to a website owned and controlled by us is permitted only on the condition that the external website does not contain material that is unlawful, threatening, defamatory, obscene, scandalous, or profane, or that could constitute or encourage conduct that would be considered a criminal offense, give rise to civil liability, or otherwise violate any law. We assume no responsibility for the content or functionality of external websites not operated or controlled by Parcel Health.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, our technology, or legal and regulatory requirements. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will provide more prominent notice, such as a website banner or an email notification where appropriate. We will not use Reminder Program data in a materially different way than described here without first obtaining your consent. We encourage you to review this page periodically.

Disclaimer

We endeavor to keep the information on our websites accurate, including text, photographs, graphics, and figures. This information is provided "as is," and to the extent permitted by applicable law we disclaim all warranties, express or implied, regarding the completeness, accuracy, reliability, suitability, or availability of the website or its content for any purpose. We further disclaim any warranty that our websites are free from viruses or other contaminating or destructive elements.

Except as provided by applicable law, we do not accept responsibility for damage resulting from your use of, or inability to use, this site or any content, services, or materials provided on it.

Copyright

This website and all artwork, graphics, brochures, texts, photographs, packages, and technical specifications ("Content") displayed herein are the copyright and property of Parcel Health Inc. © 2026. All rights reserved.

You may not reproduce, republish, translate, or otherwise distribute any part of this website or the Content without written permission from the owner, except that you may make one copy or download to a local hard disk for your personal and non-commercial use only.

Any copies of the Content that have been duly and legally shared are made available by the owner on the condition that you will not alter or modify such Content, nor remove or change any proprietary notice on it.