ALLRANGEKIT PRIVACY NOTICE

Last Updated: July 23, 2025

AllrangeKit™ and its affiliates ("AllrangeKit™," "we," "us," or "our") are committed to protecting your privacy. This Privacy Notice ("Privacy Notice") explains how we collect, use, maintain, protect, and disclose information from and about you when you visit our websites, mobile applications, social media platforms, interactive features, or other services that link to this Notice (collectively, our "Platform").

IMPORTANT:

This Privacy Notice covers general personal information collected through our Platform. For information about how we handle your health information and laboratory test data, please see our HIPAA Notice of Privacy Practices. If you are using our at-home laboratory testing services, both this Privacy Notice and our HIPAA Notice apply to you.

Geographic Scope

Our Platform and Services are intended for users located in the United States. Individuals outside the United States should not use our Platforms or services. If you access the Platform from outside the U.S., you acknowledge and agree that your information may be transferred to, processed, and maintained in the United States where privacy laws may differ from your jurisdiction. By using the Platform or submitting information, you consent to this transfer and processing as described in this Notice.

State-Specific Disclosures

Residents of California, Colorado, Connecticut, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Montana, Oregon, Texas, Utah, and Virginia have additional rights detailed in Section 4 of this Notice. Residents of Nevada and Washington have additional rights described in our Consumer Health Data Privacy Notice.

Relationship to Health Information

When you use our at-home laboratory testing services, we collect both general personal information (covered by this Notice) and protected health information (covered by our HIPAA Notice of Privacy Practices). Examples of when the HIPAA Notice applies include:

When you register a test kit
When you complete health questionnaires
When you receive laboratory test results
When you communicate with healthcare providers through our Platform
When we process test orders and results

1. INFORMATION WE COLLECT AND HOW WE COLLECT IT

We collect both personal and non-personal information about you when you use our Platform.

Personal information is data that can identify, relate to, or be associated with a particular individual or household. We collect the following categories:

A. Information You Provide Directly:

Account Information: Name, email address, password, date of birth, phone number
Shipping Information: Mailing address, billing address
Payment Information: Credit/debit card details (processed by secure third-party processors)
Communication Information: Inquiries, feedback, support requests
User-Generated Content: Reviews, testimonials, forum posts (if applicable)
Employment Information: If you apply for jobs with us

B. Information Collected Automatically:

Device Information: IP address, browser type, operating system, device identifiers
Usage Information: Pages visited, features used, time spent, click data
Location Information: General location based on IP address
Cookie Information: As described in our Cookie Policy

C. Information Related to Our Services (Non-Health):

Purchase History: Products ordered, order numbers, shipping status
Account Activity: Login history, password changes, security settings
Marketing Preferences: Email subscriptions, communication preferences
Customer Service Interactions: Support tickets, call recordings (with notice)

Categories of Personal Information (for State Privacy Laws):

Information Category	Sources	Purposes	Disclosed for a Business Purpose	Shared With
Identifiers (name, email, IP address, address, phone number, or other similar identifier)	Directly from you, automatically	Service delivery, communications	Yes	Service providers, affiliates
Financial Info (credit card number, address, or other information related to billing or payment transaction)	Directly from you	Payment processing	Yes	Payment processors
Commercial Information (products or services purchased, obtained, considered, or other purchasing or consuming histories or tendencies)	Transactions, browsing	Analytics, service improvement	Yes	Analytics providers
Internet Activity (browsing history, search history, consumer’s interaction with an Internet website)	Automatic collection	Site optimization, security	Yes	Security/analytics providers
Geolocation	IP address	Service availability, compliance	Yes	Service providers
Inferences (drawn from any personal information collected to create a profile about a consumer reflecting the consumer’s preferences, psychological trends, characteristics, predispositions, behaviors)	Usage patterns	Personalization, marketing	Yes	Marketing partners (with consent)
Professional Info	Job applications submitted to AllrangeKit and its affiliates	Processing job applications and for internal employment decisions	Yes	HR service providers
Sensitive Personal Information (Identity Information, Personal Characteristics, Health or medical information, Location)	Directly from you, or Via application permissions	Service delivery and fulfillment, Customer support and communication, Business Operations, Legal and regulatory compliance	Yes	Service Partners, Employment Partners, Legal & Compliance

Children's Privacy

Our Platform and services are not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. By using the Platform, you confirm you are at least 18 years old. If we learn we have collected information from a child under 18, we will delete that information promptly.

2. HOW WE USE YOUR INFORMATION

Service Delivery:

Process orders for test kits and other products
Create and manage your account
Provide customer support
Send transactional communications (order confirmations, shipping updates)
Verify your identity and age

Business Operations:

Improve our Platform and services
Conduct analytics and research
Prevent fraud and enhance security
Comply with legal obligations
Process payments and prevent chargebacks

Communications:

Send service-related notices
Respond to your inquiries
Send marketing communications (with your consent)
Provide updates about our services

Legal and Safety:

Comply with applicable laws and regulations
Respond to legal requests and prevent harm
Enforce our Specific Terms Relating to Lab Services and Products
Protect our rights and property

NOTE:

The use of your health information, test results, and medical data is governed by our HIPAA Notice of Privacy Practices, not this Privacy Notice.

3. SHARING AND DISCLOSURE OF INFORMATION

Service Providers:

With vendors who help us operate our business, including:

Payment processors
Shipping and logistics companies
Email service providers
Cloud hosting services
Customer support platforms
Analytics providers
Marketing platforms

Healthcare Partners:

When you use our laboratory testing services, certain information is shared as described in our HIPAA Notice of Privacy Practices.

Legal Requirements:

When required by law, including:

Response to subpoenas or court orders
Compliance with government requests
Protection of our legal rights
Prevention of fraud or security threats

Business Transfers:

In connection with:

Mergers or acquisitions
Sale of company assets
Bankruptcy or reorganization
Business restructuring

With Your Consent:

When you explicitly agree to sharing
For marketing by third parties (only with opt-in consent)
When you post public reviews or testimonials

Aggregate Information: We may share de-identified or aggregated data that cannot identify you personally for business, research, or marketing purposes.

4. YOUR PRIVACY RIGHTS

Depending on your state of residence, you may have the following rights:

Right to Know/Access: Request information about the personal data we collect, use, and share
Right to Delete: Request deletion of your personal information (subject to exceptions)
Right to Correct: Request correction of inaccurate information
Right to Opt-Out: Opt-out of certain uses like targeted advertising or data sales
Right to Non-Discrimination: Not be discriminated against for exercising privacy rights
Right to Data Portability: Receive your data in a portable format (where applicable)

After you make a request to exercise any of the rights above,

We will verify your identity and you will need to confirm the information. We will verify your identity based upon information that you previously have provided. Where possible, we will use information we already hold about you in order to confirm that you are who you say you are.
We will confirm our receipt of your request within 10 days . If you have not received a response within a few days after that, please let us know by contacting us.
We will respond to your request within 45 days of receipt of the request, if possible. If necessary, we may need an additional period of time, up to another 45 days, but we will reply either way within the first 45-day period and, if we need an extension, we will explain why.

In certain cases, a request may be denied, for example, if we cannot verify your identity or if providing you the information could create an unreasonable risk to someone's security (for example, we do not want very sensitive information disclosed inappropriately). If we deny your request, we will explain why we denied it. If we deny a request, we will still try to provide you as much of the information as we can, but we will withhold the information subject to denial.

If you would like, you may designate an authorized individual or agent to make a request on your behalf. We will deny requests that do not evidence sufficient proof of authorization from you. To verify that an authorized individual or agent has authority to act for you, we may require a copy of a power of attorney or require that you provide the authorized agent with written permission and verify your own identity with us.

State-Specific Rights:

California residents: Additional rights under CCPA
Colorado, Connecticut, Utah, Virginia residents: Rights under respective state laws
Nevada residents: Right to opt-out of sale of personal information
All states: Right to opt-out of marketing communications

We will verify your identity before processing requests to protect your information.

5. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of data in transit and at rest
Secure servers and firewalls
Access controls and authentication
Regular security assessments
Employee training on data protection

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Your Responsibilities:

Keep your password confidential
Use strong, unique passwords
Log out when using shared devices
Notify us of any unauthorized access

6. DATA RETENTION

We retain your personal information for as long as necessary to:

Provide our services
Comply with legal obligations
Resolve disputes
Enforce our agreements
Meet business requirements

Specific retention periods:

Account information: Duration of account plus legal requirements
Transaction records: 7 years for tax/legal purposes
Marketing data: Until you opt-out plus suppression period
Platforn analytics: 26 months
Health information: As required by HIPAA (see HIPAA Notice)

7. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

Remember your preferences
Enable Platform functionality
Analyze usage patterns
Personalize content
Support advertising

For details on managing cookie preferences, see our Cookie Policy and Your Privacy Choices page.

8. THIRD-PARTY LINKS

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy notices before providing any information.

9. INTERNATIONAL TRANSFERS

We operate in the United States. If you access our Platform from outside the U.S., your information will be transferred to and processed in the U.S., which may have different privacy laws than your country.

10. CHANGES TO THIS NOTICE

We may update this Privacy Notice periodically. We will notify you of material changes by:

Posting the updated Notice on our Platform
Updating the "Last Updated" date
Sending email notification (for material changes)
Requiring acknowledgment where legally required

11. CONTACT US

For questions about this Privacy Notice or our privacy practices:

📧 Email: support@allrangekit.com

📞 Phone: +1 (608) 879-8173

📍 Mail: OPEN Healthcare, 1487 W 178th St., Gardena, CA 90248

ATTN: AllrangeKit™ Privacy Practice

For health information privacy questions:

See our HIPAA Notice of Privacy Practices

12. ADDITIONAL DISCLOSURES

For California Residents:

We do not sell or share personal information as defined under California Consumer Privacy Act (“CCPA”). We do not have actual knowledge of selling or sharing personal information of minors under 16.

Categories of information collected, sources, purposes, and disclosures are detailed in Section 1 above.

Shine the Light: California residents may request information about disclosures to third parties for direct marketing purposes. In general, if the business has made such a disclosure of personal information, upon receipt of a request by a California customer, the business is required to provide a list of all third parties to whom personal information was disclosed in the preceding calendar year, as well as a list of the categories of personal information that were disclosed. California customers may request further information about our compliance with this law by contacting us as set forth in Section 11 above.

For Nevada Residents:

Nevada residents may opt-out of the sale of covered information by contacting us at cs@ohcus.com or as detailed in Section 11 above.

Accessibility:

This Notice is available in alternative formats upon request for individuals with disabilities.