Privacy Policy Effective date: August 3, 2026 This privacy notice discloses the privacy policy and practices of Allergy Rescue Kit, a brand of Blue Star Medical Sales, LLC ("we," "us," or "our"), for the website www.allergyrescuekit.com (the "Site"). It applies solely to information collected by this Site. It will notify you of the following: 1. What information we collect from you through the Site, how it is used, and with whom it may be shared. 2. What choices are available to you regarding the use of your data. 3. The security procedures in place to protect against the misuse of your information. 4. How you can access, correct, or delete your information. By using the Site, you agree to the practices described in this policy. INFORMATION WE COLLECT Information you give us directly. We only collect the information you voluntarily provide — through our contact form, by email, or through other direct communication with us. Depending on what you send us, this may include: • Your name • Your email address and phone number • Your organization or institution (for example, a school, clinic, gym, or business) and your role there • A shipping or billing address, when you request a quote or place an order • The contents of your message, including any details you choose to share about your needs Information collected automatically. Our Site is hosted on Squarespace. Like most websites, it automatically records limited technical information when you visit, including your IP address, browser type and version, device type, referring page, the pages you view, and the dates and times of your visits. We use Squarespace's built-in analytics to understand general traffic patterns. We do not use third-party advertising trackers or retargeting pixels on this Site. Information we do not collect. We do not knowingly collect sensitive personal information through this Site. In particular: • We do not process payment card data on this Site. We sell by quote and invoice, not through an on-site checkout. Any payment you make is handled directly between you and your chosen payment method or your organization's purchasing process. • We do not collect medical or health records. Our products are storage cabinets for epinephrine auto-injectors. We are not a healthcare provider, we do not provide medical advice, and we do not ask for, want, or knowingly store patient, student, or employee health information. Please do not send us medical records or details about a specific individual's medical condition. HOW WE USE YOUR INFORMATION We use the information you provide to: • Respond to your inquiry, question, or quote request • Prepare, fulfill, and ship an order • Provide customer service and product support • Help schools and organizations identify programs for obtaining epinephrine, where you have asked us for that assistance • Keep records of our business communications and transactions • Improve the Site and understand how visitors use it • Comply with our legal and tax obligations Unless you ask us not to, we may contact you by email in the future to tell you about specials, new products or services, or changes to this privacy policy. HOW WE SHARE YOUR INFORMATION We will never sell or rent your information to anyone. We do not share your information with third parties for their own marketing purposes. We share information only in these limited circumstances: • Service providers. We use a small number of vendors to operate our business — our website host (Squarespace), our email provider, and shipping carriers. They receive only the information needed to perform their function for us, and they are not permitted to use it for their own purposes. • To fulfill your request. For example, we provide your shipping address to a carrier so your order can be delivered. • Legal requirements. We may disclose information if we are required to do so by law, subpoena, or court order, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others. • Business transfer. If our business is sold or transferred, customer information may be transferred as part of that transaction. We would notify you of any such change and of any change to how your information is handled. COOKIES AND ANALYTICS Cookies are small files placed on your device that let a site remember information about your visit. Our Site uses: • Essential cookies, set by Squarespace, which are required for the Site to function and for basic security. • Analytics cookies, which help us understand aggregate traffic — such as which pages are most visited and roughly where visitors come from. You can set your browser to refuse cookies or to alert you when cookies are being sent. If you disable cookies, some parts of the Site may not function correctly. We do not currently respond to browser "Do Not Track" signals, as no common standard for them has been adopted. EMAIL AND YOUR CHOICES You may opt out of any future contact from us at any time. To unsubscribe, either use the unsubscribe link in any marketing email we send you, or email us at info@allergyrescuekit.com and ask to be removed. We will honor the request promptly. Note that even if you opt out of marketing email, we may still need to contact you about an active order, quote, or support request. YOUR ACCESS TO AND CONTROL OVER YOUR INFORMATION You can do any of the following at any time by contacting us at info@allergyrescuekit.com: • See what data we have about you, if any • Change or correct any data we have about you • Have us delete any data we have about you • Ask us to stop contacting you • Express any concern you have about our use of your data We will respond to these requests within a reasonable period, and we will not discriminate against you for making one. We may need to verify your identity before acting on a request, and we may retain certain records where we are legally required to do so — for example, invoices needed for tax purposes. California residents. If you are a California resident, you have the right to know what personal information we have collected about you, to request its deletion, and to request that we correct inaccurate information. We do not sell or share personal information as those terms are defined under California law. You may exercise these rights using the contact address above. Visitors outside the United States. We operate from Michigan, in the United States, and information you send us will be stored and processed in the United States. If you are contacting us from a jurisdiction with different data protection laws, please be aware of this before sending us your information. If you are in the EEA or the UK and would like to exercise rights available to you under local law, contact us and we will do our best to accommodate the request. SCHOOLS AND INSTITUTIONAL CUSTOMERS We work with schools, districts, and other organizations. When we do, our contact is with adult staff — administrators, nurses, facilities managers, and purchasing personnel. We do not request or knowingly collect information about students, and we ask that institutional customers not send us student records, rosters, or health information. CHILDREN'S PRIVACY This Site is intended for adults purchasing on behalf of themselves or an organization. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at info@allergyrescuekit.com and we will delete it. DATA RETENTION We keep the information you send us only as long as we need it for the purpose it was provided — to answer your question, complete your order, or support you afterward — and as long as required to meet our legal, accounting, and tax obligations. When we no longer need it, we delete it or render it unreadable. SECURITY We take precautions to protect your information both online and offline. Information you submit through the Site is encrypted in transit. You can verify this by looking for a lock icon in the address bar, or for "https" at the beginning of the page address. Offline, only people who need the information to perform a specific job — for example, customer service, order fulfillment, or billing — are granted access to personally identifiable information. The computers and servers on which we store personally identifiable information are kept in a secure environment. No method of transmitting or storing data is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law. LINKS TO OTHER SITES Our Site may contain links to other websites, including manufacturers, suppliers, and public health resources. We are not responsible for the content or privacy practices of those sites. We encourage you to read the privacy policy of any site you visit from ours. CHANGES TO THIS POLICY We may update this privacy policy from time to time as our business or the law changes. When we do, we will revise the effective date at the top of this page. Material changes will be communicated to you by email or by a notice on the Site. We encourage you to review this page periodically. CONTACT US If you have any questions or concerns about this policy, or about how we handle your information, please contact us: Blue Star Medical Sales, LLC d/b/a Allergy Rescue Kit United States Email: info@allergyrescuekit.com Web: www.allergyrescuekit.com If you believe we are not abiding by this privacy policy, please contact us at the address above so we can address it directly.