Health Privacy Policy

Last Updated: September 2, 2026

This Health Data Privacy Policy (“Policy”) describes how Beeline Medicines Corporation (“Beeline,” “we,” “us,” or “our”) collects, uses, and shares health data. In the event of a conflict between the Beeline Privacy Notice and this Policy, this Policy will control with respect to our processing of health data.

Categories of health data collected and how it is used:

Depending on your interaction with us, we may collect the following categories of health data about you:

Clinical trial interest and eligibility information. If you ask about or express interest in a clinical trial, we may collect the study or disease area, your country or location, preferred contact method, age range, health conditions, medical history, current or past treatments, and other information you choose to provide to assess whether you may meet stated eligibility criteria. We may use this information to answer your questions and route your inquiry to an authorized trial team or site.
Medical Information inquiries. When you contact our Medical Information team by email, phone, online form, or in person, we may collect your contact details, your question, the communication channel, the Beeline trial or disease area involved, and documents or other details you send.
Health and medical information. You may choose to share information about a condition, symptoms, diagnosis, medical history, treatment, dose, or other clinical details. We use it to understand your question, provide a relevant factual response, assess trial interest, investigate a quality or safety issue, or complete a required report.
Adverse events and special situations. We may collect the product name, dose, formulation, dates, description of the event, gender or year of birth, disease, other conditions, and other treatments. We may ask follow-up questions to understand what happened.

We may collect and use the above-mentioned categories of health data for the following purposes:

Medical Information responses and record keeping. We use the information you provide to respond to your inquiries. Beeline will save the information you provide to us, your medical inquiry, which channel you used to contact us through, what type of customer you are, which product and potentially the disease the question concerns. We will also log the response we provide to the inquiry. These data are collected for statistical purposes, for the company to inform information gaps and future research needs and for Beeline to be able to improve our communication and information about our products.
Safety, quality, and required reporting. We use the information you provide to determine whether additional regulatory reporting is required. We may provide required information to health or regulatory authorities.
Quality assurance and metrics. We review inquiry records, response quality and timing, safety and quality referrals, and the usefulness of standard response materials. We conduct periodic quality reviews. We track metrics to identify information gaps, improve communications, support research planning, and improve patient safety. We use aggregated or de-identified information where possible.
Business operations and protection. We use information to improve our products and services, create aggregated, de-identified, or anonymous statistics, plan our business, protect people and systems, detect fraud or misuse, manage our agreements, and meet reporting and recordkeeping responsibilities.
Complying with law, such as to comply with legal obligations and process and contractual obligations, as well as our policies and terms and conditions. We may also collect and use consumer health data as necessary to protect the rights and safety of us, our affiliates, you, or others, such as to:
- Prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or any activity that is illegal under applicable state or federal law;
- Preserve the integrity or security of our systems; and
- Investigate, report, or prosecute those responsible for any such action that is illegal under applicable state or federal law.

Categories of sources from which health data is collected:

We may collect consumer health data directly from you, as well as the following sources:

Healthcare providers
Health insurance companies (health plans) and other payors
Authorized/legal representatives, family members, and caregivers
Third parties and processors who provide website and online security services

Our sharing of health data:

We may share each of the categories of health data we collect about you with third parties and affiliates, such as:

Within Beeline. We share information with Beeline personnel and affiliated teams who need it for their role.
Service providers. We share information with providers that host our websites and systems, provide IT or support, deliver email, run analytics, support marketing, or help us provide services. We give them only what they need and require them to protect it and use it only to provide services for us.
Professional advisers. We may share information with lawyers, auditors, bankers, insurers, and other professional advisers when they need it for their work.
Business transfers. We may share information in connection with a merger, acquisition, sale, financing, reorganization, bankruptcy, or other transfer of some or all of our business or assets.
Authorities and others. We may share information with health or regulatory authorities, courts, law enforcement, or other persons when required, to protect health or safety, respond to a request, prevent harm or misuse, or protect our business and systems.
Authorized/legal representatives, family members, caregivers.

How to exercise your rights:

Subject to applicable exceptions, you may have certain rights regarding our processing of your health data under applicable law. You may exercise your rights under applicable law, including obtaining access to and requesting changes to your consumer health data by emailing us at [email protected].