Last Updated September 10, 2026

This notice supplements the CarebidetUSA Privacy Policy and describes how Connected Health Solutions, LLC, doing business as COHealth, handles consumer health data associated with CarebidetUSA.com, its forms, consultations, communications, and related services.

SECTION 1 SCOPE AND CONSUMER HEALTH DATA COLLECTED

This Consumer Health Data Privacy Notice explains how Connected Health Solutions, LLC, doing business as COHealth ("COHealth," "we," "us," or "our"), collects, uses, and discloses consumer health data.

Consumer health data generally means personal information that identifies or can reasonably be linked to an individual and that relates to or may reveal the individual's physical or mental health, bodily functions, medical condition, care needs, or efforts to obtain a health-related product or service.

Consumer health data is broader than medical records or information protected by HIPAA. Information may qualify as consumer health data even when it is provided directly by an individual rather than by a healthcare provider.

Categories We May Collect

Depending on how you interact with CarebidetUSA, we may collect:

• A general medical condition or care need that you voluntarily identify;

• Mobility limitations or bed-bound status;

• Toileting or transfer-assistance needs;

• Current toileting or care methods;

• The home, facility, hospice, rehabilitation, or other care setting;

• Information concerning the person for whom Carebidet information is requested;

• Information provided during a consultation, evaluation, support request, email, or telephone conversation;

• Product-support, safety, warranty, or quality-related information;

• Website activity that may indicate an interest in Carebidet or a particular health condition or care topic, including condition pages viewed, referral-page information, Internet Protocol address, device information, and cookie or analytics identifiers; and

• Other health- or care-related information you voluntarily provide.

The CarebidetUSA questionnaire requires only a first name and email address. Health- and care-related questions are optional and may be skipped.

COHealth does not request complete medical records through the questionnaire. We also do not intentionally request Social Security numbers, insurance identification numbers, payment-card information, genetic data, biometric identifiers, precise geolocation, or detailed reproductive or sexual-health information through the Website.

Please provide only the information reasonably necessary for COHealth to respond to your inquiry.

SECTION 2 SOURCES AND PURPOSES FOR COLLECTION

Sources of Consumer Health Data

COHealth may collect consumer health data:

• Directly from you through the CarebidetUSA questionnaire, contact forms, emails, telephone conversations, consultations, evaluations, training, and support requests;

• From a family member, caregiver, legal representative, healthcare professional, care manager, or organization acting with your authorization or seeking information on your behalf;

• From healthcare facilities, home-care organizations, insurers, government programs, or other organizations when you request or authorize the communication;

• Automatically when you visit or interact with CarebidetUSA.com, condition-related pages, embedded content, or online services; and

• From service providers that help COHealth operate its Website, forms, scheduling, communications, analytics, customer records, or training systems.

Why We Collect and Use Consumer Health Data

COHealth may collect and use consumer health data to:

• Respond to your inquiry or request;

• Provide general information about Carebidet;

• Help you, a caregiver, or a care team consider whether Carebidet may be appropriate for a particular situation;

• Schedule and conduct a requested consultation, demonstration, evaluation, or training activity;

• Coordinate requested assistance with a caregiver, healthcare professional, care organization, facility, insurer, financing resource, government program, or other authorized person;

• Provide product support and coordinate warranty service;

• Investigate and address product quality, performance, safety, or regulatory matters;

• Operate, secure, maintain, troubleshoot, and improve the Website, forms, communications, and related systems;

• Understand Website use and interest in Carebidet information;

• Maintain appropriate inquiry, support, safety, and business records;

• Protect against fraud, unauthorized access, misuse, or security incidents;

• Establish, exercise, or defend legal rights; and

• Comply with applicable legal, regulatory, reporting, or government requirements.

COHealth does not use consumer health data to make automated decisions concerning medical treatment, insurance eligibility, credit, employment, housing, or other similarly significant matters.

When required by applicable law, COHealth will obtain consent before collecting consumer health data for a purpose that is not reasonably necessary to provide a product, service, information, or assistance that you requested.

You may withdraw consent to future collection or use of optional consumer health data by contacting info@cohealth.solutions. Withdrawing consent does not affect processing that occurred before the withdrawal or information COHealth must retain for legally permitted purposes.

SECTION 3 SERVICE PROVIDERS AND PROCESSING

COHealth uses service providers to operate CarebidetUSA.com and respond to requests. Depending on the features used and the systems currently deployed, these providers may process consumer health data or information that could reveal an interest in Carebidet or a particular care topic.

These providers may include:

• Tally, which operates the CarebidetUSA questionnaire and processes the contact information, optional answers, and source-page information submitted through the form;

• Make, which routes form submissions between Tally, COHealth's email system, and other authorized systems;

• Microsoft, which provides COHealth's email, communications, document, and business-productivity services and receives restricted questionnaire-notification emails;

• HubSpot, which maintains limited contact, organizational, audience, and general inquiry information. COHealth does not intentionally place responses to optional health- and care-related questions into HubSpot unless appropriate sensitive-data functionality has been enabled;

• The Website's hosting provider (currently Railway), which hosts and operates the public Website and may process Website logs, Internet Protocol addresses, device information, and page activity;

• Google, if analytics or related services are enabled, which may process device, browser, referral, and Website-usage information;

• Vimeo, which hosts embedded videos and may process device, cookie, and video-interaction information;

• Calendly, which processes contact, scheduling, and meeting-request information;

• IONOS, where used for hosting, infrastructure, domains, or the training environment; and

• Moodle or MoodleCloud, where used for training accounts, course delivery, quizzes, progress records, and completion certificates.

Service providers may process information only to provide their services to COHealth or as otherwise described in their applicable terms and privacy notices. COHealth seeks to limit the information provided to each service provider to what is reasonably necessary for the applicable function.

The providers involved in a particular interaction depend on the Website features you use. COHealth may replace a provider or add another provider performing a similar function. We will update this notice when required if that change materially affects the collection, use, or disclosure of consumer health data.

COHealth does not currently have any affiliated company with unrestricted access to consumer health data. Curaco is a separate legal entity and is addressed in Section 4.

SECTION 4 DISCLOSURE TO CURACO AND OTHER THIRD PARTIES

Categories of Consumer Health Data We May Disclose

Depending on the circumstances, COHealth may disclose:

• Contact information linked to a Carebidet inquiry;

• General condition or care-need information;

• Mobility, bed-bound, toileting, transfer, or care-setting information;

• Consultation, evaluation, training, or support information;

• Product-performance, quality, safety, warranty, or regulatory information; and

• Communications and other information you ask or authorize us to provide.

Curaco

Curaco Inc. is the South Korean manufacturer of Carebidet and holds a minority ownership interest in COHealth. Curaco and COHealth are separate legal entities.

COHealth may disclose limited consumer health data to Curaco when reasonably necessary to:

• Provide technical or product support you requested;

• Investigate product operation or performance;

• Coordinate warranty assistance;

• Address quality or safety concerns;

• Satisfy regulatory or reporting responsibilities; or

• Provide another service you specifically requested.

COHealth will limit the information disclosed to what is reasonably necessary. When applicable law requires separate consent for a disclosure to Curaco, COHealth will obtain that consent before making the disclosure.

Care Providers and Organizations

At your request or with your authorization, COHealth may disclose information to a healthcare professional, caregiver, care manager, healthcare facility, home-care organization, hospice, rehabilitation facility, insurer, financing resource, government program, or another organization involved in evaluating or coordinating Carebidet.

Professional Advisers and Legal Recipients

COHealth may disclose information to attorneys, insurers, accountants, consultants, government authorities, courts, or other appropriate recipients when reasonably necessary to obtain professional advice, comply with law, protect legal rights, investigate security or fraud, or protect health and safety.

Business Transactions

Consumer health data may be transferred as part of an actual or proposed merger, acquisition, financing, investment, reorganization, bankruptcy, sale of assets, or similar transaction. Any recipient must handle the information as required by applicable law.

COHealth may disclose consumer health data to another person or organization when you request the disclosure, direct us to make it, or provide legally sufficient consent.

COHealth does not currently share consumer health data with an affiliated company for the affiliate's independent marketing or commercial purposes.

If a proposed disclosure is not reasonably necessary to provide something you requested, COHealth will obtain separate consent when required by applicable consumer-health-data law.

SECTION 5 NO SALE TARGETED ADVERTISING PROFILING OR GEOFENCING

COHealth does not:

• Sell consumer health data;

• Rent or trade consumer health data;

• Provide consumer health data to data brokers;

• Use consumer health data for cross-context behavioral or targeted advertising;

• Use consumer health data to create advertising profiles;

• Use consumer health data to make automated decisions concerning medical treatment, insurance, credit, employment, housing, or similarly significant matters;

• Use precise location information to identify or track visits to healthcare facilities; or

• Use geofencing technology around healthcare facilities to identify, track, collect information from, or send messages or advertisements to individuals.

COHealth may use limited Website analytics to understand Website traffic, page use, and performance. COHealth does not intentionally use condition-page visits, questionnaire answers, or other consumer health data for advertising personalization or remarketing.

If COHealth changes these practices, it will update this notice and obtain any consent or authorization required by applicable law before beginning the new activity.

SECTION 6 CONSUMER RIGHTS REQUESTS AND APPEALS

Your Consumer Health Data Rights

Subject to applicable law, you may request that COHealth:

• Confirm whether it is collecting, using, sharing, or selling consumer health data associated with you;

• Provide access to consumer health data associated with you;

• Provide a list of third parties or affiliates with which that data has been shared or sold, together with available contact information;

• Correct inaccurate information;

• Withdraw your consent to future collection, use, or disclosure;

• Delete consumer health data associated with you; or

• Stop a use or disclosure based on your consent.

COHealth does not sell consumer health data.

Submitting a Request

You may submit a request by emailing info@cohealth.solutions with the subject line Consumer Health Data Request or by calling +1-407-550-0301.

You do not need to create an account to submit a request. Please do not include detailed medical records, Social Security numbers, financial information, or other unnecessary sensitive information with your request.

COHealth may take reasonable steps to authenticate your identity and authority. If COHealth cannot reasonably authenticate a request, it may ask for additional information limited to what is necessary for verification.

An authorized agent may submit a request on your behalf. COHealth may request evidence of the agent's authority and may contact you directly to confirm the request.

Response Timing

COHealth will respond to a qualifying request without undue delay and generally within 45 days. When reasonably necessary, COHealth may extend the response period once by an additional 45 days and will provide notice of the extension and its reason during the initial response period.

Requests will generally be processed without charge. Where permitted by law, COHealth may charge a reasonable fee or decline to act on requests that are manifestly unfounded, excessive, or repetitive.

Deletion

When legally required to honor a deletion request, COHealth will delete the applicable consumer health data from its active records and notify relevant processors, contractors, affiliates, and third parties as required. Deletion from archived or backup systems may be delayed until those systems are restored or accessed, but will be completed within the period required by applicable law, which may be up to six months after authentication under Washington law.

Certain information may be retained when permitted or required for product safety, warranty, regulatory compliance, security, fraud prevention, legal claims, or other legally authorized purposes.

Appeals

If COHealth denies or does not fully act on your request, you may appeal by emailing info@cohealth.solutions with the subject line Consumer Health Data Appeal.

COHealth will respond to a qualifying appeal within 45 days and explain the decision in writing. If an appeal under Washington law is denied, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.

COHealth will not unlawfully discriminate against you for exercising an applicable consumer-health-data right.

SECTION 7 RETENTION SECURITY CHANGES AND CONTACT

Retention of Consumer Health Data

COHealth retains consumer health data only for as long as reasonably necessary to:

• Respond to and document an inquiry, consultation, evaluation, or support request;

• Provide requested product information or assistance;

• Address product support, quality, safety, warranty, or regulatory matters;

• Maintain appropriate business and communications records;

• Protect security and prevent fraud or misuse;

• Resolve disputes or protect legal rights; and

• Comply with applicable legal and recordkeeping obligations.

When consumer health data is no longer reasonably required, COHealth may delete, anonymize, or securely dispose of it, subject to applicable legal and operational requirements.

Security

COHealth uses reasonable administrative, technical, and physical safeguards designed to protect consumer health data against unauthorized access, loss, misuse, alteration, or disclosure. Access is limited to personnel and service providers who reasonably need the information for an authorized purpose.

No website, online form, email transmission, or electronic storage system can be guaranteed to be completely secure. If you believe consumer health data associated with you may have been accessed or used without authorization, contact COHealth promptly.

Changes to This Notice

COHealth may update this Consumer Health Data Privacy Notice to reflect changes in its Website, forms, services, providers, practices, or applicable legal requirements. The Last Updated date will identify the most recent revision.

COHealth will not begin collecting, using, or disclosing additional categories of consumer health data, or use existing data for materially different purposes, without providing any notice and obtaining any consent required by applicable law.

Contact COHealth

Questions, requests, withdrawals of consent, deletion requests, or appeals may be directed to:

Connected Health Solutions, LLC
Doing business as COHealth
Attention: Consumer Health Data Privacy
421 Montgomery Road, Suite 105
Altamonte Springs, Florida 32714
United States
Email: info@cohealth.solutions
Telephone: +1-407-550-0301

Consumer Health Data Privacy Notice