Effective: May 25, 2026

Last Updated: May 25, 2026

1. Introduction and Scope Bridging Care LLC (“Bridging Care,” “we,” “us,” or “our”) is a Washington State care coordination organization headquartered at 1010 S. 336th Street, Suite 106, Federal Way, WA 98003. We are committed to protecting the privacy and security of the personal information you share with us. This Privacy Policy (“Policy”) describes how Bridging Care collects, uses, shares, and protects personal information obtained through our website at https://bridging.care (the “Site”), including through appointment scheduling tools, intake and contact forms, and digital marketing and analytics technologies. This Policy does not govern information we collect in our capacity as a HIPAA-covered entity or business associate through direct care coordination services, which is addressed separately in our Notice of Privacy Practices. This Policy applies to all visitors, prospective members, and others who interact with the Site (“Users”). By using the Site, you agree to the collection and use of information in accordance with this Policy.

2. Information We Collect A. Information You Provide Directly We collect information you voluntarily submit through the Site, including through: • Intake and Contact Forms: When you submit a contact or inquiry form, we may collect your name, email address, phone number, general location, the nature of your inquiry, and any other information you choose to provide. • Appointment Scheduling: When you request an appointment through our scheduling tool (currently Microsoft Bookings, with potential integration of Calendly or similar calendar-embedding platforms in the future), we collect your name, email address, phone number, preferred appointment date and time, and related scheduling details. Please do not submit Protected Health Information (PHI) as defined under HIPAA through the Site’s general forms or scheduling tools, as these are not designed or intended for the secure transmission of clinical information. B. Information Collected Automatically When you visit the Site, we and our third-party partners automatically collect certain technical and behavioral information about your device and browsing activity using cookies, pixels, tags, and similar tracking technologies. This information may include: • IP address and approximate geographic location; • Browser type, version, and operating system; • Pages visited, time spent on pages, and navigation paths through the Site; • Referring URLs and search terms used to find the Site; • Device identifiers and advertising identifiers; • Clicks, interactions, and conversion events; and • Session data and engagement metrics. This automatically collected data is used internally by Bridging Care for marketing analytics, advertising performance measurement, and website optimization. We do not offer these tracking tools to website visitors for their own use.

3. Tracking Technologies and Third-Party Marketing Platforms Bridging Care uses the following third-party platforms and technologies on the Site. Each of these services may independently collect data subject to their own privacy policies, which we encourage you to review: A. Meta Pixel (Meta Platforms, Inc.) We use Meta Pixel, a code snippet provided by Meta Platforms, Inc. (formerly Facebook), to measure the effectiveness of our advertising on Facebook and Instagram, to build and optimize advertising audiences, and to understand how visitors interact with the Site after clicking one of our ads. Meta Pixel may collect your IP address, browser information, and behavioral data about pages you view and actions you take on the Site. This data may be used by Meta to serve you targeted advertisements on Meta’s platforms. Meta’s data practices are governed by the Meta Privacy Policy, available at https://www.facebook.com/privacy/policy/. You may opt out of Meta’s use of your data for advertising purposes through Meta’s Ad Preferences settings. B. Google Ads We use Google Ads (Google LLC) to advertise Bridging Care’s services in Google Search results and across Google’s advertising network. Google Ads uses cookies and tracking technologies to measure ad performance and attribute conversions (such as appointment requests or form submissions) to specific ad campaigns. Google’s privacy practices are governed by the Google Privacy Policy, available at https://policies.google.com/privacy. You may opt out of personalized advertising by visiting https://adssettings.google.com. C. Google Analytics We use Google Analytics (Google LLC) to analyze how visitors use the Site, including which pages are most visited, how long visitors stay, and where visitors come from. Google Analytics collects data through cookies and may associate this data with other information Google holds about you if you are signed into a Google account. We use this data solely for internal website performance analysis and marketing optimization. Google’s use of analytics data is governed by Google’s Privacy Policy. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-On, available at https://tools.google.com/dlpage/gaoptout. D. Google Tag Manager We use Google Tag Manager (Google LLC) to manage and deploy marketing and analytics tags (including the Meta Pixel, Google Ads tags, and Google Analytics) on the Site without modifying underlying site code directly. Google Tag Manager itself does not collect personal information, but it facilitates the operation of the other tracking tools described in this section. E. Google Search Console We use Google Search Console (Google LLC) to monitor the Site’s performance in Google Search, including which search queries lead users to the Site, click-through rates, and indexing status. Google Search Console does not collect personal information about individual Site visitors directly; it provides aggregate search performance data to Bridging Care for internal use. F. Onepage (Website Platform Analytics) Our website is built and hosted on the Onepage platform, which includes its own built-in analytics capabilities. Onepage may collect technical and behavioral data about Site visitors, including page views, session duration, and device information, in connection with hosting and operating the Site. This data is used by Bridging Care internally for website performance monitoring. Please refer to Onepage’s privacy policy for information about their independent data practices. G. Semrush We currently use Semrush for search engine optimization (SEO) analysis, keyword research, and digital marketing intelligence. Semrush operates primarily as an internal analytical tool and does not place tracking code on the Site that collects personal information from individual visitors. We may transition from Semrush to alternative SEO tooling (including Claude Code) in the future, at which time this Policy will be updated accordingly. H. Appointment Scheduling Platforms We currently use Microsoft Bookings to enable visitors to request and schedule appointments through the Site. We may in the future integrate additional scheduling platforms, such as Calendly, by embedding calendar widgets directly on the Site. When you use a scheduling tool, your appointment data is collected and processed by both Bridging Care and the applicable scheduling platform. Please review the privacy policy of the applicable scheduling service for information about how your data is handled by that third party.

4. Cookies and Your Choices Cookies are small text files placed on your device by websites you visit. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period). Cookies help us remember your preferences, analyze Site traffic, and deliver relevant advertising. You may control cookies through your browser settings. Most browsers allow you to refuse cookies or to be notified when a cookie is set. Please note that disabling cookies may affect the functionality of the Site. In addition to browser settings, you may use the following opt-out mechanisms: • Google Analytics Opt-Out: https://tools.google.com/dlpage/gaoptout • Google Ads Settings: https://adssettings.google.com • Meta Ad Preferences: https://www.facebook.com/ads/preferences • Network Advertising Initiative Opt-Out: https://optout.networkadvertising.org • Digital Advertising Alliance Opt-Out: https://optout.aboutads.info Washington State residents may have additional rights regarding the use of their data for targeted advertising under the Washington My Health MY Data Act and the Washington Privacy Act, as described in Section 7 below.

5. How We Use the Information We Collect Bridging Care uses the information collected through the Site for the following purposes: • To respond to your inquiries, contact form submissions, and appointment requests; • To schedule and confirm appointments through Microsoft Bookings or other scheduling platforms; • To measure the performance of our digital advertising campaigns on Google Ads and Meta platforms and to optimize our marketing spend; • To analyze Site traffic and user behavior to improve the design, content, and functionality of the Site; • To conduct search engine optimization and keyword analysis using tools such as Semrush; • To comply with applicable legal obligations, including state and federal healthcare regulations; • To protect the security and integrity of the Site and our systems; and • To communicate with you about our services, programs, and updates, where you have not opted out of such communications. We do not sell your personal information to third parties. We do not use the information collected through the Site to make automated decisions that produce legal or similarly significant effects on you without human review.

6. How We Share Information We may share your information with the following categories of recipients: • Service Providers and Technology Vendors: We share information with third-party vendors who provide services on our behalf, including the marketing and analytics platforms described in Section 3 (Meta, Google, Onepage, Microsoft, Calendly, and Semrush). These parties are permitted to use your information only as necessary to provide services to us. • Managed Care Organization Partners: To the extent you are an existing or prospective Health Home program participant, we may coordinate with your managed care organization (such as Molina Healthcare, UnitedHealthcare, Coordinated Care, Community Health Plan of Washington, or Wellpoint) as permitted by applicable law and our Notice of Privacy Practices. • Legal and Regulatory Authorities: We may disclose information when required to do so by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others. • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections. We do not share your personal information with third parties for those parties’ own independent marketing purposes without your consent.

7. Washington State Privacy Rights A. Washington My Health MY Data Act (RCW Chapter 70.372) The Washington My Health MY Data Act (“My Health MY Data Act”) grants Washington State consumers enhanced rights with respect to their consumer health data. To the extent that any data collected through the Site constitutes “consumer health data” under the Act, you have the right to: • Know what consumer health data we collect about you and the purposes for which it is collected; • Access the consumer health data we hold about you; • Withdraw consent for the collection and sharing of your consumer health data; • Request deletion of your consumer health data; and • Have your consumer health data not shared with third parties for targeted advertising without your affirmative consent. We will not use geofencing or other proximity-based technologies around healthcare facilities to collect consumer health data. To exercise your rights under the My Health MY Data Act, please contact us as described in Section 10. B. Washington Privacy Act (RCW Chapter 19.375) Washington State residents may also have rights under the Washington Privacy Act, including the right to access, correct, delete, and obtain a copy of personal data we process about you, and the right to opt out of the processing of personal data for purposes of targeted advertising. To submit a privacy rights request, please contact us as set forth in Section 10. We will respond to verifiable requests within 45 days, with the possibility of a 45-day extension where reasonably necessary. C. Children’s Privacy The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete such information. If you believe we may have collected information from a child under 13, please contact us immediately.

8. Data Retention We retain personal information collected through the Site for as long as necessary to fulfill the purposes described in this Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. Appointment and contact form data is generally retained for six (6) years unless a longer retention period is required by applicable law or regulation. Marketing and analytics data collected through third-party platforms is retained in accordance with the applicable platform’s data retention practices and our account settings with those platforms.

9. Data Security Bridging Care implements reasonable administrative, technical, and physical safeguards designed to protect personal information collected through the Site against unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. We strongly advise you not to submit sensitive health information, Social Security numbers, insurance information, or other highly sensitive data through the Site’s general contact forms or scheduling tools, as these are not designed for secure clinical communications.

10. How to Contact Us / Exercise Your Rights To ask questions about this Policy, exercise your privacy rights under Washington State law, opt out of marketing communications, or submit a complaint, please contact us: Bridging Care LLC — Privacy Inquiries 1010 S. 336th Street, Suite 106 Federal Way, WA 98003 Phone: (844) 224-3578 Email: info@bridging.care Website: https://bridging.care/contact We will acknowledge your request within 10 business days and provide a substantive response within the timeframes required by applicable Washington State law.

11. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will update the “Last Updated” date at the top of this Policy and, where appropriate, provide additional notice. Your continued use of the Site after any changes become effective constitutes your acceptance of the revised Policy.