Effective Date: September 10, 2026

Last Updated: September 10, 2026

This Privacy Policy explains how Blueprint Peak Performance LLC, as the operator of InstaMedWholesale.com and the InstaMed Wholesale platform (“InstaMed Wholesale,” “we,” “us,” or “our”), collects, uses, discloses, stores, and protects information when you visit our website, submit a wholesale or enterprise application, create or use a partner account, request or place an order, receive an invoice, communicate with us, download partner resources, or otherwise interact with our services.

This Privacy Policy applies to information collected through InstaMedWholesale.com, our approved partner portal, administrative systems, forms, emails, and related business operations.

This Privacy Policy does not govern websites, platforms, or services operated independently by InstaMed Pharmaceuticals, Inc. or any other third party. Information you submit directly to those companies is governed by their own privacy practices.

By using InstaMedWholesale.com, you acknowledge the practices described in this Privacy Policy.

InstaMed Wholesale is the customer-facing wholesale platform operated by:

Blueprint Peak Performance LLC
Website: InstaMedWholesale.com
Email: partners@instamedwholesale.com
Mailing Address: 1501 India St. Suite 103, PMB 163 San Diego, CA 92101

Blueprint Peak Performance LLC is the entity responsible for operating this website and managing information collected directly through InstaMedWholesale.com.

InstaMed Wholesale and Blueprint Peak Performance LLC are separate from InstaMed Pharmaceuticals, Inc. Nothing in this Privacy Policy should be interpreted as stating that Blueprint Peak Performance LLC is a subsidiary, division, joint venture, or corporate affiliate of InstaMed Pharmaceuticals, Inc.

This Privacy Policy applies to information collected when you:

• visit InstaMedWholesale.com;
• submit a wholesale, enterprise, branded-distribution, or white-label inquiry;
• apply for an approved partner account;
• create or access a partner account;
• invite or manage users within an approved business account;
• browse protected products or partner resources;
• create an order request or reorder;
• receive or review a quote;
• receive an invoice;
• submit or communicate information regarding an offline payment;
• communicate with our team;
• download private partner materials;
• interact with enterprise qualification or procurement processes;
• or otherwise use our website or related business services.

The information we collect depends on how you interact with the platform.

A. Business and Contact Information

We may collect information such as:

• name;
• business name;
• DBA or trade name;
• business type;
• job title or role;
• business website;
• email address;
• telephone number;
• billing address;
• shipping address;
• business location;
• target market or territory;
• and other business contact information.

B. Wholesale and Enterprise Application Information

When you apply for wholesale or enterprise access, we may collect:

• company information;
• primary contact information;
• estimated purchasing volume;
• intended business use;
• target market or territory;
• requested program;
• brand preference;
• expected purchasing cadence;
• go-to-market timeline;
• qualification responses;
• and documents or information submitted as part of the application process.

We may also maintain internal application status, approval records, administrative notes, and audit history.

C. Account and Team Information

For approved accounts, we may collect and maintain:

• account membership;
• user roles;
• account status;
• invitations;
• account contact information;
• team-member information;
• billing and shipping addresses;
• notification preferences;
• policy acknowledgments;
• authentication-related identifiers;
• and records of account activity.

Passwords and authentication credentials are managed through our authentication infrastructure and should not be transmitted to us through email or support messages.

D. Order and Transaction Information

When you submit or manage an order, quote, or invoice, we may collect:

• products requested;
• quantities;
• order numbers;
• quote numbers;
• invoice numbers;
• prices applicable to your account;
• shipping information;
• tax information;
• payment status;
• transaction references;
• fulfillment status;
• carrier information;
• tracking information;
• and related transaction history.

We maintain historical order and invoice snapshots for accounting, operational, compliance, fraud-prevention, and recordkeeping purposes.

E. Payment-Related Information

InstaMed Wholesale currently uses an offline payment model, which may include ACH, domestic wire, Business Zelle, check, or another approved payment method.

We may maintain information necessary to identify and reconcile payments, including:

• payment method;
• payment amount;
• payment date;
• transaction or confirmation reference;
• invoice association;
• payment status;
• and related administrative records.

We do not intend to collect customer online banking passwords or authentication credentials.

Banking or remittance instructions displayed on invoices belong to the payment recipient and are provided solely for the purpose of completing an authorized transaction.

F. Communications

We may collect information contained in communications you send to us, including:

• emails;
• support requests;
• application correspondence;
• order questions;
• enterprise inquiries;
• quote discussions;
• and other business communications.

G. Website and Technical Information

When you use the website, certain technical information may be collected automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• referring page;
• pages viewed;
• approximate geographic information derived from IP address;
• date and time of access;
• session information;
• and diagnostic or security information.

We may use cookies and similar technologies where necessary to operate authentication, maintain sessions, secure accounts, understand site performance, and improve functionality.

We may use information to:

• operate InstaMedWholesale.com;
• evaluate wholesale and enterprise applications;
• establish and administer approved partner accounts;
• authenticate users and protect accounts;
• provide protected partner pricing;
• prepare quotes;
• process order requests;
• generate and issue invoices;
• reconcile offline payments;
• coordinate procurement and fulfillment;
• provide shipment and tracking information;
• provide private partner resources;
• administer account team members and invitations;
• maintain financial and transaction records;
• communicate operational updates;
• provide customer support;
• respond to inquiries;
• enforce wholesale, MAP, channel, and account requirements where applicable;
• prevent fraud, unauthorized access, abuse, or diversion;
• maintain platform security;
• troubleshoot technical problems;
• analyze platform performance;
• meet accounting, tax, legal, contractual, and regulatory obligations;
• enforce our agreements;
• establish, exercise, or defend legal claims;
• and support legitimate internal business operations.

We may also use aggregated or de-identified information for business analysis, reporting, platform improvement, and operational planning where that information does not reasonably identify an individual.

We do not disclose personal information indiscriminately.

We may disclose information to parties that assist us in operating the platform and fulfilling legitimate business purposes, including:

Service Providers

We may work with service providers that support:

• website hosting;
• cloud infrastructure;
• authentication;
• database services;
• transactional email;
• document or PDF generation;
• private file storage;
• analytics;
• security;
• order administration;
• accounting;
• professional services;
• and related technology operations.

These providers may process information only as necessary to provide services to us, subject to applicable contractual and legal requirements.

Suppliers and Fulfillment Partners

Where necessary to process, fulfill, manufacture, ship, or support an approved order or enterprise opportunity, we may disclose relevant business and order information to authorized suppliers, manufacturers, logistics providers, or fulfillment partners.

This may include InstaMed Pharmaceuticals, Inc. where appropriate.

Information provided directly to another company may also be subject to that company's own privacy policy.

Professional Advisors

We may disclose information to attorneys, accountants, tax professionals, consultants, insurers, auditors, banks, or other professional advisors where reasonably necessary.

Legal and Compliance Purposes

We may disclose information when reasonably necessary to:

• comply with applicable law;
• respond to lawful subpoenas, court orders, or government requests;
• investigate fraud or security incidents;
• enforce our agreements;
• protect our legal rights;
• protect users or third parties;
• or establish, exercise, or defend legal claims.

Business Transactions

If Blueprint Peak Performance LLC is involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law.

We do not sell personal information for monetary consideration.

We do not use information submitted through wholesale applications, partner accounts, orders, invoices, enterprise inquiries, or private partner activity for the purpose of selling customer databases to third parties.

We also do not intend to disclose personal information for cross-context behavioral advertising in a manner that constitutes “sharing” under California law.

If our practices change in a manner that creates a legally defined sale, sharing, or targeted-advertising activity, we will update this Privacy Policy and provide any legally required opt-out mechanisms.

Certain information handled in connection with business transactions may be considered sensitive under applicable law.

We use sensitive information only where reasonably necessary for permitted business purposes, such as:

• processing and reconciling payments;
• maintaining account security;
• preventing fraud;
• administering financial records;
• complying with legal requirements;
• or completing requested business transactions.

We do not use sensitive information to infer characteristics about individuals for advertising purposes.

We may use cookies and similar technologies to:

• maintain secure sessions;
• support authentication;
• remember preferences;
• prevent fraud;
• improve performance;
• understand how the website is used;
• and troubleshoot technical issues.

Some cookies may be essential to website functionality.

Where required by applicable law, we will provide appropriate notices or choices regarding non-essential tracking technologies.

Browser settings may allow you to control or delete cookies; however, disabling necessary cookies may prevent portions of the website or partner portal from functioning properly.

We send transactional and operational emails related to activities such as:

• applications;
• account invitations;
• approvals;
• orders;
• invoices;
• payments;
• quotes;
• enterprise qualification;
• shipment;
• resources;
• account security;
• and other requested business services.

Transactional messages are not promotional marketing messages and may be necessary to provide requested services.

Where we send optional marketing communications, recipients may unsubscribe using the mechanism provided in the message or by contacting us.

We retain information for as long as reasonably necessary to:

• operate your account;
• provide requested services;
• complete and document transactions;
• comply with accounting and tax requirements;
• maintain financial and audit records;
• enforce agreements;
• prevent fraud;
• resolve disputes;
• satisfy legal or regulatory requirements;
• and protect our legitimate business interests.

Retention periods vary depending on the type of information.

Transactional, invoice, payment, accounting, audit, and contractual records may be retained for several years after a transaction or relationship ends where necessary for legitimate legal, financial, tax, or compliance purposes.

When information is no longer reasonably necessary, we may delete, anonymize, or securely archive it as appropriate.

We maintain administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, destruction, or misuse.

These measures may include:

• access controls;
• authentication;
• role-based permissions;
• account-level data isolation;
• encrypted network communications;
• private storage;
• short-lived authenticated download links;
• server-side authorization;
• audit logging;
• restricted financial configuration access;
• and other security controls.

No website, database, transmission method, or electronic storage system is completely secure. Therefore, we cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their account credentials and should notify us promptly of suspected unauthorized account activity.

InstaMedWholesale.com may contain links to or interact with websites and services operated by third parties.

We are not responsible for the privacy or security practices of websites or services we do not control.

This includes websites or services operated by:

• InstaMed Pharmaceuticals, Inc.;
• shipping carriers;
• financial institutions;
• external document or resource providers;
• and other third-party business services.

We encourage you to review the privacy policy of any third-party service before submitting information directly to that service.

Certain products offered through InstaMed Wholesale are associated with InstaMed Pharmaceuticals, Inc.

InstaMed Pharmaceuticals, Inc. maintains its own privacy practices and policies.

Information collected directly through InstaMedWholesale.com is governed by this Privacy Policy.

Information submitted directly to InstaMed Pharmaceuticals, its websites, platforms, systems, personnel, or services may be governed by InstaMed Pharmaceuticals’ own privacy policy.

Blueprint Peak Performance LLC does not control InstaMed Pharmaceuticals’ independent privacy practices.

If you are a California resident, California law may provide additional rights regarding personal information.

Depending on applicability and applicable exemptions, these rights may include the right to:

• know the categories and specific pieces of personal information collected about you;
• know the categories of sources from which information was collected;
• know the business or commercial purposes for collecting, using, or disclosing information;
• know the categories of third parties to whom information has been disclosed;
• request deletion of certain personal information;
• request correction of inaccurate personal information;
• opt out of certain sales or sharing of personal information;
• limit certain uses of sensitive personal information where applicable;
• and receive equal service and pricing without unlawful discrimination for exercising privacy rights.

Because InstaMed Wholesale primarily operates as a business-to-business platform, certain information or transactions may also be subject to exemptions or limitations under applicable law.

Categories of Information We May Collect

During the preceding 12 months, depending on your interaction with us, we may have collected categories including:

We do not use these categories to create advertising profiles unrelated to the business services requested from us.

Residents of certain U.S. states may have privacy rights under applicable state privacy laws.

Depending on the jurisdiction and whether the law applies to our activities, rights may include:

• access;
• correction;
• deletion;
• data portability;
• opt-out of sale;
• opt-out of targeted advertising;
• opt-out of certain profiling;
• and appeal of a denied privacy request.

We will respond to verified requests as required by applicable law.

To submit an applicable privacy request, contact:

Email: partners@instamedwholesale.com
Subject: Privacy Request

Please provide sufficient information for us to reasonably verify your identity and locate relevant records.

We may request additional information to verify a request before acting on it.

Authorized agents may submit requests where permitted by applicable law, but we may require documentation showing the agent's authority and may independently verify the identity of the individual whose information is involved.

We will not discriminate against you for exercising a privacy right protected by applicable law.

Where legally required, we will recognize valid browser-based opt-out preference signals, such as Global Privacy Control, for activities subject to a legally required opt-out.

Because we currently do not sell personal information for monetary consideration or intentionally engage in cross-context behavioral advertising using partner-account information, such signals may not materially change your experience with the platform.

InstaMedWholesale.com is a business-to-business wholesale platform and is not intended for children.

We do not knowingly collect personal information from children under 13.

Wholesale accounts and business transactions are intended for adults legally capable of entering into business agreements.

If we learn that personal information from a child has been collected inappropriately, we will take reasonable steps to delete it.

InstaMedWholesale.com is operated from the United States.

Information may be processed, stored, or accessed in the United States or other locations where our service providers operate.

If you access the platform from outside the United States, you understand that information may be transferred to jurisdictions with privacy laws that differ from those in your location.

The platform is primarily intended for U.S.-based business activities unless expressly stated otherwise.

Suspension, closure, or termination of an account does not necessarily result in immediate deletion of information.

We may retain historical:

• applications;
• orders;
• invoices;
• payments;
• fulfillment records;
• policy acknowledgments;
• audit records;
• and related business information

where retention is reasonably necessary for legitimate financial, contractual, security, tax, fraud-prevention, or legal purposes.

We may update this Privacy Policy periodically to reflect changes in:

• our platform;
• business operations;
• service providers;
• legal requirements;
• or privacy practices.

When material changes are made, we will update the Last Updated date above and may provide additional notice where required.

Your continued use of the platform after an updated policy becomes effective is subject to the updated policy, except where applicable law requires additional consent.

Questions or requests regarding this Privacy Policy may be directed to:

InstaMed Wholesale
Operated by Blueprint Peak Performance LLC
Website: InstaMedWholesale.com
Email: partners@instamedwholesale.com
Mailing Address: 1501 India St. Suite 103, PMB 163 San Diego, CA 92101