Consumer Health Data Privacy Notice

This Consumer Health Data Privacy Notice supplements the United Therapeutics Corporation Privacy Statement (“Privacy Statement”), and provides additional notice related to consumer health data (“CHD”) as required by Washington, Nevada, and Connecticut law. These states require United Therapeutics Corporation and its subsidiaries (“UTC”, “we”, or “our”) to provide you with additional information about how we may collect, use, disclose, or otherwise process CHD, how we protect it, and choices with respect to your health information. These laws generally define CHD to include information that is linked to or reasonably linkable to a particular consumer and identifies the consumer’s past, present, or future physical or mental health status, but does not include health information that is protected by the federal Health Insurance Portability and Accountability Act (“HIPAA”), to health information collected about our workforce members, including job applicants, active, inactive, and former UTC employees, retirees, dependents and beneficiaries of the foregoing, employees and contractors of our third-party vendors and partners, and other individuals about Privacy whom we collect health information for human resources purposes. Additionally, these laws generally do not apply to health information used for public or peer-reviewed scientific, historical, or statistical research that is collected in accordance with applicable ethics and privacy laws.

This Policy does not apply to third-party websites or products. Please separately review their privacy policies to understand how your personal information is used and stored by those third parties.

Consumer Health Data We Collect and Use

Depending on your specific interactions with our websites, mobile applications, digital services, patient support programs, marketing and information programs, and other programs we offer (“Services”) and the information you choose to provide, we may collect the following categories of CHD:

• Information about health conditions, symptoms, status, diagnoses, testing, or treatments (including surgeries, procedures, use or purchase of medications, or other social, psychological, behavioral, and medical interventions)

• Measurements of bodily functions, gait, vital signs, symptoms, or other health characteristics, that may also be considered biometric information

• Information regarding gender-affirming care or reproductive or sexual health

• Data that could identify you as an individual seeking health care services including precise location information that could reasonably indicate your attempt to acquire or receive health services or supplies

• Inferences of the above categories of health data that we may infer or derive from non-health related information

We may collect CHD directly from you, from your interactions with our Services, when you visit our websites, and from information we lawfully obtain from other sources, such as public records or websites, or other third parties, as described in the Information we may Collect and Use section of our Privacy Statement.

How We Use Consumer Health Data

With your consent when required and based on your choices we use CHD for the following purposes and as otherwise described in the Privacy Statement:

• Services and Patient Support Programs. To make our Services, patient support programs, and products available and to communicate with you about your use of our products, Services and support programs (e.g., by email or telephone), including in some cases through the use of our agencies and AI tools; to fulfill product orders or requests for samples; to provide troubleshooting and technical support; to respond to your inquiries; to gather customer feedback; fulfill your requests; process your payments; and for similar Service and support purposes.

• Analytics and Improvement. To improve and better understand how users access and use our Services, products, and support programs, and for other research and analytical purposes; to evaluate and improve our business operations, to develop Services, products, and features, and for internal quality control and training purposes; to create de-identified and aggregate data that may be used in research and for other purposes in accordance with applicable laws.

• Clinical and Non-Clinical Research Opportunities. To provide you with information regarding clinical and non-clinical research opportunities in accordance with applicable regulations and ethics principals.

• Customization and Personalization. To tailor the content that we may send you and that we may display on the Services, including to offer personalized help and instructions, and to otherwise personalize your experience with our products, programs, and Services.

• General Business and Operational Support. To evaluate and execute on mergers, acquisitions, reorganizations, bankruptcies, and other business transactions, and related to the administration of our general business, accounting, auditing, compliance, recordkeeping, and legal functions.

• Marketing and Disease State Communications. With your consent, to send you information about our products, research opportunities, disease states for which our products are indicated, and Services, such as emails, newsletters, and other marketing content, as well as any other information that you sign up to receive. We may use certain CHD to manage and improve our advertising campaigns so that we can better reach individuals with relevant content.

• Legal Proceedings and Obligations; Security and Protection of Rights. To comply with laws and our legal obligations; to respond to legal process and related legal proceedings and to protect our rights and the rights of third parties. To protect our Services and business operations; to prevent and detect fraud, unauthorized activities and access, and other misuse; where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party.

• Safety and Quality. To ensure the safety and quality of our products and Services; to process and respond to adverse event and product complaint submissions related to our products or Services, and to submit safety and quality reports to government authorities related to such products and services.

How We Disclose Your Consumer Health Data

We may share your CHD with the following types of third parties and individuals, in each case as further disclosed in our Privacy Statement:

• With our corporate affiliates

• With our service providers, including technology, internet, and related service providers, advertising agencies and other content providers and vendors that provide analytics and research services, provided that such service providers would be subject to the same or similar restrictions and obligations as set forth in our Privacy Statement.

• With our alliance partners, such as other pharmaceutical and medical device companies with whom we have a co-promotional or other cooperative relationship, provided that such partners would be subject to the same or similar restrictions and obligations set forth in our Privacy Statement.

• When it is reasonably necessary for our legitimate interests in conducting corporate transactions, such as in the event of a merger, or potential merger, acquisition, or other sale or transfer of UTC or any UTC entity or business asset of UTC, provided that such transaction counterparty would be subject to the same or similar restrictions and obligations set forth in our Privacy Statement.

• To exercise and protect our legal rights or the rights of our personnel and representatives, and to investigate, prevent, or respond to suspected illicit activities, including fraud and threats of harm to individuals or property.

• To comply with applicable law, respond to legitimate requests from government authorities, including authorities that may be outside of your country of residence, and if necessary, to protect the safety of our employees and other stakeholders.

UTC does not sell, lease, or rent your sensitive personal data, as those terms are traditionally understood. However, we may share your consumer health data with our advertising and analytics partners, with your consent as required by law, as further described in our Privacy Statement.

How to Exercise Your Rights

Depending on your state of residence, you may have certain rights with respect to your health information, including the following:

• The right to confirm whether we are collecting, selling, or sharing your health information

• The right to withdraw consent for us to collect or share your health information

• The right to request that we delete your health information

• The right to correct your health information

• The right to opt-out of targeted advertising, the sale of your consumer health data, and profiling decisions that could produce legal or similarly significant effects concerning the consumer.

There may be exceptions that apply to your rights. You can request to exercise these rights by contacting us at privacyoffice@unither.com or as described in the Your Rights and Choices section of our Privacy Statement. If your request to exercise a right you may have under applicable law is denied, you may appeal that decision by contacting us at privacyoffice@unither.com. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the applicable U.S. state regulator.

We will respond to your request to exercise your right(s) within 45 days after receipt and we reserve the right to extend the response time by an additional 45 days when reasonably necessary and provided consumer notification of the extension is made within the first 45 days. In some states, an authorized agent may submit a request to exercise the opt-out right on your behalf.

Changes to this Policy

Our business and Services and applicable laws may change from time to time. As a result, we may make changes to our Privacy Statement or this Policy at any time. If we do make such changes, we will post an updated version on this page, unless another type of notice is required by the applicable law. Additionally, when required under applicable law, we will request additional consent to collect and process your Personal and Consumer Health Data. We encourage you to visit this link periodically and to review our most current Policy and Privacy Statement.

Last Updated: June 10, 2025

UTC Subsidiaries

List of United Therapeutics Corporation subsidiaries who may collect, process, and share Consumer Health Data from residents of the State of Washington, Nevada, and Connecticut:

IVIVA Medical, Inc.

Lung Bioengineering Inc.

Miromatrix Medical Inc.

Revivicor, Inc.