Privacy Policy

SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to your use of the MEDGm, LLC ("MEDGm," "Company," "we," "us," or "our") website, platform, and related services (collectively, the "Platform") that link to this policy. This policy does not apply to any protected health information or any information collected while you are a patient or seeking treatment from the affiliated professional entities that provide healthcare services through the Platform. The use and disclosure of such information is governed by our Notice of Privacy Practices.

This policy does not apply to information collected by any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Platform. You may be subject to different privacy policies or terms of service for other websites or applications.

INTRODUCTION

MEDGm respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy describes the types of information we and our affiliates, including certain affiliated professional entities (collectively, "MEDGm," "we," "our," or "us") may collect from you or that you may provide when you use the Platform.

This Privacy Policy also describes our practices for collecting, using, maintaining, protecting, and disclosing that information. Use of the Platform is governed by this Privacy Policy and our Terms of Use. This Privacy Policy is incorporated into our Terms of Use.

By accessing or using the Platform, you acknowledge that you have read, understood, and agreed to be legally bound by this Privacy Policy and our Terms of Use. If any term in this Privacy Policy is unacceptable to you, please do not use the Platform or provide any Personal Information.

This policy applies to information we collect:

• On the Platform, including our website and any mobile applications.
• In email, text, and other electronic communications between you and MEDGm.
• When you interact with our products, services, or applications on third-party websites and services, if those applications include links to this policy.

INFORMATION WE COLLECT ABOUT YOU

We collect several types of information from and about users of our Platform, including:

Personal Information

Information by which you may be personally identified, such as name, mailing address, email address, telephone number, date of birth, gender, billing and payment information, or any other identifier by which you may be contacted online or offline.

Health Information

Health-related information, such as clinical history and conditions, medications, treatment information, and any other information exchanged in emails, texts, chats, or calls between you and MEDGm or its affiliated providers.

Usage and Device Data

Information about your Internet connection, the equipment you use to access our Platform, IP addresses, browser type, operating system, referring URLs, and usage details including traffic data, location data, logs, and the resources you access on the Platform.

How We Collect Information

We collect this information:

• Directly from you when you provide it to us, such as when you register for an account, fill in forms, complete health questionnaires, or contact us.
• Automatically as you navigate through the Platform, including usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.
• From third parties with whom we work to provide you services, such as licensed clinicians, pharmacies, laboratories, and analytics providers.

INFORMATION YOU PROVIDE TO US

The information we collect on or through our Platform may include:

• Information that you provide when you register for an account, subscribe to our services, complete health intake forms, or request further services.
• Information provided in the course of communications with you through the Platform or as a result of healthcare services, including payment processing information such as billing name, address, email, and payment card information.
• Records and copies of your correspondence (including email addresses) if you contact us, such as when you report an issue with our Platform.
• Your search queries on the Platform.
• Details of transactions you carry out through the Platform and the fulfillment of your orders.

When you provide payment processing information, we transmit the payment via an encrypted connection to our third-party payment processor. MEDGm does not collect or store your full credit card details.

AUTOMATIC DATA COLLECTION TECHNOLOGIES

As you navigate through and interact with our Platform, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns. This information helps us improve our Platform and deliver a better and more personalized service, including by enabling us to:

• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize the Platform according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Platform.

Cookies

A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Platform. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Platform. Visitors may also utilize Global Privacy Control ("GPC") add-ons or browser preferences, which signal that you do not want personal information collected by websites you visit. Our Platform is designed to respond to GPC signals.

Web Beacons

Pages of our Platform and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related statistics.

Third-Party Tools

We use Stripe as our payment processor. In order to allow this service to function properly, a session cookie is stored on your browser to assist in detecting and preventing fraud. This cookie typically remains on your browser for 24 hours. For more information, please visit Stripe's privacy policy at stripe.com/privacy.

We may also use other third-party tools for analytics, performance monitoring, and error tracking to help us improve the Platform and our services.

THIRD-PARTY USE OF COOKIES AND TRACKING TECHNOLOGIES

Some content or applications on the Platform are served by third parties, including analytics providers and content providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Platform. The information they collect may be associated with your personal information or they may collect information about your online activities over time and across different websites and other online services.

We do not control these third parties' tracking technologies or how they may be used. If you have any questions about targeted content, you should contact the responsible provider directly.

HOW WE USE YOUR INFORMATION

We use information that we collect about you or that you provide to us, including any personal information:

• To present our Platform and its contents to you.
• To complete any registration or other transactions you request, including determining eligibility for services.
• For treatment, payment, or healthcare operational purposes.
• To provide you with information, products, or services that you request from us.
• To administer your account, including processing payments and fulfilling orders.
• To communicate with you about our services, including via telephone, email, SMS/text messages, or notifications within the Platform.
• To verify your identity and prevent fraud.
• To operate the Platform, provide technical support, and improve our products and services.
• To create de-identified information that cannot be used to personally identify you, such as aggregate statistics relating to the use of our services.
• To measure or understand the effectiveness of communications we send to you.
• To notify you about changes to our services or the Platform.
• To enforce this Privacy Policy and our Terms of Use.
• To comply with applicable federal, state, and other laws and regulations.
• For any other purpose with your consent.

DISCLOSURE OF YOUR INFORMATION

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may disclose personal information that we collect or you provide as described below:

• For treatment, payment, or healthcare operations purposes.
• To medical providers, including licensed clinicians, healthcare facilities, pharmacies, and laboratories that provide services to you through the Platform.
• To our subsidiaries, affiliates, and their employees, including for the purpose of managing your account and healthcare services.
• To contractors, service providers, and other third parties we use to support our business, including payment processors, analytics providers, and technology infrastructure providers.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of MEDGm's assets.
• To fulfill the purpose for which you provide it.
• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our Terms of Use and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of MEDGm, our customers, or others, including exchanging information with other companies for fraud protection and credit risk reduction.
• For any other purpose disclosed by us when you provide the information or with your consent.

We do not disclose mobile information to third parties for marketing or promotional purposes. All categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for purposes unrelated to providing you with the services of that campaign.

CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION

We strive to provide you with choices regarding the personal information you provide to us:

• Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of our Platform may be inaccessible or may not function properly.
• Disclosure for Third-Party Advertising. If you do not want us to share your personal information with unaffiliated third parties for promotional purposes, you can opt out by contacting us at [email protected].
• Promotional Offers. If you do not wish to have your email address used by MEDGm to promote our own or third parties' products or services, you can opt out by sending us an email at [email protected]. If we have sent you a promotional email, you may send us a return email asking to be omitted from future email distributions.
• Do Not Track. We do not currently respond to "do not track" signals. However, our Platform is designed to respond to Global Privacy Control (GPC) signals.

ACCESSING AND CORRECTING YOUR INFORMATION

You may send us an email at [email protected] to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Residents of certain states may have additional personal information rights and choices. Please see the State Privacy Rights section below for more information.

DATA SECURITY

We have implemented measures designed to reasonably secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Platform. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Platform.

When you use our Platform on a mobile device, there is a risk that your PHI will be stored unencrypted on your device. We take a variety of technical safeguards to prevent this, but we cannot guarantee that these safeguards work in every circumstance.

THIRD-PARTY PLATFORMS

Our Platform may contain links or references to other websites outside of our control. Please be aware that this Privacy Policy does not apply to third-party websites. MEDGm encourages you to read the privacy statements and terms of service of linked or referenced websites you visit. These third-party websites may send their own cookies and other tracking devices to you, log your IP address, and otherwise collect data or solicit personal information.

MEDGM DOES NOT CONTROL AND IS NOT RESPONSIBLE FOR WHAT THIRD PARTIES DO IN CONNECTION WITH THEIR WEBSITES, OR HOW THEY HANDLE YOUR PERSONAL INFORMATION. PLEASE EXERCISE CAUTION AND CONSULT THE PRIVACY POLICIES POSTED ON EACH THIRD-PARTY WEBSITE FOR FURTHER INFORMATION.

NO SERVICES TO PERSONS UNDER THE AGE OF 18

MEDGm does not knowingly collect personal information from or provide services to minors under the age of 18. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at [email protected].

YOUR STATE PRIVACY RIGHTS

State consumer privacy laws may provide residents with additional rights regarding our use of their personal information. Your privacy rights under state laws such as the CCPA do not apply to all information we may collect, use, or disclose. For example, these laws generally do not apply to PHI governed by HIPAA, "medical information" governed by state medical information acts, or other patient information we maintain in the same manner as PHI.

California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Correct inaccuracies in their personal information.
• Data portability.
• Opt out of personal data processing for targeted advertising, sales, or profiling in furtherance of decisions that produce legal or similarly significant effects.
• Either limit (opt out of) or require consent to process sensitive personal data.

The exact scope of these rights may vary by state. To exercise any of these rights, please email [email protected]. To appeal a decision regarding a consumer rights request, follow the instructions sent via reply email.

California Residents (CCPA / CPRA)

If you are a resident of California, the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA") provide you with additional rights regarding your personal information. Your CCPA/CPRA rights do not apply to PHI governed by HIPAA, medical information governed by the California Confidentiality of Medical Information Act (CMIA), or other categories excluded from the CCPA's scope.

In the preceding twelve (12) months, we have collected categories of personal information including: identifiers; California Customer Records categories; protected classifications; commercial information; biometric and health information; Internet or network activity; geolocation data; sensory data; professional information; and inferences drawn from the above. For detailed descriptions of each category and the sources from which we collect them, please refer to the "Information We Collect" section of this Privacy Policy.

We do not sell your personal information to anyone.

As a California resident, you have the right to: request access to and a copy of your personal information; request correction of inaccuracies; request deletion of your personal information (subject to certain legal exceptions); request portability of your data in a usable format; limit the use and disclosure of your sensitive personal information; and opt out of any sale or sharing of your personal information. We will not discriminate against you for exercising any of these rights.

To exercise your rights, please submit a verifiable consumer request by emailing [email protected]. We will respond within forty-five (45) days of receipt, with a possible extension of up to ninety (90) days if needed. You may make a request for access or data portability no more than twice within a 12-month period.

SMS / TEXT MESSAGE COMMUNICATIONS

We may use your phone number to send you SMS/text messages related to your account, healthcare services, appointment reminders, and order notifications. Standard messaging and data rates may apply.

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your personal data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including platform providers, phone companies, and vendors who assist in the delivery of text messages.

You may opt out of receiving text messages at any time by following the opt-out instructions provided in each message or by contacting us at [email protected].

CHANGES TO OUR PRIVACY POLICY

It is our policy to post any changes we make to our Privacy Policy on this page. If we make material changes to how we treat our users' personal information, we will notify you through a notice on the Platform home page and/or via email. The date the Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting this Privacy Policy to check for any changes. Your continued use of the Platform after changes are posted constitutes your acceptance of those changes.

CONTACT INFORMATION

To ask questions, register a complaint, or comment about this Privacy Policy and our privacy practices, please contact us: