Privacy Policy

By using the Application, you are expressing your agreement to this Policy and the processing of your data, including your personal information, in the manner provided in this Policy. If you do not agree to these terms, please do not use the Application.

If you have an inquiry or concern about our Policy, please contact us at

• , Attn: Privacy Director,
• 1-847-672-4735
• Changes in this

PatientMD may amend this Policy at any time without notice. Changes to this Policy may affect our use of personally identifiable information that you provided us prior to our notification to you of the changes. Please visit our website or Application to obtain current information about our Policy.

Authorization

To facilitate your interaction with health care service providers in the Application, you may authorize PatientMD to receive, store, and transmit your Protected Health Information (PHI), as such term is defined by the Health Insurance Portability and Accountability Act of 1996 and its regulations (HIPAA) for purposes of utilizing the direct messaging with health care service providers platform in the Application. Any such use or disclosure of your PHI by PatientMD shall be governed by and limited to the terms of your Patient Authorization.

The information we collect generally includes: (1) Personal information you supply, and (2) Tracking information collected as you navigate through the (Site) Application.

Personally identifiable

PatientMD will not collect any personally identifiable information about you unless you voluntarily provide it to us, such as when you post to the Application or email us. We may collect and store personally identifiable information (such as your name, mailing address, e-mail address, telephone number, and/or mobile phone number) whenever you do the following:

Post or transmit information through the Application.

Utilize Social Media/Platforms/Marketplaces/Services available through the Application.

Complete the registration process for the Application.

We also collect personal and family health information. This is done so that we can provide results that are relevant, meaningful and medically actionable. There might also be a need for you to provide information such as your race/ ancestry, age and sex. Personal and Family Health Information also includes information about your health conditions and genetic mutations. It is of utmost importance that you provide the most accurate information possible.

Aggregate Information from our

DNA testing services

With your consent, we extract your DNA from your saliva sample and analyze it to derive your Genetic Information (the As, Ts, Cs and Gs at particular locations in your genome) to provide you with your PatientMD reports and tools.

When you use the Application, we may collect tracking information such as your browser type, the type of operating system you use, the domain name of your internet service provider, and pages, sections, features, or items visited/viewed through the Application. We collect this information for aggregate reporting on Application activity. For example, we may want to know how long the average user spends using the Application or which pages or features get the most attention.

When we collect this information, we endeavour to de-identify any personally identifiable information by combining it with information about other individuals/users (“aggregating”) or by removing characteristics that make the information personally identifiable to you. PatientMD reserves the right to share with third parties de-identified aggregated information about you and other users of our Application. We share this information to improve our Application and develop content and services that may be of interest to you.

To help you personalize your online experience using the Application, we may use "Cookies." "Cookies" are small files that are transferred to your hard drive for record- keeping purposes. One of the primary purposes of cookies is to provide a convenience feature to save you time. For example, Cookies help to recognize you when you re-enter the Application so that you will not have to log in each time you visit. Cookies also help to collect anonymous traffic data, such as the number of unique and return visitors who use our Application. Besides, Cookies may be placed with users visiting through advertising banners and hyperlinks on other sites or through other applications to track the success of a particular advertising campaign or marketing program.

Most web browsers are set to accept Cookies automatically. If you prefer, you can reset your browser to notify you when you receive a cookie or to refuse to accept Cookies. It is important to note that you may not be able to use certain features in our Application if you choose not to accept Cookies. The use of cookies is an industry-standard and occurs at most major sites. To manage Cookies, please review your browser's privacy settings. A “web beacon” is an electronic image placed in the code of a web page. We may utilize web beacons to monitor the traffic patterns of users from one page to another and to improve Application performance.

A “Session Cookie,” which is not placed on your hard drive, may also be used. A Session Cookie is a piece of identification between your browser and the server that keeps track of the items in, for example, your shopping cart and other information about your current session or use of the Application. A Session Cookie is automatically deleted when the session expires when you log out of the Application, or when you close your browser.

Using Information

PatientMD generally collects information to create your account, provide the Application to you, improve our Application, contact you, conduct research, and create reports for internal use. We use information collected through our Application for purposes described in this Policy or disclosed to you in connection with our Application. For example, we may use your information to:

identify and suggest connections with other Application users;

operate and improve our Application;

understand you and your preferences to enhance your experience and enjoyment using our Application;

respond to your comments and questions and provide customer service;

provide and deliver products and services you request;

send you related information, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages;

communicate with you about promotions, rewards, upcoming events, and other news about products and services offered by our selected partners and us;

enable you to communicate with other users; and

link or combine it with additional information we get from third parties to help understand your preferences and provide you with better services.

We store information on servers located in the United States and may store information on servers and equipment in other countries. We do not undertake to maintain any information about you for a duration greater than necessary to provide services to you or as provided by law, rule or regulation.

PatientMD currently, and will at all times, maintain reasonable security measures to protect the personal information that we collect and store from unauthorized access, acquisition, destruction, use, modification, or disclosure.

Any PHI that you disclose to a health care service provider through the Application shall be maintained in accordance with the requirements of HIPAA and with the terms of your Patient Authorization. In no event will PatientMD use or disclose your PHI to any individual or entity not included under your Patient Authorization.

We may share your personal information with our authorized service providers that perform certain services on our behalf. These services may include, among others, fulfilling orders, processing credit card payments, delivering packages, providing customer service, performing business and sales analysis, supporting our Application functionality, and other features offered through our Application. These service providers may have access to personal information needed to perform their functions, but the access is limited to what is required and necessary for the service providers to perform those functions, and they are not authorized to modify, share, or use such personal information for any other purposes. In no event shall these authorized service providers have access to any PHI disclosed through the Application pursuant to the terms of your Patient Authorization.

PatientMD requires that any such service providers to whom it allows access to its collected and stored information implement and maintain reasonable security measures to protect your personal information from unauthorized access, acquisition, destruction, use, modification, or disclosure.

We may also transfer user or customer information, including personally identifiable information, in connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale.