Scope of This Policy

This privacy policy applies to:

• MEDENDx, Inc. and our affiliates ("MEDENDx," "we," "us," "our").
• MEDENDx’s online properties, including our websites, and websites or mobile applications that link to it; our social media pages or handles; and products and servises ("Servises").

MEDENDx understands that you care about how we collect, use, and share information when you interact with our Servises, and we value the trust you place in us. This Policy explains:

• the types of information we collect through our Servises
• How we use and protect that information
• the types of information we may share with others and under what circumstances
• the choices you have regarding our collection, use, and sharing practices
• Specific disclosures for residents of different jurisdictions

This Policy applies when you interact with us through our Servises. It also applies anywhere it is linked. It does not apply to non-MEDENDx websites and mobile applications that may link to the Servises or be linked to or from the Servises; please review the privacy policies on those websites and applications directly to understand their privacy practices.

Information We Collect

We collect information from you directly, from the devices you use to interact with us, and from third parties. We may combine information from the Servises together and with other information we obtain from our business records. We may use and share information we aggregate (compile to create statistics that cannot identify a particular individual) or de-identify (strip information of all unique identifiers such that it cannot be linked to a particular individual) at our discretion.

Information you give us

• Contact and professional information, including name, email address, telephone number, and job title, as well as company name and size.
• Demographic information.
• Audiovisual information.
• Payment information and associated contact information when engaging in a transaction on our site.
• Any information or data you provide by interacting with us through our customer support.
• Information you provide when you complete a survey administered by us or a Servises provider acting on our behalf.
• Any information or data you provide by interacting in our online forums and chatrooms or by commenting on content posted on our Servises. Please note that these comments are also visible to other users of our Servises.
• Information you submit to inquire about or apply for a job with us.
• Any information that you provide in the course of using the Servises.
• If you contact us, we may keep a record of that correspondence and any contact information provided.

Some of this information may be collected by external parties on our behalf. For example, we use a payment processor when you engage in a transaction on our site.

Information We Collect Automatically

When you interact with the Servises, certain information about your use of our Servises is collected automatically. This includes:

• Details of your visits to our site and information generated in the course of the use of our site (including the timing, frequency, and pattern of servise use) including, but not limited to, traffic data, location data, weblogs and other communication data, the resources that you access, and how you reached our site.
• Diagnostic information such as web traffic logs.
• Details regarding the device you use to access our Servises, including, but not limited to, your IP address, operating system, and browser type.
• Information about how you interact with our Servises, including whether you open or click links in any correspondence.

Much of this information is collected through cookies, web beacons, and other tracking technologies, as well as through your web browser or device. MEDENDx relies on partners to provide many features of our Servises using data about your use of MEDENDx and other sites.

Most web browsers automatically accept cookies, but if you prefer, you can usually modify your browser setting to disable or reject cookies. If you delete your cookies or if you set your browser to decline cookies, some features of the Servises may not be available, work, or may not work as designed. You may also be able to opt out of or block tracking by interacting directly with the other companies who conduct tracking through our servises.

Your browser or device may include "Do Not Track" functionality. At this time, MEDENDx does not respond to browser "Do Not Track" signals.

Information We Collect From Other Sources

We may collect the following information about you from third-party sources.

• Subscription registration information.
• Contact information, demographic information, and information about your interests and purchases from consumer data providers.
• Information about your credit history from credit reporting agencies.
• Information about your interests, activities, and employment history from social networks and other places where you choose to share information publicly.
• Information about your interaction with advertisements on our Servises or ads that we place on third-party websites from online advertising companies.
• If you decide to invite others to the Servises, we will collect your and the other person’s names, email addresses, and/or phone numbers to send an email or text message and follow up with the other person. You agree that you will obtain the other person’s consent before giving us his or her contact information. You also agree that you will not send us the contact information of a minor. We will inform any other person you invite that you gave us his or her information in the invitation email.

How We Use and Protect Your Information

We may use the information we collect from you for the following purposes:

• To provide you with our products and servises, including to take steps to enter into a contract for sale or servises, process payments, fulfill orders, and send servise communications (including renewal reminders), and conduct general business operations, such as accounting, recordkeeping, and audits.
• To enable additional features on our servises and to provide you with a personalized servise.
• To provide you with the best servise and improve and grow our business, including by understanding our customer base and purchasing trends and understanding the effectiveness of our marketing.
• To understand how our servises are being used, track site performance, and make improvements.
• To deliver tailored advertising on our servises based on your preferences or interests across servises and devices and to measure the effectiveness of ads. We may share your information with business partners, online advertising partners, and social media platforms for this purpose.
• To detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal, and to comply with legal requirements regarding the provision of products and servises.

How We Share Your Information

• Affiliates: We share information with other members of our group of companies.
• Servise Providers: We engage the following types of vendors to perform functions on our behalf, and they may receive information about you from us or collect it directly. These vendors are obligated by contract to use information that we share only to provide these business functions, which include:
  • Supporting servise functionality, such as vendors that support customer servise and customer relationship management, subscription fulfillment, freight servises, application development, list cleansing, postal mailings, and communications (email, fax).
  • Auditing and accounting firms, such as firms that assist us in the creation of our financial records.
  • Professional servises consultants, such as firms that perform analytics, assist with improving our business, provide legal servises, or supply project-based resources and assistance.
  • Analytics and marketing servises, including entities that analyze traffic on our online properties and assist with identifying and communicating with potential customers.
  • Security vendors, such as entities that assist with security incident verification and response, servise notifications, and fraud prevention.
  • Information technology vendors, such as entities that assist with website design, hosting and maintenance, data and software storage, and network operation.
  • Marketing vendors, such as entities that support the distribution of marketing emails.
• Business Partners: We partner with select companies that assist us in providing you with certain servises or products we offer. If you purchase such products or servises, then we may share your information with such companies in order to facilitate the servises or provide you with the products.
• Provider information. We may sell, license, or otherwise disclose information that identifies specific health care providers and information related to their use of the servises, such as health care claims, treatment, prescribing trends, etc. This information is de-identified for patients and health plan members.
• Online advertising partners: We partner with companies that assist us in advertising our servises, including partners that use online tracking technologies to collect information to personalize, retarget, and measure the effectiveness of advertising.
• Social media platforms: If you interact with us on social media platforms, the platform may be able to collect information about you and your interaction with us. If you interact with social media objects on our servises (for example, by clicking on a Facebook "like" button), both the platform and your connections on the platform may be able to view that activity. To control this sharing of information, please review the privacy policy of the relevant social media platform.
• Government entities/Law enforcement: We may share information when we believe in good faith that we are lawfully authorized or required to do so to respond to lawful subpoenas, warrants, court orders, or other regulatory or law enforcement requests, or where necessary to protect our property or rights or the safety of our employees, our customers, or other individuals.

How We Secure the Information We Collect From or About You

We use a combination of physical, technical, and administrative safeguards to protect the information we collect through the servises. While we use these precautions to safeguard your information, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf.

Additional Information About Our Data Collection and Sharing Practices

Sharing of Aggregated Data

We may share aggregated or de-identified data at our discretion, including with marketing agencies, media agencies, and analytics providers. These other companies will not be able to relate this data to identifiable individuals.

Combination of Information

We may combine information from the servises with other information we obtain from our business records.

Change of Ownership or Corporate Organization

We may transfer to another entity or its affiliates or servise providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets, or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information the same as described in this Policy.

Cross-border Transfer of Data

If you use our servises outside of the United States, you understand that we may collect, process, and store your information in the United States. The laws in the U.S. regarding information may be different from the laws of your state or country. Any such transfers will comply with safeguards as required by relevant law.

Data retention

We may store information about you for as long as we have a legitimate business need for it.

Information about children

The servises are intended for users age thirteen and older. We do not knowingly collect information from children. If we discover that we have inadvertently collected information from anyone younger than the age of 13, we will delete that information. Please contact us with any concerns.

Health Information

Some of our servises we offer include the collection or processing of health information. The health or medical information we receive on behalf of our customers is subject to protections under applicable federal or state law. If you are a patient viewing this Privacy Policy, please contact your provider for information regarding your medical records.

Your Options and Rights Regarding Your Information

Please send an email with contact information changes to [email protected]. To update your payment method, follow the instructions on the Customer Authorization Recurring Auto Payment Form located on MEDENDx’s website under Resource Center/MEDENDx Forms and Manuals/Account Management.

If at any time you would like to unsubscribe from receiving future emails, you can email us at [email protected], and we will promptly remove you from all correspondence.

Ad Choices

You have options to limit the information that we and our partners collect for online advertising purposes.

• You may disable cookies in your browser or mobile device using their settings menus. Your mobile device may give you the option to disable advertising functionality. Because we use cookies to support servise functionality, disabling cookies may also disable some elements of our online properties.
• You may contact us directly.

If you delete your cookies, you may also delete your opt-out preferences.

Special Information for Job Applicants

When you apply for a job with us, we may collect information from you, including:

• Information you provide in connection with your application.
• Information that you make available in your social media accounts.
• Information about you that is available publicly.
• Information that you authorize us to collect via third parties, including former employers or references.

In certain circumstances, you may submit your application for employment through a third-party servise that displays our job posting. We do not control the privacy practices of these third-party servises. Please review their privacy policies carefully before submitting your application materials.

Privacy Disclosures for Specific Jurisdictions

Special Information for European Economic Area, United Kingdom, and Switzerland Residents

We process "personal data" as that term is defined in the European Union’s General Data Protection Regulation ("GDPR").‍

Your rights under the GDPR: Users who are located in the European Economic Area ("EEA"), U.K., or Switzerland have the right to complain about our data collection and processing actions with the supervisory authority concerned. Contact details for data protection authorities are available here: The European Data Protection Board. If you are located in the EEA, U.K., or Switzerland, you have the following rights.

• Access and Portability: Request access to personal data we hold about you or request transmission of your data to a third party.
• Correction: Request that we rectify inaccurate or incomplete personal data we store about you.
• Erasure: Request that we erase personal data when such data is no longer necessary for the purpose for which it was collected, when you withdraw consent and no other legal basis for processing exists, or when you believe that your fundamental rights to data privacy and protection outweigh our legitimate interest in continuing the processing.
• Restriction of processing: Request that we restrict our processing of personal data if there is a dispute about the accuracy of the data; if the processing is unlawful; if the processing is no longer necessary for the purposes for which it was collected but is needed by you for the establishment, exercise or defense of legal claims; or if your request to object to processing is pending evaluation.
• Objection to processing: Object to the processing of your data based on our legitimate interests or for direct marketing (including profiling). We will no longer process the data unless there are compelling legitimate grounds for our processing that override your interests, rights, and freedoms or assert, exercise, or defend legal claims.
• Transfers: Obtain information about and a copy of the safeguards we use to transfer personal data across borders.

Please contact us to exercise these rights.

Special Information for California Residents

Your California Privacy Rights; "Shine the Light" Law

Residents of the State of California have the right to request information regarding third parties to whom the company has disclosed certain categories of personal information during the preceding year for the third parties’ direct marketing purposes. If you are a California resident and would like to make such a request, please email [email protected] or write to us at MEDENDx, Attn: Privacy and Security Officer, (Address)

California Consumer Privacy Act

The California Consumer Privacy Act ("CCPA") provides California residents with rights to receive certain disclosures regarding the collection, use, and disclosure of information about them, as well as rights to know/access, delete, and limit the disclosure of personal information. You have the right to be free from discrimination based on your exercise of your CCPA rights. To the extent that we collect personal information that is subject to the CCPA, that information, our practices, and your rights are described below.

‍Notice at Collection Regarding the Categories of Personal Information Collected

You have the right to receive notice of the categories of personal information we collect and the purposes for which we use personal information. The following table summarizes the categories of personal information we collect, the categories of sources of that information, and whether we disclose or sell that information to servise providers or third parties, respectively. The categories we use to describe personal information are those enumerated in the CCPA. We collect this personal information for the purposes described in "How We Use Information."

Entities to whom we disclose information for business purposes are servise providers, which are companies that we engage to conduct activities on our behalf. We restrict servise providers from using personal information for any purpose that is not related to our engagement.

Entities to whom we "sell" information are third parties. Under the CCPA, a business "sells" personal information when it discloses personal information to a company for monetary or other benefits. A company may be considered a third party either because we disclose personal information to the company for something other than an enumerated business purpose under California law or because its contract does not restrict it from using personal information for purposes unrelated to the servise it provides to us.

• Opt out of sale of personal information: You have the right to opt out of our sale of your personal information to third parties. To exercise this right, please visit our Do Not Sell My Personal Information webpage or contact us. Please be aware that your right to opt out does not apply to our disclosure of personal information to servise providers.
• Know and request access to and deletion of personal information: You have the right to request access to personal information collected about you and information regarding the source of that personal information, the purposes for which we collect it, and the third parties and servise providers to whom we sell or disclose it. You also have the right to request, in certain circumstances, that we delete personal information that we have collected directly from you. Please contact us to exercise these rights.

‍Financial incentives

Financial Incentives. We may offer you the opportunity to participate in special promotions and programs from time to time. Your participation is voluntary. If we provide this offer, we will obtain your consent to collect your Personal Information in connection with your participation. The categories of Personal Information we collect are first and last name, phone number, email address, and postal address, which we use to facilitate your participation in the program and to market to you.

You may opt in to the program using the means we present to you, such as an online registration page, at the time we make the offer. You may opt out of the program at any time by contacting us at the address below.

The program we offer may qualify as a financial incentive program (FIP) under California law. We are required to explain how the value you receive from FIPs is reasonably related to the value that we receive from the Personal Information you provide to us. We use the Personal Information you provide to market to you directly and offer referral programs. These activities generate revenue for us that we believe is reasonably related to the benefit you receive from participating in the incentive programs. In disclosures to you regarding the incentive programs, we will explain our good faith estimate of the value of your Personal Information.

Special Information for Nevada Residents

Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to other companies who will sell or license their information to others. At this time, MEDENDx does not engage in such sales. If you are a Nevada resident and would like more information about our data-sharing practices, please email [email protected].

Making a request to exercise your rights

Submitting requests: You may request to exercise your rights by submitting the form on this page or making a request using the contact information below.

‍If you are a California resident, you may authorize another individual or a business registered with the California Secretary of State, called an authorized agent, to make requests on your behalf.

We may have a reason under the law why we do not have to comply with your request or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

Verification: We must verify your identity before responding to your request. We verify your identity by asking you to provide personal identifiers that we can match against information we may have collected from you previously. We may need to follow up with you to request more information to verify your identity.

We will not use personal information we collect in connection with verifying or responding to your request for any purpose other than responding to your request.

Links to Other Websites

Our servise may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or servises.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our servise, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact

For questions about our privacy practices, contact us at:

MEDENDx, Inc. Attn: Privacy and Security Officer P.O. Box (our)

3380 66TH St N Saint Petersburg, FL 33710