WEB AND MOBILE PRIVACY POLICY.
(last reviewed May 1, 2025)

MEDIXvirtualcare (“The Company”) on its own behalf and its affiliates and/or wholly owned subsidiaries (collectively referred to as "MEDIX", "we", "us", or "our"), makes certain information related to telehealth available to you and/or facilitates your access to telemedicine, chronic condition management, and expert medical services ("MEDIX Services").

This Privacy Policy applies to visitors of the following publicly available website: https://www.medixvirtualcare.com and the publicly available associated domains and mobile applications owned and operated by MEDIX (collectively, the "Websites"). For the purposes of this Disclaimer, "you" and "your" means you as the visitor of the Websites.

WE ARE COMMITTED TO THE CONFIDENTIALITY AND SECURITY OF ANY PERSONAL INFORMATION YOU PROVIDE US WITH.

There’s nothing more important to us than our relationship with you. We’re committed to the confidentiality and security of any personal information you provide us with. This privacy policy explains how we protect your information. It also describes the choices available to you regarding the use of, your access to, and how to update and correct your personal information.

MEDIXvirtualcare is committed to protect the privacy of its customers and this Privacy Policy outlines what kinds of information we collect and the way that we may use it. The use of information collected through our service shall be limited to the purpose of providing the service for which the Clients has engaged The Company.

This Privacy Policy is reviewed and updated regularly, and at least annually with the last update being noted at the top of page.

INFORMATION COLLECTION AND USE

The Privacy Policy describes the types of Personal Information we collect from visitors to our publicly available Websites and how we use, maintain, share and protect it. It also details your rights and options regarding your Personal Information and how you can contact us.

This Privacy Policy does not apply to information collected from users who register and log-in ("Members") to any password-protected and secure portions of our Websites, including login pages and registration pages ("Secure Platforms"). The Secure Platforms allow eligible Members to use MEDIX Services. All information collected and stored by MEDIX or added by our Members into such Secure Platforms is considered Protected Health Information ("PHI") and/or medical information and is governed by laws that apply to that information, for example the Health Insurance Portability and Accountability Act (HIPAA). MEDIX uses and discloses such PHI in accordance with the MEDIXH HIPAA Notice of Privacy Practices. MEDIX will not use or disclose information received from its platform for advertising, marketing, or other use-based data mining purposes and will not combine it with other data and will not sell it. However, technology required  and/or data collected to make those or similar connections, are subject to this privacy policy. The Notice of Privacy Practices (and not this Privacy Policy) also applies to Personal Information collected on our Websites if specific symptoms or health conditions is also collected, as such information may be considered PHI under HIPAA.

This Privacy Policy also does not apply to the collection and use of certain employment-related information. If you are a current or former MEDIX job applicant, employee, owner, director, officer, or contractor, please see the Notice of Privacy Practices for US Employees' Personal Information.

California and Virginia residents should read the information available in Section 12 below about the categories of personal information to be collected from them and the purposes for which the personal information will be used.

This Privacy Policy is not a contract and does not create any contractual rights or obligations.

1. TYPES OF PERSONAL INFORMATION WE COLLECT

You may provide us with certain information about yourself while using our Websites. We or our advertising partners also may automatically collect information through the use of cookies and other tracking technologies (see below).

Personal Information that we may collect through your use of the Websites may include IP Address, Device ID, and online identifier. We may use that Personal Information and link it to Internet or other electronic network activity information, and we may use the information we collect to draw inferences about you. We may also collect your name, title, business contact information, phone number, date of birth, state, country, zip code, your health plan, email address or login identification information only if you provide such information directly to us when you register through our platform or complete a webform on our Websites. If you are a member this may be considered PHI and governed by our Notice of Privacy Practices and not this Privacy Policy.

An IP address is a number assigned to a computer for accessing the Internet. All computer identification on the Internet is conducted with IP addresses, which allow computers and servers to recognize and communicate with each other. MEDIX collects IP addresses in order to conduct system administration, report aggregate information to sponsors and advertisers, and to conduct site analysis. If a visitor requests pages from the MEDIX platform, the MEDIX servers enter the visitor’s IP address into a log. MEDIX will use IP addresses to identify any visitors who refuse to comply with MEDIX terms of service, and to identify visitors who threaten its service, site, or customers.

2. HOW WE COLLECT PERSONAL INFORMATION; COOKIES AND OTHER TRACKING TECHNOLOGIES

We may collect Personal Information through the following means:

a. From you when you provide it to us (for example when submitting web forms, during registration, through inquiries or responses, by providing survey responses.

b. From third party partners including analytics and email marketing service providers.

c. Automatically through online tracking technologies including cookies, pixels and log files, across our own and third party websites or online services and can occur over time.

COOKIES

"Cookies" are small files stored on a user's computer or device that a website installs when you visit it. cookies or similar technologies are also used by The Company and our advertising partners and service providers. These technologies are used in analyzing trends, administering the site, tracking user’s movements around the site and to gather demographic information about our userbase as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis.

We use cookies for remembering users’ settings (e.g. language preference) on our website and for authentication on our shopping cart. Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use our site, but your ability to use some features or areas of our site may be limited.

As is true of most web sites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and clickstream data. We do link some of this automatically-collected data to personal information. We do this to improve services we offer you, to improve marketing, analytics, or site functionality.

We partner with a third party ad network to either display advertising on our Web site or to manage our advertising on other sites. Our ad network partner uses cookies and Web beacons to collect non-personal information about your activities on this and other Web sites to provide you targeted advertising based upon your interests. If you wish to not have this information used for the purpose of serving you targeted ads, you may opt-out by clicking here: http://preferences-mgr.truste.com. Please note this does not opt you out of being served advertising. You will continue to receive generic ads. In the EU, you may use the EDAA opt-out tool: http://www.youronlinechoices.eu/.

We may use Google AdSense to publish ads on this site. When you view or click on an ad a cookie will be set to help better provide advertisements that may be of interest to you on this and other Web sites. You may opt-out of the use of this cookie by visiting Google’s Advertising and Privacy page: http://www.google.com/privacy_ads.html.

We use mobile analytics software to allow us to better understand the functionality of our Mobile Software on your phone. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage, performance data, and where the application was downloaded from. We do not link the information we store within the analytics software to any personal information you submit within the mobile application.

SOCIAL MEDIA WIDGETS

Our web site may include social media features, such as the Facebook Like button and widgets, such as the ShareThis button or interactive mini-programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our web site. Your interactions with these features are governed by the privacy policy of the company providing it.

LINKS TO 3RD PARTY SITES

Our site may include links to other sites whose privacy practices may differ from the Company. If you submit personal information to any of those sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any web site you visit.

COLLECTION AND USE OF 3RD PARTY PERSONAL INFORMATION

You may also provide personal information about other people, such as their name, email address and phone number. This information is only used for the sole purpose of completing your request or for whatever reason it may have been provided.

For more information about how we use Personal Information collected through tracking technologies and the ways you may be able to manage it, see below.

3. HOW WE USE YOUR INFORMATION

We may use the Personal Information we collect for the following purposes:

a. Operate, maintain, supervise, administer, and enhance the Websites, including monitoring and analyzing the effectiveness of its content, aggregate site usage data, and other usage of the Websites such as validating your eligibility and assisting with your registration process.

b. Provide you with an individualized and user-friendly experience as you navigate our Websites.

c. Promote and market our Websites to you.

d. To complete the activity you specifically requested, e.g., register on our platform, obtain more information, request a demo, or request an RFP.

e. Conduct research on users' demographics, interests, and behavior based upon information provided or collected during visits to our Websites.

f. Aggregate information for analytics and reporting.

g. Respond to law enforcement requests and court orders and legal process and carry out our legal and contractual obligations and enforce our rights.

h. Authenticate use, detect potential fraudulent use, and otherwise maintain the security of the Websites and user safety.

i. Develop, test, improve, and demonstrate the Websites.

j. Any other purpose with your consent.

4. HOW WE SHARE YOUR INFORMATION

The Company will not sell this information, rent it or exchange it with any third party. We will share your personal information with third parties only in the ways that are described in this privacy policy. The Company uses the information that was gathered in order to service you, bill you and perform research regarding the usage of our services.

However, if requested by law, The Company holds its right to share your information with the authorities; as required by law, such as to comply with a subpoena, or similar legal process; when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request; to any other third party with your prior consent to do so.

The Company will transfer information, and will notify you about it, in any case that it will be acquired or merged with another company. You will be notified via email and/or a prominent notice on our site of any choices you may have regarding your personal information.

Please be informed that The Company uses third party vendors and hosting partners to provide the necessary hardware, software, emailing, networking, storage, and related technology required to run our services. These companies are authorized to use your personal information only as necessary to provide these services to us. In doing so, we may share Person Information with third parties, including services providers for specific purposes, including:

• vendors and services providers, including our data hosting and data storage partners, analytics and advertising partners, technology and support services, and data security. We may also share Personal Information with our professional advisors, including law firms, accounting firms, and auditors.

• third parties you request or direct us to share Personal Information with, including the use of social media widgets on our Websites.

• subsidiaries or affiliates within our corporate group.

• compliance with applicable law or any obligations thereunder, including cooperating with law enforcement, judicial orders, and regulatory inquiries.

• in connection with an asset sale, merger, bankruptcy, or other related business transactions.

• enforcement of any applicable Legal Disclaimer, and to ensure the safety and security of the Websites and our users.

• advertising purposes, using cookies and pixels, we way disclose Personal Information regarding your activity on our Websites to third party advertising partners for marketing optimization.

We may also disclose deidentified information.

Please note, that if you make any Personal Information publicly available on the Websites, anyone may see and use that information.

5. SOCIAL FEATURES

Certain Websites features permit you to initiate interactions between the Websites and third-party services or platforms, including social networks ("Social Features"). Social Features include features that allow you to click and access MEDIX's pages on certain third-party platforms, such as Facebook, Twitter and LinkedIn, with the ability to "like" or "share" our content on those platforms. Use of Social Features may involve a third party's collection and/or use of your data. If you use Social Features or similar third-party services, information you post or otherwise make accessible may be publicly displayed by the third-party service you are using. Both MEDIX and the third party may have access to information about you and your use of both the Websites and the third-party service. MEDIX has no control over and is not responsible for the privacy practices of such third parties. This Privacy Policy does not apply to the extent MEDIX does not own or control any linked websites or features you visit or use. We recommend that you are aware of the privacy practices of those third parties.

6. THIRD PARTY WEBSITES AND LINKS

Our Websites may contain links to other online platforms operated or managed by third parties. We do not control such online platforms and are not responsible for their content, their privacy policies, or their use of your information. Any information you provide on public or semi-public forums, including information you share on third-party social networking platforms (such as Facebook, LinkedIn or Twitter) may also be visible by other users of the Websites and/or users of those third-party online platforms without restriction as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators except as disclosed on the Websites. We expressly disclaim any and all liability for the actions of third parties, including but without limitation to actions relating to the use and/or disclosure of Personal Information by third parties. Any information submitted by you directly to these third parties is subject to that third party's privacy policy.

7. COOKIES AND INFORMATION USED FOR ADVERTISING PURPOSES

As previously mentioned, during the use of our Websites, we may collect and disclose Personal Information about your online activities for use in providing you with advertising about products and services specific to your individual interests. This section of our Privacy Policy provides details and explains how to exercise your options. You may see certain ads on other websites through our participation in advertising networks. Ad networks allow us to target our communications to users through demographic, interest-based and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs, and pixels. The networks use this information to show you advertisements that may be tailored to your individual interests. The information our ad networks may collect includes information about your visits to websites that participate in the relevant advertising networks, such as the webpages or advertisements you view and the actions you take on the websites. This data collection takes place both on our Websites and on third-party websites that participate in the ad networks. This process also helps us track the effectiveness of our marketing efforts.

You may disable or delete browser cookies through your browser settings. Cookies generally are easy to disable or delete, but the method varies between browsers. If you disable or delete cookies, or if you are running third-party software that intercepts or deletes cookies, please note that some parts or functionality of our Websites may not work as intended.

You can opt out of third parties collecting your Personal Information for targeted advertising purposes in the United States by visiting the National Advertising Initiative's (NAI) opt-out page and the Digital Advertising Alliance's (DAA) opt-out page.

Your browser settings also may allow you to transmit a "Do Not Track" signal when you visit various websites. Some of the Websites may not be configured to respond to "Do Not Track" signals received from browsers.

If you have additional questions regarding the specific information about you that we may process or retain, as well as your choices regarding our collection and use practices, please contact us using the information listed below.

8. CHILDREN”S PRIVACY

Our Websites, platforms, and services are not intended for children under the age of 13 years old. We do not knowingly or intentionally collect or sell Personal Information of children under the age of 13 years old. If you are under the age of 13 years old, please do not use or provide any information on our Websites without your parent or legal guardian first providing consent. If you are the parent or legal guardian of a child under the age of 13 years old, you may contact us using the below information if you believe they may have provided us with their Person Information to have such information deleted.

9. SECURITY OF PERSONAL INFORMATION

The security of your personal information, location information and clients’ information is important to us. When you enter sensitive information on our Websites, we encrypt the transmission of information using secure socket layer technology (SSL). We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once we receive it. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.

10. RETENTION OF PERSONAL INFORMATION

We generally retain data records only as long as necessary and as required for our business operations, for archival purposes, and to satisfy legal requirements. When determining the appropriate retention period for Personal Information, we take into account various factors, such as the amount, nature, and sensitivity of the Personal Information; potential risk of harm from unauthorized use or disclosure; purposes for which we process your Personal Information; whether we can achieve those purposes through other means; and business operations and legal requirements. Because we maintain our Websites to protect from accidental or malicious loss and destruction, residual copies of your Personal Information may be retained in our backup and archival systems for a limited period of time, after which the information will be automatically deleted or put beyond use where deletion is not possible

11. OPT-OUT PREFERENCES

The Company will use the email provided to send communications. Out of respect for your privacy, you may choose to stop receiving emails by following the unsubscribe instructions included in these emails, accessing the email preferences in your account settings page, or you can contact us.

We may also send you service related email announcements on rare occasions when it is necessary to do so. For instance, if our service is temporarily suspended for maintenance, we might send you an email. You do not have an option to opt out of these emails, which are not promotional in nature.

12. USER ACCESS AND CHOICE

Upon request Company will provide you with information about whether we hold any of your personal information. If your personal information changes, or if you no longer desire our service, you may correct, update, or delete it by contacting us by telephone or postal mail at the contact information listed below. We will respond to your request to access personal information within 30 days. We will retain your information (including geo-location) and personal data we process on behalf of our clients for as long as needed to provide you services. Please contact us if you request that we no longer use your information to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

13. NOTICE TO CALIFORNIA AND VIRGINIA RESIDENTS

If you are a resident of the State of California, certain Personal Information that we collect about you is subject to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

If you are a resident of the State of Virginia, certain Personal Information that we collect about you is subject to the Viriginia Consumer Data Protection Act (VCDPA).

Please note that these laws and regulations may not apply to, among other things,

• Information that is lawfully made available from federal, state of local government records;

o Consumer information that is deidentified or aggregated

o Protected health information that is collected by a covered entity or business associate governed by HIPAA

• Medical information maintained by a provider of health care governed by California’s Confidentiality of Medical Information Act (CMIA).

14. ADDITIONAL RIGHTS FOR RESIDENTS OF CERTAIN STATES

Residents of certain U.S. states may have additional or modified data privacy rights based on laws passed in that state. MEDIX is committed to keeping up to date and complying with all State-specific data privacy laws and regulations.

15. YOUR RIGHTS

Requests to Know and Access

You may have the right to request that we disclose to you the following information:

• Categories of Personal Information that MEDIX has collected about you, disclosed about you for a business purpose, or sold or shared;

• Categories of sources from which the Personal Information is collected;

• Categories of third parties with whom MEDIX shares or to whom MEDIX sells Personal Information;

• The business or commercial purpose for collecting and selling Personal Information; and

• Specific pieces of Personal Information that MEDIX has collected about you.

Instructions for submitting a verifiable request are provided below.

Please note, you may only make a request for access twice within a 12-month period.

Requests to Delete

You may have the right to request that we delete Personal Information associated with you, subject to applicable law and certain exceptions.

Instructions for submitting a verifiable request are provided below.

Request to Correct Inaccurate Personal Information

You may have the right to request that MEDIX corrects Personal Information that is inaccurate.

Instructions for submitting a verifiable request are provided below.

Requests to Opt Out of the Sale or Sharing of your Personal Information

You may have the right to submit a request to opt out of any sale or sharing of your Personal Information or the processing of your Personal Information for purposes of targeted advertising. However, MEDIX does not sell your Personal Information and does not use or share Personal Information collected from users of our public websites to engage in targeted advertising unless you have opted-in to such use. And, in the last 12 month, MEDIX has not "sold" or "shared" Personal Information (as those terms are defined under the CCPA/CPRA).

Instructions for submitting a verifiable request are provided below.

How to Exercise Your Rights

To submit a request to exercise any of your rights, please contact us: https://www.medixvirtualcare.com/contact.

As required under applicable law, we must take steps to verify your request before we can provide Personal Information to you, delete Personal Information, or otherwise process your request. To verify your request, we may require you to provide your name, physical address, email address, contact information, and information about your account or previous transactions with us. If you have only visited our public Websites and did not provide any Personal Information to us via a web form or through the registration process, we will need you to provide us with your IP address or device ID in order for us to determine if we have that information. We will not be able to determine if we have your IP address or device ID from your name, physical address, email address, contact information, or account information.

We will further verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the Personal Information subject to the request. We may need to request additional Personal Information from you, such as your date of birth or government identifier, in order to protect against fraudulent requests.

We will deliver Personal Information that we are required by law to disclose to you in the manner required by law within 45 days after receipt of a verifiable request, unless we notify you that we require additional time to respond, in which case we will respond within such additional period of time required by law. We may deliver the Personal Information to you electronically or by mail at your option. If electronically, then we will deliver the information in a portable and, to the extent technically feasible, in a readily useable format that allows you to transmit the information from one entity to another without hindrance.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may designate an authorized agent to request any of the above rights on your behalf. You may make such a designation by providing the agent with written permission, signed by you, to act on your behalf. Your agent may contact us by the information provided in the "How to Contact Us" section below to make a request on your behalf. Even if you choose to use an agent, we may, as permitted by law, require verification of the agent's authorization to act on your behalf, require you to confirm you have authorized the agent to act on your behalf, or require you to verify your own identity.

Right to Nondiscrimination

You have the right to be free from discriminatory treatment for exercising the privacy rights conferred by applicable law, including not being: denied goods or services; charged different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; provided a different level or quality of goods or services; or suggested that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

16. CHANGES TO THIS POLICY

The Company may update this Privacy Policy from time to time. In any case of a significant change in the way personal information is used that is outlined in this Privacy Policy, we will alert the primary account owner via email prior to the change becoming effective. We may update this privacy policy to reflect changes to our information practices. We encourage you to periodically review this page for the latest information on our privacy practices.

By using our website and/or our services, you consent to the collection and use of this information by MEDIX for the purposes disclosed in this Privacy Policy. If we decide to materially change our privacy practices, we will post a prominent notice of those changes on the MEDIX website so that you are always kept informed of what data we collect, how we use it, and under what circumstances we disclose it. Please check our website for changes from time to time to make sure you are aware of our latest privacy practices.

17. CONTACT US

If you have any questions or concerns regarding this Privacy Policy, the practices of this web site or your dealings with this web site, please contact us: https://www.medixvirtualcare.com/contact.