Consumer Health Data Privacy Policy

Last Updated: June 30th, 2024

This consumer health data privacy policy applies to personal data that is classified as "consumer health data" ("CHD") by the My Health My Data Act ("MHMDA") in the state of Washington and the Nevada Consumer Health Data Privacy Law ("Nevada CHD Law") in Nevada. It is a supplement to the Secure Medical, Inc. (“SMI”) Visit Privacy Policy (the "Privacy Policy"). Capitalized terms without definitions will have the definition found in the privacy policy.

Categories of CHD Collected

• Following the general definition of CHD in the MHMDA and Nevada CHD Law, we may gather the following categories of CHD, as further detailed in our Visit Privacy Policy and contingent upon your interactions with SMI and relevant law:

• Specific health issues, ailments, diagnoses, or treatments: For example, in relation to your request for medical services or prescription drugs from SMI and its related businesses.

• Medical, behavioral, social, and psychological interventions: For instance, gathering your medical history as a component of the treatment services you seek via SMI.

• Surgery or operations connected to health: For example, by compiling a list of surgeries or treatments related to health in your medical history as part of the treatment services you request on or through SMI.

• Using or purchasing prescription medication: For example, by using the medical history you give us or by purchasing medication through SMI.

• Physical attributes, vital signs, symptoms, or measurements of health data: For instance, when you seek medical attention or prescription drugs from SMI.

• Diagnoses or diagnostic testing, treatment, or medication: For example, while requesting medical services or prescription drugs from SMI, or as part of the medical history that SMI gathers.

• Gender-affirming care information: For instance, when requesting prescription drugs or other healthcare services from SMI, or as part of the medical history that SMI gathers.

• Information on your sexual or reproductive health: For instance, while requesting prescription drugs or other healthcare services from SMI, or as part of the medical history that SMI gathers.

• Genetic data: For instance, when such details are gathered by SMI from medical histories.

• Information that uniquely identifies a customer requesting medical services: For example, information gleaned from your medical history when you obtain prescription drugs or other services from SMI.
• Additional data that could be extrapolated, inferred, or derived in relation to the above mentioned or other health-related data.

Sources of CHD

• The following sources of information are used by us to gather information, which may contain CHD:
• (1) directly from you;
• (2) automatically through your usage of the Services;
• (3) social media and other content platforms; and
• (4) other third-party sources, as further detailed in our Privacy Policy.

Reasons for Gathering CHD

In the part of our privacy policy titled "Purposes for How We Use Your Information," we outline the reasons behind the gathering and application of CHD. In accordance with the terms further detailed therein and subject to applicable law, we may gather and utilize CHD in the following ways:

• (1) to administer and provide the Services;
• (2) to assess and enhance the Services;
• (3) for marketing and advertising; and
• (4) for legal purposes, including but not limited to legal compliance, establishment, exercise, or defense of our rights.

How and Why CHD Is Shared

For business purposes, we may disclose any of the CHD categories listed above to the entities included in the portion of our privacy policy titled "How We Disclose Your Information." In accordance with our Privacy Policy and as permitted by law, we may disclose the following CHD categories:

• with your consent, such as disclosures for specific advertising or promotional efforts, including allowing third parties to collect CHD across our Websites;
• to deliver products and services to you, including the fulfillment of any transactions you initiate;
• to ensure a consistent level of service across our products and services;
• to improve our products, services, and your customer experience;
• to protect SMI and others, including the enforcement of our Terms of Use, Privacy Policy, or other contracts with you, and for the purpose of preventing fraud;
• to comply with our legal obligations; and
• in connection with any negotiation or completed acquisition, merger, or purchase involving our business assets.

As outlined in our privacy policy, we maintain the right to use the data we get through the Services to develop aggregate/disaggregate Data, and we reserve the right to disclose such data at our sole discretion.

In accordance with our Privacy Policy and relevant law (such as your consent in some circumstances), we may disclose CHD to the following types of affiliates and third parties:

• Health Care Providers and Services
• Service Providers
• Advertising Networks
• Joint Product/Marketing Partners
• Health Care Providers and Services
• For the Protection of SMI and Others (e.g. to governmental or regulatory agencies)
• For Legal Purposes (e.g. to governmental entities in response to legal process)
• As required for business transfers
• At Your Direction or With Your Consent (e.g. sharing with other users/public if you post in public forums or interact with other users)

How To Exercise your MHMDA or Nevada CHD Law Rights

Certain privileges are granted to CHD under the MHMDA and Nevada CHD Law, subject to exceptions. This may encompass requests to

• (1) verify whether SMI is collecting, sharing, or selling your CHD;
• (2) access your CHD;
• (3) delete your CHD; and
• (4) withdraw your assent to the collection or sharing of your CHD, depending on your jurisdiction.

To exercise these rights, please submit your contact information to privacy@securemedical.com. We may contact you for additional information to verify your identity, contingent upon the nature of your request. Please be advised, however, that Secure Medical will never request sensitive personal or financial information from you to verify your identity. Additionally, no Secure Medical employee will request that you disclose your password.

You have the right to appeal against our decision if we reject your request in its entirety or in part. If your appeal is denied and you are a resident of Washington, you may submit a complaint to the Washington State Attorney General at Visit Web site. If your appeal is denied and you are a resident of Nevada, you may submit a complaint to the Nevada Attorney General at Visit Web site.

Updates to this CHD Policy

We retain the right to modify this CHD Policy at any time to accommodate changes in the law, our data acquisition and use practices, the features of our Services, or technological advancements. The revised CHD Policy will be accessible through the Services, and it is recommended that you review it on a regular basis. The date of the most recent revision of this CHD Policy is indicated at the beginning of the document. You are accountable for the regular monitoring and review of any updates to the CHD Policy. If we implement a substantial modification to the CHD Policy, we will furnish you with the requisite notification in accordance with legal mandates. Your continued use of our websites or Apps following the implementation of these amendments (and, where applicable, the provision of notice) will be considered your acceptance of the modifications to this CHD Policy.

Contact Us

If you have any questions about this CHD Policy or Secure Medical privacy practices, please contact us at: Secure Medical Inc. 5801 S. McClintock Drive, Tempe, AZ 85283 privacy@securemedical.com