Effective Date: 10-16-2024

Virtare Health Inc. (“we”, “us”, or “our”) operates the website virtarehealth.com (the “Site”). This Privacy Policy outlines how we collect, use, and protect your personal data, ensuring compliance with 10DLC regulations, the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect various types of personal data when you interact with our Site, which may include:

• Personal Information Provided by You: Information such as your name, contact details (email address, phone number), and health-related information that you provide to us when scheduling appointments, filling out forms, or contacting us through the Site.
• Health Information: As a healthcare provider, we may collect Protected Health Information (PHI) that is governed by HIPAA regulations. Any PHI collected will be handled with the utmost care and only shared in accordance with applicable law.
• Automatically Collected Information: Information automatically collected when you visit our Site, including your IP address, browser type, device information, and browsing behavior (collected through cookies and similar tracking technologies).
• Text Messaging (SMS): In compliance with 10DLC regulations, if you opt in to receive text messages from us, we may collect your phone number and messaging preferences.

2. How We Use Your Information

We use your personal data for the following purposes:

• Providing Healthcare Services: To facilitate appointments, consultations, and communicate health-related information.
• Communication: To send you appointment reminders, notifications, updates, and health-related information via email, SMS (in compliance with 10DLC), or other channels you have consented to.
• Marketing: If you have opted in, we may send promotional offers or newsletters about our healthcare services. You can opt out of marketing communications at any time.
• Compliance: To comply with legal obligations, including data protection laws such as GDPR and CCPA, and to ensure compliance with HIPAA (Health Insurance Portability and Accountability Act) for handling health information.

3. Sharing Your Information

We do not sell or rent your personal information. However, we may share your data under the following circumstances:

• Service Providers: Third-party providers who assist us in delivering services such as appointment scheduling, payment processing, or SMS notifications. These providers are required to comply with strict data protection standards.
• Legal Obligations: We may disclose your data if required by law or in response to valid legal requests.
• Healthcare Providers: In the context of providing healthcare services, we may share information with other healthcare providers involved in your care, in compliance with HIPAA and other relevant healthcare laws.

4. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access: You can request access to your personal data and receive a copy.
• Right to Rectification: You can request corrections of any inaccurate or incomplete information.
• Right to Erasure (Right to be Forgotten): You can request deletion of your personal data, subject to legal or contractual obligations.
• Right to Data Portability: You can request your personal data in a structured, machine-readable format and transfer it to another provider.
• Right to Object: You can object to the processing of your data, including for marketing purposes.

5. Your Rights Under CCPA

If you are a California resident, the following rights apply:

• Right to Know: You can request to know the categories of personal information we collect, the purposes for which it is used, and who it is shared with.
• Right to Delete: You can request deletion of your personal data, subject to legal or regulatory requirements.
• Right to Opt-Out: You can opt out of the sale of your personal data (Note: We do not sell personal data).
• Non-Discrimination: You have the right to not be discriminated against for exercising your CCPA rights.

To exercise any of these rights, you may contact us using the contact information provided below.

6. 10DLC Compliance

In accordance with 10DLC regulations, if you opt in to receive SMS communications from us, we will collect and store your phone number and consent for messaging. You can opt out at any time by replying “STOP” to any SMS message you receive from us. Standard message and data rates may apply.

7. Data Security

We take the security of your data seriously and use industry-standard measures to protect your personal information, including encryption, access controls, and regular security audits. However, no system is completely secure, and we cannot guarantee the absolute security of your data.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect data to enhance your experience on our Site. You can control your cookie preferences through your browser settings. For more information, see our [Cookie Policy].

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the “Effective Date” will be updated accordingly. We encourage you to review this Privacy Policy periodically for any changes.

11. How to submit a request

To request access to or deletion of personal information:

• Virtare Health, Inc., Attn: Virtare Health Information Request, 2300 Sahara Ave Suite 800 #4005 Las Vegas, NV 89102
• Email: support@virtarehealth.com

Identity verification. We will need to confirm your identity and California residency to process your requests to exercise your information, access or deletion rights. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

Authorized agents. California residents can empower an “authorized agent” to submit requests on their behalf. We will require the authorized agent to have a written authorization confirming that authority.

11. Privacy Policy Updates

This Privacy Policy is subject to occasional revision. We will notify you of any material changes in its collection, use, or disclosure of your personal information by posting a notice on our website and within the Virtare Health application.