PRIVACY POLICY

This Privacy Policy describes how Research and Development Company, LLC, a Colorado limited liability company dba Telehealth Pro (the “Telehealth Pro,” “it,” “its”) collects, uses, discloses, and protects personal information across its website www.telehealthprofessional.com (the “Site”), its telehealth platform, mobile application, and related services, content, tools, widgets, software, API(s) (collectively, the Services”). You, as a user (“You”), and Telehealth Pro may be referred to herein individually as a “Party” or together as the “Parties.” Any capitalized terms not defined herein shall have the meaning assigned to them in the Terms of Service.

1. PURPOSE AND OVERVIEW

The purpose of this Privacy Policy is to describe what information Telehealth Pro collects from You when You use the Telehealth Pro Site, Platform, or Services, how Telehealth Pro may use or disclose this information, the security approaches Telehealth Pro uses to protect Your information, and how You can access and request modification of certain information that Telehealth Pro may store about You. Telehealth Pro respects Your privacy and is committed to protecting it as outlined in this Privacy Policy.

Telehealth Pro offers online telehealth services enabling users to engage independent healthcare Providers and organizations to obtain healthcare services. Telehealth Pro does not provide health care or advice. The Providers who provide healthcare services through the Platform are independent professionals practicing through their own independently owned professional practices.

Telehealth Pro’s Site and Services are only available to individuals and organizations located in the United States. This Privacy Policy is designed for operations in all fifty (50) United States and incorporates heightened protections required under applicable state privacy and healthcare laws.

2. YOUR ACCEPTANCE OF THIS PRIVACY POLICY AND CHANGES TO IT

Please read this Privacy Policy carefully. By accessing, viewing or otherwise using the Telehealth Pro Site, Platform, or Services, You consent to the collection and use of Your information by Telehealth Pro in accordance with this Privacy Policy. If you do not agree to this Privacy Policy, you may not use the Site, Platform, or Services. By accessing or using the Telehealth Pro Site, Platform, or Services, You agree to this Privacy Policy.

Telehealth Pro reserves the right to change, modify, add to, or remove portions of this Privacy Policy at any time, without prior notice. Changes take effect on the date that the change appears on the revised Privacy Policy. If You use the Telehealth Pro Site, Platform, or Services following a change in this Privacy Policy, Your use will be understood to signal that you accept and agree to be bound by the changes. Accordingly, Telehealth Pro urges You to review this Privacy Policy frequently for changes. If you do not understand any aspect of this Privacy Policy, please feel free to contact Telehealth Pro as described at the end of this Privacy Policy.

3. INFORMATION TELEHEALTH PRO COLLECTS

Telehealth Pro may collect personally identifiable information (“Personal Information”) or Protected Health Information (“PHI”), as defined by the Health Insurance Portability and Accountability Act (HIPAA) and related state data privacy laws, about You. For purposes of this Privacy Policy, Personal Information refers to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to You, and includes “personal data” or similar terms as defined in applicable law. PHI includes information relating to Your health, for example, medical history, test and laboratory results, and other data that You upload and share with a healthcare professional, and data that a healthcare professional collects to identify an individual and determine appropriate care. PII and PHI may include other types of information, depending on the legal definition applicable in Your physical location. Only the definitions of PII and PHI that apply in Your physical location will apply to You under this Privacy Policy.

There are several ways Telehealth Pro may collect Personal Information about You, including through information You provide to Telehealth Pro; information Telehealth Pro collects through Your use of the Services and interactions with Telehealth Pro; information Telehealth Pro receives from third parties; and by combining information from different sources. This includes data that identifies You personally, whether directly or indirectly.

Telehealth Pro may collect the following categories of information about You:

• Identifiers: Name, address, email address, phone number, and date of birth.
• Demographic and Eligibility Information: Age, gender, location.
• Health Information: Medical history, symptoms, diagnoses, prescriptions, clinical notes, and Your communications with Providers.
• Technical and Usage Data: IP address, device type, browser type, mobile ID, cookies, beacons, and other analytical information.
• Correspondence and Interaction Data: Messages, support requests, or chat interactions via Telehealth Pro’s Platform or App.

Information You Provide to Telehealth Pro:

If You choose to upload any Personal Information via the Site or Platform, this Privacy Policy covers how Telehealth Pro collects, receives, uses, retains, and discloses such PII on the Site and Platform, through its provision of the Services, and the App.

To use certain features of the Telehealth Pro Site, Platform, or Services, You will be required to provide certain Personal Information. You may, however, visit portions of the Site without providing any Personal Information. Telehealth Pro collects Personal Information and other non-individually identifiable information from You when You communicate with Telehealth Pro or create an Account on the Site. For example, when you create an Account, Telehealth Pro may require your name, date of birth, email address, mailing address and zip code, phone number, credit card information, or other Personal Information.

Although Telehealth Pro does not practice medicine or provide medical advice or care, when You create an Account or schedule a Provider appointment, You may be asked to submit PHI during the registration process, including but not limited to demographic information and other information relevant to healthcare concerns, diagnosis, and treatment, such as lifestyle and general medical history (e.g., conditions, allergies, etc.). The information collected varies depending on how You use Telehealth Pro Services.

When You schedule an appointment, You will need to provide Telehealth Pro with PHI that a Provider will need to properly provide healthcare services. Your Provider and other providers in the same health care practice will have access to Personal Information in Your Account for purposes of providing You with healthcare services. Telehealth Pro will not use any of Your Protected Health Information for any other purpose not in accordance with this Agreement, or any other agreement between You and Telehealth Pro without Your written authorization, or unless otherwise permitted or required by law.

You will be able to send confidential messages and communicate with a Provider regarding Your healthcare concerns, diagnosis, and treatment. Telehealth Pro will keep these messages private and confidential. You may revoke, in writing, any such authorization at any time, except to the extent Telehealth Pro has taken action in reliance thereon.

Information Telehealth Pro May Collect Automatically: When You visit and interact with the Telehealth Pro Site and Services, Telehealth Pro or its third-party advertising and analytics partners and service providers may use a variety of technologies, such as cookies, tags, SDKs or scripts, to collect certain information regarding Your activity. The specific types of information that Telehealth Pro and its partners and service providers may automatically collect when You visit and interact with the Site and Services include:

• Device and Browser Information. This includes Your device’s IP address or other unique identifiers, browser type, device type, internet service provider, and operating system.
• Location Information. When You access the Site or Services from a mobile device, Your device’s approximate location (derived from Your device’s IP address or other signals) may be collected.
• Usage Information. When You interact with the Site or Services, Telehealth Pro and its third party vendors may collect certain information, such as the date and time of Your visit, the pages You view immediately before and after You access the Site or Services, the areas or pages of the Site that you visit, the amount of time You spend viewing or using the Site or Services, healthcare service appointments you view but do not book on the Platform or App, searches, keystrokes, mouse movements, form field entries, recordings of chat sessions or Your use of and inputs to other AI-supported tools, and other use and overall engagement with the Site or Services.

• Marketing Information. If You receive an email from Telehealth Pro, information may be collected about Your interactions with the message (e.g., whether You opened, forwarded, or clicked through to the Site).
• Third-Party Analytics Technologies. Telehealth Pro may use third-party analytics tools to better understand who is using the Site and Services, how people are using them, and how to improve their effectiveness as well as the effectiveness of any related content.

Cookies and Other Similar Technologies: “Cookies” are text files that are placed on Your browser by the websites that You visit. Cookies are used for various purposes, such as to distinguish You from other users, make Your site navigation more efficient, help remember Your preferences, enhance Your browsing experience, and improve the use and functionality of the Site and related content. They can also enable the delivery of relevant and personalized advertisements to You across the internet.

Cookies (and other similar tracking technologies) provided by third parties may be placed on certain places within the Sites, and the providers of these technologies may combine information collected from Your interaction(s) with the Telehealth Pro Site or Services with information they collect from other sources and use the combined information for analytics and/or advertising purposes.

To learn more about Your choices regarding the automatic collection and use of Your information as You browse the Site and use the Services, please see the Your Privacy Choices and Rights section below.

Information Telehealth Pro May Receive from Third Parties: Telehealth Pro may receive Personal Information from other sources. Telehealth Pro's third-party sources may include:

• Telehealth Pro business partners or Providers
• Telehealth Pro marketing, advertising, and analytics partners, such as online advertising networks and analytics providers
• Social Media Platforms (note that the information Telehealth Pro receives from such platforms is dependent upon their policies and Your settings on their platforms).
• Other companies that provide Personal Information to supplement what Telehealth Pro already knows about You, including data aggregators

Combination of Information: Telehealth may combine Personal Information that it receives from various sources. For example, Telehealth Pro may combine Personal Information that it receives from third parties with Personal Information it already has about You. Telehealth Pro uses, discloses, and protects combined Personal Information as described in this Privacy Policy. Telehealth Pro may also collect and store certain other personally non-identifiable information. This information is collected passively through various technologies and cannot currently be used to identify you specifically.

Your information may be supplemented with additional information from other companies, such as publicly available information, information about households, and other information that Telehealth Pro may append or match to Your information.

4. PURPOSES FOR PROCESSING YOUR PERSONAL INFORMATION

Telehealth Pro may use the PII or PHI it collects about You for the purposes listed below:

• To provide You with the Services, including managing Your account and improving Your experience;
• To help You find and connect with Providers;
• To coordinate or schedule healthcare appointments with Your chosen Provider(s);
• To process Your payments;
• To create, maintain, customize, and secure Your Account;
• To conduct analytics for healthcare operations, quality improvement, population health management, and service optimization, as permitted under HIPAA and applicable law;
• To communicate with You, including through bots (which may be powered by third-party vendors and be trained on your inputs through AI-based technology), including to respond to Your inquiries and requests, request feedback from You, and to send You important updates and messages about changes to the Site or Services, the agreements between You and Telehealth Pro, including its Terms of Service, Privacy Policy, Privacy Practices, or other notices or applicable terms and conditions;
• To review the usage and maintain the operation of the Site and Services;
• To conduct analysis and develop or improve the Site or Services;
• To monitor, protect, and maintain the security and integrity of the Site, Service, and Telehealth Pro’s business, such as protecting against and preventing fraud, unauthorized transactions, claims, and other liabilities;
• To comply with applicable laws and regulations and respond to lawful requests and communications from law enforcement and other government officials;
• To protect Telehealth Pro’s rights, privacy, safety, property, and those of others;
• To fulfill any other purpose for which You provide your Personal Information or for which Your Personal Information was collected;
• To send You information, newsletters, and marketing or promotional material

Telehealth Pro does not use or disclose PHI for marketing purposes or sales purposes without Your authorization.

Artificial Intelligence:

To improve efficiency and accuracy, the Platform and participating healthcare Providers may use artificial intelligence ("AI") technologies to assist with administrative and documentation functions, including transcribing conversations, generating draft clinical notes, preparing visit summaries, organizing medical information, and supporting clinical documentation.

AI is used solely as an assistive documentation tool. AI does not independently diagnose medical conditions, recommend treatment, prescribe medications, or replace the professional medical judgment of Your Provider. Every AI-assisted clinical note or summary is reviewed and approved by Your Provider before it becomes part of Your medical record.

Where AI tools process your Protected Health Information or other personal information on Telehealth Pro’s behalf, Telehealth Pro requires those service providers to maintain appropriate contractual confidentiality obligations and security safeguards consistent with applicable law, including HIPAA, where applicable.

Telehealth Pro does not use Your personally identifiable information (“Personal Information”) or Protected Health Information (“PHI”), as defined by HIPAA to train publicly available or unrestricted artificial intelligence models without any authorization required by applicable law. Telehealth Pro may use information that has been de-identified or aggregated in accordance with applicable law to improve the Site and Services, enhance documentation quality, conduct analytics, and support product development. By using the Platform, You acknowledge that AI-assisted documentation technologies may be used as described in this Policy to support Your healthcare experience while recognizing that Your healthcare Provider remains solely responsible for all medical decisions and the contents of Your medical record.

5. HOW TELEHEALTH MAY DISCLOSES YOUR PERSONAL INFORMATION

Telehealth Pro may disclose Personal Information that it collects to the following categories of recipients and for the following purposes:

Telehealth Pro does not sell Your data and does not share PHI with data brokers or advertising platforms.

Please note, Telehealth Pro may de-identify or aggregate Personal Information so that it will no longer be considered Personal Information and disclose such information to other parties for purposes consistent with those described in this Privacy Policy. Unless You take action to re-identify Your de-identified information, Telehealth Pro will not attempt to re-identify this information so that it may be associated with You.

6. HIPAA COMPLIANCE

When Telehealth Pro acts as a covered entity or business associate, Telehealth Pro handles PHI in accordance with HIPAA privacy, security, and breach notification rules and its Business Associate Agreements.

Telehealth Pro maintains HIPAA-compliant security controls, including encryption in transit and (where appropriate) at rest, access logging, auditing, and employee training.

7. YOUR PRIVACY CHOICES AND RIGHTS

You have the ability to make certain choices about how Telehealth Pro uses Your Personal Information, as follows:

Privacy Rights and Requests: Depending on Your state of residence, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and such other states with privacy laws that are enacted, You may have certain rights in relation to your Personal Information, including:

• Right to Know: You may have the right to know what Personal Information Telehealth Pro has collected about You, including the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom Telehealth Pro discloses Personal Information, the categories of Personal Information disclosed to third parties, and the specific pieces of Personal Information Telehealth Pro has collected about You. Please note that Telehealth Pro may not be required to respond to Your requests “to know” or access specific pieces of Personal Information more than twice in any twelve (12) month period.
• Right to Request Specific List of Third Parties: You may have the right to request a list of the specific third parties with whom Telehealth Pro has shared or sold Your Personal Information.
• Right to Request a List of Categories of Third Parties: You may have the right to request a list of the categories of third parties to which Telehealth Pro has disclosed Personal Information.
• Right to Data Portability: You may have the right to access Your information in a portable format.
• Right to Delete: You may have the right to request that Telehealth Pro delete Personal Information that it has collected from or about You, subject to certain exceptions.
• Right to Correct: You may have the right to correct inaccurate Personal Information that Telehealth Pro may maintain about You, subject to appropriate verification.
• Right to Opt Out of Certain Types of Personal Information Uses and Disclosures: Telehealth Pro uses and discloses Personal Information to third parties for analytics and advertising purposes. Accordingly, You may have the right to opt out of the “sale” or "sharing” of Your Personal Information, or the use and disclosure of Your Personal Information for “targeted advertising” (as these terms are defined under applicable law).

Requests to exercise these rights must be verifiable and submitted by contacting Telehealth Pro at legal@telehealthprofessional.com. Telehealth Pro responds within statutory deadlines (typically forty-five (45) days, extendable to ninety (90) days with notice). Please note that, where permitted under applicable law, Telehealth Pro may decline a request (other than for opt-outs) if it is unable to verify Your identity (or an agent’s authority to make the request) and confirm that the Personal Information Telehealth Pro maintains relates to You. Telehealth Pro may take steps to verify Your identity before responding to Your request by asking You a series of questions about You or Your previous interactions with Telehealth Pro. Submitting a privacy rights request does not require You to create an account with Telehealth Pro. Telehealth Pro will not discriminate against You if You decide to exercise Your privacy rights.

Sensitive Personal Information: For purposes of applicable state privacy laws (including the California Privacy Rights Act), Sensitive Personal Information (“SPI”) includes personal information that reveals or relates to:

• A consumer’s Social Security number, driver’s license number, state identification card number, or passport number;
• A consumer’s account log-in, financial account, debit card, or credit card number, in combination with any required security or access code, password, or credentials allowing access to an account;
• A consumer’s precise geolocation;
• A consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership;
• The contents of a consumer’s mail, email, or text messages, unless Included Health is the intended recipient of the communication;
• A consumer’s genetic data or biometric information used for uniquely identifying a consumer; and
• A consumer’s health information, including medical conditions, diagnoses, treatment information, and other information subject to HIPAA or similar healthcare privacy laws.

Where required by law, you may have the right to limit the use and disclosure of Sensitive Personal Information to purposes permitted by applicable law, such as providing healthcare services, maintaining account security, complying with legal obligations, and other necessary business and operational purposes.

Right to Appeal: Depending on Your state of residence, You may have the right to appeal a decision Telehealth Pro has made in connection with Your privacy rights request. To appeal a decision, please contact us at legal@telehealthprofessional.com. Instructions for submitting an appeal will be provided with Telehealth Pro’s response. Telehealth Pro will respond to appeals within the timeframe required by law.

Unsubscribing From Marketing and Promotional Communications: From time to time, Telehealth Pro may send You marketing and promotional communications, including special offers from Telehealth Pro or its partners. If You no longer wish to receive promotional and marketing emails from Telehealth Pro, You may opt out of such communications at any time by following the opt-out instructions included in any promotional or marketing email You receive from Telehealth Pro.

Agent Requests: Only You or someone legally authorized to act on Your behalf may submit a request regarding Your Personal Information. Depending on Your state of residence, You may authorize someone to make a privacy rights request on Your behalf (an authorized agent). Authorized agents will need to demonstrate that You have authorized them to act on Your behalf. Telehealth Pro retains the right to request confirmation from You directly to confirm that the agent is authorized to make such a request, or to request additional information to confirm the agent’s identity.

Opt-Out Requests: You may request to opt out of the sale or sharing of Your Personal Information, or of targeted advertising, at any time by clicking the “Your Privacy Choices” link here or at the bottom of any webpage on the Site. Submitting an opt-out request does not require You to create an Account with Telehealth Pro.

Alternatively, You can use certain preference signals to opt out automatically with all businesses that You interact with online, including Telehealth Pro. If You enable a browser-based opt-out preference signal, such as Global Privacy Control (GPC), upon receipt or detection, Telehealth Pro will endeavor to recognize and treat the signal as a valid request to opt out. If You use different browsers or browser profiles, You may need to enable the signal on each browser or profile if Telehealth Pro is unable to associate Your preference signal with You.

If You are not logged into Your Account, You may need to opt out separately on all of Your browsers and devices, as each opt-out will only apply to the specific browser or device from which You opt out if Telehealth Pro does not recognize who You are. If You delete or reset Your cookies or mobile identifiers, change browsers, or use a different device, this also may mean that the opt-out cookie or tool may no longer work, and You will have to opt out again.

In addition, You may opt out of the collection and use of Your Personal Information for ad targeting by Google Ad Manager on the Site and the App. You can opt out of this ad targeting powered by Google Ad Manager here.

Further, You may be able to opt out of receiving certain targeted or interest-based advertisements using the browser opt-out tools and consumer choice mechanisms provided by advertising industry self-regulatory groups by following the links below:

• Network Advertising Initiative (NAI): https://optout.networkadvertising.org/?c=1
• Digital Advertising Alliance (DAA): https://youradchoices.com/control

You also can control whether You see interest-based advertisements on Your mobile device(s) in the following ways:

• Your device operating system may provide mechanisms that allow You to opt in or opt out of the use of information about Your use of mobile apps to deliver interest-based advertising to Your mobile device. For more information, consult Your device settings.

• The DAA offers a tool for opting out of the collection of cross-app data on mobile devices for interest-based advertising. To exercise Your choices with respect to participating companies, please download the AppChoices tool at www.aboutads.info/appchoices.

Even if You choose to opt out of receiving interest-based advertising, You may still receive advertising, but the advertisements may be less relevant.

Some of Telehealth Pro’s partners may provide You with additional choices with respect to interest-based advertising. For example, certain social media platforms allow You to control your advertising preferences directly through their services. Please review the privacy policies of the third-party services You use for more information.

Telehealth Pro does not sell personal information. Certain third-party cookies or analytics tools may constitute a “sale” or “share” under state law; users may opt out via the “Do Not Sell or Share My Data” link on the Site. Telehealth Pro also honor opt-out preference signals where required by law.

8. DATA SECURITY

Telehealth Pro maintains reasonable administrative, technical, and physical safeguards to protect PII and PHI from unauthorized access or disclosure, including:

• Multi-factor authentication and least-privilege access controls;
• Continuous monitoring and encryption of data in transit and at rest;
• Vendor risk management and security due diligence;
• Incident response and breach notification protocols; and
• Annual training and testing for workforce members.

Although no system is completely secure, Telehealth Pro follows current HHS and NIST best practices and conducts regular risk assessments.

9. DATA RETENTION AND DESTRUCTION

Telehealth Pro only retains Personal Information for as long as necessary to fulfill its purpose, comply with legal obligations, resolve disputes, and enforce agreements. PHI is retained in accordance with federal and state record-retention requirements and Telehealth’s Business Associate Agreements. HIPAA administrative documentation is retained for at least six years, and medical and clinical records are retained in accordance with applicable federal and state medical record retention requirements, which may be longer. Telehealth Pro securely destroys or de-identifies data when no longer needed.

10. BREACH NOTIFICATION

If a breach of unsecured PHI or PII occurs, Telehealth Pro will notify affected individuals and regulators without unreasonable delay and within the timeframes required by applicable federal and state law. Vendors and business associates must report any incident to Telehealth Pro in accordance with all applicable law.

11. WORKFORCE RESPONSIBILITIES

Telehealth Pro maintains workforce training and internal reporting mechanisms to support compliance with privacy and security requirements.

12. EXTERNAL LINKS

The Telehealth Site and Service may have links to third-party services, which may have privacy policies that differ from Telehealth Pro’s policies. Telehealth Pro is not responsible for the practices of third-party services.

13. CHILDREN’S PRIVACY

Only individuals eighteen (18) years of age or older are authorized to use the Telehealth Pro Site and Services, either for themselves or on behalf of their minor children. Telehealth Pro does not knowingly collect information directly from children under the age of eighteen (18). If You are under the age of eighteen (18), do not attempt to create and Account or provide any Personal Information to Telehealth Pro. If You have reason to believe that an individual under the age of eighteen (18) has provided Personal Information to Telehealth Pro through the Site or Services, please contact Telehealth Pro, and Telehealth Pro will endeavor to delete that information from our databases.

14. HOW TO CONTACT TELEHEALTH PRO

If you have any questions or concerns about this Privacy Policy or the practices described herein, You may contact Telehealth Pro by email at legal@telehealthprofessional.com or by mail at 11354 Big Bend, Longmont, Colorado 80504.