Privacy Policy

1) Introduction

This Privacy Policy describes the practices of HealthBridge and its affiliates ("we," "us," or "HealthBridge") regarding the collection, use, and disclosure of information when you use our services, websites, and related offerings (the "Services"). It applies to both general personal information and, where relevant, protected health information ("PHI") that we may receive or maintain in connection with care coordination and related activities.

By using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.

2) Information we collect

We may collect the following types of information:

• Contact and account information: name, email address, phone number, mailing address, and account credentials when you register or communicate with us.
• Health-related information: when permitted by law and with appropriate authorization, we may receive information related to your health, benefits, care history, or care coordination needs to support the Services.
• Usage and technical data: information about how you use our websites and services, device information, IP address, and similar technical data.
• Other information you provide: feedback, survey responses, and other information you choose to provide.

3) How we use your information

We use the information we collect to:

• Provide, operate, and improve the Services.
• Support care coordination and help you understand your health needs and benefits.
• Send relevant communications, reminders, and educational content.
• Respond to your requests and provide customer support.
• Comply with legal obligations and protect our rights and the rights of others.
• Analyze and improve the safety, quality, and performance of our Services (using aggregated or de-identified data where appropriate).

4) Sharing and disclosure

We do not sell your personal information or PHI. We may share information only in the following circumstances:

• Service providers: with vendors and partners who assist us in operating the Services, under strict confidentiality and data protection obligations.
• Care and operations: with healthcare providers, plans, or other entities involved in your care or the administration of the Services, as permitted by law and applicable agreements.
• Legal requirements: when required by law, court order, or government request, or to protect the rights, property, or safety of HealthBridge, our users, or others.
• With your consent: when you have given us explicit permission to share information for a specific purpose.

5) HIPAA and health information

When we receive, use, or disclose information that qualifies as protected health information under the Health Insurance Portability and Accountability Act ("HIPAA"), we do so in accordance with HIPAA and applicable state privacy laws. We maintain administrative, technical, and physical safeguards designed to protect PHI and limit its use and disclosure to what is permitted by law and our agreements.

We do not use or disclose PHI for marketing purposes unrelated to your care, and we do not sell PHI. Where we act as a business associate, we comply with the terms of our business associate agreements and applicable law.

6) Security

We use reasonable administrative, technical, and physical safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures may include access controls, encryption (in transit and, where appropriate, at rest), audit logging, and staff training. No method of transmission or storage is completely secure; we encourage you to protect your account credentials and to notify us if you suspect unauthorized access.

7) Your rights and choices

Depending on your location and the nature of the information, you may have the right to:

• Access or receive a copy of certain personal information we hold about you.
• Correct or update inaccurate information.
• Request deletion of certain information, subject to legal and operational requirements.
• Object to or restrict certain processing of your information.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority.

For PHI, you may have additional rights under HIPAA (e.g., right to an accounting of disclosures, right to request restrictions). To exercise your rights or for more information, contact us using the details in the Contact section below.

8) Cookies and tracking

We may use cookies, web beacons, and similar technologies to operate our websites, remember your preferences, and analyze usage. You can typically control cookies through your browser settings. Disabling certain cookies may affect the functionality of our websites. We do not use tracking for third-party advertising based on your health information.

9) Children

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

10) Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on our website and updating the "Last updated" date, or by other appropriate means. We encourage you to review this policy periodically. Your continued use of the Services after changes become effective constitutes acceptance of the updated policy.

11) Contact us

If you have questions about this Privacy Policy or our privacy practices, or to exercise your rights, please contact us:

• Privacy / Data Protection: privacy@healthbridgeaco.com
• Support: support@healthbridgeaco.com
• Phone: (305) 733 3078
• Mail: HealthBridge, 145 Fifth Avenue, New York, NY 10160