_Last Updated: September 1, 2024_

Hey Doc Clinic, and its affiliates, including [insert affiliate names if applicable] (collectively “Hey Doc Clinic,” “we,” or “us”) respect and are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and disclose information about you when you access and use our website located at www.hey-doc.com (the “Site”), any Hey Doc Clinic mobile application (collectively, the “App”), connectivity required to receive telehealth services from Hey Doc Clinic Providers via the Virtual Clinic (the “Virtual Clinic”), membership services that include personal healthcare navigation services (“Membership Services”), wellness services, communication services, and other technology or personal services provided by Hey Doc Clinic (collectively, the “Services”). Generally, you can browse through our Site without giving us any information about yourself. When we need to collect your personally identifiable information (PII) to provide you with the Services, or when you choose to provide us with your PII, this Privacy Policy describes how we collect, use, and disclose your PII.

This Privacy Policy does not apply to the storage, use, and collection of protected health information (PHI), which is governed by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”) and is therefore covered by the Notice of HIPAA Privacy Practices (the “NPP”) posted by our medical professional affiliates, Hey Doc Clinic Providers. Any conflict between this Privacy Policy and the NPP with respect to PHI shall be resolved in favor of the NPP. Please also note that, unless otherwise defined in this Privacy Policy, all capitalized terms used have the same meanings as in our Terms of Service. Therefore, please ensure that you have read and understood our Terms of Service.

**Changes to this Privacy Policy**

We may amend this Privacy Policy from time to time. If we make any substantial changes to the way we use your PII, we will notify you of those changes by posting on the Service, App, and Site, or by sending you an email or other notification, and we will update the “Last Updated” date above to indicate when those changes will become effective.

**Information Collection**

Personally identifiable Information (“PII”), including PHI, means any information that may be used to identify an individual, including but not limited to, a first and last name, email address, home, postal or other physical address, and phone number.

**Information You Provide to Us**

We collect your PII when you create a Hey Doc Clinic account, submit an entry for a sweepstakes or other promotion, or provide your PII through the Services for any other reason. If you create an account through the Site or the App, or register for our Membership Services, we may also collect your credit or debit card information, title, birth date, gender, occupation, industry, personal interests, and other information. When you register for our Membership Services, we may also collect information about your income or other financial information to determine if you qualify for a waiver of the membership fee where applicable.

**Cookies and Tracking Technology**

A “cookie” is a small data file that certain websites write to your hard drive when you visit them. A cookie file can contain information such as a user ID that the website uses to track the pages you’ve visited, but the only PII a cookie can contain is information you supply yourself. A cookie can’t read data off your hard disk or read cookie files created by other websites. Some parts of the Services use cookies to understand user traffic patterns and to tell us how and when you interact with our Services. We use this information to determine the usefulness of our Services, see how effective our navigational structure is, and customize and improve our Services. Unlike persistent cookies, session cookies are deleted when you log off from the Services and close your browser.

If you prefer not to receive cookies while using our Services, you can set your browser to warn you before accepting cookies and refuse the cookie when your browser alerts you to its presence. You can also refuse all cookies by turning them off in your browser. While cookies are not necessary for all parts of our Services, turning them off may affect your ability to access certain features. Third-party service providers we engage may also place their own cookies on your hard drive. Note that this Privacy Policy covers only our use of cookies and does not include the use of cookies by such third parties.

Web beacons (also known as Web bugs, pixel tags, or clear GIFs) are tiny graphics with a unique identifier that may be included in our Services for purposes such as delivering or communicating with cookies, tracking and measuring performance, monitoring visitor counts, and evaluating advertising effectiveness. Unlike cookies, which are stored on the user’s hard drive, web beacons are typically embedded invisibly on web pages (or in emails).

**Information Related to Your Use of the Services**

If you have not created an account, you use our Services anonymously. We automatically log your IP address (the Internet address of your computer) and other information such as your browser type, operating system, the web page you visited before accessing our Services, and the pages or features of our Services you browse. This information, referred to as “Log Data,” helps us understand which parts of our Services are visited and for how long. We use Log Data to administer the Services and analyze (or engage third parties to analyze) it to improve, customize, and enhance the Services.

**Information Sent by Your Mobile Device**

We collect certain information that your mobile device sends when you use our Services, including a device identifier, user settings, operating system, and information about your use of our Services. By logging into the App on your mobile device, some information related to your medical treatment may be stored on your device. We are not responsible for unauthorized access by third parties to such information on your mobile device.

**Location Information**

When you use our App, we may collect and store location information by converting your IP address into a rough geo-location or by accessing your mobile device’s GPS coordinates if location services are enabled. We use this information to improve and personalize our App for you. If you do not want us to collect location information, you may disable this feature on your mobile device.

**Opt-Out**

We may occasionally send you newsletters and promotional emails about our Services. You will have the opportunity to “opt-out” of such communications (either through your account or by following the unsubscribe instructions in the email). However, certain communications regarding the Services, such as updates to our Terms of Service or this Privacy Policy or information about billing, are necessary and cannot be opted out of.

**Information Sharing and Disclosure**

Your PII is not shared outside of Hey Doc Clinic without your permission, except as described below.

**Information Shared with Our Service Providers**

We may engage third-party service providers to help administer and provide the Services. These providers have access to your PII only to perform services on our behalf and are obligated not to use or disclose your PII for any other purpose.

**Information Shared with Third Parties**

We may share aggregated and non-identifying information with third parties for quality improvement activities, industry research, demographic profiling, and similar purposes.

**Information Disclosed in Connection with Business Transactions**

Information, including PII, that we collect from users is considered a business asset. In the event of a merger, acquisition, asset sale, or bankruptcy, some or all of our assets, including your PII, may be transferred to a third-party acquirer.

**Information Disclosed for Our Protection and the Protection of Others**

We may cooperate with government and law enforcement officials or private parties to enforce and comply with the law. We may disclose any information about you as necessary or appropriate to: (i) enforce our Terms of Use, (ii) respond to claims or legal processes (including subpoenas), (iii) protect our property, rights, and safety and those of others, (iv) stop illegal or unethical activities, and (v) comply with HIPAA or other applicable laws (refer to the NPP).

**Your Ability to Review Your Account and Information**

If you are a registered user with an account, you can review your PII by signing in on www.heydocclinic.com.

**Data Security**

Your account information is password-protected. We use physical, electronic, and managerial procedures to safeguard your information. In certain areas of our Site and App, we use industry-standard SSL encryption to secure data transmissions. While we strive to protect your PII, we cannot guarantee the security of the information you transmit to us. We recommend taking precautions such as changing passwords regularly, using a combination of letters and numbers, and ensuring a secure browser.

**Responding to Do Not Track Signals**

Our Site does not currently respond to “Do Not Track” signals from various web browsers.

**Children and Privacy**

Our Services are not intended for children under the age of 13. We do not knowingly solicit PII from children under 13 or request such information. If we learn that we have collected PII from a child under 13, we will take steps to delete it promptly. We may, however, collect PII about children under 13 that parents or guardians provide when establishing accounts for their children.

**Third-Party Sites**

The Services may contain links to other sites operated by third parties. We are not responsible for the content, privacy, or security practices of these sites. We encourage you to review their privacy policies.

**International Transfer**

Your information is stored on controlled servers with limited access and may be processed in the United States or other countries where Hey Doc Clinic or our agents operate. If you are outside the U.S. and choose to provide your PII, it may be transferred and processed in the U.S. by using our Services from outside the U.S., you assume responsibility for compliance with applicable laws.