EMOREX HEALTH

WEBSITE PRIVACY POLICY

Effective Date: October 1, 2026

Emorex Health ("Emorex," "we," "us," or "our") respects your privacy. This Website Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit our website, request information, submit a referral or intake form, use our telehealth or care-coordination services, or otherwise interact with us (collectively, the "Services"). Please read this Policy carefully. By using the Services, you acknowledge the practices described here. If you do not agree, please do not use the Services. This Policy does not itself create a contractual right beyond rights provided by applicable law.

Important HIPAA distinction. This Website Privacy Policy is not necessarily Emorex's HIPAA Notice of Privacy Practices. If Emorex or an affiliated medical practice is required to provide a separate Notice of Privacy Practices, that notice will govern uses and disclosures of protected health information ("PHI") by the applicable HIPAA-regulated entity. If this Policy conflicts with that notice regarding PHI, the Notice of Privacy Practices controls.

1. Scope

This Policy applies to information collected through the Services and through communications with Emorex. It does not apply to independent physicians, professional medical entities, pharmacies, laboratories, insurers, law firms, or other third parties that maintain their own privacy practices, except to the extent Emorex processes information for them under applicable agreements and law. Links to third- party websites are provided for convenience; their privacy practices are governed by their own policies.

2. Information We Collect

Depending on how you interact with us, we may collect:

• Identity and contact information, such as name, date of birth, mailing address, email address, telephone number, preferred language, and emergency contact information.
• Health and care information, such as symptoms, medical history, diagnoses, medications, allergies, test results, appointment information, treatment records, provider notes, and telehealth-related information.
• Accident, claim, insurance, and legal-case information, such as accident date and circumstances, insurer, policy and claim numbers, adjuster information, attorney or law-firm information, letters of protection or lien-related information, and records relevant to payment or care coordination.
• Referral and professional information, including information submitted by attorneys, medical providers, case managers, insurers, employers, or other authorized referral sources.
• Transaction and billing information, including amounts billed or paid and related account information. Payment-card data, if accepted, may be processed directly by a third-party payment processor.
• Device, usage, and technical information, such as IP address, browser and device type, operating system, pages viewed, referring URLs, access times, approximate location derived from IP address, cookie identifiers, and security logs.
• Communications and preferences, including messages, call records, consent choices, survey responses, and marketing preferences.
• Other information you voluntarily provide.

3. How We Collect Information

We may collect information directly from you; from an authorized representative; from attorneys, healthcare providers, professional medical entities, pharmacies, testing vendors, insurers, claims administrators, employers, and referral partners; automatically through cookies and similar technologies; and from vendors that support our operations. We may combine information from these sources where permitted by law.

4. How We Use Information

We may use information to:

• Respond to inquiries, receive referrals, verify identity and eligibility, schedule appointments, facilitate telehealth encounters, coordinate care, support testing and treatment, and communicate about the Services.
• Support clinical, administrative, pharmacy, billing, claims, records, lien, and collection processes, as applicable and legally permitted.
• Operate, maintain, personalize, analyze, and improve our website, workflows, technology, customer service, and patient experience.
• Send service-related notices and, where permitted, informational or marketing communications consistent with your preferences.
• Protect patients, users, providers, Emorex, and others; prevent fraud and misuse; secure systems; enforce agreements; and investigate incidents.
• Comply with legal, regulatory, licensing, accreditation, tax, audit, reporting, and record-retention obligations.
• Create aggregated or de-identified information that does not reasonably identify an individual, and use it for lawful business, analytical, quality-improvement, and research purposes.

5. How We Disclose Information

We do not sell personal information for money. We may disclose information as reasonably necessary and permitted by law to:

• Healthcare providers and professional medical entities involved in evaluation, treatment, testing, consultation, follow-up care, or care coordination.
• Pharmacies, laboratories, diagnostic vendors, interpreters, and other organizations supporting requested healthcare services.
• Attorneys, law firms, insurers, claims administrators, employers, or authorized representatives when authorized by you, required for an applicable claim or payment arrangement, or otherwise permitted by law.
• Service providers that perform hosting, telehealth technology, electronic medical record, scheduling, communications, document management, analytics, security, billing, records, payment, delivery, or other operational functions. These parties are permitted to use information only for authorized purposes, subject to applicable agreements and law.
• Government agencies, regulators, courts, law enforcement, or other parties when required or permitted by law, legal process, public-health obligations, or to protect rights, safety, and security.
• Parties to an actual or proposed merger, financing, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality protections and applicable law.
• Other parties at your direction or with your consent.

We may use and disclose aggregated or de-identified information for lawful purposes. If we use advertising or analytics technologies that constitute a "sale," "sharing," or targeted advertising under an applicable state law, we will provide any notice and opt-out mechanism required by that law.

6. Cookies and Similar Technologies

We and authorized vendors may use cookies, pixels, software development kits, session-replay tools, and similar technologies to keep the website functioning, remember preferences, understand use, measure performance, and protect the Services. Some technologies may be considered analytics or advertising technologies under applicable law. Browser settings and any cookie-preference tool offered on the website may allow you to control certain technologies, although disabling them may affect functionality. We do not intend to use tracking technologies on authenticated patient portals or pages in a manner that impermissibly discloses PHI.

7. Communications

By providing contact information, you may receive communications related to appointments, referrals, care coordination, records, billing, or account administration. Email and standard text messaging may not always be secure. Where required, we will obtain consent before sending marketing texts, automated calls, or promotional emails. You may opt out of promotional emails by using the unsubscribe link and may opt out of promotional texts by replying STOP. Opting out of marketing does not prevent service-related or legally required communications.

8. Data Security and Retention

We use reasonable administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send sensitive medical or financial information through unsecured website forms or ordinary email unless specifically instructed. We retain information for as long as reasonably necessary for the purposes described in this Policy, to provide the Services, maintain medical and business records, resolve disputes, enforce agreements, and satisfy legal, regulatory, contractual, insurance, and professional requirements. Retention periods vary by record type, relationship, and jurisdiction.

9. Your Choices and Privacy Rights

Depending on your relationship with us and where you live, you may have rights to request access to, correction of, or deletion of certain personal information; obtain a copy; restrict or object to certain processing; opt out of certain targeted advertising, sale, or sharing; withdraw consent where processing relies on consent; or appeal a decision. These rights may be limited by HIPAA, medical-record laws, litigation holds, claim obligations, identity-verification requirements, and other legal exceptions.

To submit a privacy request, contact us using Section 15. We may verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, subject to verification. We will not unlawfully discriminate against you for exercising a privacy right. For PHI maintained by a HIPAA-covered healthcare provider, please use the process described in that provider's Notice of Privacy Practices. HIPAA rights may include access, amendment, an accounting of certain disclosures, confidential communications, restrictions, and the right to complain without retaliation.

10. Children's Privacy

The public-facing website is not directed to children under 13, and we do not knowingly collect personal information online directly from children under 13 without authorization and any consent required by law. Healthcare services for a minor may involve information provided by a parent, guardian, authorized representative, referring provider, or attorney and will be handled under applicable law. If you believe a child has provided information improperly, contact us.

11. Telehealth and Third-Party Platforms

Telehealth visits, patient portals, electronic signatures, testing, scheduling, and prescription or pharmacy services may be delivered through third-party platforms. Those platforms may collect information as our service providers, as business associates where applicable, or under their own privacy policies depending on the relationship. Review any separate notices presented by those platforms. Do not use the website for a medical emergency; call 911 or seek immediate emergency care.

12. State-Specific Disclosures

Residents of certain states may have additional rights regarding consumer health data or personal information. If required, Emorex will provide a supplemental state privacy notice describing covered data, purposes, categories of recipients, consent requirements, rights, appeals, and complaint options.

13. Do Not Track and Global Privacy Controls

Because there is not a uniform industry standard for browser-based Do Not Track signals, the website may not respond to them. Where required by applicable law and technically supported, we will process recognized opt-out preference signals, such as Global Privacy Control, as required.

14. Changes to This Policy

We may update this Policy to reflect changes in our practices, technology, Services, or legal obligations. We will post the revised Policy on the website and update the Effective Date. If required by law, we will provide additional notice or obtain consent before a material change takes effect.

15. Contact Us

Questions, complaints, or privacy requests may be directed to:

Emorex Health

Attn: Privacy Officer

Email: Info@emorexhealth.com

You may also have the right to complain to the U.S. Department of Health and Human Services, Office for Civil Rights, or another applicable regulator. We will not retaliate against you for making a good-faith privacy complaint.