Privacy Policy

Polycare ("Polycare," "we," "our," or "us") respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes how we collect, process, retain, and disclose personal data about you when you use the Polycare website at polycare.com and any pages that link to this policy (our "Services"), and our practices for using, maintaining, protecting, and disclosing that information.

This policy applies only to information we collect:

• Through the Services, as described below.
• In communications, including email and telephone, between you and the contact point identified in this policy.
• Through Google Analytics and related first-party cookies or similar technologies used on the Services.

It does not apply to information collected by:

• Any third party, including through any application, directory, content, or website that may link to or be accessible from or through the Services.
• Any other website or service that does not link to this policy.

We may provide additional or different privacy policies that are specific to certain features, services, or activities.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you acknowledge the collection, use, and disclosure of your information as described in this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy). Please check the policy periodically for updates.

Children's and Minors' Data

Our Services are not intended for, and we do not knowingly collect personal data directly from, children under the age of 18. If we learn that we have collected or received personal data from a child under 18 without appropriate authorization, we will delete that information as required by law.

The Personal Data That We Collect or Process

"Personal data" is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, or other information that may be used to contact or identify you.

The Services do not offer user accounts, purchases, subscriptions, patient portals, applications, or online submission forms. The only way a visitor may choose to provide personal data directly in connection with the Services is by using the Contact Us information made available through the Services.

The types and categories of personal data we may collect or process are limited to:

• Contact information. Your name, email address, telephone number, organization, and other contact information you choose to provide.
• Communication content. The subject, contents, and any attachments included in a message you choose to send.
• Limited technical information. Information included in ordinary internet requests and processed by the network, hosting, or security systems used to deliver the Services, such as an IP address, browser type, requested page, and date and time of access.
• Analytics information. Information about use of the Services collected through Google Analytics, such as pages viewed, interactions, referring pages, device and browser information, approximate location, and the date and time of a visit.

Please do not send health or medication information, insurance information, financial account information, Social Security numbers, government-issued identification numbers, or other sensitive personal data through the Contact Us channel. The Services are informational and are not a patient portal or a secure channel for clinical communications. Do not use the Contact Us channel for medical emergencies; call 911 or your local emergency number.

We also may derive statistical or aggregated information from information described above. Statistical or aggregated information does not directly identify a specific person. If we combine non-personal information with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal data.

How We Collect Your Personal and Other Data

You Provide Information to Us

We collect information about you when you choose to contact us using an email address, telephone number, or other contact method made available through the Services. We receive only the information you choose to include in that communication.

Automatically Through Our Services

As with any website, the network, hosting, and security systems used to transmit and protect the Services may process limited technical information included in ordinary internet requests. This processing is used only as reasonably necessary to deliver, secure, maintain, and troubleshoot the Services. We do not use that information to track visitors across websites.

The Services use Google Analytics, which may use first-party cookies or similar identifiers to distinguish visitors and sessions and collect analytics information about interactions with the Services. We use this information to estimate audience size and usage patterns, understand how the Services perform, diagnose errors, and improve content. We do not use information collected through the Polycare website for targeted advertising or cross-site behavioral tracking.

Google processes Google Analytics information under its own terms and privacy practices. More information is available in the Google Privacy Policy and through the Google Analytics opt-out browser add-on.

Links to Other Websites and Services

The Services may include links to a provider directory or other content hosted on a separate website. When you follow a link to another website or service, you leave the Services, and the destination website's privacy policy and terms apply. This policy does not describe the destination website's collection, use, or disclosure of information.

How We Use Your Information

We use information that we collect about you or that you provide to us, including personal data, to:

• Respond to, route, and follow up on questions, comments, or requests you submit.
• Provide, maintain, secure, and troubleshoot the Services.
• Estimate audience size and usage patterns and improve the Services through Google Analytics.
• Prevent, detect, and investigate fraud, abuse, security incidents, or other harmful activity.
• Comply with applicable laws, court orders, legal processes, and government or regulatory requests.
• Protect the rights, property, or safety of Polycare, visitors to the Services, or others.
• Fulfill any other purpose for which you provide the information.
• Use the information in any other way we describe when you provide it, or for any other purpose with your consent.

We do not use personal data collected through the Services to make automated decisions that produce legal or similarly significant effects about you.

Who We Disclose Your Information To

We may disclose aggregated information about visitors, and information that does not identify any individual, without restriction.

We may also disclose personal data that we collect or you provide as described in this privacy policy:

• To contractors, service providers, and other parties that support website hosting, security, communications, and analytics, and that are authorized to use the information only as needed to perform those services.
• To a buyer or other successor in connection with a merger, divestiture, restructuring, reorganization, dissolution, financing, acquisition, or other sale or transfer of some or all of the relevant business or assets.
• To fulfill the purpose for which you provide the information.
• For any other purpose disclosed by us when you provide the information.
• With your consent or at your direction.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce applicable terms or agreements.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Polycare, visitors to the Services, or others.

The categories of personal data we may disclose are limited to contact information, communication content, limited technical information, and analytics information, as described above.

We do not sell personal data, disclose personal data for targeted advertising, or use personal data collected through the Services for profiling in furtherance of decisions that produce legal or similarly significant effects.

Your Rights and Choices About Your Information

This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live.

Advertising, Marketing, Cookies, and Other Tracking Technologies Choices

Cookies and Other Tracking Technologies. Google Analytics may use first-party cookies or similar identifiers as described above. You can set your browser to refuse all or some browser cookies, alert you when cookies are being sent, or delete cookies after they are stored. You may also use the Google Analytics opt-out browser add-on identified above. If you disable cookies, analytics may be limited, but the core informational content of the Services should remain available.

Global Privacy Control. Some browsers and browser extensions support the Global Privacy Control ("GPC"), which can communicate an opt-out preference for certain data practices. We do not sell personal data or use it for targeted advertising through the Services. We will recognize and process GPC signals as required by applicable law.

Your State Privacy Rights

Depending on your state of residency and subject to applicable exceptions, you may have certain rights related to your personal data, including:

• Access and Data Portability. You may confirm whether we process your personal data and request access to or a copy of the personal data we process. To the extent feasible and required by applicable law, data will be provided in a portable format.
• Correction. You may request that we correct inaccuracies in personal data that we maintain, taking into account the nature of the information and the purposes of processing.
• Deletion. You may request that we delete personal data about you that we maintain, subject to exceptions under applicable law.
• Opt Out of Sales, Targeted Advertising, and Certain Profiling. You may request to opt out of the sale of personal data, targeted advertising, or certain profiling. We do not engage in those activities through the Services.

The exact scope of these rights varies by state, and exceptions may apply. To exercise an applicable right, email support@herohealth.com with the subject line "Polycare Privacy Request" or use the contact information below. We may need to verify your identity and authority before completing a request. To appeal a decision regarding a request, reply to our response with the subject line "Privacy Appeal." We will not discriminate against you for exercising an applicable privacy right.

How We Protect Your Personal Data

We use commercially reasonable administrative, physical, and technical measures designed to protect personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of personal data transmitted to, through, or in connection with the Services. In particular, ordinary email may not be secure, and you should carefully decide what information you send through a Contact Us channel. Any transmission of personal data is at your own risk.

The safety and security of your information also depends on you. You are responsible for taking reasonable steps to protect your personal data against unauthorized use, disclosure, and access.

How We Retain Your Personal Data

We keep the categories of personal data described in this policy for as long as reasonably necessary to fulfill the purposes described or as otherwise legally permitted or required, such as responding to communications, maintaining appropriate business records, operating and securing the Services, complying with legal obligations, resolving disputes, and preventing fraud or abuse. Analytics information is retained according to configured provider settings and operational needs. At the end of the applicable retention period, personal data will be deleted, destroyed, or deidentified, subject to legal and technical limitations.

Changes to Our Privacy Policy

We may update this policy from time to time, and we will provide notice of any changes as required by law. The date the privacy policy was last updated is identified at the top of the page. We will notify you of changes by updating the "Last updated" date and posting the revised policy on the Services. You should check the Services periodically to review the current policy and any changes we have made.

Contact Information

To exercise your rights or ask questions or comment about this privacy policy or our privacy practices, contact us at: