Privacy Policy

Polycare, Inc. ("Polycare," "we," "our," or "us") respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes how we collect, process, retain, and disclose personal data about you when you use the Polycare website at poly.care and any pages that link to this policy (our "Services"), and our practices for using, maintaining, protecting, and disclosing that information.

This policy applies only to information we collect:

• Through the Services, as described below.
• In communications, including through email, telephone, text message, contact forms, or other contact methods made available through the Services.
• Through Google Analytics, if enabled, and related first-party cookies or similar technologies used on the Services.

It does not apply to information collected by:

• Any third party, including through any application, directory, content, or website that may link to or be accessible from or through the Services.
• Any other website or service that does not link to this policy.

We may provide additional or different privacy policies that are specific to certain features, services, or activities.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you acknowledge the collection, use, and disclosure of your information as described in this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy). Please check the policy periodically for updates.

Children's and Minors' Data

Our Services are not intended for, and we do not knowingly collect personal data directly from, children under the age of 18. If we learn that we have collected or received personal data from a child under 18 without appropriate authorization, we will delete that information as required by law.

The Personal Data That We Collect or Process

"Personal data" is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, or other information that may be used to contact or identify you.

The Services do not offer user accounts, purchases, subscriptions, patient portals, or applications. The Services may include a Contact Us form and may also make email addresses, telephone numbers, or other contact methods available. The only ways a visitor may choose to provide personal data directly in connection with the Services are by submitting a Contact Us form or by using the contact information made available through the Services.

The types and categories of personal data we may collect or process are limited to:

• Contact information. Your name, email address, mobile phone number, ZIP code, organization, and other contact information you choose to provide.
• Communication content. The subject, contents, optional message field, attachments, and other information included in a message or Contact Us form submission that you choose to send.
• Communication preferences and consent records. Your communication preferences and consents, including email and text-message opt-ins, opt-outs, checkbox selections, consent status, and related logs or records used to document and honor those choices.
• Limited technical information. Information included in ordinary internet requests and processed by the network, hosting, contact-form, communications, or security systems used to deliver the Services, such as an IP address, browser type, requested page, and dates and times of access or form submission.
• Analytics information. Information about use of the Services collected through Google Analytics, if enabled, such as pages viewed, interactions, referring pages, device and browser information, approximate location, and the date and time of a visit.

Please do not send health or medication information, insurance information, financial account information, Social Security numbers, government-issued identification numbers, or other sensitive personal data through the Contact Us channel or any Contact Us form. The Services are informational and are not a patient portal or a secure channel for clinical communications. Contact Us forms are not intended for medical advice, clinical communications, emergencies, or urgent needs. Do not use the Contact Us channel or any Contact Us form for medical emergencies; call 911 or your local emergency number.

We also may derive statistical or aggregated information from information described above. Statistical or aggregated information does not directly identify a specific person. If we combine non-personal information with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal data.

How We Collect Your Personal and Other Data

You Provide Information to Us

We collect information about you when you choose to contact us using a Contact Us form, email address, telephone number, or other contact method made available through the Services. If you submit a Contact Us form, we collect the information requested by the form, such as your name, email address, mobile phone number, ZIP code, optional message, and any optional communication consent selections. We receive only the information you choose to include or submit.

Contact Form, Email, and Text Communications

If the Services include a Contact Us or similar form, we use form submissions to receive, verify, route, respond to, and follow up on requests; determine whether Polycare-related services may be available in your geographic area; maintain records of the request and any communication preferences or consents; and operate, secure, and improve the Services. Submitting a Contact Us form does not create a patient-provider relationship, initiate medical treatment, or guarantee eligibility, enrollment, onboarding, care, or services.

If you provide an email address through the Services, we may use it to respond to your inquiry and send service-related or administrative email communications related to your request, eligibility, enrollment, account, appointments, or other Polycare-related services. We may send promotional or marketing emails only as permitted by law and your choices. You may opt out of marketing emails by using the unsubscribe instructions in those messages or contacting us, but we may still send non-promotional, service-related, transactional, or responsive communications where permitted by law.

Text messaging is optional. If you provide a mobile phone number and separately opt in to transactional text messages, we may send text messages about your account, appointments, eligibility, device or shipment status, or similar service-related matters. If you separately opt in to promotional or marketing text messages, we may send marketing offers or promotional messages. Message frequency varies. Message and data rates may apply. You may reply STOP to cancel at any time, or HELP for help. Consent to receive text messages is not a condition of purchase, care, or service.

Automatically Through Our Services

As with any website, the network, hosting, and security systems used to transmit and protect the Services may process limited technical information included in ordinary internet requests. This processing is used only as reasonably necessary to deliver, secure, maintain, and troubleshoot the Services. We do not use that information to track visitors across websites.

The Services may use Google Analytics, if enabled, which may use first-party cookies or similar identifiers to distinguish visitors and sessions and collect analytics information about interactions with the Services. We use this information to estimate audience size and usage patterns, understand how the Services perform, diagnose errors, and improve content. We do not use information collected through the Polycare website for targeted advertising or cross-site behavioral tracking.

Google processes Google Analytics information under its own terms and privacy practices. More information is available in the Google Privacy Policy and through the Google Analytics opt-out browser add-on.

Links to Other Websites and Services

The Services may include links to a provider directory or other content hosted on a separate website. When you follow a link to another website or service, you leave the Services, and the destination website's privacy policy and terms apply. This policy does not describe the destination website's collection, use, or disclosure of information.

How We Use Your Information

We use information that we collect about you or that you provide to us, including personal data, to:

• Respond to, route, and follow up on questions, comments, or requests you submit.
• Evaluate service availability or route requests based on information you submit, such as ZIP code.
• Send email, text message, telephone, or other communications you request or authorize, including service-related communications about your inquiry, eligibility, enrollment, account, appointments, device or shipment status, or similar matters.
• Send marketing or promotional communications only in accordance with your choices and applicable law.
• Verify, document, administer, and honor communication preferences, consents, and opt-out requests.
• Provide, maintain, secure, and troubleshoot the Services.
• Estimate audience size and usage patterns and improve the Services through Google Analytics, if enabled.
• Prevent, detect, and investigate fraud, abuse, security incidents, or other harmful activity.
• Comply with applicable laws, court orders, legal processes, and government or regulatory requests.
• Protect the rights, property, or safety of Polycare, visitors to the Services, or others.
• Fulfill any other purpose for which you provide the information.
• Use the information in any other way we describe when you provide it, or for any other purpose with your consent.

We do not use personal data collected through the Services to make automated decisions that produce legal or similarly significant effects about you.

Who We Disclose Your Information To

We may disclose aggregated information about visitors, and information that does not identify any individual, without restriction.

We may also disclose personal data that we collect or you provide as described in this privacy policy:

• To contractors, service providers, and other parties that support website hosting, security, contact forms, customer support, email, telephone, SMS/text messaging, communications, and analytics, and that are authorized to use the information only as needed to perform those services.
• To a buyer or other successor in connection with a merger, divestiture, restructuring, reorganization, dissolution, financing, acquisition, or other sale or transfer of some or all of the relevant business or assets.
• To fulfill the purpose for which you provide the information.
• For any other purpose disclosed by us when you provide the information.
• With your consent or at your direction.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce applicable terms or agreements.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Polycare, visitors to the Services, or others.

The categories of personal data we may disclose are limited to contact information, communication content, communication preferences and consent records, limited technical information, and analytics information, as described above.

We do not sell personal data, disclose personal data for targeted advertising, or use personal data collected through the Services for profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell mobile phone numbers, text-message opt-in records, or communication-consent information, and we do not share that information with third parties for their own marketing or promotional purposes.

Your Rights and Choices About Your Information

This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live.

Advertising, Marketing, Cookies, and Other Tracking Technologies Choices

• Email and Text Message Choices. You may opt out of marketing emails by using unsubscribe instructions in those messages or by contacting us. You may opt out of text messages by replying STOP to any text message from us; you may reply HELP for help. We may continue to send non-promotional, service-related, transactional, or responsive communications where permitted by law.
• Cookies and Other Tracking Technologies. Google Analytics, if enabled, may use first-party cookies or similar identifiers as described above. You can set your browser to refuse all or some browser cookies, alert you when cookies are being sent, or delete cookies after they are stored. You may also use the Google Analytics opt-out browser add-on identified above. If you disable cookies, analytics may be limited, but the core informational content of the Services should remain available.
• Global Privacy Control. Some browsers and browser extensions support the Global Privacy Control ("GPC"), which can communicate an opt-out preference for certain data practices. We do not sell personal data or use it for targeted advertising through the Services. We will recognize and process GPC signals as required by applicable law.

Your State Privacy Rights

Depending on your state of residency and subject to applicable exceptions, you may have certain rights related to your personal data, including:

• Access and Data Portability. You may confirm whether we process your personal data and request access to or a copy of the personal data we process. To the extent feasible and required by applicable law, data will be provided in a portable format.
• Correction. You may request that we correct inaccuracies in personal data that we maintain, taking into account the nature of the information and the purposes of processing.
• Deletion. You may request that we delete personal data about you that we maintain, subject to exceptions under applicable law.
• Opt Out of Sales, Targeted Advertising, and Certain Profiling. You may request to opt out of the sale of personal data, targeted advertising, or certain profiling. We do not engage in those activities through the Services.

The exact scope of these rights varies by state, and exceptions may apply. To exercise an applicable right, email hello@poly.care with the subject line "Polycare Privacy Request" or use the contact information below. We may need to verify your identity and authority before completing a request. To appeal a decision regarding a request, reply to our response with the subject line "Privacy Appeal." We will not discriminate against you for exercising an applicable privacy right.

How We Protect Your Personal Data

We use commercially reasonable administrative, physical, and technical measures designed to protect personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of personal data transmitted to, through, or in connection with the Services. In particular, ordinary email may not be secure, and you should carefully decide what information you send through a Contact Us channel. Any transmission of personal data is at your own risk.

The safety and security of your information also depends on you. You are responsible for taking reasonable steps to protect your personal data against unauthorized use, disclosure, and access.

How We Retain Your Personal Data

We keep the categories of personal data described in this policy for as long as reasonably necessary to fulfill the purposes described or as otherwise legally permitted or required, such as responding to communications, maintaining appropriate business records, documenting communication consents and opt-out preferences, operating and securing the Services, complying with legal obligations, resolving disputes, and preventing fraud or abuse. Analytics information, if collected, is retained according to configured provider settings and operational needs. At the end of the applicable retention period, personal data will be deleted, destroyed, or deidentified, subject to legal and technical limitations.

Changes to Our Privacy Policy

We may update this policy from time to time, and we will provide notice of any changes as required by law. The date the privacy policy was last updated is identified at the top of the page. We will notify you of changes by updating the "Last updated" date and posting the revised policy on the Services. You should check the Services periodically to review the current policy and any changes we have made.

Contact Information

To exercise your rights or ask questions or comment about this privacy policy or our privacy practices, contact us at: