HYS Tech, LLC Privacy Policy

Introduction

HYS Tech, LLC ("Company", "We", or "our") respects your privacy and is committed to protecting it through our compliance with this policy.

This policy describes (a) the types of information we may collect from you or that you may provide when you visit the Company's website at haodrs.com (the "Website"), and (b) our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

• On the Website.
• In email, text, and other electronic messages between you and the Website.
• When you interact with our advertising and applications on third-party Websites and services, if those applications or advertising include links to this policy.

Except as otherwise provided in this policy, it does not apply to information collected by:

• Us offline or through any other means, including on any other website or application operated by Company or any third party; or
• Any third party, including through any application or content (including advertising) that may link to or be accessible from or on the Website.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use the Website. By accessing or using the Website, you agree to this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

You also acknowledge and agree that your access to and use of our Website is subject to our Terms of Use and any conflict between this Policy and the Terms of Use will be determined in favor of the Terms of Use. You also acknowledge and agree that we are not responsible for how third-parties, vendors, and service providers collect or use your information.

Children Under the Age of 13

Our Website is not intended for children under 13 years of age. No one under age 13 may provide any information to or on the Website. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on the Website or through any of its features, register on the Website, make any purchases through the Website, use any of the interactive or public comment features of the Website, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use.

If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us through the support chat feature in your account, or email us at [email protected].

California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see the State-Specific Privacy Rights section for more information.

Personal Information We Collect

When you use the Website, we automatically collect certain information about your computer or mobile device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your computer or mobile device. Additionally, as you browse the Website, we collect information about the individual pages or features of the Website that you view, what Websites or search terms referred you to the Website, and information about how you interact with the Website. We refer to this automatically collected information as "Device Information".

We collect Device Information using the following technologies:

• Cookies are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit allaboutcookies.org.
• Log files track actions occurring on the Website, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
• Web beacons, tags, and pixels are electronic files used to record information about how you browse the Website.

Our Website may include links to other Internet destination websites, including third party managed contents.

Publicly Available Healthcare Provider Information

In addition to the personal information described above that we collect from Website users, our Website displays healthcare provider information obtained from the Centers for Medicare & Medicaid Services (CMS) National Plan and Provider Enumeration System (NPPES). The NPPES is a publicly available federal database. This information includes:

• National Provider Identifier (NPI) numbers
• Provider names and credentials
• Practice addresses and contact information
• Specialty and taxonomy codes
• Medicare enrollment information

This publicly available information:

• Is published by the federal government for public use under federal open data initiatives
• Is not collected from the healthcare providers through our Website
• Is displayed to help users find and research healthcare providers
• Is subject to the accuracy and timeliness of the source database maintained by CMS
• Is distinct from personal information that you provide to us directly through the Website

We do not sell, rent, or trade healthcare provider information obtained from the NPPES database. This information is used solely to provide our healthcare provider directory service.

Healthcare Provider Information Rights

If you are a healthcare provider and your information appears on our Website:

• Your information is sourced from the publicly available NPPES database maintained by CMS, not from any information you have provided to us directly.
• This information is considered publicly available under federal open data initiatives and is not subject to the same privacy protections as personal information you provide directly to us.
• To update or correct your information, you should first update your NPPES record directly with CMS at nppes.cms.hhs.gov.
• After updating your NPPES record, you may sign up for a free provider account on our Website and use the support chat feature to request expedited synchronization of your updated information.
• We will update your information to reflect the current NPPES record within a reasonable timeframe.

For questions about your provider listing, please sign up for a provider account and contact us through the support chat feature. For more information about how we use NPPES data, please see the Healthcare Provider Directory Services section of our Terms of Use and our Provider Data Notice.

How Do We Use Your Personal Information?

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Website (for example, by generating analytics about how our customers browse and interact with the Website, and to assess the success of our marketing and advertising campaigns).

Sharing Your Personal Information

We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Google Analytics to help us understand how our customers use the Website -- you can read more about how Google uses your Personal Information here. You can also opt-out of Google Analytics.

We may also share your Personal Information with third parties to help personalize or customize the services we provide.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Behavioral Advertising

We may maintain a presence on third-party social networking sites such as Facebook, LinkedIn, Twitter, and others. We do not control, and are not responsible for, the collection, tracking, use, or disclosure of your information gathered through social networking websites and applications, including through our Website within other applications, or otherwise as a result of your participation in social networking sites.

Third-party social networking applications and advertisers on these applications, including on the Website pages within these sites, are not obligated to follow or apply this Policy or the Terms of Use. If you have any questions about an advertisement or other targeted content, you should contact the responsible social networking provider directly and refer to the applicable privacy policy and terms of use of that social networking provider.

As described above, we may use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's educational page.

You can opt out of targeted advertising by using the links below:

• Facebook
• Google
• Bing

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal.

Cross-Device Tracking

Functionality within our Website may permit you to roam and access services, preferences, and content across your computing devices from phones to tablets. Rather than residing as a static software program on your device, key components of the Website are cloud-based, updated periodically, to provide you with the latest improvements and features. In order to provide this experience, we collect data about you, your device, and the way you use our Website.

Do Not Track

Please note that we do not alter our Website's data collection and use practices when we see a Do Not Track signal from your browser.

Accessing and Correcting Your Information

You can review and change your Personal Information by logging into the Website and visiting your account profile page.

You may also contact us through the support chat feature in your account, or email us at [email protected], to request access to, correct or delete any Personal Information that you have provided to us. We cannot delete your Personal Information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

State-Specific Privacy Rights

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information that you provide directly to us:

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out: You have the right to opt out of the "sale" or "sharing" of your personal information. We do not sell personal information in the traditional sense. If we share personal information with third parties for cross-context behavioral advertising purposes, you may opt out by contacting us.
• Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information, you have the right to limit its use.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, please sign up for an account and contact us through the support chat feature, or email us at [email protected]. We will verify your identity before processing your request.

California's "Shine the Light" law (Civil Code Section 1798.83) permits California residents to request information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

We do not have actual knowledge that we sell or share personal information of California residents under 16 years of age.

Your Colorado Privacy Rights (CPA)

If you are a Colorado resident, the Colorado Privacy Act provides you with the following rights regarding personal data you provide directly to us:

• Right to Access: You may request confirmation of whether we process your personal data and access to that data.
• Right to Correct: You may request correction of inaccuracies in your personal data.
• Right to Delete: You may request deletion of your personal data.
• Right to Data Portability: You may request a copy of your personal data in a portable format.
• Right to Opt-Out: You may opt out of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise these rights, please sign up for an account and contact us through the support chat feature. If we decline your request, you may appeal by contacting us with the subject line "Colorado Privacy Appeal."

Your Virginia Privacy Rights (VCDPA)

If you are a Virginia resident, the Virginia Consumer Data Protection Act provides similar rights to access, correct, delete, obtain a copy of your personal data, and opt out of targeted advertising, sale of personal data, and profiling. To exercise these rights, contact us through the support chat feature in your account.

Your Connecticut Privacy Rights (CTDPA)

If you are a Connecticut resident, the Connecticut Data Privacy Act provides you with rights to access, correct, delete, obtain a copy of your personal data, and opt out of the sale of personal data, targeted advertising, and profiling. To exercise these rights, contact us through the support chat feature in your account.

Other State Privacy Rights

Residents of other states with comprehensive privacy laws (including but not limited to Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, and Tennessee) may have similar rights under their respective state laws. We are committed to honoring valid privacy requests from residents of all U.S. states. To exercise any privacy rights available to you under your state's law, please sign up for an account and contact us through the support chat feature.

Verification and Response Timing

When you submit a privacy rights request, we will verify your identity using reasonable methods, which may include confirming information you previously provided to us. We will respond to verifiable requests within the timeframes required by applicable law (generally 45 days, with possible extensions as permitted by law).

Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We may require the authorized agent to provide proof of written authorization and may still require you to verify your identity directly with us.

Data Transfers

We and the Website are based in the United States. Regardless of where you access the Website, the information collected as part of that use will be transferred to and maintained on servers located in the United States. Any information we obtain about you will be stored in accordance with U.S. privacy laws, regulations, and standards, which may not be equivalent to the laws in your country of residence. By using the Website, you consent to this collection, transfer, storage, and processing of information to and in the United States.

Data Security

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Website, if any. The information you share in such public areas may be viewed by any user of the Website.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Website. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our Privacy Policy on this page. If we make material changes to how we treat our users' personal information, we will notify you through a notice on the Website home page. The date the Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this Privacy Policy to check for any changes.

Contact Information

To ask questions or comment about this Privacy Policy and our privacy practices, please sign up for an account and contact us through the support chat feature. If you do not have an account, you may email us at [email protected].