Privacy Policy

Our Privacy Commitment

Medical Health Covers, Inc (“we,” “our,” or “Company”) is committed to respecting the privacy rights and concerns of all users (“Users”) of Company’s websites and services (“Sites and Services”). As such, we have established and implemented this Privacy Policy (“Privacy Policy”) to inform Users how we use and protect the personal information we collect (“Personal Information”).

By visiting or using the Sites and Services, you consent to Company’s collection, use, storage, deletion, and disclosure of information relating to you as set forth in this Privacy Policy. This Privacy Policy is subject to change at any time for any reason and without notice. Any modifications will take effect when posted. Therefore, each time you access the Sites and Services, you need to review the Privacy Policy upon which access to and use of the Sites and Services is conditioned. By your continuing use of the Sites and Services after changes are posted, you will be deemed to have accepted such changes. This Privacy Policy is only applicable to the Sites and Services and not to any other website that you may be able to access from the Sites and Services, which may have its own data collection and use policy.

While using the Sites and Services you may have the opportunity to volunteer personally identifiable information. Visitor information (ex. any information gathered by our site such as usage data) may be collected automatically while you are interacting with the many features of our Sites and Services. Unless you have opted out of allowing your personal information to be shared, we may sell and/or share your personal information with third parties for marketing purposes

Cookies

The Sites and Services use cookies and similar technologies which are small files or pieces of text that download to a device when a visitor accesses a website or app. These analytics and performance cookies are used only when you acknowledge our cookie banner and are used to view site traffic, activity, and other data and/or to provide you with a personalized experience. Cookies may also be used to keep track of your login name and password, to track your visits to the Sites and Services, to personalize your experience, and improve our Sites and Services so the pages you view and other behavior may be stored by cookies on your device. These cookies contain no personally identifiable information. You may still access the Sites and Services if you set your browser not to accept cookies.

Web Analysis Tools

We may use web analysis tools to measure and collect anonymous session information. We use this information to monitor and analyze in a depersonalized form how users use the Sites and Services, to provide customers with the Sites and Services, and to maintain and improve the Sites and Services. We may also collect similar information from emails we may send to you which then help us track which emails are opened and which links are clicked by recipients. The information allows for more accurate reporting and improvement of the Sites and Services.

The personal data collected when you visit the Sites and Services include:

Information about your browser, network, and device
Web pages you visited prior to coming to this website
Search engine used to locate the Sites and Services
Web pages you view while on the Sites and Services and how long you use them
Your IP address

Collection of Personal Information

We may collect certain personal information, including your mailing address, phone number, date of birth, social security number, driver’s license or state identification number, financial information, information about your employment, and other information that may be required in order to provide you with products and services in your area. Company also receives personal information from third parties such as the merchant at which you make a purchase, based on the information you provide to Company, as well as information about your transactions with Company, its affiliates, participating merchants, and/or others, for example purchase price and payment arrangements. We may also receive information from a consumer reporting agency, such as your credit history.

Our Sites and Services are not designed to attract children under the age of 13 and Company does not knowingly collect personally identifiable information from such children.

Use of Personal Information

We use your personal information to provide the Sites and Services to you, deliver products and services you request, handle your questions or issues, and send communications to you about promotions, updates, or special offers that may be of interest to you. We also share your personally identifiable information with third party advertisers that sell products or services that we believe may be of interest to you. Other uses include verifying your identity, preventing fraud, and alerting you of new products, features, or enhancements to the Sites and Services. We may also use your email address to send you messages about the Sites and Services, as well as other general announcements.

The personal information uploaded by you, except for your social security number and driver’s license number, may be shared with third parties for certain purposes. We may also use your depersonalized personal information to provide analyses of our users in the aggregate (including Analytical Data subject to the terms of this Privacy Policy) to prospective partners and other third parties.

By submitting personal information through the Sites and Services, you authorize Company to share this personal information for the purposes identified herein, and you grant us a royalty-free, worldwide, perpetual, irrevocable, and fully transferable right and license to use your personal information in connection with the creation and development of analytical and statistical analysis tools (the “Analytical Data”). We are expressly authorized to make any commercial use of the Analytical Data, including without limitation sharing the Analytical Data with third parties.

We will also share the personal information we collect from you under the following circumstances:

Feedback. You may choose to, or Company may invite you to, submit comments, bug reports, ideas, or other feedback about the Sites and Services (“Feedback”). By submitting Feedback, you agree that Company is free to use such Feedback at its discretion without any obligation to you. Company may also choose to disclose Feedback to third parties. You hereby grant Company a royalty-free, perpetual, irrevocable, transferable, sublicensable, worldwide, nonexclusive license under all rights necessary to incorporate and use your Feedback for any purpose.

Asset Transfers. If we become involved in a merger, acquisition, or other transaction involving the sale of some or all of Company’s assets, User information may be included in the transferred assets. Should such an event occur, we will use reasonable means to notify you through email and/or a prominent notice on the Site.

HIPAA Compliance

Medical Health Covers is committed to protecting your personal health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA). We treat all Protected Health Information (PHI) with strict confidentiality and implement administrative, physical, and technical safeguards to ensure its privacy and security.

Business Associate Agreements (BAAs)

We may engage third-party service providers to support our platform. If these vendors handle PHI, we ensure they comply with HIPAA standards by entering into Business Associate Agreements (BAAs), requiring them to maintain appropriate safeguards.

Data Retention

We retain personal and health-related information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Users may request deletion of their personal information by contacting us at info@healthcoversonline.com.

Your Privacy Rights

Depending on your location, you may have specific rights under privacy laws, such as the California Consumer Privacy Act (CCPA) or the General Data Protection Regulation (GDPR), including the right to:

To exercise these rights, contact us at [insert contact email or privacy request link].

Children’s Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect or solicit personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us, and we will take steps to delete the information promptly.

Cookies and Tracking Technologies

We may use cookies and similar technologies to improve user experience, analyze traffic, and deliver relevant content. You can control or disable cookies through your browser settings. By using our site, you consent to our use of cookies as described.

Data Security

We implement industry-standard safeguards to protect your information, including encryption, secure servers, role-based access controls, and periodic audits. While we strive to use commercially acceptable means to protect your information, no method of transmission over the internet is 100% secure.

Policy Updates

This Privacy Policy is effective as of 1/1/25. We may update this policy periodically, and any changes will be posted on this page. We encourage users to review it regularly to stay informed of how we are protecting your information.

Mobile Information Privacy

We respect your privacy and are committed to protecting your mobile information. We do not share, sell, or disclose your mobile phone number, SMS consent, or any related personal information with third parties or affiliates for marketing or promotional purposes. Mobile information will only be used for essential communications related to your services or as otherwise outlined in this Privacy Policy.

Mobile Messaging & SMS Communications

Medical Health Covers, Inc. provides technology services to healthcare providers and clinics, enabling them to communicate with their patients via SMS text messages as part of telehealth service delivery. SMS messages are limited to essential communications related to the patient’s good faith exam. These messages are triggered by the clinic at the time of service and may include:

Consent:

The healthcare provider is solely responsible for obtaining the patient’s express consent to receive SMS messages prior to entering their phone number into our platform. Medical Health Covers does not collect patient mobile numbers directly from patients.

Patients receive one message per good faith exam unless additional communication is required for exam completion. No marketing or promotional messages are sent.

Standard message and data rates may apply. Patients may reply STOP to unsubscribe or HELP for assistance. For ongoing support, patients should contact their healthcare provider directly.

We do not sell, rent, or share mobile numbers with third parties for marketing purposes. Mobile data is used solely to deliver service-related communications on behalf of healthcare providers using our platform.

Payment

If you make a purchase through the Sites and Services, we may use a third-party payment processor such as Stripe or Paypal. Payments are encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express, and Discover.

Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

Third Party Services’ Privacy Policies

Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

Legal Disclosure of Your Information

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

Electronic Communication; Signatures

You may withdraw your consent to receive communications by following the “unsubscribe” link at the bottom of our emails. You may withdraw your consent to use an electronic signature at any time by contacting us. If you withdraw your consent, you will be unable to apply for products and services through the Sites and Services, and we will be unable to continue to process any pending applications for products and services.

How Is Your Personal Information Safeguarded?

While we strive to protect sensitive User information, we cannot ensure or warrant the security of any information you transmit to us or through the use of the Sites and Services and you acknowledge and agree that you provide such information and engage in such transmissions at your own risk.

In the event that personal information you provide to us is compromised as a result of a breach of security, when appropriate we will take reasonable steps to investigate the situation, notify you, and take the necessary steps to comply with any applicable laws and regulations.

Mediation

You agree that, in the event any dispute or claim arises out of or relating to this Privacy Policy, you and Company will attempt in good faith to negotiate a written resolution of the matter directly between the parties. You agree that if the matter remains unresolved for forty-five (45) days after notification (via certified mail or personal delivery) that a dispute exists, all parties shall join in mediation services in Company’s state of domicile with a mutually agreed mediator in an attempt to resolve the dispute. Should you file any arbitration claims or any administrative or legal actions without first having attempted to resolve the matter by mediation, then you agree that you will not be entitled to recover attorneys’ fees, even if you would otherwise be entitled to them.

Residents of California

You must opt out of allowing your personal information to be shared

Your California Consumer Privacy Act of 2018 (CCPA) Rights

Categories of Personal Information We Collect

The California Consumer Privacy Act of 2018, as amended from time to time (“CCPA”) requires specific disclosures for each category of personal information that we collect. The table below summarizes our general data handling practices which are more fully described in Sections B, C and D of this Privacy Notice.

#	Category of Personal Information	Categories of Sources From Which Personal Information Was Collected (See Section B of this Privacy Notice for additional information)	h Personal Information Was Collected (See Section B of this Privacy Notice for additional information) Business or Commercial Purpose for Collecting and Sharing the Category of Personal Information (See Sections C and D of this Privacy Notice for additional information)	Categories of Third Parties and Other Entities We Share Personal Information With (See Section D of this Privacy Notice for additional information)
1	Identifiers (§1798.140 (o)(1)(A) and (B)) which include elements such as: (i) contact information (e.g., name, mailing address, email address, phone number); and (ii) online identifiers (e.g., Internet protocol (IP) address, account numbers, device identifiers such as mobile advertising IDs)	Directly from you From your friends or contacts (for example, if they forward you one of our articles) From cookies and similar technologies From third-party sites or apps, content distribution channels, and platforms From third-party data suppliers and business partners From social media platforms and similar services	To provide you with and to improve the Digital Services To communicate with you For advertising and marketing purposes for us or third parties, including interest-based advertising To protect our or others’ rights	With affiliates and subsidiaries With service providers With advertising and marketing service providers and partners With content measurement companies With social media platforms With business partners With government authorities as required by law or as necessary to protect our rights
2	Demographics (§1798.140 (o)(1)(C)) which include elements such as age and gender	Directly from you From cookies and similar technologies From third-party sites or apps, content distribution channels and platforms From third-party data suppliers and business partners From social media platforms and similar services	To provide you with and to improve the Digital Services For advertising and marketing purposes for us or third parties, including interest-based advertising	With affiliates and subsidiaries With service providers With advertising and marketing service providers and partners With content measurement companies With social media platforms With business partners With government authorities as required by law or as necessary to protect our rights
3	Personal Information under subdivision (e) of Section 1798.80 of the California Civil Code (§1798.140 (o)(1)(B)) which includes payment information (e.g., payment card number, expiration date and billing information)	Directly from you	To provide you with and to improve the Digital Services To protect our or others’ rights	With affiliates and subsidiaries With service providers With government authorities as required by law or as necessary to protect our rights
4	Commercial Information (§1798.140 (o)(1)(D)) which includes elements such as transactional information (e.g., activity, subscriptions, requests, purchases, items in your cart but not completed purchases)	Directly from you From cookies and similar technologies	To provide you with and to improve the Digital Services To communicate with you For advertising and marketing purposes for us or third parties, including interest-based advertising To protect our or others’ rights	With affiliates and subsidiaries With service providers With advertising and marketing service providers and partners With social media platforms With business partners With government authorities as required by law or as necessary to protect our rights
5	Internet or other electronic network activity (§1798.140 (o)(1)(F)) which includes elements such as information about how you use, access, or interact with the Digital Services such as comments, photos, videos, and other content you choose to publish on the Digital Services, information about your device, browser, or operating system	From cookies and similar technologies From third-party sites and apps, content distribution channels and platforms From third-party data suppliers and business partners From social media platforms and similar services	To provide you with and to improve the Digital Services To communicate with you For advertising and marketing purposes for us or third parties, including interest-based advertising To protect our or others’ rights	With affiliates and subsidiaries With service providers With advertising and marketing service providers and partners With content measurement companies With social media platforms With business partners
6	Geolocation Data (§1798.140 (o)(1)(G)) which includes elements such as location information (e.g., city and state, or precise location information if location services are active on your device)	Directly from you From cookies and similar technologies	To provide you with and to improve the Digital Services To communicate with you For advertising and marketing purposes for us or third parties, including interest-based advertising To protect our or others’ rights	With affiliates and subsidiaries With service providers With advertising and marketing service providers and partners With content measurement companies With social media platforms With business partners With government authorities as required by law or as necessary to protect our rights
7	Audio, Electronic, Visual, Thermal, Olfactory or Similar Information (§1798.140 (o)(1)(H)) which includes elements such as recordings of your calls	Directly from you	To provide you with and to improve the Digital Services To communicate with you To protect our or others’ rights	With affiliates and subsidiaries With service providers
8	Professional or EmploymentRelated Information (§1798.140 (o)(1)(I)) which includes elements such as your professional email address, phone number or other contact information if you have used such professional or employment related personal information to order a subscription, register for an account or to receive communications	Directly from you From third-party data suppliers and business partners From social media platforms and similar services	To provide you with and to improve the Services To communicate with you For advertising and marketing purposes for us or third parties, including interest-based advertising To protect our or others’ rights	With affiliates and subsidiaries With service providers With advertising and marketing service providers and partners With content measurement companies With social media platforms With business partners With government authorities as required by law or as necessary to protect our rights
9	Inferences (§1798.140 (o)(1)(K)) which include elements such as inferences regarding your preferences or other characteristics (e.g., cooking enthusiast, travel, food, and dining)	Directly from you From cookies and similar technologies From third-party sites and apps, content distribution channels and platforms From third-party data suppliers and business partners From social media platforms and similar services	To provide you with and to improve the Services To communicate with you For advertising and marketing purposes for us or third parties, including interest-based advertising To protect our or others’ rights	With affiliates and subsidiaries With service providers With advertising and marketing service providers and partners With content measurement companies With social media platforms With business partners With government authorities as required by law or as necessary to protect our rights

Residents of California may have the following rights:

1. Right to know and access your personal information. Under CCPA, you have the right to:

Know the categories of personal information we collect and the categories of sources from which we got the information;
Know the business or commercial purposes for which we collect and share personal information; • Know the categories of third parties and other entities with whom we share personal information; and • Access the specific pieces of personal information we have collected about you. To do so, please send a request to us and include your name, email address, phone number, California postal address, as well as your account information.

2. Right to deletion. In some circumstances, you may ask us to delete your personal information. To do so, send us a request and include your name, email address, phone number, California postal address as well as your subscription account number, if you have an active subscription.

3. Right to opt out of sales. We may share your personal information with third parties in ways that may constitute a “sale” under CCPA. You may request that we not “sell” your personal information on a going forward basis. To do so, either click the link “Do Not Sell My Personal Information, or send us a request and include your name, email address, phone number, California postal address as well as your member account number. If you reengage with us after opting out of the “sale” of your personal information, such as by creating a new profile, you acknowledge that your personal information may be used and shared in accordance with this Privacy Notice, including in ways that may constitute a “sale” under CCPA.

4. Right to be free from discrimination. You may exercise any of the above rights without fear of being discriminated against. We are permitted to provide a different price or rate to you if the difference is directly related to the value provided to you by your data. We use the information you provide to make your CCPA rights requests to verify your identity, locate the personal information we may hold about you and act upon your request. We strongly recommend that you submit the email and postal address that you used when you created accounts, ordered subscriptions, or signed up for a newsletter. After you submit a CCPA rights request, you will be required to verify access to the email address you submitted. You will receive an email with a follow-up link to complete your email verification process. You are required to verify your email in order for us to proceed with your CCPA rights request. Please check your spam or junk folder in case you can’t see the verification email in your inbox. If you are a California resident and have any questions regarding your CCPA rights under this Privacy Notice, please contact us.

Authorized Agents For any of the CCPA rights, you may designate an authorized agent to make a request on your behalf. In the request, you or your authorized agent must provide information sufficient for us to verify the identity of your agent and that your agent has been properly authorized to act on your behalf; this may take additional time to fulfill your request. If you are an authorized agent working on behalf of a consumer, you will need to fill out the relevant CCPA request form listed above on behalf of the consumer with the consumer’s information. Please note that the consumer you are working on behalf of must have a California postal address and will need to verify access to the email account used to submit the CCPA request in order for us to move forward with processing the request.

Minors We do not knowingly collect or disclose personal information of minors under the age of 16, without affirmative authorization.

Additional Terms and Privacy Policy for EU Citizens

Under the General Data Protection Regulation (GDPR) of the European Union (EU), EU citizens are entitled to certain privacy protections regarding the use of, storing, and processing of your personal information as well as having right to be notified if personal information is stolen, copied, or accessed on an unauthorized basis.

The GDPR is a modern privacy rights framework adopted to create better transparency and control over who, how and when your personal data may be used, including the “right to be forgotten”

This section will explain how Company complies with the GDPR and how your personal data may be collected, stored, and used. We also explain under what circumstances and for what purposes we may use your personal data and also provide instructions on how you can “opt-out” from our using your personal data and also request the removal of your personal data from our systems.

Our Business

We provide services to United States consumers and United States businesses and share personally identifiable information with third parties. If you share your information with us, we may share it with third parties, including sharing your information for other marketing purposes. Additionally, if you are an employee of or associated with a business customer, certain information may be considered personal data such as your business email, business mobile number, or other similar information from which your personal identity may be known. It is also customary in many instances for business associates to furnish their private or personal contact information such as private email address, home telephone number, and similar information. Even if done in the context of a business purpose, this information may be deemed personal data. Therefore, if you believe your business information discloses personal data that you do not wish disclosed, you should not give it to us. You should also ask your employer to change your business contact information to an anonymized format, such as changing your email form “my.name@mycompany” to “randomcharacters@mycompany”.

Please be advised that our business has less than 250 employees. Accordingly, we are subject to less stringent recording requirements under GDPR requirements. We are, however, not exempt from other privacy protection and reporting requirements which apply to all businesses equally.

Questions

If you have any questions about our privacy practices or this Privacy Policy, please contact us.