# Privacy Policy ## GREENLIGHT HEALTH DATA SOLUTIONS PRIVACY STATEMENT **Effective Date: July 08, 2024** At Greenlight, we place the highest importance on respecting and protecting your privacy. Our most important asset is our relationship with you. We want you to feel comfortable and confident when using our Service. We would like to share with you information on our privacy practices and other privacy aspects of the Service. Specifically, we address: - To what products or services does this Privacy Statement apply? - How do we protect your personal information? - What information do we collect and how do we use it? - When do we share your information? - Can I opt-out of receiving future communications? - How do I update my contact information? - Will I be notified of changes to your privacy practices? - Who can I contact with a privacy question? - If I am a California resident, where can I learn more about my California privacy rights? 1. **To what products or services does this Privacy Statement apply?** This Privacy Statement defines privacy aspects specific to the Service available to users.  In this Privacy Statement, we refer to those services (whether one or both of them) as the “ **Service**”. Throughout this Privacy Statement, we refer to information that personally identifies you as “ **personal information**.” 2. **How do we protect your personal information?** We work to protect your personal information from loss, misuse or unauthorized access, alteration or destruction by maintaining appropriate physical, electronic, and administrative security standards and procedures to safeguard our data systems. It is protected by: - A secure Internet connection using secure socket layer (SSL) technology. - Encryption during transmission to make your information unreadable as it passes over the Internet. - Username/passwords (when required) and Health Data are encrypted as saved to render them unreadable by anyone without a decrypting key. We also educate our employees on the importance of our privacy and security policies, including a training program that includes ongoing certification of completion and we require that they comply with those policies. 3. **What information do we collect and how do we use it?** When you use the Service, we collect the following types of information: - **Contact Information.** When you register for the Service, we ask for your contact information, such as your email address. We use this information in the event we need to contact you about your use of the Service.  If you request customer or technical support, we may use your contact information to elicit your feedback regarding your support experience. - **Health Care and Other Information.** In order to offer you the Service, we obtain your permission to act as your agent to access your own health information. To provide this Service, as authorized and directed by you, we retrieve a copy of your health information, which may be obtained from Data Sources who maintain copies of your health information. - **Anonymous and Technical Information.** We use anonymous, aggregate statistical information to help improve our services. We may collect anonymous technical information, such as the software or browser version, or operating system. We may also collect the IP address of the device used to access the Service. - **Other Information Sources.** We may use publicly available sources outside of the Service to verify or supplement the information you give us. - **Children.** The Service is not designed to appeal to children under the age of 13. - **Former Users.** If you are a former user of the Service, we protect your information in the same manner that we treat information about our current users. 4. **When and with whom do we share your information?** We understand that you are entrusting us with your personal information. - To fulfill or meet the reason you provided the information. - To provide, support, personalize, and develop our Service, products, and services. - To help maintain the safety, security, and integrity of our Service, products and services, databases and other technology assets, and business. - For testing, research, analysis, and product development. 5. **Can I opt out of receiving future communications?** If you have subscribed to email notifications, alerts, or newsletters you can cancel your subscription by following the instructions provided in each email. 6. **How do I update my contact information?** You can update or correct your Service account information by using applicable features in the Service to update your profile. 7. **Will I be notified of changes to your privacy practices?** If we make material changes to any of our privacy policies or practices regarding personal information, we will update this Privacy Statement. 8. **Who can I contact with a privacy question?** If you have privacy-related questions, please send an email to compliance@greenlighthealth.com. 9. **If I am a California resident, where can I learn more about my California privacy rights?** If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. ### **Tell Me More about Greenlight’s Security Practices** We protect personal information stored on our servers from unauthorized access. Our employees are trained to safeguard your information using physical, electronic, and procedural safeguards. ### **Tell Me More about Greenlight’s Web Technologies** We use a variety of technologies to manage our websites, including cookies, which allow us to track overall site usage and determine areas users prefer. ### **GREENLIGHT HEALTH DATA SOLUTIONS PRIVACY NOTICE FOR CALIFORNIA RESIDENTS** **Effective Date: July 08, 2024** This Privacy Notice for California Residents supplements the information contained in Greenlight’s Privacy Statement and applies solely to all visitors, users, and others who reside in the State of California. **Information We Collect** Our Service collects information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device. | **Category** | **Examples** | **Collected** | | --- | --- | --- | | A. Identifiers. | A real name, alias, postal address, email address, or other identifiers. | YES | | B. Personal information categories. | Name, signature, Social Security number, or other financial information. | YES | | C. Protected classification characteristics. | Age (40 years or older), race, sex, etc. | YES | | E. Biometric information. | Genetic, physiological, behavioral, and biological characteristics. | YES | **Your Rights and Choices** The CCPA provides consumers (California residents) with specific rights regarding their personal information. ### **Access to Specific Information and Data Portability Rights** You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. ### **Deletion Request Rights** You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. ### **Exercising Access, Data Portability, and Deletion Rights** To exercise the access, data portability, and deletion rights, please submit a verifiable consumer request to us via email, or our website. ### **Response Timing and Format** We endeavor to respond within forty-five (45) days of your request. ### **Personal Information Sales** We do not sell the personal information of our users. ### **Non-Discrimination** We will not discriminate against you for exercising any of your CCPA rights. ### **Changes to Our Privacy Statement** We reserve the right to amend this Privacy Notice at our discretion. **Contact Information** If you have any questions or comments about this Privacy Notice, please contact us at: Compliance@greenlighthealth.com.