Privacy Policy

Introduction

Welcome to TriSage ("Company," "we," "us," or "our"). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, or engage with our telehealth services. Please read this policy carefully. By using our services, you agree to the collection and use of information in accordance with this policy.

If you do not agree with the terms of this Privacy Policy, please do not access our services.

Information We Collect

We collect information that you provide directly to us, as well as information that is collected automatically when you use our services.

Personal Information You Provide

When you register for an account, complete a health questionnaire, schedule an appointment, or communicate with us, we may collect:

• Identity Information: Name, date of birth, gender, photograph
• Contact Information: Email address, phone number, mailing address
• Health Information: Medical history, current symptoms, medications, allergies, lab results, and other health-related information necessary to provide care
• Payment Information: Credit card numbers, billing address, and other payment details (processed securely through our payment processors)
• Insurance Information: Insurance provider, policy number, and related details
• Communication Data: Messages, emails, and other communications with our care team

Information Collected Automatically

When you access our services, we automatically collect certain information, including:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, clicks, and navigation patterns
• Location Data: General location based on IP address (we do not collect precise GPS location)
• Cookies and Similar Technologies: Information collected through cookies, pixel tags, and similar technologies

Note: We collect health information only when necessary to provide medical services and always in compliance with applicable healthcare privacy laws.

How We Use Your Information

We use the information we collect for various purposes, including:

Providing Healthcare Services

• To facilitate consultations with healthcare providers
• To process prescriptions and coordinate with pharmacies
• To communicate with you about your treatment and care
• To maintain your medical records and treatment history
• To provide personalized health recommendations

Operating Our Platform

• To create and manage your account
• To process payments and send transaction notifications
• To respond to your inquiries and provide customer support
• To send administrative information, such as updates to our terms or policies

Improving Our Services

• To analyze usage patterns and improve our website and services
• To develop new products, services, and features
• To conduct research and analytics (using de-identified data)

Marketing and Communications

• To send promotional communications (with your consent)
• To provide information about products or services that may interest you
• To conduct surveys and collect feedback

Opt-Out: You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us directly.

Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Healthcare Providers

We share your health information with licensed healthcare providers who are part of our network to facilitate your care and treatment.

Service Providers

We may share information with third-party vendors who perform services on our behalf, such as:

• Payment processors
• Pharmacy partners
• Laboratory services
• Cloud hosting providers
• Customer support platforms
• Analytics providers

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• To comply with a legal obligation, subpoena, or court order
• To protect and defend our rights or property
• To prevent or investigate possible wrongdoing
• To protect the personal safety of users or the public

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

HIPAA Compliance

As a healthcare provider, we are committed to complying with the Health Insurance Portability and Accountability Act (HIPAA) and protecting your Protected Health Information (PHI).

What is PHI?

Protected Health Information includes any information that relates to your past, present, or future physical or mental health condition, healthcare services, or payment for healthcare that can be used to identify you.

Your HIPAA Rights

Under HIPAA, you have the right to:

• Access and obtain a copy of your health records
• Request amendments to your health records
• Receive an accounting of disclosures of your PHI
• Request restrictions on certain uses and disclosures
• Request confidential communications
• File a complaint if you believe your privacy rights have been violated

Notice of Privacy Practices

For more detailed information about how we use and disclose your PHI, please review our Notice of Privacy Practices, which is provided to all patients.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Security Measures

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis
• Data Storage: Information is stored on secure servers with multiple layers of protection
• Regular Audits: We conduct regular security assessments and penetration testing
• Employee Training: All employees receive training on data privacy and security practices
• Incident Response: We have procedures in place to detect, respond to, and recover from security incidents

Your Role: While we work hard to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities and to personalize your experience.

Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., authentication, security)
• Performance Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• See what cookies you have and delete them individually
• Block third-party cookies
• Block all cookies
• Clear all cookies when you close your browser

Please note that blocking certain cookies may affect your ability to use some features of our services.

Do Not Track

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activity tracked. We currently do not respond to "Do Not Track" signals, as there is no common industry standard for compliance.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information.

For All Users

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct any inaccurate or incomplete information
• Deletion: Request that we delete your personal information (subject to certain exceptions)
• Opt-Out: Opt out of marketing communications at any time

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your privacy rights

European Users (GDPR)

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within the timeframe required by applicable law.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe that a child under 18 may have provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.

When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify you by email (if you have an account with us)
• Post a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

For HIPAA-related inquiries or to file a complaint, you may also contact:

• U.S. Department of Health and Human Services Office for Civil Rights: www.hhs.gov/ocr

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: