Privacy Policy

Introduction

Describe Health Technologies Inc., known as Describe, is a healthcare technology company that helps healthcare groups credential, pay, schedule, track provider metrics, and automate documentation.

We understand that you are aware of and care about your own personal privacy interests, and we take that seriously. This Privacy Notice describes Describe's policies and practices regarding its collection and use of your personal data and sets forth your privacy rights. We recognize that information privacy is an ongoing responsibility, and so we will update this Privacy Notice from time to time as we undertake new personal data practices or adopt new privacy policies.

Data Protection Officer

Describe is headquartered in Miami, Florida, in the United States and is incorporated in Delaware. Describe has appointed an internal data protection officer for you to contact if you have any questions or concerns about Describe's personal data policies or practices. If you would like to exercise your privacy rights, please direct your inquiry to Describe's data protection officer.

How We Collect and Use (Process) Your Personal Information

Describe collects personal information about its website visitors, business contacts, customers, and users of the Describe software platform. With a few exceptions, this information is generally limited to:

• Name
• Job title
• Employer name
• Work address
• Work email
• Work phone number

We use this information to provide prospects, customers, and platform users with services.

We do not sell personal information to anyone and only share it with third parties that facilitate the delivery of our services.

From time to time, Describe receives personal information about individuals from third parties. Typically, information collected from third parties will include further details about your employer or industry. We may also collect your personal data from a third-party website, such as LinkedIn.

Use of the Describe Website

As is true of most other websites, Describe's website collects certain information automatically and stores it in log files.

The information may include IP addresses, general location, browser type, operating system, and website usage information.

We use this information to operate, secure, administer, and improve our website; diagnose technical problems; analyze trends; and understand visitor preferences.

Describe has a legitimate interest in understanding how customers and potential customers use its website so that it can provide relevant products and services and appropriately support user needs.

Cookies and Tracking Technologies

The Describe website may use cookies and similar technologies to operate the website and understand how it is used.

Describe does not currently provide a separate cookie notice. You can control or reject cookies through your browser settings, although doing so may affect certain website functions.

Sharing Information With Third Parties

The personal information Describe collects from you is stored in databases hosted by service providers located in the United States.

These providers process personal information to deliver cloud storage, retrieval, communications, and other services on Describe's behalf. Describe may engage third parties to send information about its products, services, and events.

A list of Describe's subprocessors is available upon request by emailing team@describemed.com.

Describe does not otherwise disclose personal data for another person's or business's independent use unless you request or authorize it; we are required by law; or disclosure is needed to enforce an agreement, protect rights, property, or safety, provide services through agents, or address an emergency, dispute, or claim.

Describe may aggregate information about its services and website visitors and disclose non-personally identifiable results to partners, service providers, advertisers, or other third parties for marketing or promotional purposes.

The Describe website may connect with third-party services such as LinkedIn and other social networks.

If you use those connections, review the relevant service's privacy policy. A third-party service may be able to associate your visit to our website with personal data it already maintains about you.

Transferring Personal Data to the U.S.

Describe is headquartered in the United States. Information we collect about you may be processed in the United States.

Depending on the circumstances, Describe processes personal data with consent, as needed to perform a contract, or to pursue a legitimate interest that is not outweighed by your rights and freedoms.

Describe seeks to apply safeguards appropriate to the personal data and to process it consistently with your relationship with Describe and this Privacy Notice.

If applicable law requires an approved mechanism for an international transfer, Describe will implement an appropriate mechanism before making the transfer. For questions about international transfers, contact team@describemed.com.

Data Subject Rights

The GDPR and other privacy laws may provide data subjects with rights that include:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights related to automated decision-making, including profiling

This Privacy Notice explains what personal data Describe collects and how it is used.

To confirm whether Describe is processing your personal data, access it, or exercise another applicable privacy right, contact us at team@describemed.com.

You may request information about the purposes of processing, the categories of personal data involved, recipients outside Describe, the source of data you did not provide directly, and the anticipated storage period.

Subject to applicable law and exceptions, you may ask Describe to correct, erase, restrict, or stop processing your data, including stopping its use for direct marketing.

When technically feasible and legally required, Describe will provide your personal data in a portable format. You may also lodge a complaint with the appropriate data protection authority.

Reasonable access to your personal data will be provided at no cost, except where applicable law permits a fee.

If Describe cannot respond within the time required by applicable law, it will explain any permitted extension. If a request is denied, Describe will explain the reason, subject to legal limitations.

For questions or complaints concerning processing, email team@describemed.com. If you are in the EEA or UK, you may also contact the data protection authority responsible for your location.

Data Storage and Retention

Personal data is stored on Describe's systems and on systems operated by cloud-based service providers in the United States.

Describe retains service data for the customer relationship and for a period afterward as needed for operations, legal obligations, dispute resolution, enforcement, security, historical records, and archiving related to its services.

Describe retains prospect data while it has a legitimate business purpose and then deletes or anonymizes it according to its retention practices.

Personal data controlled by Describe may be deleted upon a verified request from a data subject or authorized agent, subject to applicable legal and contractual exceptions.

For more information about storage, retention, erasure, or portability, contact team@describemed.com.

Children's Data

We do not knowingly attempt to solicit or receive information from children.

Questions, Concerns, or Complaints

If you have questions, concerns, complaints, or would like to exercise your rights, please contact: