PRIVACY POLICY

The Website is provided for general informational and administrative purposes only. The Website is not intended to provide medical advice, diagnosis, treatment, or emergency services. If you are experiencing a medical emergency, call 911 or seek emergency medical care immediately. Do not submit urgent medical information, sensitive clinical details, or emergency requests through general Website contact forms unless the form specifically instructs you to do so. Communications through the Website may not be reviewed immediately.

Plus Wellbeing is a digital wellness company and MSO and may provide wellness-related digital resources, administrative tools, technology services, and non-clinical management, administrative, operational, and related support for Plus Wellbeing Medical Group, P.A. and other medical groups. Certain information collected or maintained in connection with health care services may be protected health information ("PHI") under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations ("HIPAA"). When Plus Wellbeing handles PHI on behalf of Plus Wellbeing Medical Group, P.A. or another covered entity, Plus Wellbeing does so in accordance with applicable HIPAA requirements and applicable contractual obligations. Uses and disclosures of PHI by Plus Wellbeing Medical Group, P.A. are described in that provider's separate HIPAA Notice of Privacy Practices, if applicable. This Website Privacy Policy governs Website and digital information practices of Plus Wellbeing. To the extent there is a conflict between this Policy and an applicable HIPAA Notice of Privacy Practices regarding PHI, the HIPAA Notice of Privacy Practices controls with respect to PHI.

We may collect the following categories of information through the Website: Information You Provide Directly We may collect information that you choose to submit, including: name; email address; phone number; mailing address; company or organization name; role, title, or affiliation; information submitted through contact forms, waitlists, intake forms, scheduling forms, newsletter sign-ups, surveys, or other Website features; communications or inquiries sent to us; and any other information you choose to provide. Health-Related or Service-Related Information Depending on the Website features available, you may choose to provide information related to health interests, service eligibility, care coordination, appointment requests, payer or insurance information, or other health-related matters. We request that you provide only the information needed for the applicable Website feature or request. Automatically Collected Information When you access or use the Website, we and our service providers may automatically collect information such as: IP address; device identifiers; browser type and settings; operating system; referring and exit pages; pages viewed; dates and times of access; approximate location derived from IP address; interactions with Website content; and other usage, diagnostic, and analytics information. Cookies and Similar Technologies We may use cookies, pixels, tags, software development kits, local storage, and similar technologies to operate the Website, remember preferences, analyze usage, improve performance, measure outreach, and support security. You may be able to adjust your browser settings to refuse or delete cookies. Some Website features may not function properly if cookies are disabled.

We may use information collected through the Website for the following purposes: • To operate, maintain, secure, and improve the Website; • To respond to inquiries, requests, and communications; • To provide administrative support related to services, scheduling, eligibility, onboarding, care coordination, or operations; • To support Plus Wellbeing Medical Group, P.A. and related professional clinical operations in a manner consistent with applicable law and contractual obligations; • To send service-related notices, confirmations, reminders, administrative messages, and updates; • To send newsletters, educational content, event information, or other communications if you request or consent to them, or where otherwise permitted by law; • To analyze Website traffic, performance, and user interactions; • To personalize or improve Website content and user experience; • To detect, investigate, prevent, or respond to fraud, security incidents, misuse, or unlawful activity; • To comply with legal, regulatory, contractual, reporting, audit, or compliance obligations; and • For any other purpose described at the time of collection or with your consent.

We may disclose information as described below: Plus Wellbeing Medical Group, P.A. and Related Operations We may disclose information to Plus Wellbeing Medical Group, P.A. and related professional clinical operations as needed to respond to requests, facilitate services, coordinate administrative workflows, support care-related operations, or perform MSO services, subject to applicable law. Service Providers and Vendors We may disclose information to vendors, contractors, consultants, and service providers that perform services for us, such as website hosting, analytics, communications, scheduling, customer relationship management, cybersecurity, payment support, compliance, and other operational services. These parties are authorized to use information only as needed to provide services to us or as otherwise permitted by applicable law and contract. Business and Compliance Purposes We may disclose information to professional advisors, auditors, insurers, compliance consultants, legal counsel, accountants, and other parties as reasonably necessary for business, legal, compliance, audit, insurance, or risk-management purposes. Legal Requirements and Protection of Rights We may disclose information if we believe disclosure is necessary or appropriate to comply with applicable law, regulation, subpoena, court order, legal process, governmental request, or regulatory inquiry; to enforce our terms or policies; to protect the rights, privacy, safety, or property of Plus Wellbeing, users, patients, personnel, or others; or to detect, prevent, or respond to fraud, security, or technical issues. Business Transactions We may disclose or transfer information in connection with a proposed or completed merger, acquisition, financing, reorganization, sale of assets, joint venture, assignment, transfer, change of control, bankruptcy, or similar transaction involving all or part of our business, subject to applicable law and appropriate safeguards. With Consent or Direction We may disclose information with your consent or at your direction.

We may use analytics tools and similar technologies to understand how visitors use the Website and to improve Website functionality and content. Depending on the Website configuration, these technologies may collect usage information, device information, online identifiers, and approximate location information. We do not intend to use Website tracking technologies in a manner that would impermissibly disclose PHI to third-party analytics or advertising providers. If Website features collect PHI or are connected to patient services, Plus Wellbeing will evaluate tracking technologies and related data flows for compliance with applicable HIPAA and other privacy requirements.

If you provide contact information, we may use it to respond to you and to send administrative, service-related, or informational communications. If you sign up for marketing or newsletter communications, you may unsubscribe by following the instructions in the communication or contacting us. Text messaging, if offered, may be subject to separate consent language and messaging terms. Standard message and data rates may apply. Do not use email, text message, or Website forms for emergencies or urgent medical needs.

We retain information for as long as reasonably necessary to fulfill the purposes described in this Policy, comply with legal and regulatory obligations, resolve disputes, maintain security, enforce agreements, and support legitimate business and compliance needs. Retention periods may vary depending on the type of information, the context of collection, applicable legal requirements, and operational needs.

Depending on where you live and the nature of your interaction with us, you may have certain rights regarding your personal information. These may include the right to request access to, correction of, deletion of, or restriction on certain personal information, and the right to opt out of certain communications or data practices. To make a privacy request, contact us using the information in Section 17. We may need to verify your identity and authority before responding. We will respond to requests as required by applicable law. If your request relates to PHI maintained by Plus Wellbeing Medical Group, P.A. or another health care provider, your rights may be governed by HIPAA and the applicable provider's Notice of Privacy Practices rather than this Policy.

Certain state privacy laws may provide residents with additional rights regarding personal information. If applicable, those rights may include rights to know, access, correct, delete, receive a copy of, or opt out of certain processing of personal information. Plus Wellbeing will honor applicable state privacy rights to the extent required by law. Because many state privacy laws include entity-size, revenue, data-volume, health-information, nonprofit, and regulated-data exemptions, not all state privacy-law rights may apply to all information or all users. If Plus Wellbeing becomes subject to a specific state consumer privacy law, including a law requiring additional disclosures or a separate state-specific notice, Plus Wellbeing will update this Policy or provide an applicable supplemental notice.

If Plus Wellbeing is subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act, or any similar California privacy notice obligation, Plus Wellbeing will supplement these terms with a California-specific notice describing categories of personal information collected, sources, purposes, disclosures, retention, rights, and opt-out mechanisms. Subject to applicable law and verification, California consumers may have the following rights: Right to Know/Access — You may request that we disclose the categories and specific pieces of Personal Information we have collected about you, the categories of sources, the purposes for collection, sale, or sharing, the categories of third parties to whom we disclose Personal Information, and the categories of Personal Information sold, shared, or disclosed for a business purpose. Right to Delete — You may request that we delete Personal Information we collected from you, subject to legal exceptions. Right to Correct — You may request that we correct inaccurate Personal Information we maintain about you. Right to Opt Out of Sale or Sharing — If we sell or share your Personal Information as defined by the CCPA, you may opt out of that sale or sharing. Right to Limit Use and Disclosure of Sensitive Personal Information — If we use or disclose Sensitive Personal Information for purposes that give rise to this right under the CCPA, you may request that we limit such use or disclosure. Right to Non-Discrimination — You have the right not to receive discriminatory treatment for exercising your CCPA rights. Right to Authorized Agent — You may designate an authorized agent to submit certain requests on your behalf, subject to verification and proof of authorization.

The Website is not directed to children under 13 years of age, and we do not knowingly collect personal information directly from children under 13 through the Website. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete the information as required by law. If Website features are later designed for use by minors, parents, guardians, or pediatric patients, Plus Wellbeing should implement appropriate age-screening, consent, authorization, and privacy disclosures before launch.

We use reasonable administrative, technical, and physical safeguards designed to protect information collected through the Website. However, no website, network, system, transmission, or storage method is completely secure. We cannot guarantee absolute security of information. You are responsible for maintaining the confidentiality of any account credentials or access mechanisms associated with the Website, if applicable, and for notifying us promptly of any suspected unauthorized access or misuse.

The Website may contain links to third-party websites, applications, portals, or services that are not owned or controlled by Plus Wellbeing. This Policy does not apply to third-party websites or services. We are not responsible for the privacy, security, or content practices of third parties. We encourage you to review the privacy policies of any third-party services you use.

The Website is primarily intended for users located in the United States. If you access the Website from outside the United States, you understand that information may be collected, used, stored, and disclosed in the United States, where privacy laws may differ from those in your jurisdiction.

We may update this Policy from time to time. If we make changes, we will update the effective date above and post the revised Policy on the Website. Changes are effective when posted unless otherwise stated. Your continued use of the Website after changes are posted means that you acknowledge the revised Policy.

If you have questions about this Policy or wish to submit a privacy request, contact us at: Plus Wellbeing, Inc. 4445 Willard Ave. Suite 600 Chevy Chase, MD 20815 United States Email: privacy@pluswellbeing.ai Phone: (312) 475-3560 For questions about medical records, treatment information, or rights under a provider's HIPAA Notice of Privacy Practices, please contact Plus Wellbeing Medical Group, P.A. or the applicable health care provider using the contact information provided by that provider.