PRIVACY POLICY

This Privacy Policy describes how AvioMD LLC, doing business as AvioMD (“AvioMD,” “we,” “us,” or “our”), collects, uses, discloses, retains, and otherwise processes information when you access or use www.aviomd.com, our online services, patient-facing technology, communications, and other services that link to this Privacy Policy (collectively, the “Services”).

AvioMD provides technology and administrative services designed to facilitate access to healthcare-related services, including services provided by independent licensed healthcare providers, pharmacies, laboratories, and other healthcare-related service providers.

AvioMD currently works with third-party healthcare infrastructure and pharmacy-network partners, including Clinic X, to facilitate access to certain healthcare and pharmacy-related services. The specific provider, pharmacy, laboratory, or fulfillment partner involved in a user's care may vary based on location, treatment, availability, and applicable law.

Certain health information submitted in connection with clinical care may be maintained or processed on behalf of healthcare providers and may be subject to additional protections under applicable federal and state law.

Please read this Privacy Policy carefully.

1. ELIGIBILITY AND MINORS

The Services are intended for individuals who are at least eighteen (18) years old or the applicable age of majority in their jurisdiction.

The Services are not directed to children under thirteen (13), and AvioMD does not knowingly collect personal information from children under thirteen through the Services.

If you believe that a child has provided personal information to AvioMD in violation of this Policy, please contact us.

2. HEALTH AND MEDICAL INFORMATION

When you create an AvioMD account or interact with AvioMD, you may provide information such as your name, contact information, account credentials, transaction information, and other administrative information.

Certain portions of the Services may also allow you to provide health-related information so that an independent licensed healthcare provider can evaluate your eligibility for medical services or treatment.

Depending on the circumstances, information used by a healthcare provider in connection with diagnosis or treatment may constitute protected health information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) or may be protected by other federal or state health privacy laws.

AvioMD itself may not be a HIPAA-covered healthcare provider. Independent healthcare providers, medical groups, pharmacies, laboratories, and other organizations accessible through the Services may separately be covered entities or business associates under HIPAA.

Where AvioMD processes PHI on behalf of a healthcare provider as a business associate, AvioMD will handle such PHI in accordance with applicable law and its contractual obligations.

The healthcare provider responsible for your care may provide a separate Notice of Privacy Practices explaining how that provider uses and discloses PHI and describing your rights regarding such information.

Information not subject to HIPAA or another healthcare-specific privacy law may instead be governed by this Privacy Policy and applicable consumer privacy laws.

3. INFORMATION WE COLLECT

The information we collect depends on how you interact with the Services.

Information You Provide Directly

We may collect information including:

• Name
• Email address
• Telephone number
• Date of birth
• Mailing, billing, and shipping addresses
• Account credentials
• Payment and transaction information
• Communications with AvioMD
• Customer support inquiries
• Documents or files you submit
• Information provided through assessments or intake forms
• Health history
• Current or previous medications
• Allergies
• Symptoms
• Treatment goals
• Laboratory information
• Lifestyle or health information
• Hormone-or sexual-health information where relevant
• Photographs voluntarily submitted for evaluation
• Other information you choose to provide

You should provide sensitive health information only through secure workflows designated for that purpose.

Payment Information

When you purchase services or products, payment information may be collected and processed by third-party payment processors.

AvioMD may receive information such as transaction amount, payment status, billing information, transaction identifiers, and limited payment-method information.

AvioMD may not directly store complete payment-card numbers.

Information Collected Automatically

When you use the Services, we and our service providers may automatically collect information including:

• IP address
• Device identifiers
• Browser type
• Device type
• Operating system
• General geographic location derived from IP address
• Referring and exit pages
• Pages viewed
• Links selected
• Date and time of access
• Session duration
• Website interaction data
• Advertising identifiers
• Cookie identifiers
• Technical and diagnostic information

Some browsing information may reveal or permit inferences concerning your interest in particular health conditions or treatments. Such information may be considered sensitive under certain state laws.

4. COOKIES AND SIMILAR TECHNOLOGIES

AvioMD and its service providers may use cookies, pixels, tags, software development kits, web beacons, local storage, and similar technologies.

These technologies may be used to:

• Operate the Services
• Remember preferences
• Maintain login sessions
• Prevent fraud and abuse

• Analyze website performance
• Measure traffic and engagement
• Diagnose technical issues
• Improve the Services
• Measure marketing effectiveness
• Deliver or evaluate advertising where permitted by law

Your browser may allow you to block or delete cookies. Blocking certain cookies may affect the functionality of portions of the Services.

Where required by law, AvioMD will provide appropriate controls regarding non-essential cookies and advertising technologies.

5. HOW WE USE INFORMATION

We may use personal information to:

Provide the Services

Operate AvioMD, establish and maintain accounts, provide requested features, process transactions, facilitate healthcare-related services, and coordinate requested services.

Facilitate Healthcare Services

Transmit information to independent healthcare providers so they can determine whether consultations, testing, prescriptions, treatments, or other healthcare services are appropriate.

Clinical decisions are made by the licensed healthcare professionals responsible for your care.

Coordinate Healthcare Infrastructure

AvioMD may work with third-party infrastructure and healthcare-network partners, including Clinic X, to facilitate provider access, pharmacy services, laboratory services, fulfillment, and related administrative functions.

Pharmacy and Laboratory Coordination

Facilitate prescription fulfillment, laboratory testing, shipping, pickup, provider review, and related services when requested or authorized.

Customer Support

Respond to questions, resolve account issues, communicate about services or orders, and provide technical support.

Communications

Send:

• Account notices
• Appointment communications
• Treatment-related communications
• Order confirmations
• Shipping notifications
• Payment notices
• Security alerts
• Administrative messages
• Service updates

Where permitted, communications may occur by email, telephone, SMS, secure messaging, or other electronic means.

Service Improvement

Analyze use of the Services to improve functionality, reliability, user experience, offerings, and internal operations.

Security and Fraud Prevention

Verify identity, prevent unauthorized transactions, detect fraud, protect accounts, maintain system security, investigate suspicious activity, and protect AvioMD and others.

Legal and Compliance Purposes

Comply with applicable law, respond to legal requests, enforce agreements, resolve disputes, protect rights and safety, and meet regulatory, accounting, tax, and recordkeeping obligations.

Marketing

Subject to applicable law and your choices, we may use contact information and other permitted information to provide information about AvioMD services, programs, promotions, or offerings.

AvioMD will not use PHI maintained on behalf of a healthcare provider for advertising where doing so would violate HIPAA or other applicable law.

6. HOW WE DISCLOSE INFORMATION

We may disclose information to appropriate recipients, including:

Healthcare Providers and Medical Groups

Licensed physicians, nurse practitioners, physician assistants, medical practices, and other healthcare professionals involved in evaluating or treating you.

Healthcare Infrastructure Partners

We may provide information as reasonably necessary to third-party healthcare infrastructure and network partners, including Clinic X, to facilitate access to providers, pharmacies, laboratories, fulfillment, administrative support, and related services.

Pharmacies

If a prescription is issued, relevant information may be transmitted to one or more independent licensed pharmacies for prescription processing, dispensing, fulfillment, consultation, payment, shipping, or related services.

The dispensing pharmacy may vary according to patient location, medication, availability, network participation, and applicable law.

Laboratories

Information may be disclosed to independent laboratories or testing providers when necessary to order, process, administer, or report laboratory testing.

Service Providers

We may disclose information to vendors that assist with:

• Website hosting
• Cloud infrastructure
• Payment processing
• Identity verification
• Customer support
• Communications
• Shipping and fulfillment
• Analytics
• Cybersecurity
• Fraud prevention
• Software and technology
• Accounting
• Legal and professional services

Advertising and Analytics Partners

Subject to applicable law and your privacy choices, analytics or advertising providers may collect certain information through our website.

Certain state privacy laws define some advertising disclosures as a “sale” or “sharing” of personal information even where money is not exchanged.

Where required, AvioMD will provide applicable opt-out rights.

Business Transfers

Information may be disclosed as part of a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction.

Legal Requirements

We may disclose information when reasonably necessary to:

• Comply with applicable law
• Respond to valid legal process
• Cooperate with lawful government requests
• Investigate fraud or illegal conduct
• Protect an individual's safety
• Protect AvioMD's legal rights or property
• Enforce our agreements

With Your Direction or Consent

We may disclose information when you request or authorize us to do so.

7. DE-IDENTIFIED AND AGGREGATED INFORMATION

We may create aggregated or de-identified information that cannot reasonably be linked to an identifiable individual.

We may use and disclose such information for lawful business, operational, analytical, research, or service-improvement purposes.

Where required by law, information represented as de-identified will be maintained in de-identified form.

8. YOUR PRIVACY RIGHTS

Depending on where you live, you may have rights to:

• Request access to personal information
• Request correction
• Request deletion
• Obtain a portable copy of certain information
• Learn what categories of information are collected
• Learn what categories of parties receive information

• Opt out of certain targeted advertising
• Opt out of certain sales or sharing
• Limit certain uses of sensitive personal information
• Withdraw consent where applicable
• Appeal certain denied privacy requests

These rights are subject to applicable exceptions and limitations.

Requests may be submitted through AvioMD's website or other contact methods made available by AvioMD.

We may need to verify your identity before fulfilling a request.

We will not unlawfully discriminate against users who exercise applicable privacy rights.

9. CALIFORNIA PRIVACY RIGHTS

California residents may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”).

Subject to applicable exceptions, these may include rights to:

• Know categories and specific pieces of personal information collected
• Know the sources of personal information
• Know the purposes for collecting and using personal information
• Know categories of third parties receiving information
• Request deletion
• Request correction
• Obtain certain information in portable form
• Opt out of sale or sharing
• Limit certain uses of sensitive personal information
• Be free from unlawful discrimination

Certain health information may be exempt from portions of the CCPA because it is governed by HIPAA, California medical privacy law, or another healthcare privacy law.

Where required by law, AvioMD will recognize applicable browser-based opt-out preference signals, including Global Privacy Control.

10. MARKETING COMMUNICATIONS

You may unsubscribe from promotional email communications using the unsubscribe link included in those communications.

You may opt out of promotional SMS messages by replying STOP where applicable.

Even after opting out of marketing, we may continue to send transactional, administrative, account, safety, or healthcare-related messages where appropriate.

11. DATA RETENTION

We retain personal information for as long as reasonably necessary to:

• Provide the Services
• Maintain accounts
• Complete transactions
• Meet legal and regulatory requirements
• Maintain medical, financial, tax, or business records
• Prevent fraud
• Resolve disputes
• Enforce agreements
• Protect legal rights

Healthcare providers, pharmacies, and laboratories may independently have legal obligations to retain records.

12. INFORMATION SECURITY

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration, or disclosure.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials.

13. THIRD-PARTY SERVICES

The Services may contain links to or integrate with third-party healthcare providers, infrastructure partners, pharmacies, laboratories, payment providers, carriers, and other services.

Those organizations may maintain separate privacy practices.

This Privacy Policy does not govern independent third-party privacy practices.

14. STATE-SPECIFIC CONSUMER HEALTH DATA LAWS

Certain states provide additional protections for consumer health data, including information that identifies or can reasonably be linked to an individual's health condition or healthcare services.

Where such laws apply, AvioMD will provide legally required notices, rights, consents, and restrictions.

Clinical information may instead be governed by HIPAA or other healthcare-specific privacy laws.

15. INTERNATIONAL USERS

The Services are primarily intended for individuals located in the United States.

Information submitted through the Services may be processed or stored in the United States.

16. CHANGES TO THIS PRIVACY POLICY

We may periodically update this Privacy Policy.

When changes are made, we will update the “Last Updated” date above.

Where required by law, AvioMD may provide additional notice before material changes become effective.

17. CONTACT US

Questions, privacy requests, or concerns regarding this Privacy Policy may be directed to:

AvioMD LLC 1912 Pine Street Huntington Beach, CA 92648 United States

You may also contact AvioMD through the contact methods provided at www.aviomd.com.

For clinical questions or requests concerning medical records, use the secure communication method provided by the healthcare provider responsible for your care.