PRIVACY POLICY

Introduction

PGMD Enterprises, LLC (“Company,” “we,” or “us“) respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes our practices for collecting, using, maintaining, protecting, and disclosing information we collect from users of our website and of our mobile application AllergyAIDE (our “App“).

AllergyAIDE is designed to allow parents and legal guardians to create and manage health information regarding minors’ allergies. Because we collect and maintain protected health information (“PHI“), we are subject to the Health Insurance Portability and Accountability Act (“HIPAA“) and the Health Information Technology for Economic and Clinical Health Act (“HITECH Act“). We take these obligations seriously and have implemented appropriate safeguards to protect your information.

Information We Collect

Protected Health Information (PHI)

We collect several types of protected health information about minors, including:

• Name and date of birth
• Health information regarding allergies
• Schools the minor attends
• Medications the minor takes
• Action plans provided by the minor’s allergist
• Information regarding the minor’s healthcare providers

Parent/Legal Guardian Information

We also collect information about the parent or legal guardian creating and managing the account, including:

• Name
• Email address
• Phone number
• Relationship to the minor

Technical Information

When you use our App, we automatically collect:

• Device information (device type, operating system, unique device identifiers)
• App usage data
• IP address
• Login information

How We Collect Information

We collect information:

• Directly from you when you provide it through the App
• Automatically as you navigate through and use the App
• From third parties, such as Google Analytics and healthcare providers
• Commonly used Cookies

How We Use Your Information

We use the information we collect:

• To provide and maintain the App functionality
• To allow parents/legal guardians to create and manage allergy information for minors
• To communicate with you about the App, including updates and alerts
• To improve the App and develop new features
• To comply with legal obligations
• For de-identified research and statistical purposes

Disclosure of Your Information

We may disclose personal information:

• To our subsidiaries and service providers who need access to such information to carry out work on our behalf and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them
• To healthcare providers as authorized by you
• To schools and other caregivers as explicitly authorized by you
• To comply with any court order, law, or legal process, including responding to any government or regulatory request
• To enforce our Terms of Use
• If we believe disclosure is necessary to protect the rights, property, or safety of the Company, our users, or others

HIPAA Compliance

As a covered entity under HIPAA, we:

• Maintain appropriate administrative, technical, and physical safeguards to prevent unauthorized use or disclosure of PHI
• Limit our uses and disclosures of PHI to the minimum necessary to accomplish the intended purpose
• Provide notifications in the event of a breach of unsecured PHI
• Honor your rights regarding your and the minor’s PHI as required by HIPAA

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments
• Training on privacy and security procedures

Revocation of Authorization

You have the right to revoke your authorization for the use or disclosure of the minor’s protected health information at any time. According to 45 CFR § 164.508(b)(5), this revocation must be made in writing. The revocation will be effective immediately upon our receipt of your written notice, except to the extent that:

• We have already taken action in reliance on your previous authorization; or
• The authorization was obtained as a condition of obtaining insurance coverage, and other law provides the insurer with the right to contest a claim under the policy.

To revoke an authorization, please contact our Privacy Officer using the contact information provided below. Upon receiving your written revocation, we will stop using or disclosing the minor’s protected health information except to the extent that action has already been taken based on your previous authorization.

Your Rights Under HIPAA

You have the right to:

• Access the PHI we maintain about you or the minor
• Request corrections to inaccurate or incomplete PHI
• Receive an accounting of disclosures of PHI
• Request restrictions on certain uses and disclosures of PHI
• Request confidential communications
• Receive notifications of breaches of unsecured PHI
• File a complaint if you believe your privacy rights have been violated

In addition to these HIPAA rights, you may have additional individual privacy rights depending on your applicable jurisdiction. State laws may provide additional protections for certain types of health information or for minors’ health information specifically. Where state law provides greater privacy protections or privacy rights than those provided by HIPAA, we will comply with those state law requirements.

To exercise these rights, please contact us using the information provided in the “Contact Information” section below.

Children’s Privacy

Our App is designed for parents and legal guardians to manage health information for minors. We do not knowingly collect personal information directly from minors under 18. All information about minors is provided by their parents or legal guardians, who consent to our collection and use of such information as described in this Privacy Policy.

Changes to Our Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Modified” date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

For significant changes, we will provide a more prominent notice, which may include email notification to the email address specified in your account.

Contact Information

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at:

PGMD Enterprises, LLC
Attn: Privacy Officer
1171 Old Country Road STE 5
Plainview, NY 11803
contact@allergyaide.com

Reporting Violations

If you believe that your privacy rights have been violated, you may file a complaint with the Company or with the U.S. Department of Health and Human Services Office for Civil Rights.

To file a complaint with the Company, contact our Privacy Officer using the contact information provided above.

To file a complaint with the Office for Civil Rights, visit:

https://www.hhs.gov/ocr/privacy/hipaa/complaints/index.html

We will not retaliate against you for filing a complaint.