Consumer Health Data Privacy Policy

CONSUMER HEALTH DATA PRIVACY POLICY

SXNow.com
Operated by UNIMEDSOFT INC

Effective Date: November 24, 2025

────────────────────────────────────────────────────────────────────────────────

1. INTRODUCTION

UNIMEDSOFT INC (“Company,” “we,” “us,” or “our”) operates the website SXNow.com (the “Website”). This Consumer Health Data Privacy Policy (“Policy”) applies to the extent required by applicable state law with respect to “consumer health data” as defined by such laws, including Washington’s My Health My Data Act (“MHMDA”), Nevada’s Consumer Health Data Privacy Law (SB 370), and Connecticut’s Data Privacy Act (“CTDPA”).

This Policy supplements our general Privacy Policy. In the event of a conflict between our Privacy Policy and this Policy, this Policy applies to the extent required by applicable state law.

This Policy does not apply to Protected Health Information (“PHI”) subject to the Health Insurance Portability and Accountability Act (“HIPAA”). We do not collect, store, or maintain PHI. All health and medical information is collected directly by our Telehealth Provider (Ola Digital Health) through integrated forms on our Website and is governed by their Notice of Privacy Practices.

2. OUR ROLE – IMPORTANT INFORMATION

SXNow.com is a platform that connects you with Ola Digital Health (“Telehealth Provider”), an independent telehealth company. We do not provide medical services, and we do not collect or maintain your medical or health information.

When you use our Website:

• Health questionnaires and intake forms displayed on our Website are integrated forms provided and operated by the Telehealth Provider
• Any health or medical information you submit through these forms is collected directly by the Telehealth Provider—not by us
• We maintain a Business Associate Agreement (“BAA”) with the Telehealth Provider
• We do not own, control, or have access to your medical information

For information about how your health and medical information is handled, please refer to the Telehealth Provider’s privacy policy and Notice of Privacy Practices.

3. CONSUMER HEALTH DATA WE MAY COLLECT

Although we do not collect medical or health information directly, certain information we collect through cookies and similar technologies may be considered “consumer health data” under applicable state laws because it could indicate that you are seeking healthcare services.

Categories of Consumer Health Data:

• Data identifying you as a consumer seeking healthcare services: When you visit our Website, our web servers and third-party analytics and advertising tools may automatically log information such as your IP address, device identifiers, browser type, and the pages you view. If you visit pages related to specific health treatments or services, this browsing data may indicate your interest in healthcare services.

• Identifiers and device information: IP address, device identifiers (such as advertising IDs), browser type, and operating system.

• Location data: General location (city, state, or zip code) based on your IP address.

• Usage data: Pages viewed on our Website, time spent on pages, referring URLs, and navigation patterns.

Sources of Collection:

• Directly from your device when you visit our Website
• Through cookies, pixels, and similar tracking technologies
• From third-party analytics and advertising services

4. HOW WE USE CONSUMER HEALTH DATA

We use consumer health data for the following purposes:

• To operate and improve our Website: Analyzing how visitors use our Website to improve functionality and user experience.

• For analytics: Understanding traffic patterns and user behavior on our Website.

• For advertising and marketing: Measuring the effectiveness of our advertising campaigns and conversions. When advertising technologies are implemented on our Website, they may collect information about your visits to our Website, including visits to health-related pages.

• For security and fraud prevention: Protecting our Website and users from malicious activity.

• For legal compliance: Complying with applicable laws and responding to legal requests.

5. HOW WE SHARE CONSUMER HEALTH DATA

We do not sell consumer health data.

We may share consumer health data with the following categories of recipients:

Telehealth Provider: We connect you with Ola Digital Health to facilitate your access to telehealth services. However, any health or medical information you provide is collected directly by the Telehealth Provider through their integrated forms—we do not transfer medical information to them because we do not collect it.

Service Providers: We share information with third-party vendors who help us operate our Website, such as website hosting and analytics providers. These providers are contractually required to protect your information.

Advertising Partners: When advertising technologies (such as Google Ads and Facebook/Meta Pixel) are implemented on our Website, these technologies may collect information about your browsing activity, including visits to health-related pages on our Website. This information is sent directly to these advertising platforms. This may be considered “sharing” of consumer health data under applicable state laws.

We work with advertising partners including:
• Google (Google Ads, Google Analytics)
• Meta/Facebook (Facebook Pixel)

These partners have their own privacy policies:
• Google: https://policies.google.com/privacy
• Meta/Facebook: https://www.facebook.com/privacy/policy

Legal Requirements: We may disclose information when required by law or to protect our legal rights.

Business Transfers: In connection with a merger, acquisition, or sale of assets, information may be transferred to the acquiring entity.

6. YOUR CONSUMER HEALTH DATA RIGHTS

Depending on your state of residence, you may have certain rights regarding your consumer health data:

Right to Confirm: You may request confirmation of whether we are collecting or sharing your consumer health data.

Right to Access: You may request access to the consumer health data we have collected about you.

Right to Delete: You may request deletion of your consumer health data, subject to certain exceptions.

Right to Withdraw Consent: You may withdraw consent for future collection or sharing of your consumer health data.

Right to List of Third Parties: You may request a list of third parties with whom we have shared your consumer health data.

To Exercise Your Rights:

You may submit a request by contacting us at:

Email: Info@sxnow.com

We may need to verify your identity before processing your request. We will respond to your request within the timeframes required by applicable law.

If we deny your request, you may have the right to appeal. To appeal, contact us at Info@sxnow.com with “Appeal” in the subject line.

7. OPT-OUT OF ADVERTISING TECHNOLOGIES

You can opt out of advertising technologies that may collect consumer health data:

Browser Controls: You can block or delete cookies through your browser settings.

Opt-Out Tools:
• Network Advertising Initiative: https://optout.networkadvertising.org
• Digital Advertising Alliance: https://optout.aboutads.info

Platform-Specific Opt-Outs:
• Google Ads Settings: https://adssettings.google.com
• Facebook Ad Preferences: https://www.facebook.com/adpreferences

Global Privacy Control (GPC): We honor GPC signals where required by applicable law. You can enable GPC in supported browsers or through browser extensions.

Please note that if you opt out, you may still see advertisements, but they will not be tailored based on your browsing activity on our Website.

8. GEOFENCING

We do not use geofencing technology to identify or track consumers seeking healthcare services. We do not establish a geofence around any facility that provides healthcare services for the purpose of identifying or tracking consumers, collecting consumer health data, or sending notifications related to healthcare services.

9. DATA RETENTION

We retain consumer health data only as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, and resolve disputes.

• Cookie data: Varies by cookie type; session cookies are deleted when you close your browser; persistent cookies typically expire within 1-2 years
• Analytics data: Up to 26 months
• Advertising data: Retention periods vary by advertising partner

10. SECURITY

We implement reasonable technical and organizational measures to protect consumer health data from unauthorized access, disclosure, or destruction.

However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

11. CHILDREN

Our Website is not intended for individuals under 18 years of age. We do not knowingly collect consumer health data from children under 18.

12. CHANGES TO THIS POLICY

We may update this Policy from time to time. We will post the updated Policy on our Website with a new effective date. Your continued use of our Website after changes are posted constitutes your acceptance of the updated Policy.

13. CONTACT US

If you have questions about this Policy or wish to exercise your consumer health data rights, please contact us:

UNIMEDSOFT INC
Email: Info@sxnow.com
Website: https://sxnow.com