Consumer Health Data Privacy Policy

---

1. Who We Are

Optimal Health Network LLC, a Delaware limited liability company located at 16092 Coastal Highway, Lewes, Delaware 19958 doing business as Urgent Care Online (also known as Urgent-Care-Online), operates the website Urgent-Care-Online.com (the "Site") and related marketing, lead-matching, and referral services (the "Services"). We are a marketing and referral service that connects consumers with independent physicians, clinics, telehealth providers, insurers, and other businesses ("Partners"). We are not a healthcare provider and, unless we have signed a Business Associate Agreement, we are not a covered entity or business associate under HIPAA.

2. What Is Consumer Health Data

"Consumer health data" means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. For our Services, this may include:

• the condition category or topic you select on our form (for example, chronic pain, mental health and behavioral support, endocrine and metabolic conditions, cardiometabolic health, autoimmune and inflammatory conditions, neurological and sleep concerns, weight and nutrition, respiratory and allergy care, women's and men's health, musculoskeletal care, or dermatological conditions);
• any symptoms, conditions, diagnoses, medications, or treatments you choose to describe in a free-text field or during a call;
• health insurance information you provide, including carrier, plan type, and member ID, and eligibility results returned by insurers;
• information about health-related services you are seeking, including the type of provider or care and your preferred timing;
• inferences we draw from the above to match you with an appropriate Partner; and
• precise location information only if you choose to provide a street address in connection with a request for in-person care (we do not collect precise geolocation from your device).

3. Sources of Consumer Health Data

We collect consumer health data from:

1. You, when you complete a form on the Site or a form presented by one of our advertising or co-registration partners that includes our offer, or when you speak or message with us.
2. Co-registration and advertising partners, who transmit to us the information you entered on their form together with your consent record.
3. Insurers and eligibility clearinghouses, when you request an insurance eligibility check.
4. Partners who report back to us whether your inquiry was accepted or an appointment was scheduled (status information only).

4. Why We Collect and Use Consumer Health Data

We collect and use consumer health data only for the following purposes:

• to match and refer you to Partners that can provide the care, coverage, or services you requested;
• to contact you about your request, including by telephone, text message, and email as described in our Privacy Policy, where you have provided the required consent;
• to perform insurance eligibility checks you request;
• to route your inquiry to Partners that serve your condition category, state, and insurance type;
• to prevent fraud, verify your identity and consent, and maintain records required by law;
• to operate, analyze, and improve the Services; and
• to comply with legal obligations and to establish, exercise, or defend legal claims.

We do not use consumer health data to serve you advertising based on your health status on third-party websites or apps without your consent, and we do not implement a geofence around any facility that provides in-person health care services to identify, track, collect data from, or send notifications to consumers.

5. How We Share Consumer Health Data

We share consumer health data only with your consent, or as necessary to provide the Services you requested, with the following categories of recipients:

Recipient category	Purpose
Partners (physicians, clinics, telehealth providers, insurers, insurance agents and agencies, and the other businesses named in the consent disclosure on your form, listed at urgent-care-online.com/partners)	To fulfill your request for a provider match, coverage, or related services and, where you consented, to contact you. We receive compensation from Partners for these referrals.
Service providers and processors (hosting, CRM, telephony and dialing platforms, SMS gateways, call centers, email providers, consent-documentation vendors, lead-validation and compliance vendors)	To operate the Services on our behalf, under contracts that restrict their use of your data to our instructions.
Insurers and eligibility clearinghouses	To perform insurance eligibility checks you request.
Affiliates (companies under common ownership or control with Optimal Health Network LLC, including our Optimal Health Network brand (optimalhn.com))	For the purposes described in this Policy.
Government authorities, courts, and parties to litigation	When required by law, subpoena, or court order, or to protect rights, property, or safety.
Successors in a merger, acquisition, financing, or sale of assets	Subject to confidentiality protections.

Sale of consumer health data. Transmitting your inquiry to a Partner in exchange for compensation may be considered a "sale" of consumer health data under some state laws. Where state law requires a valid authorization for such a sale (including Washington and Nevada), we will obtain your separate, signed authorization that identifies the specific data to be sold, the purchaser, and the purpose, and we will not sell your consumer health data without it. You may revoke an authorization at any time by contacting us as described in Section 8, and each authorization expires one year after you sign it.

6. Your Consent

We collect consumer health data only when you affirmatively provide it to us and consent to its collection by submitting our form. Where required by law, we request separate consent before (a) collecting consumer health data for a purpose beyond what is necessary to provide the Services you requested, (b) sharing consumer health data with third parties for their own purposes, or (c) selling consumer health data. Consent is obtained through a clear and conspicuous disclosure and an affirmative act, and is never pre-checked or bundled with unrelated terms. You may withdraw consent at any time as described below.

7. Your Rights

Regardless of where you live, you may:

• Confirm and access whether we are collecting, sharing, or selling your consumer health data, and receive a list of all third parties and affiliates with whom we have shared or to whom we have sold your consumer health data, together with an active email address or other online contact for each.
• Withdraw consent to our collection and sharing of your consumer health data.
• Delete your consumer health data. When you ask us to delete, we will delete it from our records, including archived and backup systems within the time required by law, and we will notify all affiliates, processors, contractors, and other third parties with whom we have shared the data to delete it as well.
• Appeal a decision we make regarding your request.
• Not be discriminated against for exercising any of these rights.

We may retain limited information where necessary to honor your opt-out or deletion request, to comply with law, or to establish, exercise, or defend legal claims.

8. How to Exercise Your Rights

Submit a request by:

• emailing privacy@urgent-care-online.com with the subject line "Consumer Health Data Request";
• completing the form at urgent-care-online.com/privacy-request; or
• writing to Optimal Health Network LLC, Attn: Privacy, 16092 Coastal Highway, Lewes, Delaware 19958.

We will verify your identity by matching the information you provide against information we hold. We will respond within 45 days (extendable once by 45 days where permitted) or any shorter period required by your state's law. If we deny your request, you may appeal by replying to our response with the word "Appeal" in the subject line; we will respond to your appeal within 45 days and, if the appeal is denied, we will tell you how to contact your state Attorney General.

An authorized agent may submit a request on your behalf if you provide the agent with signed written permission or a power of attorney, and we may ask you to verify your identity directly.

9. Retention and Security

We retain consumer health data for as long as needed to fulfill the purposes above. Specifically, condition-category and free-text health information is retained for twelve (12) months after your last interaction with us unless needed to complete an active referral or to comply with law; insurance eligibility results are retained for ninety (90) days; and consent and authorization records are retained for five (5) years. We protect consumer health data with administrative, technical, and physical safeguards including encryption in transit, role-based access restricted to personnel who need the data to perform their duties, and vendor contracts that require equivalent protection. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date above reflects the most recent revision. Material changes will be posted on the Site and, where required by law, communicated to you directly.

11. Contact Us

Urgent Care Online (Urgent-Care-Online.com) Optimal Health Network LLC d/b/a Urgent Care Online 16092 Coastal Highway Lewes, Delaware 19958 Email: privacy@urgent-care-online.com Privacy requests: https://urgent-care-online.com/privacy-request Do-Not-Call / opt-out: donotcall@urgent-care-online.com or https://urgent-care-online.com/do-not-call