Canfield Connect® Privacy Policy

Definitions

Client:

• Patient (medical)
• Consumer (retail)

Personal Information (PI):

• Any information that can be used to identify a specific individual or can be linked to a particular individual (Personal Identifiable Information). Personal Identifiable Information is considered Protected Health Information (PHI).
• Other information related to your consultation may include: your images/simulations, analysis results, product/procedure/treatment recommendations, representative's notes and annotations, comparison to norms, demographic information, and any other information related to your consultation(s).

Portal:

Canfield Connect® (Canfield Scientific Inc.'s proprietary website used to access Client's consultation sessions)

Provider:

Canfield Scientific, Inc.

Representative:

• A person who, based on your consent, uploads your consultation(s) onto the Portal at your:
  • Health Care Provider (HCP)/Practice (medical)
  • Corporation/Store/Place of Business (retail)
• The HCP/Practice/Corporation/Store/Place of Business (Place of Upload) itself.

Privacy of your Personal Information (PI)

This Policy has been developed to inform you why we collect your PI, as well as how we use and protect it.

Your access and use of the Portal is subject to your acknowledgement of this Privacy Policy. Please read this Policy carefully along with the Terms and Conditions of Use of the Portal before attempting to use it.

The Provider has the right to amend this Privacy Policy at any time by posting a revised version on its website. This revised version will be effective as soon as it is posted.

Applicability of this Privacy Policy

This Privacy Policy applies solely to the Portal and provides details regarding the specific information that the Provider may collect from you via the Portal and how this information may be used.

If you are a Client or legal representative of the Client, your Representative's use and disclosure of your PI is subject to your Representative's Notice of Privacy Practices. We cannot control a Representative's use or disclosure of a Client's PI.

What Information About You Is Being Collected?

In order for us to provide services to you we need to collect certain information from you.

Information About Clients

Information collected about you may contain your PI and include the following information:

• Client's email address
• IP address of the computer you are logging in from
• Login day and time
• Pages viewed
• Other personal identifiable information as applicable

Information About Representatives

Information collected about you may contain your PI and include the following information:

• Representative's name
• Representative's address
• Representative's telephone number
• Representative Staff's names/telephone numbers/email addresses
• IP address of the computer Representative Staff is logging in from
• Login day and time
• Pages viewed

How is the Information Collected About You Used?

Information about you, including your PI, is collected by the Provider and hosted on the Portal to provide services to Clients and their Representatives.

The Provider is hosting your PI on behalf of your Representative and in accordance with the provisions of the contractual agreement between the Provider and your Representative.

The Provider collects and stores your PI but it is not accessed or viewed by the Provider other than for the purposes of administration and maintenance.

The Provider reserves the right to store and use your PI anonymously in its aggregated form. The Provider uses such aggregated information for statistical analysis purposes only.

The Provider will not sell, share, or rent your PI that is collected via the Portal in ways that differ from what is disclosed in this Privacy Policy.

Security

The Provider seeks to use reasonable organizational, technical, and administrative measures to protect your PI, but you should be aware that any electronic means of communication may carry some level of risk and no data transmission or storage system can be guaranteed to be 100% secure.

The Provider may only disclose your information in accordance with applicable law.

Canfield Privacy Contact Information

If you have any questions regarding your privacy, please contact us at: PrivacyOfficer@CanfieldSci.com.