Privacy Policy

Acceptance of the Privacy Policy

We are committed to protecting the privacy of individuals that access and use our Website (defined hereinafter) and providing them with information regarding how we collect and use information we collect about them in association with their use of the Website. This Privacy Policy ("Policy") describes how MCC Health, PBC ("Company" "we," "us," or "our") collects, uses, and discloses information collected through your access to and use of costpluswellness.com (the "Website" ). By using our Website, you are consenting to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, do not access or use the Website. The Website is intended to assist employers in contracting with healthcare providers for services. This Website is not intended for consumer use.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we treat it. In addition, please review the Website's Terms of Use which govern your use of the Website. By using our Website, you agree to the Terms of Use and consent to our collection, use, and disclosure of your information as described herein. If you do agree to these Terms of Use and Privacy Policy, you are not granted permission to access or use the Website and must not access or use the Website. This Privacy Policy is subject to the Terms of Use, inclusive of its provisions regarding resolution of disputes and limitation of liability.

Changes to the Privacy Policy

We may revise and update this Privacy Policy from time to time in our sole discretion. All changes are effective immediately when we post them, and apply to all access to and use of the Website thereafter. Your continued use of the Website following the posting of revised Privacy Policy means that you accept and agree to the changes. You are expected to check this page from time to time so you are aware of any changes, as they are binding on you.

Children's and Minors' Information

Our Website is intended to support commercial transactions. As such it is neither intended for, nor do we knowingly collect any personal information from, children under the age of 18. If we learn we have collected or received personal information from a child under 18 years old without verification of parental consent, we will delete that information. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

Information Collected by Us

You Provide Information to Us

We receive information about you and the devices you use when you use our Website, including when you provide it through forms or surveys.

Information Automatically Collected

We may automatically collect certain information resulting from your use of our Website. This information collected automatically may include usage details, IP addresses, information about your devices (such as information related to your computer or device, internet connection, operating system, and internet browser type), and information collected through cookies, web beacons, and other tracking technologies including details of your interactions with our Website, such as traffic data, location data, logs, and other communication data, and which resources and Website features that you access and use.

Some of the information identified above may be considered sensitive information under certain laws. If required under applicable law, we will collect and process sensitive personal information only with your consent.

Information Collected by Third Parties

When you use the Website, certain third parties may use automatic information collection technologies to collect information about you or your device. This Privacy Policy does not address, and we are not responsible for the privacy information or other practices, including data privacy and security processes and standards, of any third parties.

These third parties may include, but are not limited to: advertisers, ad networks, and ad servers; analytics companies; your mobile device manufacturer; and your mobile service provider. The information they collect may be personally identifiable and may include information about your online activities over time and across different websites, apps, and other online services websites. These third parties may use this information to provide you with interest based advertising or other targeted content.

We do not control these third parties, the third parties tracking technologies, or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

How We Use Your Information

We use information that we collect about you or that you provide to us to:

• Perform the services and functions provided through our Website;
• Improve our Website;
• Conduct internal research and development and make business decisions about current and future offerings;
• Respond to your comments, questions and requests and provide customer service;
• Monitor and analyze trends, usage and activities;
• Comply with any court order, law, or legal process, and respond to any government or regulatory request;
• Enforce or apply our Terms of Use; and/or
• Fulfill any other purpose for which you provided the information.

How We Share Your Information

We may share your personal information with our affiliates, partners and other third parties, including subcontractors, to:

• To perform the services made available through the Website;
• Assist us with the maintenance and operation of the Website;
• Market and promote the Website, including the measurement of the success of such efforts;
• Comply with any court order, law, or legal process, including to respond to any government or regulatory request;
• To enforce or apply our Terms of Use;
• Protect our or others rights, property, or safety; or
• To disclose to a buyer or other successor entity in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

In addition, we may disclose your deidentified and anonymized information for commercial purposes, and information prohibited from disclosure pursuant to federal and state law.

We do not sell or share personal information for monetary consideration.

Privacy and Security

We design our systems with your security and privacy in mind, and we maintain administrative, technical and physical safeguards to protect your personal information from unauthorized access, use, or disclosure. These safeguards vary based on the sensitivity of the information that is collected.

Unfortunately, the transmission of information via the internet is not completely secure. We cannot guarantee the security of your personal information transmitted through our Website. The safety and security of your information also depends on you: Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Your State Privacy Rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. For example, if you live in, among other states, California, Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, your state has a law in effect to provide its residents with specific rights regarding their personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

• Right to Access / Know: You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
• Right to Delete: You may have a right to request that we delete personal information we maintain about you.
• Right to Correct: You may have a right to request that we correct inaccurate personal information we maintain about you.
• Right of Portability: You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
• Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.
• Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent.
• Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.
• Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
• Nondiscrimination: We will not discriminate or retaliate against you for exercising any of the rights listed above.

How to Exercise Your Rights

If you would like to exercise any of your rights described in this Privacy Policy, you may email us at legal@costpluswellness.com or mail us at: 1229 Slocum Street, Dallas, TX 75207

• To exercise your opt-out rights, please email the address above with the subject line: "Opt-Out Rights".
• To designate an agent to exercise your rights on your behalf or, if you are a guardian or conservator, to exercise rights on behalf of another, please use the above contact methods.
• If you choose to contact us directly by any of the methods listed above, you will need to provide us with:
• Enough information to identify you;
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.
• If we cannot verify that the person making the request is the person about whom we have collected information or is someone authorized to act on such person's behalf, then we are not obligation to provide information.
• Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Responding to Requests

We endeavor to substantively respond to a verifiable request within forty-five (45) days of its receipt. If reasonably necessary, depending on the type and complexity of the request, we may extend the response time for another forty-five (45) days, so as long as we notify you within the first forty-five (45) day period.

• If we decline to take action regarding your request, we will endeavor to notify you within forty-five (45) days of our receipt of the request. When we do so we will provide a justification for not taking action and provide information on whether there is an appeal process and how to initiate such process.
• You can request information free of charge twice per year. Depending on your state of residence, any subsequent requests within a twelve (12) month period may result in a reasonable fee not to exceed the actual cost of providing a copy, printout, or photograph of the record in a format other than a standard page.

Contact Information

All questions about this Privacy Policy should be directed to us at legal@costpluswellness.com or