The Site captures some information about you automatically utilizing background local storage and session storage technologies, such as cookies and web beacons (also referred to as clear gifs, pixel tags, single-pixel gifs and web beacons) (collectively, “Tracking Technologies”). Tracking Technologies are small files or other pieces of data which are downloaded or stored on your computer or other device, that can be tied to information about your use of the Site (including certain third-party services and features offered as part of our Site). Examples of information collected by Tracking Technologies are your IP address, the browser you are using, the operating system you are using, and the pages on the Site that you visit. We may use third-party companies to help us tailor content to serve messages on our behalf. These companies may employ Tracking Technologies to measure advertising or messaging effectiveness (such as which web pages are visited and which messages generate responses). You may change your browser setting to decline the use of Tracking Technologies.

We also collect information that you provide to us voluntarily, including as described below.

Site visitors may use a contact form to request a free initial consultation or send a message to us. We ask for name (required), email (required), and phone number (optional). The information collected will be used to contact the visitors regarding their desire to schedule a meeting with Dr. Cara and/or respond to their query.

We utilize a third-party provider, Elation, to support our practice. Patients who schedule appointments with us will be asked to set up a patient account on their Patient Portal (Passport), which will be used to administer care and payments, as necessary. Passport will collect payment information and process payments (using Stripe) on our behalf. Elation also supports online scheduling.

Our third-party providers are unaffiliated with us, and we are not responsible for their privacy practices. Third-party providers have their own terms of use and privacy policies, and we encourage you to review those policies whenever you visit their websites or interact with their platforms.

From time to time, our interactions with you will be conducted over the telephone or video-conference, and such telephone calls and video conferences may be recorded.

We operate social media pages on third-party networks and have social media icons on our Site. When you visit or link to our social media pages, data is processed both by us and the applicable social media provider. Social media providers are unaffiliated with us, and we are not responsible for the content or privacy practices of social media providers. Social media providers have their own terms of use and privacy policies, and we encourage you to review those policies whenever you visit their websites or interact with their platforms.

Our Site is not directed towards children; Cara Cares services only adults. We do not knowingly collect information from users of our website under the age of 18 and/or their internet usage, and such persons are not authorized to use the Site. If we obtain actual knowledge that a user is under 18, we will take steps to remove that user's personal information from our databases unless otherwise authorized by their parent(s) or legal guardian.

Cara Cares may also collect information via offline processes, including for Concierge Memberships and Pay-Per-Visit plans.

In using our services, you may also provide certain health or medical information that may be protected under applicable laws. Cara Cares is not a "covered entity" under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and its related regulations and amendments from time to time (collectively, "HIPAA"). It is important to note that HIPAA does not necessarily apply to an entity or person simply because there is health information involved. In the event you ask us to share your health or medical information with other individuals or entities, such information may become protected under HIPAA. Please refer to such individual’s or entity’s HIPAA-policies for additional information as to how those parties may use or disclose your information.

In the event Cara Cares is deemed a "business associate" under HIPAA, and solely in its role as a business associate, Cara Cares may be subject to certain provisions of HIPAA with respect to "protected health information," as defined under HIPAA. In addition, any medical or health information that you provide that is subject to specific protections under applicable state laws (collectively, with PHI, "Protected Information”), will be used and disclosed only in accordance with such applicable laws. Any information that does not constitute Protected Information under applicable laws may be used or disclosed in any manner permitted under this Privacy Policy. Protected Information does not include information that has been de-identified in accordance with applicable laws.

We use the personal data we collect to:

• Respond to your inquiries

• Onboard you as a patient

• Develop your care plan

• Provide our medical services

• Perform our contractual obligations

• Provide updates and other important information related to your activity on and with the Site and with us (such as appointment information and reminders)

• Send you practice updates or marketing communications

• Inform you of new services or changes in our services

• Enter into contracts for our services

• Collect payments for Concierge Memberships or Pay-Per-Visit services

• Administer your patient account

• Manage and assure the integrity of our Site

• Communicate with you, including to provide status updates, transactional emails and other service communications

• Provide you with notices about your account and to contact you through telephone, text, or email, as permitted by law

• To communicate with you for research purposes, including to request your participation in surveys

• Monitor the performance of our Site and improve your user experience

• Satisfy legal obligations and compliance requirements under laws and regulations applicable to us

• Protect and defend the rights and property of our users, Cara Cares and third parties

• Comply with legal obligations and regulations to which we are subject and cooperate with regulators, other appropriate agencies, or authorities and law enforcement bodies

We may use your information for other purposes that we tell you about when you register or provide data about yourself to us and for other legitimate business purposes.

You will have the opportunity to opt out of any electronic marketing communications you may receive from us.

Cara Cares may obtain your written consent from time to time in electronic form by using online agreements or other acknowledgements on the Site or on third-party sites, including for any other contemplated uses of your personal data not addressed in this Privacy Policy. Please read all online agreements carefully before accepting them.

We may share your personal data with third parties who perform services on our behalf, including, without limitation, our technology providers, electronic mail delivery provider, administrative support provider, and professional advisors.

If you opt-in to receive text messages, we will use information you provide to transmit your mobile messages and respond to you, if necessary. This includes sharing information with platform providers, phone companies, and other third-party service providers who assist us in the delivery of mobile messages.

We may disclose any information we have about you (including your identity) if we determine that such disclosure is necessary in connection with any investigation or complaint regarding your use of the Site, or to identify, contact, or bring legal action against someone who may be causing injury to or interference with our rights or property, or the rights or property of visitors to or users of the Site and our services. We reserve the right at all times to disclose any information that we deem necessary to comply with any applicable law, regulation, legal process, or governmental request. We also may disclose your information when we determine that applicable law requires or permits such disclosure, including exchanging information with other companies and organizations for fraud protection purposes.

We may share your data with a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, liquidation, or other disposition of all or any portion of our business, assets, or stock with such third party.

We may share aggregated and de-identified information with third parties for analytical, research, or other similar purposes.

If you opt-in to receive text messages on your mobile device, we may use your mobile number to send you service-related announcements, such as appointment confirmations and reminders, and you may communicate with us, including with respect to your patient care. Participation in mobile messaging is optional and not a condition of care. The frequency and number of messages you will receive will vary. Message and data rates may apply. You must have a wireless device of your own, capable of two-way messaging, be using a participating wireless carrier, and be a wireless service subscriber with text messaging service. Not all cellular phone providers carry the necessary service to participate. Check your phone capabilities for specific text messaging instructions. Please consult your mobile service carrier’s pricing plan to determine the charges for browsing data and sending and receiving mobile messages. Under no circumstances will we be responsible for any messaging or wireless charges incurred by you or by a person that has access to your wireless device or telephone number. Text Messaging Opt-Out: You can cancel the SMS service at any time by replying “STOP” to the text message you received from us or by texting “STOP” to the number 36331. After you send the SMS message “STOP” to us, we will send you an SMS message to confirm that you have been unsubscribed. In some cases, you may continue to receive service-related notifications. If at any time you need assistance, please email Channing@PainCareConcierge.com

We retain the personal data we collect for as long as reasonably necessary to fulfill the purposes for which the data was collected, provide quality care, and to perform our contractual and legal obligations. We will retain personal information required to comply with privacy requests, to manage active accounts, as required by law, in order to resolve disputes, or to enforce our agreements. We will retain the personal information we process on behalf of our users as directed by them. We may also retain copies of your personal information for disaster recovery purposes, to prevent fraud or future abuse, or for our legitimate business purposes.

Notwithstanding the generality of the foregoing, we store email addresses until the user requests to be unsubscribed or removes themselves through any self-service tools offered to the user.

We do not store payment card information; rather we utilize the Elation platform and payment processors and store only an electronic receipt that sets forth confirming payment details, such as purchase date, the expiration date of the payment card and the payment ID, but not complete payment card information .

We take reasonable administrative, physical, and technical precautions to protect your personal data and communications between us. This includes, when required or as we deem appropriate and feasible under the circumstances, encryption, and written commitments from third parties that may have access to your data that they will protect the data with reasonable safeguards.

No Internet or e-mail transmission is ever fully secure or error free, however. We therefore cannot guarantee absolute security of your data, and we are not responsible for processes and networks that we do not control. Users assume the risk of security breaches and the consequences resulting from them. Please be careful in deciding what information you send to us via email, text message, or over the Internet.

We are committed to facilitating the exercise of your rights granted by the laws of your jurisdiction, which may include the right to request the correction, modification, or deletion of your personal information and the right to opt out of the sale or sharing of your personal information (as applicable). We will do our best to honor your requests subject to any legal and contractual obligations. If you would like to make a request, cancel your account, or request we delete or no longer use your account information to provide you our services, contact us at Channing@PainCareConcierge.com or make changes on the Patient Portal to any user profile information connected to your account.

You may opt out of receiving electronic marketing communications from us by clicking on the “unsubscribe” link on the communication or contacting us at Channing@PainCareConcierge.com. Some non-marketing communications may not be subject to a general opt-out, such as communications about transactions, disclosures to comply with legal requirements, and other support-related information. If you do not wish to receive any service-related emails from us, you have the option to deactivate your account.

California “Shine the Light” Information-Sharing Disclosure: We do not disclose information about you to third parties for their direct marketing purposes.

California Do Not Track Disclosure: Our web host provider utilizes a tool designed to recognize do not track signals.

The Site is hosted, and our services are provided, in the United States and are intended for and directed to users in the United States. If you are a user accessing the Site from Canada, the European Union, Asia, or any other region with laws or regulations governing personal data collection, use, and disclosure that differ from United States laws, please be advised that through your continued use of the Site, which is governed by U.S. law, this notice and our other policies that govern your use of the Site and our services, you are transferring your personal information to the United States and you consent to that transfer. The Site and our services are not intended to subject us to the laws or jurisdiction of any state, country, or territory other than those of the United States.

Our Site may contain links to other websites for your convenience or information. These websites are operated by companies unaffiliated with us, and we are not responsible for the content or privacy practices of those websites. Linked websites may have their own terms of use and privacy policies, and we encourage you to review those policies whenever you visit the websites or interact with their platforms.

This Privacy Policy may be updated periodically. We will post a notice on our website to notify you of any material changes to our Privacy Policy and indicate at the top of the policy when it was most recently updated. We will also communicate changes as required by applicable law.

Please email Channing@PainCareConcierge.com if you have any questions about our Privacy Policy.