This privacy notice for Healthcare Outsourcing Network, L.L.C ("we," "us," "our," or the "Company/>"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our website at healthout.com (our "Website"). This policy applies to information we collect:

• On our Website, or any website of ours that links to this privacy notice.
• In email, text, and other electronic messages between you and our Website.
• When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy.

It does not apply to information collected by:

• Us offline or through any other means, including on any other website operated by the Company or any third party; or
• Any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Website.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using our Website, you agree to this privacy policy. If you still have any questions or concerns, please contact us at privacy@healthout.com. This policy may change from time to time. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Website, we may process personal information depending on how you interact with us and the Website, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? We may process sensitive personal information when necessary, with your consent, or as otherwise permitted by applicable law. Learn more about sensitive information we process.

Do we receive any information from third parties? We do not receive any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Website, communicate with you, for security and fraud prevention, to comply with law, with your consent, and otherwise as described under how we process your information.

In what situations and with which parties do we share personal information? We may share information without restriction. Learn more about when and with whom we share your personal information.

How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is by visiting healthout.com/dsar, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the privacy notice in full.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE COLLECT YOUR INFORMATION?
3. HOW DO WE PROCESS YOUR INFORMATION?
4. WHAT LEGAL BASIS DO WE RELY ON TO PROCESS YOUR INFORMATION?
5. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
6. HOW LONG DO WE KEEP YOUR INFORMATION?
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
8. DO WE COLLECT INFORMATION FROM MINORS?
9. WHAT ARE YOUR PRIVACY RIGHTS?
10. CONTROLS FOR DO-NOT-TRACK FEATURES
11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
12. DO WE MAKE UPDATES TO THIS NOTICE?
13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us.

In Short: We collect several types of information from and about users of our Website.

We collect several types of information from users of our Website when users express an interest in obtaining information about us or our products and services, when users participate in activities on the Website, or otherwise when users contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Website, the choices you make, and the products and features you use. The personal information we collect may include, but is not limited to, the following:

• Names
• Phone numbers
• Debit/credit card numbers
• Postal addresses
• Email addresses

Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

• Health data
• Financial data

Payment Data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number and the security code associated with your payment instrument.

Other Information. We may collect other types of information from and about users of our Website, including information:

• That is about you but individually does not identify you; and
• About your internet connection, the equipment you use to access our Website, and usage details.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Contact details such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name	YES
B. Personal information as defined in the California Customer Records statute	Name, contact information, education, employment, employment history, and financial information	YES
C. Protected classification characteristics under state or federal law	Gender and date of birth	NO
D. Commercial information	Transaction information, purchase history, financial details, and payment information	YES
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements	YES
G. Geolocation data	Device location	NO
H. Audio, electronic, visual, thermal, olfactory, or similar information	Images and audio, video, or call recordings created in connection with our business activities	NO
I. Professional or employment-related information	Business contact details in order to provide you our services at a business level, job title, work history, and professional qualifications if you apply for a job with us	NO
J. Education Information	Student records and directory information	NO
K. Inferences drawn from other personal information	Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics	NO
L. Sensitive personal information	Account login information and debit or credit card numbers	YES

We will use and retain the collected personal information as needed to provide our services or for:

• Category A - As long as the user has an account with us
• Category B - As long as the user has an account with us
• Category L - 6 months

Category L information may be used, or disclosed to a service provider or contractor, for additional, specified purposes. You have the right to limit the use or disclosure of your sensitive personal information.

We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:

• Receiving help through our customer support channels;
• Participation in customer surveys or contests; and
• Facilitation in the delivery of our Website and to respond to your inquiries.

2. HOW DO WE COLLECT YOUR INFORMATION?

We collect this information:

• Directly from you when you provide it to us.
• Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.
• From third parties, for example, our business partners.

Information You Provide to Us. The information we collect on or through our Website may include :

• Information that you provide by filling in forms on our Website. We may also ask you for information when you report a problem with our Website.
• Records and copies of your correspondence (including email addresses and phone numbers), if you contact us.
• Details of transactions you carry out through our Website.
• Your search queries on the Website.

Information We Collect Through Automatic Data Collection Technologies. As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
• Information about your computer and internet connection, including your IP address, operating system, and browser type.

The information we collect automatically may include personal information. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize our Website according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
• Web Beacons. Pages of our Website may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

3. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Website, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Website, including:

• To present our Website and its contents to you.
• To deliver and facilitate delivery of services to the user.
• To respond to user inquiries/offer support to users.
• To comply with our legal obligations.
• To fulfill any other purpose for which you provide it.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• To notify you about changes to our Website or any products or services we offer or provide through it.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.

4. WHAT LEGAL BASIS DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in Canada we may collect, use and disclose your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time. In some exceptional cases, we may be legally permitted under the Personal Information Protect and Electronic Documents Act to process your information without your consent.

5. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information about our users without restriction .

We may disclose personal information that we collect or you provide as described in this privacy policy:

• In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• To contractors, service providers, and other third parties we use to support our business.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.
• To comply with any court order, law, or legal process.
• To enforce or apply our terms of use and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our customers or others.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy or the original purpose of collection, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). We determine the appropriate retention period for personal information on the basis of the amount, nature, and sensitivity of your personal information processed, the potential risk of harm from unauthorized use or disclosure of your personal information, and whether we can achieve the purposes of the processing through other means, as well as on the basis of applicable legal requirements (such as applicable statutes of limitations). We will only retain your data for a period of time that is reasonably required for legal or business purposes.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

Although we have measures in place to protect your personal information, transmission of personal information to and from our Website is at your own risk, and we cannot guarantee the security of your personal information transmitted to our Website. We are not responsible for circumvention of any privacy settings or security measures contained on the Website. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. You should only access the Website within a secure environment.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 16 years of age.

Our Website it not intended for children under 16 years of age. We do not knowingly solicit data from or market to children under 16 years of age. No one under age 16 may provide any information to or on the Website. By using the Website, you represent that you are at least 16 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Website. If we learn that personal information from users less than 16 years of age has been collected without verification of parental consent, we will deactivate the account and delete such data from our records. If you become aware of any data we may have collected from children under age 16, please contact us at DPORequests@healthout.com.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: In some regions, such as Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.

In some regions (like Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

We will consider and act upon any request in accordance with applicable data protection laws.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If you have questions or comments about your privacy rights, you may email us at privacy@healthout.com.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

We honor Do Not Track signals and do not track, plant cookies, or use advertising when a Do Not Track browser mechanism is in place. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you are granted specific rights regarding access to your personal information.

California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Correct inaccuracies in their personal information, taking into account the information's nature processing purpose (excluding Iowa and Utah).
• Data portability.
• Opt-out of personal data processing for:
  • targeted advertising (excluding Iowa);
  • sales; or
  • profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
• Confirm whether we process their personal information.
• Either limit (opt-out of) or require consent to process sensitive personal data.

The exact scope of these rights may vary by state. To exercise any of these rights please or appeal a decision regarding a consumer rights request, please contact us at privacy@healthout.com.

California Civil Code Section 1798.83, also known as the "Shine The Light" law permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us at privacy@healthout.com.

If you are under 18 years of age, reside in California, and have a registered account with the Website, you have the right to request removal of unwanted data that you publicly post on the Website. To request removal of such data, please contact us using the contact information provided below and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Website, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g., backups, etc.).

Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out rights may submit a request to this designated address: privacy@healthout.com.

California Residents

Under the California Consumer Privacy Act (CCPA), California residents have the rights listed below.

The California Code of Regulations defines a “resident” as: (1) every individual who is in the State of California for other than a temporary or transitory purpose; and (2) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose.

All other individuals are defined as "non-residents."

If this definition of "resident" applies to you, we must adhere to certain rights and obligations regarding your personal information.

Right to request deletion of the data — Request to delete

As a California resident, you can ask for the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of his or her right to free speech, our compliance requirements resulting from a legal obligation, or any processing that may be required to protect against illegal activities.

Right to be informed — Request to know

Depending on the circumstances, you have a right to know:

• whether we collect and use your personal information;
• the categories of personal information that we collect;
• the categories of personal information we have collected about you and the categories of sources from which such personal information is collected;
• the purposes for which the collected personal information is used;
• whether we sell or share personal information to third parties;
• the categories of personal information that we sold, shared, or disclosed for a business purpose;
• the categories of third parties to whom the personal information was sold, shared, or disclosed for a business purpose;
• the business or commercial purpose for collecting, selling, or sharing personal information; and
• the specific pieces of personal information we collected about you.

In accordance with applicable law, we are not obligated to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

We will not discriminate or retaliate against you if you exercise your privacy rights.

Right to Limit Use and Disclosure of Sensitive Personal Information

If the business collects any of the following:

• social security information, drivers' licenses, state ID cards, passport numbers
• account login information
• credit card numbers, financial account information, or credentials allowing access to such accounts
• precise geolocation
• racial or ethnic origin, religious or philosophical beliefs, union membership
• the contents of email and text, unless the business is the intended recipient of the communication
• genetic data, biometric data, and health data
• data concerning sexual orientation and sex life

you have the right to direct that business to limit its use of your sensitive personal information to that use which is necessary to perform the services.

Once a business receives your request, they are no longer allowed to use or disclose your sensitive personal information for any other purpose unless you provide consent for the use or disclosure of sensitive personal information for additional purposes.

Please note that sensitive personal information that is collected or processed without the purpose of inferring characteristics about a consumer is not covered by this right, as well as the publicly available information.

To exercise your right to limit use and disclosure of sensitive personal information, please email privacy@healthout.com or visit: healthout.com/dsar.

Verification process

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g., phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.

We will only use personal information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.

Other privacy rights

• You may object to the processing of your personal information.
• You may request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the information.
• You have the right, upon request, to obtain your personal information by mail or electronically without charge and in a readily usable format that allows you to transmit the information from one entity to another entity without hindrance.
• You can designate an authorized agent to make a request under the CCPA on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
• You may request to opt out from future selling or sharing of your personal information to third parties. Upon receiving an opt-out request, we will act upon the request as soon as feasibly possible, but no later than fifteen (15) days from the date of the request submission.

To exercise these rights, you can contact us by visiting healthout.com/dsar, by calling toll-free at 866-123-1234, or by referring to the contact details at the bottom of this document. If you have a complaint about how we handle your data, we would like to hear from you. If you make a request to know or delete the personal information under CCPA, we will confirm receipt of your request within 10 business days. For requests where we are required to first verify your identity, we will process the request as quickly as possible; however, we may take up to 45 calendar days from the date of your original request to confirm your identity and process your request.

Colorado, Connecticut, and Virginia Resident Rights

Colorado, Connecticut, and Virginia each provide certain state residents with specific rights in relation to their personal information. Colorado residents may have rights under the Colorado Privacy Act (“CPA”), Connecticut residents may have rights under the Connecticut Data Privacy Act “CTDPA”), and Virginia residents may have rights under the Virginia Consumer Data Protection Act (“VCDPA”). Certain residents in these states have the following rights:

Right to Know/Access

You have the right to confirm whether a controller is processing your personal information and to access such data.

Right of Correction

You have the right to correct inaccuracies in your personal information, considering the nature of the personal information and the purposes of the processing of your personal information.

Right of Deletion

You have the right to delete personal information provided by or obtained about you.

Right of Portability

You have the right to obtain a copy of the personal information that you previously provided to us in a portable way and, to the extent technically feasible, readily usable format that allows you to easily transmit the data to another controller or business.

Right to Opt Out

You have the right to opt out of the processing of personal information for purposes of targeted advertising, sale of personal data, and certain profiling.

Right to Appeal

You have the right to appeal a refusal to act on a request within a reasonable period of time after your receipt of the decision. If your request is rejected, you will receive a notification with the reason for rejection and instructions about how to make an appeal. Appeal requests can be submitted by emailing privacy@healthout.com and must be submitted within 15 days of receipt of the rejection notice. We will respond to you within 45 days of your appeal submission.

In order to make a request under CPA, CTDPA, or VCDPA, please utilize the form at the bottom of this webpage.

Verification of Request

If you make a request to correct, delete or know the personal information we collect, disclose, or sell, we are required by state law to first verify your identity to ensure your data is not being disclosed to someone other than you. Any follow-ups or responses will be made via email. We may ask for additional information which we can cross-reference with data we already have on file to verify you are who you claim to be. Once your identity has been verified, we will process your request as quickly as possible.

Timing of Responses

When you make a request to know or delete under CPA, CTDPA, or VCDPA, we will confirm receipt of your request within 10 business days. For requests where we are required to first verify your identity, we will process the request as quickly as possible; however, we may take up to 45 calendar days from the date of your original request to confirm your identity and process your request.

Authorized Agents

Residents of Colorado, Connecticut, and Virginia may also utilize a third party to exercise their rights under CPA, CTDPA, or VCDPA. Authorized agents may submit requests through the methods described above. Authorized agents will be required to provide proof they have the legal authority to act on behalf of the resident, such as a signed statement from the resident, valid Power of Attorney, or other evidence of authority. We may contact the resident directly if we are unable to reasonably confirm the identity of authority of the authorized agent.

Utah Residents

This section applies only to Utah residents. Under the Utah Consumer Privacy Act (UCPA), you have the rights listed below. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising or the sale of personal data.

To submit a request to exercise these rights described above, please email privacy@healthout.com or visit healthout.com/dsar.

12. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws and as otherwise may be appropriate.

We may update this privacy notice from time to time. The date the Privacy Policy was last revised will be indicated by an updated "Revised" date at the top of the page, and the updated version will be effective as soon as it is accessible. If we make material changes to how we treat our users’ personal information, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification by email. You are responsible for ensuring we have an up-to-date and active and deliverable email address for you, and for periodically vising our Website and reviewing this Privacy Policy frequently to check for any changes.

13. HOW CAN YOU CONTACT US ABOUT THIS PRIVACY POLICY?

If you have questions or comments about this Privacy Policy, you may email us at DPORequests@healthout.com or contact us by post at:

Healthcare Outsourcing Network, L.L.C
3000 Youngfield
Wheat Ridge, CO 80215
United States

Governing Law and Jurisdiction

All matters relating to the Website and this Privacy Policy, and any dispute or claim arising therefrom or related thereto (in each case, including non-contractual disputes or claims), shall be governed by and construed in accordance with the internal laws of the State of Colorado without giving effect to any choice or conflict of law provision or rule (whether of the State of Colorado or any other jurisdiction).

Any legal suit, action, or proceeding arising out of, or related to, this Privacy Policy or the Website shall be instituted exclusively in the federal courts of the United States or the courts of the State of Colorado, although we retain the right to bring any suit, action, or proceeding against you for breach of this Privacy Policy in your country of residence or any other relevant country. You waive any and all objections to the exercise of jurisdiction over you by such courts and to venue in such courts.

Arbitration

At our sole discretion, we may require you to submit any disputes arising from this Privacy Policy or use of the Website, including disputes arising from or concerning their interpretation, violation, invalidity, non-performance, or termination, to final and binding arbitration under the Rules of Arbitration of the American Arbitration Association applying Colorado law.

Limitation on Time to File Claims

ANY CAUSE OF ACTION OR CLAIM YOU MAY HAVE ARISING OUT OF OR RELATING TO THIS PRIVACY POLICY OR THE WEBSITE MUST BE COMMENCED WITHIN ONE (1) YEAR AFTER THE CAUSE OF ACTION ACCRUES; OTHERWISE, SUCH CAUSE OF ACTION OR CLAIM IS PERMANENTLY BARRED.

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please visit: healthout.com/dsar.