01 Information We Collect

We may collect information directly from you, automatically through your use of the Services, from our customers, and from third-party services and integrations.

Information may include:

• Name
• Business or practice name
• Email address
• Telephone number
• Account and login information
• Billing and transaction information
• Business contact information
• Communications with Patient Acquired
• Platform activity and usage information
• Device, browser, and IP information
• Appointment and scheduling information
• Lead, prospect, patient, and customer information
• Information from connected third-party services
• Other information you choose to provide

The specific information collected depends on how you interact with Patient Acquired and which Services you use.

02 Information Our Customers Provide

Healthcare practices and other customers may upload, enter, synchronize, or otherwise provide information about their leads, prospective patients, existing patients, customers, or other contacts.

This information may include names, contact information, communication history, appointment information, pipeline status, form submissions, and other information configured by the customer.

When Patient Acquired processes personal information on behalf of a customer, the customer generally determines why and how that information is used, subject to applicable agreements and law.

Individuals with questions about information submitted by a particular healthcare practice should generally contact that practice directly.

03 How We Use Information

We may use information to:

• Provide and operate the Patient Acquired platform
• Create and administer user accounts
• Facilitate patient and lead engagement
• Support automated follow-up workflows
• Facilitate appointment scheduling and reminders
• Manage leads and opportunities
• Support patient and lead reactivation
• Provide reputation management functionality
• Process transactions and subscriptions
• Provide customer support
• Authenticate users and protect account security
• Maintain and improve the Services
• Analyze platform usage and performance
• Develop new products and functionality
• Communicate about accounts and Services
• Detect fraud, abuse, and security threats
• Comply with applicable legal obligations

We may also use information for other purposes disclosed when the information is collected or with appropriate authorization.

05 SMS, Email, Voice & Other Communications

Patient Acquired may provide technology that enables customers to communicate with contacts through SMS, email, telephone, voicemail, automated messaging, and other communication channels.

When these tools are used, information such as telephone numbers, email addresses, message content, communication history, delivery information, and engagement data may be processed.

Our customers are responsible for obtaining any consent required to communicate with their contacts and for complying with applicable communications and privacy laws.

07Cookies & Similar Technologies

We may use cookies, pixels, local storage, analytics technologies, and similar tools to operate our website and platform.

• Maintain sessions and account functionality
• Remember preferences
• Understand website and platform usage
• Improve performance
• Detect security issues
• Measure website and communication effectiveness

Where required, users may be provided with choices regarding certain cookies or tracking technologies.

08How We Share Information

We may disclose information to third parties when reasonably necessary to operate Patient Acquired, including:

• Cloud hosting and infrastructure providers
• Payment processors
• Communications providers
• Email and telecommunications providers
• Analytics providers
• Artificial intelligence and technology providers
• Customer support providers
• Software integration partners
• Security and fraud-prevention providers
• Professional advisers
• Government authorities where legally required

We may also disclose information in connection with a merger, financing, acquisition, sale, restructuring, or similar corporate transaction.

We do not disclose personal information except as described in this Privacy Policy, as authorized by the applicable customer or user, or as otherwise permitted or required by law.

09Third-Party Integrations

Patient Acquired may allow customers to connect third-party applications and services to their accounts.

When a customer enables an integration, information may be exchanged between Patient Acquired and the applicable third-party provider.

Third-party platforms maintain their own privacy practices and terms. Customers should review those policies before enabling an integration.

10Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet-based service or electronic storage system can guarantee absolute security.

Customers are responsible for maintaining appropriate account security, including protecting passwords and controlling authorized user access.

11Data Retention

We retain personal information for as long as reasonably necessary to provide our Services, maintain business and financial records, satisfy contractual obligations, resolve disputes, enforce agreements, protect security, and comply with applicable law.

Retention periods may vary depending on the nature of the information, applicable customer relationship, legal requirements, and Services being used.

12Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, which may include the right to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion of certain information
• Request information regarding certain disclosures
• Obtain a portable copy of certain information
• Restrict or object to certain processing
• Opt out of certain uses or disclosures
• Appeal certain privacy-related decisions

These rights are subject to applicable exceptions and verification requirements.

When Patient Acquired processes information solely on behalf of one of our customers, we may direct your request to that customer or assist the customer in responding.

13California Privacy Rights

California residents may have additional rights under applicable California privacy laws.

Depending on how those laws apply to a particular interaction, these rights may include requests to know, access, correct, or delete personal information and rights relating to certain sharing, selling, or use of sensitive personal information.

Patient Acquired will process applicable requests in accordance with legal requirements.

14Children's Privacy

Patient Acquired is a business platform intended for healthcare practices and other organizations and is not directed toward children for independent use.

We do not knowingly solicit children to create business accounts with Patient Acquired.

Information concerning minors that is lawfully processed by healthcare customers through the platform is subject to the applicable customer's instructions, agreements, and legal obligations.

15Business Transfers

If Patient Acquired is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to applicable law.

16International Data Transfers

Patient Acquired and its service providers may process information in the United States and other jurisdictions.

Where required by applicable law, appropriate safeguards may be used for international transfers of personal information.

17Do Not Track & Privacy Controls

Some browsers and devices provide privacy preference signals or tracking controls.

Patient Acquired will respond to legally recognized privacy preference signals where required by applicable law and technically applicable to our Services.

18Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our Services, technologies, business practices, or legal requirements.

When we make changes, we will update the “Last Updated” date above. Where required by law, we may provide additional notice of material changes.

20Privacy Requests

Individuals wishing to exercise applicable privacy rights may contact us using the information above.

We may need to verify your identity before completing certain requests. Authorized agents may submit requests where permitted by applicable law and subject to appropriate verification.

For information that Patient Acquired processes on behalf of a healthcare practice or other customer, you may need to submit your request directly to that organization.