How we handle information on the QHealth website.

1. Scope

This Privacy Notice applies to the public pages of qhealth.app, including pages used to:

• Learn about QHealth
• Request a demonstration
• Contact our team
• Access public resources
• Learn about our products and services

This notice does not replace the privacy notices or legal responsibilities of clinics, medical centers, hospitals, employers, or other healthcare organizations that use QHealth.

If you are a patient with a question about information maintained by your healthcare provider, please contact that healthcare provider directly.

2. Information you provide to us

You may provide information when you:

• Request a demonstration
• Contact us through the website
• Email or call us
• Request information about QHealth
• Seek support
• Communicate with our business, implementation, or support teams

This information may include:

• Name
• Business email address
• Telephone number
• Organization
• Job title or role
• Country or location
• Products or services of interest
• Implementation requirements
• Information included in your message

Please do not submit passwords, patient medical records, clinical information, or other unnecessary sensitive information through public website forms, ordinary email, or other general contact channels.

3. Information collected automatically

When you access the public QHealth website, our systems and service providers may automatically process technical and usage information such as:

• IP address
• Browser and device type
• Operating system
• Pages visited
• Date and time of access
• Referring website or source
• General website interactions
• Error and diagnostic information
• Security-related events

We use this information to operate, secure, troubleshoot, analyze, and improve the website.

4. Google Analytics

We use Google Analytics on the public pages of the QHealth website to understand how visitors find and use the site and to help us improve its performance and effectiveness.

Google Analytics operates automatically when public QHealth pages are accessed and may process information such as:

• Browser and device information
• IP-derived approximate geographic location
• Referring source
• Pages viewed
• General website interactions
• Session and usage information

Google Analytics is used for the public website and is not intended to collect patient medical records or clinical information from the authenticated QHealth healthcare platform.

QHealth is configured to send page paths without URL query parameters where appropriate so that information such as email addresses, password-reset tokens, authentication values, and other sensitive URL parameters are not intentionally included in analytics page-location data.

We do not intentionally send passwords, patient records, clinical information, or the contents of website contact forms to Google Analytics.

5. Cookies and similar technologies

The public QHealth website may use cookies, local storage, service-worker storage, and similar browser technologies for purposes such as:

• Website functionality
• Analytics
• Security
• Performance
• Application installation
• Progressive web application features

Some analytics technologies may be placed or accessed automatically when you visit public QHealth pages.

You may be able to control or delete cookies and locally stored information through your browser settings. Disabling certain technologies may affect some website functionality.

6. How we use information

We may use information collected through the public QHealth website to:

• Respond to inquiries and demonstration requests
• Provide requested information
• Communicate with prospective and existing customers
• Provide support
• Plan implementation and integration discussions
• Operate and maintain the website
• Analyze website traffic and usage
• Improve website content, usability, and performance
• Diagnose technical problems
• Protect QHealth, our users, and our systems
• Detect and prevent fraud, abuse, or security incidents
• Maintain appropriate business records
• Manage customer and prospective customer relationships
• Comply with applicable legal and regulatory obligations

7. How information may be shared

Information may be accessed or processed by Medica Technologies personnel and trusted service providers that support functions such as:

• Website hosting
• Infrastructure
• Security
• Analytics
• Communications
• Customer support
• Business operations

This includes Google in connection with Google Analytics.

We may also disclose information when reasonably necessary to:

• Comply with applicable law or legal process
• Respond to lawful requests from authorities
• Protect the rights, safety, systems, or property of Medica Technologies, our customers, users, or others
• Investigate fraud, misuse, or security incidents
• Support a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction

We do not sell personal information collected through the QHealth website.

8. Healthcare and patient information

The public QHealth website is not intended for the submission of patient records or clinical information.

Healthcare information processed through the authenticated QHealth platform may be subject to:

• Customer agreements
• Data-processing agreements
• Healthcare privacy and security requirements
• Organizational policies
• Applicable laws and regulations

Depending on the circumstances and jurisdiction, the healthcare organization using QHealth may determine how patient information is collected and used, while Medica Technologies processes information in accordance with its contractual and legal responsibilities.

Patients should direct questions about their medical records or healthcare information to the clinic, medical center, hospital, or other healthcare organization responsible for their care.

9. HIPAA and healthcare security

QHealth is built for the protection of sensitive healthcare information.

The QHealth system architecture, servers, storage, network infrastructure, devices, and supporting services are designed, configured, and operated in accordance with applicable HIPAA security requirements.

Where required for the processing of protected health information, Medica Technologies maintains appropriate contractual safeguards, including Business Associate Agreements with relevant infrastructure and service providers.

Security measures include appropriate administrative, technical, physical, and organizational safeguards such as:

• Role-based access controls
• Authentication and access management
• Audit trails
• Secure infrastructure
• Network security controls
• Data protection measures
• Backups and recovery safeguards
• Monitoring and operational security controls

Healthcare organizations may also have responsibilities under HIPAA and other applicable privacy and security laws when configuring and using QHealth.

10. Security

We use administrative, technical, physical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, destruction, or misuse.

The safeguards applied depend on the nature of the information, the service involved, and the associated risks.

While we take security seriously, no internet transmission, electronic system, network, or storage method can be guaranteed to be completely secure.

11. Retention

We retain information collected through the public website only for as long as reasonably necessary for purposes such as:

• Responding to inquiries
• Maintaining business relationships
• Providing requested services
• Website analytics
• Security and fraud prevention
• Record keeping
• Dispute resolution
• Compliance with legal and regulatory obligations

Retention periods may vary depending on the type of information and the purpose for which it was collected.

12. International processing

QHealth serves healthcare organizations in multiple regions.

Information collected through the public website may therefore be processed or stored in countries other than the country in which you are located.

Where required, we take appropriate measures to address applicable legal, contractual, privacy, and data-protection requirements associated with international processing.

13. Your rights and choices

Depending on your jurisdiction and the circumstances, you may have rights relating to your personal information, including rights to request:

• Access
• Correction
• Deletion
• Restriction of processing
• Objection to certain processing
• Data portability

These rights may be subject to applicable legal exceptions, identity-verification requirements, record-retention obligations, or other limitations.

To submit a privacy request concerning information collected through the public QHealth website, contact:

info@medicahq.com

If your request concerns patient information maintained by a healthcare organization using QHealth, please contact that healthcare organization directly.

14. Third-party websites and services

The QHealth website may contain links to websites, applications, or services operated by third parties.

Those third parties are responsible for their own privacy practices, and their collection and use of information are governed by their respective privacy notices and terms.

Medica Technologies is not responsible for the privacy practices of third-party websites or services that we do not control.

15. Children’s privacy

The public QHealth website is intended primarily for healthcare organizations, healthcare professionals, administrators, and other business users.

It is not designed to collect personal information directly from children.

If you believe that a child has provided personal information to us through the public website, please contact us so that we can review the matter and take appropriate action.

16. Changes to this Privacy Notice

We may update this Privacy Notice as QHealth, our website, service providers, business practices, or applicable legal requirements change.

When changes are published, we will update the Last updated date shown at the top of this page.

Material changes may also be communicated through other appropriate means where required.