This website (and the database behind it) is operated by MD Connect, Inc. ("MD Connect", "we", "us" or "our") to collect and house data collected from a variety of our patient-facing websites and this website ("MD Connect Websites") from individuals ("You", "Your" or "Patients") who may become patients at a particular medical practice or investigator site. We assist pharmaceutical and medical device companies ("Client(s)" or "Sponsor(s)") with recruitment of individuals to participate in clinical trials as well as medical practices looking to attract new patients. This Privacy Policy describes our personal information collection procedures for MD Connect Websites and the choices available to You and Patients regarding our use and disclosure of Your and their personal information.

MD Connect collects, uses, and discloses personal information You share with us directly or You voluntarily provide through Your use of MD Connect Websites, regardless of how You access the MD Connect Websites or our services, which may be through the use of a mobile device. We also may collect personal information through our service providers by means of phone conversations directly with You. By providing personal information to us directly or by using the Site, You are consenting to the terms and conditions of this Privacy Policy. Our use of information collected shall be limited to the purpose of providing services for which Clients engage MD Connect, primarily collecting and processing information from potential clinical trial participants to screen eligibility for participation in clinical trials or from potential patients seeking to connect with medical practices.

Information Collected in our Pre-Screening Process

When You visit MD Connect Websites or contact us or we contact You, we collect personal information that You provide voluntarily. Most of our clinical trial websites contain a Pre-Screening Questionnaire (PSQ) where we collect personal information when You answer questions on the website or we may collect personal information when we contact You by telephone or email. During Pre-Screening, MD Connect only collects personal information that is limited and necessary to evaluate Your eligibility and qualifications for participation in our Sponsor's current Study.

Personal Data

In the provision of our services, MD Connect (Data Processor) processes Personal Data on behalf of its Client(s) (Data Controllers). Personal Data means any information relating to an identified or identifiable natural person (data subject).

Personal Data includes direct and indirect identifiers such as:

• Name
• E-mail address
• Phone number
• Address
• IP address
• Identification Number
• Location Data (e.g. zip or postal code)
• On-line Identifier
• Sensitive Data that may include one or more factors specific to physical, psychological, genetic, mental, economic, cultural or social identity of a natural person.

Sensitive Data

In the provision of our services, MD Connect (Data Processor) may process Sensitive Data on behalf of its Client(s) (Data Controllers). Sensitive Data is a special category of Personal Data that requires additional privacy and security protections. The collection of Sensitive Data is done at the direction of our Client(s) and is limited to specific and necessary Sensitive Data of potential clinical trial participants needed to determine eligibility for specific clinical trials or for potential Patients needed to determine appropriateness for a given medical practice.

Our Pre-Screening webpages require express consent of potentially eligible participants (e.g., website check box, participant voluntarily clicking 'Submit' button) before collection of any Personal Data that will be linked to any Sensitive Data (thereby making it identifiable).

Sensitive personal information that may be collected includes:

• Medical conditions
• Severity of condition
• Medical test results
• Age
• Height & Weight
• Lifestyle/habits (e.g. exercise, smoking)
• Prior medical procedures
• Medical symptoms
• Ethnicity
• Existing participation status or willingness to participate in a clinical trial
• Choice of physician or medical clinic
• Requested or actual appointment date and time

Uses and Disclosures of Information Collected in Pre-Screening

MD Connect uses and discloses Personal Data (including Sensitive Data) for a variety of purposes that are limited and necessary to the operation of our business and the delivery of services to You. These purposes include to:

• Determine whether You may be eligible to participate in Sponsor's Study. During the recruitment period for the Study, we may provide Your screening information and contact information to one of our Sponsor's investigator sites nearest to You;
• Pass along potential patient information to a medical practice
• Provide our services and generally manage and administer our business including required records retention processes;
• Develop and improve our services;
• Reply to Your requests, inquiries and comments;
• Contact You via land line phone, cell phone, email, text message (cell and data charges may apply);
• Respond to circumstances permitted or required by law, including defending and bringing legal actions; and
• Ensure the security and integrity of our websites and operations.

MD Connect may disclose personal information collected through MD Connect Websites to affiliated third party service providers, such as IT support services, customer service providers, and other services providers that support us and facilitate the services we provide to You. These companies are authorized to use Your Personal Data only as necessary to provide these services to us. For example, we use Google Analytics, a web analysis service provided by Google. Google utilizes the data collected to track and examine the use of our Sites, to prepare reports for us on website activities and share them with other Google services. However, Google Analytics offers an opt-out provision for website visitors who do not want their data to be collected. You can access more information about this option at http://tools.google.com/dlpage/gaoptout.

Google may also use the data it collects to contextualize and personalize the ads of its own advertising network. The Personal Data collected for this purpose is limited to cookie and usage data. You should refer to Google's privacy policy for more details about their data privacy practices related to this usage.

MD Connect reserves the right to compile and use the Personal Data collected as described above, in a de-identified or anonymized format, i.e. no longer personally identifiable as defined by data privacy regulations, for data aggregation and data analytics purposes.

Passive Information Collection and Use

MD Connect websites use a passive technology called "cookies" and other similar technologies. With cookies, we collect the IP (Internet protocol) addresses of all visitors to our websites and other related information such as browser type, operating system and average time a visitor spends on our websites. MD Connect uses this information to help us understand our website activity and to monitor and improve our websites. Cookies also provide information about You and Your preferences, and help us personalize Your experience on MD Connect Websites. You can set Your web browser to notify You when cookies are being placed on Your system or to not accept cookies. However, if You decide not to accept cookies from MD Connect Websites, You may not be able to take advantage of all of the features available to You on MD Connect Websites.

MD Connect Websites use another passive technology called "internet tags" or "web beacons". This technology allows us to understand which webpages You visit and helps us optimize and tailor our websites to You and other future visitors. You can set Your browser to notify You when these passive technologies are being placed on Your system to not accept them.
We partner with third parties to display advertising on MD Connect Websites or to manage our advertising on other sites. Our third party partners may use cookies or similar technologies in order to provide You advertising based upon Your browsing activities and interests. If You wish to opt out of interest-based advertising click here [or if located in the European Union click here]. Please note You will continue to receive generic ads.

Mobile Device Information

MD Connect also collects information from and about Your mobile device, such as a unique device identifier.

Unaffiliated Third Party Sites and Services

MD Connect may make unaffiliated 3rd party sites and services available to Patients and You to access. Access to these sites and services requires that You provide Your consent to the services or products offered by the unaffiliated 3rd parties before access is granted to the 3rd party sites. This Privacy Policy does not apply to the unaffiliated 3rd party sites and offerings. The 3rd party sites and offerings are governed by the Privacy Policy of the unaffiliated 3rd party. You should review their Privacy Policy before consenting to access their sites and offerings. MD Connect is not responsible for the personal information You provide to these unaffiliated third parties sites and offerings, including and without limitation to any third party operating any site, web property and/or application that is available to You through MD Connect Websitesor to which they contain a link. The availability of or inclusion of a link to any unaffiliated 3rd party site or products on MD Connect Websitesdoes not imply or serve as an endorsement of it, its services or products by MD Connect.

Use of MD Connect Websites by Minors

Use of MD Connect Websitesor our services is not generally directed to individuals under the age of 18, and we request that these individuals not provide Personal and/or Sensitive Data through the Site or through our service providers unless identified as appropriate in the Pre-Screening criteria. However, there may be some Sponsors of clinical trials or medical practices that are specifically seeking this age group. In such clinical trials or situations, parental consent may be required as part of the Pre-Screening process.

If personal information related to individuals under the age of 18 is identified and deemed inappropriate, reasonable steps will be taken to delete the information.

Security

MD Connect uses reasonable measures to protect Your information, such as using physical, technical, and administrative security safeguards to reduce the risks of loss, misuse, unauthorized access, disclosure, or alteration. For example, we limit access to Your Personal Data to authorized employees, service providers and contractors who need access to perform services described in this Privacy Policy. However, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. If You have reason to believe that Your interaction with us is no longer secure (for example, if You feel that the security of any account You have with us has been compromised), please notify us immediately by contacting privacy@mdconnectinc.com or by faxing Your notice to +1 (781) 235-0929.

Choices and Access

By providing us with Your personal information, You are consenting to our collection, use and disclosure of Your personal information as described in this Privacy Policy.

Upon request MD Connect will provide You with information about whether we hold any of Your personal information. If You wish to:

1. change Your preferences about the personal information You provided to us or
2. withdraw Your consent to its retention, use or disclosure, or
3. receive a copy of Your data
4. generally exercise your rights of access, rectification, cancellation and opposition with respect to your personal data and the health information you submit

please contact us at privacy@mdconnectinc.com or by faxing to +1 (781) 235-0929.

Please note that our response to Your request to withdraw consent is subject to legal or contractual restrictions and reasonable notice, including: (i) if You withdraw Your consent before we submit Your information to our Client's clinical trial site, we will not submit it; (ii) if we receive notice of Your withdrawal after we have submitted Your information, You will need to contact the Client's clinical trial site to withdraw Your consent to further use; (iii) where we have provided or are providing services to You, Your consent will be valid for as long as necessary to fulfill the purposes described in this Privacy Policy or otherwise stated at the time of collection.

If You have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

Retention Period

We retain Your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or allowed by law or to otherwise fulfill a legal obligation.

Cross-Border Transfer

Your information may be processed in the country in which it was collected or transferred to other countries, including the United States (where our servers are generally located), for processing where laws regarding processing of information may be less stringent than the laws in Your country. By using this Site and our services, You consent to the transfer of Your personal information to countries outside of Your country of residence, including the United States.

Platform Data Collection

MD Connect (Data Processor) collects information under the direction of its Client(s) (Data Controller(s)) and processes information on our Client(s)' behalf. We have no direct relationship with the individuals whose Personal Data we process. If You are a customer of our Client(s) or are a participant in a Client(s)' clinical trial and would no longer like to participate and/or be contacted by our Client, please contact the Client directly.

We may also transfer Personal Data to companies that support us in providing our services for our Client(s). Such transfers to subsequent third parties are covered by the service agreements with our Client(s) and/or with MD Connect. Such contracts hold the Parties to standards of confidentiality and security consistent with this Privacy Policy.

MD Connect acknowledges that You have the right to access Your personal information. Individuals who seek access, or who seek to correct, amend, or delete inaccurate data should direct their query to MD Connect's Client or MD Connect directly. If requested to remove data we will respond within a reasonable timeframe.

MD Connect will retain Personal Data we process on behalf of our Client(s) for as long as needed to provide services to our Client(s). MD Connect will retain this personal information for as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Updates to This Privacy Policy

This Privacy Policy may be revised from time to time. Any changes to this Privacy Policy will become effective when the changes are posted in a revised Privacy Policy on the Site. If we make any material changes we will notify You by email (sent to the e-mail address specified in Your account) or by means of a notice on this website prior to the change becoming effective.Your continued voluntary provision of personal information or use of the Site following these changes serves as consent to the revised Privacy Policy.

Contacting Us

If You have any questions about this Privacy Policy, please contact us at privacy@mdconnectinc.com. or by faxing to +1 (781)235-0929.