Privacy Policy

Effective Date: April 19^th 2026

At HealthLynked Corp. (“HealthLynked,” “we,” or “us”), we are committed to protecting your privacy and safeguarding your personal information. We take great care with the information we collect when you access or use HealthLynked.com, our mobile applications, AI-powered tools (including ARI), and related services (collectively, the “Services”).

This Privacy Policy is intended to help individuals who use our Services (“you” or “your”) understand how we collect, use, and disclose Personal Data.

For purposes of this Privacy Policy:

• “User” means an individual who creates a HealthLynked account to use the Services.
• “Visitor” means an individual who accesses or interacts with the Services without creating an account (for example, browsing the website). Certain features, including appointment booking and telehealth services, require a registered User account.
• “Personal Data” means any information that identifies or relates to an individual, including information defined as “personal information” under applicable privacy laws.
• “Healthcare Provider” means any physician, healthcare professional, or entity that provides medical services through or in connection with the Services.

Acceptance of This Privacy Policy

BY ACCESSING OR USING THE SERVICES IN ANY MANNER, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTAND, AND AGREE TO THIS PRIVACY POLICY.

You further consent to the collection, use, and sharing of your information as described herein.

If you do not agree with this Privacy Policy, you may not use the Services.

If you use the Services on behalf of another individual (such as a child or family member), you represent that you are authorized to accept this Privacy Policy on their behalf.

All use of the Services is also subject to our Terms of Use, which incorporate this Privacy Policy.

Privacy Policy Table of Contents

• HIPAA and Protected Health Information (PHI)
• Notice at Collection
• Categories of Personal Data We Collect
  • Visitors
  • Users
• Categories of Sources of Personal Data
• Commercial or Business Purposes for Collecting Personal Data
• Other Permitted Uses of Personal Data
• Data Retention
• Data that is Not Personal Data or PHI
• How We Disclose Your Personal Data
• AI and Automated Tools, Advertising, and Opt-Out
  • AI Tools (Including ARI)
  • Cookies
  • Interest-Based Advertising
• Data Security
• Children’s Privacy
• Controlling Your Personal Data
• U.S. State Privacy Rights
• Exercising Your Rights
• Changes to This Privacy Policy
• Contact Information

HIPAA and Protected Health Information (PHI)

Certain demographic, health, and health-related information that HealthLynked collects may constitute Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”).

This may occur when:

1. HealthLynked provides administrative, operational, or technology services to a Healthcare Provider that is a Covered Entity;
2. HealthLynked receives identifiable health information on behalf of that provider; and
3. HealthLynked is acting as a Business Associate under HIPAA.

In such cases:

• PHI is governed by HIPAA and applicable Business Associate Agreements
• Use and disclosure of PHI are controlled by the Healthcare Provider and applicable law

This Privacy Policy does not apply to PHI governed by HIPAA.

Users should review the applicable Healthcare Provider’s Notice of Privacy Practices to understand how PHI is used and disclosed.

When Information Is NOT PHI

Personal Data provided directly to HealthLynked when we are not acting as a Business Associate is governed by this Privacy Policy.

Examples include when you:

• Create an account
• Search for healthcare providers
• Book appointments
• Use AI tools such as ARI
• Provide information through forms, chats, or communications
• Browse our website (device and analytics data)
• Upload or manage your personal health record outside a provider relationship

Notice at Collection

We collect Personal Data depending on how you interact with the Services.

The categories of Personal Data we collect may include:

• Identifiers (name, email, phone)
• Health-related information
• Appointment and provider interaction data
• Device and usage data
• Payment and billing information
• Communications and user-generated content

We collect and use this information to:

• Provide, operate, and improve the Services
• Facilitate healthcare coordination and telehealth access
• Enable AI-driven insights and recommendations
• Personalize user experiences
• Conduct analytics, research, and product development
• Support marketing and communications
• Comply with legal and regulatory obligations

Depending on your use of the Services, certain disclosures may be considered “sharing” under applicable privacy laws, including for analytics and advertising purposes.

You may opt out of certain data uses where required by law.

We also honor applicable browser-based privacy signals, such as the Global Privacy Control (GPC), where supported.

We do not knowingly sell or share Personal Data of individuals under the age of 18.

Categories of Personal Data We Collect and Disclose

The categories of Personal Data we collect depend on your interaction with the Services.

For example:

• Visitors provide limited data
• Users who create accounts and engage with healthcare services provide more detailed information

We may disclose Personal Data to:

• Healthcare providers
• Service providers
• Analytics and technology partners
• Parties you authorize

Such disclosures may be necessary to provide the Services and improve platform functionality.

Visitor Data

We collect the following categories of Personal Data from Visitors:

Category	Examples	Purpose	Disclosures
Online Identifiers	IP address, browser type, device ID	Operate and improve Services	Service providers, analytics partners
Web Activity	Pages viewed, interactions	Analytics, performance optimization	Analytics providers
Location Data	IP-based location	Personalization	Service providers
Communications	Messages or inquiries	Customer support	Service providers

This data helps us:

• Improve user experience
• Analyze traffic and engagement
• Maintain security and performance

Category and Examples of Personal Data	Source of Data	Business or Commercial Purpose(s) for Collection	Disclosures of Personal Data	Third Parties to Whom we “Sell” or “Share” Personal Data
Online Identifiers such as IP Address, IP-address- based location data, device ID, domain server, type of device/operating system/browser used to access the Services	You Third Parties	Providing, Customizing, and Improving the Services Marketing the Services	Service Providers Parties you authorize, access, or authenticate as further detailed below	Certain Analytics Partners Ad Networks
Web Analytics such as webpage interactions, Web analytics, referring webpage/source through which you access the Services, non-identifiable request IDs, statistics associated with the interaction between your device or browser and the Services	You Third Parties	Providing, Customizing, and Improving the Services Marketing the Services	Service Providers Parties you authorize, access, or authenticate	Certain Analytics Partners Ad Networks
User Demographic Data such as your gender and date of birth	You	Providing, Customizing, and Improving the Services Corresponding with You	Service Providers Parties you authorize, access, or authenticate Healthcare Providers	Certain Analytics Partners Ad Networks
Location Data, including IP address-based location information and zip code, city, or address	You	Providing, Customizing, and Improving the Services Marketing the Services	Service Providers Parties you authorize, access, or authenticate	Certain Analytics Partners Ad Networks
Other Identifying Information That You Voluntarily Choose to Provide such as in emails, letters, chats, or other communications you send us	You	Providing, Customizing, and Improving the Services Corresponding with You	Service Providers Parties you authorize, access, or authenticate	N/A

Users Only: The table below includes the categories of data we may collect if you have created an account and used our Services. We do not sell Personal Data for monetary consideration. However, we may share Personal Data with service providers, healthcare providers, analytics partners, and other third parties as described in this Privacy Policy.

Category of Personal Data	Source of Data	Business or Commercial Purpose(s) for Collection	Disclosures of Personal Data
Personal Identifiers such as first and last name, email address, mailing address, zip code	You Healthcare Providers	Providing, Customizing, and Improving the Services Corresponding with You	Service Providers Healthcare Providers Parties you authorize, access, or authenticate
Phone number and SMS preferences	You	Corresponding with You Providing the Services in accordance with your preferences	Service Providers Healthcare Providers
Commercial Information such as your payment card type, last four digits of your payment card, billing contact information	You	Providing, Customizing, and Improving the Services Corresponding with You	Service Providers
Other Identifying Information That You Voluntarily Choose to Provide such as social media credentials or in emails, letters, chats, or other communications you send us	You	Providing, Customizing, and Improving the Services Corresponding with You	Service Providers Parties you authorize, access, or authenticate
Sensitive Personal Data The following categories of Personal Data may be deemed “sensitive” depending on your state of residence. Please note we do not collect any of the following categories of Personal Data for the purpose of inferring characteristics about you. We process Sensitive Personal Data only as reasonably necessary to provide requested Services and in accordance with applicable law.
Booking Appointment Data such as appointment date/time, provider information, visit reason, whether you are a new patient of a particular provider	You Healthcare Providers	Providing, Customizing, and Improving the Services Corresponding with You	Service Providers Analytics Partners Healthcare Providers
Health information such as health conditions, Healthcare Providers visited, dates of visit, medical history, and other health information you provide us, which may include reproductive or sexual health information	You Service Providers Healthcare Providers	Providing, Customizing, and Improving the Services Corresponding with You	Service Providers Healthcare Providers Insurance Providers Health Information Exchanges Parties you authorize, access, or authenticate
Health Insurance information, such as insurance plan, member ID, group ID, payer ID	You Service Providers Healthcare Providers	Providing, Customizing, and Improving the Services Corresponding with You	Service Providers Healthcare Providers Parties you authorize, access, or authenticate
Sensitive Demographic Data, such as gender identity (specifically status as transgender or non-binary), race, sexual orientation	You Healthcare Providers	Providing, Customizing, and Improving the Services Corresponding with You	Service Providers Healthcare Providers Parties you authorize, access, or authenticate

Categories of Sources of Personal Data

Categories of Sources of Personal Data
From You
When You Provide Information Directly to Us	When you create an account or use our interactive tools and services, such as searching for Healthcare Providers or available appointments with Healthcare Providers. When you provide information about yourself through booking an appointment with a Healthcare Provider. When you provide information in free-form text boxes through the Services, through responses to surveys and questionnaires, or post reviews. When you send us an email or otherwise contact us.
When Personal Data is Automatically Collected When You Use the Services	Through automated technologies when you navigate the Services, including Cookies (as defined and described in more detail below). If you download and install certain applications and software we make available, we may receive and collect information transmitted from your device for the purpose of providing you the relevant Services. This includes information such as when you are logged on and available to receive updates or alert notices. If you download our mobile application or use a location-enabled browser, we may receive information about your location and mobile device, as applicable.
From Other Sources
Service Providers	We may use service providers to analyze how you interact and engage with the Services, or to help us provide you with customer support. We may use service providers to obtain information to generate leads and to create user profiles.
Analytics Partners	We may work with analytics partners to provide us analytics on website traffic or the usage of the Services. We use this data to optimize and market our Services.
Healthcare Providers	We may receive certain data from your Healthcare Provider(s) to facilitate booking appointments, provide you with information at your request, and billing for services such as virtual care.
Social Networks	If you provide your social network account credentials to us or otherwise sign in to the Services through a third-party site or service, you understand some content and/or information in those accounts may be transmitted into your account with us, depending on your permissions with that third-party site or service.
Ad Networks	We receive information about you from some of our service providers who assist us with marketing or promotional services related to how you interact with our Services, advertisements, or communications.

Commercial or Business Purposes for Collecting Personal Data

HealthLynked may collect and use Personal Data for the following business or commercial purposes:

Providing, Customizing, and Improving the Services

• Creating and managing your account or user profiles
• Facilitating healthcare coordination, appointment scheduling, and telehealth access
• Providing you with the products, services, and information you request
• Meeting or fulfilling the purpose for which you provided the information
• Providing customer support and assistance
• Improving the Services, including through testing, research, internal analytics, and product development
• Personalizing the Services, website content, and communications based on your preferences
• Enabling and improving AI-driven tools and features, including ARI
• Maintaining system security, fraud detection, debugging, and quality assurance

Marketing the Services

• Marketing and promoting HealthLynked Services
• Delivering advertisements, including interest-based or online behavioral advertising where permitted by law
• Measuring the effectiveness of marketing campaigns and improving outreach strategies

Corresponding with You

• Responding to your inquiries and communications
• Contacting you when necessary or requested, including sending appointment reminders and service-related notifications
• Sending communications, updates, and content that may be relevant to your interests, including information about Healthcare Providers, Services, or platform features

Other Permitted Purposes for Processing Personal Data

In addition to the purposes described above, HealthLynked may collect, use, and disclose Personal Data as necessary to:

• Comply with applicable laws, regulations, court orders, or legal processes
• Respond to requests from governmental or regulatory authorities, including law enforcement
• Detect, prevent, and investigate security incidents, fraud, or illegal or prohibited activities
• Protect the rights, property, and safety of HealthLynked, our users, Healthcare Providers, and others
• Enforce our Terms of Use or other agreements
• Respond to claims that content violates third-party rights
• Resolve disputes and enforce legal rights

Data Retention

HealthLynked retains Personal Data for as long as necessary to provide the Services and to fulfill the business and commercial purposes described in this Privacy Policy.

When determining retention periods, we consider:

• The nature and sensitivity of the Personal Data
• The purpose for which it was collected
• Our legal and regulatory obligations
• Our need to maintain business and operational records

We may retain Personal Data for longer periods where necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce agreements
• Protect against fraud or misuse

We may also retain data in a de-identified or aggregated form indefinitely, where such data no longer identifies you.

For example:

• Account information is retained while your account is active
• Device and usage data may be retained as needed to maintain system performance, security, and analytics

Data that is Not Personal Data or PHI

HealthLynked may de-identify or aggregate Personal Data so that it can no longer reasonably be used to identify an individual.

Such de-identified or aggregated data:

• Is not considered Personal Data or PHI
• May be used for analytics, research, product development, and improvement of Services
• May be used to support artificial intelligence systems and models
• May be shared with third parties for commercial, research, or operational purposes

HealthLynked:

• Will not attempt to re-identify de-identified data
• Requires third parties receiving such data to maintain its de-identified status in accordance with applicable law

How We Disclose Your Personal Data

HealthLynked may disclose your Personal Data to service providers, Healthcare Providers, and other third parties as described in this Privacy Policy and as necessary to provide and improve the Services.

The nature and scope of disclosures depend on how you use the Services.

Categories of Third Parties to Whom We Disclose Personal Data	Purposes for Disclosing Data
Service Providers
Payment Processors	We use third-party payment processors, such as Braintree or similar providers, to process payment transactions. Please see braintree’s terms of service and privacy policy for information on its use and storage of Personal Data.
Security and Fraud Prevention Consultants	Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
Hosting, Technology and Communications Providers; Fulfillment Providers; Data Storage Providers; Analytics Providers; Insurance Verification Providers; Staff Augmentation Personnel; Virtual Care Providers	To perform operational services (such as hosting, billing, fulfillment, data storage, security, insurance verification, web service analytics) and/or make certain services, features or functionality available to our Users. Debugging to identify and repair errors that impair intended functionality. Short-term, transient use of Personal Data that is not used by another party to build a User profile or otherwise alter your user experience outside the current interaction. Maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, or providing similar services on behalf of the business or service provider. Undertaking internal research for technological development and demonstration. Undertaking activities to verify or maintain the quality or safety of our Services.
Selected Third-Party Recipients
Analytics Partners	To track how users found or were referred to the Services and otherwise interact with the Services.
Ad Networks	Ad customizing and serving, which may include social media networks, for the purposes of displaying or facilitating advertising to you, including targeted advertising. Auditing related to a current interaction and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
Healthcare Providers	Healthcare Providers with whom Users choose to schedule through the Services. If you choose to use the applicable Services, Healthcare Providers in order to enable such Healthcare Providers to refer you to, and make appointments with, other Healthcare Providers on your behalf or to perform analyses on potential health issues or treatments. In the event of an emergency.
Insurance Providers	To determine eligibility and cost-sharing obligations and to otherwise obtain benefit plan information on your behalf.
Health Information Exchanges	Health Information Exchanges and related organizations that collect and organize User information (such as Regional Health Information Organizations) to make your information more securely and easily accessible to your Healthcare Providers. The goal of such organizations is to facilitate access to health information to improve the safety, quality, and efficiency of patient-centered care. More information on Health Information Exchanges can be found here.
Other Uses that You Authorize	Any information that you may reveal in a review posting, online discussion, or forum is intentionally open to the public and is not in any way private. We recommend that you carefully consider whether to disclose any Personal Data in any public posting or forum. What you have written may be seen and/or collected by third parties and may be used by others in ways we are unable to control or predict. You can learn more about our reviews process here.
Third-Party Business Partners You Access Through the Services	We will disclose certain Personal Data if you choose to use any service to log in to the Services. This includes logging in via social media platforms such as a Google or Facebook account. To meet or fulfill the reason you provided the information to us.

In addition, we may disclose Personal Data in connection with the following:

Legal Obligations

We may disclose any Personal Data that we collect with third parties in conjunction with any of the activities set forth under “How We Disclose Your Personal Data” section above.

Business Transfers

All Personal Data may be transferred to a third party in connection with or if we undergo a merger, acquisition, bankruptcy, or other transaction in which that third party assumes control of our business (in whole or in part). Should one of these events occur, we will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies and practices.

AI and Tracking Tools, Advertising, and Opt-Out

The following sections provide additional information about how HealthLynked collects and processes Personal Data through automated technologies.

AI Tools (Including ARI)

HealthLynked may use artificial intelligence (“AI”) tools, including ARI and other automated systems, to enhance and operate certain features of the Services, such as customer support, care navigation, and user interaction tools.

When you interact with AI-powered features:

• Information you provide (including health-related inputs, inquiries, and interactions) may be processed automatically
• AI tools may analyze user inputs, usage patterns, and other data to generate responses, recommendations, and insights
• AI outputs are informational only and do not constitute medical advice, diagnosis, or treatment

We may also use data generated through AI interactions to:

• Improve AI performance and accuracy
• Enhance user experience
• Develop new features and services

Cookies and Similar Technologies

The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs, mobile identifiers, and JavaScript (collectively, “Cookies”) to recognize your device and browser and understand how you interact with the Services.

We use these technologies to:

• Operate and maintain the Services
• Analyze trends and user behavior
• Improve functionality and performance
• Personalize user experiences
• Deliver and measure advertising
• Support security and fraud prevention

Cookies are small data files placed on your device when you access the Services. We may also receive information from third parties that use their own cookies or tracking technologies.

Information Collected Through Cookies

We and our service providers may collect:

• Device and Browser Information
  Including IP address, device identifiers, browser type, operating system, internet service provider, and approximate location
• Usage Information
  Including date and time of visits, pages viewed, navigation paths, time spent on pages, interactions with features, bookings, and engagement metrics

This may include advanced analytics tools such as session replay technologies, which help us understand how users interact with the Services.

Types of Cookies We Use

• Essential Cookies
  Required for core functionality, such as authentication and security
• Functional Cookies
  Store user preferences and settings to enhance user experience
• Performance / Analytical Cookies
  Help us understand how users interact with the Services and improve performance
  (e.g., Google Analytics or similar tools, subject to their respective privacy policies)
• Advertising / Retargeting Cookies
  Used to deliver relevant advertisements based on your interests and activity
• Web Beacons
  Used to measure engagement with webpages, emails, and advertisements
• Mobile Device Identifiers
  Used to understand device usage patterns and improve Services across devices
• Cross-Device Matching
  Used to identify and associate usage across multiple devices to improve analytics and advertising relevance

Managing Cookies

You may control or disable non-essential Cookies through:

• Your browser settings
• Your device settings
• Any cookie management tools made available through the Services

Please note:

• Disabling certain Cookies may impact functionality
• Some features of the Services may not operate properly without them

Interest-Based Advertising

HealthLynked may work with third-party advertising partners, including ad networks, technology vendors, and analytics providers, to deliver advertisements on and off the Services.

These advertisements may be based on:

• Your interactions with the Services
• Device and usage data
• General demographic or behavioral information

This practice is commonly referred to as interest-based or behavioral advertising.

Information used for these purposes may include:

• IP address
• Device identifiers
• Browser and operating system
• Website interactions and navigation behavior
• Approximate location
• General demographic information

These partners may collect information across different websites and over time to deliver relevant advertisements.

Opt-Out of Advertising

You may opt out of certain types of targeted advertising by:

• Adjusting your browser or device settings
• Using industry opt-out tools (such as those provided by the Digital Advertising Alliance or similar organizations)
• Enabling Global Privacy Control (GPC), where supported

Even if you opt out of interest-based advertising, you may still see advertisements, but they may be less relevant.

Data Security

The security of your Personal Data is important to us. HealthLynked seeks to protect your Personal Data from unauthorized access, use, alteration, and disclosure through appropriate physical, technical, organizational, and administrative safeguards designed for the nature of the information we collect and the ways in which we process it. We endeavor to maintain reasonable and appropriate security measures consistent with generally accepted industry standards and applicable law to help preserve the confidentiality, integrity, and availability of Personal Data.

These safeguards may include, where appropriate, access controls, encryption, authentication procedures, monitoring tools, secure storage practices, workforce training, and vendor oversight measures designed to reduce the risk of unauthorized access, misuse, or disclosure.

However, no method of transmission over the internet, mobile networks, or electronic storage is completely secure. Accordingly, while we strive to protect your Personal Data, we cannot and do not guarantee absolute security. Except as otherwise required by applicable law, HealthLynked is not responsible for theft, destruction, loss, interception, alteration, or inadvertent disclosure of your information or content.

Children’s Privacy

The Services are not directed to or intended for use by individuals under 18 years of age. If you are under the age of 18, please do not attempt to register for, access, or otherwise use the Services, and do not send us any Personal Data.

By accessing, using, or submitting information through the Services, you represent that you are at least 18 years of age or are using the Services through a parent, legal guardian, or other authorized representative acting on your behalf as permitted by applicable law and our Terms of Use.

HealthLynked does not knowingly collect or solicit Personal Data directly from children under 18 without appropriate authorization. If we learn that we have collected Personal Data directly from a child under 18 in a manner not permitted by law, we will take reasonable steps to delete that information or otherwise handle it in accordance with applicable law.

If you believe that a child under 18 may have provided Personal Data to us in violation of this Privacy Policy, please contact us at [email protected].

If you are a parent, legal guardian, or other authorized representative acting on behalf of a minor, you may use the Services for that individual only to the extent permitted by applicable law, our Terms of Use, and the requirements of the relevant Healthcare Provider or service.

Any information you provide while using the Services on behalf of another person, including a minor, will be treated as Personal Data in accordance with this Privacy Policy.

Other Users

If you use the Services on behalf of another person, regardless of age, you agree that HealthLynked may communicate with you in connection with the Services, including operational, healthcare-related, account-related, or legally required communications. You further agree to provide, forward, or make available any such communications to the person on whose behalf you are using the Services, when appropriate.

Controlling Your Personal Data and Notifications

If you are a registered User of the Services, you may access, update, or modify certain Personal Data and account information by logging into your account and adjusting your account settings, where available.

If you wish to close your account, you may contact us at [email protected]. HealthLynked will use reasonable efforts to process your account closure request as soon as reasonably practicable. Please note, however, that we may retain certain information associated with closed accounts as necessary to comply with applicable law, enforce our agreements, resolve disputes, maintain appropriate business and security records, or otherwise in accordance with our internal data retention policies and procedures.

You are responsible for maintaining the accuracy of your account information and for safeguarding your login credentials. You must promptly notify us if you believe that any of your account information has been lost, stolen, accessed without authorization, or otherwise compromised.

U.S. State Rights and Disclosures

This section describes certain rights that may be available to you under applicable U.S. state privacy laws. Unless otherwise stated in this Privacy Policy, HealthLynked makes these rights available to users and visitors to the extent required by applicable law and, in some cases, may choose to extend certain rights more broadly.

Please see the “Exercising Your Rights” section below for information about how to submit a request. Additional privacy choices may also be available through your account settings or other tools we make available through the Services.

Please note that, in some circumstances, HealthLynked may process Personal Data on behalf of healthcare providers, partners, or other entities. Where we act as a “processor,” “service provider,” “contractor,” or in a similar role under applicable law, you may need to direct your request to the entity that originally collected your Personal Data. Your rights are also subject to legal limitations, exceptions, and verification requirements, and there may be circumstances in which we are permitted or required to deny your request.

If you have questions about this section, you may contact us at [email protected] and include “State Rights” in the subject line.

Access / Portability

Subject to applicable law, you may have the right to request information about our collection and use of your Personal Data, including:

• The categories of Personal Data we have collected about you
• The categories of sources from which the Personal Data was collected
• The business or commercial purposes for collecting, using, disclosing, selling, or sharing your Personal Data
• The categories of third parties to whom we have disclosed your Personal Data
• The specific pieces of Personal Data we have collected about you

Where required by law, if we have disclosed your Personal Data for a business purpose, we will describe the relevant categories of Personal Data disclosed and the categories of recipients. If we have sold or shared Personal Data as those terms are defined under applicable law, we will provide the information required by law regarding those practices.

You may also have the right to request a copy of certain Personal Data in a portable, machine-readable format, to the extent technically feasible and as required by applicable law.

Deletion

Subject to applicable law, you may have the right to request that we delete Personal Data that we have collected from you. Please note that we may retain certain Personal Data as necessary to provide the Services, complete transactions or actions you have requested, comply with legal obligations, detect security incidents, protect against fraudulent or illegal activity, enforce our agreements, or otherwise as permitted by law. If an exception applies, we may deny all or part of your deletion request.

Correction

Subject to applicable law, you may have the right to request correction of inaccurate Personal Data that we maintain about you, taking into account the nature of the Personal Data and the purposes for which we process it.

Sensitive Personal Data

We may collect certain categories of Personal Data that may be considered “sensitive” under applicable law (“Sensitive Personal Data”), including certain health-related information and other categories described in the “Categories of Personal Data We Collect” section above.

Where required by law, we will obtain any consent required before collecting, using, or disclosing Sensitive Personal Data. We process Sensitive Personal Data only as reasonably necessary to provide requested Services, operate the platform, comply with legal obligations, and fulfill the purposes described in this Privacy Policy. We do not sell Sensitive Personal Data for monetary consideration.

If applicable law gives you the right to limit, withdraw consent to, or otherwise control our processing of Sensitive Personal Data, please refer to the “Exercising Your Rights” section below.

Right to Opt-Out

Under applicable U.S. state privacy laws, you may have the right to opt out of certain uses of your Personal Data, including where Personal Data is “sold” or “shared” for purposes such as cross-contextual behavioral advertising.

HealthLynked does not sell Personal Data for monetary consideration. However, we may share certain information, such as cookies, device identifiers, and usage data, with analytics and advertising partners in a manner that may be considered “sharing” under applicable law.

Where required by law, you may opt out of such sharing.

You may also have the right to opt out of the processing of your Personal Data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects. HealthLynked does not currently engage in such profiling.

Once you have submitted a valid opt-out request, we will honor your request in accordance with applicable law and will not request reauthorization for a period required by law.

To our knowledge, we do not knowingly sell or share Personal Data of individuals under the age of 18.

Non-Discrimination

HealthLynked will not discriminate against you for exercising your rights under applicable privacy laws.

This means we will not:

• Deny you access to the Services
• Provide a lower quality of Services
• Charge different prices solely based on your exercise of privacy rights

However, if you choose to limit or delete certain Personal Data, some features or functionality of the Services may no longer be available or may be limited.

Financial Incentives

HealthLynked may, from time to time, offer optional programs, promotions, or incentives (such as rewards, credits, or participation in research initiatives) that involve the collection or use of Personal Data.

These programs are designed to:

• Improve our Services
• Enhance user experience
• Support research, analytics, and product development

Any such incentive will be based on our reasonable determination of the value of the data provided in connection with the program.

Participation in any financial incentive or research program is entirely voluntary. If you choose to participate, you may be asked to provide certain Personal Data, which may include:

• Identifiers (e.g., name, email, account information)
• Demographic or profile information
• Health or wellness-related information (where applicable)
• Usage and interaction data
• Survey responses or feedback
• Audio, visual, or communication data (where applicable)
• Any information you choose to provide in free-form responses

Information collected through these programs will be used primarily for internal purposes such as improving Services, conducting research, and developing new features. Where disclosed to third parties, such disclosures will be consistent with this Privacy Policy.

You may withdraw from a financial incentive or research program at any time by following the instructions provided in connection with the program or by contacting us at [email protected].

Additional California Resident Rights

California residents may have additional rights under California law, including the right to request information regarding the disclosure of Personal Data to third parties for direct marketing purposes.

Where applicable, you may exercise your rights by:

• Using available privacy controls within your account
• Submitting a request as described in the “Exercising Your Rights” section

If you have questions or require assistance, you may contact us at [email protected].

Additional State-Specific Rights

Residents of certain states (such as Oregon, Minnesota, or others with applicable privacy laws) may have additional rights, including the ability to request information about specific third parties with whom Personal Data has been disclosed, subject to applicable exceptions.

To exercise such rights, please contact us at [email protected] and include your state of residence and the nature of your request.

Appealing a Denial

Depending on your state of residence, you may have the right to appeal a decision if we decline to take action on your request.

To submit an appeal, you must:

1. Provide sufficient information to verify your identity and the original request; and
2. Describe the basis for your appeal

We will review and respond to your appeal within the timeframe required by applicable law.

If we deny your appeal, you may have the right to contact the appropriate regulatory authority in your state.

You may submit an appeal by:

• Emailing [email protected] with the subject line “Consumer Appeal”

Exercising Your Rights

Opt-Out

Where applicable, you may opt out of certain uses of your Personal Data, including data sharing for advertising or analytics purposes, by:

• Adjusting your privacy preferences within your account settings (where available); or
• Using browser-based privacy controls or signals, such as the Global Privacy Control (“GPC”), where supported

If we detect a valid GPC signal, we will treat it as a request to opt out of applicable data sharing practices for that browser or device, to the extent required by law.

We will not require identity verification for opt-out requests where not required by applicable law.

Submitting Other Requests

To exercise other rights (such as access, deletion, or correction), you must submit a request that:

1. Provides sufficient information for us to verify your identity; and
2. Describes your request with enough detail for us to understand and respond appropriately

Requests that meet these criteria will be considered “Valid Requests.”

We will use Personal Data provided in a Valid Request solely for the purpose of verifying your identity and fulfilling your request.

We will respond to your request within the timeframe required by applicable law and will not charge a fee unless permitted by law.

Users (Account Holders)

If you have a HealthLynked account, you may:

• Access, correct, or update certain Personal Data through your account settings
• Submit requests to access or delete your data through available account tools or by contacting us

Visitors (Non-Account Users)

If you are a Visitor without an account, we may be limited in our ability to process requests to access, correct, or delete Personal Data associated with browsing activity because:

• We may not be able to reasonably verify your identity; and
• We may not maintain persistent identifiers linking you to specific data

However, you may still exercise applicable opt-out rights as described above.

Authorized Agents

In certain jurisdictions, you may designate an authorized agent to submit privacy rights requests on your behalf.

If you do so, we may require:

• Written authorization from you; and
• Verification of your identity directly

If you have questions or need assistance submitting a request, please contact us at:

Email: [email protected]

Changes to This Privacy Policy

HealthLynked reserves the right to update or modify this Privacy Policy at any time by posting a revised version on our website.

If we make material changes, we may provide notice by:

• Posting a prominent notice on the website;
• Sending an email to the address associated with your account; or
• Providing notice through the Services

Your continued use of the Services after any updates become effective constitutes your acceptance of the revised Privacy Policy.

The “Effective Date” at the top of this Privacy Policy indicates when it was last updated.

Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

HealthLynked Corp.
1265 Creekside Pkwy, Suite 200
Naples, Florida 34108

Email:[email protected]
Phone: 800-982-7144