Privacy Policy

1Introduction

MedFlow Technologies ("Medflow," "we," "us," or "our") is a technology and marketing services company serving healthcare practices, with an initial focus on cosmetic surgery and aesthetic medicine practices. We are committed to protecting your privacy and being transparent about how we collect, use, and share your information.

This Privacy Policy describes our practices regarding information collected through our website, applications, and related services (collectively, the "Services"). By using our Services, you acknowledge that you have read and understood this Privacy Policy.

2Scope of This Privacy Policy

This Privacy Policy applies to information collected through the Medflow website, our consumer-facing tools and forms, and any other services that link to this Privacy Policy. It does not apply to information collected by third-party websites, applications, or services that may be linked from our Services, including the independent healthcare practices that use or advertise through Medflow.

3Information We Collect

A. Information You Provide Directly

We may collect information that you voluntarily provide, including:

• Contact information — such as your name, email address, phone number, and mailing address.
• Information submitted through website forms — including inquiry forms, contact forms, and lead capture forms.
• Appointment or consultation requests — details you provide when requesting appointments or consultations with healthcare practices.
• Communications with Medflow — information contained in emails, phone calls, text messages, live chat, or other communications you send to us.

B. Information Collected Automatically

When you access our Services, we may automatically collect certain information, including:

• IP address and approximate geographic location.
• Browser and device information — such as browser type, operating system, device identifiers, and screen resolution.
• Cookies and similar technologies— see the "Cookies and Tracking Technologies" section below for more details.
• Website usage and analytics data — including pages visited, time spent on pages, click patterns, and navigation paths.
• Referral and source information — how you arrived at our website (e.g., search engine, advertisement, referring website).

C. Information From Other Sources

We may receive information about you from healthcare practices that use our services, service providers, integrations, or other third parties, where applicable and permitted by law. This may include information necessary to facilitate requested communications, scheduling, or administrative workflows.

4How We Use Information

We may use the information we collect for the following purposes:

• Providing and improving our Services — delivering, maintaining, and enhancing our website, tools, and features.
• Responding to inquiries — answering your questions and fulfilling your requests.
• Facilitating communications with healthcare practices — connecting you with healthcare practices when you request contact or services.
• Scheduling and administrative workflows — processing appointment requests and related administrative tasks.
• Customer support — providing assistance and resolving issues.
• Analytics — understanding how our Services are used and identifying areas for improvement.
• Security and fraud prevention — detecting, preventing, and addressing security incidents and fraudulent activity.
• Legal compliance — complying with applicable laws, regulations, and legal processes.
• Marketing — sending promotional communications where legally permitted and in accordance with your preferences.

5How Information Is Shared

We may share your information in the following circumstances:

• Healthcare practices — when you request contact with, or services from, a healthcare practice, we may share your information with that practice to facilitate your request.
• Vendors and service providers — we work with third-party providers for hosting, analytics, communications, CRM, scheduling, infrastructure, and other operational needs. These providers are contractually obligated to use your information only as necessary to perform services on our behalf.
• Professional advisers — including attorneys, accountants, auditors, and insurers, as necessary for professional services.
• Legal and regulatory disclosures — when required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Medflow, our users, or others.
• Business transfers — in connection with, or during negotiations of, any merger, acquisition, financing, sale of assets, or other business transaction involving all or a portion of our assets.

Medflow does not sell your personal information.

6Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies to collect information about your interactions with our Services. These technologies help us:

• Remember your preferences and settings.
• Understand how you use our website and Services.
• Analyze website traffic and usage patterns.
• Measure the effectiveness of our marketing efforts.
• Deliver relevant content and advertisements.

Most web browsers are set to accept cookies by default. You can modify your browser settings to decline cookies or alert you when a cookie is being set. Please note that disabling cookies may affect the functionality of certain features of our Services.

Analytics

We may use third-party analytics services (such as Google Analytics) to collect and analyze usage data. These services may use cookies and similar technologies to collect information about your use of the Services and other websites, and they may report trends without identifying individual visitors.

7Data Retention

We retain your information for as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. When information is no longer needed for these purposes, we will securely delete or anonymize it in accordance with our data retention policies.

8Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, alteration, and disclosure. However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

9Children's Privacy

Our Services are not directed to children under the age of 13 (or such other age as required by applicable law), and we do not knowingly collect personal information from children. If you believe that we have inadvertently collected personal information from a child, please contact us immediately at operations@nevadasteelmarketing.com so that we can take steps to delete such information.

10Third-Party Websites and Services

Our Services may contain links to third-party websites, applications, or services that are not operated or controlled by Medflow. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through or in connection with our Services. Medflow is not responsible for the privacy practices or content of third-party websites or services.

11U.S. State Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information under applicable state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and similar laws in other states.

Your Rights May Include:

• Right to Know / Access — the right to request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete — the right to request that we delete your personal information, subject to certain exceptions.
• Right to Correct — the right to request correction of inaccurate personal information.
• Right to Opt Out — the right to opt out of the sale or sharing of your personal information, where applicable. Medflow does not sell personal information.
• Right to Non-Discrimination — the right not to receive discriminatory treatment for exercising your privacy rights.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We may need to verify your identity before processing your request. Please note that the specific rights available to you may vary based on your jurisdiction and applicable law.

12Marketing Communications

Email

If you receive marketing emails from us, you may opt out at any time by clicking the "unsubscribe" link included in each email or by contacting us directly. Please note that even after opting out of marketing emails, you may continue to receive transactional or service-related communications.

SMS / Text Messaging

If Medflow sends SMS or text messages, the following applies:

• Consent to receive marketing text messages is not a condition of purchasing any goods or services.
• Message and data rates may apply.
• You may opt out of text messages at any time by replying STOP to any message.
• For help, reply HELP to any message or contact us at operations@nevadasteelmarketing.com.
• Message frequency may vary depending on your interactions with our Services.

13Healthcare and Sensitive Information

Information you submit through our Services (such as appointment requests or contact forms) may be shared with the relevant healthcare practice to facilitate your request. That practice may be subject to its own privacy policies and, where applicable, its own HIPAA Notice of Privacy Practices.

We encourage you to review the privacy policies of any healthcare practice you interact with through our Services. Healthcare practices that use Medflow may have separate contractual requirements, including Business Associate Agreements, depending on the services being provided and the information being processed.

14International Visitors

Our Services are intended for use within the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence. By using our Services, you consent to the transfer of your information to the United States.

15Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

16Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: