Privacy Policy

1. Scope and important note about health information

Our Services are primarily intended for business users (clinics and sales agents). Depending on how clinics use the Services, some information handled through the portals may be sensitive or regulated.

HIPAA note:This Privacy Policy describes our handling of information generally. If Patmos Health is acting as a covered entity or business associate under HIPAA in a specific context, or if a separate Business Associate Agreement (“BAA”) applies, HIPAA-related obligations and/or the applicable BAA may govern certain uses and disclosures of Protected Health Information (“PHI”) in that context.

2. Information we collect

2.1 Information you provide

Depending on how you use the Services, we may collect:

• Account information: name, email, phone number, username, password (hashed), and related authentication data.
• Clinic information: clinic name, addresses (shipping/billing), facility identifiers, points of contact, and other clinic profile details.
• Order information: products ordered, quantities, pricing, shipping details, order history, and communications related to orders.
• Sales agent information: agent identity and contact details, territory information, clinic onboarding submissions, and commission-related information and statements.
• Support communications: messages, emails, and other information you provide when you contact support.

2.2 Information collected automatically

We may collect:

• Device and usage data: IP address, device type, browser type, operating system, pages viewed, timestamps, and referral URLs.
• Cookies and similar technologies: used for authentication, security, preferences, and analytics (see Section 6).

2.3 Potentially sensitive information

If clinics or sales agents upload or transmit health-related information (including images or identifiers), such information may be treated as sensitive and may be subject to additional safeguards and restrictions. Users should only provide the minimum information necessary for the intended purpose.

3. How we use information

We may use information to:

• Provide, operate, and maintain the Services (including authentication and account administration)
• Process and fulfill orders and requests
• Provide portal functionality (including commission dashboards and clinic onboarding workflows)
• Communicate with you (service updates, order updates, security notices, support)
• Monitor, prevent, and address fraud, security, and misuse
• Comply with legal obligations and enforce our rights
• Improve the Services (including analytics and troubleshooting)

4. How we share information

We may share information with:

• Service providers and vendors that help us operate the Services (hosting, authentication, analytics, customer support tools, communications tools, and similar providers). They are permitted to use information only to provide services to us.
• Clinics and authorized users: information may be shared within a clinic account among authorized clinic users.
• Sales agents and Patmos Health personnel: to the extent necessary for legitimate business operations, onboarding, and sales/account management.
• Legal and compliance: where required by law, subpoena, or legal process, or to protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets.

We do not knowingly sell PHI. If we disclose PHI for marketing or other regulated purposes, we will do so only as permitted by law and/or applicable agreements.

5. Data retention

We retain information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of information and the context in which it was collected.

6. Cookies and tracking technologies

We use cookies and similar technologies for:

• Essential functions (e.g., login, session management, security)
• Preferences (e.g., remembering settings)
• Analytics (e.g., understanding usage patterns and performance)

You may be able to control cookies through your browser settings. If you disable cookies, some parts of the Services may not function properly.

7. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information. However, no system can be guaranteed 100% secure. You are responsible for keeping your login credentials confidential and using appropriate security measures on your own systems.

8. Your choices and rights

Depending on your location and applicable law, you may have rights to request access to, correction of, or deletion of certain information. You may also have the right to object to or restrict certain processing.

To make a request, contact us using the information in Section 11. We may need to verify your identity and authority (for example, clinic administrators may need to request changes for clinic account data).

9. Children’s privacy

The Services are not intended for children, and we do not knowingly collect personal information from children.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to provide notice (for example, by posting an updated policy with a new effective date). Continued use of the Services after changes become effective constitutes acceptance.

11. Contact

To contact us about privacy, please email mike@patmoshealth.com.

12. Governing law

This Privacy Policy is governed by the laws of the State of Wyoming, without regard to its conflict of law principles.