Scripts (”LLC”, ”ScriptsMD”, ”us”), understands the importance of confidentiality and privacy regarding your health information. ScriptsMD will act in accordance with HIPAA to protect your private health information.

We are committed to safekeeping all your personal data, including sensitive personal and health data.

Why do we process your personal data and who is responsible for it?

We deliver our services via the application, which is an online platform, allowing doctors (“Medical practitioners”) to communicate with you (“Patient” or “Patients”), in order to provide you with remote medical evaluations and online consultations, based on the condition history you report to Medical practitioners (“Services”)

The company is a data administrator, which processes data within the app, namely the data of its subscribes, both registered and anonymous, the medical practitioners and all remaining third persons, who do not fall within any of the above categories, but their data is processed within the app.

The medical practitioners process your data based on their professional knowledge and qualifications. They are data administrators with respect to the communication and consultations they provide to ScriptsMD users, insofar as they process patient data independently from us, based on a contract with the Patient for a medical consultation/evaluation, define data volumes to be processed and how data is processed. We are not responsible for how your data is processed by the Medical practitioners, as they are the ones who determine what data to request from you and how to process the data while providing their services.

What personal data we collect

Profile data

We may collect the following data for evaluation by the Medical practitioners:

1. Name
2. Birth date
3. Gender
4. Email Address
5. Phone number
6. Address

Health Data

We may collect the following data for evaluation by the Medical practitioners:

the following health and medical data:

1. Height
2. Weight
3. Vital signs
4. Health conditions
5. Treatments and medications
6. Allergies
7. Laboratory tests and results
8. Images
9. Written information (messages) you exchange with doctors

Debit/Credit Card information

We do not store any credit or debit card information. This information is maintained and payments are processed by a third party payment provider, in compliance with the payment card industry security standard.

Health Data

We will handle the information we collect in compliance with HIPAA to protect your privacy

If you choose to upload a photo/video recording in the application, it is possible that we request access to the camera and/or microphone of your device. You will be explicitly asked if you allow this option. If you choose to grant the application access, the data will be used solely for the purpose and duration of the respective action (e.g., photo upload).

Minor Data

Our Service is intended for use by individuals who are at least eighteen (18) years of age or such older age as may be required by applicable state laws in the jurisdiction in which an individual utilizes the Service.

Do we share your personal data with anyone?

Information we may disclose to 3rd parties

• With our doctors, in order for them to be able to provide our services to you
• With other companies and organisations, if we are legally bound to do so, as part of fraud protection and credit risk reduction efforts
• With tax authorities and other government institutions in cases of inspections and audits, as well as with partners of the Company (e.g., a company carrying out an independent financial audit or lawyers establishing and exercising and legal claims).

How we may use your data

1. To facilitate the access of the Practitioners to the relevant information related to the provision of their services
2. To notify you in case we change or update the software and the associated infrastructure
3. To administer our systems and troubleshoot potential problems
4. To let you know about new features we think might be useful to you
5. For analysis and business intelligence purposes, new product development, system and performance improvement efforts

Where and how we store your data

We do not store your data on your device. All of your personal and health data is stored on secure servers in the US.

We do not store any credit or debit card information. This information is maintained and payments are processed by a third party payment provider, in compliance with the payment card industry security standard.

Your Rights

You have the right to request access to the information we are processing, to request that we delete it, correct any errors in your data, limit the processing of your data, to object to processing of your data, as well as to exercise your right to export and transfer your data. You can exercise the following rights

• delete your data from within “Settings”, “Account data”, “Delete your account”. Please, note that deleting the application from your device does not delete your account and the data within
• correct your data by directly editing the information in the Profile section of the application

You can also exercise your rights by contacting us at [email protected]

You can withdraw at any time the consent based on which we process your data, without this withdrawal affecting the legality of the processing carried out with your consent up to the withdrawal. You can exercise your right to withdraw your consent by deleting your profile data or your account.

Your personal data are not subject to automated decision making, including profiling.

Changes to Privacy Policy

We have the right to change this Privacy Policy at any time, without prior notice.