Privacy Policy for Exchange Health

Last Updated: 8/18/2020

This website privacy policy (the "Privacy Policy") tells you about the information Exchange Health ("EH","SoSRx," "we," or "us") collects from you when you visit or use amn Exchange Health website, such as SoSRx.com (collectively, "EH Websites","SoSRx websites," "our websites," or "our sites",) and how we use, share, and protect that information. This policy only covers our collection activities through the Exchange Health websites. It does not apply to information we collect via other methods (e.g., paper application forms, claim forms, phone calls with customer service, third party sources, etc.).

Table of Contents for Website Privacy Policy

1. Who does this privacy policy apply to?
2. When do we collect information from you online?
3. What information do we collect from you and how do we use it, including online tracking?
4. With whom do we share your information?
5. How do we protect your information?
6. How do we notify you about changes to this Privacy Policy?
7. How can I contact SoSRx about this Privacy Policy?

1. Who does this Privacy Policy apply to?

This Privacy Policy applies to any person or customer who visits or uses the Exchange Health websites. This may include non-customers who may be exploring our services. This policy does not apply any other business-to-business website that we may operate.

By visiting or using our websites, you are accepting the practices described in this Privacy Policy. If you do not agree to these practices, please do not use our websites.

Links to Third Party Sites

Our websites may provide links to, or features from, other third party sites (such as third party social networks) that we do not own or control. If you link to such sites or use such features, you do so at your own risk. We are not responsible for the content or practices of any third party sites.

2. When do we collect information from you online?

We collect information from you on our websites when you do any of the following:

• Apply for registration
• Sign up for our newsletter
• Contact Customer Service via email
• Fill out customer surveys
• Fill out other purpose-specific forms available on our sites
• Visit or browse our websites (automated collection via cookies and other web technologies)

A more detailed description of each of these collection scenarios, and how we use your information in each scenario, is provided in Section 3 below.

3. What information do we collect from you and how do we use it?

The information we collect and how we use it depends on the context and purpose for collection.

Registration forms

The information collected on these forms may vary depending if you are a buyer or seller but will typically include some or all of the following:

• personal information (e.g., name, address, phone number, email address, Social Security number);
• Company Information (eg, name address, DUNNS number, phone number, email)
• payment information (e.g., bank account or credit card information); and,
• Other information needed for us to assess your eligibility to register (e.g., Wholesale licenses, Manufacturing licenses, Controlled Substance license).

Any information you provide on our online application form is used to review and process your application. We may also use information from your application (such as your contact information) to keep you informed about the status of your application or to remind you about completing your application.

Transaction & Bidding Information

We may use any information during the bidding process or a buy now purchase or after the completion of a transaction for marketing or statistical purpose.

Newsletter & Blog

When you sign up for our newsletter and/or blog online, we may ask you for the following information:

• personal contact information (e.g., name, address, email address); and,
• Communication preferences (e.g., which mailings/content you prefer to receive).

This information is used to send you the communications that you request, which may include our email newsletter, blog and other mailings (including postal mail) that may contain special offers and product news from SoSRx and our partners. We do not sell, rent, or share any of your personal contact information with unaffiliated third party companies for their own marketing use.

In some instances, we may obtain sign-ups to our newsletter through check boxes that appear on other forms (such as on an application) or on the phone through our Customer Service department. We may also receive sign-ups through third party sources, such as from co-registration forms on other sites.

You can always opt-out from receiving our newsletter, blog or other marketing communications by clicking on the "Unsubscribe" link provided at the bottom of each such email communication or by contacting Customer Service.

Customer Service

Our websites may allow you to contact Customer Service via email with specific questions or general questions about our platform. The information collected for these purposes may include:

• personal contact information (e.g., name, email address);
• application information, account number ; and
• details about your question or inquiry.

This information is used to respond to your question or request in a timely fashion, and may be retained to keep a record of your correspondence.

Customer Feedback

From time to time, we may obtain feedback from you about your experience in using our products and services. Examples may include your responses to online customer surveys as well as other comments and suggestions you may provide to us about your experience. We use this information to continually improve our products and services.

Automated collection via cookies and web technologies; online tracking

As you navigate through a web site, certain information can be passively collected (that is, gathered without you actively providing the information) using various technologies and means, such as navigational data collection. Like most web site operators, we track IP addresses during your visit and use session, persistent, and flash cookies and may use any other successor tracker technology. We use cookies to help identify you when you visit our sites. You should be aware that we might use these cookies for other purposes now and in the future. Our system also automatically gathers information about the areas you visit on our sites and collects operational information about the technology you use, such as your browser, type of computer, operating systems, and Internet service providers.

The collection and use of this information allows us to:

• Enhance the operation and functionality of our sites;
• Troubleshoot technical problems, including security issues;
• Tailor the online content or messages that you see to better match your interests;
• Save you time when you use our sites (e.g., remembering your User ID for easy login);
• Understand how people generally use our site and which features are most popular; and,
• Analyze our website traffic and, in turn, optimize the layout of our sites.
• If you block or delete cookies, not all of the tracking that we have described in this Privacy Policy may stop. Additionally, if you block cookies, you may not be able to use all of the features and functionality of the Web Site.
• Please note that our systems currently don't respond to "Do Not Track" headers or signals from web browsers.

4. With whom do we share your information?

We may share personal information about you as follows:

• With third party vendors and other service providers who need access to your information to carry out work on our behalf, such as storing and verifying banking information.
• If we believe disclosure is reasonably necessary to comply with any applicable law, regulation, legal process or governmental request;
• To enforce applicable user agreements or policies, including our Terms and Conditions; and to protect us, our users or the public from harm or illegal activities;
• In connection with any merger, sale of EH assets, financing or acquisition of all or a portion of our business to another company; and
• If we notify you through our services (or in our privacy policy) that the information you provide will be shared in a particular manner and you provide such information.

We may also share aggregated or anonymized information that does not directly identify you.

5. How do we protect your information?

We use a variety of methods to keep the information you give us online confidential and secure. These measures include (among other things) the use of industry-standard encryption to protect sensitive information and activities (e.g., submission of online application form, registration and login etc.), storage of your information on firewall-protected servers, and limiting access to your information to only those EH employees and agents/contractors who need it to do their job and have been trained in the proper handling of customer information.

Please note, however, that these protections do not apply to information you choose to share in public areas such as our website community features or other social areas.

The safety and security of your information also depend on you. Never share your password with anyone else and notify us promptly if you believe your password security has been breached.

6. How do we notify you about changes to this Privacy Policy?

If we decide to change the way in which we handle your website-related information, we will post the changes in this Privacy Policy. For material changes (i.e., substantially new practices you wouldn't expect from us or that we didn't previously disclose in this policy), we may decide to notify you more prominently (such as through a notice on the home page of our site).

7. How can I contact SoSRx about this policy?

For privacy policy questions or concerns, please contact us:

Support@sosrx.com