CLINWARE SOLUTIONS PRIVACY NOTICE

Welcome to Clinware Solutions!

This Privacy Notice explains how information about you is collected, used, shared, stored and secured by Clinware Solutions, Inc. and our affiliates and subsidiaries (collectively referred to as "Clinware," "we," "our" and "us") when you use clinware.com and any other Clinware owned or operated websites (including mobile sites) (collectively, the "Site"), mobile applications, products, services, datasets, and/or any interactive features other online services controlled by Clinware that post a link to this Privacy Notice or otherwise reference that this Privacy Notice applies to information collected through the Site, application or other features or services (collectively, the "Services") or when you otherwise interact with us. This Privacy Notice explains your choices concerning our information practices.

This Privacy Notice does not apply to our handling of information collected from other Users, such as companies or other third parties (collectively, "Businesses"). Data and information collected through such activities are governed by the Businesses' privacy policies as well as Clinware's agreement(s) with such Businesses. If you have questions about a Business' privacy practices, please reach out to them directly.

NOTICE AT COLLECTION

Before using the Service or submitting any Personal Information to Clinware, please review this Privacy Notice carefully and contact us if you have any questions. By using the Service, you agree to the practices and specifically the collection, disclosure, use and retention of Personal Information described in this Privacy Notice. If you do not agree to this Privacy Notice, please do not access the Site or otherwise use the Service.

Table of Contents

1. Personal Information We Collect
2. How We Use Personal Information
3. Sharing And Disclosure of Personal Information
4. Users Outside of the United States
5. State Privacy Rights
6. Children
7. Links To Other Websites
8. Security
9. Your Choices
10. Changes To the Privacy Notice
11. Contact Us

1. PERSONAL INFORMATION WE COLLECT

When you interact with us through the Service, we collect and combine information and data from you, including information that may identify you or otherwise be considered to be "personal information", "personal data" or "personally identifiable information" under laws that regulate privacy and data protection ("Personal Information") as follows:

Personal Information You Provide:

We collect the following categories of Personal Information from you when you visit the Site, create a Clinware account, subscribe to the Service, or otherwise provide such information to us:

• Contact Information: We collect your name, email address, business name and address, and phone number.
• Communication Information: We may collect information when you contact us with questions or concerns and when you voluntarily respond to questionnaires, surveys or requests for market research seeking your opinion and feedback. Providing communication information is optional to you.
• Location Information: Our Service may use location-based services in order to locate you, such as using your IP address or other geolocation information, so that we may verify your location and/or deliver you relevant content based on your location.
• Commercial Information: We may retain a history of the products and services you browse using the Service.

Internet Activity Information:

When you visit, use, and interact with the Service, we may receive certain information about your visit, use, or interactions. For example, we may monitor the number of people that visit the Service, peak hours of visits, which page(s) are visited, the domains our visitors come from (e.g., google.com, yahoo.com, etc.), and which browsers people use to access the Service (e.g., Chrome, Firefox, Microsoft Internet Explorer, etc.), broad geographical information, and navigation pattern. In particular, the following information is created and automatically logged in our systems:

• Geolocation Information: When browsing our website, we may collect general information regarding your geographic location.
• Cookie and Tracking Technology Information: Please see the "Cookies and Tracking Technologies" section below to learn more about how we use cookies and tracking technologies.
• Usage Information: We collect information about how you use our Service, such as the types of content that you view or engage with, the features you use, the actions you take, and the time, frequency, and duration of your activities.

Cookies and Tracking Technologies:

When you visit or otherwise interact with our Services, we may automatically collect information about you using cookies, device identifiers, web beacons, SDKs, pixels and similar technologies. We use this information for various purposes, including to make the Services function properly, understand how you use the Services, personalize your experience, gather usage data on our Services, measure, manage, display and customize the advertisements you see within the Services or elsewhere and improve your overall experience while using the Services. A "cookie" is a piece of information sent to your browser by a website you visit. Cookies can be stored on your computer for different periods of time. Some cookies expire after a certain amount of time, or upon logging out (session cookies), others survive after your browser is closed until a defined expiration date set in the cookie (as determined by the third party placing it), and help recognize your computer when you open your browser and browse the Internet again (persistent cookies). For more details on cookies please visit All About Cookies.

On most web browsers, you will find a "help" section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off.

To find out how to manage cookies on popular browsers, please visit:

• Google Chrome
• Microsoft Edge
• Mozilla Firefox
• Microsoft Internet Explorer
• Opera
• Apple Safari
• Global Privacy Control

Please note that if you limit the ability of websites to set cookies, you may be unable to access certain parts of the Site and you may not be able to benefit from the full functionality of the Site.

Advertising networks may use cookies to collect Personal Information. Most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit the Network Advertising Initiative's online resources and follow the opt-out instructions there.

If you access the Site on your mobile device, you may not be able to control tracking technologies through the settings.

Online Tracking and Do Not Track Signals:

We and our third-party service providers may use cookies, pixels, or other tracking technologies to collect information about your browsing activities over time and across different websites following your use of the Site and use that information to send targeted advertisements. Because there currently isn't an industry or legal standard for recognizing or honoring "Do Not Track" ("DNT") signals, we do not currently respond to them at this time, and we instead operate as described in this Privacy Notice whether or not a DNT signal is received. If we do respond to DNT signals in the future, we will update this Privacy Notice to describe how we do so. For details, including how to turn on Do Not Track, visit www.donottrack.us.

2. HOW WE USE PERSONAL INFORMATION

We may use Personal Information for the following purposes:

• To provide, operate, and improve the Service and our business;
• To respond to your inquiries, comments, feedback, or questions;
• To send administrative information to you, for example, information regarding the Service and changes to our terms, conditions, and policies;
• To analyze how you interact with our Service;
• To develop new products and services;
• To communicate with you about products, services, offers, promotions, rewards, and events offered by Clinware and to provide news and information that we think will be of interest to you;
• To prevent fraud, criminal activity, or misuses of our Service, and to ensure the security of our IT systems, architecture, and networks; and
• To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.

Research and Development:

We may aggregate Personal Information and use the aggregated and de-identified information to analyze the effectiveness of the Service, to improve and add features to the Service, gain anonymous insights into product and brand performance on the Service, and for other business purposes. In addition, from time to time, we may analyze the general behavior and characteristics of Users and share aggregated information like general user statistics with prospective business partners.

How Long We Keep Your Information:

We will only keep your Personal Information for as long as it is reasonably necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (e.g., tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize such information, or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

If you would like to opt-out of receiving certain communications, see the "Your Choices" section below.

3. SHARING AND DISCLOSURE OF PERSONAL INFORMATION

Sharing Personal Information:

In certain circumstances we may share the categories of Personal Information described above without further notice to you, unless required by the law, with the following categories of third parties:

• Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Information with vendors and service providers, including providers of hosting services, cloud services, and other information technology services providers, email communication software and email newsletter services, advertising and marketing services, payment processors, customer relationship management and customer support services, and analytics services. Pursuant to our instructions, these parties will access, process, or store Personal Information in the course of performing their duties to us.
• Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, dissolution, sale of all or a portion of our assets, or transition of service to another provider, including the negotiations thereof (collectively and each a "Transaction"), your Personal Information and other information may be shared in the diligence process with counterparties and others assisting with a Transaction and transferred to a successor or affiliate as part of or following that Transaction along with other assets.
• Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (a) comply with a legal obligation, including to meet national security or law enforcement requirements, (b) protect and defend our rights or property, (c) prevent fraud, (d) act in urgent circumstances to protect the personal safety of users of the Service, or the public, or (e) protect against legal liability.
• Affiliates: We may share Personal Information with our current and future affiliates, meaning an entity that controls, is controlled by, or is under common control with Clinware. Our affiliates may use the Personal Information we share in a manner consistent with this Privacy Notice. Affiliates may be located outside the United States of America.
• Discretion/Consent: We may share your Personal Information at your discretion, including when you submit a product review using a third-party service or otherwise direct us to disclose your Personal Information to a third party. We may also share your Personal Information with your consent.

4. USERS OUTSIDE OF THE UNITED STATES

For the purposes described in this Privacy Notice, we may transfer your Personal Information from the European Economic Area (EU Member States, Iceland, Liechtenstein and Norway) and/or the United Kingdom to our U.S. office or a third party outside of the EEA or the UK and in a jurisdiction not subject to an adequacy decision of the European Commission or the UK Government, as applicable. When we transfer your Personal Information to other third parties outside of the EEA or the UK, for example service providers, we will do this in accordance with applicable data protection laws and will take appropriate safeguards to ensure the integrity and protection of your Personal Information wherever processed. If you are a resident in the European Economic Area (EEA) or United Kingdom (UK), then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your Personal Information in accordance with this Privacy Notice and applicable law. By providing your Personal Information, you consent to such transfer.

Your Rights in Relation to Your Personal Data Under GDPR and/or UK GDPR:

If you are a resident of the European Economic Area (EEA) and/or UK, you have certain rights regarding our processing of your personal data (in addition to those discussed elsewhere in this Privacy Notice). Subject to the applicable provision of the GDPR and/or UK GDPR, you have the following rights with respect to your Personal Information:

• Right of access (commonly known as a "data subject access request"): If you ask us, we will confirm whether we are processing your Personal Information and, if so, provide you with a copy of that Personal Information along with certain other details. If you require additional copies, we may need to charge a reasonable fee.
• Right to rectification: If your Personal Information is inaccurate or incomplete, you are entitled to ask that we correct or complete it.
• Right to erasure: You may ask us to erase your Personal Information in some circumstances, such as where we no longer need it or you withdraw your consent (where applicable) and there is no other legal basis for processing.
• Right to restrict processing: You may ask us to restrict or 'block' the processing of your Personal Information in certain circumstances, such as if you contest its accuracy or object to us processing it.
• Right to data portability: You have the right to obtain your Personal Information from us that you consented to give us or that was provided to us as necessary in connection with our contract with you, and if the processing is carried out by automated means.
• Right to object: You may ask us at any time to stop processing your Personal Information, and we will do so: (a) if we are relying on a legitimate interest (described above) to process your Personal Information, unless we demonstrate compelling legitimate grounds for the processing or your information is needed to establish, exercise, or defend legal claims; or (b) we are processing your Personal Information for direct marketing and, in such case, we may keep minimum information about you (for example, in a suppression list) as necessary for our and your legitimate interest to ensure your opt out choices are respected in the future and to comply with data protection laws.
• Right to withdraw consent: If we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time, but this will not affect any processing of your information that has already taken place.
• Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we handled your Personal Information, you can report it to the data protection authority that is authorized to hear those concerns (in the United Kingdom, the Information Commissioner's Office (ICO) at https://ico.org.uk/concerns).

To exercise your rights under the GDPR and/or the UK GDPR, please send us your request as set forth in the "Contact Us" section below.

Your Rights in Relation to Your Personal Data if You Are a Resident of Canada:

We may process your information if you have given us specific permission (i.e., express consent) to use your Personal Information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time. In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way;
• For investigations and fraud detection and prevention;
• For business transactions provided certain conditions are met;
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim;
• For identifying injured, ill, or deceased persons and communicating with next of kin;
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse;
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province;
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records;
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced;
• If the collection is solely for journalistic, artistic, or literary purposes; or
• If the information is publicly available and is specified by the regulations.

To exercise your rights as a Canadian resident, please send us your request as set forth in the "Contact Us" section below.

5. STATE PRIVACY RIGHTS

Where provided for by law and subject to any applicable exceptions, residents of certain states may have additional rights. If you live in a state that has implemented its own privacy law (e.g., California and the California Consumer Protection Act), you may have such rights. These rights are not absolute, and in some cases, they may not apply, including if a legal exception applies. If this is the case, we will not be able to process your request. The rights include:

• Right to Know: The right to request that we disclose to you the Personal Information we collect, use, or disclose, and information about our data practices.
• Right to Request Correction: The right to request that we correct inaccurate Personal Information that we maintain about you.
• Right to Request Deletion: The right to request that we delete your Personal Information that we have collected from or about you.
• Right to Opt Out of Targeted Advertising: The right to opt out of the processing of your Personal Information obtained from your activities on nonaffiliated websites or online applications for the purposes of targeted advertising.
• Right to Non-Discrimination: The right not to receive discriminatory treatment for exercising your privacy rights.
• Right to Limit Use and Disclosure of Sensitive Information: In some cases, you may have the right to ask that we limit the way we use your Personal Information. In some cases, you can exercise this right by asking that we delete your Personal Information. You may also have the right to object to how we process Personal Information, or to withdraw your consent if our use is based on consent.

Please note that to protect your information and the integrity of our products, we may need to verify your identity before processing your request. In some cases, we may need to collect additional information to verify your identity, such as a government issued ID.

Under certain U.S. Privacy Laws, you may also designate an authorized agent to make these requests on your behalf. If you use an authorized agent to submit a request, we may need to collect additional information, such as a government issued ID, to verify your identity before processing your request to protect your information.

For more information about the possibility of submitting an opt-out request, please refer to the Your Choices section below, or submit a data subject access request.

The information we collect, use, and disclose about you will vary depending on how you interact with the Service. To find out more please visit the following sections of this Privacy Notice: Personal Information We Collect, How We User Personal Information, and Sharing and Disclosure of Personal Information. If you would like to exercise any of these rights, you may do so by contacting us as set forth in the "Contact Us" section below. After we receive your request, we may request additional information from you to verify your identity. Your authorized agent may submit requests in the same manner, although we may require the agent to present signed written permission to act on your behalf, and you may also be required to independently verify your identity with us and confirm that you have provided the agent permission to submit the request.

6. CHILDREN

We do not intentionally collect Personal Information from individuals in the U.S. who are under the age of 13. If a child under 13 submits Personal Information to Clinware and we learn that the Personal Information is the information of a child under the age of 13, we will attempt to delete the information as soon as possible. If you believe that we might have any Personal Information from a child under the age of 13, please contact us as set forth in the "Contact Us" section below.

7. LINKS TO OTHER WEBSITES

The Service may contain links to other websites and services not operated or controlled by Clinware, including social media services ("Third Party Services"). The information that you share with Third Party Services will be governed by the specific privacy policies and terms of service of the Third Party Services and not by this Privacy Notice. By providing these links we do not imply that we endorse or have reviewed these Third Party Services. Please contact the Third Party Services directly for information on their privacy practices and policies.

8. SECURITY

We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or e-mail transmission is ever fully secure or error free. In particular, email sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or email. You use the Service at your own risk. Please keep this in mind when disclosing any Personal Information to Clinware via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or Third Party Services.

9. YOUR CHOICES

In certain circumstances providing Personal Information is optional. However, if you choose not to provide Personal Information that is needed to use some features of our Service, you may be unable to use those features. You can also contact us to request updates or corrections to your Personal Information. If you have questions or concerns about other Personal Information collected by us, or are unable to use your Clinware account and would like assistance accessing that information, please contact us as set forth in the "Contact Us" section below.

You may opt out of marketing-related communications by following the opt out or unsubscribe instructions contained in the marketing communication we send you, or by updating your settings through your account. If you unsubscribe from our marketing lists, you will no longer receive marketing communications from us but we will continue to contact you to provide the Service, regarding management of your account, other administrative matters, and to respond to your requests.

10. CHANGES TO THE PRIVACY NOTICE

The Service and our business may change from time to time. As a result, we may change this Privacy Notice at any time. When we do, we will post an updated version on this page, unless another type of notice is required by applicable law. By continuing to use our Service or providing us with Personal Information after we have posted an updated Privacy Notice, you consent to the revised Privacy Notice and practices described in it.

11. CONTACT US

If you have any questions or complaints about our Privacy Notice or information practices, would like to request a version of this notice in an accessible format, or would like to contact us in regards to any of the topics discussed above, please feel free to contact us at: