US-EU Safe Harbor Privacy Principles

 

With respect to the data of European individuals, VideoMedicine complies with the US-EU Safe Harbor Framework and US-Swiss Safe Harbor Framework
as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member nations . VideoMedicine has certified that it adheres to the Safe Harbor Privacy Principles, which are the basis for the principles of this Policy. To
learn more about the Safe Harbor Framework, please visit http://www.export.gov/safeharbor.

PERSONAL INFORMATION

“Personal information” means any information or set of information that identifies or could be used by or on behalf of VideoMedicine to identify
(together with other information) a living individual. Personal information incudes health related and non-health data. Personal information does not
include anonymized data.

NOTICE

If VideoMedicine requests and stores personal information directly from EU individuals, it will inform them about the purposes for which it
collects and uses personal information about them, the options VideoMedicine offers individuals for limiting the use and disclosure of personal
information about them, and how to contact VideoMedicine with privacy concerns. Notice will be provided before services are rendered when
individuals receive a VideoMedicine Notice of Privacy Practices, and in any event before VideoMedicine uses or discloses personal
information for a purpose other than that for which it was originally collected.

CHOICE

All VideoMedicine users have the option to store no personal information with VideoMedicine. Users are not required to upload protected
health information in order to use VideoMedicine. All users also have the option to limit transfers of personal information to third-parties and
to limit the uses of their personal information to those to which they had originally agreed..

ONWARD TRANSFER

VideoMedicine
will obtain assurances from all third party transferees that they will safeguard personal information consistently with the Safe Harbor principles.
Examples of appropriate assurances include the following a contract obligating the third party to provide at least the same level of protection as is
required by the relevant Safe Harbor Principles, and the agent being subject to EU Directive 95/46/EC (the EU Data Protection Directive).

DATA INTEGRITY

VideoMedicine
will take reasonable steps to ensure that personal information is relevant to its intended use.. VideoMedicine users have the option to switch
their accounts into “Anonymous Mode” at any time during their use of VideoMedicine services. Anonymous mode enables users to elect to de-identify
their stored data at any time. Use of all users’ personal information by VideoMedicine shall be limited to those uses to which the user has
consented.

SECURITY

VideoMedicine
takes a number of precautions to protect your personal information. Personal information provided to VideoMedicine and transmitted between or
among mobile devices, the VideoMedicine website, and its servers is encrypted. The passwords that allow access to the VideoMedicine app
and website are also encrypted. The VideoMedicine server that personal information may be stored on is protected by a firewall. Human access is
limited to that access needed to maintain the server, and excludes access to personal information. VideoMedicine servers require secure shell
certificates for access. The servers have all ports closed (deny-all mode) except for a few that remain open because they are vital for VideoMedicine to operate. These are secured with authentication (login/password) and encryption (Hypertext Transfer Protocol Secure/ Secure Socket
Layer (“HTTPS/SSL”) traffic.

ACCESS

Users have the ability to access information held about them, and may request to correct or delete it if it is inaccurate. VideoMedicine will take
reasonable steps to permit users to correct, amend, or delete any data that is inaccurate or incomplete. VideoMedicine users are able to access
data that they have input into their VideoMedicine profile at any time, and make changes to those data.

ENFORCEMENT

VideoMedicine
will conduct compliance audits of its relevant privacy practices and this policy to verify adherence to the Safe Harbor principles. VideoMedicine
will respond to all privacy complaints and inquiries within a reasonable time.

CONTACT INFORMATION

Questions regarding this Policy should be submitted to VideoMedicine at:

Alexander Ding, MD
Video Medicine, Inc.
690 S Highway 89,
Suite 200, Box 10219.
Jackson, WY 83002
Phone: (800) 977-9651
Email: Alex.Ding@VideoMedicine.com