Privacy Policy

General Website Privacy Policy

Effective January 2026

Healthy Takeoff Travel Medicine, LLC (“we,” “our,” or “us”)

Scope of This Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and protect personal information that is not protected health information (PHI) under the Health Insurance Portability and Accountability Act (“HIPAA”). Information you provide as part of your medical care, including through our patient portal, telehealth visits, or clinical communications, is PHI and is governed by our HIPAA Notice of Privacy Practices, not this Privacy Policy. You can access our HIPAA NPP through this hyperlink: HIPAA Notice of Privacy Practices

Information We Collect (Non-HIPAA Personal Information)

We collect the following categories of personal information when you interact with our website, scheduling tools, telehealth platform, or payment systems:

Identifiers

Name
Email address
Phone number
Account login information (for telehealth or scheduling accounts)
IP address
Device identifiers

Online Scheduling Information

Appointment requests
Preferred provider or service
Communication preferences

Patient Intake Form Information (Pre-Patient Relationship)

Basic demographic information
Insurance information (if submitted before becoming a patient)
Reason for visit
Any information you voluntarily provide before PHI protections apply D. Telehealth Platform Account Information
Username or login credentials
Device and connection information
Technical data required to deliver telehealth services

Payment Information

Billing name and contact information
Payment method details (processed by third-party payment processors; we do not store full card numbers)

Cookies and Tracking Technologies

We use cookies and other tracking technologies to

Maintain website functionality
Improve user experience
Analyze website traffic

We do not use cookies to collect PHI.

How We Use Personal Information

We use non-HIPAA personal information for:

Scheduling and managing appointments
Creating and managing telehealth accounts
Processing payments
Responding to inquiries
Operating and improving our website
Security, fraud prevention, and compliance
Analytics and performance monitoring

We do not use personal information for targeted advertising involving health conditions. 4. How We Share Personal Information

We may share personal information with:

Service Providers / Processors

Online scheduling vendors
Telehealth platform providers
Payment processors
IT and security vendors
Website hosting and analytics providers

These vendors are contractually required to protect your information and may only use it to provide services to us.

Legal and Compliance

We may disclose information when required by law, regulation, or legal process. We Do Not:

Sell personal information
Share personal information for cross-context behavioral advertising
Use sensitive data for purposes beyond what is reasonably necessary

State-Specific Privacy Rights

Depending on your state of residence (including CA, CO, CT, DE, MD, VA, UT, TX, and others), you may have the following rights regarding non-HIPAA personal information:

Your Rights

Right to Know what personal information we collect and how we use it ● Right to Access your personal information
Right to Correct inaccuracies
Right to Delete personal information
Right to Data Portability
Right to Opt Out of:

o Sale of personal information (we do not sell)

o Sharing for targeted advertising (we do not share)

o Certain types of profiling

Sensitive Data

We do not process sensitive data for purposes requiring opt-in consent under state law. C. Appeal Rights

If we deny your request, you may submit an appeal by contacting us at the email below. 6. Global Privacy Control (GPC) and Universal Opt-Out Mechanisms

We will honor browser-based Global Privacy Control (GPC) signals and other legally required universal opt-out mechanisms for states that mandate them (including California, Colorado, and Delaware).

Cookies and Tracking Technologies

We use:

Essential cookies (required for site functionality)
Performance and analytics cookies

You may control cookies through your browser settings.

We do not use cookies to collect PHI or to engage in targeted advertising. 8. Data Retention

We retain personal information only as long as necessary to:

Provide services
Meet legal and regulatory obligations
Maintain security and fraud prevention

Retention periods vary by data type and state law.

Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information. No system is completely secure, but we take reasonable steps to reduce risk.

Children’s Privacy

We do not knowingly collect personal information from children under 17 through our website. HIPAA-covered PHI for minors is governed by our HIPAA NPP.

Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. The “Effective Date” above reflects the most recent version.

Contact Us

To exercise your privacy rights or ask questions, contact:

Healthy TakeOff Travel Medicine LLC

390 NE 191st St STE 50174

Miami, FL 33179

healthytakeofftravelmedicine@gmail.com

CONSUMER HEALTH DATA PRIVACY POLICY

Last updated: February 2026

This notice supplements the General Website Privacy Policy (the “Privacy Policy”) and applies to personal data defined as “consumer health data” subject to the Washington State My Health My Data Act (MHMDA), the Nevada Health Data Privacy Act (NHDPA), or other applicable state consumer health privacy law.

Consumer Health Data We Collect

As described in the Information We Collect section of the Privacy Policy, the data we collect depends on the context of your interactions with us and the choices you make (including your privacy settings), the services you use, your location, and applicable law. Because consumer health data is defined very broadly, many of the categories of data we collect could also be considered consumer health data.

Examples of consumer health data may include:

Information about your health-related conditions, symptoms, status, diagnoses, testing, or treatments (including surgeries, procedures, medications, or other interventions). For example, we may collect such information through surveys or other communication with you for research studies and improving product accessibility.
Measurements of bodily functions, vital signs, or characteristics, including photographs, which may also be considered biometric information under the MHMDA, the NHDPA, or other applicable state consumer health privacy law.
Precise location information that could reasonably indicate your attempt to acquire or receive health services or supplies.
Information that could identify your attempt to seek health care services or information, including services that allow you to assess, measure, improve, or learn about your or another person’s health.
Other information that may be used to infer or derive data related to the above or other health information.

Sources of Consumer Health Data

As described further in the Information We Collect section of our Privacy Policy, we collect personal data (which may include consumer health data) directly from you, from your interactions with our Services, from third parties, and from publicly available sources.

Why We Collect and Use Consumer Health Data

We collect and use consumer health data for the purposes described in the How We Use Your Personal Information, How We Share Your Personal Information, Legal and Compliance, and Cookies and Tracking Technologies sections of the Privacy Policy. Primarily, we collect and use consumer health data as reasonably necessary to provide you with the services you have

requested or authorized. This may include delivering and operating the services and their features, personalization of certain service features, ensuring the secure and reliable operation of the services and the systems that support them, troubleshooting and improving the services, and other essential business operations that support the provision of the services (such as analyzing our performance, meeting our legal obligations, developing our workforce, and conducting research and development).

Our Sharing of Consumer Health Data

We may share each of the categories of consumer health data described above for the purposes described in the How We Share Your Personal Information section of the Privacy Policy. In particular, we may share personal data, including consumer health data, with your consent or as reasonably necessary to complete any transaction or provide any service you have requested or authorized, as described above. And we may disclose data when we believe that doing so is necessary to comply with applicable law or respond to valid legal process.

Third Parties With Which We Share Consumer Health Data

As necessary for the purposes described above, we share consumer health data with the following categories of third parties:

Service providers. Vendors or agents (“processors”) working on our behalf may access consumer health data for the purposes described above. For example, companies we’ve hired to provide customer service support or assist in protecting and securing our systems and Services may need access to data to provide those functions.
Business partners. We may share consumer health data with other companies, for example, where you use a Service that is cobranded and jointly operated with another Healthcare Provider Group, or where you use our Services to interact with another Healthcare Provider Group.
Financial institutions & payment processors. When you make a purchase or enter into a financial transaction, we will disclose payment and transactional data to banks and other entities as necessary for payment processing, fraud prevention, credit risk reduction, analytics, or other related financial services.
Parties to a corporate transaction. We may disclose consumer health data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
Affiliates. We enable access to data across our subsidiaries, affiliates, and related companies, for example, where we share common data systems or where access helps us to provide our Services and operate our business.
Government agencies. As described in our Privacy Policy, we disclose data to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to valid legal process.
Other third parties. In certain circumstances, it may be necessary to provide data to other third parties, for example, to comply with the law or to protect our rights or those of our customers.
Other users and individuals. If you use our Services to interact with other Users of the Service or other recipients of communications, we will share data, including consumer health data, as directed by you and your interactions.
The public. You may select options available through our Services to publicly display and disclose certain information, such as your profile, demographic data, content and files, or geolocation data, which may include consumer health data.

How to Exercise Your Rights

If you are covered by the MHMDA, the NHDPA, or other applicable consumer health privacy law then you may have certain rights with respect to consumer health data, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions. You can request to exercise such rights by contacting us at:

Healthy Takeoff Travel Medicine LLC

390 NE 191st St STE 50174

Miami, FL 33179

healthytakeofftravelmedicine@gmail.com

If your request to exercise a right is denied, you may appeal that decision by contacting our support team using the contact information set forth above. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint, the Nevada State Attorney General at

https://ag.nv.gov/complaints/file_complaint/, or other regulatory authority as applicable.