Effective Date: 3/14/2025 ----------------------------

Privacy Policy ----------------------------

1. Introduction At Prosper Direct Primary Care (Prosper DPC), we are committed to protecting the privacy and security of our patients' personal and medical information. This Privacy Policy outlines how we collect, use, store, and protect the information of our members, including communications made through RingCentral and other communication platforms. By using our services, you acknowledge that you have read and agree to this Privacy Policy.

2. Information We Collect We collect information necessary to provide direct primary care services and to communicate effectively with our patients. This includes: - Personal Identifiable Information (PII): Name, date of birth, address, phone number, email, and payment details. - Medical Information: Health history, medications, treatment records, and other health-related data. - Communication Records: Phone calls, text messages, and voicemails exchanged through RingCentral and other HIPAA-compliant platforms.

3. How We Use Your Information We use your information to: - Provide medical care and maintain accurate health records. - Communicate appointment reminders, test results, and health-related updates. - Process payments for membership and services. - Ensure compliance with healthcare regulations and HIPAA (Health Insurance Portability and Accountability Act). - Improve patient experience and administrative processes. We do not sell, rent, or share your information with third parties for marketing purposes. SMS opt-in and phone numbers collected for SMS communication purposes will not be shared with any third party and affiliates for marketing purposes.

4. How We Protect Your Information Prosper DPC uses secure, HIPAA-compliant systems to store and transmit patient data, including RingCentral for telecommunication. Security measures include: - Encryption of communication channels (phone, text, and email). Prosper Direct Primary Care | www.prosperdpc.com Prosper Direct Primary Care - Access controls to ensure only authorized personnel can view patient information. - Regular security updates and compliance checks. If we detect a breach of privacy, patients will be notified in accordance with HIPAA regulations.

5. Patient Rights & Responsibilities As a patient, you have the right to: - Access your medical records and request corrections. - Opt-out of non-essential communications. - Request secure communication methods if preferred. - Terminate membership at any time, subject to Prosper DPC policies. Patients are responsible for ensuring their contact information is accurate and for communicating via HIPAA-compliant channels.

6. RingCentral & Third-Party Communication - Prosper DPC uses RingCentral as a secure, HIPAA-compliant telecommunication platform for calls and messages. - By communicating with Prosper DPC via RingCentral, you acknowledge that calls and texts may be monitored for quality and compliance purposes. - Patients who prefer alternative communication methods may request email or secure messaging via Spruce Health.

7. Changes to This Privacy Policy Prosper DPC may update this Privacy Policy as needed to reflect changes in legal requirements or communication policies. Patients will be notified of updates via email or our website.

8. Contact Information For questions about this Privacy Policy, please contact: Prosper Direct Primary Care Email: info@Prosperdpc.com Phone 321-386-6318 ---------------