Privacy Policy

I. Privacy Policy

A. Acceptance of Terms

Medbridge Inc. ("Medbridge") is committed to protecting Your privacy when You visit the Medbridge Website located at the URL www.medbridge.com, the Medbridge Mobile App, and other websites owned by Medbridge, including personalized white label websites.

This Privacy Policy explains to You how we collect and use Your information. This document should be read in conjunction with the Medbridge Terms and Conditions, and we reserve the right to append or otherwise modify this privacy statement at any time.

B. Term Definitions

1. The term "Medbridge Website" refers to the Medbridge website accessible through the URL https://medbridge.com, the Medbridge mobile application, Medbridge Pathways, and other websites owned by Medbridge, including personalized white label websites.
2. The term "Medbridge" refers to Medbridge, Inc.
3. The term "Medbridge Mobile App" refers to the Medbridge mobile application available as an iOS and Android application that provides You access to educational content, the MedbridgeGO Mobile application available as an iOS and Android application that provides patients access to their assigned exercise programs from their phone or tablet, and Medbridge's Pathways that provides Medbridge's self-guided care platform.
4. The term "User Profile" refers to a profile posted by a User on the Medbridge Website.
5. The terms ''You'', "Your" and/or ''User'' refer to any individuals and/or entities visiting and/or otherwise accessing the Medbridge Website for any reason.
6. The term "Content" refers to all information, data, text, software, music, sound, photographs, graphics, video, messages, tags, or other materials posted and/or otherwise displayed on, to, or at the Medbridge Website.
7. The term "Cookies" are small files that are placed on Your computer, mobile device or any other device by the Medbridge Website, containing the details of Your browsing history on the Website among its many uses.
8. The term "Data Controller", for the purposes of the General Data Protection Regulation ("GDPR") refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
9. The term "Personal Data" or "Personal Information" includes, but is not limited to, any information that identifies or describes an individual, including his or her name, professional licensing information, social security number, physical description, age, gender, marital status, health status, financial status, home address, home telephone number, education, financial matters, and medical or employment history. Personal Information may also include statements made by, or attributed to, a User.
10. The term "Service Provider" means any natural or legal person who processes the data on behalf of Medbridge. It refers to third-party companies or individuals contracted by Medbridge to:
    • Facilitate the Medbridge Website,
    • Provide services for the Medbridge Website on behalf of Medbridge,
    • Perform services related to the Medbridge Website, or to assist the Company in analyzing how the Service is used.
11. The term "Usage Data" refers to data collected automatically, either generated by Your use of the Medbridge Website or from the Medbridge Website infrastructure (e.g., the duration of a page visit).

C. Collection of User Data

Medbridge collects user data (including Personal Data, Personal Information, and Usage Data), during registration and use of the Medbridge Website and associated services such as described below with the consent of the User and for the legitimate business purpose of providing the services offered by the Medbridge Website.

Collection and processing of user data occur with the notice to the User and ability of the User to modify, opt-in/out, and the ability to request cessation of collection and retention in accordance with all governing laws and regulations.

D. Legal Basis for Processing User Data

Medbridge processes user data for the legitimate business purpose of providing, optimizing, and personalizing the services offered by Medbridge and its partners, improving online care and education programs, and for aggregated and deidentified analysis.

Medbridge processes user data under the following conditions:

• Consent: You have given Your consent for processing user data for one or more specific purposes.
• Performance of a contract: Provision of user data is necessary for the performance of an agreement with You, Your healthcare provider, or for any pre-contractual obligations.
• Legal Obligations: Processing user data is necessary for compliance with a legal obligation (including but not limited to the CCPA, GDPR, or HIPAA) to which Medbridge is subject.
• Vital interests: Processing Personal Information is necessary to protect Your vital interests or of another natural person.
• Public interests: Processing Personal Information is related to a task that is carried out in the public interest or in the exercise of official authority vested in Medbridge.
• Legitimate interests: Processing Personal Information is necessary for the purposes of the legitimate interests pursued by Medbridge.

Upon Your written request, Medbridge will clarify the specific legal basis that applies to the processing and whether Your provision of user data is a statutory requirement, contractual requirement, or a requirement necessary to enter into a contract.

II. Your Personal Information

A. Information Collected by Medbridge

By voluntarily creating a User Profile on the Medbridge website, You agree to the Medbridge Terms of Use, and consent to Medbridge's collection of Personal Information. To establish Your User Profile, Medbridge collects Your name and email address, and in some cases Your clinical discipline.

Medbridge collects additional information when You continue the use of the site and agree to our Terms of Use in order to receive Medbridge services and access Medbridge Content. When you assign or complete education courses or patient exercises on the Medbridge website, Medbridge collects data relating to the assignment of and/or completion of courses and/or exercises, as well as applicable clinical licensing information.

Within the last twelve months, Medbridge has collected the following categories of Personal Information from consumers:

Personal Information is provided at Your own risk. By providing Your Personal Information, You are communicating Your consent to Medbridge's collection, use and disclosure of such Personal Information for the purposes for which You provided the information to Medbridge, and as described in this Privacy Policy.

B. Artificial Intelligence Features

Medbridge may use automated systems, including artificial intelligence ("AI") and machine learning technologies, to process Your Personal Information and other Usage Data collected through the Medbridge Website and Mobile Apps. Medbridge uses AI technologies for purposes such as improving its educational and patient care content and offerings, enhancing platform performance, personalizing user experience, supporting service functionality, conducting analytics, and developing new products and features. Where appropriate, Medbridge may use aggregated or de-identified Personal Information and Usage Data for research, product improvement, quality assurance, security monitoring, and internal business operations. Medbridge may engage trusted third-party Service Providers to assist in operating, supporting, or improving these systems. Such providers are contractually required to maintain the confidentiality and security of Personal Information and to process data only as necessary to provide services to Medbridge and in accordance with applicable law. Automated systems are used to support service delivery and product improvement, and do not independently make medical diagnoses or treatment determinations. All data processing is conducted in accordance with this Privacy Policy, applicable contractual obligations with healthcare providers, and applicable laws (including the CCPA, GDPR, and HIPAA).

By accepting the terms of this Privacy Policy, You are communicating Your consent to Medbridge's collection, use and disclosure of Your Personal Information and Usage Data within automated systems, including AI enabled tools and features.

Use of the Medbridge Website and Mobile Apps, including any AI-enabled features, is voluntary. If You do not wish for Your Personal Information or Usage Data to be processed within AI-supported systems as described above, You may choose not to use the Medbridge Website or Mobile Apps. By continuing to access or use the Medbridge Website or Mobile Apps, You acknowledge and consent to the processing of Your information within these systems in accordance with this Privacy Policy and applicable law.

C. Data Controller

For the majority of the information maintained, collected, or used by Medbridge, Medbridge is the Data Controller who is responsible for determining the purpose and means of processing Personal Data. For some healthcare data, Your individual provider and/or their organization may be the Data Controller for whom Medbridge holds and processes data. Inquiries can be directed to this form or by contacting [email protected].

D. Using Your Information

Information is collected about You in order to establish and enhance its relationship with You. Medbridge's use of this information includes the following: (i) to personalize Your experience, so we are better able to respond to Your individual needs; (ii) improve its website through Your feedback; (iii) more effectively responding to customer service requests and support needs and improve customer service; (iv) process transactions; (v) contacting You; (vi) conducting research and compiling aggregate data for internal and external business purposes; and (vii) any other purpose disclosed to You at the time we collect Your information.

Much of the information collected by Medbridge is necessary for proper functioning of the Medbridge Website and use of the Medbridge products. For example, You may not be able to create a User account or reset Your password without provision of a valid email address. Further, Medbridge will store Your log-in credentials on Your device while using the Medbridge Mobile App, to provide a seamless experience. In these situations, if You choose to withhold any Personal Data requested by Medbridge, it may not be possible for You to gain access to certain parts of the site.

E. Updating and Deleting Your Information

On the Medbridge Website You are able to correct, update, review, or delete information You have submitted by going back to the specific tool and making the desired changes. If you are unable to make the changes on the Medbridge Website, you can request Medbridge to change, correct, or delete information by completing this form. You may also exercise Your right by contacting [email protected].

You have the right to withdraw consent to Medbridge's use or processing of Your Personal Information at any time. If You refuse to consent to, opt out of, or withdraw Your consent, we may not be able to offer You certain services or benefits.

F. Retention of Information

Medbridge stores and retains Personal Information based on the level of sensitivity of this information, and for the period specified by the applicable legal and regulatory requirements. For some healthcare data, Your individual provider and/or their organization may require Medbridge to retain data based on their individual legal and contractual requirements.

G. Information Sharing and Disclosure

We may share Your information with trusted third parties who assist us in operating the Medbridge Website, conducting its business, or serving You, as long as those parties agree to keep this information confidential to the extent outlined under this Privacy Policy and consistent with applicable laws and regulations. We may also release Your information when we believe it is needed to comply with the law, enforce the Medbridge Website policies, or protect ours or others' rights, property, or safety. Non-personally identifiable information may be provided to other parties for marketing, advertising, or other uses.

H. Sale of Personal Information

In the past twelve months, Medbridge has not sold any collected Personal Information to third parties.

I. Changes in Medbridge Inc.

If Medbridge is sold, merged, or otherwise transferred, Personal Information may be transferred along with it.

J. Information Use related to the Use of the Medbridge Mobile App

You may also opt into receiving Push Notifications from the Medbridge Mobile App. If you wish to stop receiving push notifications, you may turn off this feature in the settings on Your device.

When you delete the Medbridge mobile application, any information saved in Your device will be deleted, but any information collected and stored by us will remain in its server.

K. Additional Information Use

We may use Your email for transactional purposes, as well as for promotional purposes. Transactional purposes include confirmation and notification of changes to Your account. Promotional purposes include sending You newsletters about new features, special offers, promotional announcements, consumer surveys, and other items concerning our service. During registration at the Medbridge Website, You may be signed up to receive promotional email newsletters from Medbridge, unless disallowed by Your jurisdiction of residence. Email messages may contain code that enables Medbridge databases to track Your usage of the emails to determine whether the email was opened and what links, if any, were clicked. Should You prefer not to receive promotional emails from us, please edit the preferences in Your account menu or click Unsubscribe at the bottom of any promotional emails.

L. Access to Information

Users may have a right to request access to Your information collected or processed by Medbridge. You can request such access by contacting us at [email protected]. Upon verification of Your identity, we will make sure to provide You with a copy of the data we process about You. In some circumstances we may need to work with Your healthcare provider in order to provide copies of sensitive information.

M. International Privacy Laws

If You are accessing the Medbridge Website and associated services from outside the United States, please be aware that You are transferring Your information (including Personal Data) to the United States where Medbridge servers are located. Medbridge will ensure all data transfers comply with applicable GDPR requirements.

If You reside within the European Union, You may have the right to lodge a complaint regarding Medbridge's information collection and processing with Your local, national supervisory authority.

N. GDPR Rights

This Section applies only to Users of the Medbridge Website who reside within the European Union or are citizens of a European Union member state. Medbridge guarantees You can exercise all of Your rights and will not discriminate against You if You exercise Your GDPR rights.

Under the General Data Protection Regulation ("GDPR"), European Union residents have the right to:

• Request access to Your Personal Data.
• Request correction of the Personal Data that Medbridge holds about You.
• Object to processing of Your Personal Data.
• Request erasure of Your Personal Data.
• Request the transfer of Your Personal Data.
• Withdraw Your consent.

Request access to Your Personal Data. The right to access, update or delete the information Medbridge holds about You. This right also enables You to receive a copy of the Personal Information Medbridge holds about You.

Request correction of the Personal Data that Medbridge holds about You. You have the right to have any incomplete or inaccurate information Medbridge holds about You corrected.

Object to processing of Your Personal Data. You have the right to object to processing where Medbridge is relying on a legitimate interest as the legal basis for its processing Your Personal Data.

You also have the right to object where Medbridge is processing Your Personal Data for direct marketing purposes. You may request that Medbridge does not use Your Personal Data by checking the box that appears in a pop-up banner on the Medbridge Website. You can modify Your opt-out selection at any time by changing Your selection in the pop-up banner. Medbridge does not share Your Personal Information collected on the password restricted pages of the Medbridge website on the Medbridge Website for marketing purposes.

Request erasure of Your Personal Data. You have the right to ask Medbridge to delete or remove Personal Data when there is no good reason for Medbridge to continue processing it.

Request the transfer of Your Personal Data. Medbridge will provide to You, or to a third-party You have chosen, Your Personal Data in a structured, commonly used, machine-readable format. This right only applies to automated information which You initially provided consent for Medbridge to use or where Medbridge used the information to perform a contract with You.

Withdraw Your consent. You have the right to withdraw Your consent on using Your Personal Data. If You withdraw Your consent, Medbridge may not be able to provide You with access to the services on the Medbridge Website.

You may exercise Your rights of access, rectification, cancellation and by completing this form. Please note that Medbridge may ask You to verify Your identity before responding to such requests.

O. California Residents' Rights

This Section applies only to Users of the Medbridge Website who reside in the State of California. Under the California Consumer Privacy Act of 2018 (CCPA) California consumers have the right to:

• Know the categories of Personal Information we collect and the categories of sources from which we obtained the information;
• Know the business or commercial purposes for which we collect and share Personal Information;
• Know the categories of third parties and other entities with whom we share Personal Information; and
• Access the specific pieces of Personal Information we have collected about you.

To obtain any additional information not found in this Privacy Policy, please complete this form include Your name, email address associated with Your Medbridge account, Medbridge access code, and California postal address as well as the email associated with Your User Profile, if one exists ("Verification Information"). You may also exercise Your rights by calling (888) 824-9839.

Right to Deletion. In some circumstances You may ask us to delete Your Personal Information. To do so, please submit Your Verification Information by completing this form. You may also exercise Your right by contacting [email protected].

Submission of Your Request. You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify You are the person about whom we collected Personal Information or an authorized representative,
• Describe Your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to Your request or provide you with Personal Information if we cannot verify Your identity or authority to make the request and confirm the Personal Information relates to You. You do not need to create an account with us to submit a request to know or delete Your Personal Information. We will use the Personal Information provided in Your request only to verify the Your identity or authority.

Right to opt out of Sales. You may request that we do not sell or share Your Personal Information for advertising or marketing purposes by checking the box that appears in a pop-up banner on the Medbridge Website. You can modify Your opt-out selection at any time by changing Your selection in the pop-up banner. Medbridge does not sell or share Your Personal Information collected on the password restricted pages of the Medbridge website on the Medbridge Website in ways that may constitute a "sale" under the CCPA. In line with this, Medbridge further does not sell any Personal Information of consumers under 16 years of age.

You May also additionally exercise Your rights by completing this form and include Your Verification Information or by contacting [email protected]. If You reengage with Medbridge after opting out of the "sale" of Your Personal Information, such as purchasing a new subscription, Your Personal Information will be collected and used in accordance with this Privacy Notice.

You have the right to not be discriminated against for exercising any of Your CCPA rights, and Medbridge will not do any of the following based on any exercise of Your rights:

• Deny You goods or services.
• Charge You different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide You a different level or quality of goods or services.
• Suggest that You may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer You certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to Your Personal Information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires Your prior opt-in consent, which You may revoke at any time.

III. Automatically Collected Information

As You use Medbridge, certain Usage Data may also be passively collected and stored on Medbridge or its Service Providers' server logs, including Your Internet protocol address, browser type, and operating system.

When you enter the Medbridge Website, You are required to consent to Medbridge's use of Cookies in line with this Privacy Policy. You can opt out from the sale or sharing of Your Personal Information by checking the box on the pop-up banners that appears on the Medbridge Website. Checking this box will block all Cookies that will use Your Personal Information for advertising or marketing purposes. You may change or customize Your Cookie selections on the same pop-up banner at any time.

You also can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not allow Your browser to use Cookies and accept the use of strictly necessary Cookies on the Medbridge Website, You may not be able to use the Medbridge Website.

Medbridge uses Cookies and navigational data like Uniform Resource Locators (URL) to gather information regarding the date and time of Your visit and the solutions and information for which You searched and viewed, or on which of the advertisements displayed on Medbridge You clicked.

When you enter the Medbridge Website, You are also required to consent to Medbridge's use of analytical tools in line with this Privacy Policy. Medbridge collects and stores data from its public facing (non-password restricted) pages separately from data collected from the non-public facing (password restricted) pages of the Medbridge Website.

Medbridge uses third party analytical tools (including Cookies, pixel tracking, and other analytical tools) on the public facing (non-password restricted) pages of the Medbridge Website. Medbridge uses these tools to gather information on the solutions and information for which You searched and viewed, or on which of the advertisements displayed on Medbridge You clicked. Medbridge uses the following third-party analytical tools on the public facing (non-password restricted) pages of the Medbridge:

• Bing
• Chili Piper
• CookieYes
• Facebook / Meta
• Google Analytics
• HubSpot
• LinkedIn
• OpenAI
• Post Affiliate Pro
• PostHog
• Reddit
• ZoomInfo
• WebSights

Medbridge also uses third party analytical tools (such as Pendo) on the non-public facing (password restricted) pages of the Medbridge Website. Medbridge uses these tools to gather information about Your use of the Medbridge Website to provide the services and improve the solutions that You use on the Medbridge Website.

This type of information is collected to make Medbridge and solutions more useful to You and to tailor the experience to meet Your interests and needs.

Medbridge, or its Service Providers acting on its behalf, use the following types of Cookies:

IV. Safety Measures

A. Internet Security

We use a variety of security measures to maintain the safety of Your Personal Information when You place an order or access Your Personal Information:

• A secure server;
• All sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then entered into our Payment gateway providers database accessible only to those authorized who are required to keep the information confidential;
• All data stored on the Medbridge Website server(s) is stored in a database "behind" a secure firewall;
• There is no permissible access to the database outside of the hosted environment; and
• After a transaction, Your credit card information will not be stored on our servers.

B. Security Limitations Disclaimer

Medbridge cannot and does not guarantee that Personal Information You post on the Medbridge Website will not be accessed by unauthorized persons. Despite Medbridge's efforts to safeguard Your Personal Information, there is always a risk of security breach. Medbridge is not responsible for circumvention of any privacy settings or security measures of the Medbridge Website. You understand and acknowledge that, even after removal, copies of Personal Information on User Profiles may remain viewable in cached and archived pages or if other Users have copied or stored Your Personal Information.

The Medbridge Website might be linked to other websites, including but not limited to Facebook, LinkedIn, or Twitter, in order to better interact with its users and the public. Please be aware that Medbridge is not responsible for the privacy policies of those other sites. If users provide information directly to websites other than Medbridge, different rules may apply for the use of Personal Information.

You are solely responsible for Your privacy settings, and Medbridge is not and will not be responsible for Personal Information shared by You via a User Profile or the settings associated therewith.

C. Children's Privacy

Medbridge does not collect any Personal Information from anyone under 13 years of age. The Medbridge Website, Mobile Apps, and all Content posted on the Medbridge Website or Mobile Apps are directed at people who are older than 13 years.

Please direct additional Questions or Concerns to [email protected].

D. Privacy by Design.

Medbridge has implemented a Privacy by Design policy that complies with Article 25 of GDPR. Medbridge is committed to integrating privacy considerations into all aspects of its data processing activities.

E. Changes to this Privacy Policy

Medbridge reserves the right to make changes to this privacy policy at any time by giving notice to its users on this page. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom. If you object to any of the changes to the Policy, you must cease using the Medbridge Website and can request that Medbridge removes the Personal Information. Unless stated otherwise, the then-current privacy policy applies to all Personal Information Medbridge has about its users.

Last Updated: July 29, 2026