Privacy Policy

Last Updated: August 2025

Introduction

Desert Dexa Inc. ("Desert Dexa," "we," "us," or "our") is committed to protecting your privacy and maintaining the confidentiality of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our DEXA scanning services and visit our website.

Information We Collect

Personal Information

We may collect the following types of personal information:

• Name and contact information (email address, phone number, mailing address)
• Date of birth and age
• Gender
• Payment information (credit/debit card details processed through secure third-party processors)
• Government-issued identification for verification purposes

Health and Medical Information

We collect comprehensive health information for both DEXA scanning and telehealth services:

• Medical history and current health conditions
• Current medications and supplements
• Allergies and adverse drug reactions
• Family medical history
• DEXA scan results and body composition data
• Weight, height, and vital signs
• Laboratory test results and monitoring data
• Photos for medical documentation and progress tracking
• Prescription and medication adherence information
• Treatment response and side effect reports

Telehealth Platform Information

When you use our telehealth services, we may collect:

• Video and audio recordings of consultations (when consent is provided)
• Chat messages and communications with healthcare providers
• Consultation notes and treatment plans
• Electronic prescriptions and medication orders
• Appointment history and scheduling preferences
• Device information used for telehealth sessions

Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses

How We Use Your Information

We use the information we collect for the following purposes:

DEXA Scanning Services

• To provide and maintain our DEXA scanning services
• To schedule and confirm appointments
• To provide you with your scan results and maintain your scan history
• To track changes in body composition and bone density over time

Telehealth Services

• To connect you with licensed healthcare providers
• To facilitate telehealth consultations and medical evaluations
• To enable healthcare providers to prescribe appropriate medications
• To monitor treatment progress and medication adherence
• To track side effects and treatment outcomes
• To provide ongoing medical support and follow-up care
• To coordinate care with pharmacies for medication fulfillment
• To maintain comprehensive medical records for continuity of care

General Business Operations

• To process payments and maintain billing records
• To communicate with you about services, appointments, and updates
• To improve our services and website functionality
• To comply with legal obligations and regulations
• To protect our rights and prevent fraud
• To conduct quality assurance and training programs
• To analyze treatment effectiveness and safety (in aggregate, de-identified form)
• To send you marketing communications about our services (with your consent)
• To improve our marketing and advertising efforts

Information Sharing and Disclosure

We may share your personal information with third parties in the following circumstances:

Healthcare-Related Sharing

• Licensed Healthcare Providers: We share your medical information with healthcare providers using our telehealth platform to enable them to provide medical consultations, prescribe medications, and provide ongoing care
• Laboratory Partners: We may share information with laboratory partners for required lab work and monitoring
• Medical Emergency: In case of a medical emergency, we may share relevant medical information with emergency responders

Business Operations

• With your consent: We may share your information when you give us explicit permission to do so
• Service providers: We may share information with third-party vendors who perform services on our behalf (e.g., payment processing, appointment scheduling, video conferencing platforms)
• Advertising partners: We may share information with advertising partners to provide targeted marketing communications (with your consent)
• Legal requirements: We may disclose information if required by law or in response to valid legal processes
• Protection of rights: We may disclose information to protect our rights, property, or safety, or that of others
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred

Quality Assurance and Research

• De-identified Data: We may use and share de-identified, aggregated data for research, quality improvement, and population health studies
• Regulatory Reporting: We may be required to report certain information to regulatory agencies for safety monitoring and compliance purposes

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis
• Employee training on data protection and privacy

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Telehealth Privacy Considerations

Video and Audio Recording

Telehealth consultations may be recorded for quality assurance, training, or medical record purposes. We will always obtain your explicit consent before recording any session. You have the right to:

• Request that your consultation not be recorded
• Ask for recordings to be deleted after a specific period
• Receive a copy of any recordings upon request

Video Conferencing Platform Privacy

We use secure, HIPAA-compliant video conferencing platforms for telehealth consultations. These platforms may temporarily store session data according to their own privacy policies, which we will provide to you.

Medical Photography

Progress photos and medical images may be collected as part of your treatment monitoring. These images are:

• Stored securely with your medical records
• Only shared with your healthcare providers
• Never used for marketing purposes without separate consent
• Retained according to medical record retention requirements

Prescription and Medication Data

Information about your prescriptions and medication adherence is shared with:

• Your prescribing healthcare provider
• Pharmacy partners for medication fulfillment
• Third-party platforms that help monitor medication adherence (with your consent)

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations, including medical record retention requirements. You may request deletion of your personal information at any time, subject to our legal obligations to maintain certain medical and business records.

Your Rights and Choices

Access and Correction

You have the right to access and correct your personal information. You may request a copy of your information or ask us to update inaccurate information by contacting us.

Opt-Out

You may opt-out of receiving promotional communications from us by following the unsubscribe instructions in those communications or by contacting us directly.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA). Please see our separate CCPA Privacy Notice for more information.

Do Not Track

Our website does not currently respond to Do Not Track signals. However, you can control cookies through your browser settings.

Age and Eligibility

Our services are available to all individuals who meet the applicable medical and eligibility criteria as determined by our healthcare providers. We do not knowingly collect personal information from children under 13 without appropriate consent. If we learn we have collected information from a child under 13 without proper consent, we will delete that information promptly.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device. You can control cookie settings through your browser, but disabling cookies may limit some website functionality.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

International Users

Our services are intended for use in the United States. If you access our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website with an updated "Last Updated" date. Your continued use of our services after any modifications constitutes acceptance of the updated Privacy Policy.

Contact Information

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

How to Submit a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information above. You also have the right to file a complaint with applicable regulatory authorities.