Privacy Policy

July 1, 2024

Z-Radar, LLC dba Reimbursement Reimagined (“R2” or “we” or “us”) collects protected information (Personally Identifiable Information (“PII”) and Protected Health Information (“PHI”) as part of our normal business operations and to administer, maintain and improve our services. We respect the privacy and security of all protected information that we obtain from or about you. We strive continuously to improve our platform and maintain appropriate administrative, physical, and technical safeguards and processes intended to protect the confidentiality and security of your protected information and to remain your trusted partner and advisor in the highly competitive post-acute care environment.

This Notice of Privacy Policy (“NPP”) is to provide all visitors to our websites, with information about our privacy practices regarding the information we gather and collect from you when you visit our sites, attend our educational sessions, or use our applications and services (“Services”). We also include contact information for you if you have questions, concerns or need to contact us about this NPP.

Because privacy laws, technology, and best practices to protect the privacy and security of protected information evolve over time, this NPP will be revised and updated from time to time. When updates occur, we will post a revised version at www.z-pax.com/privacy.html unless another type of notice is required by applicable law. You are responsible to comply with the most current version of our NPP that is posted online. You should, therefore, visit the site and review our NPP on a regular basis.

This NPP does NOT apply to the PHI that we may receive and process or store on behalf of our Third-Party Developers and their applications which are available on our Marketplace. Any information you share with third-party sites is governed by the privacy practices and terms of services of the specific sites not this NPP. You must contact the third-party sites directly for information about their privacy practices and terms of service. If you subscribe to their applications, you must refer to and accept their documentation and policies as related to any protected information you provide to them.

Binding Agreement And Changes In NPP

If you access all or any part of the platform you attest that you are least eighteen (18) years old and have read and agreed to our use and disclosure of your information in accordance with this privacy policy and our terms of use (Terms) regardless of whether or not you or your company purchases services from us. We do not knowingly collect protected information from individuals under 18 years old.

If you do not agree with this privacy policy or our terms of use, do not use our services.

Use Of The Platform By Individuals Outside Of The United States

Our services are intended only for use by companies located in the United States.

We make no representations that content and materials (licensed or otherwise) on the platform are legal or appropriate for use from outside the United States nor do we represent that this privacy policy is consistent with requirements outside the United States. If you choose to access the platform from locations outside the United States, to the fullest extent allowed by law, you do so at your own risk.

Information Received and Processed When You Access Or Interact With Our Platform

We facilitate our customers’ processing of protected health information and/or personally identifiable information through our customers’ subscriptions for and use of our services. For information about our collection, retention, storage, and destruction of PII and PHI please see the terms of your or your company’s subscriptions and related agreements you may have with R2. Except as stated in this privacy policy, no personal information is collected through this website.

Information Collected

Technical information.

When you access, use, or interact with our services, we collect non-personally identifiable information from you which we track and store. This information includes the use of the service, namely when and how many times you and other persons from your company use, access, or download information from and/or through our websites. We also retain and may further analyze the types of businesses that our visitors are in (e.g., at a hospital or a skilled nursing facility, consultant, financial institution etc.).

We may also collect certain non-personally identifiable information from you and your browser, including domain names, IP addresses, browser information, operating system information, or the particular pages and links that users access, use or visit.

The only time we ask you to provide information through our websites is when you request more information about our services or if you would like to have a demonstration of our services, or if you want to set up an account to use our services/apps. In these cases, we ask you to provide information such as your name and your email address, and what type of business for which you are making the inquiry or requesting access.

When you make such a request to us, please provide only your business email. Our services are not intended for individuals’ personal use. We do not want your personal email information.

We may store information you subsequently provide to us pursuant to your or your company’s subscription agreement, and matters relating to customer relationship management.

We do retain contact information in the course of negotiating, fulfilling, and enforcing our subscriptions and related agreements. Review the terms of your or your company’s agreements with us in regard to a subscription for our services as to how we receive, process, retain, and destroy protected information on your or your company’s behalf pursuant to your or your company’s access or purchase of our services.

If you made an initial inquiry to us about our services, or have requested a demonstration, and need to update your contact information, contact us at privacy@z-R2.com or by mail at 345 U.S. Highway 9, Suite 376 Manalapan, New Jersey 07726

How The Information Is Used

We may use the information you provide to us through our websites to respond to your inquiries about our services or to schedule a demonstration. We may also use your information to send administrative notices to you, such as information about maintenance on the platform, updates, or a change to this privacy policy

Protected Healthcare Information

Through your or your company’s use of our services, we may receive from you personally identifiable information (“PII”) or protected health information (“PHI”). We receive and handle this information in accordance with the terms of your or your company’s subscription and related agreements with us, and in accordance with applicable U.S. federal and state laws. We have no direct relationship with the individuals whose PII or PHI you or your company may process through our services. If you are such an individual, please contact your health care provider for more information about any such information the provider or its subcontractors may process through our platform. If you or your company is a Covered Entity, as defined by and subject to compliance with the Health Insurance Portability And Accountability Act, as amended (“HIPAA”) and if we are a “Business Associate” as defined under HIPAA with respect to you or your company’s PHI, then we process all PHI received from you or your company in accordance with our Business Associate Agreement with you or your company.

Cookies

We may use “cookies” to enhance your online experience and improve performance of the services. A cookie is a small file that your web browser will place on your hard drive or device. It allows us to remember you, enhance your experience and keep track of your

preferences and passwords if you enter the same as a registrant to one of our websites. Cookies allow us to deliver content specific to your interests and to save your password, so you do not have to re-enter it each time you visit our platform. Cookies may also help enhance security of our services by authenticating users, preventing fraud, and protecting you as you interact with our services. You can set your browser to reject cookies; however, this may affect your use of our platform.

Use Of Analytics Technology

We use Google Analytics to enhance navigation and functionality of our services, and to let us know how users are using the services, so we can make improvements, where necessary. The technology uses “cookies” (as described above) , “web beacons” and other methods to pass information from your web browser. The information collected about your usage collected through cookies and web beacons is transmitted to and stored on Google Analytics servers. Information about Google Analytics data retention policies can be found at https://link.edgepilot.com/s/e77268e6/3d9vJGCV-E_rVhgOjJwjfg?u=https://support.google.com/analytics/answer/7667196?hl=en.

You may also opt out of the use of cookies when used in connection with cookies by configuring your own browser settings directly to handle cookies. If you choose to opt out of cookies and web beacons, your choice may affect your ability to use the services.

We do not use the platform, or the information collected from the platform to send unsolicited advertisements. If you would like to end your discussions with us after you have requested information about our platform or requested a demonstration, please let us know by “opting out” of further correspondence. Please email our company with the subject “opt out” at privacy@z-R2.com or send a written opt out election by mail to R2, at 345 U.S. Highway 9, Suite 376 Manalapan, NJ 07726.

Payments

Payments for subscriptions and other services and products are not processed through our platform. Please see your or your company’s agreement with us for how payments are managed.

California Residents – Your Privacy Rights

Pursuant to section 1798.83 of the California civil code, residents of California can obtain certain information about the types of personally identifiable information that companies with whom they have an established business relationship have shared with third parties for direct marketing purposes during the preceding calendar year. In particular, the law provides that companies must inform consumers about the categories of personally identifiable information that have been shared with third parties, the

names and addresses of those third parties, and examples of the types of services or products marketed by those third parties. All requests in writing for this information should be sent to the attention of R2 by sending an email to: privacy@z-R2.com, or by writing to our company at R2, 345 U.S. Highway 9, suite 376 Manalapan, New Jersey 07726.

R2 does not disclose your personally identifiable information to third parties for direct marketing purposes.

California Do Not Track Disclosures

At present, we do not track platform users to provide targeted advertising, and therefore, we do not respond to do not track (or DNT) signals. If we change our policies, that information will be posted at, for example, www.z-R2.com/privacy.html and our privacy policy will be updated accordingly.

Aggregated Information

R2 may deidentify or anonymize protected information so that it may no longer be used to identify anyone. We may share or disclose deidentified or anonymized information, whether aggregated or otherwise, to analyze the effectiveness of our services, to improve and add features; to conduct routine business functions and to do research. From time to time, we may share generalized aggregate information about our services with third parties, publish the aggregated information or otherwise make it generally available. We will maintain the information in its deidentified or anonymized form at all times and will not try to reconstruct the identifiable elements unless required by law.

External Distribution Or Transfer Of Personally Identifiable Information And Confidential Information

Subject to the following paragraphs, R2 does not externally distribute protected information that is provided by our platform users, except if a user specifically authorizes or opts-in that certain of their personally identifiable information may be distributed to a third party.

Permitted Distribution Or Transfer Of Protected Information To Third Parties

Transferring protected information in connection with the following limited distributions is considered an onward transfer to third parties and is only permitted under this privacy policy as follows:

We may engage third parties to perform a variety of services and functions, including providing technical and hosting services for our platform. These third parties may have access to your personally-identifiable information if necessary to perform such services and functions; however, they are only authorized to use such protected information for the purpose of performing such services and functions, and are not authorized by us to

use any protected information for any other purpose. R2 may transfer your protected information in connection with the sale of R2’s assets, or a sale of any of its products or services, or in connection with a merger, reorganization or acquisition of R2.

We may disclose protected information to our affiliates, meaning an entity that is controlled by or under common control with R2. R2 affiliates abide by this privacy policy and may use protected information only in compliance with the provisions of this NPP.

We may also disclose user personal information to third parties if:

• We reasonably believe that the law requires it;
• Necessary to fulfill a contract with you and/or your company;
• Disclosure is necessary to protect our rights, or the rights of another user or person, or to prevent harm;
• Reasonably necessary, in our judgment, to protect z. PAX or its assets;
• To comply with law or with appropriate requests or directions made by law enforcement, government agencies or any court.

Third-Party Links

Our websites may contain links to other websites not operated or controlled by R2 or its affiliates. Our providing these links is for convenience and is not an endorsement of the sites or offerings. R2 is not responsible for any content, features, or activities of any linked third-party sites including their privacy practices. R2 does not control and accepts no responsibility for the privacy practices of third-party websites you may access. Any information you share with third-party sites is not governed by this NPP.

Third-party sites are governed by the privacy practices and terms of services of the specific sites. We encourage you to review the NPPs of these sites and contact the third-party sites directly for information about their privacy practices and terms of service.

R2 expressly disclaims all responsibility and all liability for the contents, features, and activities, and the collection and use of protected information by such third-party sites.

Security

R2 uses commercially reasonable safeguards to protect the security, integrity and privacy of all protected information provided to R2 by you both online and offline from loss, misuse, unauthorized access, disclosure, alteration, or destruction. We also use reasonable measures to protect your information by requiring that all our personnel and employees who have access to or are associated with the processing of your data respect your privacy and confidentiality. However, because no internet or electronic

transmission is ever absolutely secure, you must carefully consider what information you share with us, because we cannot guarantee, represent, or warrant that we will be able to block all attempted attacks or circumvention of our privacy and security practices on the platform.

Please see the terms of your or your company’s subscription agreement and related agreements as to R2’s data security practices regarding PII and PHI processed through our platform on your or your company’s behalf.

Disclaimers

z. PAX does not guarantee or warrant that the platform will be uninterrupted, without delay, error-free, omission-free, or free of viruses.

Limitation Of Liability

To the fullest extent allowed by law, in no event shall R2, and any officers, directors, advisors and/or employees of R2 be liable for any direct, indirect, incidental, special, exemplary, punitive, consequential or other damages whatsoever including, but not limited to, liability for loss of profits, reputation or goodwill, without regard to the form of any action, including but not limited to, contract, negligence or other tort actions, arising out of or in connection with any claim with respect to anyone’s privacy, this privacy policy or a violation of this privacy policy.

Although z. PAX uses reasonable security practices with respect to your personally identifiable information collected from and stored on our servers, z. PAX cannot guarantee that any of personally identifiable, protected information stored on our servers will be free from unauthorized access. To the fullest extent allowed by law, z. PAX disclaims and shall have no liability for any loss of, unauthorized access or damage to, or interception of any personally identifiable information stored on our servers, or transmitted to or from our portal when you access our platform, our proprietary products and database or download images therefrom.

To the fullest extent allowed by law, we will not be liable for any loss or damage caused by a distributed denial-of-service attack, viruses or other technologically harmful material that may infect your computer equipment, computer programs, data, or other proprietary material due to your use of our platform.

We do not ask for, nor do we want to receive your personal contact information through this platform. We ask all users to limit the information that you provide to us through this platform to your company’s information such as company name, company email and company address.

Governing Law

By accessing our services, you agree that any dispute with respect to privacy or this privacy policy is subject to this privacy policy and the terms of use of the platform (Terms), the governing law with respect to any dispute is New Jersey, without giving effect to any conflicts of law provisions.

Dispute Resolution And Jury Waiver

You agree that if any dispute or claim arises with respect to this privacy policy or any privacy issues, you will negotiate with us in good faith to resolve the issues. If a negotiated solution is not possible and legal action is started, the sole and exclusive jurisdiction for bringing any such action shall be in New Jersey and you waive any claim of inconvenient forum. Both you and we waive all rights to a jury trial.

Access, Review And Correction Regarding Information

To the extend provided by applicable law, you can access, review, correct or request deletion of the personally identifiable information that has been collected from you by e-mailing our company at privacy@z-R2.com, or by writing to our company at: 345 U.S. Highway 9, Suite 376, Manalapan, NJ 07726. We will not retaliate or discriminate against anyone who submits a good faith request to exercise their privacy rights.

General

This privacy policy, the terms of use of the services, and other supporting agreements specific to your use of our services, constitute the entire agreement between you and R2 about your access and use of the services. If any provision of any of these agreements is deemed invalid by a court of competent jurisdiction, the remaining provisions shall remain in full force and effect. R2’s failure to enforce any right or provision shall not be deemed a waiver of such right or provision. Headings are for convenience only and should not be given any interpretative effect.

Please refer to your or your company’s specific agreements with R2 for more information about our handling of PII and PHI processed through our services. Please also read our terms of use at: Terms

Notices and Contact Information

The site is operated by R2, 345 U.S. Highway 9, Suite 376 Manalapan, NJ 07726. All questions regarding the platform, this privacy policy or the terms of use shall be directed to our company by email at: privacy@z-R2.com or by writing to our company at: 560 Sylvan Ave, Suite. 3082,Englewood Cliffs NJ 07726.

Effective date

This privacy policy is effective as of July 1, 2024.