MGA HOMECARE PRIVACY POLICY

When you visit or use our Website, certain information is automatically collected from your device, including:

• The Internet Protocol (IP) address of your device and/or your Internet Service Provider (ISP)
• The type and version of Internet browser and operating system you use
• Websites visited before or after you visit our Website
• The date, time, and duration of your visit and the specific pages you access
• Country of origin of your device and language settings
• General geolocation data derived from your IP address

We use this information to monitor Website usage, assess performance, ensure technological compatibility, and conduct aggregate statistical analyses of visitor usage patterns.

We use the information we collect to fulfill your requests and to continually improve your experience. You have no obligation to provide us with any personal information, but you may not be able to access certain portions of our Website if you do not. We use the data we collect for the following purposes:

• For healthcare operations and service coordination
• For notification and communication purposes
• To facilitate payments
• To communicate with you about our products and services
• To provide customer support
• To allow you to register for specific programs
• To monitor and improve our Website performance
• To detect, prevent, and address technical and security issues
• To protect our rights or property or to prevent harm
• To conduct aggregate statistical analyses of visitor usage patterns
• To deliver relevant advertising based on your interactions with our Website, subject to your opt-out rights (see Section 6)
• To provide you with news, special offers, and information about our services, unless you have opted out
• For recruitment and employment purposes
• To comply with applicable legal requirements

We will store your information only for as long as needed for the above purposes or as required by applicable law.

MGA Homecare is committed to the security of your payment data. We do not capture, process, or store any credit card or payment information on MGA’s systems. Where we offer paid products or services, we work with third-party payment processors whose use of your personal information is governed by their respective privacy policies. In the event MGA Homecare inadvertently obtains any credit card or payment data, MGA will promptly delete all such information.

When you interact with our Website, we automatically collect information through the following types of tracking technologies:

• Cookies: Small data files stored on your device that allow us to recognize you on return visits and remember your preferences.
• Pixels and web beacons: Small files embedded in pages or emails that allow us to understand how you interact with our content.
• Server log files: Records of your browser, IP address, the pages you request, and other technical data about your visit.

We and third-party vendors acting on our behalf (including Google) may use first-party and third-party cookies and similar technologies to gather analytics about our Website and to serve advertisements tailored to your interests. These technologies may collect information about your visits to our Website and your interactions with our content and advertisements. They may be used to: (a) help deliver advertisements you might be interested in; (b) prevent you from seeing the same advertisements too many times; and (c) measure the effectiveness of delivered advertisements.

Please note: We do not permit the use of third-party advertising tracking technologies on pages where patients or caregivers are asked to provide health information.

Most browsers are initially set to accept cookies, but you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Consult the “Help” section of your browser or visit https://www.allaboutcookies.org/manage-cookies/ for more information. Please note that blocking certain cookies may prevent access to certain features or personalization on our Website.

You may also opt out of certain interest-based advertising by visiting:

• Network Advertising Initiative: http://optout.networkadvertising.org/
• Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout
• Digital Advertising Alliance: https://www.aboutads.info/choices

Colorado residents: We respond to browser-based Global Privacy Control (GPC) signals as required by the Colorado Privacy Act. A GPC signal from your browser will be treated as a request to opt out of the sale or sharing of your personal information for targeted advertising.

We also use email tracking systems that may provide data such as whether an email was opened, forwarded, or whether a link within it was clicked.

Personal information received by MGA Homecare may be stored and processed in the United States where we or our service providers maintain facilities. We will take all steps reasonably necessary to ensure that your information is treated securely and in accordance with this Privacy Policy. No transfer of your personal information will take place to an organization or country unless there are adequate controls in place as required by applicable law.

We share personal information only as described below.

Service Providers
We may employ third-party companies and individuals who have access to Personal Information to facilitate or provide services on our behalf. These service providers are obligated by written agreement to keep Personal Information confidential and to use it only to perform services on our behalf. Service providers include:

• Payment processors
• Payroll processors
• Data management services
• Marketing services
• CRM platform providers
• Security services
• Business Associates (as defined under HIPAA, where applicable)

Third Parties Required by Law or Regulation
Disclosures may be made, consistent with applicable law, to Health Institutions, Regulatory Agencies (e.g., the Food and Drug Administration), and Health Oversight Agencies (e.g., the Department of Health Services, federal or state agencies that oversee Medicare and Medicaid, and professional licensing boards).

Law Enforcement
Under certain circumstances, we may be required to disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

Legal Requirements
We may disclose your personal information in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of MGA Homecare
• Prevent or investigate possible wrongdoing in connection with the Website or our services
• Protect the personal safety of users of our services or the public

Merger, Sale, or Bankruptcy
If we sell all or part of our business, make a sale or transfer of our assets, are involved in a merger or transfer of all or a material part of our business, or are involved in a bankruptcy, MGA Homecare may transfer your information to the parties involved as part of that transaction.

No Sale of Personal Information
MGA Homecare does not sell, rent, or loan the personal information of its website visitors, users, customers, or clients to unrelated third parties for their own commercial purposes. To the extent that any sharing of personal information with third-party advertising or analytics vendors constitutes a “sale” or “sharing” as defined under applicable state privacy laws (including the CCPA/CPRA), you have the right to opt out of such activities as described in Section 11.

MGA Homecare uses commercially reasonable efforts to protect your personal information from unauthorized access, loss, misuse, alteration, or destruction, including through encryption, access controls, and secure server infrastructure. Please understand, however, that no data transmission over the Internet can be guaranteed to be 100% secure. We do not promise that your personal information or private communications will always remain private. You are also responsible for maintaining the confidentiality of your log-in credentials and taking reasonable steps to protect your information.

MGA Homecare is committed to complying with the Children’s Online Privacy Protection Act (COPPA). We do not knowingly collect Personal Information from children under the age of 13. If you are a parent or guardian and believe your child under 13 has provided us with personally identifiable information, please contact us immediately at compliance@mgahomecare.com. We will take steps to remove that information from our servers.

Colorado residents: The Colorado Privacy Act imposes additional requirements when our services are directed to or knowingly used by minors under 18, including prohibitions on using their personal information for targeted advertising. We comply with these requirements.

California residents: We do not sell or share the personal information of consumers under 16 years of age without affirmative authorization as required by the CCPA/CPRA.

Depending on your state of residence, you may have one or more of the following rights regarding your personal information:

Rights Available to All Website Visitors

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt Out: You may opt out of the sale or sharing of your personal information for targeted advertising purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights including the right to limit the use of sensitive personal information and the right to opt out of automated decision-making. Please visit our CCPA Consumer Privacy Policy at https://mgahomecare.com/ccpa-consumer-privacy-policy/ for full details. You may also request a notice disclosing the categories of Personal Information we have shared with third parties for direct marketing purposes by contacting us at the address in Section 13.

Colorado Residents (Colorado Privacy Act)

If you are a Colorado resident, you have the right to appeal our decision regarding a privacy rights request. We will respond to Global Privacy Control (GPC) signals as opt-out requests for targeted advertising and the sale of personal data. For appeals, contact us at compliance@mgahomecare.com.

Washington Residents (My Health My Data Act)

If you are a Washington resident, you have additional rights under the Washington My Health My Data Act with respect to consumer health data, including information that identifies your past, present, or future physical or mental health status. To exercise your rights under the WMHMDA, please contact our Privacy Officer using the information in Section 13.

Texas Residents (Texas Data Privacy and Security Act)

If you are a Texas resident, you have rights to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of the processing of your personal data for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise your rights, please contact us using the information in Section 13.

How to Submit a Privacy Rights Request

To exercise any of the rights described above, please contact us:

• By email: compliance@mgahomecare.com
• By phone: (844) 399-5338
• By mail: MGA Homecare, Attn: Privacy Officer, 7025 North Scottsdale Road, Suite 200, Scottsdale, AZ 85253

We will respond within the time frame required by applicable law (generally 45 days, with extensions as permitted). We may need to verify your identity before processing your request.

Our Website may contain links to other websites or mobile applications not operated by us, such as Facebook, Instagram, Twitter/X, LinkedIn, and YouTube. If you click a third-party link, you will be directed to that third party’s website or mobile application. We strongly advise you to review the privacy policy of every website you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites, mobile applications, or services.

We are committed to working with you to resolve any questions or concerns regarding this Privacy Policy or our treatment of your Personal Information. Please contact us:

By Mail:
MGA Homecare
Attn: Privacy Officer
7025 North Scottsdale Road, Suite 200
Scottsdale, AZ 85253

By Phone: (844) 399-5338
By Email: compliance@mgahomecare.com

To file a complaint with the Office for Civil Rights (OCR) regarding your HIPAA rights, visit https://www.hhs.gov/hipaa/filing-a-complaint/index.html or email OCRComplaint@hhs.gov. We will not penalize or retaliate against you in any way for filing a complaint with the federal government.

We may make changes to our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy to the Website and updating the “Last Updated” date at the top of this page. You are advised to review this Privacy Policy periodically. Changes are effective when posted. Your continued use of the Website following posting of changes constitutes your acceptance of such changes.

This Website Privacy Policy does not govern Protected Health Information (PHI). All PHI is governed by MGA Homecare’s HIPAA Notice of Privacy Practices, available at https://mgahomecare.com/notice-of-privacy-practices/.