NeoDeck Holdings Corporation - PatientVault™

Privacy Data Practices

Use this document to understand how NeoDeck Holdings, Corp. (PatientVault™) and our service providers release and secure your Personal Health Record (PHR) data. For your convenience, our Privacy Data Practices will be posted at www.PatientVault.com.

Maintaining the privacy and confidentiality of your information is NeoDeck Holdings Corporation's first priority. We only share personally identifiable information with others with your authorization and at the direction of the subscribing healthcare provider.

We will only release Personal Non Identifiable data for statistical purposes and furthermore, we keep activity logs of all transfers or uses of your information. We require limiting agreements that restrict what third parties can do with your personal data. If you discontinue your use of our services, we will stop releasing your personal data.

We have security measures that are reasonable and appropriate to protect personal information, such as PHR Data, in any form, from unauthorized access, disclosure or use. We only store PHR Data in the United States.

We will not share personal identifiable data and information with marketers.

We will not rent, sell, share personal identifiable information except in accordance with this policy.

Definitions

1.   PHR. "PHR"- "Personal Health Records"-  Stands for a web-based Personal Health Record. A web-based PHR is an electronic health data application that can help you collect, manage and share your health information. Web-Based PHR's may be offered by a hospital, insurance company, employer, or a commercial vendor.

2.   PHR Data.  When you sign up for a PHR, you provide, or the PHR company or its service providers, import information about you that becomes PHR Data. Any information in your PHR is considered PHR Data. PHR Data might include, but is not limited to:

• Your name and contact information, such as your address, phone number, or email address.
• Your medical history conditions, treatments, and medications.
• Your healthcare claims, health plan account numbers, bills, and insurance information.
• Demographic information, such as your age, gender, ethnicity, and occupation.
• Computer information, such as your IP Address, cookie preferences, location, and mobile device.

A PHR Company (and its service providers) may use your PHR Data to:

• Operate and manage its PHR Platform, software, and website.
• Maintain and protect its computer system.
• Comply with the law, such as responding to subpoenas and search warrants.

Personal Data and Statistical Data are two types of PHR Data.

3.  Personal Data.  Personal Data is any PHR Data that connects to you as an individual as names, health conditions, and other identifiers.

4.  Statistical Data.  Statistical Data is PHR Data that is (i) grouped so it does not connect to you as an individual and (ii) has names and other identifiers removed or altered.

5.  Personal Information.  Personal Information includes your PHR Data, as well as any other information about you that can be reasonably linked to you. Personal Information can also include but is not limited to financial information or social security number.

6.  Reporting. Companies and their service providers might report about their business and their costumers (You) to others, such as investors, auditors, potential business partners, or public communities.

7.  Limiting Agreements.  Limiting Agreements are legally binding agreements that prohibit certain third parties, which are not the PHR Company's Service Providers, from releasing your Personal Data or re-identifying individuals. Third parties can include advertisers, researchers, and others who receive PHR Data.

8.  Service Providers.  A Service Provider is an entity that is hired to perform certain functions for and operate under the direction and control of the PHR Company. Service providers may include software or website designers and data storage providers.

9.  Security Measures.  Security measures can include computer safeguards, secured files, and employee security training. PHR Companies may be required by law to notify you about particular data breaches.

10.  U.S. Only.  When Data is stored in the United States, U.S. law enforcement agencies may be able to prosecute if the data is stolen or breached.

11.  Activity Logs.  Activity Logs are the PHR Company and its service providers’ records of when PHR Data is created, accessed, modified, deleted, released, or exported in the PHR Program.

The practices described in this notice only apply to NeoDeck Holdings Corp., PatientVault™ and its service providers. These practices do not apply to any other organization, links, websites, programs, or applications that may be available through PatientVault™ or its service providers. Always read the policies of any company, website, application, or service where you provide your Personal Information.