OUR PRIVACY POLICY We value and respect your privacy, and are committed to protecting it under this Privacy Policy. This Privacy Policy describes the types of information BHMS, INC., an Arizona corporation (“Company” , “we,” “us” or “our”) may collect from you (“User,” “you,” or “your”) or that you may provide through communications with us or other third parties, or when you use or access the website www.BHMS.co (the “Website”) and including any software, features, content, functionality, other services or products offered through the Website (collectively the “Services”). Please read this Privacy Policy carefully to understand our policies and practices for collecting, using, maintaining, protecting and disclosing your information. By accessing or using the Services, you agree to this Privacy Policy, including the collection, use and sharing of your information as described herein. If you do not agree with our Privacy Policy, you must not access or use the Services. This Privacy Policy is global, meaning it applies to all BHMS services. We may provide additional privacy policies for certain products or services.

CHANGES TO OUR PRIVACY POLICY We may revise this Privacy Policy from time to time. We shall notify you when such updates are made, and all changes are effective immediately when we post them. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Services and this Privacy Policy to check for any changes. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

TENANT & USERS ACCOUNTS Tenant Accounts. As part of the Services, there will be a primary registered account associated with a particular company or employer (the “Tenant Account”). That Tenant Account will provide access to other individual users to use the Services on behalf of such company or employer. Each such individual user will register for their own separate user account (each a “User Account”), and each User Account shall be linked to the Tenant Account. The user(s) that are granted access to the Tenant Account (each an “Administrator”), may control and manage details of the User Accounts, such as deciding their access rights, making decisions about a user’s personal information, or requiring users to take specific actions when using the Services. If the Administrator alters a user’s access rights, that user may lose access to certain information or features in their User Account. When using a User Account, your use may also be subject to the rules, policies and procedures of the business that manages the Tenant Account (ex. the policies of your employer). BHMS is not responsible for the privacy or security practices of any other business, including but not limited to businesses that manage a Tenant Account. You should contact the Administrator or other supervisor about such policies, and the information they will require, to determine how you will use the Services.

HIPAA AND HITECH COMPLIANCE This policy only applies to User Information that BHMS receives through your interaction with our website (www.BHMS.co) or that you provide directly to us through other means. We receive, maintain, use and disclose individually identifiable health information (also called protected health information or PHI) as the business associate of our clients who are health care providers and covered entities under HIPAA. We enter into business associate agreements with these clients and are responsible under HIPAA, the HITECH Act, and other applicable laws for the privacy and security of client PHI. To the extent you are a BHMS client, any PHI we receive from you is governed by our Business Associate Agreement. Website Privacy Policy - BHMS 1

INFORMATION YOU PROVIDE User Information: Information you provide to us on or through the Services may include: • Information you provide while creating a User Account, including your name, email address, profile name, or other information by which you may be identified (“personal information”). • Information you provide while creating a Tenant Account, including your name, your company’s name, contact address, biography, images, phone number, email address, credit card or other payment information, profile name, or other personal information. • Information you provide by filling in forms on the Services, posting materials, or typing search queries. • Information you provide when you contact customer support or report a problem with the Services, including your email address, and records and copies of such correspondence. • Information you provide in documents or other content you upload or send, including but not limited to text, videos, audio, and other materials photos, website links and screenshots, and reviewer comments and feedback, related to a digital document proof. • Information you provide in messages sent to other linked User Accounts for the purposes of using the Services. • You may be required to provide financial information before participating in any purchases or sales through the Services, and details to fulfill the transaction. User Contributions: You also may provide information to be posted, submitted, published, displayed or transmitted (“posted”) on the Services, to the Tenant Account, or other linked User Accounts (collectively, “User Contributions”). Your User Contributions are posted on and transmitted to others at your own risk. Although you may set certain privacy settings for such information by logging into your account or contacting support, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Services with whom you may share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons. Payment Information: All payments are processed by third-party payment processors, and all payment information that you provide is provided directly to such third parties. However, we may receive information, such as payment confirmation or receipts, from other third parties processing your payment.

USER INFORMATION WE COLLECT AUTOMATICALLY Types of Information: As you navigate through and interact with our Services, we may use automatic data collection technologies to collect certain information related to your usage, diagnostic and performance reports, including: • Usage: Details of your visits to our Services, including traffic data, usage details, location data, online status, log files and other communication data and the resources that you access and use on the Services. • Devices & Connection: Information about your computer, device and Internet connection, including your IP address, hardware model, operating system and browser type, and mobile network information. Types of Technology: The information we collect automatically is statistical data and does not include personal information, however we may maintain it or associate it with personal information we collect in other ways or receive from third parties. Technologies we use to collect data automatically may include: • Analytics Tracking: Pages of the Services may contain tracking codes that permit the Company to count users who have visited those pages, and for other related website statistics (for example, tracking visits to certain content, site performance and page speed, and search terms used to find the Services. • Cookies: A cookie is a small file placed on your device when you use the Services, and is used to remember your choices and preferences, or track your usage on the Services. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you disable or refuse cookies, some parts of the Services may be inaccessible or not function properly. Website Privacy Policy - BHMS 2

THIRD-PARTY INFORMATION Third-Party Providers: We may work with third-party service providers to help improve our Services. When you interact with third- party providers, you may be providing information directly to the third party. For example, all online payments are processed through third-party payment processors. We endeavor to work with payment processors and other providers that encrypt payment transactions and other data transfers with SSL or other comparable security technology, however we cannot, and do not, verify the security methods implemented or maintained by such third parties. Use of Information by Third Parties: We do not control third parties’ tracking technologies or how they may be used. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. Please note that when you use third-party services, their own terms of use and privacy policies will govern your use of their services. If you have any questions about such policies, you should contact the responsible provider directly. Third-Party Users: Other users of the Services may provide us with information about you, such as your contact information, or may provide other information through their User Contributions.

HOW WE USE YOUR INFORMATION us to: Purposes: Collecting this information helps us improve our Services and deliver a better, more personalized experience, by enabling • Share information you provide to the Tenant Account or other linked User Accounts, including visit activity, commenting, and email activity. • Provide the interactive file management features as part of our Services. • Store information about your preferences, allowing us to customize our Services according to your individual settings, and recognize you when you return to the Services. • Present, improve, fix, troubleshoot, customize and analyze our Services and its contents. • Estimate our audience size and usage patterns, and improve performance and speed of the Services. • Carry out our obligations, and enforce our rights under our Terms of Use and Privacy Policy, including to investigate any violations of our Terms, or other suspicious activity. • Provide you with notices and updates about your account, expiration and renewal notices, updates to the Terms of Use or Privacy Policy, or changes to the Services. • To communicate with you when you contact us, and provide you with information that you request from us. • To facilitate purchases and sales through the services, and to communicate with you regarding purchase or sales transactions you enter into through the Services. • To fulfill any other purpose for which the information is provided, or for any other purpose with your consent.

DISCLOSURE OF USER INFORMATION User Disclosure: Certain information that you provide through the Services may be available to others who use the Services, including your name, profile, email address, status or User Contributions. Other users that you communicate with may store or re- share your information with others. You may manage your user settings to adjust these features. Aggregated Data: We may disclose aggregated information (statistical data that does not identify any individual) about our users without restriction. Company Disclosure: We may disclose personal information that we collect or you provide: Website Privacy Policy - BHMS 3 • To buyers or other successors in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Company’s assets, in which personal information held by the Company about our Services users is among the assets transferred. • To subsidiaries, affiliates, contractors, service providers and other third parties we use to support our business, and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them. • If we reasonably believe disclosure is necessary or appropriate to enforce our Terms of Use, protect the rights, property, or safety of the Company, our customers or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection, credit risk reduction, billing and collection purposes. • To comply with any court order, law or legal process, including to respond to any government or regulatory request. • To fulfill the purpose for which you provide it, or any other purpose disclosed by us when you provide the information. • For any other purpose with your consent.

MANAGING USER INFORMATION Privacy Settings: You can review and change your user information and settings by logging into your account and visiting the Privacy Settings page. You may also send us an email at support@bhms.co to request access to, correct or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. Account Deletion: You may delete your account at any time by sending us an email at support@bhms.co. Please note that when you delete your account, all of your information may be deleted from our servers, except information we require to operate and provide the Services. However, deleting your account does not affect the information that has been stored or shared by other parties. Further, if you delete your User Contributions from the Services, copies of your User Contributions may remain viewable in cached and archived pages, or might have been copied or stored by other Services users.

SECURITY OF USER INFORMATION We, or through third-party service providers, have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure. Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about providing information in public areas of the Services like messaging threads. The information you share in public areas may be viewed by any user of the Services.

GEOGRAPHIC RESTRICTIONS All of our Services are hosted in the United States, are only intended for users within the United States, and we make no claims that the Services or any of its content are accessible or appropriate outside of the United States. Please note, that many countries may have laws governing data collection and use that differ from U.S. law. If you choose to use the Services from any other country or region of the world, you should be aware that you are transferring your personal information outside of that country or region to the United States for storage and processing, and that we may also transfer your data from the U.S. to other countries or regions in connection with the storing and processing of the data, fulfilling your requests, and/or operating the Services. Further, by using the Services, you may provide your information to users or third parties in countries outside the United States, regardless of where you are located when using the Services. By providing any information, including personal information, on or through the Services, you consent to such transfer, use, storage, and processing. Website Privacy Policy - BHMS 4

CHILDREN UNDER THE AGE OF 18 The Services are not intended for children under 18 years of age. No one under age 18 may provide any personal information on the Services, and we do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information on the Services, or on any of its features, do not make any purchases through the Services, register on the Services, or provide any information about yourself to us. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at: support@bhms.co.