Medical Data Technologies
Web Site Privacy Policy

Overview
Privacy is important to Medical Data Technologies Corporation ("Medical Data Technologies"), a responsible participant in the health care industry. Medical Data Technologies corporate policy is to protect the privacy and confidentiality of our customers and those individuals whose health care information may be identified within the transaction data services supplied by Medical Data Technologies to our customers. This Privacy Policy describes what information Medical Data Technologies collects and how that information is protected and used.

Medical Data Technologies operates under the following set of strict privacy principles:

• The only information Medical Data Technologies obtains about an individual visitor to its Web Site is information supplied voluntarily by that visitor.
• Information supplied by a visitor that could be used to identify or contact that visitor, such as name, e-mail address or other similar information ("Personal Information"), will not be disclosed to anyone unless the visitor indicates that Medical Data Technologies may do so.
• Medical Data Technologies may share statistical information about its visitors as a group, such as usage habits, demographics and similar information that cannot be used to identify or contact visitors ("Aggregate Information"), with any partner of Medical Data Technologies. However, Medical Data Technologies will not share Personal Information about a visitor at any time without the visitor's permission.
• Personal Information about an individual contained within e-health transactions, reports and other summaries derived from e-health transactions, or within administrative information necessary to conduct e-health transactions, that can be used to identify or contact that individual will be protected by Medical Data Technologies as "Individually Identifiable Health Information" in accordance with the requirements and definitions of the Health Insurance Portability and Accountability Act (HIPAA) of 1996 (Public Law 104-191) and any implementing regulations.
• Medical Data Technologies will also observe all other state and federal laws relating to transmission, storage, and access to medical records and other health care data.

The following describes our information gathering and dissemination practices for this Web Site:

Disclosure of Personal Information
Except as set forth herein, Medical Data Technologies will not disclose to unaffiliated companies any Personal Information about our visitors and customers. Any Personal Information provided to entities affiliated with Medical Data Technologies will be treated in accordance with the terms of this Privacy Policy.

Except as set forth herein, Medical Data Technologies will not disclose to unaffiliated companies any Personal Information contained within payment processing or e-health transactions. Any Personal Information provided to entities affiliated with Medical Data Technologies will be treated in accordance with the terms of this Privacy Policy.

Medical Data Technologies will consider, and may release, Personal Information to third parties to comply with law or to protect the rights, property or safety of Medical Data Technologies and our customers.

Medical Data Technologies may provide to third parties Aggregate Information that does not allow the individuals to be identified or contacted.

Registration
The Medical Data Technologies Site requires visitors to register either before accessing the Web Site or as a requirement to access specific portions of the Web Site. Registration includes the collection of contact information such as visitor name and e-mail address.

IP Addresses
An IP address is a number assigned to your computer for accessing the Internet. All computer identification on the Internet is conducted with IP addresses, which allow computers and servers to recognize and communicate with each other. Medical Data Technologies collects IP addresses in order to conduct system administration, report aggregate information to sponsors and advertisers, and to conduct site analysis. If a visitor requests pages from the Medical Data Technologies Web Site, the Medical Data Technologies servers enter the visitor's IP address into a log. To maintain visitor anonymity, Medical Data Technologies does not associate IP addresses with records containing Personal Information. However, Medical Data Technologies will use IP addresses to identify any visitors who refuse to comply with Medical Data Technologies terms of service, and to identify visitors who threaten our service, site, or customers.

Cookies
The Medical Data Technologies Site may place a text file called a "cookie" in the browser files of your computer. Cookies are pieces of information that a web site transfers to an individual's hard disk for record keeping purposes. The Medical Data Technologies Site uses cookies during your online session to confirm that access to our site is authorized and to control certain parameters of your communication session with our Site. Sponsors and advertisers may also use cookies if you select their advertisement; we are unable to control their use of cookies or how they manage the information they gather.

Payment Processing and E-Health Transactions
Some Medical Data Technologies Site features may use applications to collect data to facilitate a payment processing or e-health transactions. We will obtain your explicit permission to transfer this data to the third party to facilitate this transaction as part of the transaction processing service agreement you voluntarily enter into with Medical Data Technologies.

Medical Data Technologies may store this information to verify the transaction for customer service and accounting reasons and may use this information to help personalize your experience on the Medical Data Technologies Site. Medical Data Technologies may also share this information with other third parties on an aggregate basis, but not in any manner that would permit the third party to identify or contact individual users of our Site.

Medical Data Technologies will maintain and protect "Individually Identifiable Health Information" that it receives in connection with e-health transactions in accordance with the requirements of the Health Insurance Portability and Accountability Act (HIPAA) of 1996 (Public Law 104-191).

External Links
In order to provide visitors with greater value, Medical Data Technologies may provide links to various third party web sites. However, even if a third-party affiliation exists between Medical Data Technologies and that destination site, Medical Data Technologies EXERCISES NO AUTHORITY OVER LINKED SITES, EACH OF WHICH MAINTAINS INDEPENDENT PRIVACY AND DATA COLLECTION POLICIES AND PROCEDURES. Medical Data Technologies ASSUMES NO RESPONSIBILITY OR LIABILITY FOR THESE INDEPENDENT METHODS OR ACTIONS AND IS NOT RESPONSIBLE FOR THE INDEPENDENT POLICIES OR PROCEDURES OF DESTINATION SITES. SIMILARLY, Medical Data Technologies CANNOT TAKE RESPONSIBILITY FOR THE PRIVACY INITIATIVES OR THE CONTENT OF SUCH WEB SITES. THESE DESTINATION LINKS ARE PROVIDED ONLY FOR YOUR CONVENIENCE, AND AS SUCH, YOU ACCESS THEM AT YOUR OWN RISK. However, Medical Data Technologies wishes to protect the integrity of the Medical Data Technologies Web Site and its destination links, so any comments pertaining to the Medical Data Technologies Web Site or any sites accessed through Medical Data Technologies links are greatly appreciated.

Security
Medical Data Technologies combines industry-standard technical safeguards with employee policies to help prevent the loss, misuse or alteration of Personal Information under our control. Only authorized Medical Data Technologies employees, agents or independent contractors are permitted to access your Personal Information, and all such employees, agents and independent contractors must agree in writing to abide by Medical Data Technologies Privacy Policy. Those who violate the Privacy Policy are subject to disciplinary action, up to and including termination. Medical Data Technologies employs strict security measures to safeguard online transactions; Personal Information is stored in secured systems and is always encrypted when sent via Internet channels.

Despite these security measures, Medical Data Technologies DOES NOT REPRESENT OR WARRANT THAT PERSONAL INFORMATION WILL BE PROTECTED AGAINST LOSS, MISUSE OR ALTERATION BY THIRD PARTIES.

Online Service Agreement
Please see our Online Service Agreement for other terms and conditions governing your use of the Medical Data Technologies Web Site.

Privacy Policy Changes
Medical Data Technologies may change this Privacy Policy at any time by posting revisions to our Web Site. Your use of the Site constitutes acceptance of the provisions of this Privacy Policy and your continued usage after such changes are posted constitutes acceptance of each revised Privacy Policy. If you do not agree to the terms of this Privacy Policy or any revised policy, then please exit the Site immediately.

Contacting the Web Site
If you have any questions about this privacy statement, the practices of this Web Site, or your interaction with this Web Site, contact:

Medical Data Technologies, Inc.
P.O. Box 221515
Louisville, KY 40252-1515
webmaster@emedpro.com