THE SYSTEMS

Consumer Health Data Privacy Notice

Effective date: September 25, 2026

A Squared Medical Corporation, PC handles information about people seeking health services. This notice explains the application data and choices that may receive additional protection under state consumer health data laws. It applies where such a law governs particular information, including information that identifies someone as seeking health services. Other health and privacy protections may also apply. See our Website and Applicant Privacy Notice and Notice of Privacy Practices.

What we collect and where it comes from

We collect contact and account information, date of birth, address and information showing that you sought to apply. The application asks about health goals, symptoms, conditions, medications, allergies, mental, reproductive and sexual health where relevant, and family health history. Information can come directly from your answers and messages, your sign-in and application activity, and technical requests your browser sends to our service. We create submission status, staff review records, privacy-request records and the notices and permissions you actually receive or give. We do not infer new health diagnoses from public-site browsing for advertising.

Why we use it

We use the minimum information needed to create and secure an account, save and assess an application, check age and possible service location, contact you about your application, respond to your requests, meet applicable record duties and protect the service. An adult in any U.S. state may apply, but an application does not promise care in that state. We do not use application health data for behavioral advertising, sale or general-purpose AI training.

Who receives it

Authorized practice personnel may access data for assigned application review, support, privacy and security work. Providers that host the website and application, store its database, authenticate accounts and deliver necessary email process the information needed for those services. We do not disclose application health data to an affiliate for that affiliate's own purposes, and no affiliate is part of the described application review. We do not share this data with advertising networks. If another recipient or purpose is proposed, we will update the notice and obtain any required separate permission before that sharing begins.

We may disclose a limited record when a specific law requires or permits it. We will apply the rule that governs that particular record, including any stricter health-record rule. A service provider's technical access and a legally required disclosure are not permission for unrelated use.

Consent and withdrawal

Where required, we ask for a clear, separate opt-in before collecting consumer health data for a specified purpose. We do not obtain that opt-in from general terms, a privacy-notice acknowledgment, a prechecked box or use of the site. We ask separately before any sharing that requires its own consent. The application does not include an optional health-data-sharing choice by default. Declining a required collection consent means you cannot submit the health application, but you can browse the public website and contact us about privacy. Withdrawing consent stops future processing based on that consent, subject to lawful obligations and processing already completed.

Access, correction, deletion and appeal

You may ask us to confirm whether we handle your consumer health data, see it and receive information about recipients, request a correction, withdraw consent or request deletion. Applicable laws may also allow an appeal if we decline to act. Email privacy@thesystems.com, call (714) 242-8927 or write to Brian, Privacy Officer, A Squared Medical Corporation, PC, 10340 Beach Boulevard, Stanton, CA 90680. You can begin a request without sending health details by ordinary email. We may use a secure account channel or another reasonable method to verify identity. We will assess the request under applicable law, explain a lawful exception or denial and tell you how to appeal when an appeal right applies. We do not retaliate for exercising a privacy right.

Our application handling baselines are described in the Website and Applicant Privacy Notice. A default retention period does not override a valid deletion right. If a law permits delayed removal from an archive or backup, the copy remains protected and is not returned to routine use.

Changes and online tracking

We post a material change with a new effective date and request any additional consent before a new category, purpose or recipient requires it. We do not permit a third party to collect consumer health data through this application across other companies' websites or online services for advertising. We do not use geofencing around health care facilities to identify or target people seeking services.