Privacy Policy

1. INTRODUCTION AND CONSENT

This privacy policy (the “Policy”) is designed to inform users of our online platform and website, https://www.kurist.com(collectively, the “Site”), and other users from whom we collect personal information, about how Kurist (“Company”) collects, uses, and shares personal information in connection with the services we provide. We (“Company”) collects, uses, and shares personal information in connection with the services we provide. We take individual privacy seriously and endeavor to inform you of our uses for information we obtain from you (collectively, “Personal Information”). We will take reasonable commercial steps to protect your privacy consistent with the guidelines set forth in this Policy and applicable federal and state laws. In this Policy, "user," “your,” or "you" refers to any individual from whom we obtain Personal Information, whether by browsing or creating an account on the Site or participating in any other activities or accessing services through Company. As the manners in which we obtain and use Personal Information may change, we encourage you to reread this Policy from time to time.

By accessing or using our Site, you acknowledge that you have read,understand, and agree to be bound by this Policy. You also consent toCompany’s transfer, storage, dissemination, and processing of anyPersonal Information we collect from you (as described in this Policy)for any of the purposes mentioned in this Policy. If you are locatedoutside of the United States, you consent to transfer your PersonalInformation through the Site regardless of whether the jurisdiction inwhich you are located has determined that United States laws andprocedures adequately protect your Personal Information upon transferto the United States. You acknowledge that any Personal Informationyou transfer may be received, stored, used, and further disclosed byCompany or an Expert in a jurisdiction where the laws relating to thesecurity and privacy of the Personal Information are different (andmay provide a lower level of protection) than the laws in thejurisdiction where you are located.

In addition, if you use the Site to transfer the Personal Informationof another individual (e.g., if you share a family member’s PersonalInformation through the Site, or if you are a licensed physician whoshares your patient’s Personal Information through the Site, for thepurpose of obtaining an expert second opinion), you are solelyresponsible for obtaining consent for the transfer from the otherindividual. The consent must be obtained in writing and in accordancewith all applicable law governing the transfer of the PersonalInformation in the United States and in the jurisdiction where theother individual is located. You agree to maintain the consent andprovide a copy of it to the Company upon request. Company makes norepresentation whatsoever as to the level of consent required to shareor transfer the personal information of another individual in anyjurisdiction.

If you do not agree to the terms of this Policy, do not use our Site.

2. INFORMATION WE COLLECT

We collect two types of Personal Information from you: (1) Second Opinion Information, and (2) Device Information. Except as expressly stated otherwise, any reference to your “Personal Information” in this Policy should be understood to mean both your Second Opinion Information and your Device Information.

SECOND OPINION INFORMATION

The Site allows users from around the world to connect with experts for the purpose of obtaining expert second opinions. When you create an account through and use the Site, or otherwise interact with us on the Site, via email, on the telephone, or in person, we may collect certain information related to the request for or provision of expert second opinion services. The exact type of this “Second Opinion Information” will vary depending on your specific use of the Site and whether you are a user seeking an expert second opinion or an expert rendering an expert second opinion. In general, Second Opinion Information may include, but is not limited to: first and last name, email address, telephone number, postal address, answers to periodic surveys, educational history, professional qualifications and licenses, professional identification or licensure or insurance numbers, employment history, current and past employer names, professional fee schedules, financial or payment information, and/or any medical records or information related to an underlying expert second opinion.

DEVICE INFORMATION

We may collect certain web tracking information about your device in connection with your use of and browsing of our Site. Depending on the circumstances, this “Device Information” may include, but is not limited to: information about your web browser (e.g., browser type, domain names, access times, and operating system), Internet protocol address (“IP address“), individual web pages or products that you view, the web pages or search terms that referred you to our Site, how you interact with our Site, time zone, and/or information about the cookies installed on your device. We may use cookies and navigational data like Uniform Resource Locators (“URLs”) to gather information regarding the date and time of your visit and the information for which you searched and viewed.

Cookies are small pieces of information that a website sends to your computer’s hard drive while you are viewing a website. We may use both session cookies (which expire when you close your web browser) and persistent cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Site. Cookies can generally be removed by following Internet browser help file directions. If you choose to disable cookies, some areas of our Site may not work properly. For more information about cookies, visit www.allaboutcookies.org

3. HOW DO WE USE YOUR INFORMATION?

In accordance with applicable law, we may generally use Personal Information for a variety of purposes including, but not limited to: providing or communicating with you regarding our services; maintaining or servicing user accounts; providing user service; processing orders and transactions; verifying user information; processing payments; providing analytic services; adding you to an email or newsletter subscription list; detecting security incidents that may compromise the confidentiality of Personal Information in our possession; maintaining or improving the quality or safety of our services; processing an employment application; and/or enforcing our legal rights or as required by applicable law or requested by any judicial process or governmental agency.

Additionally, we may use Device Information for specific purposes including, but not limited to: helping us screen for and prevent potential risk of fraud (in particular, through any IP address we collect from you); administering and optimizing our Site; making our services more useful to you; generating analytics about how our customers browse and interact with our Site; assessing the success of our marketing and advertising campaigns; and/or storing your user preferences.

In accordance with applicable law, Company will generally use only the minimum amount and scope of your Personal Information necessary to achieve the above purposes.

Please note that by posting or sending us messages, uploading files, inputting data, or engaging in any other form of communication through our Site, you are granting us a license to use the content of any such smessage, file, data, or communication.

4. HOW DO WE SHARE YOUR INFORMATION?

PERSONAL INFORMATION

We generally will not share or disclose Personal Information with any third-parties, except in accordance with applicable law under the following circumstances:

• When you have consented to us sharing or disclosing your Personal Information.
• When the Personal Information is shared with or disclosed to a parent company, subsidiary, joint venture, or other entity that has the same parent company as us in order to achieve any of the purposes described in Section 3.
• Subject to the terms of a confidentiality agreement, in connection with, and for the purposes of, a business deal (or negotiation of a business deal) involving the sale or transfer of all or a part of our business or assets. These deals may include any merger, financing, acquisition, or bankruptcy proceeding.
• With a third-party contractor engaged to provide management, administrative, support, legal, accounting, consulting, data storage or aggregation, financial, videoconferencing, email, translation or interpretation, billing or payment, or other services on our behalf (a "Contractor") which require the Contractor to have access to Personal Information. In this instance, we enter into an agreement with the Contractor limiting the Contractor’s use of the Personal Information to the minimum amount necessary to perform the services; requiring the Contractor to report any suspected or actual breach of security or other incident related to the Personal Information to us; and requiring the Contractor to adhere to the same level of privacy requirements that are required of us by all applicable law. By accessing or using our Site, you consent to our sharing your Personal Information with our Contractors and to our Contractors’ use of your Personal Information in accordance with all applicable law, this Policy, and the other terms and conditions applicable to our Sites.
• To detect, prevent, or otherwise address security, fraud, or technical issues.
• To enforce our contracts and agreements (including this Policy).
• To comply with legal obligations, processes, or requests, or to protect or defend our legal rights.
• To ensure the personal safety of any individual, including our employees and/or agents, Site users, or members of the public.

AGGREGATED INFORMATION

In our sole discretion, we may disclose any Aggregated Data that does not contain Personal Information to any third-parties for any reason.

NETWORK OPERATORS

Use of our Site may involve the use of third-party search engine operators or telecommunications carriers. These operators are not our Contractors, and any information that these operators collect in connection with your use of our Site is not a part of our collected Personal Information and is not subject to this Policy. We are not responsible for the acts or omissions of these operators.

5. YOUR RIGHTS REGARDING YOUR INFORMATION

PRIVACY SETTINGS / RIGHT TO REMOVE

If you would like your Personal Information, or any account you have with us, to be permanently removed from our database, please contact us by email at info@kurist.com or call +1(317)800-9266. We may ask you to provide a copy of your driver’s license or other identifying documents to assist us in processing your request. Company may still contact users who have requested that their Personal Information be permanently removed for administrative purposes. The removal of your Personal Information may take some time to complete, consistent with applicable law. Further, Aggregated Information is not subject to requests for removal.

ACCESSING AND UPDATING THE INFORMATION

Company will, to the best of our ability and in accordance with applicable law, allow you to access, review, correct, or add to your Personal Information held in our database. To do so, please contact us by email at info@kurist.com

6. ADDITIONAL POLICIES

SECURITY

In accordance with applicable law, we have put in place appropriate, commercially reasonable physical, electronic, and managerial procedures and security precautions to protect your Personal Information. However, no Internet transmission is completely secure, and we cannot guarantee that security breaches will not occur. We are not responsible for the actions of hackers and other unauthorized third-parties that breach our reasonable security procedures. This Policy is not intended to confer, nor does it confer, any rights or remedies to users or any third-parties.

THIRD-PARTY ACTIVITY (INCLUDING LINKS AND COOKIES)

Our Site may contain links to other websites, cookies, or other materials from, or which may be operated by, third-parties other than Company. The information practices and privacy policies of these third-parties may be different than ours. Company is not responsible for any actions or omissions by these third-parties. This Policy applies only to Personal Information collected by Company.

DATA RETENTION

Unless you ask us to delete your Personal Information sooner, we will maintain it until such time that we determine, in our discretion, it (1) is no longer necessary for any purpose for which Company may use it in accordance with this Policy; and (2) may be destroyed or deleted in accordance with applicable law.

DO NOT TRACK

We do not respond to Do Not Track (DNT) signals or requests. DNT is a web browser setting that informs a website that you do not want to be tracked.

AMENDMENTS

Company will review this Policy from time to time and may modify or amend it as necessary to comply with applicable law. We may also update the Policy to reflect changes to our practices or for other operational reasons. If we make any material changes to how Personal Information is collected, used, disclosed, or transferred, we will notify you of these changes by modifying the version of this Policy, which is available for your review on our Site. Accordingly, we encourage you to review this Policy from time to time. Notwithstanding any modifications we may make, all Personal Information will be treated in accordance with the version of the Policy that is/was in effect at the time the Personal Information was collected unless we obtain your consent otherwise.

COMPLAINTS

In the event you wish to submit a complaint about how we have processed any Personal Information, or to contact us for any other related reasons, please contact us by email at info@kurist.com

ACCESSIBILITY

Any person with a disability that prevents or restricts them from accessing this Policy through Company’s website may request a copy in an alternative format by contacting us by email at info@kurist.com

CHILDREN

Certain prominent data privacy laws including the Children’s Online Privacy Protection Act impose certain requirements on website operators that have actual knowledge that they collect Personal Information from children. Company does not knowingly collect or maintain Personal Information from persons under 16 years of age, and no part of our Site is directed at persons under 16. If you are under 16 years of age, please do not use our Site. If Company learns that Personal Information of persons less than 16 years of age has been collected without verifiable parental consent, Company will delete the Personal Information. In addition, if you are a licensed physician who shares the Personal Information of a patient who is under 16 years of age through the Site for the purpose of obtaining an expert second opinion, you are responsible for obtaining all applicable consents in accordance with Section 1.

WEBSITE VISITORS FROM OUTSIDE THE UNITED STATES

Company is located and operates in the United States, subject to the applicable state and federal laws of the United States. In accordance with Section 4 of this Policy, Company may contract with Contractors located in multiple geopolitical territories for the provision of data storage services, meaning that a server that stores Personal Information that has been collected from you may be located outside of the United States. Those who choose to access our Site do so on their own initiative and at their own risk, and are responsible for complying with all local laws, rules, and regulations. We may limit our Site’s availability, in whole or in part, to any person, geographic area, or jurisdiction we choose, at any time and in our sole discretion. We do not represent or warrant that our Site, or any part thereof, is appropriate or available for use in any other jurisdiction. If you choose to access or use our Site, you consent to the use and disclosure of information in accordance with this Policy and subject to such laws. info@kurist.com or calling +1(317)800-9266

7. NOTICE FOR RESIDENTS OF THE EUROPEAN ECONOMIC AREA, UNITED KINGDOM, OR SWITZERLAND

We do not market our services or the Site to residents of Europe, the United Kingdom (UK), or Switzerland, and are not subject to Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of Personal Information and free movement of Personal Information, known as the General Data Protection Regulation (“GDPR”). If you reside in the European Economic Area (“EEA”), UK, or Switzerland, please be aware that if you voluntarily provide us with any Personal Information, that information will be transferred from your location to data centers located in the United States for processing, and this transfer will be deemed to have been made with your consent as described in Section 1 of this Policy.

Although we are not subject to the GDPR, we will generally make commercially reasonable efforts to honor your data privacy rights upon request, subject to certain limitations. If you reside in the EEA, UK, or Switzerland, you have the right, as applicable under the GDPR, to the following:

• Request a description of the type(s) of Personal Information that we possess that pertains to you in an electronically portable format.
• Request that we correct or update Personal Information that pertains to you.
• Request that we delete Personal Information that pertains to you.
• Fully or partially withdraw your consent to the collection, processing, and/or transfer of your Personal Information.

If you believe we are unlawfully possessing your Personal Information, you have the right to complain to your local data protection supervisory authority. You can find contact details here

To request a description of the type(s) of your Personal Information that we possess, a correction or update to your Personal Information, deletion of your Personal Information, or to withdraw your consent to the collection, processing, and/or transfer of your Personal Information, please contact us by email at info@kurist.com or calling +1(317)800-9266. Once we receive your request, we will no longer process your Personal Information for the above purposes unless there are legitimate grounds for further processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.