Effective Date: October 1, 2026
Last Updated: October 1, 2026

Orvos Healthcare, LLC (“Orvos Healthcare,” “Orvos,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, maintain, and protect information when you visit OrvosHealthcare.com, communicate with us, submit information through our website, or otherwise interact with our services.

Because Orvos Healthcare provides healthcare-related services, certain information may also be subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and other applicable federal and state healthcare privacy laws. Protected Health Information (“PHI”) that Orvos Healthcare receives or maintains on behalf of healthcare providers or other HIPAA-regulated organizations is handled in accordance with applicable law and contractual obligations, including Business Associate Agreements where required.

We may collect information that you voluntarily provide to us, including:

• Name
• Email address
• Telephone number
• Company, healthcare organization, or practice name
• Professional specialty or role
• Mailing or business address
• Information submitted through contact, registration, or inquiry forms
• Communications you send to us
• Information related to your use of our services
• Other information you choose to provide

Healthcare organizations using Orvos Healthcare's clinical services may also provide patient-related information necessary to perform retinal screening, image interpretation, telemedicine, healthcare operations, or related services.

Such information may include PHI and is handled in accordance with HIPAA and applicable agreements between Orvos Healthcare and the healthcare organization providing the information.

Orvos Healthcare provides services to healthcare organizations that may involve the creation, receipt, maintenance, transmission, or processing of Protected Health Information.

When Orvos Healthcare acts as a Business Associate of a healthcare provider, health plan, or other Covered Entity, our use and disclosure of PHI are governed by HIPAA, applicable law, and the Business Associate Agreement between Orvos Healthcare and that organization.

We use PHI only as permitted by applicable law and our contractual obligations, including for purposes such as:

• Providing retinal screening and image interpretation services
• Supporting clinical workflows
• Returning screening or interpretation results to healthcare providers
• Healthcare operations permitted by law
• Maintaining and supporting our healthcare technology systems
• Quality assurance and service improvement where legally permitted
• Meeting legal, regulatory, compliance, and reporting obligations

Orvos Healthcare does not sell PHI.

Patients seeking access to, correction of, or other rights concerning medical information submitted to Orvos Healthcare by their healthcare provider should generally contact the healthcare provider or organization through which the service was received.

Unless a webpage is specifically identified as a secure method for submitting medical information, do not submit medical records, retinal images, Social Security numbers, detailed medical histories, or other sensitive health information through the general Contact Us, Join Our Network, email, or other public-facing website forms.

Healthcare organizations and authorized users should submit patient information only through Orvos Healthcare's approved secure systems and transmission methods.

When you visit our website, certain information may be collected automatically, including:

• Internet Protocol (IP) address
• Browser type
• Device type
• Operating system
• Pages visited
• Date and time of access
• Referring website
• General geographic information derived from an IP address
• Website usage and interaction information

We may use cookies, server logs, analytics technologies, and similar technologies to operate, secure, analyze, and improve our website.

Our website may use cookies and similar technologies to:

• Maintain website functionality
• Understand how visitors use our website
• Improve website performance
• Detect malicious or fraudulent activity
• Remember user preferences
• Measure website traffic and effectiveness

Your browser may allow you to block or delete cookies. Disabling certain cookies may affect the functionality of portions of the website.

Our website uses Google reCAPTCHA to help protect forms and systems against spam, abuse, and automated activity.

Use of reCAPTCHA may involve the collection of certain device, browser, and usage information by Google and is subject to Google's applicable Privacy Policy and Terms of Service.

We may use information we collect to:

• Provide and operate our services
• Respond to questions and requests
• Communicate with healthcare organizations and business partners
• Establish and maintain customer relationships
• Process requests to join our provider or professional network
• Provide customer and technical support
• Improve our website, services, and technology
• Protect the security and integrity of our systems
• Detect fraud, misuse, unauthorized access, or other security threats
• Perform administrative and business operations
• Comply with legal and regulatory requirements
• Enforce our contracts, policies, and terms
• Protect the rights, safety, and property of Orvos Healthcare, our customers, patients, providers, and others

Where PHI is involved, our use of such information will also be limited by HIPAA, applicable law, and applicable Business Associate Agreements or other healthcare agreements.

We do not sell personal information or PHI.

We may disclose information to third parties when reasonably necessary to operate our business or provide our services, including:

We may communicate screening information, clinical reports, images, findings, or other information to healthcare providers and organizations involved in providing or coordinating patient care.

Information may be made available to appropriately authorized physicians, ophthalmologists, retina specialists, or other healthcare professionals for screening, interpretation, consultation, or other authorized healthcare purposes.

We may engage vendors that provide services such as:

• Website hosting
• Cloud infrastructure
• Data storage
• Cybersecurity
• Email and communications
• Information technology support
• Healthcare technology
• Payment processing
• Analytics
• Professional services

When a vendor creates, receives, maintains, or transmits PHI on our behalf, we require appropriate safeguards and contractual protections, including Business Associate Agreements where required by HIPAA.

We may disclose information where we reasonably believe disclosure is required or permitted by law, including in response to:

• Court orders
• Subpoenas
• Government requests
• Regulatory investigations
• Law enforcement requests
• Legal proceedings

We may also disclose information when necessary to protect the rights, safety, or property of Orvos Healthcare or others.

Orvos Healthcare uses administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, alteration, loss, or disclosure.

Depending on the information and system involved, these safeguards may include measures such as:

• Access controls
• User authentication
• Encryption
• Secure transmission technologies
• System monitoring and logging
• Network security controls
• Security policies and procedures
• Workforce training
• Vendor security requirements
• Incident response procedures

No electronic transmission, network, or storage system can be guaranteed to be completely secure. Accordingly, while we maintain safeguards designed to protect information, we cannot guarantee absolute security.

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, meet contractual obligations, provide services, resolve disputes, enforce agreements, and comply with applicable legal and regulatory requirements.

PHI is retained in accordance with applicable healthcare laws, contractual requirements, records-retention policies, and Business Associate Agreements.

Our website and services are intended primarily for healthcare organizations, healthcare professionals, business partners, and adults.

Our public website is not directed toward children under 13, and we do not knowingly collect personal information directly from children under 13 through the general website.

Patient information relating to minors may be processed as part of healthcare services when submitted by an authorized healthcare provider, parent, guardian, or other authorized party and will be handled in accordance with applicable law.

Our website may contain links to websites or services operated by third parties.

Orvos Healthcare is not responsible for the privacy, security, content, or practices of third-party websites. We encourage visitors to review the privacy policies of any third-party websites they visit.

Email sent over the public Internet may not always be secure.

Unless specifically instructed otherwise through an approved secure process, please do not send sensitive medical information, PHI, Social Security numbers, financial account information, or other highly sensitive information to Orvos Healthcare through ordinary email.

Depending upon where you live and the laws applicable to your information, you may have certain rights concerning personal information, including the ability to request:

• Information about personal information we maintain about you
• Correction of inaccurate information
• Deletion of certain information
• Restrictions on certain uses of information
• Additional information regarding our privacy practices

Some rights may be limited by healthcare record-retention requirements, HIPAA, contractual obligations, or other applicable laws.

Requests regarding medical records or PHI that Orvos Healthcare maintains on behalf of a healthcare provider may need to be directed to the healthcare provider responsible for the patient's medical record.

HIPAA provides individuals with certain rights regarding PHI maintained by Covered Entities, including rights related to accessing and amending health information and receiving information concerning certain disclosures.

When Orvos Healthcare maintains PHI as a Business Associate for another healthcare organization, requests concerning these rights may need to be submitted directly to that healthcare organization.

Orvos Healthcare will cooperate with Covered Entities as required by HIPAA, applicable Business Associate Agreements, and applicable law.

Orvos Healthcare maintains procedures designed to identify, investigate, mitigate, and respond to suspected privacy or security incidents.

If a breach of unsecured PHI or other personal information occurs that requires notification under applicable law, Orvos Healthcare will provide or assist with legally required notifications in accordance with HIPAA, applicable state law, and contractual obligations.

If Orvos Healthcare is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, information may be transferred as part of that transaction subject to applicable legal requirements and privacy protections.

We may periodically update this Privacy Policy to reflect changes in our services, technology, legal requirements, or privacy practices.

When we make changes, we will revise the Last Updated date at the top of this page.

Material changes may also be communicated through additional means when appropriate or required by law.

Your continued use of the website following publication of an updated Privacy Policy means that the updated policy will apply to information collected after its effective date, subject to applicable law.

Questions regarding this Privacy Policy or Orvos Healthcare's privacy practices may be directed to:

Orvos Healthcare, LLC
2780 Southwest Wilshire Boulevard
Burleson, Texas 76028
United States

Phone: (972) 696-9071
Email: Sales@orvoshealthcare.com
Website: OrvosHealthcare.com

For questions specifically involving Protected Health Information, medical records, or HIPAA privacy concerns, please indicate that your request relates to Privacy/HIPAA so it can be directed to the appropriate individual.

© 2026 Orvos Healthcare, LLC. All rights reserved.