PRIVACY AND DATA PROTECTION NOTICE

THIS PRIVACY AND DATA PROTECTION NOTICE (the “Notice”) is hereby promulgated by Digitixmd LLC, a Pennsylvania limited liability company (“Digitixmd LLC,” “Company,” “we,” “us,” or “our”), in consideration of and subject to the following recitals, terms, conditions, and stipulations, which shall be deemed to constitute binding representations and disclosures to any natural person or legal entity (“User,” “Data Subject,” “you” or “your”) that accesses, interfaces with, or otherwise utilizes the website located at https://digitixmd.com (the “Site”) and/or procures, subscribes to, or otherwise engages the Company’s goods, durable medical equipment, or services (collectively, the “Services”).

1. Recitals and Construction

WHEREAS, Digitixmd LLC, in the ordinary course of its lawful business, collects, receives, stores, transmits, processes, and/or otherwise manipulates certain information pertaining to identified or identifiable natural persons;
WHEREAS, Digitixmd LLC provides products and services which may, in certain instances, involve the collection and Processing of Protected Health Information (“PHI”) as defined under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations;
WHEREAS, Digitixmd LLC has adopted additional internal and external Notices of Privacy Practices (“NPP”) to ensure compliance with HIPAA and all related regulations; and
WHEREAS, Digitixmd LLC desires to set forth herein its disclosures and undertakings with respect to Personal Data, PHI, and other related information, consistent with applicable federal, state, and international data-protection statutes, regulations, ordinances, and directives (collectively, “Applicable Privacy Law”);
NOW, THEREFORE, in consideration of the foregoing recitals, which are hereby incorporated as material provisions of this Notice, Digitixmd LLC publishes the following articles:

2. Definitions

2.1 “Personal Data” shall mean any and all data or information which identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular natural person.
2.2 “Protected Health Information” (PHI) shall have the meaning ascribed to it under 45 C.F.R. § 160.103 and shall include any individually identifiable health information transmitted or maintained by Digitixmd LLC in connection with the provision of healthcare-related products or services.
2.3 “Processing” shall mean any operation or set of operations performed upon Personal Data or PHI, whether or not by automated means.
2.4 “Business Purpose” shall mean any lawful purpose necessary to effectuate the Services or Digitixmd LLC’s legitimate business interests as permitted by Applicable Privacy Law.
2.5 Other capitalized terms shall have the meanings ascribed to them within the body of this Notice.

3. Categories of Data Collected

Digitixmd LLC may collect the following non-exclusive categories of information:

• Identifying information (e.g., name, address, contact details);

• Insurance eligibility, policy numbers, and related PHI;

• Health-related data necessary for verification or equipment delivery, subject to HIPAA safeguards;

• Transactional data, including payment and order history;

• Device identifiers, IP addresses, browser information, and analytics data; and

• Communications voluntarily submitted by the User.

Detailed descriptions of how PHI is specifically collected, used, and disclosed under HIPAA are provided in the following Notices of Privacy Practices, which form an integral part of this Privacy Policy:

• Your Rights

• Layered HIPAA Notice for Healthcare Providers

4. Purposes of Processing

Digitixmd LLC shall Process Personal Data and PHI for Business Purposes, including, but not limited to:

• Verification of insurance coverage and eligibility;

• Order fulfillment and shipment of medical products;

• Billing, reimbursement, and payment processing;

• Regulatory and legal compliance under HIPAA, the CCPA, and other statutes;

• Customer support and dispute resolution;

• Fraud detection, prevention, and auditing; and

• Maintenance of internal business records, analytics, and service improvements.

All Processing of PHI shall be performed in accordance with Digitixmd LLC’s Notice of Privacy Practices (Full Page) and any supplementary versions referenced above.

5. Disclosure to Third Parties

Digitixmd LLC may disclose Personal Data or PHI under the following circumstances:
(a) To Service Providers performing functions on its behalf under Business Associate Agreements (“BAAs”) as required by HIPAA;
(b) To Healthcare Providers or Insurers for coordination of care, insurance verification, or claims processing;
(c) To Governmental or Regulatory Authorities as required by law, court order, subpoena, or administrative process;
(d) To Successors or Acquirers in connection with a merger, acquisition, restructuring, or sale of assets; and
(e) To Users’ Authorized Representatives as directed by written authorization.

Each such disclosure shall be governed by the terms of the relevant NPP and by applicable BAAs, as referenced in:

• Layered HIPAA Provider Notice.

6. Cross-Border Transfers

User acknowledges and consents that Personal Data and PHI may be stored or processed on servers located outside their jurisdiction, including within the United States, subject to appropriate HIPAA-compliant safeguards and Applicable Privacy Law.

7. Retention and Security

Digitixmd LLC shall retain Personal Data and PHI only for as long as necessary to accomplish the Business Purposes or as required by Applicable Privacy Law.
Digitixmd LLC implements administrative, technical, and physical security measures consistent with HIPAA’s Security Rule and industry standards.

8. Data Subject Rights

Users and Data Subjects, including patients or covered individuals under HIPAA, may exercise the following rights:

• Right of Access to PHI;

• Right to Request Amendments;

• Right to Accounting of Disclosures;

• Right to Request Restrictions;

• Right to Confidential Communications;

• Right to Obtain Copies of applicable NPPs.

Requests to exercise these rights may be submitted via written correspondence to the address in Section 12.

9. Cookies and Similar Technologies

The Site employs cookies and analogous tracking technologies for authentication, analytics, and personalization. Such technologies do not access PHI and operate independently of any HIPAA-governed Processing.

10. SMS Compliance Statement

Digitixmd LLC complies with all applicable federal and state laws governing SMS communications, as well as The Campaign Registry (TCR) standards.

We collect mobile phone numbers only for service-related text messages such as order updates, appointment reminders, or important notifications related to our products and services.

Mobile opt-ins or phone numbers collected for SMS purposes are never shared, sold, or disclosed to any third party or affiliate company for marketing or promotional use.

This policy helps ensure secure, compliant business texting and protects our customers from spam or unauthorized messaging.

11. Amendments

Digitixmd LLC reserves the right to amend, modify, restate, or otherwise revise this Notice at any time. Updates shall be posted to the Site, and the Effective Date will be revised accordingly.
If revisions impact HIPAA-related privacy practices, updated versions of the NPPs listed above will likewise be published and linked accordingly.

12. Governing Law and Forum

This Notice, and any dispute arising hereunder, shall be governed by the laws of the Commonwealth of Pennsylvania without regard to its conflict-of-law principles. Jurisdiction shall vest exclusively in the courts situated within said Commonwealth.

13. Contact

All notices, requests, or communications regarding this Notice shall be directed to:

Digitixmd LLC — Privacy Compliance Officer
3103 Philmont Ave, Ste 318, Huntingdon Valley, PA 19006
Email: info@digitixmd.com

For requests relating specifically to PHI or HIPAA matters, Users should refer to:

• Layered HIPAA Provider Notice (PDF), or

• Full Page HIPAA Notice of Privacy Practices (PDF).