PRIVACY POLICY FOR MEDIDOCS LLC

1. INTRODUCTION & REGULATORY SCOPE

MediDocs LLC (operating as blooddocs.org, "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy outlines how we collect, use, and safeguard your personal health data, stored medical directives, and user account information.

Please note that MediDocs LLC is not a HIPAA-covered entity and does not operate under HIPAA regulations. Instead, we operate as a direct-to-consumer digital document vault and are governed by standard consumer data privacy laws.

2. INFORMATION WE COLLECT

We collect the following types of information to provide and improve our Services:

• Personal Identification Information: Name, email address, phone number, physical address, date of birth, and account credentials.
• Personal Health Data & Directives: User-uploaded documents (e.g., Durable Power of Attorney, advance directives), medical conditions, emergency contacts, designated healthcare proxies, and conscientious decisions regarding blood fractions and medical treatments.
• Payment & Billing Information: Credit card details and billing addresses processed securely via third-party payment processors. MediDocs LLC does not directly store or process full credit card numbers on our servers; all payment data is managed securely by our third-party payment processor.
• Technical & Usage Data: Standard web logs, browser type, device information, and operational cookies necessary for site navigation and security. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent; however, if you do not accept cookies, you may not be able to use some portions of our account dashboard.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following operational purposes:

• To host, store, and manage your uploaded digital medical directives and personal account data.
• To generate user-controlled shareable links or access methods for your designated healthcare proxies and emergency contacts.
• To process transactions, manage subscriptions, and send billing receipts.
• To communicate with you regarding service updates, account security alerts, and customer support inquiries.
• To maintain server security, prevent fraud, and comply with applicable legal obligations.

4. DISCLOSURE OF YOUR INFORMATION

We do not sell your personal data or disclose your stored medical directives without your consent, except in the following limited circumstances:

• User-Authorized Sharing: To healthcare providers, emergency personnel, family members, and designated healthcare proxies via shareable links, access credentials, or tools explicitly configured by you.
• Trusted Service Providers: To trusted third-party service providers and vendors who assist us in operating our website, processing payments, or providing secure cloud hosting services on our behalf, under strict confidentiality obligations.
• Legal & Regulatory Requirements: As required by law, subpoena, court order, or governmental regulation, or when necessary to protect the rights, safety, and security of MediDocs LLC, our users, or the public.

5. SAFEGUARDING YOUR INFORMATION

We implement a variety of administrative, physical, and technical security measures to safeguard your personal health data and stored documents, including:

• Technical Safeguards: Data encryption in transit (SSL/TLS) and at rest, firewalls, secure server architecture, and access control protocols.
• Administrative Safeguards: Restricted employee access to databases and strict confidentiality controls.
• Physical Safeguards: Hosting data within secure cloud data centers featuring multi-factor access barriers and perimeter monitoring.

6. YOUR RIGHTS

You have the following rights regarding your personal health data, stored directives, and account information:

• Right to Access: You may view, download, or request copies of your stored personal information and documents at any time through your account dashboard.
• Right to Amend: You may edit, update, or correct your personal information and uploaded directives directly within your account settings.
• Right to Restrict Disclosures: You may manage, modify, or revoke sharing permissions and access links for third parties at your discretion.
• Right to Account Deletion & Erasure: You may cancel and delete your account at any time directly through the option in your account dashboard, or by emailing info@blooddocs.org. Upon cancellation or termination of your account, all associated data, uploaded documents, and personal information will be permanently and irreversibly deleted from our servers within 30 days.

7. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect operational changes or evolving legal standards. Any updates will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.

8. CHILDREN'S PRIVACY

Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we become aware that we have collected data from a child under 13 without consent, we will take steps to delete that information.

9. TEXT MESSAGE (SMS) ALERTS

If an account holder lists you as their Health Care Agent or Alternate Health Care Agent and confirms you agreed to receive alert texts, or adds their own mobile number for alerts, we first send one confirmation text. Only after a reply of YES do we use the number, and only to send automated emergency alert text messages when that account holder's emergency QR code is scanned (and, if shared, the general area where it was scanned). We keep a record of the consent, the confirmation and any opt-out. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time or HELP for help.

Mobile numbers, SMS opt-in data and consent records are never sold, rented or shared with third parties or affiliates for marketing or promotional purposes. They are shared only with our SMS delivery provider (Twilio) as needed to deliver the messages.

10. CONTACT US

If you have any questions, concerns, or privacy requests regarding this Privacy Policy or our data practices, please contact us at info@blooddocs.org.

MediDocs LLC