Patient Voices / TriVoca Health Privacy Policy

Effective Date: July 20, 2026

1. Introduction and Scope

This Privacy Policy describes how Health Insights, LLC dba TriVoca Health (‘TriVoca Health’), Patient Voices, Med Learning Group (‘MLG’), and their affiliated entities (collectively, ‘we’, ‘us’, or ‘our’) collect, use, disclose, store, transfer, and protect personal information. This Policy applies to website visitors, panel members, patients, caregivers, research participants, clients, vendors, and other individuals who interact with us.

2. Affiliated Companies

Patient Voices and TriVoca Health are part of the Med Learning Group family of companies. References to ‘we’, ‘our’, and ‘us’ may include affiliated entities supporting research, educational opportunities, advisory programs, compliance activities, operations, participant engagement, and related business functions.

3. Information We Collect

We may collect contact information, demographic information, health-related information (such as health conditions, diagnoses, treatments, medications, and symptoms), patient and caregiver experience information, information caregivers provide about children in their care, survey responses, interview responses, audio and/or video recordings, communications, device identifiers, browser information, IP addresses, geolocation information, participation history, incentive history, identity verification information, fraud prevention records, and information voluntarily provided by participants.

4. Sensitive Information

Where permitted by law and necessary for research activities, we may collect health-related information, consumer health data, and other sensitive information about patients and, where applicable, about the individuals for whom caregivers provide care. Caregivers who provide information about another individual, including a child in their care, represent that they are authorized to do so and, where the individual is a child, that they are the child’s parent or legal guardian. Such information is processed only for legitimate and disclosed purposes and subject to appropriate safeguards.

5. How We Use Information

We use personal information to administer panel membership; recruit and manage research participants; conduct research studies; administer surveys, interviews, advisory boards, online communities, and focus groups; communicate research opportunities; communicate health-related educational programs, patient community activities, webinars, and other health information resources (collectively, ‘Educational Opportunities’); administer incentives; verify identity and eligibility; prevent fraud; maintain security; comply with legal obligations; and improve our services.

6. Research and Educational Communications

Patient Voices, TriVoca Health, MLG, and affiliated entities may communicate with participants regarding research studies, patient advisory boards, Educational Opportunities, and other health-related resources. These are first-party communications based on a participant’s relationship with us and are not targeted advertising or cross-context behavioral advertising. Participants may opt out of non-required communications, subject to applicable processes.

7. Information Sharing

We may share information with research sponsors, clients, service providers, technology providers, incentive fulfillment vendors, identity verification providers, fraud prevention vendors, analytics providers, professional advisors, auditors, regulators, and affiliated companies where reasonably necessary to support research, educational engagement, compliance, fraud prevention, operations, and related business activities. These providers may assist with identity verification, fraud prevention, duplicate-participant detection, device intelligence, research quality review, and related research integrity activities.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising (such as targeted advertising across unrelated websites or applications).

We may disclose personal information where reasonably necessary to comply with applicable laws, regulations, subpoenas, court orders, governmental requests, law enforcement requests, regulatory inquiries, professional licensing investigations, fraud investigations, or other legal processes.

7.1 Corporate Transactions and Business Transfers

Patient Voices, TriVoca Health, Med Learning Group, and affiliated entities may transfer or disclose personal information in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of assets, corporate restructuring, or other business transaction. Personal information may be transferred as part of the assets involved in such a transaction, subject to applicable legal requirements.

8. Research Integrity and Fraud Prevention

To protect the integrity of our research and incentive programs, we may use identity verification, duplicate-account detection, device fingerprinting, IP analysis, geolocation analysis, participation pattern analysis, AI-response detection, attention checks, consistency checks, quality reviews, and other validation techniques.

9. Participant Eligibility Verification

Where participation is limited to individuals who meet specific eligibility criteria, we may verify and periodically re-verify reported health conditions, caregiver status, and other information necessary to determine and maintain eligibility.

10. Automated Processing

Certain fraud prevention, eligibility, and quality-control activities may involve automated processing or technology-assisted review. Human review may be used where appropriate.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. The applicable retention period is determined by the nature and sensitivity of the information, the purposes for which it is processed, and applicable legal, regulatory, tax, contractual, and client or research-sponsor requirements. Certain records, such as incentive records, tax records, verification records, and fraud investigation records, may be retained for extended periods where necessary to satisfy these obligations.

Notwithstanding the foregoing, retention periods may be extended where reasonably necessary to establish, exercise, or defend legal claims; investigate suspected fraud, abuse, or misconduct; comply with legal, regulatory, tax, contractual, or audit obligations; or protect the rights, property, or safety of Patient Voices, TriVoca Health, participants, clients, sponsors, or affiliated entities.

12. Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. No security system can guarantee absolute security.

13. Privacy Rights

Depending on applicable law, individuals may have rights to access, correct, delete, restrict, object to processing, appeal certain decisions, withdraw consent, or request information regarding the processing of their personal information. Identity verification may be required before responding to requests.

14. State-Specific Privacy Rights

The following provisions describe additional privacy rights that apply to residents of specific U.S. states. These state-specific rights supplement the general rights described in Section 13.

14.1 Washington Consumer Health Data

If you are a Washington resident, certain information may constitute consumer health data. Such information will generally be processed with consent or as otherwise permitted by applicable law, and additional rights may apply.

14.2 California Residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (‘CCPA/CPRA’), provides you with the following rights regarding the personal information we collect about you:

• Right to know and access: the right to request the categories and specific pieces of personal information we have collected, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we disclose it.
• Right to delete: the right to request deletion of personal information we have collected, subject to certain exceptions permitted by law.
• Right to correct: the right to request correction of inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing: the right to opt out of the sale or sharing of your personal information.
• Right to limit use of sensitive personal information: the right to limit our use and disclosure of sensitive personal information to the purposes permitted under the CCPA/CPRA.
• Right to non-discrimination: the right not to receive discriminatory treatment for exercising any of these rights.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA/CPRA.

To exercise any of these rights, contact us at compliance@trivoca.com. You may use an authorized agent to submit a request on your behalf. We may verify your identity before responding to your request and will respond within the timeframes required by the CCPA/CPRA. We will not discriminate against you for exercising your rights.

The table below identifies the categories of personal information we have collected about California residents in the preceding 12 months, the business or commercial purposes for which each category is collected, and the categories of recipients to whom we disclose it:

15. International Transfers

Personal information may be processed or stored in jurisdictions different from the participant’s location. Appropriate safeguards will be used where required by law.

16. Children’s Privacy

Our services are not directed to individuals under 18 years of age, and we do not knowingly collect personal information directly from children. Where a caregiver participates, the caregiver may provide information about a child in their care, including the child’s health-related information, for research purposes. In doing so, the caregiver represents that they are the child’s parent or legal guardian, or are otherwise authorized to provide the information and to consent to our processing of it as described in this Policy. Where we collect personal information about a child under 13 years of age, we do so only from the child’s parent or legal guardian, who provides consent on the child’s behalf, consistent with the Children’s Online Privacy Protection Act (COPPA).

17. Cookies and Tracking Technologies

Our websites and online services use cookies and similar tracking technologies, such as web beacons, pixels, log files, and local or session storage, operated by us and by our service providers. We use these technologies to enable core site functionality, remember preferences, measure and analyze site performance and usage, support security, and detect and prevent fraud. We do not use cookies or similar technologies for cross-context behavioral advertising or to build advertising profiles across unrelated websites or applications.

You can manage cookies through your browser settings, including by blocking or deleting them, although disabling certain cookies may affect the functionality of our services. Where required by applicable law, we seek to honor recognized opt-out preference signals, such as the Global Privacy Control (GPC).

18. Incentives and Rewards

We offer incentives and rewards to eligible participants in connection with research participation and related activities. We use personal information, such as participation history, incentive history, and tax-related information, to determine eligibility, calculate and deliver incentives, prevent fraud, and meet applicable tax and legal obligations. The terms governing eligibility, earning, redemption, and forfeiture of incentives are set out in the applicable Terms and Conditions, which govern the incentive program itself.

19. Changes to this Policy

We may update this Privacy Policy periodically. Material changes will be communicated through appropriate channels, which may include posting an updated version on our website.

20. Contact Information

Health Insights, LLC dba TriVoca Health
1130 Raritan Road, 2nd Floor
Cranford, NJ 07016
Email: compliance@trivoca.com