General Privacy Policy

Last Modified: October 13, 2025

For more information or if you have any questions about this privacy statement (“Privacy Statement”), please contact us at support@headsup.health.com.

Summary of Privacy Statement

This is a summary of our General Privacy Policy. Please read the entire Privacy Policy below.

headsuphealth.com (the “Site”) is owned and operated by HeadsUp Health LLC (“we”, “our”, or “us”). The Site allows you to review our services that allow you to keep track of your health records. As used herein, “Site” includes the website located at  headsuphealth.com. For privacy policies concerns our web and mobile applications, please visit our Provider Portal Privacy Policy or Patient User Privacy Policy, as applicable. Naturally, because of what we do, your privacy is extremely important to us. This privacy statement describes how we collect, store, and use your personal information. This General Privacy Policy may change, so please check here periodically for updates. Using the Site after we make changes to this document means you agree to be bound by the updated General Privacy Policy.

Data Safety and Use
We do not share your data with 3rd parties without your explicit authorization.  We may analyze de-identified Data from visitors to our Site. De-identified data will not identify you personally. Deidentified data can be used as statistical information to determine such things as user demographics and usage patterns for our Site.

Data Collected and Use

Data Collected	Category	Collection Requirement	Use
First Name	Personal Information	Optional	Account Management
Last Name	Personal Information	Optional	Account Management
Email Address	Personal Information	Optional	Account Management, App functionality
Telephone Number	Personal Information	Optional
Address	Personal Information	Optional
City	Personal Information	Optional
State	Personal Information	Optional
Country	Personal Information	Optional
General Organization Information	Personal Information	Optional
IP Address	Personal Information	Optional
Browser	Personal Information	Optional
Browsing Device	Personal Information	Optional

Notice Regarding Children
This Site is designed for use by adults over the age of 18. If you’re under age 18, do not use this Site.

What is Personal Information?
Personal Information – or PI for short – is information about you that identifies you, and may include things like your IP address, web browser, browsing device, your name, email address, telephone number, address, city, state, country, and general organization information.

How do we collect your Personal Information PI Data?
If you give us PI Data, we will store it for as long as it is reasonably necessary to provide the Site, but no longer than prohibited by applicable law. If you ask us to, we will delete, confirm, or change the PI Data we maintain about you.

How do we store and protect your PI Data?
The security of your PI Data is important to us. While no web site can guarantee 100% security, we maintain physical, administrative, electronic, technical and procedural safeguards to help protect your PI Data, such as Secure Socket Layers (“SSL”) technology. If our security is breached, we will inform you promptly.

How do we use and share your PI Data?
We use your PI to make our Site do what you want it to do at a particular time. For example, we may use your data to enable the Site to run properly for you, including by using cookie tracking technology as described herein. We may email you about promotions, specials, and products or services we think you may be interested in should we obtain your consent to do so as required by applicable law. We use general information about our users, which is not PI, to analyze how users interact with our Site and to improve how it works. For example, we might analyze when most users are most likely to visit the Site and use that information to make sure our servers are at top performance during those times.

Residents of California and the European Economic Area have additional privacy rights. Please read the applicable sections below, in the full Privacy Statement, to understand your rights if you reside in either California or the European Economic Area.

Privacy Statement

1. Personal Information

Your privacy is very important to all of us at HeadsUp Health LLC (“HeadsUp” or “Company”). We have established this privacy statement (“Privacy Statement”) to explain how we collect, protect, use, and store your personal information. Personal information is information about you that is personally identifiable, such as your name, email address, and other information, that is not otherwise publicly available (“Personal Information”). We may collect Personal Information when you use our website or through emails, or text messages (collectively, the “Site”).

By visiting this Site, you agree to be bound by the terms and conditions of this Privacy Statement and General Privacy Policy. If you do not agree, please do not use or access this Site. HeadsUp may modify this Privacy Statement from time to time and post such modifications here on this Site. The date the Privacy Statement was last revised is identified at the top of the page. If we make subsequent material changes to how we treat our users’ information, we will notify you by updating this page on the Site. You are responsible for ensuring we have an up-to-date active and deliverable email address for you (if applicable), and for periodically visiting our Site and this Privacy Statement to check for any changes. Your continued use of the Site after any such modification constitutes your acceptance of the modified agreement. By registering or subscribing through this Site, you expressly consent to our use and disclosure of your Personal Information in accordance with this Privacy Statement.

2. Applicability of this Privacy Statement

This Privacy Statement applies solely to the Site and provides you information on the specific information that HeadsUp may collect from you via the Site and how HeadsUp may use it in connection with the Site, whether you are using the Site as a patient, medical provider, or other. We have established this Privacy Statement to explain to you how your personal information is collected, protected, and used. Personal information is information about you that is personally identifiable, such as your name, address, phone number, email address, and computer information, such as your IP address and “cookie” preferences that is not otherwise publicly available (“Personal Information”).

3. Information Collection

HeadsUp collects Personal Information from you through the Site to allow us to provide marketing and promotional services that will most likely meet your needs and preferences. We only collect Personal Information about you that we consider necessary for achieving this purpose.

In general, you can browse the Site and decide to not provide us with any Personal Information. Of course, this may affect the performance of the Site. If you agree to provide us with Personal Information, you are no longer anonymous to us. If you choose to use certain services through this Site, we may require you to provide contact and identity information, and other Personal Information as indicated on the forms throughout the Site. Where possible, we indicate which fields are required and which are optional. You always have the option to not provide information by choosing not to use a particular service.

We may track certain information based upon your behavior on the Site. We use this information to do internal research on our users’ demographics, interests, and behavior to better understand our customers. This information may include the URL that you just came from, which URL you go to next, your computer browser information, and your IP address.

If you send us personal correspondence, such as emails or letters, or if other users or third parties send us correspondence about your activities or postings on the Site, we may collect and retain such information in a file specific to you.

4. Use and Disclosure of Your Personal Information

We use your Personal Information to facilitate our Site. You agree that we may use Personal Information, including any email address provided, to improve our marketing and promotional efforts, to analyze Site usage, to improve our content and service offerings, and to customize the Site’s content, layout, and services.

We will not disclose your Personal Information to third parties except to:

Service providers who are bound by law or contract to protect Personal Information and are only allowed to use Personal Information in accordance with the terms of our service agreements with them.

Effect a merger, acquisition, or otherwise; to support the sale or transfer of business assets; to enforce our rights or protect our property; to protect the rights, property, or safety of others; investigate fraud; respond to a government request; or as needed to support auditing, compliance, and corporate governance functions. We may also disclose Personal Information to defend ourselves in litigation or a regulatory action. We may also disclose Personal Information when required or advised to do so by law, such as in response to a subpoena, or similar legal process, including to law enforcement agencies, regulators, and courts in the United States and other countries where we operate.

We encourage business partners to adopt and post privacy policies. However, the use of your Personal Information by such parties is governed by the privacy policies of such parties and is not subject to our control.

We may also disclose information that is anonymized and not personally identifiable. For example, we may provide our business partners, or other third parties with reports that contain aggregated and statistical data about our Site visitors.

5. Aggregate Data

We may aggregate and de-identify (anonymize) data collected via the Site. This data will be anonymous and cannot be connected to an individual visitor. We may use this data for insights, analytics, statistics, research, communications, marketing, trending, and benchmarking purposes. We may use aggregate data to understand the needs of our community of Site visitors and determine what kinds of programs and services we can help provide.

You may withdraw your consent to participate in anonymized insights by contacting support@headsup.health.com.

6. Other Use and Ownership

We maintain full rights to any information collected on this Site, and may freely collect, use and disclose such information unless prohibited by this Privacy Statement or applicable law as stated above.

7. Communications from the Site

We may occasionally send you information on our service offerings should you sign up to receive them. Out of respect for your privacy, we provide you with a way to unsubscribe from each of these communications. If you no longer wish to receive our promotional communications, you may opt out of receiving them by following the instructions included in each such communication or by contacting us at support@headsup.health.com.

8. Security

The security of your Personal Information is important to us. We follow generally accepted industry standards to protect personal information, including your email address, submitted to us, both during transmission and once we receive it. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. Accordingly, and while no web site can guarantee security, we maintain physical, administrative, electronic, technical and procedural safeguards to help protect your personal information collected via the Site as required by applicable law. While we cannot guarantee that loss, misuse or alteration to data will not occur, we use industry standards, such as Secure Socket Layers (“SSL”) technology, to help safeguard against such occurrences.

Our data center is both physically and electronically secure. Our servers are protected from open access to the Internet by using firewall and encryption technology. We limit access to personally identifiable information about you to our employees and third-party agents, who we reasonably believe need to have access to your information to provide you with the information or services you request via the Site.

In the event that a breach in our security systems occurs and there is a possibility that an unauthorized person acquires your personal information, we will notify you of such a breach as may be required by applicable law.

9. Access

We will maintain your information and allow you to request updates at any time by contacting us at support@headsup.health.com. We will also take steps to make sure that any updates that you provide are processed in a timely and complete manner.

10. Log Files

As is true of most websites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. We use this information, which does not identify individual users, to analyze trends, administer the site, track users’ movements around the Site, and gather demographic information about our user base. We do not link this automatically collected data to personally identifiable information. We track trends in users’ usage and volume statistics to create a more efficient and usable Site and product offerings, and to determine areas of the Site that could be improved to enhance the user and customer experience. Log files are used on the Site, and in any link to the Site from an email.

11. Cookies and Related Technologies

When you use this Site, we collect certain information by automated or electronic means, using technologies such as cookies, browser analysis tools, and web server logs. As you use this Site, or our applications, your browser, and other electronic devices communicate with servers operated by us and our services providers to coordinate and record the interactivity and fill your requests for services and information.

The information from cookies and related technology is stored in web server logs and also in web cookies kept on your computers or mobile devices, which are then transmitted back to this Site by your computers or mobile devices. These servers are operated and the cookies managed by us or our service providers.

For example, when you visit this Site, HeadsUp and our service providers and business partners may place cookies on your computers or mobile devices. Cookies allow us to recognize you when you return, and track and target your interests in order to provide a customized experience. They also help us provide a customized experience and help us detect certain kinds of fraud. A “cookie” is a small amount of information that a web server sends to your browser that stores information about your account and preferences.

Some cookies are temporary, whereas others may be configured to last longer. “Session” cookies are temporary cookies used for various reasons, such as managing page views. Your browser usually erases session cookies once you exit your browser. “Persistent” cookies are more permanent cookies that are stored on your computers or mobile devices even beyond when you exit your browser. We use persistent cookies for a number of purposes, such as retrieving certain information you have previously provided, and storing your preferences.

We or certain third parties also may use these technologies to collect information about your activities over time and across third-party websites, apps, or other online services (Online Behavioral Tracking) in accordance with the guidelines set forth by the Digital Advertising Alliance (the “DAA”). We do not control these third parties’ tracking technologies or how they may be used. Certain third-party advertising networks and related service providers, such as Facebook Ads, Drip, Clay, High Level, Segment, X, Visual Visitor, Bing Ads, Google Tag Manager, Google AdSense, and AdRoll, use the collected information to serve ads to you on our behalf on other sites throughout the Internet. These cookies do not contain personally identifiable information, nor are they linked to any personal information collected by us.

The information practices of these third-party advertising companies are governed by their own privacy policies and are not covered by this Privacy Statement. Some of these advertising companies may be members of the Network Advertising Initiative (“NAI”), a cooperative of online marketing companies that offers a centralized tool for opting out of behavioral advertising delivered by each of its member companies. If you would like to obtain more information about the NAI and make choices about their members’ use of your information, please visit the NAI website at https://optout.networkadvertising.org/?c=1. Also, through the DAA, several media and marketing associations have developed an industry self-regulatory program to give consumers a better understanding of and greater control over ads that are customized based on their online behavior across different websites. To make choices about interest-based ads from third parties participating in the DAA, please visit the DAA consumer opt out page at http://www.aboutads.info/choices/.

You may view Facebook’s Privacy Statement at: https://www.facebook.com/about/privacy/. You may opt-out of the Facebook Ads partner network by logging into your Facebook account by managing your settings at: https://www.facebook.com/ads/settings. You may view Google’s Privacy Statement at: http://www.google.com/privacypolicy.html. You may opt-out of the AdSense partner network cookie at: http://www.google.com/privacy/ads/ or by using the Network Advertising Initiative’s (NAI’s) multi-cookie opt-out mechanism at: https://optout.networkadvertising.org/?c=1. Further, you may view the AdRoll Privacy Statement and opt-out from their network and affiliated networks, at: https://www.adroll.com/account/privacy. These opt-outs are valid only for the computer and browser combination used to opt-out. Clearing cookies will remove these opt-outs because they are stored in cookies.

If you opt-out of AdRoll or an NAI third-party advertising network, you will no longer receive ads based on your browsing history from that network. You may, however, continue to receive generalized online advertising.

12. Manage Your Security Settings

You may manage how your browser handles cookies and related technologies by adjusting its privacy and security settings. Browsers are different, so refer to instructions related to your browser to learn about cookie-related and other privacy and security settings that may be available. You can opt-out of being targeted by certain third-party advertising companies online at https://optout.networkadvertising.org/?c=1 or http://preferences.truste.com/truste/.

You may manage how your mobile browser handles cookies and related technologies by adjusting your mobile device’s privacy and security settings. Please refer to instructions provided by your mobile service provider or the manufacturer of your device to learn how to adjust your settings.

13. Links to Other Sites

This Site may contain links to other sites that are not owned or controlled by HeadsUp. Please be aware that we are not responsible for the privacy practices of such other sites. We encourage you to be aware when you leave our Site and to read the privacy statements of each and every website that collects personally identifiable information. This privacy statement applies only to information collected by this Site.

14. Rights to Access and Control Your Personal Data

Any personal data that we collect is based upon your consent as detailed in Section 2. You have many choices concerning the collection, use, and sharing of your data, including the ability to:

Delete Data: You may request that we delete your personal data.

Change or Correct Data: You can also ask us to change, update, or fix your data in certain cases, particularly if it’s inaccurate. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Object to, or Limit or Restrict, Use of Data: You may request that we do not use your personal data, but keep in mind that this may affect our ability to provide the Site to you.

Right to Access and/or Take Your Data: You can ask us for a copy of your personal data.

You may send us an email at support@headsup.health.com to request access to, obtain copies of, correct, or delete any personal information that you have provided to us.

Your email message must include (i) your identifying information (including your IP address, if applicable), (ii) your contact information, and (iii) information about the specific changes, deletions, or other action(s) you are requesting. We require this information so we can determine which information in our control is your Personal Information and complete the actions you requested. We may not accommodate a request to delete or change information if we believe the deletion would violate any law or legal requirement.

15. Account Closure and Discontinuation of Services

We will retain your personal information as long as you maintain your use of the Site, or as needed to provide you Site-related services. Once you request to discontinue use of the Site and deletion of your personal information, we will delete it within 30 days from the date of your request, unless we must retain it to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our terms of use, or fulfill your request to “unsubscribe” from further messages from us. We will retain de-personalized information after you have discontinued your use of the Site.

16. Notice to California Residents.

California Civil Code Section § 1798.83 permits users of our Site that are California residents to request certain information regarding our disclosure of personal information to third parties for direct marketing purposes. To make such a request, please send an email to support@headsup.health.com.

Please see our CCPA Policy available at https://headsuphealth.com/california-privacy-policy/ for information about how we comply with the California Consumer Privacy Act of 2018.

17. Notice to Residents of Countries outside the United States of America

HeadsUp is headquartered in the United States of America. Personal Information may be accessed by us or transferred to us in the United States or to our affiliates, business partners, or service providers elsewhere in the world. By providing us with Personal Information, you consent to this transfer. We will protect the privacy and security of Personal Information according to this Privacy Statement, regardless of where it is processed or stored.

The GDPR took effect on May 25, 2018, and is intended to protect the data of European Union (EU) citizens.

As a company that markets its Site, content, products, and/or services online, we do not specifically target our marketing to the EU or conduct business in or to the EU in any meaningful way. If the data that you provide to us in the course of your use of our Site, content, products and/or services is governed by GDPR, we will abide by the relevant portions of the Regulation.

If you are a resident of the European Economic Area (EEA), or are accessing this site from within the EEA, you may have the following rights:

Rights to Access and Control Your Personal Information for residents of the European Economic Area

Any personal data that we collect is based upon your consent as detailed in this Privacy Statement. You have many choices concerning the collection, use, and sharing of your data, including the ability to:

Delete Data: You may request that we delete your Personal Information. Please note that in some cases we cannot delete your Personal Information except by also deleting your user account.

Change or Correct Data: You can also ask us to change, update, or fix your data in certain cases, particularly if it’s inaccurate.

Object to, or Limit or Restrict, Use of Data: You may request that we do not use your Personal Information, but keep in mind that this will terminate our ability to provide any Service(s) to you.

Right to Access and/or Take Your Data: You can ask us for a copy of your Personal Information.

To make any of these requests, please contact our GDPR contact at support@headsup.health.com. Your email message must include (i) your identifying information (including your IP address, if applicable), (ii) your contact information, and (iii) information about the specific changes, deletions, or other action(s) you are requesting. We require this information so we can determine which information in our control is your Personal Information and complete the actions you requested. We may not accommodate a request to delete or change information if we believe the deletion would violate any law or legal requirement.

18. Important Note Regarding Children

This Site is not directed toward children under 18 years of age and HeadsUp does not knowingly collect or use information from children under 18 through this Site. No one under age 18 may provide any information to the Site. If you are under 18, do not use or provide any information on this Site or on or through any of its features/register on the Site, make any purchases through the Site, use any of the interactive or public comment features of this Site or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If any information submitted via the Site regarding a minor under the age of 18 must be submitted by the minor’s legal representative. If we learn we have collected or received personal information from a minor under 18 without verification of consent from the minor’s legal representative, we will delete that information. If you believe we might have any information from or about a minor under 18, please contact us at support@headsup.health.com.

Archived Versions:

09/11/2023