VH360 Hotline Privacy Policy

EFFECTIVE: April 1, 2026

Last Updated: May 28, 2026

1. Introduction

Virtual Health 360, Inc. ("VH360," "we," "us," or "our") operates the VH360 Hotline (the "Platform"), a technology service that connects users with independent, licensed Doctors of Physical Therapy ("DPTs") for virtual injury triage and movement guidance.

This Privacy Policy explains how we collect, use, share, and protect information when you use the Platform. By using the Platform, you agree to the practices described in this Policy. If you do not agree, please do not use the Platform.

This Policy applies specifically to the VH360 Hotline and is separate from the privacy policies governing other VH360 products and services.

2. Information We Collect

We collect the following categories of information:

Information you provide directly:

Name (and the name of the injured athlete, if different)

Phone number and email address (yours, or the parent or guardian's if the athlete is under 18)

Age, sport, and event or team information

Injury details, including injury type, pain level, affected body area, and history

Photos, videos, or other media you share to support triage

Communications you send to us or to a DPT through the Platform

Information collected automatically:

Device and browser information (type, operating system, IP address)

Usage information (pages visited, time spent, features used)

Approximate location (used to match you with a DPT licensed in your state)

Cookies and similar tracking technologies (see Section 9)

Information from third parties:

Information passed to us by a sports facility, club, tournament organizer, or event partner that has enrolled you or referred you to the Platform (for example, through a QR code activation or embedded team subscription)

Payment information processed by our third-party payment processor (we do not store full payment card numbers)

3. How We Use Information

We use the information we collect to:

Operate the Platform and connect you with an independent, licensed DPT

Verify your location and match you with an appropriately licensed practitioner

Facilitate consultations, scheduling, and care coordination

Process payments and manage billing

Send service-related communications (appointment confirmations, follow-ups, referral information)

Send marketing communications, where permitted (you can opt out at any time)

Improve and develop the Platform, including analyzing usage patterns and aggregated outcomes

Comply with legal obligations, respond to legal requests, and protect our rights

Detect, prevent, and address fraud, abuse, or technical issues

4. How Information Is Shared

We share information only as described below:

With the independent DPT providing your consultation. Your health information, injury details, and consultation content are shared with the DPT for the purpose of providing triage and guidance. The DPT is an independent licensed practitioner responsible for their own handling of your information in accordance with applicable laws and professional standards.

With service providers. We share information with third-party vendors that help us operate the Platform, including hosting providers, communication and messaging providers, payment processors, scheduling tools, customer support tools, and analytics providers. These vendors are contractually obligated to handle information consistent with this Policy.

With sports facilities, clubs, or event partners (in limited cases). If you accessed the Platform through a partner facility, club, tournament, or embedded team subscription, we may share limited information (such as enrollment status or aggregated usage data) with that partner. We do not share specific injury details or consultation content with partners without your consent.

For legal and safety reasons. We may disclose information when required by law, court order, or legal process; to enforce our Terms of Service; to protect the rights, property, or safety of VH360, our users, or others; or in connection with a government or law enforcement request.

In connection with a business transaction. If VH360 is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any material change in how your information is handled.

We do not sell your personal information.

5. Health Information

Health information collected through the Platform, including injury details, pain levels, body areas, photos or videos, and consultation content, is treated as sensitive and is shared only with the DPT providing your consultation and with service providers as needed to operate the Platform.

VH360 operates as a technology platform and is not your healthcare provider. The independent DPT is your healthcare provider for the purposes of the consultation and is responsible for their own compliance with applicable healthcare privacy laws.

6. Minors

The Platform is intended for use by individuals 18 years of age and older. We provide services to athletes under 18 only when a parent or legal guardian completes the intake form and provides consent on the minor's behalf.

We do not knowingly collect personal information directly from children under 13 without verifiable parental consent. If you believe we have collected information from a child under 13 without proper consent, please contact us at [email protected] and we will delete the information.

Parents and legal guardians have the right to review, request deletion of, or refuse further collection of their minor's information by contacting [email protected].

7. Data Retention

We retain your information for as long as needed to:

Provide the services you have requested

Maintain records as required by applicable healthcare, tax, and business laws

Resolve disputes, enforce our agreements, and protect our legal interests

Consultation records and related health information are retained consistent with applicable state and federal record retention requirements, which typically range from several years to longer for minors. You may request deletion of information that is not subject to a retention requirement by contacting us.

8. Your Privacy Rights

Depending on your state of residence, you may have additional rights regarding your personal information. We honor the following rights for all users where applicable under state law:

Right to know or access: You may request a copy of the personal information we hold about you and details about how it has been collected, used, and shared.

Right to correct: You may request that we correct inaccurate personal information.

Right to delete: You may request that we delete your personal information, subject to retention requirements under healthcare, tax, and other applicable laws.

Right to opt out of sale or sharing: We do not sell your personal information or share it for cross-context behavioral advertising. If this changes, you will have the right to opt out.

Right to opt out of targeted advertising: You may opt out of the use of your personal information for targeted advertising purposes.

Right to limit use of sensitive information: You may request that we limit the use of sensitive personal information (such as health information) to purposes necessary to provide the Platform.

Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

Right to appeal: If we deny your request, you may appeal that decision by contacting us at [email protected].

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before processing the request. We will respond within the timeframes required by applicable law.

State-specific disclosures:

California residents (CCPA/CPRA): California residents have the rights described above. We have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months. We collect the categories of information described in Section 2 and use them for the purposes described in Section 3. Health information collected through the Platform is treated as sensitive personal information under California law. You may designate an authorized agent to make a request on your behalf. To submit a request, contact [email protected].

Virginia, Colorado, Connecticut, and similar state residents (VCDPA, CPA, CTDPA, and equivalents): Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Tennessee, and other states with comprehensive privacy laws have the rights described above. Health and injury information is treated as sensitive data and is processed with your consent. You have the right to appeal denied requests.

Nevada residents: Nevada residents have the right to opt out of the sale of certain personal information. We do not sell your information.

Washington and similar state health privacy law residents (My Health My Data Act and equivalents): Residents of Washington and other states with consumer health data laws have additional rights regarding consumer health data, including the right to withdraw consent and the right to request deletion of consumer health data. To exercise these rights, contact [email protected].

You can opt out of marketing text messages by replying STOP and marketing emails by clicking the unsubscribe link. Essential service communications related to an active consultation will continue regardless.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Platform, remember preferences, analyze usage, and support marketing efforts. You can control cookies through your browser settings, though disabling cookies may affect Platform functionality.

We may also use analytics and advertising tools (such as those from Meta and Google) that collect information about your interactions with the Platform. You can manage your preferences through those providers directly. Where required by law, we honor opt-out preference signals (such as the Global Privacy Control) for users in applicable states.

10. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect your information. However, no system is completely secure, and we cannot guarantee the absolute security of information transmitted to or stored on the Platform. You are responsible for keeping your login credentials and account information confidential.

11. International Users

The Platform is intended for use within the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.

12. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or via email. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the Platform after changes constitutes acceptance of the revised Policy.

14. Contact

For questions, requests, or concerns about this Privacy Policy, contact:

Virtual Health 360, Inc. Coconut Creek, Florida [email protected] 1 (877) 385-5652