PRIVACY POLICY FOR RISE MD LLC

PRIVACY POLICY

Last Modified: March 18, 2026

Introduction

This Privacy Policy is designed to inform users about the collection, use, and Customer Data, as defined in the Terms of Service. It applies to all Customer Data collected through our websites, mobile applications, and any other platforms or services operated by Z3 Holdings LLC dba RISEDDS (“Provider," “we,” “our,” or “us”).

This Privacy Policy is applicable when you visit our website, use our services, or interact with us in any way that involves the sharing of Customer Data.

Purpose of Data Collection

This Privacy Policy outlines the purposes for which we collect Customer Data from you. The collection of Customer Data is primarily for the purpose of providing and improving our services, complying with legal and regulatory requirements, and for other related business activities. More specifically, we collect Customer Data for the following reasons:

To identify and communicate with you;
To understand your needs and preferences;
To provide services requested by you;
To process transactions and send notices about your transactions;
To improve our services and offerings;
To comply with legal and regulatory requirements;
To respond to inquiries and offer support;
To conduct research and statistical analysis;
To protect against fraud and error;
To track and analyze website usage and trends;
To market and advertise our services, subject to your consent where required by law.

By using our services, you consent to the collection, use, and sharing of your Customer Data as described in this Privacy Policy. We are committed to ensuring that your information is secure and is used in accordance with the terms of this Privacy Policy and applicable laws.

Disclosure of Personal Data

We may disclose your Customer Data to third parties under certain circumstances. Such disclosures of Customer Data are made only when necessary or required under law for the following purposes:

Compliance with legal obligations or court orders;
Protection of our rights, privacy, safety, or property, and/or that of our affiliates, you, or others;
Enabling the execution of business transactions, including but not limited to mergers, acquisitions, divestitures, or asset sales, and the subsequent integration of businesses;
For the purposes of providing services you have requested, which may involve sharing your Customer Data with service providers or third parties that assist us in our operations or service delivery;
With your explicit consent for any other purpose disclosed by us when you provide the information.

We commit to ensuring that any sharing of Customer Data with third parties is conducted in compliance with applicable privacy laws and regulations, including but not limited to ensuring that third parties to whom Customer Data is disclosed are obligated to protect the information with adequate security measures.

Protection of Minors

We do not knowingly collect Customer Data from minors. If the Data Controller becomes aware that a minor has provided Customer Data, steps will be taken to remove such information and terminate the minor's account, if applicable.

Parents and guardians are encouraged to take an active role in their children's online activities and interests. If a parent or guardian becomes aware that their child has provided us with Customer Data without their consent, they should contact the us immediately.

Data Security

We are committed to protecting the security of Customer Data. To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect. These measures include, but are not limited to:

Encryption of data in transit and at rest;
Regular cybersecurity assessments and penetration testing;
Access controls to ensure that only authorized personnel can access Customer Data;
Training for employees on data protection and privacy practices;
Implementation of incident response and data breach notification plans.

Despite these measures, the we cannot guarantee that unauthorized access, hacking, data loss, or other breaches will never occur. Your use of our services indicates your agreement to assume this risk. If you have any concerns about the security of your Customer Data, please contact us immediately.

User Rights

Users have certain rights concerning their Customer Data, as defined herein. These rights include, but are not limited to, the following:

Right to Access: Users have the right to request access to and obtain a copy of their Customer Data that is being processed by the us.
Right to Rectification: Users have the right to request the correction of inaccurate Customer Data concerning them.
Right to Erasure ("Right to be Forgotten"): Users have the right to request the erasure of their Customer Data under certain circumstances.

Users may exercise these rights by contacting us directly. The we are committed to facilitating the exercise of these rights in a timely and efficient manner.

Data Retention

We shall retain Customer Data for no longer than is necessary for the purposes for which the Customer Data is processed. The retention period for Customer Data will be determined based on the following criteria:

The duration of the ongoing relationship with User, including any contractual obligations to retain data.
Legal, tax, and regulatory requirements that require data to be kept for a certain period of time.
Whether the Customer Data is necessary to protect our legal interests, such as in the case of litigation or audits.

Upon expiration of the retention period, Customer Data will be securely deleted or anonymized, unless further retention is required or permitted by law. We will take appropriate technical and organizational measures to ensure the secure deletion or anonymization of Customer Data.

Changes to Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Please review this policy periodically, and especially before you provide any Customer Data. This Privacy Policy was last updated on the date indicated at the top of this page. Any changes to our Privacy Policy will become effective upon posting of the revised policy on the Website. Your use of the Website following these changes means that you accept the revised Privacy Policy. If we make any material changes, we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on this Website prior to the change becoming effective.

Compliance with HIPAA

This Privacy Policy is designed to ensure compliance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") as it may be amended from time to time. The we acknowledge our obligation under HIPAA to maintain the privacy and security of Customer Data, particularly protected health information ("PHI") as defined under HIPAA, in accordance with applicable federal and state laws.

We shall implement appropriate administrative, physical, and technical safeguards to prevent the use or disclosure of PHI other than as provided for by this Privacy Policy. We will ensure that any agents, including subcontractors, to whom it provides PHI agree to the same restrictions and conditions that apply to the Data Controller with respect to such information.

In the event of any inconsistency between the provisions of this Privacy Policy and mandatory provisions of HIPAA, the provisions of HIPAA shall prevail. We will promptly report to the User any security incident or breach of unsecured PHI of which it becomes aware.

California Privacy Rights

This Privacy Policy includes additional disclosures for residents of California. If you are a resident of California, you are granted specific rights regarding access to your personal information.

California residents have the right to request that we disclose what personal information it collects, uses, discloses, and sells about them specifically. To exercise these rights, California residents may contact us at any time. We will not discriminate against any resident for exercising their privacy rights under California law.

Furthermore, California residents have the right to request the deletion of their personal information held by the Data Controller, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

California residents may also opt out of the sale of their personal information. We does not sell personal information in the traditional sense; however, certain third-party exchanges might be considered a sale under California law. Residents have the right to opt out of these exchanges.

For requests related to your California Privacy Rights, please contact us through the provided contact information here [email protected].