Skip to content
DocUpdate

Privacy Policy

Last updated: June 6, 2026

NOTICE: We collect and may share certain sensitive personal information only with your explicit consent and as permitted by applicable law.

ImpiricusHealth Corp., doing business as DocUpdate.io (“Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes how we collect, process, retain, and disclose personal data about you when providing services to you through our websites, applications, products, and services that link to this policy (our “Services”) and our practices for using, maintaining, protecting, and disclosing that information.

Our Services are made available primarily to licensed U.S. healthcare professionals (“HCPs”) and their authorized staff. To the extent we create, receive, maintain, or transmit Protected Health Information (“PHI”) on behalf of a HIPAA-covered entity, we act as a Business Associate under the Health Insurance Portability and Accountability Act (“HIPAA”) and the use and disclosure of that PHI is governed by HIPAA, the HITECH Act, and the applicable Business Associate Agreement (“BAA”), not by this policy. Where this policy and the BAA conflict with respect to PHI, the BAA controls.

This policy applies only to information we collect:

  • Through the Services.
  • In communications, including email, text, chat, and other electronic messages, between you and the Services.
  • When you interact with our advertising and applications (including mobile apps) on third-party websites and services, if those applications or advertising include links to this policy.
  • RCS Messages.

It does not apply to information collected by:

  • Us through any other means, including on any other website operated by Company or any third party (including our affiliates and subsidiaries) that does not link to this policy; or
  • Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or through the Services.

We may provide additional or different privacy policies that are specific to certain features, services, or activities.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you acknowledge and agree to the collection, use, and sharing of your information as described in this privacy policy, except where applicable law requires separate, affirmative consent (such as for the processing of sensitive personal data), in which case we will obtain such consent before processing. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of the Services after we make changes as described here is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Definitions

For the purposes of this policy:

  • BAA, or Business Associate Agreement, means the agreement that governs our use and disclosure of PHI when we act as a Business Associate of a HIPAA-covered entity under HIPAA and the HITECH Act.
  • CCPA means the California Consumer Privacy Act, as amended.
  • Company(also “we,” “our,” or “us”) means ImpiricusHealth Corp., doing business as DocUpdate.io.
  • Consumer, for the purpose of applicable state privacy laws, means a natural person who is a resident of a state granting such rights.
  • Cookies are small files that are placed on your computer, mobile device, or any other device by a website, containing the details of your browsing history on that website among its many uses.
  • Device means any device that can access the Services, such as a computer, a cellphone, or a digital tablet.
  • Global Privacy Control (GPC) means a signal sent by certain browsers or browser extensions that communicates your choice to opt out of the sale or sharing of personal data and of targeted advertising.
  • HCN means the IQVIA Healthcare Communications Network, owned and managed by IQVIA, which enables IQVIA and HCN members to provide medically relevant communications to authenticated U.S.-based healthcare professionals.
  • HCPs means licensed U.S. healthcare professionals and their authorized staff, to whom our Services are primarily made available.
  • HIPAA means the Health Insurance Portability and Accountability Act of 1996, as amended.
  • HITECH Act means the Health Information Technology for Economic and Clinical Health Act.
  • IQVIA means IQVIA Inc., which owns and manages the HCN.
  • Personal data means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household.
  • PHI, or Protected Health Information, means individually identifiable health information that we create, receive, maintain, or transmit on behalf of a HIPAA-covered entity, as defined under HIPAA.
  • Profilingmeans any form of automated processing of personal data to evaluate, analyze, or predict aspects concerning an individual, such as the individual’s preferences, behavior, interests, health, or location.
  • RCS, or Rich Communication Services, means an enhanced mobile messaging protocol that supports features beyond standard SMS and MMS, such as read receipts and richer media.
  • Sale, for the purpose of applicable state privacy laws, means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal data to another business or a third party for monetary or other valuable consideration.
  • Sensitive personal data (also referred to as sensitive personal information) means personal data that applicable law affords heightened protection and that we process only with your consent where required by law. It may include health information and other consumer health data as defined under state laws, government-issued identifiers, precise geolocation, financial account information, and similar categories.
  • Service Provider means any natural or legal person who processes data on behalf of the Company to facilitate the Services, to provide the Services on behalf of the Company, to perform services related to the Services, or to assist the Company in analyzing how the Services are used.
  • Services means our websites, applications, products, and services that link to this policy.
  • Sharing, for the purpose of applicable state privacy laws, means disclosing or making available a consumer’s personal data to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.
  • Targeted Advertisingmeans displaying advertisements to a consumer based on personal data obtained from the consumer’s activities over time and across nonaffiliated websites or online applications to predict the consumer’s preferences or interests.

The Personal Data That We Collect or Process

Personal data (as defined above) may include identifiers such as your name, email address, telephone number, postal address, payment information, account credentials, government-issued identification numbers (such as Social Security numbers), and other information that can be used to contact or identify you online or offline.

The types and categories of personal data we collect or process include:

Account and contact information, including name, address (such as home address, work address, or other address), email address, phone number, username, and other contact information you provide us.

Payment information, including credit card or debit card information and information about the payment methods and services (such as PayPal or Venmo) you use in connection with the Services.

Account history, including information about your subscription, account, transactions, purchases, order history, or discounts.

Demographic information, including your age, gender, income level, education, or family or marital status.

Location information, including general geographic location such as country, state or province, or city and precise geolocation, if you have enabled and consented to location information collection.

Device information, including your IP address, device identifiers, operating system and version, preferred language, hardware identifiers, browser type and settings, and other device information.

Content and information you elect to provide as part of your profile or in any reviews you make through the Services or emails, chats, or other communications sent to us.

Images, voice recordings, and videos collected or stored in connection with the Services, if you have consented to such information collection.

Identity document information, such as Social Security and driver’s license numbers, if you have consented to such information collection.

Professional licensing and credentialing information, including your National Provider Identifier (NPI), state medical, dental, or other professional license number(s) and issuing jurisdiction(s), DEA registration number (where applicable to e-prescribing), specialty, place of practice, and other information used to verify your identity, credentials, and authority to prescribe or otherwise use the Services.

Some of the information identified above, including identification document information, precise geolocation information, and any health or medical information (including information that identifies you as seeking or receiving health care services, prescribing or treatment data, and other consumer health data as defined under state laws such as the Washington My Health My Data Act, the Nevada Consumer Health Data Privacy Law, and similar laws) may be considered sensitive data under certain laws. If required under applicable law, we will collect and process sensitive personal data only with your consent, and will obtain separate, valid authorization where required for any sale of consumer health data. If you choose not to provide or allow us to collect some information, we may not be able to provide you with requested features, services, or information.

We also collect:

Statistics or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific Services feature.

Technical information. Technical information includes information about your internet connection and usage details about your interactions with the Services, such as clickstream information to, through, and from our Services (including date and time), products that you view or search for; page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page.

If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal information.

How We Collect Your Personal and Other Data

You Provide Information to Us

We collect information about you when you interact with our Services, such as when you create or update an account, place an order, subscribe, make a request, participate in surveys, sweepstakes, contests, or promotions, or create, upload, or post content to the Services, including reviews, media such as photos, videos, or audio recordings.

Automatically Through Our Services

As you navigate through and interact with our Services, we may use automatic data collection technologies to collect information that may include personal data. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies, web beacons, and other tracking technologies including details of your interactions with our Services, such as traffic data, location data, logs, and other communication data, and which resources and Services features that you access and use.

We may use these automatic collection technologies to collect information about your online activities over time and across third-party sites or other online services (behavioral tracking).

The technologies we use for this automatic data collection may include:

Cookies. You may refuse to accept or disable cookies by activating the appropriate setting on your browser or device. However, if you select this setting, you may be unable to access certain features of the Services.

Web Beacons. Some parts of the Services and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those parts or opened an email and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity).

To the extent any of these automated technologies are considered a personal data sale, targeted advertising, or profiling under applicable laws, you may opt out by: (1) clicking the “Do Not Sell/Share My Personal Information” link on our website, (2) visiting our preference center at https://www.docupdate.io/manage-preferences, or (3) emailing support@docupdate.io. We will process verified opt-out requests as required by applicable law. Please note that some Services features may be unavailable after opting out.

When you interact with the Services, there are third parties that may use automatic collection technologies to collect information about you or your device. These third parties include:

Advertisers, ad networks, and ad servers.

Analytics companies.

Your device manufacturer.

Your internet or mobile service provider.

These third parties may use tracking technologies to collect information about you when you use the Services. The information they collect may be associated with your personal data or they may collect information, including personal data, about your online activities over time and across different websites, apps, platforms, and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

From Business Partners and Service Providers

We may receive personal data about you from other sources and combine that with information we collect directly from you. For example, we may obtain information about you from service providers that we engage to perform services on our behalf, such as email platform providers, content delivery services, payment processors, promotions services, gift card program providers, analytics, security and anti-fraud services, and data brokers. We also may receive personal data from business partners that we engage to share consumer information with us, including your personal preferences and demographic information such as age, gender, and income level so that we can better provide you with a personalized experience, including personalized content, offers and services.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal data, to:

Provide you with the Services and any contents, features, information, products, or services that we make available through the Services.

Fulfill and manage subscriptions, purchases, orders, deliveries, payments, returns, and exchanges.

Fulfill any other purpose for which you provide it.

Provide you with notices about your account, including expiration and renewal notices.

Improve our Services, including by analyzing your information and creating aggregated data derived from your information to develop, maintain, analyze, improve, optimize, measure, and report on our Services and their features and how users interact with them. Our analysis may include the use of technology like machine learning and large language models, including training our own proprietary models using de-identified or aggregated information derived from your use of the Services to improve the Services. Where we use identifiable information (including information provided by HCPs) to train proprietary models, we will do so only with your consent or as otherwise permitted by applicable law. We may also share information with third parties for model training, but only with your explicit consent or as otherwise permitted by applicable law. We use third-party AI providers, including but not limited to Anthropic (Claude) and OpenAI (ChatGPT), to process, analyze, and derive insights from customer data in order to enhance our Services. Customer data is not used to train these third-party models unless you have provided explicit consent or such use is permitted under applicable law and our agreements. Any third-party AI providers we engage are contractually bound to comply with data protection and confidentiality requirements consistent with this policy, including through data processing agreements or equivalent contractual protections.

Promote our Services, business, and offerings by publishing advertising on our own Services and by placing ads on third parties’ services. We may use your information to model, segment, target, offer, market, and advertise our Services, and to conduct marketing surveys, market research, and analytics to understand user preferences and improve our offerings.

Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.

Notify you when Services updates are available and about changes to any products or services we offer or provide through them.

In any other way we may describe when you provide the information.

For any other purpose with your consent.

The usage information we collect, whether connected to your personal data or not, helps us improve our Services and deliver a better and more personalized experience by enabling us to:

Estimate our audience sizes and usage patterns.

Store information about your preferences, allowing us to customize the Services according to your individual needs and interests.

Speed up your searches.

Recognize you when you return to our Services.

We may also use your information to contact you about goods and services that may be of interest to you. If you do not want us to use your information in this way, please adjust your user preferences in your account profile.

Who We Disclose Your Information To

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may also disclose personal data that we collect or you provide as described in this privacy policy:

To our subsidiaries and affiliates.

To contractors, service providers, and other third parties we use to support our organization and who are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.

To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by the Company is among the assets transferred.

To third parties to market their products or services to you if you have consented to these disclosures. We contractually require these third parties to keep personal data confidential and use it only for the purposes for which we disclose it to them. For more information, see Your Rights and Choices About Your Information.

To fulfill the purpose for which you provide it.

For any other purpose disclosed by us when you provide the information.

With your consent.

We may also disclose your personal data:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request.

To enforce or apply our Terms of Service and other agreements, including for billing and collection purposes.

If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our organization, our members, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

SMS, RCS, and Other Mobile Messaging. With your prior express consent (and prior express written consent where required for marketing or promotional messages under the Telephone Consumer Protection Act, 47 U.S.C. § 227, and its implementing regulations), we and our service providers may send you transactional and promotional messages by SMS, RCS, MMS, push notification, or similar channels, including messages sponsored by pharmaceutical manufacturers or other business partners. Message and data rates may apply; message frequency varies. You may revoke your consent and opt out at any time using any reasonable method that clearly communicates your request, including by replying STOP, QUIT, END, CANCEL, UNSUBSCRIBE, OPT-OUT, or REVOKE to any program message, by using the in-message unsubscribe control (for RCS), or by emailing support@docupdate.io. These keywords and channels are examples only and are not the exclusive means of opting out. We will honor your opt-out request as soon as practicable, and in no event later than ten (10) business days after receipt. When you revoke consent, that revocation will apply to both text messages and calls regardless of the channel through which you communicate it. We may send you a one-time message to confirm or clarify the scope of your opt-out request. Reply HELP for assistance. Opting out of marketing messages will not stop transactional messages necessary to provide the Services (such as e-prescribing confirmations or account security alerts) unless you also opt out of those messages. We do not sell or rent mobile phone numbers collected for messaging purposes to third parties for their own marketing.

Pharmaceutical Manufacturers and Industry Partners. When you use features that connect you with pharmaceutical manufacturers or their agents (for example, requesting samples or rep visits, viewing sponsored medical content, or receiving sponsored messaging), we may share with the relevant manufacturer or its agent the information reasonably necessary to fulfill your request and to measure and report on campaign engagement and program effectiveness (which may include your name, NPI, specialty, practice address, and the content of your request). We require these partners by contract to use that information only for the purposes for which it was disclosed and to comply with applicable law, including HIPAA where applicable. You may opt out of sponsored messaging at any time as described above.

Your Rights and Choices About Your Information

This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live.

Advertising, marketing, cookies, and other tracking technologies choices:

Cookies and Other Tracking Technologies.You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. If you disable or refuse cookies or similar tracking files, some Services features may be inaccessible or not function properly. Some browsers include a “Do Not Track” (DNT) setting that can send a signal to the online services you visit indicating you do not wish to be tracked. There is currently no uniform industry standard for recognizing or honoring DNT signals; however, we honor the Global Privacy Control (GPC) as described below. You may also opt out of tracking-based activities as described in this section or by using the Global Privacy Control as described below.

Promotions by the Company.If you do not wish us to use your information to promote our own or third parties’ products or services, you can opt out by managing your preferences at https://www.docupdate.io/manage-preferences, or emailing support@docupdate.io. You can also opt out by logging into your account and adjusting your account settings and preferences or sending us an email stating your request to support@docupdate.io.

Targeted Advertising by the Company.If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target audience preferences, you can opt out by managing your preferences at https://www.docupdate.io/manage-preferences, or emailing support@docupdate.io. Please note that certain cookie-based opt-out mechanisms require your browser to accept the opt-out cookie in order to remember your preference.

Your State Privacy Rights

Depending on your state of residency, you may have certain rights related to your personal data, including:

Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information and it will be included in the response to your access request.

Correction.You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information’s nature and processing purpose.

Deletion. You may request that we delete personal data about you that we maintain, subject to certain exceptions under applicable law.

Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales. You may request that we do not use your personal data for these purposes.

Automated Decision-Making and AI. We use machine learning, large language models, and third-party AI providers (including Anthropic and OpenAI) to process information and personalize the Services. Where we make decisions about you using solely automated processing that produce legal or similarly significant effects (for example, eligibility, access, or pricing determinations), you have the right, subject to applicable law, to: (i) be informed that automated decision-making is being used; (ii) receive meaningful information about the logic involved and the significance and likely consequences of such processing; (iii) request human review of, or contest, the decision; and (iv) where required, opt out of profiling in furtherance of decisions that produce such effects. To exercise these rights, email support@docupdate.io.

Important: The exact scope of these rights varies by state. There are also several exceptions where we may not have an obligation to fulfill your request. We will respond to verified consumer rights requests within the timeframes required by applicable law (generally within 45 days of receipt, subject to permitted extensions).

To exercise any of these rights, please email support@docupdate.io. To appeal a decision regarding a consumer rights request, email support@docupdate.io.

Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of data processing, including data “sales” as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.

California CCPA Privacy Notice

This section supplements the information in this policy and applies solely to California residents under the California Consumer Privacy Act, as amended (“CCPA”).

Notice at Collection. Under the CCPA, California consumers are entitled to certain notices and disclosures regarding the collection and use of their personal data. We collect and use personal data as described in “The Personal Data That We Collect or Process” and “How We Use Your Information.” We disclose personal data as described in “Who We Disclose Your Information To.” We retain personal data as described in “How We Retain Your Personal Data.” We do not sell personal data for monetary consideration. To the extent any disclosure of personal data constitutes a “sale” or “sharing” under the CCPA (including for other valuable consideration or for cross-context behavioral advertising), we provide opt-out rights as described in “Your State Privacy Rights.” To the extent any disclosure of consumer health data constitutes a “sale” under applicable law, we obtain separate, valid authorization as described in this policy.

Categories of Personal Data Collected. In the preceding twelve (12) months, we may have collected the following categories of personal data from California residents: Category A: Identifiers (such as real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, or driver’s license number); Category B: personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name, signature, Social Security number, physical characteristics, address, telephone number, driver’s license number, financial information, medical information, or health insurance information; Category D: Commercial information (such as transaction and purchase history); Category F: Internet or other electronic network activity (such as browsing history and interactions with our Services); Category G: Geolocation data; Category H: Sensory data (such as images, voice recordings, and videos); Category I: Professional or employment-related information (such as NPI, license numbers, and specialty); and Category K: Inferences drawn from any of the above to create a profile reflecting preferences, behavior, or other characteristics. We may also collect sensitive personal data as described elsewhere in this policy, including consumer health data, which we process only with your consent where required by applicable law.

Sources of Personal Data. We obtain the categories of personal data listed above from: directly from you; indirectly from you (for example, from observing your activity on the Services); automatically (for example, through cookies); and from service providers and business partners.

Business and Commercial Purposes. We use or disclose personal data for the business and commercial purposes described in “How We Use Your Information,” including to operate and provide the Services, respond to your inquiries, comply with legal obligations, and detect and prevent security incidents and fraud.

Your California Rights. California residents have the rights described in “Your State Privacy Rights,” including the rights to know, access, correct, delete, opt out of sale/sharing and targeted advertising, and not to be discriminated against for exercising these rights. To exercise these rights, email support@docupdate.io.

How We Protect Your Personal Data

We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal data is at your own risk.

The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.

Transfer of Your Personal Data

Your information, including personal data, is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. This means that your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction. The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy and applicable law, and will use commercially reasonable efforts to ensure that no transfer of your personal data takes place to an organization or a country without adequate controls in place, including the security of your data and other personal data.

How We Retain Your Personal Data

We retain the categories of personal data described in this policy in accordance with our data retention schedule and for as long as reasonably necessary to fulfill the purposes described, or as otherwise legally permitted or required under applicable laws, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or deidentified.

Children’s and Minors’ Data

Our Services are not intended for, and we do not knowingly collect any personal data from, children under the age of 18. If we learn we have collected or received personal data from a child under 18 years old without verification of parental consent, we will delete that information.

Changes to Our Privacy Policy

We may update this policy from time to time, and we will provide advance notice of any material changes to the policy as required by law, including but not limited to providing at least 30 days’ notice before implementing material changes that affect your rights under this policy. The date the privacy policy was last updated is identified at the top of the page. We will notify you of changes to this policy by updating the “last updated” date and posting the updated policy on the Services. We may email or otherwise communicate reminders about this policy, but you should check our Services periodically to see the current policy and any changes we have made to it.

Contact Information

To exercise your rights or ask questions or comment about this privacy policy or our privacy practices, contact us at:

1 Concourse Parkway, Suite 800,
Atlanta, GA 30328

support@docupdate.io

IQVIA Healthcare Communications Network Participation Disclosure

The Services are a member of the IQVIA Healthcare Communications Network (the “HCN”). HCN is owned and managed by IQVIA Inc. (“IQVIA”) and is designed to enable IQVIA and HCN members to provide medically relevant business communications to authenticated U.S.-based healthcare professionals.

If you are a U.S.-based healthcare professional, your registration with the Services may include registration with HCN, subject to your consent at the time of registration. As a result, if you consent, your contact and other professionally relevant information will be disclosed to IQVIA and each HCN member to provide you medically relevant content as described in the HCN privacy policy available at https://HCN.health/privacy-policy/. The HCN privacy policy provides details on how to manage your information, including opting out of participation in the HCN. To the extent that this policy conflicts with the HCN privacy policy with respect to the use of this information by HCN, the conflict will be resolved in favor of the HCN policy.io’s own collection, use, and disclosure of your information and nothing in the HCN policy shall diminish any rights afforded to you under applicable law.