US State Consumer Privacy Rights

Effective Date: July 31st, 2026

Purpose

This U.S. State Consumer Privacy Rights Policy (“Policy”) supplements DispatchHealth’s Privacy Policy, Consumer Privacy Notice, Notice of Privacy Practices, and other applicable privacy notices. It provides additional information regarding the collection, use, disclosure, and processing of Personal Information and describes the privacy rights available to consumers under applicable U.S. state privacy laws.

This Policy is intended to comply with applicable state consumer privacy laws, including, where applicable:

California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)
Virginia Consumer Data Protection Act (VCDPA)
Colorado Privacy Act (CPA)
Connecticut Data Privacy Act (CTDPA)
Utah Consumer Privacy Act (UCPA)
Texas Data Privacy and Security Act (TDPSA)
Oregon Consumer Privacy Act (OCPA)
Montana Consumer Data Privacy Act
Delaware Personal Data Privacy Act
Iowa Consumer Data Protection Act
Nebraska Data Privacy Act
New Hampshire Privacy Act
New Jersey Data Privacy Act
Tennessee Information Protection Act
Minnesota Consumer Data Privacy Act
Maryland Online Data Privacy Act
Any subsequently enacted U.S. state privacy law applicable to DispatchHealth.

Nothing in this Policy modifies or replaces our HIPAA Notice of Privacy Practices governing Protected Health Information (PHI).

Scope

This Policy applies to Personal Information collected through:

Public websites
Mobile applications
Online scheduling tools
Consumer portals
Electronic communications
Digital advertising
Website analytics
Cookies and similar technologies
Online forms

This Policy applies only to Personal Information subject to applicable state privacy laws. Certain information, including Protected Health Information regulated by HIPAA, may be exempt from some state privacy laws.

Consumer Privacy Rights

Depending upon your state of residence, you may have the following rights:

Right to Know what Personal Information we collect.
Right to Access your Personal Information.
Right to Correct inaccurate Personal Information.
Right to Delete Personal Information.
Right to Obtain a Portable Copy of your Personal Information.
Right to Opt Out of:
- Sale of Personal Information
- Sharing of Personal Information for cross-context behavioral advertising
- Targeted advertising
- Profiling in furtherance of decisions producing legal or similarly significant effects, where applicable
Right to Limit the Use and Disclosure of Sensitive Personal Information where required by law.
Right to Appeal a denied privacy request where required by applicable law.
Right to Non-Discrimination for exercising your privacy rights.

These rights may be subject to exceptions permitted by law.

Exercising Your Privacy Rights

Consumers may submit requests using the methods identified in our Privacy Policy or Consumer Privacy Notice.

Before fulfilling a request, DispatchHealth will verify the requestor’s identity using information reasonably necessary to confirm the individual’s identity.

Authorized agents may submit requests on behalf of consumers when appropriate written authorization or legal documentation is provided.

DispatchHealth will respond within the timeframes required by applicable law. If additional time is reasonably necessary, we will notify the requestor and explain the reason for the extension.

Where permitted by law, requests may be denied if:

Identity cannot be reasonably verified;
An applicable legal exemption exists;
The request is excessive, repetitive, or manifestly unfounded.

Where required by state law, consumers may appeal the denial of a request by contacting us using the methods identified in our Privacy Policy.

Sale, Sharing, and Targeted Advertising

DispatchHealth does not sell Personal Information in exchange for monetary compensation.

Certain website technologies used for analytics, advertising, marketing measurement, or similar purposes may constitute the “sharing” of Personal Information or the use of Personal Information for targeted advertising under certain state privacy laws.

Where required by applicable law, consumers may opt out of:

Sale of Personal Information;
Sharing of Personal Information;
Targeted advertising; and
Profiling subject to applicable legal requirements.

Consumers may exercise these rights by:

Selecting the “Do Not Sell or Share My Personal Information” link available on our website;
Using our Cookie Preference Center;
Enabling a recognized browser-based Global Privacy Control (GPC) signal, where applicable.

Global Privacy Control (GPC)

Where required by applicable law, DispatchHealth recognizes browser-based Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of Personal Information for the browser and device transmitting the signal.

Additional information regarding GPC is available at: https://globalprivacycontrol.org

Cookies and Online Tracking Technologies

DispatchHealth uses cookies, pixels, web beacons, software development kits (SDKs), local storage technologies, session identifiers, APIs, and similar technologies to operate and improve our digital services.

These technologies support:

Website functionality
Security
Authentication
Performance monitoring
Website analytics
Consumer experience improvements
Fraud prevention
Marketing measurement
Advertising, where applicable

These technologies may collect information including:

IP address
Browser type
Device identifiers
Operating system
Pages viewed
Referring websites
Session activity
Approximate location
Advertising identifiers

Certain third-party technologies may constitute the sharing of Personal Information under applicable privacy laws.

Consumers may manage their preferences using our Cookie Preference Center.

Third-Party Technologies

DispatchHealth works with third-party providers supporting:

Cloud hosting
Cybersecurity
Website analytics
Marketing automation
Customer communications
Identity verification
Website performance monitoring
Fraud detection
Advertising measurement

These providers process Personal Information only as necessary to provide contracted services or as otherwise permitted by law.

Sensitive Personal Information

Some information collected by DispatchHealth may qualify as Sensitive Personal Information under applicable law.

Sensitive Personal Information may include:

Government-issued identifiers
Financial account information
Authentication credentials
Precise geolocation
Health-related information
Biometric information where applicable

DispatchHealth uses Sensitive Personal Information only for lawful business, operational, healthcare, security, fraud prevention, compliance, and contractual purposes.

DispatchHealth does not use Sensitive Personal Information to infer characteristics about consumers except as permitted by law.

Data Minimization

DispatchHealth collects, uses, retains, and discloses Personal Information only as reasonably necessary and proportionate to fulfill legitimate business, healthcare, legal, operational, and contractual purposes.

We do not collect additional categories of Personal Information or materially change how Personal Information is used without providing notice where required.

Data Retention

Personal Information is retained only for as long as reasonably necessary to satisfy:

Healthcare requirements
Legal obligations
Regulatory requirements
Business operations
Security investigations
Contractual obligations
Dispute resolution
Fraud prevention

Retention periods vary depending on the type of information collected and applicable legal requirements.

When information is no longer required, DispatchHealth securely deletes, anonymizes, or otherwise disposes of the information in accordance with its records retention program.

Data Brokers

DispatchHealth does not knowingly purchase Personal Information from licensed data brokers for marketing purposes.

If Personal Information is received from third parties, it is obtained only for legitimate business, healthcare, legal, contractual, fraud prevention, or operational purposes consistent with applicable law.

Should these practices materially change, this Policy will be updated accordingly.

Categories of Third Parties

DispatchHealth may disclose Personal Information to the following categories of recipients:

Service Providers
Contractors
Cloud Infrastructure Providers
Healthcare Providers
Insurance Providers
Payment Processors
Identity Verification Providers
Security Providers
Analytics Providers
Marketing Providers
Customer Communication Providers
Professional Advisors
Government Agencies
Law Enforcement
Corporate Affiliates
Business Partners supporting requested services

Where appropriate, these parties are contractually required to protect Personal Information consistent with applicable privacy laws.

Children’s Privacy

DispatchHealth does not knowingly sell or share the Personal Information of consumers under sixteen (16) years of age without authorization as required by applicable law.

Parents or legal guardians may exercise applicable privacy rights on behalf of minors as permitted by law.

Changes to This Policy

DispatchHealth may update this Policy periodically to reflect changes in law, technology, or business practices. Material changes will be reflected by updating the Effective Date and publishing the revised Policy on our website.

Contact Information

Questions regarding this Policy or requests to exercise applicable privacy rights may be submitted using the contact methods identified in our Privacy Policy or Consumer Privacy Notice.