This Personal Data Privacy Policy (hereafter referred to as the “Privacy Policy”) shall apply to all information posted on the website and to all information that the User may provide as well as to all programs and products covered by the website. It includes all our methods of collection, use, maintenance, protection and disclosure of such information. This Privacy Policy is incorporated to our Terms and Condition of Website Use. All capitalized terms used but not defined herein shall have the same meaning given to them in the Terms and Condition of Website Use.

1. TERMS AND DEFINITIONS

1.1. The following terms are used in this Privacy Policy:

1.1.1. “Website administration”, “We”, “Our”, “JT” “Joytabs” – authorized personnel that administers the website on its behalf, arranges and processes personal data, and defines the objectives of personal data processing, the composition of personal data to be processed, and the actions (operations) taken with respect to personal data.

1.1.2. “Personal data” – any information related to a directly or indirectly defined or definable individual (personal data subject).

1.1.3. “Personal data processing” – any action (operation) or a combination of actions (operations) performed using automation tools or without the use of such tools with personal data, including collection, recording, systematization, accumulation, storage, specification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

1.1.4. “Confidentiality of personal data” – a mandatory requirement for the Website administration to prevent the distribution of personal data without the consent of the personal data subject or other legal grounds.

1.1.5. “Website User” (hereafter referred to as “the User”) – a person that has an access to the website via Internet network and uses it for its own purposes.

1.1.6. Cookies – a small piece of data sent by a web server and stored on a user’s computer, which the web client or web browser sends to the web server with every HTTP request when attempting to open a page of the corresponding website.

1.1.7. IP-address – a unique network address of a host based on IP Protocol.

2. GENERAL PROVISIONS

2.1. Use of the website by the User implies agreement with this Privacy Policy and the User’s personal data processing terms.

2.2. In the event of a disagreement with the terms of the Privacy Policy, the User shall stop using the website.

2.3. This Privacy Policy shall apply to the website only. The Website administration shall not control or be liable for third party websites that the User can visit using links available on the website.

2.4. The Website administration shall not verify the reliability of personal data provided by the Website User.

3. SUBJECT OF THE PRIVATE POLICY

3.1. This Privacy Policy shall establish obligations of Website administration with regard to intentional non-disclosure of personal data provided by the User following different requests from Website administration.

3.2. The personal data that may be processed under this Privacy Policy shall be provided by the User by completing special forms on the website and generally shall include the information as follows:

Last Name, first Name of the User;

Contact phone number;

E-mail address;

Data on the state of your health, treatment options, appointment cards to a doctor, doctor’s prescriptions and results of laboratory analyses including protected health information (“PHI”) or any other related health information;

Answers to special questions that would help us to make a decision on the treatment strategy to be provided for you in medical organizations and by healthcare providers;

Home address of the User and other data;

Payment details of the User.

3.3. The Website administration shall take measures to protect Personal Data that is automatically transmitted when visiting the pages:

* IP-address;

* information from cookies;

* information on the browser (or any other program that provides access to the website);

* access time;

* visited addresses of web pages

* referrer (address of the previous page).

3.3.1. Disabling cookies may result in the inability to access website.

3.3.2. The website shall collect statistical data of the IP-addresses of its visitors. This information is used to identify and resolve technical issues to monitor the correctness of processes.

3.4. Any other personal information not mentioned above (browsing history, browsers or operating systems used, etc.) shall not be subject to intentional disclosure, except for cases stipulated in items 5.2 and 5.3 of this Privacy Policy.

4. USER’S PERSONAL DATA COLLECTION OBJECTIVES

4.1. User’s personal data can be used by the Website administration in order to:

4.1.1. Identify a User registered on the website to provide the services under the Terms and Conditions of Website Use.

4.1.2. Provide the User with access to the personalized data of the website.

4.1.3. Establish feedback with the User, including sending of notifications and requests associated with the use of the website, the provision of the services, processing of requests and applications from the User.

4.1.4. Establish the User’s location to ensure security and prevent fraud.

4.1.5. Confirm the authenticity and completeness of personal data provided by the User.

4.1.6. Create a user account in order to effect purchases, provided that the User agreed the creation of the user account.

4.1.7. Notify the Website User of the status of the order.

4.1.8. Process and receive payments.

4.1.9. Provide the User with efficient technical support in the event of problems related to the use of the website.

4.1.10. Provide updated products, special offers, price information, newsletters and other information to the User with his/her consent on behalf of the website or on behalf of website’s partners.

4.1.11. Hold promotional activities with consent of the User.

4.1.12. Provide access to websites of third parties or services of partners to the User to receive offers, updates or services thereof.

4.1.13. Provide services and, when appropriate, facilitate the provision of health care services by a doctor or another health care services provider and provide appropriate activities related to the health care.

4.1.14 Send messages to your address on behalf of doctors and other health care providers that use the Services to meet your demands.

4.1.15. Deliver requested information and reply to your requests.

4.1.16. Give a technical support to you and improve our website, applications and services.

4.1.17. Verify your identity and your account administrator including processing of your payments and fulfilling your order.

4.1.18. Notify you of our products and services as well as of our subsidiaries, affiliated and parent companies and their associated companies and external partners.

4.1.19. See the effectiveness of an advertisement.

4.1.20. Notify you of any changes in our Website, Application, and Service.

4.1.21. For any purposes when you give your consent (if it is required by the law)

5. METHODS AND TERMS OF PERSONAL DATA PROCESSING

5.1. User’s personal data shall be processed with no time limitation, by any legal means, including processing in personal data information systems with or without the use of automation tools.

5.2. The User shall agree that Website administration may transfer personal data to third parties as follows:

to courier companies, postal organization, telecom carriers, any member of our team, healh care providers, medical organizations, pharmacies, contractors, service providers and other third parties that we use to support our business or to administer or support the Services; to our third-party suppliers that provide services such as our website and applications hosting, data analyses, IT services and infrastructure, customer assistance, delivery of e-mail, audit and other similar services; to any third party when deemed feasible and necessary by us to transfer personal data; for any other purposes when you provide information or with your consent for the sole purpose to fulfill requests.

5.3. User’s personal data can be transferred to competent public authorities only on the grounds and according to the procedure established by the legislation.

6. OBLIGATIONS OF THE PARTIES

6.1. The User shall:

6.1.1. Provide his/her personal data required to use the website.

6.1.2. Update, supplement the provided information on personal data if this information changes.

6.1.3. Take precautions to protect access to his/her confidential data that are stored on the website.

6.2. The Website administration shall:

6.2.1. Use the received information solely for the purposes indicated in item 4 of this Privacy Policy.

6.2.2. Not disclose User’s personal data, except for items 5.2 and 5.3 of this Privacy Policy.

6.2.3. Block personal data related to the corresponding User from the moment of the application or request by the User or his/her legal representative, or an authorized body for protection of the rights of personal data subjects, for the verification period, if unreliable personal data or illegal actions are revealed.

7. LIABILITIES OF THE PARTIES

7.1. The Website administration shall be liable for intentional disclosure of User’s personal data in accordance the current legislation with the exception of cases provided for in items 5.2, 5.3 and 7.2 of this Privacy Policy.

7.2. In case of a loss or disclosure of User’s personal data, the Website administration shall not be held liable, if this confidential information:

7.2.1. Became public property before its loss or disclosure.

7.2.2. Was obtained by the Website administration from a third party before it was received from the User.

7.2.3. Was received by third parties due to unauthorized access to files of the website.

7.2.4. Was disclosed with the consent of the User.

7.3. The User shall be responsible for validity, correctness and reliability of provided Personal data according to the current legislation.

8. DISPUTE RESOLUTION

8.1. Before applying to the court for disputes arising from the relationship between the User and the Website administration, a claim (a written proposal concerning the voluntary resolution of the dispute) shall be mandatorily submitted.

8.2. The Claimee, within 30 calendar days from the date of receipt of the claim, shall notify the claimant of the claim examination results in writing.

8.3. If the agreement is not reached, the dispute shall be referred to the court according to the current legislation.

8.4. This Privacy Policy and the relationships between the User and the Website administration shall be governed by the current legislation.

9. SECURITY

Unfortunately, the transfer of the information via Internet is not fully safe. Even though we take all possible precautions to protect your private information we cannot guarantee the security of personal data provided to our Website or Application; by transferring any personal data you take all the risks.

9. SUPPLEMENTARY CONDITIONS

9.1. The Website administration may introduce any changes to this Privacy Policy without consent of the User.

9.2. The new Privacy Policy shall come into effect from the moment it is posted on the website, unless otherwise specified in the new revision of the Privacy Policy.