Project Hercules | Privacy Policy

Last Updated: 05 Dec 2025

Hercules Study P.C., and associated entities, including Prenuvo Inc and Prenuvo Radiology PA. (“Prenuvo”, “us,” “we,” or “our”) are committed to protecting the privacy of your Personal Information (i.e., information reasonably related to a specific individual).

The purpose of this Privacy Notice (“Privacy Notice”) is to explain how we may collect, use, store, disclose, or otherwise process your Personal Information when you interact with us through our websites, emails, social media accounts, mobile applications, and other properties (collectively, our “Digital Properties”) and through other online and offline interactions, such as when you receive a Prenuvo scan at one of our locations. All capitalized terms not defined in this Privacy Notice have the same meaning as in the Hercules Study Terms of Service, available here: https://www.herculesstudy.org/legal-pages/terms-of-service.

We may change this Privacy Notice from time to time, when we do we will update the “Last Updated” date at the top of this Privacy Notice. The updated version will be effective when it is posted. If we make material changes to the way we use or disclose information we collect, we will use reasonable efforts to notify you such as by emailing you at the last email address you provided to us, by posting notice of such changes on the Services, or by other methods consistent with applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.

Categories of Personal Information We May Collect

Identifiers and Contact Information, such as your name, physical characteristics or description, alias, postal/physical address, email address, telephone number, business contact information, account number or other unique personal identifier, device identifiers (such as cookie IDs and IP address), and/or other similar identifiers.

Sensitive Personal Information including “Highly Confidential Information”, such as Government Identifiers (driver’s license; state identification card; Personal Health Number, or passport number), age (40 years or older) including date of birth; race or ethnic origin; color; ancestry; Religious beliefs; Information about your health including medications, treatments, surgeries, substance use and treatment, mental and developmental health (including social, psychological, behavioural or medical interventions) and/or physical symptoms, bodily functions, vital signs, diagnoses, conditions, or disabilities; Medical history in relation to yourself and family members including genetic information; Sex (including gender, gender identity, gender expression, transgender or non-binary status, gender-affirming care, reproductive or sexual health information, pregnancy or childbirth and related medical conditions); Sexually transmitted and other communicable disease information including HIV/AIDS test results; Medical or Health Insurance information including insurance policy number; Physical activity, work industry, or other activities; Content of mail, email, and text messages where we are not the intended recipient; any other information used to associate or identify an individual with any category of health information that is derived or inferred from non-health information (including, without limitation, proxy, derivative, or emergent Information derived through an algorithm, machine learning or any other means).

Records about you, such as preference information (including marketing and purchasing preferences), account settings (including any default preferences), the content, timing and method of communications you have with us, such as online chats, calls, and emails, signatures and physical characteristics or a description of you.

Commercial and Payment information, such as purchase or subscription information, information about products you order or are interested in, payment details, delivery details, and other commercial or financial information; and legal information relating to your transactions, such as fraud checks or flags raised about your transactions, payment card refusals, complaints and information related to their resolution, and legal requests and communications.

Internet or other electronic network activity information, such as your browsing history, search history, and other information regarding your interactions with and use of the Digital Properties. For more information about cookies and other device data, please see the Cookies and Other Tracking Technologies section below.

Non-precise geolocation data, such as your approximate location based on your IP address.

Audio, electronic, visual, or other sensory information, such as photographs taken at events, call recordings, and video recordings.

Inferences drawn from any of the information we collect to assess the level of interest in our products and services based on frequency of visits and contact and determine your preferred frequency for receiving offers. Profile reflecting a person’s preferences; characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sources of Personal Information

“Personal Information” is any data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Data does not include publicly available information, de-identified or aggregated information, or information covered by certain federal and state laws.

We collect Personal Information about you from the following sources:

Directly from you. We may collect Personal Information you provide to us directly, such as when you contact us through our Digital Properties, interact with us in person at one of our locations, sign up for offers or newsletters, communicate with us, place or customize orders, or sign up for an account or other services.

Inferences from using our services. This Includes inferences made when you undertake Hercules or Prenuvo Exams, Scans or receive services from us; respond to surveys, interview requests or questionnaires.

Data collected automatically and through tracking technologies. We may automatically collect information or inferences about you, such as through cookies and other tracking technologies, when you interact with our Digital Properties. This may include information about how you use and interact with our Digital Properties or otherwise interact with us, information about your device, and internet usage information.

From third parties. We may collect Personal Information from third parties, such as referring medical practitioners as applicable, physicians and other medical professionals who practice through our affiliated professional companies, service and advertising partners, content providers, business partners, data brokers, lead generators, companies that provide or sell lists of potential customers, social media companies or other parties who interact with us.

From publicly available sources. We may collect Personal Information about you from publicly available sources, such as public profiles and websites. We may combine and use information and make inferences from information that we receive from the various sources described in this Privacy Notice, including third party sources. We may also use or disclose the combined information and inferences for the purposes identified below.

How We Use Personal and Personal Health Information

We may use Personal Information for the following purposes:

To provide you products and services, such as providing and delivering you the goods and services you request (including health and medical imaging, reporting and related services to our Patients via our licensed medical providers that provide healthcare services, drugs, or medical devices); Administer your account, provide customer/patient service; processing or fulfilling orders and transactions, verifying customer and patient information; processing payments; communicating with you about your product, service or subscription; hosting informational webinars; verifying eligibility for certain programs or benefits; Tailor the features, performance and support of the services to you and your preferences; troubleshoot issues, respond to requests, complaints, and inquiries; and providing similar services or otherwise facilitating your relationship with us.

If you choose not to provide us with your Personal Health Information, we may not be able to provide you with the full extent of our Services. We may also not be able to provide you with an Exam if we are unable to determine the suitability or safety of the service.

To de-identify or anonymise Personal and Personal Health Information. In order to:

Provide, operate, analyze usage of, and improve the services, including performing research and development;
Conduct internal research in order to create publications and advance the practice of proactive healthcare; and
Conduct research and collaboration with select 3rd parties to advance healthcare and the science of preventative healthcare.

Health information is de-identified or anonymised prior to use for internal research, analytics or reporting purposes and we only use your personally identifiable information when necessary to deliver our services to you or when we have an appropriate legal basis to use or disclose your health information in a state where you may be identifiable.

For our internal business purposes, such as maintaining or servicing accounts; operating our Digital Properties and customizing the content; maintaining internal business records; enforcing our policies and rules; conducting organizational analysis; completing management reporting; auditing; and/or maintaining records on business activities.

For our internal research and product improvement purposes, such as verifying or maintaining the quality or safety of our products or services; improving our products or services; designing new products and services; evaluating the effectiveness of our advertising or marketing efforts; and debugging and repairing errors with our systems, networks, and equipment.

For legal, safety or security reasons, such as complying with legal requirements, processes, or orders; fulfilling reporting and similar requirements; complying with government inspections and other requests from government or other public authorities; pursuing legal rights and remedies; investigating and responding to claims against us and our customers and employees; protecting our, your, our customers’, and other individuals’ safety, property or rights; addressing security and health and safety issues (including managing spread of communicable diseases) and malicious, deceptive, fraudulent, or illegal activity; To Investigate, detect, deter, prevent, report, defend against, or take other action regarding security incidents, abusive behavior, suspected fraud, malicious or illegal activities, or violations of our Terms of Service or other policies; Ensure our terms, policies, and agreements with you and any third parties are enforced; and receiving legal advice or approval.

For marketing and targeted advertising, such as marketing our products or services or those of our affiliates, business partners, or other third parties. For example, we and our business partners may use Personal Information we collect to personalize advertising to you on the Prenuvo website or others, to analyze interactions with our email communications or website areas viewed, to develop product, brand or services audiences (including by identifying you across devices/sites) to better target our advertising to you, or to send you newsletters, surveys, questionnaires, promotions, or information about events or webinars.

Prenuvo will not use the Personal Information we collect for materially different, unrelated, or incompatible purposes without providing you notice of the intended use and the rights that may apply to you.

We may use anonymized, de-identified, or aggregated information for any purpose permitted by applicable regional law.

Sharing, Disclosure and Selling Personal Information

We understand the importance of protecting the confidentiality of your information and limit our disclosure of your Personal and/or Health Information to the following categories of third parties:

Affiliates and subsidiaries, including parent entities, corporate affiliates, subsidiaries, business units, and other companies that share common ownership.
Service providers that work on our behalf to provide the products and services you request or support our relationship with you, such as IT providers, internet service providers, web hosting providers, data analytics providers, and companies that provide business support services, financial administration, or event organization.
Professional consultants, such as accountants, lawyers, financial advisors, and audit firms.
Other entities in connection with a corporate transaction, such as if we, or some or all of our assets, are acquired by another entity, including through a sale in connection with bankruptcy or other forms of corporate change.
Business partners that may use Personal Information for their own purposes, such as companies that operate cookies and other tracking technologies, social media companies, data brokers, marketing and advertising partners, and other business partners for their own marketing, research, or analytics purposes. Where required by law, we will obtain your consent prior to disclosing your Personal Information to our business partners. Where recipients use your Personal Information for their own purposes independently from us, we are not responsible for their privacy practices or Personal Information processing policies.
Entities to which you have consented to the disclosure.
Research organizations such as universities or other organizations in the health and/or medical space with your consent or where permitted or required by Applicable Laws.

We disclose your Personal Information to the categories of third parties listed above for the following business purposes:

Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
Helping to ensure security and integrity of our Services and IT infrastructure to the extent the use of the Personal Information is reasonably necessary and required for these purposes.
Debugging to identify and repair errors that impair existing intended functionality.
Short–term use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us. Our agreements with third parties generally prohibit your Personal Information from disclosure to another third-party and from using your Personal Information to build a profile about you or otherwise alter your experience outside your current interaction with us.
Performing services on behalf of us, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of us.
Providing advertising and marketing services to Consumers.
Undertaking research and publications for technological development and demonstration in the healthcare space.

We do not use, share or disclose your Sensitive Personal Information, including Personal or Protected Health Information for any purpose other than the following:

To provide goods or services in a manner consistent with the purpose for which we collected the Personal Health Information.
To a third party with whom you have a direct relationship when the disclosure is for the purpose of providing a product or service to you if we maintain control and ownership of the Information, and the third party uses the Information only at our direction and consistent with your consent and for the purpose for which it was collected.
To perform services on behalf of us, such as maintaining or servicing accounts, providing customer or patient care, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of us.
To detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted Personal Information, provided that our use of your Personal Information is reasonably necessary and proportionate for such purposes.
To resist malicious, deceptive, fraudulent, or illegal actions directed at Prenuvo and to prosecute those responsible for those actions, provided that our use of your Personal Information is reasonably necessary and proportionate for this purpose.
To ensure the safety of natural persons, provided that our use of your Personal Information is reasonably necessary and proportionate for this purpose.
To verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by us.
To a third party as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in compliance with applicable laws.

In addition to the above, we may disclose any or all categories of Personal Information to any third-party (including government entities and/or law enforcement entities) as necessary to:

Comply with federal, state, or local laws, or to comply with a court order or subpoena to provide information.
Comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, provincial, state, or local authorities.
Cooperate with law enforcement agencies concerning conduct or activities that we (or one of our service providers) believe may violate federal, state, provincial, or local law.
Comply with certain government agency requests for emergency access to your Personal Information if you are at risk or danger of death or serious physical injury.
Enforce or apply our Terms of Use and other agreements or policies.
Protect your, our, our customers’, or other third parties’ safety, property, or rights.
Exercise or defend legal claims.

“Sale” of Your Personal Information for Monetary or Other Valuable Consideration

We do not sell Personal Information as the term “sell” is commonly understood to require an exchange for money. However, using advertising and analytics cookies on our Website is considered a “sale” of Personal Information as the term “sale” is broadly defined in some regional legislation to include both monetary and other valuable consideration. Using this broad definition, our “sale” is limited to our use of third-party advertising and analytics cookies and their use in providing behavioral advertising and their use in understanding how people use and interact with our Website(s). Our “sale” of your Personal Information is subject to your right to opt-out of those sales (see Exercising Your Privacy Rights).

Additionally, we do not sell Personal Health Information. However, based on a more broad definition of ‘sell’ in some regional legislation to include both monetary and other valuable consideration we do share or ‘sell’ Health Information that has been de-identified or anonymised for research collaborations and publishing of research papers or similar activities. We have aligned our definition of a “sale” with the more broad definition relating to the exchange of information for monetary or other valuable consideration, excluding exchange:

To a third party as an asset that is part of a merger, acquisition, bankruptcy, or other transaction through which the third party assumes control of all or part of our assets;
By us to a processor when such exchange is consistent with the purpose for which the Personal Health Information was collected and disclosed to the patient or consumer;
With a third party for the purpose of providing a product or service you requested;
By us to an affiliate;
As directed by you or if you are intentionally using us to interact with and disclose Personal Health Information to a third party; or
If you intentionally made the Personal Health Information available to the general public through mass media, without restriction to a specific audience.

Prenuvo will not ‘sell’ Personal Health Information unless we have obtained consent from you in the form of a valid authorization from the Health Information Subject(s) whose Personal Health Information is involved in the sale. If you have previously authorized us to sell your Personal Health Information, you can revoke that authorization at any time by following the instructions listed on your original authorization.

“Sharing” of Your Personal Information for Cross-Context Behavioral Advertising

Prenuvo may “share” your Personal Information for the purpose of cross-context behavioral advertising, subject to your right to opt out of that sharing. Our “sharing” for the purpose of cross-context behavioral advertising would be limited to our use of third-party advertising cookies and their use in providing you cross-context behavioral advertising (i.e., advertising on other websites or in other mediums). When the recipients of your Personal Information disclosed for the purpose of cross-context behavioral advertising are also permitted to use your Personal Information to provide advertising to others, we also consider this disclosure as a “sale” for monetary or other valuable consideration under the the definition of “sell” above. We do not knowingly sell or share any Personal Information of minors under the age of 18.

Cookies and Other Tracking Technologies

See our Cookies and Tracking Technologies Notice located here.

Your Rights Regarding Your Personal Information

Although different regions have different privacy related rights, we have standardized the list of requests you can submit in order to meet more comprehensive regulations such as in Europe, Quebec and California. You may have some, or all, of the rights listed below in relation to Personal Information that we have collected about you. Please note that these rights are not absolute, and in certain cases, we may decline your request as permitted by law. If you are a resident of a region that has its own Privacy Laws, please see our Regional Privacy Rights Addenda for information in addition to this Privacy Notice and your rights listed below.

Right to Access / Know. You have the right to request information about the categories of Personal Information we have collected about you. This includes: (a) the categories of Personal Information we have collected about you; (b) the categories of sources from which that Personal Information came from; (c) our purposes for collecting this Personal Information; (d) the categories of third parties with whom we have shared your Personal Information; and (e) if we have “sold” or “shared” or disclosed your Personal Information, a list of categories of third parties to whom we “sold” or “shared” your Personal Information, and a list of the categories of third parties to whom we disclosed your Personal Information to. You may make a Right to Know or a Data Portability Request a total of two (2) times within a 12-month period at no charge.

Right to Delete. You have the right to request that Prenuvo delete the Personal Information that we collected from or about you, and retained, subject to certain exceptions. Once we receive and confirm your Request, we may delete your Personal Information entirely or we may anonymize or aggregate your information such that it no longer reasonably identifies you, and may use it to improve our Services (and direct our service providers to do the same), unless a legal requirement or exception applies. Some exceptions to your right to delete include, but are not limited to, if we are required to retain your Personal Information to complete the transaction or provide you the goods and services for which we collected the Personal Information or otherwise perform under our contract with you, to detect security incidents or protect against other malicious activities, and to comply with legal obligations, including those related to medical record retention. We may also retain your Personal Information for other internal and lawful uses that are compatible with the context in which we collected it. In addition, if you ask us to delete your information, you may no longer be able to access or use some of our Services.

Right to Correct / Correction. You have the right to request that we correct inaccurate Personal Information we collect and/or maintain about you.

Right of Portability / Access to Specific Pieces of Information. You also have the right to request that Prenuvo provide you with a copy of the specific pieces of Personal Information that we have collected about you, including any Personal Information that we have created or otherwise received from a third-party about you. If you make a Data Portability Request electronically, we will provide you with a copy of your Personal Information in a portable and, to the extent technically feasible, in a format that allows you to send the Personal Information to another third-party. In response to a Data Portability Request, we will not disclose your driver’s license number or other government-issued identification number, or your account password. We will also not provide this information if the disclosure would create a substantial, explainable, and unreasonable risk to your Personal Information, your account with Prenuvo, or the security of our systems or networks. If we are unable to disclose certain pieces of your Personal Information, we will describe generally the types of Personal Information that we were unable to disclose and provide you a description of the reason we are unable to disclose it. You have the right to receive a copy of the Personal Information we hold about you and to request that we transfer it to a third party. You may make a Right to Know or a Data Portability Request a total of two (2) times within a 12-month period at no charge.

Right to Withdraw Consent, Limit or Object to Processing. Where we rely on consent to process your Personal Information, including Sensitive Personal Information, you may have the right to withdraw this consent at any time. Please note that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal, and that where you withdraw your consent, we may not be able to deliver the expected service to you. Additionally, have the right to ask us to stop, suspend or restrict our processing of Personal Information. Certain laws may allow you to object to or limit the manner in which we process some of your information, including the ways in which we use or share it. For example, you may have these rights if the processing was undertaken without your consent and without a legitimate business interest (although we may not be required to cease or limit processing in cases where our interests are balanced against your privacy interests).

Right to Not Have a Decision Made Solely on Automated Decision-Making. You may have the right to request that decisions made about you are not based solely on automated processing, including profiling if that decision produces legal effects about you or significantly affects you. Please note that Prenuvo does not make solely automated decisions about Individuals.

Right to Opt Out of Sales/Sharing/Targeted Advertising. You may have the right to opt out of (i) the sale or sharing of your Personal Information, (ii) targeted advertising, and cross context behavioral advertising, which is showing advertising on other websites or other media based on your browsing history with our Website.

Right to Non-Discrimination. We will not discriminate against you for exercising any of your rights. Unless permitted regional legislation, we will not do any of the following as a result of you exercising your privacy rights: (a) deny you goods or services; (b) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (c) provide you a different level or quality of goods or services; or (d) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Right to Regulator Contact. You may have the right to contact or file a complaint with regulators or supervisory authorities about our processing of information. To do so, please contact your local data protection or consumer protection authority.

Exercising Your Privacy Rights

Only you, or an Authorized Agent that you authorize to act on your behalf, may make a Privacy Request related to your Personal Information. To designate an Authorized Agent, see Authorized Agents below. If you believe any of your Personal Information is inaccurate or incomplete, you may review and correct some information about yourself by logging into your online account with us and visiting your “Profile” page.

Making a Privacy Request does not require you to create an account with us. However, we do consider requests made through your password protected Prenuvo account to be verified when the request relates to Personal Information associated with the logged in account.

To exercise the rights described above, please submit a request (a “Consumer Request” or “Data Subject Request”) to us by:

Completing the Data Subject Request form located here;
Emailing us at privacy@prenuvo.com; or
Phoning us at 1-833-773-6886

If you or your Authorized Agent submit a Consumer or Data Subject Request online, we may use a two-step process in order to confirm the request. This process may include verifying your request by contacting you via the phone number or email address we have for you in our records, therefore, by making a Consumer or Data Subject Request, you consent to us contacting you through one or more of these ways.

All Consumer or Data Subject Requests must:

Provide enough information so we can verify you are the person about whom we collected Personal Information or an Authorized Agent of such a person. This may include:
- Filling out an interactive webform; or
- Verifying one or more of the following:
  - full first & last name;
  - date of birth;
  - mailing address on file;
  - phone number on file;
  - email address; and/or
  - any other appropriate individualized data point.
Describe your request with enough detail, including the Privacy Right you would like to exercise, so we can understand, evaluate, and respond to your request.

We will only use Personal Information provided in a Consumer Request or Data Subject Request to verify your identity or authority to make the request. If we cannot verify your identity or authority to make the request and confirm which Personal Information relates to you or the individual that you are making the request for, we will not respond or provide you with any Personal Information.

We reserve the right to charge a reasonable fee or take other appropriate action in response to requests from a Data Subject that are unfounded, excessive, or repetitive.

Authorized Agents

You may authorize your agent to exercise your rights, under applicable regional law, on your behalf by registering your agent with the applicable regional authority or by providing them with power of attorney to exercise your rights (an “Authorized Agent”). We may request that your Authorized Agent submit proof of identity and proof of authorization to exercise your rights on your behalf. We may deny a request from your Authorized Agent to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights.

Communication Preferences

Marketing, Promotional or Sales Messages

Phone: If you have provided your phone number through one of our information request, lead or waitlist forms, we may phone you to discuss the Prenuvo scan with you. These calls are generally informational but can include booking a Prenuvo scan and making payments. If you no longer want to receive phone promotional phone calls from Prenuvo, please inform the person that contacted you or by submitting a Privacy Rights request.
Email: From time to time, Prenuvo may also send you marketing emails to provide you with free newsletters, surveys, offers, and other promotional materials. If you wish to stop receiving marketing emails from us, you can opt out by clicking the unsubscribe link at the bottom of any marketing email or by submitting a Privacy Rights request. Please keep in mind that opting out of promotional messages does not mean that we will not contact you by email about your account, services we have provided or other transactions with us.
SMS, Text or Instant Messaging: You may opt in to receive marketing, promotional and/or sales text messages when requesting more information about our services. Depending on your level of engagement through SMS, you can expect to receive approximately 3 messages per week. If you decide you no longer want to receive these messages, you can opt out of receiving future Prenuvo text messages by replying “STOP.” If you send us a text message asking a question, our team may still respond to the specific question even if you have opted out of promotional text messages. If you are experiencing issues with the messaging program you can reply with the keyword HELP for more assistance, or you can get help directly at 1-833-773-6886.

Transactional Messages

Phone: We may phone you about the Prenuvo services you have purchased or received. These calls may include payment processing, booking confirmations or updates, appointment reminders, status updates and to follow with you before, and after, your Prenuvo scan. Please be aware that you cannot opt out of transactional phone calls as they are the primary way we communicate and collect information required to provide services to you.
Email: We may send you periodic emails that relate to the Prenuvo services you have purchased or received. These messages may include booking confirmations or updates, password reset notifications, appointment reminders, status updates and messages to follow with you before, and after, your Prenuvo scan. Please be aware that you cannot opt out of transactional emails as they are the primary way we communicate status updates or changes about your Prenuvo scan.
SMS, Text or Instant Messaging: We may send you SMS messages to communicate time sensitive reminders or tips relating to your Prenuvo scan. These messages are generally sent in the days leading up to your scan to help make the process as smooth as possible and shortly after your scan in case we need to contact you afterwards. You can opt out of transactional SMS messages at any time by replying “STOP” to any Prenuvo text messages and we will update your preferences within 10 days. If you are experiencing issues with the messaging program you can reply with the keyword HELP for more assistance, or you can get help directly at 1-833-773-6886.

Translation Services

Upon request, and subject to availability, we will arrange for professional translation support through Language Line Solutions Inc. to assist with telephone or video communications regarding our services and your Prenuvo results. Prior to any disclosure of your personal health information, you will be advised of the translator’s name and country where they are currently located, and your consent will be obtained before proceeding with the translator present. If you decline, the discussion will continue in English, or, where possible, with an alternate translator. Translators do not record or retain any information from these interactions and are bound by strict confidentiality obligations, however the interactions may be monitored for quality or training purposes.

Your Account and Contact Information

If you have booked or had a scan with Prenuvo, you can access your contact information and preferences by logging into https://prenuvo.com going to the “Profile” page. You can edit your account information as necessary, this includes your email address, name, phone number, mailing address, and you can adjust your communication preferences. When you update your account information, we may keep a copy of your previous account details for our records and to prevent fraud or other activities that violate our terms, policies and agreements.

Use of Artificial Intelligence

Prenuvo and its partners may use Artificial Intelligence (“AI”) systems to assist in the performance and delivery of your services, including without limitation, processing, assessing, and interpreting your images. The Personal Information we enter into approved AI systems include MRI Images that may include your name, date of birth, exam and patient identifiers and other applicable information collected during your patient intake process, scan, and/or data created during the delivery of the service you have selected with Prenuvo.

These AI systems generate Personal Health Information about you, including: creation measurements of organs or other parts of your body, and/or the identification of actual or possible medical conditions or other health related findings. A qualified medical practitioner reviews all AI-generated outputs to ensure the outputs, including Personal Information, is correct and accurate to the best of our knowledge. These outputs may be used to inform our radiology assessments and generate Reports for you if such services are part of your Prenuvo purchase.

Prenuvo is committed to developing and deploying AI in an ethical, responsible manner, and we only engage with partners who uphold similar standards. Furthermore, we take steps to confirm that all AI tools used in Prenuvo’s healthcare services have obtained the necessary medical clearances and comply with applicable regulatory requirements in the regions where the AI is used.

If you have questions or concerns about Prenuvo’s use of AI or our partners’ involvement, please contact us at privacy@prenuvo.com.

Notice of CCTV Use

At Prenuvo, the safety and security of our patients, staff, and facilities are of the highest importance. We use Closed-Circuit Television (CCTV) systems in the following areas:

Common Areas and Entrances: CCTV cameras are installed in these locations to monitor and ensure the security of our clinics. The video footage captured is accessible only by authorised Prenuvo staff and is reviewed solely for incident investigations. We do not share this footage unless permitted by applicable law. The retention of this information is limited to the duration necessary to maintain security at these locations.

MRI Scanners: For the safety of our patients during MRI scanning procedures, CCTV is also used within the MRI scanners. This video stream is only available on authorised devices during the scanning procedure, is not retained and access is restricted to authorised Prenuvo staff directly involved in conducting the MRI scan.

We are committed to handling all video surveillance data responsibly and in compliance with relevant privacy laws and regulations.

Quality Assurance, Research and Development

We, or third parties who work on behalf of Prenuvo, may access your Personal Health Information from electronic health records maintained by Prenuvo for purposes of:

Quality Assurance: Ensuring the efficacy and accuracy of the Prenuvo Exam and any elected add-ons as well as your Prenuvo Exam or add-on generated reports.

Patient Care Follow-up: Prenuvo may contact you as part of our Prenuvo service to ensure the quality of your experience, accessibility and clarity of reports, and to understand the impact the exam had on your proactive health journey. We may also contact your primary or specialty care physician(s), if you have provided one or more to us, to ensure the clarity of the information provided in the reports, to understand their experience relating to Prenuvo and the Exam, determine if any follow-up or subsequent testing was performed and the results of that follow-up or subsequent testing.

De-identification of Personal Information: Prenuvo will de-identify or anonymise your Personal Information, including Health Information, Special Category or Sensitive data, for internal business operations improvement, system and service enhancements, validation studies, research and product development.

Research and Collaboration with Third Parties

We often collaborate with other researchers and organisations. These collaborations mean that our patients can beneﬁt from radiology experience gained elsewhere while we can beneﬁt from the experience of others. Prenuvo may use your health data when anonymised for future research or commercial activities, whether conducted by Prenuvo, in collaboration with third parties, or independently by third party researchers. For example, Prenuvo may engage in research with third parties using your information that is, in their hands, anonymised to develop new tests or validate and improve our technologies or processes, and we may make your anonymised data available to third parties for their own future research purposes. Recipients may link anonymised data from Prenuvo with other data sources to create a combined data set as long as the data remains anonymised. Recipients of anonymised data are prohibited from attempting to re-identify you in any way. Prenuvo will not share your identifiable data without your additional and explicit consent.

Data Security and Data Retention

Data Security

The privacy and protection of your Personal Information is important to Prenuvo. We maintain security procedures and technical, administrative and physical measures to protect your Personal Health Information against accidental or unlawful destruction, loss, disclosure or use. Steps are also taken to de-identify or anonymise your Personal Health Information in accordance with applicable laws when identifiable data is not, or no longer, required for purposes it was collected for. De-identified data (also called pseudonymized data) is Health Information that has been stripped of identifying information (such as your name or email address), this data may contain a key that Prenuvo can use to link back to the individual where required. Prenuvo will not share this key with any third party. We use de-identified data to improve our Exams and Readings. Anonymised data is similar to de-identified data except that there is no ability to link the data back to an individual.

It is important to note that no method of data transmission or method of physical or electronic storage can be guaranteed to be perfectly secure. There is some risk that an unauthorized third party may find a way to circumvent our security or that a transmission of your information over the internet will be intercepted. Prenuvo has implemented and continues to improve measures to provide a level of security appropriate to the risks of processing your information. We cannot guarantee the security of your information.

Aside from our efforts in securing your information, it is your responsibility to protect the security of your account credentials, keep your password confidential and to take reasonable precautions to protect the Personal Information you send and receive from us. If you notice suspicious activity or believe that your account may have been compromised in some way, please contact us immediately at privacy@prenuvo.com.

Data Retention

Your Personal Information will be retained as long as necessary to fulfill the purposes we have outlined above unless we are required to retain it for longer by applicable law. This includes retaining your Personal Information to provide you with the products or services you have requested and interact with you; maintain our business relationship with you; improve our business over time; ensure the ongoing legality, safety and security of our services and relationships; or otherwise in accordance with our internal retention procedures. Once you have terminated your relationship with us, we may retain your Personal Information in our systems and records in order to ensure adequate fulfillment of surviving provisions in terminated contracts, legal or regulatory requirements or for other legitimate business purposes, such as to enable easier future user onboarding, demonstrate our business practices and contractual obligations, or provide you with information about our products and services in case of interest. If you would like to know more about the retention periods applicable to your Personal Information, you can contact us using details provided in the Contact Information section below.

Children’s Privacy

Our Digital Properties are not directed at, marketed to, nor intended for, children under 18 years of age. As a general rule, we do not knowingly collect any information, including Personal Information, from children under 18 years of age. If you believe that we have inadvertently collected Personal Information from a child under the age of 18, please contact us at the address in the Contact Information section below, and we will take prompt steps to investigate and appropriately address the related information.

External Links

Our Digital Properties may contain links to other third party sites or online services that we do not control, including those embedded in third party advertisements or information. We are not responsible for the privacy practices or data collection policies of such third-party services. You should consult the privacy notices of those third-party services or websites for details on their practices.

Third Party Information Collection

Third parties may collect Personal Health Information over time and across different Internet websites or online services when you use any Internet website or online service of Prenuvo. However, we do not knowingly permit third parties to collect Personal Health Information from you while you are on web pages that are made available after you log in to the password-protected part of our website.

We do not control the collection and use of your information collected by third parties. These third parties may aggregate the information they collect with information from their other customers for their own purposes. You can opt out of third parties collecting your information for targeted advertising purposes in the United States by visiting the National Advertising Initiative's (NAI) opt-out page and the Digital Advertising Alliance's (DAA) opt-out page.

You may also see certain ads on other websites because we participate in advertising networks. Ad networks allow us to target our messaging to users through demographic, interest-based, and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs, and web beacons. The networks use this information to show you advertisements that may be tailored to your individual interests.

International Transfers of Personal Information

The Personal Information we collect will be transferred to, stored in, processed in, and accessed from countries that may be in a different country or region from where you reside or where the clinic you had your scan was located for the purposes set out in this Notice. We maintain servers and core operational teams in the United States and Canada, and we may engage third-party service providers or affiliates in other regions where we operate clinics or business functions.

Whenever we transfer Personal Information out of the region it was collected, we do so in compliance with applicable Data Protection Laws together with robust technical and organisational security measures.

Prenuvo personnel may access your Personal Information while temporarily working outside their home region or country. Such access is restricted to regions that Prenuvo has assessed as offering acceptable privacy and legal protections and is subject to the same security controls that apply when the data is accessed within their home country or region.

By using our services, you acknowledge and, where required, consent to these cross-border transfers and processing activities.

Contact Information

If you have questions regarding this Notice, please contact us using the request form located here, or email us at: privacy@prenuvo.com.

‍