Management Dashboard Privacy Policy

This Privacy Policy explains how Sweetch Health Ltd. (“we”, “us” or “Sweetch”) collects and uses data. If not otherwise defined herein, capitalized terms have the meaning given to them in the Sweetch Terms of Service, which is available at https://sweetch.com/management-dashboard-terms-of-service/ (the “Terms”).

Sweetch respects your privacy. Your ability to make informed choices about the use of your personal data is important to us. This Privacy Policy explains Sweetch’s policies regarding the collection, use, disclosure and protection of any information we receive.

Personal Data We Collect

Personal data that you may provide through the Services or otherwise communicate with us includes:

• Login and account information, such as your first name, last name, username or similar identifier and password;
• Contact information, such as your email address and telephone number;

When interacting with our Services, certain data is automatically collected from your device or web browser. This data includes your:

• Device IDs;
• Data regarding logins into the Dashboard and browsing history; and
• IP addresses.

Sweetch requires this information in order to provide you with certain features of our Service. It is your voluntary decision whether to provide us with any such personal information, but if you choose not to provide such information some features which require your personal information may not be available and we may not be able to provide you with the Services.

Children

Sweetch does not knowingly collect personal data from children under the age of 16. In the event you become aware that an individual under the age of 16 has enrolled without parental permission, please advise us immediately.

Why and How Do We Use Your Personal Data?

We use your personal data in the following ways:

• To Provide the Features of the Services You Request

When you use our Services, we will use your personal data to provide the requested product or service. For example, if you contact our customer service, we will use information about you, such as your name and email address to help you resolve a problem or questions.

If you use our Services to access the data of your patients, we will collect data regarding such access.

• To Communicate Information about our Services

Depending on where you reside, we may use the contact details you provided to send you marketing communications about similar Sweetch services where permitted by applicable law (unless you have opted-out). If you reside in the EU or another jurisdiction that requires you to opt-in to receive marketing communications, we will ask for your consent to send you marketing information. We may use the information that you provide to us to personalize communications on products and services that may be interesting for you.

If you do not want to receive marketing communications directly from us, you may opt-out by contacting us using the details listed below or by following the unsubscribe instructions that appear at the bottom of all marketing emails we send to you.

• To Operate, Improve and Maintain our Services

We may use personal data about how you use our Services to enhance your user experience and to help us diagnose technical and service problems and administer our Services.

• To Protect Our or Others’ Rights, Property or Safety

To the extent permitted by applicable law, we may also use your personal data about how you use our Services to prevent or detect fraud, abuse, illegal use, violations of the Terms, and to comply with court orders, governmental requests or applicable law.

• Use of Aggregated Data

By analyzing all information we receive on an aggregated basis, including all information concerning users, we may compile data across a variety of platforms and users (“Aggregated Data”), provided that the Aggregated Data will not contain any personally identifiable information that may be used to identify you and contact you. Aggregated Data helps us understand trends and user needs so that new products and services can be considered and so existing products and services can be tailored to user desires. Aggregated Data is anonymous. We may share such Aggregated Data with our partners, without restriction, on commercial terms that we can determine in our sole discretion, to the extent allowed by applicable law.

• Other Purposes

We may also use your personal data in other ways and will provide specific notice at the time of collection and obtain your consent where necessary, provided that such uses are permitted by applicable law.

• Legal Bases for Collection and Use of Your Personal Data

To process your personal data, we rely on certain legal bases, depending on how you interact with our Services.

When you use the Services by registering for the Services directly with us, the legal basis for collecting and processing your Personal Data is to perform a contract with you.

If you reside or are located in the European Economic Area (“EEA”) Sweetch is considered the “data controller” of your personal data collected via the Services.

Sharing Your Personal Data

We do not share or sell the personal data that you provide us with third parties without your express and explicit consent, except as described in this Privacy Policy. We disclose personal data to third parties under the following circumstances:

• We may disclose your personal data to our subsidiaries and corporate affiliates for purposes consistent with this Privacy Policy.
• We may employ third party companies and individuals to administer and provide the Services on our behalf (such as customer support, hosting, email delivery and database management services). These third parties are permitted to use your personal data only to perform these tasks in a manner consistent with this Privacy Policy, solely for the purpose of the provision of the Services to you, and are obligated not to disclose or use it for any other purpose.
• We may provide the IP address assigned to you on the date you used the Services to Segment.io, Inc. (“Segment”) in order to receive an analysis of the use of our Services. We do not combine the information collected through the use of Segment with your personal data. Please see the Segment Terms of Service (available at https://segment.com/docs/legal/terms/) and the Google Privacy Policy (available at https://segment.com/docs/legal/privacy/) for additional information.
• We may disclose information about you to government or law enforcement officials or private parties as required by law, and disclose and use such information as we believe necessary or appropriate to (a) comply with applicable laws and lawful requests and legal process, such as to respond to subpoenas or requests from government authorities; (b) enforce the Terms of Services; (c) protect our rights, privacy, safety or property, and/or that of you or others; and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.
• We may disclose your personal data with any other third party where you have provided your explicit and informed consent in .
• We may also transfer personal data we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, spin-off, dissolution or liquidation) and during negotiations for the same, provided that with respect to data transferred during negotiations, we have entered into a confidentiality agreement which protects the personal data and prohibits the use or disclosure of your personal data.

Protection and Management of Your Personal Data

• Security

We follow generally accepted industry standards to protect the personal data submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security

• International Transfers of your Personal Data

The personal data we collect (or process) in the context of our Services will be stored in the United States and other countries. Some of the data recipients with whom we share your personal data may be located in countries other than the country in which your personal data originally was collected. The laws in those countries may not provide the same level of data protection compared to the country in which you initially provided your data. Nevertheless, when we transfer your personal data to recipients in other countries, including the United States, we will protect that personal data as described in this Privacy Policy and in compliance with applicable law.

We take measures to comply with applicable legal requirements for the transfer of personal data to recipients in countries outside of the EEA that do not provide an adequate level of data protection. We use a variety of measures to ensure that your personal data transferred to these countries receives adequate protection in accordance with data protection rules; this includes signing the EU Standard Contractual Clauses, verifying the recipient has adopted Binding Corporate Rules or that the recipient adheres to the EU-US and Swiss-US Privacy Shield Framework.

• Retention of your personal data

We will retain your personal data for as long as your account is active or as needed to provide you the Services. If you wish to cancel your account or request that we no longer use your information to provide you the Services, please contact us at the email address listed below. We will retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

With respect to Aggregated Data and de-identified data we may use and retain such data indefinitely without further notice to you.

Your Rights Relating to Your Personal Data

If you would like information in relation to your rights or would like to exercise any of them, you may contact us via privacy@sweetch.com or at our postal address provided below. If you reside or are located in the EEA or Australia, you may ask us to take the following actions in relation to your personal data that we hold:

• Opt-out. Stop sending you direct marketing communications. You may continue to receive Services-related and other non-marketing emails.
• Access. Provide you with information about our processing of your personal data and give you access to your personal data.
• Correct. Update or correct inaccuracies in your personal data.
• Delete. Delete your personal data.
• Transfer. Transfer a machine-readable copy of your personal data to you or a third party of your choice.
• Restrict. Restrict the processing of your personal data.
• Object. Object to our reliance on our legitimate interests as the basis of our processing of your personal data that impacts your rights.

We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your personal data or response to your requests regarding your personal data, you may contact us at privacy@sweetch.com or submit a complaint to the data protection regulator in your jurisdiction. If you reside or are located in the EEA you can find your data protection regulator here. If you reside or are located in Australia you can find your data protection regulator here.

Third Parties and Online Links to Other Sites

Sweetch users can link to other websites of third-parties that provide useful information/services. Any personal data you provide on the linked pages is provided directly to this third-party and is subject to that third-party’s provider’s privacy policy. We do not have access to the information collected by such partners. Except as described above, Sweetch is not responsible for the content or privacy practices of websites to which we link. Links from our Services to third-parties or other websites are provided for your convenience. We encourage you to learn about the privacy practices of each website before providing them with personal data. We cannot be held responsible for any third-party websites and accessing their content will be subject to their own privacy policies, which again – we advise you to check.

Changes to Our Privacy Policy

Applicable law and our practices change over time. If we decide to update our Privacy Policy, we will post the changes on our Services. If we materially change the way in which we process your personal data, we will provide you with prior notice, or where legally required, request your consent prior to implementing such changes. We strongly encourage you to periodically read our Privacy Policy and keep yourself informed of our practices. This Privacy Policy was last modified in August 2019.

Comments and Questions

If you have any comments, requests or questions about our privacy policy, please contact us at privacy@sweetch.com or use or our postal address:

Sweetch Health ltd.
48 Derech Begin
Tel Aviv 6618005
Israel

‍