PRIVACY POLICY FOR WWW.FINDTHEIRCARE.COM

We value and respect your privacy, and are committed to protecting it under this Privacy Policy. This Privacy Policy describes the types of information that FIND THEIR CARE, which is owned and operated by J&T Oaks Holdings, LLC (“Company”, “we,” “us” or “our”) may collect from you (“user,” “you,” or “your”) or that you may provide through communications with us or other third parties, or when you use or access www.findtheircare.com (the “Website”), mobile application FIND THEIR CARE (the “App”), including any software, features, content, functionality, other services or products offered through the Website or App (collectively the “Services”), and how we use that information.

Please read this Privacy Policy carefully to understand our policies and practices for collecting, using, maintaining, protecting and disclosing your information. By accessing or using the Services, you agree to this Privacy Policy, including the collection, use and sharing of your information as described herein. If you do not agree with our Privacy Policy, you must not access or use the Services. This Privacy Policy does not apply to information collected by us offline or through any other means, or by any other website, app or third party, including through any application or content that may link to or be accessible from the Services.

We may revise this Privacy Policy from time to time. We shall notify users when such updates are made, and all changes are effective immediately when we post them. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Services and this Privacy Policy to check for any changes. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

User Information: Information you provide to us on or through the Services may include:

• Information General Users may provide in using the Services or contacting a Facility, including their name, email address, phone number, relationship to the person needing care, resident age, home address, or other information by which you may be identified (“personal information”).
• Information Operator Users may provide when creating an account or otherwise using the Services, including their name, email address, phone number, job title, profile name, business or facility details, availability, billing address, payment information, and profile information such as content, photos, links, bio and other details.
• Information General Users may provide by filling in forms on the Services, sending inquiries to Facilities, saving shortlists or locations, or typing search queries.
• Information you provide when you contact customer support or report a problem with the Services, including your email address, and records and copies of such correspondence.
• Operator Users may be required to provide additional billing and payment information before purchasing or renewing a subscription, and details to administer the subscription.
• When contacting a Facility, General Users may choose to provide care needs or other information about a prospective resident that includes health, medical, disability, care-level, mobility, cognitive, medication, behavioral or similar health- adjacent information. Please provide only information that is relevant to your care inquiry. The Company is not a health care provider, and the Services are not intended to make the Company a HIPAA-covered entity. However, we treat health-adjacent information with care and do not sell it or use it for advertising.

User Contributions: You also may provide information to be posted, submitted, published, displayed or transmitted (“posted”) on public areas of the Services, or to Operator Users or other third parties (collectively, “User Contributions”). Facility information, content, descriptions, availability and photos, may be public. General User messages with Facilities and Operator Users are private between such users, but are transmitted at your own risk. Please be aware that no security measures are perfect or impenetrable. Further, we cannot control the actions of other users of the Services with whom you may share User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.

Payment Information: All Operator User subscription payments shall be processed through the third-party payment processor Stripe, or such other payment processors as we may designate in the future. All payment information that you provide is provided directly to such third-party payment processors. We do not store full payment card numbers. However, we may receive information, such as payment confirmation, receipts, limited card details, subscription status, billing address or other related records, from third parties processing your payment.

Types of Information: As you navigate through and interact with our Services, we may use automatic data collection technologies to collect certain information related to your usage, diagnostic and performance reports, including:

• Usage: Details of your visits to our Services, including traffic data, usage details, page visits, analytics events, log files and other communication data and the resources that you access and use on the Services. We use location only when you type a place, address or other location into the Services to search or calculate distance to facilities.
• Devices & Connection: Information about your computer, device and Internet connection, including your IP address, operating system, device type, browser type, and standard server-log information.

Types of Technology: The information we collect automatically is primarily statistical or technical data, however we may maintain it or associate it with personal information we collect in other ways or receive from third parties. Technologies we use to collect data automatically may include:

• Analytics Tracking: Pages of the Services may contain tracking codes that permit the Company to understand visits, page views, users who have visited those pages, usage patterns and for other related website statistics (for example, tracking visits to certain content, site performance and page speed, and search terms used to find the Services)
• Cookies: A cookie is a small file placed on your device when you use the Services, and is used to remember your choices and preferences, or measure basic usage of the Services. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you disable or refuse cookies, some parts of the Services may be inaccessible or not function properly.

Third-Party Content & Services: Some content, data, or applications on the Services are served by third parties, including Operator Users, Facility operators, content providers and application providers. We do not sell user data, run advertisements, or use your information for interest-based advertising. We do not control parties’ collection or use of your information to serve interest-based advertising.

Third-Party Providers: Further, we may work with third-party service providers to help operate, host, analyze, secure and improve our Services, and Operator Users may use our Services to offer and manage their Facility listings. When you interact with third- party providers, Operator Users or integrated services, you may be providing information directly to the third party. For example, General Users may provide information to Facility operators, online payments are processed through third-party payment processors, users may communicate through messaging tools, or communicate with third parties regarding services, inquiries, subscriptions, updates or notices relating to their use of the Services. We endeavor to work with payment processors that encrypt payment transactions with SSL or other comparable security technology, however we cannot, and do not, verify the security methods implemented or maintained by such third parties.

Our current third-party service providers and data sources may include Supabase (database and authentication), Vercel (application hosting and privacy-preserving analytics), Stripe (payments), and public CMS/Medicare.gov facility data.

Use of Information by Third Parties: We do not control third parties’ tracking technologies or how they may be used. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. Please note that when you use third-party services, their own terms of use and privacy policies will govern your use of their services. If you have any questions about such policies, you should contact the responsible provider directly.

Third-Party Users: Other users of the Services, including care-seekers, family members, facility operators or their teammates, may provide us with information about you, such as your contact information, relationship to a prospective resident, facility affiliation or inquiry details, or may provide other information through their User Contributions.

Purposes: Collecting this information helps us improve our Services and deliver a better, more personalized experience, by enabling us to:

• Store information about your preferences, saved lists and locations, allowing us to customize our Services according to your individual interests, and recognize you when you return to the Services.
• Present, operate, improve, fix, troubleshoot, customize and analyze our Services and its contents.
• Estimate our audience size and usage patterns, and improve performance and speed of the Services.
• Carry out our obligations, police user conduct, and enforce our rights under our Terms of Use and Privacy Policy, including to investigate any violations of our Terms, or other suspicious activity.
• Provide you with notices and updates about your account, inquiry, subscription, expiration and renewal notices, updates to the Terms of Use or Privacy Policy, and changes to the Services.
• To communicate with you when you contact us, respond to inquiries, connect General Users with Operator Users, and provide you with information that you request from us.
• To facilitate Operator User subscriptions and family-to-facility inquiries through the Services, and to communicate with you regarding subscriptions, inquiries or related transactions you enter into through the Services.
• To fulfill any other purpose for which the information is provided, or for any other purpose with your consent.
• Contact you about goods or services that you may be interested in. If you do not want your information used for this purpose, you may opt-out by sending us a request at support@findtheircare.com or by using any unsubscribe mechanism we provide.

User Disclosure: Certain information that you provide through the Services may be available to others who use the Services, including Facility information, your name, profile, status or User Contributions. General User messages to Operator Users are not intended to be public, but may be shared with the Facility operators or teammates involved in responding to the inquiry. Other users that you communicate with may store or re-share your information with others. You may manage your user settings to adjust some of these features where the Services make settings available.

Aggregated Data: We may disclose aggregated information (statistical data that does not identify any individual) about our users without restriction.

Company Disclosure: We may disclose personal information that we collect or you provide:

• To buyers or other successors in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Company’s assets, in which personal information held by the Company about our Services users is among the assets transferred.
• To subsidiaries, affiliates, contractors, service providers, and other third parties we use to support our business (including hosting, authentication, payments, maps, analytics, optional search functionality and public facility-data providers), and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
• If we reasonably believe disclosure is necessary or appropriate to enforce our Terms of Use, protect the rights, property, or safety of the Company, our customers or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection, credit risk reduction, billing and collection purposes.
• To comply with any court order, law or legal process, including to respond to any government or regulatory request.
• To fulfill the purpose for which you provide it, or any other purpose disclosed by us when you provide the information.
• For any other purpose with your consent.

Privacy Settings: Operator Users can review and change certain user information and settings by logging into their account and visiting the applicable account pages. General Users may browse without an account and contact us about their information. You may also send us an email at support@findtheircare.com to request access to, correct, delete or receive a copy of personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Account Deletion: Operator Users may delete or request deletion of an account as made available through the Services or by contacting us. General Users may contact us to request deletion of information provided through the Services. Please note that when you delete your account, or request that any of your information be deleted, all of your information may be deleted from our servers, except information we require to operate and provide the Services, maintain legal or billing records, or complete transactions and security measures. However, deleting your account does not affect the information that has been stored or shared by other parties. Further, if you delete your User Contributions from the Services, copies of your User Contributions may remain viewable in cached and archived pages, or might have been copied or stored by other Services users.

We, or through third-party service providers, have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure. Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password or account access credential, you are responsible for keeping it confidential. We ask you not to share your password or secure access link with anyone. We urge you to be careful about providing information in public areas of the Services or in message threads with Facilities. Operator User listing content may be public. General User messages are intended to be private to the family and relevant Facility but may be viewed by the participants in that thread.

All of our Services are hosted in the United States, are only intended for users within the United States, and we make no claims that the Services or any of its content are accessible or appropriate outside of the United States. Please note, that many countries may have laws governing data collection and use that differ from U.S. law. If you choose to use the Services from any other country or region of the world, you should be aware that you are transferring your personal information outside of that country or region to the United States for storage and processing, and that we may also transfer your data from the U.S. to other countries or regions in connection with the storing and processing of the data, fulfilling your requests, and/or operating the Services. Further, by using the Services, you may provide your information to users or third parties in countries outside the United States, regardless of where you are located when using the Services. By providing any information, including personal information, on or through the Services, you consent to such transfer, use, storage, and processing.

The Services are not intended for children under 18 years of age. No one under age 18 may provide any personal information on the Services, and we do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information on the Services, or on any of its features, do not submit a care inquiry, manage a Facility listing, purchase an Operator User subscription, register on the Services, or provide any information about yourself to us. If we learn we have collected or received personal information directly from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at: support@findtheircare.com.

We always welcome any feedback you may have about FIND THEIR CARE or our policies. To ask questions or comment about this Privacy Policy and our privacy practices, please contact us at: support@findtheircare.com.