RESEARCH PARTICIPANT PRIVACY AND PARTICIPATION NOTICE

Effective Date: June 23, 2026

1. Introduction and Scope

This Privacy Policy describes how Health Insights, LLC dba TriVoca Health (‘TriVoca Health’), Healthcare Voices, Med Learning Group (‘MLG’), and their affiliated entities (collectively, ‘we’, ‘us’, or ‘our’) collect, use, disclose, store, transfer, and protect personal information. This Policy applies to website visitors, panel members, healthcare professionals, research participants, clients, vendors, and other individuals who interact with us.

2. Affiliated Companies

Healthcare Voices and TriVoca Health are part of the Med Learning Group family of companies. References to ‘we’, ‘our’, and ‘us’ may include affiliated entities supporting research, educational opportunities, advisory programs, compliance activities, operations, participant engagement, and related business functions.

3. Information We Collect

We may collect contact information, demographic information, professional information, healthcare credentials, NPI information, licensure information, specialty information, employer and practice affiliation information, survey responses, interview responses, audio and/or video recordings, communications, device identifiers, browser information, IP addresses, geolocation information, participation history, incentive history, identity verification information, fraud prevention records, and information voluntarily provided by participants.

4. Sensitive Information

Where permitted by law and necessary for research activities, we may collect health-related information, professional credential information, consumer health data, and other sensitive information. Such information is processed only for legitimate and disclosed purposes and subject to appropriate safeguards.

5. How We Use Information

We use personal information to administer panel membership; recruit and manage research participants; conduct research studies; administer surveys, interviews, advisory boards, online communities, and focus groups; communicate research opportunities; communicate educational programs, learning activities, webinars, conferences, continuing education opportunities, and professional development opportunities (collectively, ‘Educational Opportunities’); administer incentives; verify identity and eligibility; prevent fraud; maintain security; comply with legal obligations; and improve our services.

6. Educational and Professional Opportunity Communications

Healthcare Voices, TriVoca Health, MLG, and affiliated entities may communicate with participants regarding research studies, advisory boards, Educational Opportunities, and other healthcare-related educational opportunities. These are first-party communications based on a participant’s relationship with us and are not targeted advertising or cross-context behavioral advertising. Participants may opt out of non-required communications, subject to applicable processes.

7. Information Sharing

We may share information with research sponsors, clients, service providers, technology providers, incentive fulfillment vendors, identity verification providers, fraud prevention vendors, analytics providers, professional advisors, auditors, regulators, and affiliated companies where reasonably necessary to support research, educational engagement, compliance, fraud prevention, operations, and related business activities. These providers may assist with identity verification, professional credential verification, licensure validation, fraud prevention, duplicate-participant detection, device intelligence, research quality review, and related research integrity activities.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising (such as targeted advertising across unrelated websites or applications).

We may disclose personal information where reasonably necessary to comply with applicable laws, regulations, subpoenas, court orders, governmental requests, law enforcement requests, regulatory inquiries, professional licensing investigations, fraud investigations, or other legal processes.

7.1 Corporate Transactions and Business Transfers

Healthcare Voices, TriVoca Health, Med Learning Group, and affiliated entities may transfer or disclose personal information in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of assets, corporate restructuring, or other business transaction. Personal information may be transferred as part of the assets involved in such a transaction, subject to applicable legal requirements.

8. Research Integrity and Fraud Prevention

To protect the integrity of our research and incentive programs, we may use identity verification, credential verification, NPI verification, licensure verification, duplicate-account detection, device fingerprinting, IP analysis, geolocation analysis, participation pattern analysis, AI-response detection, attention checks, consistency checks, quality reviews, and other validation techniques.

9. Healthcare Professional Verification

Where participation is limited to healthcare professionals or other qualified individuals, we may verify and periodically re-verify professional credentials, licensure status, specialty, employer information, practice affiliation, publicly available professional records, and related information necessary to determine and maintain eligibility.

10. Automated Processing

Certain fraud prevention, eligibility, and quality-control activities may involve automated processing or technology-assisted review. Human review may be used where appropriate.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. The applicable retention period is determined by the nature and sensitivity of the information, the purposes for which it is processed, and applicable legal, regulatory, tax, contractual, and client or research-sponsor requirements. Certain records, such as incentive records, tax records, verification records, and fraud investigation records, may be retained for extended periods where necessary to satisfy these obligations.

Notwithstanding the foregoing, retention periods may be extended where reasonably necessary to establish, exercise, or defend legal claims; investigate suspected fraud, abuse, or misconduct; comply with legal, regulatory, tax, contractual, or audit obligations; or protect the rights, property, or safety of Healthcare Voices, TriVoca Health, participants, clients, sponsors, or affiliated entities.

12. Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. No security system can guarantee absolute security.

13. Privacy Rights

Depending on applicable law, individuals may have rights to access, correct, delete, restrict, object to processing, appeal certain decisions, withdraw consent, or request information regarding the processing of their personal information. Identity verification may be required before responding to requests.

14. State-Specific Privacy Rights

The following provisions describe additional privacy rights that apply to residents of specific U.S. states. These state-specific rights supplement the general rights described in Section 13.

14.1 Washington Consumer Health Data

If you are a Washington resident, certain information may constitute consumer health data. Such information will generally be processed with consent or as otherwise permitted by applicable law, and additional rights may apply.

14.2 California Residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (‘CCPA/CPRA’), provides you with the following rights regarding the personal information we collect about you:

• Right to know and access: the right to request the categories and specific pieces of personal information we have collected, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we disclose it.
• Right to delete: the right to request deletion of personal information we have collected, subject to certain exceptions permitted by law.
• Right to correct: the right to request correction of inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing: the right to opt out of the sale or sharing of your personal information.
• Right to limit use of sensitive personal information: the right to limit our use and disclosure of sensitive personal information to the purposes permitted under the CCPA/CPRA.
• Right to non-discrimination: the right not to receive discriminatory treatment for exercising any of these rights.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA/CPRA.

To exercise any of these rights, contact us at compliance@trivoca.com. You may use an authorized agent to submit a request on your behalf. We may verify your identity before responding to your request and will respond within the timeframes required by the CCPA/CPRA. We will not discriminate against you for exercising your rights.
The table below identifies the categories of personal information we have collected about California residents in the preceding 12 months, the business or commercial purposes for which each category is collected, and the categories of recipients to whom we disclose it:

Category of Personal Information	Examples	Business or Commercial Purpose	Categories of Recipients
Identifiers	Name, contact information, IP address, device identifiers, NPI information	Panel administration, identity verification, fraud prevention	Service providers, identity verification providers, affiliated companies
Customer records (Cal. Civ. Code §1798.80(e))	Demographic information, employer and practice affiliation	Eligibility determination, research administration	Research sponsors, clients, service providers
Protected classification characteristics	Demographic information (e.g., age, profession)	Research eligibility and analysis	Research sponsors, service providers
Commercial information	Participation history, incentive history	Incentive administration, fraud prevention	Incentive fulfillment vendors, service providers
Internet or other electronic network activity	Browser information, participation patterns	Security, fraud prevention, analytics	Analytics providers, service providers
Geolocation data	Geolocation information	Fraud prevention, eligibility verification	Fraud prevention vendors, service providers
Audio, electronic, or visual information	Audio and/or video recordings, survey and interview responses	Conducting research studies	Research sponsors, clients, service providers
Professional or employment information	Healthcare credentials, licensure, specialty, employer information	HCP verification, eligibility determination	Credential and identity verification providers, research sponsors
Sensitive personal information	Health-related information, consumer health data, professional credential information	Research activities, subject to appropriate safeguards	Research sponsors, service providers
Inferences	Eligibility and quality-control determinations	Eligibility, fraud prevention, quality control	Service providers, affiliated companies

15. International Transfers

Personal information may be processed or stored in jurisdictions different from the participant’s location. Appropriate safeguards will be used where required by law.

16. Children’s Privacy

Our services are not directed to individuals under 18 years of age, and we do not knowingly collect information from children.

17. Cookies and Tracking Technologies

Our websites and online services use cookies and similar tracking technologies, such as web beacons, pixels, log files, and local or session storage, operated by us and by our service providers. We use these technologies to enable core site functionality, remember preferences, measure and analyze site performance and usage, support security, and detect and prevent fraud. We do not use cookies or similar technologies for cross-context behavioral advertising or to build advertising profiles across unrelated websites or applications.

You can manage cookies through your browser settings, including by blocking or deleting them, although disabling certain cookies may affect the functionality of our services. Where required by applicable law, we seek to honor recognized opt-out preference signals, such as the Global Privacy Control (GPC).

18. Incentives and Rewards

We offer incentives and rewards to eligible participants in connection with research participation and related activities. We use personal information, such as participation history, incentive history, and tax-related information, to determine eligibility, calculate and deliver incentives, prevent fraud, and meet applicable tax and legal obligations. The terms governing eligibility, earning, redemption, and forfeiture of incentives are set out in the applicable Terms and Conditions, which govern the incentive program itself.

19. Changes to this Policy

We may update this Privacy Policy periodically. Material changes will be communicated through appropriate channels, which may include posting an updated version on our website.

20. Contact Information

Health Insights, LLC dba TriVoca Health
1130 Raritan Road, 2nd Floor
Cranford, NJ 07016
Email: compliance@trivoca.com