Privacy Policy

Last updated: May 26, 2026

INTRODUCTION

Welcome to SemantIQ. SemantIQ, Inc. (“SemantIQ”, “we”, “our”, or “us”) provides an AI-native web application and agentic workflows that allow authorized users to build healthcare provider and direct to consumer segmentation, generate audience planning briefs, conduct target list profiling, and analyze healthcare claims-derived insights. This Privacy Policy explains how we collect, use, store, and disclose information through the SemantIQ Agent and related platform services (“Platform Services”).

SemantIQ does not process Protected Health Information (PHI). All healthcare claims data used within the Platform Services is de-identified pursuant to HIPAA Safe Harbor or Expert Determination. We may process identifiable information about healthcare providers (e.g., NPI, name, specialty) for advertising purposes and ZIP+4 level geographic data for deidentified consumer audiences.

This Privacy Policy describes how SemantIQ collects, stores, uses and discloses information about users of our Platform Services. Our “Platform Services” means (i) the website located at https://semantiqhealth.com (the “Site”), (ii) any services, features, and content downloadable or accessible from the Site (for example, and without limitation, when you log in to your Account via the Site) and (iii) any other SemantIQ application, software, product, or service licensed, downloaded or otherwise accessed by you, including emails that we send to you, whether through SemantIQ or third party websites or sources.

This Privacy Policy (Users of Platform Services) (this “Privacy Policy”) is incorporated into and is subject to our Terms of Use at https://semantiqhealth.com/terms-of-service (the “Terms of Use”). By using the Platform Services, you agree to SemantIQ’s collection, storage, use and disclosure of your information as described in this Privacy Policy. If you disagree with anything in this Privacy Policy, please do not use the Platform Services.

Users in certain jurisdictions, such as residents of a U.S. state with a comprehensive consumer privacy law, the United Kingdom, European Economic Area and Switzerland, have specific rights which are set forth in the YOUR RIGHTS, CHOICES AND OPT OUT section below.

ACCESSIBILITY

If you are having any trouble accessing these Terms of Service or the Services, please contact us at support@semantiqhealth.com.

1. HOW DOES SEMANTIQ WORK?

SemantIQ provides an AI-native data infrastructure and agentic workflows that enable authorized users to:

Build and explore healthcare provider segmentations, including outputs that may contain National Provider Identifiers (NPIs) and associated provider-level attributes.
Design direct to consumer (DTC) audiences that are restricted to ZIP+4-level geographic granularity built and modeled from de-identified claims data (SemantIQ does not provide more granular location for DTC use, such as data regarding specific individuals).
Generate agentic audience planning briefs, target list profiling, and analytics derived from de-identified healthcare claims datasets and related reference data.

SemantIQ’s underlying data sources include de-identified medical and pharmacy claims, healthcare provider directories, SDOH and other contextual datasets, and customer-provided data (such as NPI lists or target lists). These datasets are either:

De-identified in accordance with HIPAA (Safe Harbor and/or Expert Determination); or
Otherwise provided in a form that does not include Protected Health Information (“PHI”) as defined under HIPAA.

Using these datasets, SemantIQ provides analytics and actionable insights to SemantIQ Customers, including segment counts, segment compositions, market metrics, and provider-level attributes, all subject to strict privacy, minimum-size, and re-identification safeguards.

2. INFORMATION WE COLLECT

If you are a SemantIQ Customer (which means direct business users of SemantIQ’s Platform Services) or Platform User (which means any person accessing the Platform, including individuals who create or use SemantIQ accounts), we may collect information (a) that you provide directly and (b) that is collected automatically when you use the Platform Services. SemantIQ Customers and Platform Users are sometimes referred to in this Privacy Policy as “Users.”

2.1 Information You Provide

We collect information that you voluntarily provide when you register for an account, submit a lead-generation form, communicate with us, pay for the Platform Services, request support, or upload your own data (Customer Data). This may include:

Name
Company name and role/title
Business email address
Business phone number
Mailing address
Billing and payment information
Communication and notification preferences
Other Customer Data you upload (e.g., NPI lists, target lists, CRM exports, or other datasets) as permitted under SemantIQ’s Terms of Service

2.2 Information Collected Automatically

When you access or use the Platform Services, we may automatically collect certain technical and usage information, including:

Internet Protocol (IP) address
Browser type and device type
Operating system
Referring and exit URLs
Access times, session timestamps, and general location (city/region level)
Web log and usage data (e.g., pages viewed, features used, search queries, error logs, interaction events)

We may collect this information through cookies, pixels, and similar technologies. Your device, browser, and operating system settings may allow you to manage or disable these technologies.

2.3 Personally Identifiable Information (“PII”)

As used in this Privacy Policy, “Personally Identifiable Information”, “Personal Information” or “Personal Data” refers to information relating to an identified or identifiable natural person, as defined under applicable law.

SemantIQ processes three categories of Personal Data:

(A) Personal Data About Platform Users

We collect and process Personal Data from Platform Users, including:

Name, business email address, business phone number
Employer, title, and role
Login credentials and account settings
Billing, invoicing, and administrative information
Usage and interaction data as described in Section 2.2

We process this information to authenticate users, operate and secure accounts, provide and improve the Platform Services, and manage our customer relationships.

(B) Personal Data About Healthcare Providers (“HCP Data”)

SemantIQ also processes certain information about healthcare professionals, such as:

National Provider Identifier (“NPI”)
Name, specialty, taxonomy, and practice locations
Professional attributes derived from de-identified claims and reference datasets (e.g., prescribing activity, referral relationships, patient panel characteristics), used only in de-identified or aggregated form where applicable
Additional provider attributes uploaded by customers (e.g., custom HCP lists)

HCP Data originates from public sources (e.g., NPPES), third-party data partners, and de-identified claims datasets. It does not include Protected Health Information (“PHI”) or patient-identifiable data.

SemantIQ does not combine HCP Data with any identifiable patient information and does not attempt to re-identify any patient from de-identified datasets.

When customers upload their own NPI lists, target lists, CRM records, or other datasets, SemantIQ processes that information solely to provide the Platform Services, in accordance with the applicable contract between the parties.

2.4 Controller vs. Processor Roles

Controller:

SemantIQ acts as an independent controller when processing Personal Data that we determine the purposes and means for—such as Platform User data, publicly available HCP Data, and SemantIQ-created datasets or claims-derived insights.

Processor / Service Provider:

When customers upload their own Customer Data and SemantIQ processes it according to their written instructions, SemantIQ acts as a processor or service provider. We do not use Customer Data for any purpose other than providing the Platform Services. While this Privacy Policy describes how we process such data on behalf of our customers, our customers are responsible for their own practices in collecting, using, and disclosing information they collect from you. To learn more about such customers’ use of your information and your rights that you may have over such information, please consult the privacy policy of the applicable customer.

No PHI Processing:

SemantIQ does not receive, require, or process Protected Health Information (“PHI”) as defined under HIPAA and does not attempt to re-identify any individual from de-identified datasets.

### 3. HOW WE USE THE INFORMATION WE COLLECT

We use the information described in Section 2 to operate, maintain, secure, and improve the Platform Services and to support our business operations.

3.1 Use of Platform User and Customer Information

We use Personal Data and Customer Data to:

Operate, maintain, authenticate, and administer user accounts
Provide, support, and enhance the Platform Services
Sell such data to third parties, generally to deliver targeted advertising
Respond to questions, support requests, and technical issues
Analyze usage patterns to improve workflows, performance, and user experience
Develop new features, modules, and integrations
Manage customer relationships, including billing and invoicing
Secure the Platform Services and prevent fraud, misuse, or unauthorized access
Send administrative, operational, and service-related communications (e.g., updates, security notices, feature releases)

Users may manage their marketing communication preferences as described in the “Opt Out” section.

3.2 Use of HCP Data

We use HCP Data to:

Build, enrich, and deliver HCP audience segments and profiling
Generate insights and agentic audience briefs about provider behaviors and market patterns
Provide measurement and analytics (e.g., provider-level indicators, script lift, referral-based insights) in aggregated or de-identified form
Improve the coverage, accuracy, and quality of HCP-related data and models used within the Platform Services

Restrictions: SemantIQ does not use data collected from Users to determine employment, credit, insurance, or healthcare service eligibility, and does not use such data to make clinical treatment decisions.

4. INFORMATION DISCLOSURE

We may disclose personal information collected from Users under the following circumstances:

4.a To Service Providers.

We work with service providers to provide application development, hosting, maintenance, and other services for us. We may transfer, and these service providers may have access to or process information about you as part of providing those services for us. Generally, we limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such information.

4.b To Comply with Laws.

We may disclose information about you if required to do so by law or in the good-faith belief that such action is necessary to comply with laws, in response to a court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other governmental agencies.

4.c To Protect Our Legal Rights.

We also reserve the right to disclose information about you that we believe, in good faith, is appropriate or necessary to: (i) take precautions against liability; (ii) protect ourselves or others from fraudulent, abusive, or unlawful uses or activity; (iii) investigate and defend ourselves against any third party claims or allegations; (iv) protect the security or integrity of the Platform Services and any facilities or equipment used to make the Platform Services available; or (v) protect our property or other legal rights (including, but not limited to, enforcement of our agreements), or the rights, property, or safety of others.

4.d In Corporate Reorganizations.

Information may be disclosed during due diligence or in preparation for or after an acquisition or merger, consolidation, change in control, transfer of substantial assets, financing, reorganization or similar corporate transactions with requirements for the receiving party to maintain the confidentiality of such information, or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.

4.e To Analytics Providers.

We use analytics services such as Google Analytics to collect and process certain analytics data. You can learn more about Google’s practices by visiting https://www.google.com/policies/privacy/partners/. To help us understand how you use our Platform Services and to help us improve them, we automatically receive information about your interactions with our Platform Services, like the pages or other content you view, the searches you conduct, purchases you make, and the dates and times of your visits. Please refer to the currently available opt-outs for Google Analytics by visiting https://tools.google.com/dlpage/gaoptout/.

4.f For targeted advertising on other sites across the web.

In certain cases, for example, when you visit SemantIQ’s website, we may place a tracker in your browser that allows us to show you SemantIQ content on other websites.

SemantIQ may work with third-party partners to support interest-based or targeted advertising. Users may opt out of targeted advertising by contacting SemantIQ at privacy@semantiqhealth.com.

5. RETENTION

When we collect Personal Data, we keep it for as long as we need it for the purpose for which it is being processed. For example, we will retain your email information for as long as the Platform Services are active or as needed to provide the Platform Services to you. After that, we will keep the Personal Data for a period which enables us to handle or respond to any complaints, queries or concerns relating to your use of our services. We retain the data we collect directly for targeting purposes for as little time as possible, after which we employ measures to permanently delete or de-identify the data. We will periodically review the Personal Data we hold and delete it securely when there is no longer a legal, business, or consumer need for it to be retained.

6. OPT OUT

You may, of course, decline to disclose certain information to us, in which case we may not be able to provide to you some of the features and functionality of the Platform Services.

If you receive commercial email (e.g., promotions) from us, you may unsubscribe at any time by following the instructions contained within the email. You may also opt out from receiving commercial email from us by sending your request to us at privacy@semantiqhealth.com or by writing to us at the address at the end of this Privacy Policy. Please be aware that it may take up to ten (10) business days for us to process your request, and you may continue to receive commercial email from us during that period. Additionally, even after opting out from receiving commercial email from us, SemantIQ Customers will continue to receive administrative messages from us regarding the Platform Services (such as security notices, outage notifications, or billing-related messages).

In addition to the rights set forth in the YOUR RIGHTS, CHOICES AND OPT OUT section below, you may opt-out of being tracked online by certain companies who are listed on the Digital Advertising Alliance’s website at http://www.aboutads.info/choices/ and may also learn more about online behavioral advertising at such website. If you opt-out, you will still receive advertisements, but they will not be delivered to you by such companies from whom you have opted-out based upon your behavioral data possessed by the companies from whom you have opted-out. The opt-out process through the Digital Advertising Alliance may rely upon the placement of an opt-out cookie on your device, and you must repeat this process on each device or if your cookies are purged from your device. Cookie-based opt-outs are not effective on certain mobile services. Users may opt-out of certain advertisements on mobile applications or reset advertising identifiers via their device settings. To learn how to limit ad tracking or to reset the advertising identifier on your iOS and Android device, click on the following links:

iOS – https://support.apple.com/en-us/HT202074

Android – https://support.google.com/ads/answer/2662922?hl=en

More information about opting out on mobile devices is available via the Network Advertising Alliance here – https://www.networkadvertising.org/mobile-choice/.

Please note that, unless required by law, we do not respond to or honor “Do Not Track” (a/k/a DNT) signals or similar mechanisms transmitted by web browsers.

California “Shine the Light” In addition to the rights set forth in this Privacy Policy, under California Civil Code Section 1798.83 (“Shine the Light”), California residents may have the right to request in writing from businesses with whom they have an established business relationship: (a) a list of the categories of personal information, as defined under Shine the Light, such as name, email address, and mailing address, and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes; and (b) the names and addresses of all such third parties. To request the above information, please contact us by email at privacy@semantiqhealth.com. If you do not want your personal information shared with any third party who may use such information for direct marketing purposes, then you may opt out of such disclosures by sending an email to us at privacy@semantiqhealth.com.

7. THIRD PARTY SERVICES

The Platform Services may be integrated with, or contain features or links to, apps and services provided by third parties. Any information you provide on third party apps and services is provided directly to the operators of such apps and services and is subject to those operators’ policies, if any, governing privacy and security. We are not responsible for the content or privacy and security practices and policies of such third parties. We encourage you to learn about third parties’ privacy and security policies before providing them with information.

8. DATA SECURITY

We use certain physical, managerial, and technical safeguards that are designed to improve the integrity and security of information that we collect and maintain. Please be aware that no security measures are perfect or impenetrable. We cannot and do not guarantee that information about you will not be accessed, viewed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.

9. CHILDREN’S PRIVACY

The Platform Services are not directed to children under the age of 18. We do not knowingly collect any information at all from children under the age of 18. If you learn that a child has provided us with personal information in violation of this Privacy Policy, then you may alert us at privacy@semantiqhealth.com.

10. INTERNATIONAL TRANSFER

We may transfer information that we collect about you to affiliated entities, or to other third parties across borders and from your country or jurisdiction to other countries or jurisdictions around the world. If you are located in the European Economic Area (EEA) or other regions with laws governing data collection and use that may differ from U.S. laws, please note that you are transferring information, including PII, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction, and you consent to the transfer of information to the U.S. and the use and disclosure of information about you, including PII, as described in this Privacy Policy.

11. YOUR RIGHTS, CHOICES AND OPT OUT

United States

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, or another U.S. state that has similar comprehensive privacy legislation (collectively, “Covered States”), you may have specific rights regarding your personal information under: the California Consumer Privacy Act (“CCPA”), Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, Texas Data Privacy and Security Act, Oregon Consumer Privacy Act, Montana Consumer Data Privacy Act, Iowa Consumer Data Protection Act, Delaware Personal Data Privacy Act, Nebraska Data Privacy Act, New Hampshire Data Privacy Act, New Jersey Data Privacy Act, Tennessee Information Protection Act, Minnesota Consumer Data Privacy Act, Maryland Online Data Privacy Act, Indiana Consumer Data Protection Act, Kentucky Consumer Data Protection Act, Rhode Island Data Transparency and Privacy Protection Act, and similar laws in other U.S. states (collectively, "State Privacy Laws"). This section describes the rights that consumers of Covered States have and explains how to exercise those rights. To be clear, these rights are granted only to the extent that you are considered a consumer of Covered State and we are acting as a “controller” or “business” (as applicable) under State Privacy Laws with respect to your personal information.

The categories of personal information we process, our purposes for processing your personal information, the categories of personal information that we share with third parties, and the categories of third parties with whom we share it are set forth in the terms of the Privacy Policy above.

Information We Collect; How We Collect It; How We Use It

General information regarding our collection, use, and disclosure of personal information is set forth in the Privacy Policy above.

In the past 12 months, we have collected categories of personal information described in the section of the Privacy Policy above titled INFORMATION WE COLLECT, and we have collected this information from the sources described above, such as from you directly or from claims that we source . We collect and use your personal information for the business or commercial purposes described in the section titled HOW WE USE THE INFORMATION WE COLLECT, and retain it pursuant to the section titled RETENTION.

We disclose the following categories of personal information to service providers or contractors for business purposes:

Identifiers and contact information
Characteristics and demographics
Commercial information
Non-precise geolocation information
Device information and unique identifiers
Internet or other electronic network activity information
Inferences drawn from collected information

Additionally, we may sell and/or share for targeted advertising the following categories of personal information to Advertising networks; analytics providers; and social media platforms:

Identifiers and contact
Characteristics and demographics
Non-precise geolocation information
Device information and unique identifiers
Internet or other electronic network activity information
Inferences drawn from collected information

We do not collect any sensitive personal information from you within the scope of State Privacy Laws.

Rights to Your Information

In addition to the rights set forth in our Privacy Policy, State Privacy Laws may, depending on your state of residence, provide you with the following rights:

Right to know. You may have the right to know whether we process your personal information and to access such personal information. You may also have the right to request that we disclose certain information to you about our collection, use, or disclosure of your personal information. Residents of Minnesota or Oregon have the right to: (i) confirm additional information about the categories of personal information we have processed about them; and (ii) obtain a list of third parties to which we have disclosed the personal information of Minnesota or Oregon consumers. Residents of Delaware or Maryland have the right to obtain a list of the categories of third parties to which we have disclosed the personal information of Delaware or Maryland consumers.

Right to data portability. You may have the right to obtain a copy of your personal information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means.

Right to delete. You may have the right to delete personal information that you have provided by or that we have obtained about you. Please note that we may deny such request if the requested deletion falls under an exception as set forth in the State Privacy Laws.

Right to correct. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes for which we process it.

Right to opt out. You have the right to opt out of the processing of your personal information for purposes of: (i) targeted advertising; (ii) the sale of personal information; or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. As of the latest date of the Privacy Policy:
- We do process personal information or share it with third parties for the purposes of targeted advertising;
- We do sell your personal information in exchange for monetary or other valuable consideration; and
- We do not engage in profiling decision based on your personal information that produce legal or similarly significant effects concerning you.

We do not sell or share the personal information of consumers we actually know are less than 18 years of age, unless we receive affirmative authorization (the "right to opt-in") from either the consumer who is less than 18 (but greater than 13) years of age, or the parent or guardian of a consumer less than 13 years of age. To our knowledge, we do not sell or share the personal information of minors under 18 years of age.

Right to nondiscrimination. You have the right not to be retaliated against or receive discriminatory treatment by us for the exercise of your privacy rights. Unless permitted by the State Privacy Laws, we will not:
Deny you goods or services;
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
Provide you a different level or quality of goods or services; or
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

How to Exercise Your Rights; Verifying Your Identity

To exercise any of your privacy rights, or if you have any questions about your privacy rights, you may contact us by:

Emailing us at privacy@semantiqhealth.com
Visiting the Your Privacy Choices web page

For residents of California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, New Hampshire, New Jersey, and Oregon and elsewhere as required by State Privacy Laws, we will also treat opt-out preference signals as valid opt-out requests.

With the exception of opt-out requests (which do not require verification), after submitting a request, we will take steps to verify your identity in order for us to properly respond and confirm that it is not a fraudulent request. In order to verify your identity, we may ask, at a minimum, that you provide your name, email address, and relationship to us, so that we can seek to match this information with the information existing in our systems. When providing us this information, you represent and affirm that all information provided is true and accurate. If we are unable to verify that the consumer submitting the request is the same individual about whom we have collected personal information, we may contact you for more information, or we may not be able to meet your request.

Only you (or as provided in State Privacy Laws), an agent legally authorized to act on your behalf) may make a verifiable request related to your personal information. If you are making a request as the authorized agent of a consumer, we will ask you also submit reliable proof that you have been authorized in writing by the consumer to act on such consumer’s behalf. If you are making a request as the parent or legal guardian of a known child regarding the processing of that child’s personal information, we may ask you to submit reliable proof of your identity.

Response Time; Your Right to Appeal

We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, State Privacy Laws allow us up to 90 days to respond. We will contact you within 45 days from when you contacted us to inform you of the need for additional time and the reason for such extension. We may charge you a reasonable fee to cover administrative costs if your requests are manifestly unfounded, excessive, or repetitive.

If we decline to take action on a request that you have submitted, we will inform you of our reasons for doing so, and provide instructions for how to appeal the decision. Depending on your state of residence you may have the right to appeal within a reasonable period of time after you have received our decision. If you have this appeal right, within 60 days (45 days for residents of Colorado and Minnesota) of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, we will provide you with a method for contacting your state attorney general’s office to submit a complaint.

United Kingdom / European Economic Area / Switzerland

IF YOU ARE SITUATED IN THE EUROPEAN ECONOMIC AREA, SWITZERLAND, OR THE UNITED KINGDOM, THIS SECTION APPLIES TO OUR COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL DATA AND ADDITIONAL RIGHTS YOU HAVE UNDER APPLICABLE LAW.

Legal Basis

We will only use your personal data, as that term is defined under the General Data Protection Regulation (“GDPR”), when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Where we need to perform the contract we are about to enter into or have entered into with you.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where you have consented to a certain use of your personal data.
Where we need to comply with a legal or regulatory obligation.

Data Controller

SemantIQ, Inc. is the data controller of all personal data collected through the Platform Services, with the exception of when we act as a Processor / Service Provider as set forth above. To contact us, please see the section below titled How to Contact Us.

If you are situated in the EEA, Switzerland, or the UK and have any complaints regarding our privacy practices, you have the right to make a complaint at any time to your local supervisory authority. We would, however, appreciate the chance to deal with your concerns before you approach your supervisory authority, so please contact us in the first instance. If you have a complaint, please contact our privacy manager here: privacy@semantiqhealth.com.

Provision of personal data and failure to provide personal data

Where we need to collect personal data by law or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with our services). In this case, we may not be able to provide certain services to you.

Collection of personal data from third-party sources

We may obtain personal data and other information about you from public sources and through our third-party partners who help us provide our products and services to you.

Withdrawing your consent

If we are relying on your consent to process your personal data, you have the right to withdraw your consent at any time by contacting us at privacy@semantiqhealth.com.

Data Subject Rights

If you are situated in the European Union, Switzerland, or the UK, under the GDPR, as a data subject, you have the right to:

Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully, or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

To exercise your rights under the GDPR, please contact us at privacy@semantiqhealth.com. Please note that in order for you to assert these rights, we may need to verify your identity to confirm your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. In order to verify your identity, we may need to gather more personal data from you than we currently have.

13. CHANGES AND UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Please revisit this Privacy Policy periodically to stay aware of any changes. If we modify this Privacy Policy, we will make it available through the Platform Services, and indicate the date of the latest revision. In the event that the modifications materially alter your rights or obligations hereunder, we will make reasonable efforts to notify you of the change. For example, we may send a message to your email address if we have one on file, or generate a pop-up or similar notification when you access the Platform Services for the first time after such material changes are made. Your continued use of the Platform Services after the revised Privacy Policy has become effective indicates that you have read, understood and agreed to the latest version of this Privacy Policy.
### 12. HOW TO CONTACT US
Please contact us with any questions or comments about this Privacy Policy, information we have collected or otherwise obtained about you, our use and disclosure practices, or your consent choices by email to privacy@semantiqhealth.com or by physical mail to:

SemantIQ Inc.

2261 Market Street STE 86944

San Francisco, CA 94114

‍