Privacy Policy

1. Scope and Overview

This Privacy Policy applies to all information collected by MedExPrep, operated by CarePath Education, LLC, through the MedExPrep.com website (the “Site”), our mobile applications, and any related services, tools, or features we provide. By accessing or using the Site, you agree to the terms of this Policy. If you do not agree with any part of this Policy, please do not use the Site.

We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Policy explains what information we collect, how we use it, who we share it with, and the choices you have regarding your information. We encourage you to read this Policy carefully and contact us at support@medexprep.com if you have any questions.

2. Information Collection, Use, and Sharing

We are the sole owners of the information collected on the Site. We only have access to and collect information that you voluntarily give us via email, account registration, or other direct contact from you. We will not sell or rent this information to anyone.

We will use your information to respond to you regarding the reason you contacted us. We will not share your information with any third party outside of our organization, other than as necessary to fulfill your request, such as to process a payment or deliver a product.

Unless you ask us not to, we may contact you via email in the future to tell you about specials, new products or services, or changes to this Policy.

Types of Information We Collect

We may collect the following types of personal information:

• Identity Information: Your name, username, and other identifiers you provide when creating an account.
• Contact Information: Your email address, phone number, and billing address.
• Financial Information: Payment card details and billing information processed through our secure payment providers. We do not store full credit card numbers on our servers.
• Technical Information: Your IP address, browser type, operating system, device information, and browsing behavior on the Site.
• Usage Information: Information about how you use the Site, including pages visited, features used, study progress, quiz results, and time spent on various sections.
• Communication Information: Records of your correspondence with us, including support tickets, emails, and feedback.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Site and our services.
• To process your account registration and manage your account.
• To enable billing and payment processing for your subscriptions and purchases.
• To personalize your experience and deliver content tailored to your study needs.
• To communicate with you about your account, orders, and customer service requests.
• To send you updates, promotional materials, and other information that may be of interest to you (subject to your communication preferences).
• To monitor and analyze usage trends and improve the functionality and user experience of the Site.
• To detect, prevent, and address technical issues, fraud, and security concerns.
• To comply with legal obligations and enforce our Terms of Use.

3. Marketing Communications

From time to time, we may send you marketing communications about our products, services, promotions, and events that we believe may be of interest to you. These communications may be sent via email or other electronic means.

You may opt out of receiving marketing communications at any time by clicking the “unsubscribe” link at the bottom of any marketing email, or by contacting us at support@medexprep.com. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related messages, such as order confirmations, account notifications, and important updates about the Site or your account.

We will never share your email address or contact information with third parties for their own marketing purposes without your explicit consent.

4. Your Access to and Control Over Your Information

You may opt out of any future contacts from us at any time. You can do the following at any time by contacting us via email at support@medexprep.com:

• See what data we have about you, if any.
• Change or correct any data we have about you.
• Have us delete any data we have about you.
• Express any concern you have about our use of your data.
• Request a portable copy of your personal data in a commonly used electronic format.

We will respond to your request within a reasonable timeframe, and in no event longer than 30 days from receipt of your request. In some cases, we may need to verify your identity before processing your request. If we are unable to fulfill your request due to a legal obligation or legitimate business need, we will explain the reason to you.

5. How We Protect Your Information

We take precautions to protect your information. When you submit sensitive information via the Site, your information is protected both online and offline.

Wherever we collect sensitive information (such as credit card data), that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a lock icon in the address bar and looking for “https” at the beginning of the address of the web page.

While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information. The computers and servers on which we store personally identifiable information are kept in a secure environment.

We employ industry-standard security measures including, but not limited to, firewalls, intrusion detection systems, regular security audits, and data encryption at rest and in transit. Despite our efforts, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Children’s Privacy

The Site is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under the age of 13, we will take steps to delete that information as quickly as possible. If you believe that we may have collected information from a child under 13, please contact us at support@medexprep.com so that we can take appropriate action.

If you are between the ages of 13 and 18, you may use the Site only with the involvement and consent of a parent or guardian. We encourage parents and guardians to monitor their children’s internet usage and to help enforce this Policy by instructing their children to never provide personal information on the Site without their permission.

7. Links to Other Sites

The Site may contain links to other websites that are not operated or controlled by CarePath Education, LLC. This Policy applies only to information collected by the Site. We have no responsibility for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policy of every site you visit before providing any personal information.

The inclusion of any link on the Site does not imply endorsement by CarePath Education, LLC of the linked website or its content. You access third-party websites at your own risk and subject to their own terms and privacy policies.

8. California Privacy Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These rights include:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected your information, our business or commercial purpose for collecting your information, and the categories of third parties with whom we share your information.
• Right to Delete: You have the right to request that we delete any personal information we have collected from you, subject to certain exceptions allowed by law.
• Right to Correct: You have the right to request that we correct any inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information. If this changes, we will update this Policy and provide you with the opportunity to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, provide you with a different level or quality of goods or services, or suggest that you will receive a different price or rate for goods or services.

To exercise any of these rights, please contact us at support@medexprep.com. We will respond to your request within 45 days. You may also designate an authorized agent to make a request on your behalf.

9. Do Not Track

Some web browsers have a “Do Not Track” (DNT) feature that sends a signal to websites you visit indicating that you do not want to be tracked. There is currently no universally accepted standard for how companies should respond to DNT signals. At this time, the Site does not respond to DNT signals. However, you can control tracking through your browser settings and by managing your cookie preferences as described in Section 10 of this Policy.

We will continue to monitor developments around DNT standards and may update our practices in the future as industry standards evolve.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on the Site and to hold certain information. Cookies are small data files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.

Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the Site to function properly. They enable basic functions like page navigation, account authentication, and access to secure areas of the Site. The Site cannot function properly without these cookies.
• Performance Cookies: These cookies collect information about how you use the Site, such as which pages you visit most often and if you receive error messages. These cookies help us improve the performance and user experience of the Site.
• Functionality Cookies: These cookies allow the Site to remember choices you make (such as your preferred settings or study progress) and provide enhanced, more personalized features.
• Analytics Cookies: We use third-party analytics services, such as Google Analytics, to help us understand how users interact with the Site. These services may use cookies to collect information about your use of the Site, which is then used to compile reports and help us improve the Site.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete cookies, or be notified when a cookie is set. Please note that if you disable cookies, some features of the Site may not function properly. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

11. Third-Party Data Sharing and Opt-In for Marketing

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties except as described in this Policy. This does not include trusted third parties who assist us in operating the Site, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. These trusted third parties may include:

• Payment Processors: We use third-party payment processors to handle transactions securely. These processors have access to the financial information necessary to process your payments but are contractually obligated not to use your information for any other purpose.
• Analytics Providers: We use analytics services to understand how our Site is used and to improve our services. These providers may collect anonymized or aggregated data about your use of the Site.
• Email Service Providers: We use third-party email services to send you transactional and marketing communications. These providers have access to your email address and name but are contractually prohibited from using your information for their own marketing purposes.
• Hosting and Infrastructure Providers: We use third-party hosting services to store and deliver the Site and its content. These providers may have access to your information as part of their hosting services but are required to protect it in accordance with their own privacy policies and our contractual agreements.

We may also release your information when we believe release is appropriate to comply with the law, enforce our Site policies, or protect ours or others’ rights, property, or safety.

We will never share your personal information with third parties for their direct marketing purposes without your explicit prior consent. If we ever intend to share your data for marketing purposes, we will obtain your opt-in consent beforehand.

12. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our obligations.

In general, we retain your account information for as long as your account is active and for a reasonable period thereafter in case you decide to reactivate your account. We retain transactional information for a minimum of seven (7) years to comply with tax and financial reporting obligations.

When your personal information is no longer needed for the purposes for which it was collected, we will securely delete or anonymize it. If deletion is not possible (for example, because the information has been stored in backup archives), we will securely store your information and isolate it from any further processing until deletion is possible.

13. International Data Transfers

If you are accessing the Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated. The data protection and privacy laws of the United States may not be as comprehensive as those in your country of residence.

By using the Site, you consent to the transfer of your information to the United States and acknowledge that your information may be subject to access by law enforcement and other government entities in the United States, including courts and tribunals, in accordance with applicable laws.

We take appropriate measures to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it, including implementing standard contractual clauses or relying on other lawful transfer mechanisms where applicable.

14. Explicit Opt-In for Marketing Communications

We believe in permission-based marketing. We will only send you marketing communications if you have explicitly opted in to receive them. You may opt in to marketing communications during the account registration process, through your account settings, or by contacting us directly.

Your opt-in consent is entirely voluntary and will not affect your ability to use the Site or access our services. You may withdraw your consent at any time by clicking the “unsubscribe” link in any marketing email, updating your communication preferences in your account settings, or by contacting us at support@medexprep.com.

When you opt in, you may choose to receive the following types of communications:

• Product updates and new feature announcements.
• Promotional offers and discounts.
• Educational content, study tips, and exam preparation resources.
• Newsletters and company news.

We maintain records of your consent and communication preferences and will honor your choices promptly. Any changes to your preferences will be processed within ten (10) business days.

15. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will update the “Effective Date” at the top of this page and, where appropriate, notify you via email or through a prominent notice on the Site. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

Your continued use of the Site following the posting of changes to this Policy will be deemed your acceptance of those changes. If you do not agree with the revised Policy, you should discontinue your use of the Site and contact us to request deletion of your personal information.

For significant changes that materially affect your rights or the way we use your personal information, we will provide at least 30 days’ advance notice before the changes take effect.

16. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:

• Email: support@medexprep.com
• Company: CarePath Education, LLC
• Address: 535 Fifth Avenue, New York, NY

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. We aim to respond to all inquiries within 30 days of receipt. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.