Your privacy matters.

PRIVACY POLICY

Effective Date: August 19, 2026

Altoona Arthritis and Osteoporosis Center and Altoona Clinical Research Center (collectively, “AAOC/ACRC,” “we,” “us,” or “our”) respect your privacy and are committed to protecting the information entrusted to us.

This Online Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or interact with our websites, clinical research landing pages, online forms, enrollment questionnaires, scheduling tools, mobile applications, digital communications, or other online services that link to this Privacy Policy (collectively, the “Sites”).

By using our Sites, you acknowledge the practices described in this Privacy Policy and our applicable Website Terms and Conditions of Use.

This Privacy Policy does not apply to the RainTree Inc. patient portal, which is governed by its own privacy practices, terms, and security requirements.

HIPAA AND PROTECTED HEALTH INFORMATION

Some information collected by AAOC/ACRC may constitute Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and applicable regulations.

When information constitutes PHI, AAOC/ACRC handles that information in accordance with applicable HIPAA requirements and our HIPAA Notice of Privacy Practices (“NPP”).

Our NPP describes how medical information about you may be used or disclosed, your rights regarding that information, and our responsibilities for safeguarding it.

[INSERT LINK TO CURRENT HIPAA NOTICE OF PRIVACY PRACTICES]

This Online Privacy Policy supplements, but does not replace, our HIPAA Notice of Privacy Practices. If there is a conflict involving PHI, the requirements of HIPAA and our applicable Notice of Privacy Practices will govern.

INFORMATION YOU PROVIDE TO US

We may collect personal information that you voluntarily provide through our Sites.

Depending on how you interact with us, this information may include:

• Name

• Email address

• Telephone number

• Mailing address

• ZIP code or geographic area

• Date of birth or age range

• Communication preferences

• Appointment or scheduling information

• Information submitted through contact forms

• Clinical research interest

• Information submitted through enrollment or pre-screening questionnaires

• Health conditions or diagnosis information

• Symptoms

• Current or previous medications or treatments

• Medical or treatment history

• Demographic information relevant to research eligibility

• Responses to clinical research eligibility questions

• Other information you choose to provide

Please do not submit information that is not requested or necessary for the purpose of the form you are completing.

CLINICAL RESEARCH ENROLLMENT AND PRE-SCREENING

AAOC/ACRC may provide online forms and questionnaires that allow individuals to express interest in clinical research opportunities and determine whether they may potentially qualify for a research study.

Information submitted through a clinical research questionnaire may be used to:

• Review potential eligibility for a study;

• Contact you regarding the study in which you expressed interest;

• Request additional information needed for pre-screening;

• Schedule a telephone, virtual, or in-person screening;

• Communicate with authorized clinical research personnel;

• Match you with other research opportunities when you have authorized us to do so or when otherwise permitted by law; and

• Administer and manage research recruitment activities.

Completing an online questionnaire does not mean that you qualify for or have been enrolled in a clinical research study.

A member of our research team may need to speak with you and conduct additional screening before eligibility can be determined.

Submitting an enrollment questionnaire also does not constitute informed consent to participate in a clinical trial or, by itself, a HIPAA authorization for research uses or disclosures that require authorization. Appropriate research consent, HIPAA authorization, or other study documentation will be provided separately or combined as permitted by applicable law and the approved research protocol.

Participation in clinical research is voluntary.

INFORMATION COLLECTED AUTOMATICALLY

When you visit our Sites, certain information may be collected automatically by us or by service providers that help operate our Sites.

This information may include:

• Internet Protocol (“IP”) address;

• Browser type;

• Device type and operating system;

• Device or browser identifiers;

• Pages visited;

• Date and time of visits;

• Referring website or source;

• Approximate geographic location;

• Links or buttons clicked;

• Website performance information;

• Advertising or campaign attribution information;

• Cookie identifiers; and

• Other information regarding interaction with our Sites.

We may use cookies, pixels, analytics technologies, tags, and similar technologies to operate our Sites, maintain security, understand website performance, measure advertising effectiveness, and improve the user experience.

ANALYTICS, DIGITAL ADVERTISING, AND TARGETED ADVERTISING

AAOC/ACRC may advertise clinical research opportunities and other services through digital platforms, including search engines and social media platforms.

We may use limited analytics and advertising technologies on certain public-facing portions of our Sites to understand how visitors reach our Sites, measure campaign performance, prevent fraud, and improve our communications.

Third-party advertising and analytics providers may receive limited information such as browser or device information, advertising identifiers, referring source, website interactions, or generalized conversion events where permitted.

Sensitive Health Information and Advertising Platforms

AAOC/ACRC does not intentionally provide clinical research questionnaire responses, diagnoses, symptoms, medications, medical histories, research eligibility determinations, screening results, treatment information, medical record information, or other PHI to advertising platforms for targeted advertising purposes.

We do not intentionally use PHI to build advertising audiences or profiles for third-party advertising platforms except where expressly permitted by applicable law and, when required, pursuant to an appropriate authorization.

Advertising or analytics technologies should not be configured to transmit the contents of clinical research questionnaires, medical form fields, eligibility answers, or other sensitive health information to third-party advertising platforms.

AAOC/ACRC may use generalized advertising events such as a page visit or completion of a general inquiry when appropriate, but we seek to minimize the information transmitted to advertising and analytics providers.

Where required by applicable law, we provide individuals with appropriate choices regarding non-essential advertising or analytics technologies.

COOKIES AND SIMILAR TECHNOLOGIES

Cookies are small data files stored on your browser or device. Our Sites and our service providers may use cookies and similar technologies for:

Website functionality;

Security and fraud prevention;

Remembering preferences;

Analytics and performance measurement;

Advertising attribution; and

Advertising measurement where permitted.

Your browser may allow you to block or delete cookies. Doing so may affect the functionality of certain portions of the Sites.

Some browsers also transmit privacy preference signals such as “Do Not Track.” Our Sites may not respond to all such signals. Where applicable law requires recognition of a legally recognized opt-out preference signal, we will process such signals as required.

HOW WE USE PERSONAL INFORMATION

AAOC/ACRC may use personal information collected through our Sites to:

Provide healthcare, administrative, or research-related services;

Respond to inquiries;

Review clinical research interest and potential eligibility;

Contact individuals who request information about research opportunities;

Schedule appointments or research screening visits;

Provide requested information;

Operate, maintain, secure, and improve our Sites;

Authenticate users and prevent unauthorized access;

Communicate by telephone, email, or text message in accordance with applicable consent requirements;

Send administrative or transactional communications;

Provide newsletters or informational communications when requested;

Understand Site traffic and performance;

Measure the effectiveness of outreach and advertising;

Maintain records required for clinical, research, legal, regulatory, or operational purposes;

Protect against fraud, security threats, unauthorized access, or unlawful activity; and

Comply with applicable legal, regulatory, research, and contractual requirements.

We will not use PHI for purposes prohibited by HIPAA.

EMAIL, TELEPHONE, AND TEXT COMMUNICATIONS

If you provide an email address or telephone number, we may use that information to respond to your inquiry or communicate with you regarding the services or clinical research opportunity you requested.

Where legally required, we will obtain appropriate consent before sending promotional or automated telephone or text communications.

Consent to receive marketing communications is not a condition of receiving healthcare services or participating in a clinical research study unless otherwise permitted by law.

You may unsubscribe from promotional emails by using the unsubscribe link provided in the communication.

Where available, you may opt out of text messages by replying STOP.

Opting out of promotional communications will not prevent AAOC/ACRC from sending necessary transactional, administrative, clinical, research, safety, or legally required communications when permitted by law.

Because ordinary email and text messaging may present privacy or security risks, please avoid sending highly sensitive medical information through unsecured email or text unless specifically instructed to do so through an approved method.

DISCLOSURE OF PERSONAL INFORMATION

AAOC/ACRC may disclose personal information when reasonably necessary for the purposes described in this Privacy Policy and as permitted or required by applicable law.

Recipients may include:

AAOC/ACRC personnel. Authorized employees, clinicians, research coordinators, investigators, and other personnel may access information when needed to perform their responsibilities.

Service providers and business associates. We may use companies that provide website hosting, customer relationship management, communications, scheduling, information technology, security, analytics, data storage, research support, or other services.

When a service provider creates, receives, maintains, or transmits PHI on behalf of AAOC/ACRC and qualifies as a HIPAA business associate, we require an appropriate Business Associate Agreement when required by law.

Clinical research parties. Information may be disclosed to study investigators, research staff, sponsors, contract research organizations, Institutional Review Boards, laboratories, regulators, or other authorized research parties when permitted by the applicable study documentation, authorization, consent, protocol, or law.

Legal and regulatory authorities. We may disclose information when reasonably necessary to comply with a law, regulation, subpoena, court order, government request, regulatory obligation, or lawful investigation.

Security and safety. We may disclose information when we reasonably believe disclosure is necessary to prevent fraud, protect the security of our systems, address a threat to safety, investigate misconduct, enforce our agreements, or protect our legal rights.

Business transactions. Information may be transferred as part of a merger, acquisition, reorganization, financing, sale of assets, change of control, or similar transaction, subject to applicable legal restrictions.

SALE AND SHARING OF PERSONAL INFORMATION

AAOC/ACRC does not sell PHI.

AAOC/ACRC does not sell personal information for monetary compensation.

Certain privacy laws may define some disclosures involving digital advertising technologies as a “sale,” “sharing,” or use for “targeted advertising,” even when no money changes hands. Where such laws apply, AAOC/ACRC will provide required notices and applicable opt-out rights.

We do not knowingly disclose sensitive health information to third-party advertising platforms for their independent advertising purposes.

SERVICE PROVIDERS AND HIPAA BUSINESS ASSOCIATES

AAOC/ACRC evaluates service providers that handle sensitive or regulated information.

When HIPAA applies and a vendor performs functions that require the vendor to create, receive, maintain, or transmit PHI on our behalf, we require appropriate contractual safeguards, including a Business Associate Agreement when required.

Our service providers are expected to access and use information only for authorized purposes and to maintain appropriate confidentiality and security safeguards.

DATA MINIMIZATION AND RETENTION

AAOC/ACRC seeks to collect and retain only information reasonably necessary for legitimate healthcare, research, administrative, security, legal, and operational purposes.

Retention periods vary based on the type of information, the reason it was collected, applicable clinical research requirements, contractual obligations, legal or regulatory requirements, and applicable record-retention policies.

When information is no longer required, we may delete, anonymize, de-identify, or securely dispose of it in accordance with applicable requirements.

INFORMATION SECURITY

AAOC/ACRC maintains administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, alteration, destruction, loss, misuse, or disclosure.

Depending on the system and information involved, safeguards may include access controls, authentication, encryption, security monitoring, audit capabilities, employee training, vendor oversight, and other appropriate security measures.

Access to PHI and other sensitive information is limited to individuals and service providers who require access for authorized purposes.

No electronic transmission or information system can be guaranteed to be completely secure. Accordingly, while we take reasonable steps to safeguard information, we cannot guarantee absolute security.

If AAOC/ACRC determines that a security incident requires notification to affected individuals, government agencies, or other parties, we will provide notification as required by applicable law.

YOUR PRIVACY CHOICES AND RIGHTS

Depending on where you reside and the laws that apply, you may have rights regarding certain personal information, which may include the right to request access, correction, deletion, or information regarding our handling of your personal information.

You may also have the right to opt out of certain targeted advertising or certain disclosures of personal information where required by applicable law.

Requests may be submitted using the contact information below.

Certain information may be exempt from these requests due to HIPAA, clinical research requirements, medical record retention requirements, legal obligations, or other applicable exceptions.

Rights relating specifically to PHI are described in our HIPAA Notice of Privacy Practices.

THIRD-PARTY WEBSITES AND SERVICES

Our Sites may contain links to websites, social media platforms, patient portals, applications, or services operated by third parties.

AAOC/ACRC does not control the privacy or security practices of independent third parties. This Privacy Policy does not apply to websites or services operated independently by third parties.

We encourage you to review the privacy policies and terms of any third-party service before providing personal information.

CHILDREN'S PRIVACY

Our general Sites are not directed to children under 13, and we do not knowingly collect personal information online from children under 13 except where permitted by applicable law.

If a particular clinical research study allows participation by minors, the collection and use of information relating to minors will be handled in accordance with the approved research protocol, applicable Institutional Review Board requirements, applicable law, and parental or guardian permission and minor assent where required.

If we learn that information from a child was collected inappropriately, we will take reasonable steps to delete or otherwise address that information in accordance with applicable requirements.

CHANGES TO THIS PRIVACY POLICY

AAOC/ACRC may update this Privacy Policy periodically to reflect changes in our Sites, technologies, services, research activities, privacy practices, or applicable legal requirements.

When material changes are made, we will update the Effective Date displayed at the beginning of this Privacy Policy and provide additional notice when required by law.

Your continued use of the Sites after an updated Privacy Policy becomes effective means the updated policy will apply to information collected thereafter, subject to applicable law.

CONTACT US

If you have questions about this Privacy Policy, our privacy practices, or how personal information is handled, please contact:

Altoona Arthritis and Osteoporosis Center / Altoona Clinical Research Center

Email: marketing@altoonaarthritis.com

Phone: 800-924-7790

Please use caution when sending medical or other sensitive personal information through ordinary email.

For questions or rights specifically involving Protected Health Information, please refer to our HIPAA Notice of Privacy Practices for the appropriate privacy contact and complaint procedures.

WEBSITE TERMS OF USE

Effective Date: August 19, 2026

IMPORTANT MEDICAL NOTICE

The websites, clinical research landing pages, online questionnaires, forms, scheduling tools, mobile experiences, and other online services operated by or on behalf of Altoona Arthritis and Osteoporosis Center and Altoona Clinical Research Center (collectively, “AAOC/ACRC,” “we,” “us,” or “our”) are provided primarily for informational, educational, administrative, and clinical research recruitment purposes.

Information available through our online services does not constitute medical advice, diagnosis, treatment, or a substitute for consultation with a qualified healthcare professional.

Nothing available through the Sites creates a physician-patient relationship merely because you view information, submit a general inquiry, complete a research interest questionnaire, or otherwise interact with the Sites.

If you are experiencing a medical emergency, call 911 or seek immediate emergency medical care. Do not use our websites, forms, questionnaires, email, text messaging, or other online services for emergency medical needs.

1. ACCEPTANCE OF THESE TERMS

Thank you for visiting https://www.altoonaresearch.com/, https://www.altoonaarthritis.com/ and other websites, landing pages, forms, questionnaires, online services, and digital properties operated by or on behalf of Altoona Arthritis and Osteoporosis Center and Altoona Clinical Research Center that link to these Terms of Use (collectively, the “Sites”).

These Website Terms of Use (the “Terms” or “Agreement”) govern your access to and use of the Sites and any text, photographs, videos, graphics, questionnaires, forms, software, features, information, documents, or other materials made available through them (collectively, “Content”).

By accessing or using a Site, you agree to these Terms and our applicable Privacy Policy.

If you do not agree to these Terms, please do not use the Sites.

AAOC/ACRC may update these Terms periodically. The Effective Date shown above indicates when these Terms were last revised. Your continued use of the Sites after revised Terms become effective constitutes acceptance of the revised Terms to the extent permitted by applicable law.

2. ELIGIBILITY AND USE BY MINORS

The general Sites are intended primarily for adults.

Individuals under the age of 18 should use the Sites only with the involvement and supervision of a parent or legal guardian where appropriate.

Certain clinical research studies may permit participation by minors. Eligibility for any such study is governed by the applicable research protocol, Institutional Review Board requirements, applicable law, and requirements concerning parental or guardian permission and minor assent.

The Sites are not intended to independently solicit personal information from children under 13 except where permitted and appropriately handled under applicable law.

3. NO MEDICAL ADVICE OR PROVIDER-PATIENT RELATIONSHIP

Content made available through the Sites is provided for general informational and educational purposes.

It should not be considered a substitute for the independent professional judgment of a licensed physician or other qualified healthcare professional.

You should always consult an appropriate healthcare professional regarding:

• A medical condition;

• Symptoms;

• Diagnosis;

• Treatment decisions;

• Medications;

• Changes to an existing treatment plan; or

• Any other personal healthcare concern.

Do not disregard professional medical advice or delay seeking medical care because of information viewed through the Sites.

Use of a Site alone does not establish a healthcare provider-patient relationship between you and AAOC/ACRC or any AAOC/ACCR physician, investigator, clinician, employee, or representative.

4. CLINICAL RESEARCH INFORMATION

AAOC/ACRC may make information available regarding clinical research studies for which participants are currently being sought.

Study information provided through the Sites is intended to help individuals learn about possible research opportunities. Study availability, eligibility criteria, enrollment status, compensation, visit requirements, study duration, and other details may change.

Information presented on a Site does not constitute a promise or guarantee that:

• You qualify for a particular study;

• A study is appropriate for you;

• You will be accepted into a study;

• You will receive a particular investigational product or treatment;

• Participation will improve your condition;

• An investigational product is safe or effective; or

• You will receive any particular medical benefit.

Questions regarding a clinical study should be discussed with an authorized member of the research team.

5. CLINICAL RESEARCH PRE-SCREENING QUESTIONNAIRES

AAOC/ACRC may provide online questionnaires to help determine whether an individual may potentially meet certain preliminary criteria for a clinical research study.

These questionnaires may request information regarding age, medical history, diagnosis, symptoms, medications, previous treatments, and other factors relevant to study eligibility.

Submitting a questionnaire:

• Does not guarantee eligibility;

• Does not mean you have been accepted or enrolled in a study;

• Does not constitute a medical diagnosis;

• Does not establish that participation is medically appropriate for you;

• Does not constitute informed consent to participate in research; and

• Does not replace any study-specific consent, authorization, screening, or eligibility process.

A research coordinator, investigator, or other authorized member of the study team may contact you to obtain additional information.

Final eligibility can only be determined through the applicable study's formal screening procedures.

Participation in clinical research is voluntary.

Before enrolling in a research study, potential participants will receive the applicable study information and consent materials and will have an opportunity to ask questions as required by the approved research process.

6. COMPENSATION FOR CLINICAL RESEARCH

Certain clinical research studies may provide compensation for time, travel, study visits, or other participation-related activities.

Compensation varies by study.

Any compensation information provided through the Sites is subject to the applicable study protocol and approved study materials and should not be interpreted as a guarantee that every individual who expresses interest will qualify for or receive compensation.

Specific compensation terms will be explained to eligible individuals as part of the applicable study process.

7. PRIVACY AND PROTECTED HEALTH INFORMATION

AAOC/ACRC takes privacy and information security seriously.

Our collection, use, disclosure, and protection of personal information through the Sites is described in our Online Privacy Policy, available at:

https://www.altoonaarthritis.com/privacy-policy

https://www.altoonaresearch.com/privacy-policy

The Privacy Policy is incorporated into these Terms by reference.

Certain information maintained by AAOC/ACRC may constitute Protected Health Information (“PHI”) subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and other applicable requirements.

When information is subject to HIPAA, it will be handled in accordance with applicable law and AAOC/ACRC's HIPAA Notice of Privacy Practices.

The Online Privacy Policy is not a substitute for the HIPAA Notice of Privacy Practices.

Individuals should review the Notice of Privacy Practices for additional information concerning uses and disclosures of PHI and applicable patient rights.

8. ONLINE FORMS AND SENSITIVE INFORMATION

Some Sites may allow you to submit information through contact forms, appointment requests, research questionnaires, or other online tools.

Please provide only information requested for the purpose of the form.

Where AAOC/ACRC provides a designated secure method for submitting medical or sensitive information, you should use that method rather than ordinary unsecured email or other communications.

Because no Internet transmission can be guaranteed to be completely secure, you acknowledge that submitting information electronically involves inherent risks.

9. DIGITAL ADVERTISING, ANALYTICS, AND TRACKING TECHNOLOGIES

AAOC/ACRC may use digital advertising to inform communities about healthcare services, educational resources, and clinical research opportunities.

Certain public-facing portions of the Sites may use cookies, analytics tools, pixels, tags, advertising technologies, campaign attribution tools, or similar technologies to understand website activity, measure advertising effectiveness, improve website performance, and identify how visitors reach our Sites.

AAOC/ACRC does not intentionally provide diagnoses, symptoms, medications, clinical research questionnaire answers, eligibility determinations, medical history, treatment information, medical records, or other PHI to advertising platforms for targeted advertising purposes.

Advertising and analytics technologies should not be configured to intentionally transmit the contents of medical questionnaires, screening responses, or other sensitive health information to third-party advertising platforms.

AAOC/ACRC may use generalized events such as:

• A public webpage visit;

• A general inquiry;

• A form completion;

• A general conversion event; or

• Advertising campaign attribution

when appropriate and permitted.

Additional information regarding cookies, advertising technologies, analytics providers, and privacy choices is available in our Privacy Policy.

10. ADVERTISING DOES NOT DETERMINE YOUR MEDICAL CONDITION

AAOC/ACRC may advertise clinical research studies through search engines, social media platforms, websites, or other advertising channels.

Seeing an advertisement concerning a particular disease, condition, treatment area, or clinical study does not mean that AAOC/ACRC or the advertising platform has determined that you have that condition or that you qualify for the study.

Advertisements are intended to provide general information regarding available opportunities and encourage interested individuals to learn more.

Your eligibility for clinical research must be determined separately through the appropriate screening process.

11. EMAIL, TELEPHONE, AND TEXT COMMUNICATIONS

If you provide AAOC/ACRC with an email address or telephone number, we may contact you regarding an inquiry, an appointment request, a clinical research opportunity, or another service you requested.

Where required, consent to receive automated, promotional, or marketing telephone calls or text messages will be requested separately.

Consent to receive marketing communications is not a condition of receiving healthcare services or participating in a clinical research study unless otherwise permitted by law.

If you separately consent to receive text messages:

• Message frequency may vary;

• Message and data rates may apply;

• You may generally reply STOP to discontinue optional text messages; and

• You may generally reply HELP for assistance.

Opting out of promotional communications does not necessarily prevent AAOC/ACRC from sending communications that are necessary for healthcare, research administration, scheduling, safety, transactional, or other legally permitted purposes.

Do not use email or text messaging to communicate a medical emergency.

12. THIRD-PARTY TECHNOLOGY AND SERVICE PROVIDERS

AAOC/ACRC may use third-party companies to provide portions of the Sites or related services, including:

• Website hosting;

• Customer relationship management systems;

• Online forms and questionnaires;

• Appointment scheduling;

• Email services;

• Telephone and text messaging services;

• Data storage;

• Security services;

• Analytics;

• Advertising measurement;

• Clinical research technology; and

• Other operational services.

When a service provider creates, receives, maintains, or transmits PHI on behalf of AAOC/ACRC and qualifies as a HIPAA business associate, appropriate contractual safeguards, including a Business Associate Agreement when required, will be used.

Your interaction with independent third-party websites or services may also be governed by those third parties' terms and privacy policies.

13. INTELLECTUAL PROPERTY

The Sites and their Content, including without limitation text, software, graphics, photographs, video, audio, logos, trademarks, service marks, designs, page layouts, databases, and other materials, are owned by or licensed to AAOC/ACRC and are protected by applicable copyright, trademark, and other intellectual property laws.

Unless otherwise expressly permitted in writing, you may access and use the Sites and Content only for your personal, lawful, noncommercial use.

Nothing in these Terms transfers ownership of any AAOC/ACRC intellectual property to you.

14. PERMITTED USE

AAOC/ACRC grants you a limited, revocable, non-exclusive, non-transferable right to access and use the Sites for lawful personal informational purposes.

You may not use the Sites or Content in a manner that violates these Terms or applicable law.

15. PROHIBITED CONDUCT

You agree that you will not:

• Use the Sites for unlawful, fraudulent, deceptive, or malicious purposes;

• Attempt to gain unauthorized access to a Site, server, account, network, database, or system;

• Circumvent or interfere with security controls;

• Introduce viruses, malware, ransomware, spyware, malicious code, or other harmful material;

• Interfere with the operation or availability of the Sites;

• Impersonate another person or misrepresent your identity;

• Submit false or intentionally misleading information;

• Harvest or collect information concerning other users without authorization;

• Use automated scraping, crawling, extraction, or similar technologies except as expressly authorized;

• Reproduce, modify, distribute, republish, sell, or commercially exploit Content without permission;

• Use AAOC/ACRC trademarks or branding in a misleading manner;

• Use the Sites to send spam or unsolicited commercial communications;

• Attempt to reverse engineer Site software where prohibited; or

• Use the Sites in a manner that infringes the intellectual property, privacy, security, or other rights of another person.

AAOC/ACRC may investigate suspected violations and may restrict or terminate access when reasonably necessary.

16. USER SUBMISSIONS

Certain portions of the Sites may allow individuals to provide comments, questions, inquiries, feedback, photographs, documents, or other information (“Submissions”).

You are responsible for information you submit.

You represent that you have the necessary rights and authority to provide your Submission and that doing so does not violate applicable law or another person's rights.

Clinical, medical, or research information submitted through designated healthcare or research forms will be handled in accordance with applicable privacy, healthcare, research, and contractual requirements and will not be treated as ordinary public-facing user content.

Nothing in this section authorizes AAOC/ACRC to publicly use or publish PHI contrary to applicable law.

17. ACCURACY AND AVAILABILITY OF CONTENT

AAOC/ACRC makes reasonable efforts to provide useful and current information.

However, healthcare information, research opportunities, eligibility requirements, Site functionality, and other Content may change.

AAOC/ACRC does not warrant that all Site information will always be:

• Accurate;

• Complete;

• Current;

• Error-free;

• Continuously available; or

• Appropriate for every individual.

We may modify, remove, suspend, or discontinue Content or Site features without notice when appropriate.

18. THIRD-PARTY LINKS

The Sites may contain links to websites, portals, applications, services, or other resources operated by third parties.

AAOC/ACRC does not control independent third-party services and is not responsible for their content, availability, security, privacy practices, terms, products, or services.

Providing a link does not necessarily constitute endorsement of the third party or its products or services.

You should review the terms and privacy policies of third-party services before using them or providing information.

19. PATIENT PORTALS AND OTHER SERVICES

Certain services accessible from the Sites, including the RainTree Inc. patient portal, may be governed by separate agreements, privacy policies, or terms.

Where separate terms apply to a particular service, those terms will govern your use of that service to the extent they conflict with these general Website Terms of Use.

20. LINKS TO AAOC/ACRC SITES

You may create a hyperlink to a publicly available AAOC/ACRC webpage provided that the link:

• Does not falsely suggest sponsorship, affiliation, endorsement, or approval;

• Does not misrepresent AAOC/ACRC or its services;

• Does not display AAOC/ACRC content within a misleading frame or surrounding content;

• Does not violate applicable law or another person's rights; and

• Does not use AAOC/ACRC trademarks or logos without permission except as permitted by law.

AAOC/ACRC reserves the right to request removal of a link where appropriate.

21. SITE SECURITY

AAOC/ACRC maintains reasonable administrative, technical, and physical safeguards designed to protect its Sites and information.

However, no website, network, communications system, or electronic transmission can be guaranteed to be completely secure.

You are responsible for taking reasonable precautions when using the Internet, including maintaining appropriate device security and protecting passwords or account credentials.

You may not attempt to test, probe, scan, circumvent, or compromise the security of AAOC/ACRC systems without express written authorization.

22. DISCLAIMER OF WARRANTIES

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SITES AND CONTENT ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS.

AAOC/ACRC DISCLAIMS WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, AVAILABILITY, SECURITY, AND COMPLETENESS TO THE EXTENT PERMITTED BY LAW.

AAOC/ACRC DOES NOT WARRANT THAT THE SITES WILL BE AVAILABLE WITHOUT INTERRUPTION OR THAT THEY WILL BE FREE FROM ERRORS, VIRUSES, OR OTHER HARMFUL COMPONENTS.

Nothing in this disclaimer limits obligations that cannot legally be disclaimed.

23. LIMITATION OF LIABILITY

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, AAOC/ACRC AND ITS AFFILIATES, DIRECTORS, OFFICERS, PHYSICIANS, INVESTIGATORS, EMPLOYEES, AGENTS, CONTRACTORS, AND SERVICE PROVIDERS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM OR RELATING TO YOUR USE OF OR INABILITY TO USE THE SITES OR CONTENT.

This limitation does not apply where liability cannot legally be limited or excluded.

Nothing in these Terms is intended to waive or limit any rights you may have under applicable healthcare, research, privacy, consumer-protection, or other laws where those rights cannot lawfully be waived.

24. INDEMNIFICATION

To the extent permitted by applicable law, you agree to indemnify and hold harmless AAOC/ACRC and its affiliates, officers, employees, agents, and representatives from claims, liabilities, damages, losses, or expenses arising from:

• Your unlawful misuse of the Sites;

• Your violation of these Terms;

• Your infringement of another person's rights; or

• Content you knowingly submit in violation of applicable law.

This provision does not apply to the extent prohibited by law.

25. SUSPENSION OR TERMINATION OF ACCESS

AAOC/ACRC may suspend, restrict, or terminate access to all or part of the Sites where reasonably necessary to:

• Protect Site security;

• Investigate suspected abuse;

• Enforce these Terms;

• Comply with applicable law;

• Protect AAOC/ACRC, patients, research participants, or others; or

• Maintain Site functionality.

26. COPYRIGHT INFRINGEMENT NOTICES

AAOC/ACRC respects intellectual property rights.

If you believe copyrighted material available through an AAOC/ACRC Site infringes your rights, you may send a written notice containing sufficient information to identify the copyrighted work and allegedly infringing material.

Notices should include, as applicable:

• Your physical or electronic signature;

• Identification of the copyrighted work;

• Identification and location of the allegedly infringing material;

• Your name and contact information;

• A statement that you have a good-faith belief that the disputed use is not authorized by the copyright owner, its agent, or the law; and

• A statement that the information in your notice is accurate and, where applicable, that you are authorized to act on behalf of the copyright owner.

Copyright-related notices may be directed to:

Marketing DirectorAltoona Arthritis & Osteoporosis CenterAltoona Clinical Research Center175 Meadowbrook LaneDuncansville, PA 16635814-693-0300 ext. 122

AAOC/ACRC may request additional information when reasonably necessary to evaluate a copyright complaint.

27. NO ASSIGNMENT BY USER

You may not assign or transfer your rights or obligations under these Terms without AAOC/ACRC's prior written consent.

AAOC/ACRC may assign these Terms in connection with a merger, reorganization, transfer of operations, or other lawful business transaction.

28. NO PARTNERSHIP OR AGENCY

Nothing in these Terms creates a partnership, joint venture, employment relationship, fiduciary relationship, or agency relationship between you and AAOC/ACRC.

You have no authority to bind AAOC/ACRC.

29. SEVERABILITY

If any provision of these Terms is determined to be invalid, unlawful, or unenforceable, that provision will be interpreted or modified to the minimum extent necessary to make it enforceable where permitted.

The remaining provisions will continue in effect.

30. WAIVER

Failure by AAOC/ACRC to enforce a provision of these Terms does not waive its right to enforce that provision or any other provision in the future.

31. GOVERNING LAW AND VENUE

These Terms are governed by the laws of the Commonwealth of Pennsylvania, without regard to conflict-of-law principles, except where federal law applies.

To the extent permitted by applicable law, disputes arising from these Terms or use of the Sites will be brought in an appropriate state court located in Blair County, Pennsylvania, or in the United States District Court for the Middle District of Pennsylvania, where federal jurisdiction exists.

Nothing in this section limits rights or remedies that cannot legally be restricted by these Terms.

32. ENTIRE AGREEMENT

These Terms, together with the Online Privacy Policy and any additional terms expressly applicable to a specific Site, portal, service, research process, or online feature, constitute the applicable agreement governing use of the Sites.

If separate terms apply to a particular service and conflict with these general Terms, the service-specific terms will govern with respect to that service.

33. CHANGES TO THESE TERMS

AAOC/ACRC may revise these Terms periodically to reflect changes in:

• Our Sites;

• Clinical research activities;

• Technology;

• Privacy or security practices;

• Applicable laws or regulations; or

• Operational requirements.

When revisions are made, the Effective Date at the top of these Terms will be updated.

Material changes may be communicated through additional notice when appropriate or legally required.

34. CONTACT US

Questions regarding these Terms may be directed to:

Altoona Arthritis and Osteoporosis CenterAltoona Clinical Research Center175 Meadowbrook LaneDuncansville, PA 16635

Phone: 800-924-7790

Email: marketing@altoonaresearch.com

Please avoid sending highly sensitive medical information through ordinary email.

For questions regarding Protected Health Information, patient privacy rights, or AAOC/ACRC's HIPAA practices, please refer to the applicable HIPAA Notice of Privacy Practices.