Meplis cares about your privacy and wants you to be familiar with how we collect, use, and disclose information. This Privacy Policy describes our practices in connection with information that we or our service providers collect through the website or application (hereinafter the “Service”) operated and controlled by us from which you are accessing this Privacy Policy. By providing personal information to us or by using the Service, you acknowledge that you have read and understand this Privacy Policy.

The purpose of this Privacy Policy is to describe how Meplis Compliance, (“Meplis,” “us,” “we,” or “our”) collects, uses and shares information about you through our online interfaces (e.g., websites and mobile applications) owned and controlled by us (collectively referred to herein as the “Site”). Please read this notice carefully to understand what we do. If you do not understand any aspects of our Privacy Policy, please feel free to contact us at Meplis. Your use of our Site is also governed by our Terms of Use.

WHAT INFORMATION WE COLLECT

Our courses are hosted by Meplis N.V. on campus.meplis.com. They provide us with the online e-learning platform that allows us to provide courses and learning features to you.

Your data is stored through Meplis’ data storage, databases and the general Meplis Campus application. They store your data on a secure server behind a firewall.

To use our services, participate in our course portal or participate in an individual course on our site or through the mobile apps, you need to create a Meplis Account, which is subject to your acceptance of the Meplis Terms of Use and Meplis Privacy Policy.

When you login or participate in a course on our site, as part of the learning or teaching process, you will be requested to give us permission to use your Meplis Account personal information; such as your name and email address.

When you browse or participate in our courses, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.

As part of your participation in our course portal or any individual course, you might be required to make image, video, audio or open text submissions, answers surveys or quizzes as part of your learning pathway. These submissions are stores in your Meplis account and by using the service you give us permission to use, collect, copy, edit, store for the sole purposes described in this policy.

HOW WE USE YOUR INFORMATION

Transactional Emails: With your permission, we may send you emails about our courses, news & event updates and other updates.

Email marketing (if applicable): With your permission, we may send you emails about our courses, news & event updates and other updates.

Notifications & Reminders: With your permission, we may send your mobile notifications on the mobile course application about the course, news & event updates, and other updates.

We use and disclose information you provide to us as described to you at the point of collection. We also use information from or about you:

• to respond to your inquiries and fulfill your requests, such as to send you documents you request or e-mail alerts;
• to send you important information regarding our relationship with you or regarding the Site, changes to our terms, conditions, and policies and/or other administrative information; and
• for our business purposes, such as data analysis, audits, developing new products, enhancing our website, improving our products and services, identifying Site usage trends, personalizing your experience on the Site by presenting products and offers tailored to you, and determining the effectiveness of our promotional campaigns.

We also disclose information collected through the Site:

• to our third party partners with whom we offer a co-branded or co-marketed promotion;
• to our third party service providers who provide services such as website hosting and moderating, mobile application hosting, data analysis, payment processing, order fulfillment, infrastructure provision, IT services, customer service, e-mail and direct mail delivery services, credit card processing, auditing services, and other services, in order to enable them to provide services; and
• to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

In addition, we use and disclose information collected through the Site as we believe to be necessary or appropriate:

• (a) as permitted by applicable law, including laws outside your country of residence;
• (b) to comply with legal process;
• (c) to respond to requests from public and government authorities, including public andgovernment authorities outside your country of residence;
• (d) to enforce our terms and conditions;
• (e) to protect our operations or those of any of our affiliates;
• (f) to protect our rights, privacy, safety, or property, and/or that of our affiliates, you,or others;
• (g) to allow us to pursue available remedies or limit the damages that we may sustain. Wemay also use and disclose information collected through the Site in other ways, with your consent.

We also use and disclose information we collect passively as described above, under "Passive Information Collection and Use," and for any other purpose, except where we are required to do otherwise under applicable law (for example, if we are required to treat such information as personal information). In addition, we may use and disclose information that is not in personally identifiable form for any purpose. If we combine information that is not in personally identifiable form with information that is (such as combining your name with your geographical location), we will treat the combined information as personal information as long as it is combined.

How do you get my consent?

When you provide us with personal information to complete a transaction, verify your credit card, place your enrollment, or unlock additional content in our courses, we imply that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

How do I withdraw my consent?

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at **Your Company Legal Name**, **Your Company Address**, **Your Company Contacts**

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

Our courses are hosted by Meplis N.V. on campus.meplis.com. They provide us with the online e-learning platform that allows us to provide courses and learning features to you.

Your data is stored through Meplis’s data storage, databases and the general Meplis Campus application. They store your data on a secure server behind a firewall.

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.

Once you leave our learning portal’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

Links

When you click on links on our course portal or course pages, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any site or web property (including, without limitation, any application) that is available through this Site or to which this Site contains a link. The availability of, or inclusion of a link to, any such site or property on the Site does not imply endorsement of it by us or by our affiliates.

Your personal information may be stored and processed in any country where we have facilities or service providers, and by using our Service or by providing consent to us (where required by law), you agree to the transfer of information to countries outside of your country of residence, including to the United States, which may provide for different data protection rules than in your country. Appropriate contractual and other measures are in place to protect personal information when it is transferred to our affiliates or third parties in other countries.

Some non-European Economic Area (EEA) countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here. For transfers from the EEA to countries not considered adequate by the European Commission, we have ensured that adequate measures are in place, including by ensuring that the recipient is bound by EU Standard Contractual Clauses, EU-US Privacy Shield Certification, to protect your Personal Information. You may obtain a copy of these measures by contacting our data protection officer in accordance with the “Contacting Us” section below.

Your choices regarding our use and disclosure of your personal information

We give you choices regarding our use and disclosure of your personal information for marketing purposes. You may opt out from:

• Receiving marketing communications from us: If you no longer want to receive marketing communications from us on a going-forward basis, you may opt out of receiving them by contacting us via **Your Company Email**. In your response to us, please provide your name, identify the form(s) of marketing communications that you no longer wish to receive, and include the address(es) to which it/they are sent]. For example, if you no longer wish to receive marketing e-mails or direct mail from us, tell us that, and provide your name and e-mail or postal address. You may also opt out of receiving marketing communications from us by visiting the Site to update your online profile. In addition, you may opt out of receiving marketing e-mails from us by following the unsubscribe instructions provided in any such message.
• Receiving reminders from us: If you no longer want to receive medical reminders from us on a going-forward basis, you may opt out of receiving them by contacting us via **Your CompanyEmail**. In your response to us, please provide your name and the e-mail address or phone number at which you receive reminders from us.
• Our sharing of your personal information with affiliates and third-party partners: If you would prefer that we not share your personal information on a going-forward basis with our affiliates and/or third-party partners for their marketing purposes, you may opt out of this sharing by contacting us **Your Company Email**. In your response to us, please state that we should no longer share your personal information with our affiliates and/or third-party partners for their marketing purposes, and include your name and e-mail address.

We will seek to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out as described above, we will not be able to remove your personal information from the databases of our affiliates with which we have already shared your information (i.e., as of the date that we implement your opt-out request). Please also note that if you opt out of receiving marketing-related messages from us, we may still send you important transactional and administrative messages, from which you cannot opt out.

We use reasonable organizational, technical, and administrative measures to protect personal information under our control. Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you have with us has been compromised), please immediately notify us of the problem by contacting us in accordance with the "Contacting Us" section below.

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

We will retain your personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained. The criteria used to determine our retention periods include:

• (i) the length of time we have an ongoing relationship with you and provide the Service to you;
• (ii) whether there is a legal obligation to which we are subject; and
• (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

Any collected personal information for training purpose, will be stored for a period of 10 years.

Please note, however, that this is not an exhaustive list of retention periods. Your personal information may be stored for a longer period using the criteria set forth in the first paragraph of this section, especially points (ii) and (iii).

The Service is not directed to individuals under the age of 16, and we request that these individuals not provide personal information through the Service. If your child has submitted Personal Information and you would like to request that such Personal Information be removed, please contact us as explained below under Contacting Us.

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

If our course portal or individual courses are acquired or merged with another company, your information may be transferred to the new owners so that we may continue to provide courses to you.

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Service Provider DPO at dpo@meplis.com

With the subject, "Meplis Compliance - DPO"