Privacy Policy

Effective Date: May 28th, 2025

Last Updated: June 2nd, 2025

Introduction

Welcome to MSC ExoBiologics ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy, especially as a veteran seeking healthcare services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website veteransbackrestore.com and inquire about VA-covered back pain treatment services.

Please read this privacy policy carefully. By accessing or using our website and services, you agree to this privacy policy.

Information we Collect

We collect information you voluntarily provide when filling out forms on our website, including:

Personal Identifiers: Name, email address, phone number, ZIP code

Veteran Status Information: Military service status, VA enrollment status

Health Information:, chronic pain status

Communication Data: Messages you send us, survey responses, feedback

Information Automatically Collected

When you visit our website, we automatically collect:

Device Information:

Browser type, operating system, device type

Usage Data: Pages visited, time spent, links clicked

Marketing Attribution: UTM parameters, referral source, campaign data

Location Data: General location based on IP address (city/state level)

How We Use Your Information

We use your personal information for:

Healthcare Coordination

Pre-qualifying you for VA-covered treatment programs

Facilitating VA referral processes

Connecting you with qualified healthcare providers

Coordinating with VA medical centers as authorized

Communication

Responding to your inquiries

Sending appointment reminders and follow-ups

Providing educational materials about VA benefits

Updating you on your referral status

Service Improvement

Analyzing service effectiveness

Improving our patient support processes

Customizing your experience

Internal record keeping and attribution

Legal Compliance

Complying with VA regulations

Meeting healthcare compliance requirements

Responding to legal requests when required

Disclosure Of Your Information

We may share your information only in these specific circumstances:

Healthcare Providers

Licensed physicians evaluating your condition

VA-authorized treatment facilities

Healthcare professionals involved in your care coordination

VA and Government Entities

Department of Veterans Affairs (as required for referrals)

Certain Healthcare Alliance CCN (VA's contracted network)

Other government agencies as required by law

Service Providers

Appointment scheduling systems

Secure communication platforms

HIPAA-compliant data storage providers

Legal Requirements

We may disclose your information if required to:

Comply with a legal obligation

Protect and defend our rights or property

Prevent wrongdoing in connection with our services

Protect the personal safety of users or the public

We will NEVER sell, rent, or share your personal information with third parties for their marketing purposes.

Data Security

We implement appropriate technical and organizational security measures, including:

SSL encryption for data transmissionSecure, encrypted storage of personal information

Limited access controls for staff

Regular security assessments

Secure disposal of information when no longer needed

However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

Your Privacy Rights

You have the right to:

Access Your Information

Request a copy of the personal information we hold about you

Correct Your Information

Request correction of any inaccurate or incomplete information

Delete Your Information

Request deletion of your personal information (subject to legal requirements)

Opt-Out of Communications

Unsubscribe from marketing communications at any time

Withdraw Consent

Withdraw consent for processing where consent is the legal basis

To exercise these rights, contact us at: [phone number]

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected

Right to know if personal information is sold or disclosed

Right to say no to the sale of personal information

Right to equal service and price, even if you exercise privacy rights

Cookies and Tracking

We use cookies and similar tracking technologies to:

Remember your preferences

Understand how you use our website

Track marketing campaign effectiveness

Improve our services

You can control cookies through your browser settings.

Disabling cookies may limit some website functionality.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us.

Retention of Information

We retain your personal information for:

Active Leads:

Until you request deletion or 2 years from last contact

Referred Patients:

7 years per healthcare record requirements

Marketing Attribution:

90 days for analytics purposes

Communication Records:

3 years or as required by law

Changes to this Privacy Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this privacy policy periodically.

Consent

By using our website and providing your information, you consent to:

Collection and use of information as described in this policy

Coordination with VA and healthcare providers for your treatment

Communication regarding your VA benefits and treatment options

Important Notice for Veterans

Your privacy is our priority. This policy is designed to be transparent about how we help coordinate your VA-covered care while protecting your personal information. If you have any concerns about your privacy or how we handle your information, please don't hesitate to contact us.