Privacy Policy

Iterative Scopes, Inc. d/b/a Iterative Health
Privacy Policy
Last updated & Effective Date: February 26, 2026

This Privacy Policy explains how
Iterative Scopes, Inc. d/b/a Iterative Health (“Iterative Health,”
Company”) receives and processes personal information as defined by applicable law from its
business customers (“Customer Personal Information” or “Customer PI”) and visitors (as
prospective business customers) to its website or “Site” (“Visitor Personal Information” or “Visitor
PI”). Customer PI and Visitor PI may be referred to herein as Personal Information or “PI.” Iterative
Health is a healthcare technology and services company partnering with physicians to advance gastrointestinal care (“Services”).

What Information & Why:


In the course of conducting business, Company collects Customer Personal Information that

identifies or is associated with you. This may occur when you express an interest in obtaining
information about our Services; when you access our Site; or when you provide Visitor Personal
Information (including name and email address) so that Company can contact you to provide
information about our Services; or when you otherwise contact or interact with us.

Company
receives or collects the following types of Customer Personal Information: First Name
and Last Name; contact information (e-mail address, phone number, physical business address). Company uses this information to provide its service, including ordering and customer support (“Services”).

Usage, Device and Log Information.
We collect information about you when you access and use
the Site including your Internet Protocol (“IP”) address, access times, browser type and language, Web pages you visit, device information, and other actions you take, in order to improve our Services, and/or develop new Services.

Cookies and other tracking technologies.
We use technologies to collect information, which
includes cookies. Cookies are small data files stored on your hard drive or in device memory that help us to improve the Services and your experience. More information about our cookies can be found here.

Collection and Use of Aggregate Information. We may use aggregate information (not containing personal information) (“Aggregate Information”) to analyze trends, administer the Site, track users’ movements, and gather broad demographic information on aggregate use.

With Whom?:

Company shares PI with trusted Service Providers for the business purposes of providing the Services and includes the following types of services: sales automation, website management, platform hosting, security monitoring, email and marketing communications, marketing analytics, and technical support.

Third Party Applications:

The Site may provide links to other websites or resources over which Company does not have
control (“External Web Sites”). Such links do not constitute an endorsement by Company of those External Web Sites. You acknowledge that Company is providing these links to you only as a convenience, and further agree that Company is not responsible for the content of such External Web Sites. Your use of External Web Sites is subject to the terms of use and privacy policies located on the External Web Sites.

Compliance with Laws
:
Company may disclose PI to a third party if (a) it believes that such disclosure is reasonably necessary to comply with any applicable law, regulation, legal process or governmental request, or (b) to protect the security or integrity of the Services from harm or illegal activities.

Business Transfers:

Company may share or transfer PI in connection with any merger, sale of Company assets, financing, or acquisition of all or a portion of the business to another company. Company may share or transfer aggregated information to affiliate or related companies for its business purposes.

EU & UK Users:

EU and UK users have several rights with respect to their personal data including the following: (i) the right to be informed (ii) the right of access; (iii) the right of rectification; (iv) the right of erasure; (v) the right to restrict processing; (vi) the right of data portability; (vii) the right to object to processing; and (viii) the rights in relation to automated decision making and profiling. EU or UK users also have the right to lodge a complaint about the collection or use of
their personal information by notifying their EU (or UK) supervisory authority. Company’s legal bases for collecting and processing Customer Data include performance of a contract and/or consent. Please feel free to contact us regarding this or any other EU or UK data subject rights at [email protected] if you have any questions about these rights.

California Consumers:

Customers residing in California are considered consumers under CCPA. They have certain additional rights including with respect to their personal information, which are described here. Company upholds the right of non-discrimination as defined under CCPA.

Retention Policy:

Company retains PI as long as necessary to provide the Services unless a longer period is required to permitted for legal or compliance purposes.

Do Not Track
:

Some browsers offer a “do not track” (“DNT”) option. Company does not respond to DNT signals.

Security:

Company employs industry standard organizational, technical, administrative and
technological measures that are reasonably designed to help protect information from loss,
misuse, unauthorized access, disclosure, alteration or destruction. While Company takes
reasonable efforts to guard information, no security system is impenetrable.


Policy On Information Collected from Children
:

This Site and Services are not directed at children under the age of 13.
Company does not
knowingly collect PI from children under the age of 13.

Changes
:

Company
may need to update this Privacy Policy from time to time to reflect changes to its
Services and the laws applicable to its provision of the Services. If Company does change this
Privacy Policy, it will revise the “Last Updated” date at the top of this Privacy Policy on the Site.
Continued use of this Site or the Services after the posting of such notice will be subject to the
terms of the then-current Privacy Policy.

We value your privacy and your rights as a data subject and have therefore appointed Prighter
Group with its local partners as our privacy representative and your point of contact for the
following regions:

European Union (EU)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/11252351051

Data Protection Officer


Iterative Health has appointed a Data Protection Officer responsible for overseeing compliance

with applicable data protection laws. Inquiries regarding this Privacy Policy, our data processing activities, or the exercise of data subject rights may be directed to our Data Protection Officer at the following: iuro Rechtsanwälte GmbH Schellinggasse 3/10 1010 Vienna, Austria Email: [email protected]