Effective Date: September 23, 2026

Introduction

This Privacy Policy describes how Data Media Associates, LLC ("Data Media," "we," "us," or "our") handles information in connection with the ePayItOnline website and payment portal (the "Site"). ePayItOnline is a technology service operated by Data Media on behalf of participating healthcare providers.

Role of ePayItOnline and Data Media

ePayItOnline enables patients to access account information provided by or on behalf of their healthcare provider and to initiate electronic payments to that provider. Data Media provides the technology used to present provider-supplied account information, facilitate patient-initiated electronic transactions, and provide related transaction reporting.

Each participating healthcare provider maintains its own merchant account with its payment processor and is the Merchant of Record for payments initiated through ePayItOnline. Data Media does not receive, hold, or take possession of patient payment funds. Payment authorization and settlement occur through the payment infrastructure associated with the healthcare provider's merchant account.

Account information and amounts displayed through ePayItOnline are provided by or on behalf of the applicable healthcare provider. Data Media does not determine whether an amount is owed, establish the amount shown as due, or establish payment terms. Questions concerning healthcare services, insurance, adjustments, account information, or amounts displayed through ePayItOnline should be directed to the healthcare provider identified with the account.

Information We Receive and Process

To operate the Site and provide services on behalf of participating healthcare providers, Data Media may receive and process information such as your name, contact information, account or reference information, healthcare-provider account information, authentication information, transaction information, and payment-related information.

We may also receive technical information when you use the Site, such as Internet Protocol (IP) address, browser and device information, access times, pages or functions used, and similar information used to operate, secure, troubleshoot, and support the Site.

How We Use Information

We use information processed through the Site to:

• authenticate users and help protect account access;
• present account information provided by or on behalf of the participating healthcare provider;
• facilitate electronic payment transactions initiated by users;
• provide transaction confirmations and reporting related to payments initiated through the Site;
• provide service and technical support;
• operate, maintain, secure, monitor, and troubleshoot the Site; and
• comply with applicable legal and contractual obligations.

Data Media does not sell or rent personal information obtained through the Site.

Facilitating Electronic Payments

When you initiate a payment through ePayItOnline, payment-related information is processed within the systems and payment infrastructure used to authorize and complete the transaction for the applicable healthcare provider. The healthcare provider is the Merchant of Record and maintains its own merchant account with its payment processor.

Data Media facilitates the electronic transaction and receives information necessary to support transaction processing, confirmation, reconciliation, reporting, security, and customer-service functions. Data Media does not receive, hold, or take possession of the payment funds. Settlement is made through the payment infrastructure associated with the healthcare provider's merchant account.

Protected Health Information

To the extent Data Media creates, receives, maintains, or transmits Protected Health Information ("PHI") on behalf of a healthcare provider, Data Media handles that information in accordance with its applicable Business Associate Agreement and the requirements of the Health Insurance Portability and Accountability Act of 1996 (HIPAA), as applicable.

Your healthcare provider remains the appropriate contact for questions or requests concerning medical services, medical records, insurance, adjustments, patient-account information, or amounts displayed on your account.

When Information May Be Disclosed

We may disclose information processed through the Site:

• to the healthcare provider associated with the account and as necessary to provide services on that provider's behalf;
• to payment processors, financial institutions, and other service providers involved in authorizing, completing, securing, supporting, or reporting transactions initiated through the Site;
• to service providers that assist us in operating, securing, maintaining, or supporting the Site, subject to applicable contractual and legal requirements;
• when required by applicable law, regulation, court order, subpoena, or other lawful process;
• when reasonably necessary to protect the security or integrity of the Site, prevent fraud or misuse, or protect the rights, property, or safety of Data Media, participating healthcare providers, Site users, or others; and
• in connection with a merger, acquisition, reorganization, sale of assets, or similar business transaction, subject to applicable legal requirements.

Cookies and Similar Technologies

The Site may use cookies and similar technologies that are necessary or useful for functions such as maintaining a secure session, authenticating users, remembering limited preferences, preventing fraud, and supporting the operation, performance, and security of the Site. We may also collect technical information about Site usage for security, performance, support, and troubleshooting purposes.

Information Security

We maintain administrative, technical, and physical safeguards designed to protect information processed through the Site against unauthorized access, use, alteration, or disclosure. Access to information is limited to personnel and service providers who require access for authorized business purposes and are subject to applicable confidentiality and security obligations.

Data Retention

We retain information for as long as reasonably necessary to provide the Site and related services on behalf of participating healthcare providers, satisfy contractual obligations, comply with applicable legal requirements, maintain security and transaction records, resolve disputes, and support legitimate business operations.

Privacy Requests and Healthcare Provider Records

For information Data Media processes on behalf of a healthcare provider, a privacy or records request may need to be directed to the applicable healthcare provider. Data Media may refer such requests to the healthcare provider or coordinate with the provider as appropriate under applicable law, contractual obligations, and security requirements.

Your Healthcare Provider's Privacy Practices

This Privacy Policy describes Data Media's handling of information in connection with ePayItOnline. It is not a substitute for a healthcare provider's Notice of Privacy Practices or other privacy notices. Please contact the healthcare provider identified with your account for information about that provider's privacy practices.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Site, our practices, or applicable requirements. The effective date shown at the top identifies when the current version became effective.

Contact Us

If you have questions about this Privacy Policy or the operation of ePayItOnline, please contact Data Media Associates, LLC using the contact information provided on the Site. Questions concerning healthcare services, insurance, adjustments, patient-account information, or amounts displayed through ePayItOnline should be directed to the healthcare provider identified with the account.