Privacy Policy

1. Who we are and what this policy covers

Anesthesia Zone, LLC operates MedExam Network as a brand and is responsible as controller for the processing described in this policy, except where a provider acts independently for its own purposes. Our mailing address is 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Contact us at [email protected].

This policy covers visitors to the parent website and people whose inquiries or specialty purchases we handle through central support and billing. It does not describe every learning-service activity on our specialty websites, such as study histories, assessment answers, or specialty account features. Consult the privacy information provided on the relevant specialty website. Separate domains do not necessarily mean separate legal operators.

Our Terms of Service address use of the parent website and central services. This privacy notice is not a request for consent to all processing it describes.

2. Information we collect

Information you provide: your name, email address, specialty or organization, messages, attachments, and information needed to answer an inquiry or investigate a payment. Correspondence may be handled in our website backend and Gmail after routing through Cloudflare.

Billing information: customer and order identifiers, purchased service, billing contact and address, transaction amount and currency, subscription status, payment status, and payment-method details made available by Stripe, such as card brand and last four digits. Stripe processes payment credentials; we do not need your full card number or security code for support. We may receive billing events from Stripe and the relevant specialty platform.

Technical information: IP address, browser and device characteristics, requested pages, referring pages, timestamps, approximate location inferred from technical data, security events, and diagnostic details. Cookies, local storage, pixels, and similar technologies may also record identifiers, preferences, navigation, clicks, and advertising interactions, subject to the choices described below.

Where enabled with the required permissions, Clarity provides behavioral metrics, heatmaps, and session replay of website interactions. These are reconstructions of browser interactions, not recordings from your microphone or camera. Please do not enter patient-identifiable information, passwords, full payment credentials, or confidential clinical or examination material in support messages or other free-text fields.

We receive information directly from you, automatically from your browser, and from payment, infrastructure, analytics, and advertising providers. Specialty logos or other assets displayed on the directory can be requested from specialty domains before you click a link, exposing ordinary request information to those systems and their providers.

3. Why we use information

We use information to operate the website, respond to requests, administer purchases and subscriptions, investigate billing issues, prevent fraud and abuse, troubleshoot errors, maintain security, understand website use, and measure and improve advertising where permitted.

Where data-protection law requires a legal basis, we rely on performance of a contract or steps you request before a contract for relevant purchase and support activities; legal obligations for required accounting, regulatory, and compliance records; and legitimate interests for proportionate website administration, security, fraud prevention, and handling general inquiries, subject to your rights and interests.

We rely on consent where required for optional tracking, advertising, or other activities. We do not substitute a legitimate-interest claim for consent that cookie or other applicable law requires. You may withdraw consent without affecting the lawfulness of processing before withdrawal.

Support correspondence is used for operational support, not automatically enrolled in cross-brand email marketing. We do not use the parent website's analytics to make decisions with legal or similarly significant effects about you solely by automated means. Advertising providers may use identifiers and activity to measure campaigns or personalize advertising under their applicable terms and your choices.

4. Providers and sharing

We use the following services for the purposes described below. Optional tools operate only where enabled and subject to applicable consent requirements. Providers may process information on our instructions and, for some activities such as payment compliance or advertising, for their own purposes described in their notices.

• Hetzner: application hosting on servers in Germany and Finland. Hetzner privacy information.

• Cloudflare: website delivery, network and security services, and email sending and routing. Cloudflare Privacy Policy.

• Google: Gmail for correspondence and Google Analytics 4 (GA4) for website usage analytics. Google Privacy Policy and information about sites using Google services.

• Stripe: payment processing, subscription administration, transaction records, and fraud prevention for the MedExam Network account under Anesthesia Zone, LLC. Stripe Privacy Policy.

• Sentry: error monitoring and diagnostics to investigate faults and improve reliability. Sentry Privacy Policy.

• OpenAI Ads and the OpenAI advertising pixel: advertising attribution and conversion measurement using relevant website events and identifiers. This use does not mean we receive your ChatGPT conversations. OpenAI Privacy Policy.

• LinkedIn Insight Tag and Meta Pixel: advertising measurement, attribution, and audience-related advertising features where enabled and permitted. LinkedIn Privacy Policy and Meta Privacy Policy.

• Microsoft Advertising and Universal Event Tracking (UET): advertising attribution, conversions, and audience measurement. Microsoft Clarity: behavioral metrics, heatmaps, and session replay to understand interactions and improve the website and advertising. These services use cookies and similar technologies and may collect or receive personal information for Microsoft Advertising. Microsoft Privacy Statement.

• Bing Webmaster Tools: search visibility, indexing, and search-performance reporting. This is distinct from Microsoft Advertising's UET visitor tracking. Microsoft Privacy Statement.

Authorized personnel may access information to perform their duties. We may share relevant information with the specialty platform involved in your inquiry or purchase, professional advisers, and authorities where legally required or reasonably necessary to establish or defend legal claims, protect rights, or investigate fraud. Information may also be transferred in a merger, acquisition, or business reorganization, subject to applicable safeguards and notice requirements.

Some advertising disclosures may constitute “sharing,” “sale,” or targeted advertising under particular privacy laws, even where no money is exchanged for the information. Where those laws apply, you may exercise the corresponding opt-out rights as explained below.

5. Cookies, tracking, and your choices

Necessary technologies support functions such as security, request verification, and session management. Preference storage can remember choices such as appearance. Optional analytics technologies help us understand visits and interactions; advertising technologies help measure conversions and advertising effectiveness and support permitted audience features. A technology's treatment depends on its actual purpose and applicable law, not merely its label.

Where optional tracking is offered, the consent controls let you accept or reject optional technologies and choose between purposes where required. Technologies requiring consent must remain off until you choose to enable them. Continuing to browse, dismissing a notice, or agreeing to our terms is not consent to optional tracking. Refusing optional tracking does not prevent browsing the parent website.

You can revisit the site's consent controls, where provided, to change your choices or withdraw consent. Choices may need to be made again on another browser or device or after clearing storage. If controls are unavailable, contact us using the address below; optional technologies requiring consent should not operate without a valid choice. An email request is also available for applicable privacy and advertising opt-out rights.

You can manage cookies through your browser, although blocking necessary storage may affect functionality. Browser settings do not replace consent controls where those are legally required. Where applicable law requires recognition of an opt-out preference signal such as Global Privacy Control, we will honor it for the processing to which it applies. Withdrawal or rejection does not undo completed processing or remove information we must retain for other lawful purposes.

6. International processing

Our company is based in the United States, and our application servers are hosted by Hetzner in Germany and Finland. Authorized personnel in Egypt access customer information to operate the business and provide support. Information is also processed through the providers listed above, whose systems, personnel, or subprocessors may be located in other countries. European server hosting does not mean all processing or access occurs within Europe.

Data-protection laws differ between countries. Where applicable law requires a safeguard for an international transfer, the relevant transfer must be supported by an appropriate lawful mechanism, such as an applicable adequacy decision or approved contractual safeguards together with any necessary additional measures. The mechanism depends on the recipient and processing involved. Contact us for information about safeguards relevant to your data; this policy does not itself create a transfer mechanism or ask you to waive legal protections.

7. Retention and security

We retain information for as long as reasonably necessary for the purpose for which it was collected and for applicable legal obligations. Support retention depends on resolving the inquiry and relevant follow-up or disputes; billing retention depends on accounting, tax, fraud-prevention, and transaction obligations; technical and security retention depends on troubleshooting, threat investigation, and operational needs.

Relevant factors include the information's sensitivity, the relationship or transaction involved, legal limitation periods, outstanding disputes, and provider or backup retention. We do not promise a single fixed deletion period for all records. When information is no longer needed, it should be deleted or anonymized under the applicable processes. Backup copies may remain until the relevant backup cycle expires, with use limited to appropriate recovery and legal purposes.

We use reasonable technical and organizational measures designed to protect information and limit access to authorized purposes. No website, storage system, or email service is completely secure. Avoid sending sensitive medical information or payment credentials by email. A deletion request may be subject to identity verification and lawful retention exceptions.

8. Your privacy rights

Depending on where you live and the law that applies, you may request access to your information, correction, deletion, restriction of processing, or a portable copy; object to processing based on legitimate interests; withdraw consent; and opt out of applicable sale, sharing, or targeted advertising. These rights have legal conditions and exceptions and are not identical in every jurisdiction.

Send requests to [email protected], identifying the request and any relevant specialty or transaction. We may ask for information reasonably necessary to verify your identity or an authorized agent's authority. We will respond within the time required by applicable law and explain any lawful refusal or extension. You may ask us to review a refusal and exercise any applicable statutory appeal rights.

We will not unlawfully discriminate against you for exercising privacy rights. You may complain to the competent data-protection or consumer authority. Where applicable, this includes an authority in your country of residence, workplace, or the place of an alleged infringement. You do not need to contact us before exercising a statutory complaint right.

9. Children and sensitive information

MedExam Network is intended for adults aged 18 or older. We do not knowingly seek personal information from children. If you believe a child has provided information, contact us so we can investigate and take appropriate action, including deletion where required.

The parent website is not a patient-record service. Do not send identifiable patient data or use it to obtain care. If sensitive information reaches us unexpectedly, we will handle it only as appropriate to address the issue and meet our legal obligations.

10. Updates and contact

We may update this policy as our services or legal obligations change. The effective date identifies the current version. We will provide additional notice of material changes and obtain fresh consent where required. An update does not retroactively authorize a new use of information that requires consent.

For privacy questions, requests, or complaints: [email protected].

Anesthesia Zone, LLC, trading as MedExam Network
131 Continental Dr, Suite 305
Newark, DE 19713, United States