Privacy Policy

Effective April 22, 2016

Welcome to my.VectraDA.com ("Web site" or "Site") operated by or on behalf of Crescendo Bioscience, Inc. ("Crescendo Bioscience," "we" or "us"). Your privacy is important to us. Crescendo Bioscience has established this Privacy Policy Statement ("Privacy Statement") to inform you of what data we collect from you when you visit our Site; how we use such data; and whether and to whom we share such data with others. It is our policy to protect your personal information and to use it only in accordance with this Privacy Statement. This Privacy Statement only governs our use and disclosure of information collected through this Site. Please read this Privacy Statement carefully. Using our Site is voluntary, and by using or accessing this Web site in any way, or by transmitting information to us by e-mail, subscribing to our services or other electronic means, you: acknowledge that you have read and understood this Privacy Statement; agree that your access and use of the Site are subject to the Privacy Statement and the Terms and Conditions. If you do not agree with the terms of this Privacy Statement, please do not access or use this Web site.

Updates

Crescendo Bioscience may revise this Privacy Statement from time to time. All updates to this Privacy Statement will be posted on this Web site page. Please check this Web site for the most current version of our Privacy Statement. Your continued use of this Web site after we have posted a change to the Privacy Statement on the Web site constitutes your acceptance of such changes.

Linked Web Sites

This Web site may contain links to external web sites. Crescendo Bioscience does not maintain these sites and is not responsible for the privacy practices of sites that it does not operate. Please refer to the specific privacy statements posted on these sites.

Types of Information Collected

We only collect certain personally identifiable information (such as name, e-mail address, postal code and e-mail preferences) about you via this Site when you provide it in connection with a request for information, when you send us feedback or e-mail, when you register for certain services, or directly in response to inquiries on the Site ("Personal Information"). In all such cases you choose whether to provide us with the Personal Information, but registering for the Web site will require you to provide us with Personal Information to authenticate your identity.

In the event you do not provide us with your Personal Information and choose only to browse our Web site, our system automatically collects non-identifiable information such as your web request, Internet Protocol ("IP") address, browser type, browser language, domain names, referring and exit pages and URLs, platform type, pages viewed and the order of these page views, and the amount of time spent on particular pages, which we may use to analyze trends, administer the Web site, monitor the effectiveness of the Site and to consider potential improvements to the Site. Once you are registered with the Web site, this information may be connected to your identity.

Use of Cookies

Certain pages of our Web site and/or html e-mail correspondence may use session cookies to anonymously track visitors, save Web site preferences and to allow us to recognize visits from the same computer and browser. Certain pages of our Web site and/or html e-mail correspondence may use persistent cookies to anonymously track visitors. We may use a third-party service such as Google Analytics to perform this function. Google Analytics uses persistent cookies to determine visitor sessions, track traffic sources & navigation, and identify unique visitors and enable us to distinguish between unique and return visitors to our site.

Children

Our Web site is directed toward adults. If you are under the age of 13, you must obtain the authorization of a responsible adult (parent or legal custodian) before using or accessing our Web site. We will not knowingly collect or use any personal information from any children under the age of 13. If we become aware that we have collected any personal information from children under 13, we will promptly remove such information from our databases.

Third Party Information

You agree that you have provided notice to, and obtained consent from, any third party individuals whose personal information you supply to us, including with regard to: (a) the purposes for which such third party's personal information has been collected; (b) the intended recipients or categories of recipients of the third party's personal information; (c) which of the third party's information is obligatory and which information, if any, is voluntary' and (d) how the third party can access and, if necessary, rectify the information held about them.

Use of Personal Information

Crescendo Bioscience will only use your Personal Information for the purpose it was collected. We may use your Personal Information to authenticate your identity to register you for the Web site, contact you, deliver your laboratory testing results, improve this Site, provide you with information that you have requested, or provide you with additional information, which Crescendo Bioscience believes may be of interest to you. We may also use this information to respond to your inquiries, provide you with technical support and enforce our Terms and Conditions and other policies governing use of the Web site. We may combine your information with other information about you that is available to us, including information from other sources, and may use a third party to assist in authenticating your identity. Use for any other purpose will be with your explicit consent.

Crescendo Bioscience will not sell or rent your Personal Information to any other company or organization. Crescendo Bioscience may access and/or disclose your personal information to law enforcement officials, regulatory agencies or other third parties as we, in our sole discretion, believe necessary or appropriate in connection with an investigation of illegal activity that may expose us to legal liability or costs, to enforce our policies governing the Web site and for regulatory compliance. Crescendo Bioscience may also disclose your information in connection with corporate restructuring, merger or consolidation with, or sale of substantially all of our assets to a third party. We do not guarantee that any entity receiving such information in connection with one of these transactions will abide by this Privacy Statement.

Security Measures

Information that you provide to Crescendo Bioscience through our Web site is encrypted using industry-standard Secure Sockets Layer (SSL) technology, with the exception of information you send via e-mail. Your information is processed and stored on controlled servers with restricted access. UNFORTUNATELY, WE CANNOT ENSURE OR WARRANT THE SECURITY OF ANY INFORMATION YOU TRANSMIT TO OUR WEB SITE, AND YOU DO SO AT YOUR OWN RISK. AS A CONSEQUENCE, CRESCENDO BIOSCIENCE DISCLAIMS ANY WARRANTIES OR REPRESENTATIONS RELATING TO MAINTENANCE OR NONDISCLOSURE OF PERSONAL INFORMATION.

Portions of our Web site and services are designed for the use of patients, and therefore, are password protected and require that each individual have their own user name and password. All attempts to register for the Web site or access password protected portions of our Web site and Services are logged.

We are required to apply reasonable and appropriate measures to safeguard the confidentiality, integrity and availability of Personal Health Information residing on, processed by, or transmitted by our services, as detailed below in the Notice of Privacy Practices. It is important to remember, however, that no system can guarantee 100% security at all times, Accordingly, we cannot guarantee the security of information stored on or transmitted to or from our services.

Information Access, Updates and Choice

You may choose to provide information to Crescendo Bioscience by updating your account profile, sending us an e-mail, or otherwise contacting us (see https://my.VectraDA.com/contact-us). During the subscription process for the services, you have the opportunity to elect to receive certain communications from us.

Crescendo Bioscience will take reasonable steps to verify your identity before granting access to your Personal Information. If you choose to remove your account or unsubscribe from our services, you will no longer receive such correspondences. However, we may retain your information for a period of time to resolve disputes, troubleshoot problems or for other valid business or legal reasons.

Governing Law

Our Web site is controlled and operated by Crescendo Bioscience, Inc. By choosing to visit our Web site or otherwise provide information to Crescendo Bioscience, you agree that any dispute over privacy or the terms contained in this Privacy Statement will be governed by the laws of the State of California. If you are accessing our Web site from any location with regulations or laws governing personal data collection, use or disclosure that differ from United States laws or regulations, please note that through your continued use of our Web site, which is governed by the laws of the State of California and the United States of America and this Privacy Statement, you are transferring personal information to the United States of America and you consent to that transfer and to the collection and processing of such information in the United States. You also consent to the adjudication of any disputes arising in connection with our Web site in the state courts San Mateo County, California and the federal courts for the Northern District of California.

Questions

If you have questions about this Privacy Statement, please contact us at privacy@crescendobio.com.

NOTICE OF PRIVACY PRACTICES

THIS NOTICE OF PRIVACY PRACTICES ("NOTICE") DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

EFFECTIVE DATE OF NOTICE: November 13, 2013

This Notice describes the privacy practices of Crescendo Bioscience, Inc., its employees, and other personnel ("CRESCENDO BIOSCIENCE", "WE" OR "US").

We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to maintain the privacy of health information about you ("Protected Health Information") and to provide you with this Notice of our legal duties and privacy practices with respect to your Protected Health Information.

We understand the importance of privacy and are committed to maintaining the confidentiality of your Protected Health Information. We make a record of your Protected Health Information, such as the clinical laboratory test results we produce, and we may obtain records related to your medical care from others. We use these records to provide or enable other health care providers to provide quality medical care, to obtain payment for services provided, and for administrative and operational purposes. When we use or disclose your Protected Health Information, we are required to abide by the terms of this Notice (or other notice in effect at the time of the use or disclosure) and to comply with HIPAA.

If you have any questions about this Notice, please contact our Privacy Officer by calling Customer Service at 1(877) RHEUMDX (1-877-743-8639).

How We May Use Or Disclose Your Protected Health Information

For Treatment. We may use or disclose your Protected Health Information for treatment purposes. For example, we may use your Protected Health Information to perform our testing services and to produce clinical laboratory results that assist other health care providers in providing quality medical care. We may also share your Protected Health Information with other health care providers who are directly involved in your medical care.

For Payment. We may use or disclose your Protected Health Information to obtain payment for the services you receive. For example, we may send a bill to your health plan, such as an insurance company or health plan, to receive payment for the services provided to you.

For Health Care Operations. We may use and disclose your Protected Health Information for our health care operations. For example, we may use or disclose your Protected Health Information to review and improve the quality of service we provide, or the competence and qualifications of our professional staff. We may use or disclose your Protected Health Information to get authorization for services or referrals from your health plan.

Business Associates. We may share your Protected Health Information with other companies or individuals, known as "business associates," who need your information to provide services to us. For example, we may use another company to perform billing services on our behalf. Each business associate is required to protect the privacy of your Protected Health Information, and we have agreements in place with each business associate requiring their compliance.

Required by Law. We must disclose your Protected Health Information as required by Federal, state or local law.

Persons Involved in Your Care or Payment for Your Care. We may disclose your Protected Health Information to a person involved in your care or payment for your care, such as a family member, relative, or close friend, unless you object or ask us not to.

Personal Representatives. We may disclose Protected Health Information about you to your Personal Representative, such as a lawyer, administrator, executor or other authorized person responsible for you or your estate.

Victims of Abuse, Neglect, or Domestic Violence. If required or authorized by law, we may disclose Protected Health Information to a government agency, such as social services or a protective services agency, if we reasonably believe that an individual is the victim of abuse, neglect, or domestic violence.

Law Enforcement. We may disclose your Protected Health Information to the police or other law enforcement officials as required by law or in compliance with a court order, warrant, subpoena, summons, or similar process authorized by law. Under certain circumstances, we also may disclose Protected Health Information to law enforcement officials when the information is needed to: identify or locate a missing person or a suspect, fugitive, or material witness; determine whether an individual has been a victim of a crime; determine if a death resulted from criminal conduct; or investigate suspected criminal activity on our premises.

Judicial and Administrative Proceedings. Under certain circumstances, we may disclose your Protected Health Information in the course of a judicial or administrative proceeding, in response to a court order, subpoena, or other lawful process.

Lawsuits and Disputes. If you are involved in a lawsuit or a dispute, we may disclose your Protected Health Information in response to a court or administrative order. If the lawsuit is a medical negligence action, your Protected Health Information may be disclosed without a court order or subpoena. We may also disclose your Protected Health Information in response to a subpoena, discovery request, or other lawsuit process by someone else involved in the dispute, but only if efforts have been made to tell you about the request or to obtain an order protecting the information requested.

Public Health and Safety. Your Protected Health Information may be used or disclosed for public health activities, such as assisting public health authorities or other legal authorities to prevent or control disease, injury, or disability, or for other health oversight activities. Your Protected Health Information may be disclosed to appropriate persons in order to prevent or lessen a serious and imminent threat to the health and safety of a particular person or the general public.

Specialized Government Functions. We may disclose your Protected Health Information for military or national security purposes or to correctional institutions or law enforcement officers that have you in their lawful custody.

Workers' Compensation. Your Protected Health Information may be used or disclosed as necessary in order to comply with laws and regulations related to workers' compensation.

Change of Ownership. In the event that our clinical laboratory is sold or merged with another organization, your Protected Health Information will become the property of the new owner, although you will maintain the right to request that copies of your Protected Health Information be sent directly to you or physician of your designation.

Communications About Products and Services. We may use and disclose your Protected Health Information to contact you about other Crescendo Bioscience products and services which we believe may be of interest to you. Any use, disclosure, or sale of Protected Health Information to third parties for marketing purposes requires your written authorization.

Research. We may use or disclose your health information for research purposes when an institutional review board or privacy board has reviewed the research proposal and established protocols to ensure the privacy of your Protected Health Information. In preparation for research, we may review limited Protected Health Information to draft research protocols, to identify prospective research participants, or for similar purposes provided the information is not removed from our premises.

When We May Not Use Or Disclose Your Protected Health Information

Except as described in this Notice of Privacy Practices, we will not use or disclose your Protected Health Information without your written authorization. If you do authorize us to use or disclose your Protected Health Information for another purpose, you may revoke your authorization in writing at any time as provided under HIPAA.

Your Rights to Your Protected Health Information

You have the right:

To obtain a paper or electronic copy of this Notice of Privacy Practices.

To request restrictions on certain uses and disclosures of your Protected Health Information by providing a written request that specifies what information you wish to limit and what limitations on our use or disclosure of your Protected Health Information you wish to have imposed. While we will consider all requests for restrictions carefully, we are not required to agree to the request unless the restriction involves a disclosure to an insurer or health plan and you have paid for the service "out-of-pocket" and "in full".

To inspect and obtain a copy of your Protected Health Information, with limited exceptions.If we deny your request for access or copies, you will be informed of your rights to appeal our decision. Note: CLIA regulations and state law will determine whether a lab can provide test results directly to a patient. (California State Law requires all Laboratory results be delivered to the ordering physician)

To request that we correct your Protected Health Information. Your request must be in writing and must include the reason(s) for your request. We are not required to make your requested amendment (s) or modification(s), and should we deny your request, we will provide you with information about our denial and how you can disagree with the denial.

To receive an accounting of certain Protected Health Information disclosures. To receive an accounting of certain disclosures of your Protected Health Information made by us as required under HIPAA, the request must be in writing and the list will include disclosures made within the prior six (6) years.

To receive confidential communications of your Protected Health Information. You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address.

Obligations of this Clinical Laboratory

We are required by law to (i) maintain the privacy of your Protected Health Information, (ii) notify you promptly if a breach occurs that may have compromised the privacy or security of your Protected Health Information. (iii) provide you with this Notice of our legal duties and privacy practices with respect to your Protected Health Information, (iv) abide by the terms of this Notice.

Changes to our Notice of Privacy Practices

We reserve the right to change the terms of this Notice and/or to adopt amendments or revise any of our privacy practices provided such changes are permitted by applicable law. We will promptly post any changes to this Notice on our website at http://www.crescendobio.com. Please review this website periodically to ensure that you are aware of any updates.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer to the address set forth below or to the Secretary of Health and Human Services. We will provide you with the address to file your complaint with the U.S. Department of Health and Human Services upon request. We will not take retaliatory action against you and you will not be penalized in any way for filing a complaint.

IF YOU WOULD LIKE TO HAVE A MORE DETAILED EXPLANATION OF THESE RIGHTS, OR IF YOU WOULD LIKE TO EXERCISE ONE OR MORE OF THESE RIGHTS, CONTACT OUR PRIVACY OFFICER THROUGH CRESCENDO BIOSCIENCE CUSTOMER SERVICE (1-877-RHEUMDX (1-877-743-8639)) OR USING THE FOLLOWING CONTACT INFORMATION.

Crescendo Bioscience, Inc.
Attn: Privacy Officer
341 Oyster Point Boulevard
South San Francisco, CA 94080
(650) 351-1354