Effective Date:  October 13, 2025

This Consumer Health Data Privacy Notice (this “Notice”) supplements the Privacy Policy of Innovative Body Scan, d/b/a Dragonfly, and its affiliates (“Dragonfly” or “we”) to further explain our collection, use, and disclosure of personal information that identifies your past, present, or future physical or mental health status (“Consumer Health Data”).

Consumer Health Data We Collect

We may collect the following Consumer Health Data when you browse certain pages on our website, use our scheduling webpages, use our mobile app, or use our scanning services:

• Questionnaire. When you fill out the questionnaire in advance of your scan, we collect information about your medical history and your primary care physician.

• Consultation. When you use our services, you will undergo a consultation with a healthcare provider and we collect information that you provide during such consultation.

• Scanning Data. When you schedule an appointment for and undergo a scan, we collect information about your desired scan and your current health condition, and we also obtain the scanning results for you. The scan itself involves the collection and analysis of your relevant health information, in order to provide the results.

• Transaction Information. When you make a purchase or schedule an appointment on our website or through our mobile app, we collect information about the transaction, including your payment information and information about the services you purchase.

Our Use of Consumer Health Data

We use the Consumer Health Data that we collect to provide you with services you request, as otherwise described in this Notice, or as otherwise disclosed to you (e.g., in connection with a scan). This includes following purposes:

• Services and products. To provide our scanning and other services, including securing, troubleshooting, improving, and personalizing our services, and to process and fulfill appointments, including confirming or reminding you of a scheduled appointment.

• Business operations. To operate our business, such as in connection with creating and maintaining your account, billing, accounting, improving our internal operations, securing our networks and systems, detecting fraudulent or unauthorized activity, and analyzing usage and activities in connection with our website and scanning services.

• Legal, security, and safety reasons. For legal, security, and safety reasons, such as to protect our rights and the rights of our customers, protect the security of our systems and networks, enforce our policies, and address legal and regulatory compliance matters.

Notwithstanding any broader disclosures of personal information set forth in our Privacy Policy, our disclosure of Consumer Health Data is limited to the following situations.

• Service Providers. We may share your information with service providers for performance of a technology or other business function for us such as billing and collection, IT services, maintenance and hosting of our website and/or customer portal, payment processors, marketing partners, accounting or audit services, and tax services.

• Radiology Review Personnel. We disclose your scan results and responses to our questionnaire to our affiliated physicians prior to providing you with scanning results, and their use of such information will be consistent with this Notice and in compliance with applicable law.

• Your Healthcare Providers. We may disclose your scan results and responses to our questionnaire to your primary care or other selected physician, if you provide us with their contact information.
  Affiliates. We may share information with other entities in our corporate family for purposes consistent with this Notice.

• Sponsored Services. If you are using Dragonfly services arranged by your employer, we may share limited information about your use of our scanning services (but not the results of any such services) with such organizations for payment and administrative purposes.

• Corporate Event. We reserve the right to disclose or transfer to another entity or its affiliates or service providers some or all of your personal information in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. In such event, we would require the receiving entity, acquiring party, and/or merged entity to handle your information in accordance with applicable law.

• Legal. We may release your personal information if compelled by legal subpoena or court order, or when we reasonably believe the law otherwise requires us to do so.

Dragonfly does not sell Consumer Health Data. 

Your Rights Under Certain State Law

Residents of Connecticut, Maryland, Nevada, and Washington (and other states that may enact similar laws specific to consumer health data) may have the right to access, delete, and correct certain Consumer Health Data we collect about them. Visit our webform or send an email to operations@dragonflyscan.com to submit a request. If your request to exercise your rights is denied, you may appeal that decision. For your security and in an effort to prevent unauthorized third parties to access your Consumer Health Data, we will require you to verify your identity before we can act on your request. You will be required to provide an email address and phone number to start the verification process. For requests to make changes to inaccurate information, we may ask you to provide documentation that demonstrates why or how the existing information is inaccurate.

Your state may also provide you with the right to revoke your consent for the processing of Consumer Health Data or to request that Dragonfly stop processing your Consumer Health Data. If consent is required for Dragonfly to process your Consumer Health Data, you will be provided with information about how you may revoke your consent at the time your consent is obtained. If you have any questions about this, you may contact us at operations@dragonflyscan.com.

Depending on your state of residence, you may have additional privacy rights. These rights may include rights to access and restrict the use of sensitive personal information, which may include Consumer Health Data. For more information, please see our Privacy Policy.

Changes to this Notice:

We will update this Notice when necessary to reflect changes in our collection or use of Consumer Health Data or changes in applicable law. When we make changes to this Notice, we will post the updated notice on our website and update the notice’s effective date.

How to Contact Us:

If you have a privacy concern, complaint, or a question, please contact us by email as set forth above, or by mail addressed to:

Innovative Body Scan, d/b/a Dragonfly, Attn: Privacy Officer
2151 Fort Worth Avenue
Dallas, TX 75211