OpenArms HCS Privacy Policy

(Effective June 15, 2025)

Who We Are

OpenArms HCS is the sister company of MMG LLC. The OpenArms HCS company is made up of independently owned and operated contract owners and master contract owners businesses. (each a "Contract owners" and collectively, the "Network").

Scope of Policy

This Privacy Policy explains how MMG LLC., Inc. and its subsidiaries, ("OpenArms HCS ", "we," "our," "us") collect, use, and share Your information, including through Our digital properties on which this Privacy Policy is linked ("Site"). This Privacy Policy applies generally to the information We collect about You as a consumer, employee or contractor, prospective employee, member of Network, prospective member of Network, or about another person for whom You have the legal authority to represent, such as Your family member, friend, or client. ("You," "Your," "Yourself").

This policy is limited to data of US and Canadian residents only. Our international privacy policy may be accessed here.

This Privacy Policy does not apply to any protected health information covered by the Health Insurance Portability and Privacy Act ("HIPAA"), and its implementing regulations. Members of Network may maintain their own privacy notices. Where subject to HIPAA, and members of OpenArms HCS Network and Honor Technologies, Inc.("Honor") jointly provide care services, client health information is subject to the linked Notice of Privacy Practices.

If your data is collected, used, or shared in connection with your employment or contracting with OpenArms HCS., your data is also subject to the terms of all applicable employment policies, handbooks, rules, and agreements, which will control in the event of any conflict.

If your data is collected, used, or shared in connection with your status as a member of Network, your data is also subject to the terms of applicable contract owners agreement(s) and written requirements, which will control in the event of any conflict.

Notice of Collection of Personal Information

We may collect the following categories of personal information:

• Identifiers
• Customer personal information under Florida. Civ. Code § 1798.80(e)
• Voluntarily provided information on personal characteristics of protected classes,
• Commercial information & financial information,
• Professional or employment-related information,
• Sensitive personal information,
• Website/Application interaction or similar network activity,
• Biometric Information
• Sensory data
• Health & Physical Characteristics, and
• Inferences drawn from the above.

Categories of Sensitive Personal Information

Under the Florida Consumer Privacy Act (CCPA) as amended by the Florida Privacy Rights Act (CPRA), we collect and use the following categories of sensitive personal information:

• Social Security Numbers
• Driver's License Numbers
• State Identification Card Numbers
• Financial Account Information
• Precise Geolocation
• Health Information
• Biometric Information
• Contents of Mail, Email, and Text Messages

We collect this information so that we may:

• Communicate with you
• For administration of our business
• Anonymize Your data for further internal and external use in a manner that does not identify You
• Enhance security and preventing fraud or illegal activity
• Perform our contractual duties and obligations or enter into an agreement
• Verify and onboard home care partners on to the Honor care platform
• Ensure compliance with legal obligations
• Facilitate of online or platform interactions, (excluding use of web tracking technologies for targeted advertising)
• Care coordination & customer service,
• Provide educational resources/ learning management
• Identify and test business innovations
• Perform market research and analytics
• Advertise/market for employment, recruitment, products and Services

We may share identifiers, customer personal information under Florida. Civ. Code § 1798.80(e), commercial information, and Website/Application interaction or similar network activity for purposes of targeted advertising. We do not sell or share client health information.

A more detailed description with examples is provided below in the Data We Collect, Data We Use and Data Sharing sections.

Data Minimization and Purpose Limitation

We adhere to principles of data minimization and purpose limitation, which means we collect, use, retain, and share personal information only as reasonably necessary and proportionate to achieve the purposes for which the information was collected or processed, or for other disclosed purposes compatible with the context in which the personal information was collected.

Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. The specific retention periods for each category of personal information are as follows:

Category	Retention Period
Identifiers	Retained for the duration of your relationship with us and for a period thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Customer Personal Information	Retained for as long as needed to provide you with our services and for a period thereafter as required by law.
Personal Characteristics of Protected Classes	Retained for as long as necessary to fulfill the purposes for which such information was collected and as required by law.
Commercial Information	Retained for the duration of your relationship with us and for a period thereafter as necessary to comply with our legal obligations.
Financial Information	Retained for as long as needed to provide you with our services and for a period thereafter as required by law
Professional or Employment-Related Information	Retained for the duration of your employment or application process and for a period thereafter as required by law.
Sensitive Personal Information	Retained for as long as necessary to provide the services or goods requested and for a period thereafter as required by law.
Website/Application Interaction or Similar Network Activity	Retained for the duration of your use of our website and for a period thereafter as necessary to comply with our legal obligations.
Biometric Information	Retained for as long as needed to fulfill the purposes for which such information was collected and for a period thereafter as required by law.
Sensory Data	Retained for as long as necessary for quality assurance purposes and for a period thereafter as required by law.
Health & Physical Characteristics	Retained for as long as necessary to fulfill the purposes for which such information was collected and as required by law.

General Retention Policy:

We will retain and use Your Personal Information for as long as necessary to satisfy the purpose(s) for which it was collected and to comply with our legal obligations, resolve disputes, and enforce our agreements. Once data is aggregated, de-identified, or anonymized, it may be retained for a longer period as permitted by law.