Privacy Policy Notice

This Privacy Notice explains how Ride Roundtrip, Inc. (“Roundtrip,” “we,” “us,” or “our”) collects, uses, and discloses information when you access or use our websites and our other online services (the “Sites”).

This Privacy Notice is a disclosure document intended to inform you about our data practices. It does not create contractual obligations beyond those set forth in our Terms of Use (the "Terms of Use"). This Privacy Notice is intended to function as a notice at collection for California purposes (including the CCPA/CPRA), where applicable.

Your access to and use of the Sites is governed by our Terms of Use. The Terms of Use include binding arbitration requirements and waivers of class, collective, representative, and private attorney general actions that apply to disputes relating to privacy and data practices (collectively, the “Dispute Mechanisms”).

This Privacy Notice is incorporated by reference into the Terms of Use.

Scope of This Privacy Notice

This Privacy Notice applies to information collected through:

• The Roundtrip Sites where this Privacy Notice is posted;
• Contact, inquiry, and messaging features available on the Sites; and
• Interactions with Site functionality, including navigation and search tools.

This Privacy Notice does not apply to:

• Third-party websites, platforms, or services that you may access through links on the Sites; or
• Information collected outside the Sites unless expressly stated.

Information about how we handle Protected Health Information under HIPAA is addressed in our Terms of Use and, for our healthcare organization customers, in our Business Associate Agreement.

Information We Collect

A. Information You Provide

When you interact with the Sites, you may voluntarily provide information such as:

• Name
• Address
• Email address
• Phone Number
• Organizational information
• Inquiry or message content

You are not required to provide all requested information and some Site features may be unavailable without it.

B. Information Collected Automatically

When you access or use the Sites, certain technical information may be collected automatically, including:

• IP address
• Browser and device characteristics
• Operating system information
• Date and time of access
• Pages viewed and general interaction data
• User City/Country

This information is collected through cookies and similar technologies as described in our Cookies & Tracking Technologies Notice, which is incorporated by reference.

C. Search and Site Interaction Data

The Sites may include search or navigation tools. When you use these features, we may collect information such as:

• Search terms entered;
• Pages or content accessed; and
• Interaction data necessary to operate, maintain, and improve the Sites.

How We Use Information

We use information collected through the Sites for purposes that may include:

• Authenticate you and manage your account;
• Responding to inquiries and communications you submit;
• Operating, maintaining, and securing the Sites;
• Improving Site functionality, performance user experience;
• Publishing business communications;
• Complying with applicable legal obligations.

We do not use information collected through the Sites to make automated decisions that have legal or similarly significant impacts on individuals.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Sites, analyze performance, and record and honor user consent choices.

Additional details about these technologies, including how to manage your preferences, are provided in our Cookies & Tracking Technologies Notice, which is incorporated by reference into this Privacy Notice.

Disclosure of Information

A. Service Providers

We may disclose information to vendors and service providers that perform services on our behalf, such as website hosting, analytics, security, and IT support. These providers are authorized to use information only as necessary to perform services for Roundtrip and are subject to contractual safeguards designed to protect information.

B. Aggregated and De-Identified Information

We may use and disclose aggregated or de-identified information that cannot reasonably be used to identify individuals for analytics, reporting, or other business purposes.

C. Legal and Compliance Disclosures

We may disclose information where required to do so by law or where we believe disclosure is necessary to:

• Comply with legal obligations or lawful requests;
• Protect the rights, safety, or property of Roundtrip or others; or
• Enforce our Terms of Use.

Third-Party Links

The Sites may contain links to third-party websites or platforms. Roundtrip does not control and is not responsible for the privacy practices, tracking technologies, or content of third-party sites. Your interactions with third-party sites are governed by their own privacy notices and terms.

Your Privacy Choices

Information about available privacy choices, including choices related to cookies and tracking technologies, is provided in our Privacy Preferences page, which is incorporated by reference into this Privacy Notice.

Data Retention

We retain information collected through the Sites for as long as reasonably necessary to:

• Fulfill the purposes described in this Privacy Notice;
• Respond to inquiries and communications; and
• Comply with legal, regulatory, or operational requirements.

Retention periods may vary depending on the nature of the information and how it is used. Upon account deletion:

• Your Roundtrip account data is deleted within 30 days;
• OAuth tokens for Google and NetSuite are revoked; and
• Cached financial data is purged from our systems.

Data Processing Location

Information collected through the Sites may be processed in the United States or in other jurisdictions where Roundtrip or its service providers operate. These jurisdictions may have data protection laws that differ from those of your place of residence.

Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect information collected through the Sites. However, no security measures are perfect, and we cannot guarantee absolute security. Data is stored in accordance with the following criteria:

• Encryption: encrypted at rest using AES-256 encryption and encrypted in transit using TLS 1.3 (minimum TLS 1.2)
• Storage location: hosted on infrastructure located in the United States
• Access controls: access is limited to personnel with a legitimate business need, consistent with role-based access and least-privilege principles
• Independent assurance: our security practices are assessed as part of our SOC 2 compliance program.

Your Rights and Choices

You have the right to:

• Access/know the data Roundtrip holds pertaining to you;
• Correct inaccurate account information;
• Delete your account and associated data;
• Opt-out of the sale or sharing of your personal data;
• Limit the use and disclosure of your sensitive personal data we have access to;
• Not be discriminated against by us; and
• Export your data in a portable format upon request.

To exercise these rights, contact: privacy@roundtriphealth.com.

Your Privacy Choices and Rights (California)

If you are a California resident, you may have rights under the CCPA/CPRA (subject to exceptions), such as:

• the right to know/access (categories and specific pieces of personal information, sources, purposes, and disclosures);
• the right to delete (subject to legal, security, and business exceptions);
• the right to correct inaccurate personal information; and
• the right to opt out of certain disclosures/uses where applicable.

We do not sell personal information for money. Depending on configuration and the technologies used, certain disclosures of online identifiers to third parties for analytics or advertising-related purposes may be considered ‘sharing’ for cross-context behavioral advertising under California law. Where applicable, you may exercise available opt-out choices through our Privacy Preferences page, including via recognized browser signals such as the Global Privacy Control (where required by law).

How to submit a request:

Email: privacy@roundtriphealth.com

Mail: Ride RoundTrip, Inc.
Attn: Privacy Department
1920 E Serene Ave Ste 500-2 PMB 353
Las Vegas, NV 89123

Please include your name, contact information, and the request you are making. We may need to verify your identity.

Authorized agents may submit requests on your behalf where permitted by law; we may require proof of authorization and verification of your identity.

Non-discrimination

We will not discriminate against you for exercising privacy rights.

Children’s Information

The Sites are not directed to children under the age of 13, and we do not knowingly collect personal information from children through the Sites.

Dispute Resolution and Class Action Waiver

Any disputes relating to this Privacy Notice, our data practices, or how information is collected, used, or disclosed through the Sites are subject to the binding arbitration and class action waiver provisions in our Terms of Use.

These provisions require disputes to be resolved on an individual basis only, subject to any non-waivable rights under applicable law. Please review the Terms of Use carefully, as they affect your legal rights.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time. When we do, we will revise the “Last Updated” date above. Changes are effective when posted unless otherwise required by law.

Contact Us

If you have questions about this Privacy Notice or our data practices, you may contact us at:

Ride Roundtrip, Inc.
1920 E Serene Ave Ste 500-2 PMB 353
Las Vegas, NV 89123
privacy@roundtriphealth.com
roundtriphealth.com

Contacting us or submitting an inquiry does not change how disputes are resolved under our Terms of Use.