Draft — pending attorney review. Not legal advice. This is a working draft covering current (mid-2026) state privacy law summaries; it should be reviewed by counsel before publishing, and updated once Prompt Care expands into new states like Florida.

Effective Date: [DATE] Last Updated: [DATE]

This Privacy Policy applies to both urfresh.com and promptcare.org (collectively, “our Sites”), operated by Prompt Care, Inc. (“Prompt Care,” “we,” “us,” or “our”). It describes how we collect, use, and share information when you visit our Sites or contact us.

1. Information We Collect

We collect information you voluntarily provide to us, such as when you email us at info@promptcare.org to ask a question or request service. This may include your name, email address, phone number, mailing address, and the contents of your message.

We do not currently use website forms, cookies for advertising purposes, or third-party tracking/analytics pixels on our Sites.

2. How We Use Information

We use the information you provide to respond to your inquiries, communicate about scheduling or service, and improve our Sites. We do not sell your personal information.

3. How We Share Information

We do not sell or rent your personal information. We may share it with service providers who help us operate our business, or with law enforcement/regulators when required by law.

4. Data Retention

We retain personal information only as long as necessary to fulfill the purpose it was collected for, or as required by law.

5. Your Privacy Rights

Depending on where you live, you may have rights to access, delete, correct, or port your personal data, and to opt out of sale, sharing, or targeted advertising of your data (we do not currently engage in either). To exercise any of these rights, email us at info@promptcare.org. We will not discriminate against you for doing so.

6. State-Specific Disclosures

Because our Sites are accessible nationwide, residents of the following states may have additional rights under their state’s privacy law, regardless of where Prompt Care physically operates:

California (CCPA/CPRA) — right to know, delete, correct, opt out of sale/sharing, limit use of sensitive data, and non-discrimination. California is the only state with a private right of action for certain data breaches.

Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Delaware (DPDPA), Iowa (ICDPA), Nebraska (NDPA), New Hampshire (NHPA), New Jersey (NJDPA), Tennessee (TIPA), Minnesota (MNCDPA), Maryland (MODPA), Indiana (INCDPA), Kentucky (KCDPA), and Rhode Island (RIDTPPA) — residents of these states generally have rights to access, correct, delete, and port their personal data, and to opt out of the sale of personal data, targeted advertising, and certain profiling, subject to each state’s specific thresholds and exceptions.

Florida (FDBR) — Florida’s Digital Bill of Rights currently applies mainly to very large technology companies. It’s included here in anticipation of Prompt Care’s planned expansion into Florida, and should be revisited with counsel once that market becomes active.

7. Children’s Privacy

Our Sites are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. Security

We take reasonable precautions to protect the information you share with us, both online and offline. No method of transmission or storage is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date above reflects the most recent revision.

10. Contact Us

Questions about this policy, or requests to exercise your privacy rights, can be sent to info@promptcare.org.