International Data Protection Addendum

Applies To: Residents of the European Union, United Kingdom, Canada, and any jurisdiction outside the United States where data protection laws apply.

1. Purpose

This Addendum supplements the Premier Neuro Health Privacy Policy to ensure compliance with international data protection laws, including the EU General Data Protection Regulation (GDPR), UK GDPR, and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

In the event of conflict between this Addendum and the Privacy Policy, this Addendum governs for affected individuals.

2. Legal Basis for Processing Personal Data

For users located outside the United States, Premier Neuro Health processes personal and health data under the following lawful bases:

• Consent: You have given explicit consent for the processing of your health or personal data for the purposes described in our Privacy Policy.
• Contract: Processing is necessary for the performance of a telehealth or consultation contract with you.
  Legal Obligation: Processing is required to comply with applicable law.
• Legitimate Interests: Processing for internal operations, service improvement, and cybersecurity.

You may withdraw consent at any time by contacting Premier Neuro Health.

3. International Data Transfers

Your information, including health data, may be transferred to and processed in the United States, where privacy laws may not provide the same level of protection as in your jurisdiction.
We rely on the following safeguards:

• Standard Contractual Clauses (SCCs) adopted by the European Commission.
• Data Processing Addendum (DPA) with Athenahealth, our electronic health record provider.
• Administrative, technical, and physical safeguards consistent with HIPAA and GDPR security standards.

4. Data Subject Rights

If you are located in the EU, UK, or Canada, you have the following rights regarding your personal data:

• Access: Obtain confirmation of whether we hold your data.
• Rectification: Correct inaccurate or incomplete information.
• Erasure (“Right to be Forgotten”): Request deletion of personal data, subject to record-retention laws.
• Restriction of Processing: Limit data use under specific conditions.
• Data Portability: Receive your personal data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdraw Consent: Withdraw consent for future processing without affecting prior lawful use.

Requests may be submitted to:
Email: info@premierneurohealth.com 
We will respond to valid requests within 30 calendar days, or longer where permitted by law.

5. Retention of Personal Data

We retain personal and health data for at least six years from the last date of service or as required by local law.

If legal or regulatory obligations require longer retention, we will retain the data accordingly.

6. Contact

For inquiries related to GDPR or international data protection, contact:

Premier Neuro Health
info@premierneurohealth.com 
+1 908-935-8226
You may also contact your regional supervisory authority (for EU/UK users).

7. Complaints

If you believe your data rights have been violated, you may lodge a complaint with your local Data Protection Authority (DPA) or with us directly.
We will cooperate fully with any regulatory investigation.

8. Updates

This Addendum may be amended periodically to reflect evolving international data protection laws.

Revisions will be posted on our website with updated effective dates.