MSK SUMMIT

PRIVACY POLICY

Effective Date: August 1, 2026

1. Introduction

The Center for Orthopedic and Research Excellence, Inc., dba HOPCo (“HOPCo,” “we,” “us,” or “our”) recognizes the importance of protecting the privacy of your personal information. This Privacy Policy describes how we collect, use, disclose, and protect information in connection with the MSK Summit website located at msksummit.org (the “Site”) and event registration for the Annual Musculoskeletal Business Summit Conference (the “Event”).

The MSK Summit is presented by MORE Foundation and targets musculoskeletal physician leaders, healthcare executives, senior administrators, physical therapy leaders, medical device professionals, and payors. This Privacy Policy applies solely to information collected through the Site and in connection with Event registration. It does not apply to information collected through other HOPCo websites, services, or platforms.

By using the Site or registering for the Event, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Site or register for the Event.

2. Our Key Privacy Commitments

We are committed to protecting your personal information. To support this commitment, we make the following pledges:

• We only collect personal information necessary to facilitate Event registration, communicate with you about the Event, and improve the Site.
• We do not collect, store, or process any protected health information (PHI) or health-related data through this Site.
• We do not sell your personal information.
• You can request access to, correction of, or deletion of your personal data at any time by contacting us at privacy@hopco.com.
• We apply industry-standard security measures, including encryption, access controls, and regular security assessments.

3. Health Information Disclaimer

IMPORTANT NOTICE REGARDING HEALTH INFORMATION:

THE MSK SUMMIT WEBSITE (MSKSUMMIT.ORG) IS SOLELY AN INFORMATIONAL AND EVENT REGISTRATION PLATFORM FOR THE ANNUAL MUSCULOSKELETAL BUSINESS SUMMIT CONFERENCE. PLEASE READ THE FOLLOWING CAREFULLY:

• THE SITE DOES NOT COLLECT, STORE, OR PROCESS ANY PROTECTED HEALTH INFORMATION (PHI) OR HEALTH-RELATED DATA. No information submitted through this Site constitutes or will be treated as protected health information under any applicable law.
• THE SITE DOES NOT PROVIDE MEDICAL ADVICE, DIAGNOSIS, OR TREATMENT. Nothing on this Site should be construed as medical advice or a recommendation for the treatment of any medical condition.
• PRESENTATIONS AND MATERIALS AT THE MSK SUMMIT ARE FOR EDUCATIONAL AND PROFESSIONAL DEVELOPMENT PURPOSES ONLY among qualified healthcare professionals and industry stakeholders and do not constitute medical advice.

4. Information We Collect

a. Information You Provide Directly

When you use the Site or register for the Event, we may collect the following categories of personal information:

• Contact information, such as your full name, email address, phone number, and mailing address;
• Professional information, such as your organization or employer, job title, and professional credentials or certifications;
• Event preferences, such as session selections, dietary restrictions, and accessibility needs;
• Payment information for Event registration fees (processed by third-party payment processors; we do not store full payment card details on our servers);
• Sponsorship inquiry information, including name, organization, phone number, and email address;
• Hotel reservation preferences (you may be redirected to a third-party booking platform to complete reservations); and
• Any other information you voluntarily provide through the Site, such as through a contact form or email correspondence.

b. Information Collected Automatically

We may automatically collect certain information when you visit the Site, including:

• Internet protocol (IP) address;
• Browser type and version;
• Operating system;
• Device identifiers;
• Pages visited, date and time of visit, and referring URLs;
• General location information based on IP address; and
• Other standard server log information.

c. Information from Third Parties

We may receive information about you from third-party sources, including:

• Third-party registration platforms (such as the MORE Foundation event registration system at apps.more-foundation.org);
• Social media platforms, if you interact with our Event-related content on those platforms; and
• Business partners or co-sponsors of the Event.

5. How We Use Your Information

We use the information we collect for the following purposes:

• Process and manage your Event registration;
• Communicate with you about the Event, including registration confirmations, schedule updates, logistics, and post-event surveys;
• Facilitate hotel reservations and travel coordination;
• Process payments for registration fees;
• Provide information about speakers, agenda, venue, and continuing medical education (CME) credits;
• Send post-event communications, including information about future MSK Summit events or related professional development opportunities;
• Improve the Site and Event experience;
• Analyze Site usage and trends in aggregated form;
• Prevent fraud and ensure Site security;
• Comply with applicable legal obligations; and
• For any other purposes disclosed to you at the time we collect your information or with your consent.

6. How We Share Your Information

We are committed to maintaining your trust. We may share your information in the following circumstances:

• Event organizers and co-presenters. We may share your registration information with MORE Foundation and other organizations involved in planning and executing the Event.
• Third-party service providers. We may share your information with vendors that assist us with payment processing, email communications, event management, website hosting, and data analytics. These service providers are contractually required to use your information only for the services they provide to us.
• Event sponsors. With your consent (such as if you opt in to receive sponsor communications, visit a sponsor exhibit, or participate in a sponsor-led session), we may share your contact and professional information with Event sponsors.
• Corporate affiliates. We may share your information with HOPCo’s corporate affiliates that are subject to this Privacy Policy.
• Business transfers. We may share your information in connection with a substantial corporate transaction, such as a merger, acquisition, consolidation, or asset sale.
• Legal purposes. We may disclose information to respond to subpoenas, court orders, legal process, law enforcement requests, legal claims, or government inquiries, and to protect and defend the rights, interests, safety, and security of HOPCo, our affiliates, Event attendees, or the public.
• With your consent or at your direction. We may share information for any other purposes disclosed to you at the time we collect the information or pursuant to your consent.
• De-identified and aggregated data. We may create and share de-identified or aggregated information (such as attendance statistics or industry demographic data) that cannot reasonably be used to identify you.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to collect information about your browsing activities on the Site. Our approach to tracking and consent: We do not load non-essential cookies, tags, pixels, or analytics technologies until you provide opt-in consent through our cookie banner. Only strictly necessary technologies required to operate the Site run before consent.

Strictly Necessary Cookies

These cookies are required for the proper operation of our Site and cannot be disabled. They enable core functionality such as page navigation and access to secure areas.

Functionality Cookies

These cookies record information about choices you have made and allow us to tailor the Site to you. They may remember settings you have applied, such as layout preferences, text size, and accessibility options.

Performance and Analytics Cookies

These cookies help us understand how the Site is accessed and used, so we can maintain and improve it. They allow us to count visitors and traffic sources, determine which pages are most popular, and measure errors. All information from these cookies is aggregated and not individually identifiable.

Marketing Cookies

We may use Google pixels, Microsoft Bing, and similar marketing cookies to support our Event promotion efforts. These cookies are loaded only with your opt-in consent and are never used in connection with health-related content.

Managing Cookies

You may opt out of non-essential cookies at any time by clicking the “Manage Cookies” link at the bottom of the Site or by adjusting your browser settings. Because each web browser is different, please consult the instructions provided by your browser (typically in the “help” section). Please note that disabling cookies may affect the functionality of the Site.

Do Not Track Signals

Our Site currently does not respond to “Do Not Track” (DNT) signals and operates as described in this Privacy Policy whether or not a DNT signal is received. To learn more about Do Not Track, please visit www.allaboutdnt.com.

8. Data Retention

We retain your personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including for Event administration, legal compliance, and future Event communications. Registration data is generally retained for up to three (3) years after the Event, unless you request earlier deletion or we are required by law to retain it for a longer period.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the information; the potential risk of harm from unauthorized use or disclosure; the purposes for which we process the information; and applicable legal requirements.

9. Security

The security of your personal information is important to us. We implement administrative, technical, and physical safeguards consistent with industry standards to protect your information. These measures include:

• Encryption of personal information in transit using TLS 1.2/1.3;
• Role-based access controls ensuring only authorized personnel may access your data;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Strict data-minimization practices, collecting only the information necessary for Event administration; and
• Contractual and technical controls ensuring that third-party service providers protect your information.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

10. Your Choices and Rights

Access, Correction, and Deletion

You may request that we provide access to, correct, or delete your personal information by contacting us at privacy@hopco.com. We will use commercially reasonable efforts to respond to your request within the time period required by applicable law.

Opt-Out of Communications

You may opt out of marketing-related emails by clicking the “Unsubscribe” link at the bottom of each such email. You may continue to receive service-related and transactional communications (such as Event registration confirmations and logistical updates). You may also contact us at privacy@hopco.com to update your communication preferences.

Cookie Management

You may manage your cookie preferences through the cookie banner on our Site or by adjusting your browser settings as described in Section 7 above.

State Privacy Law Rights

Depending on your state of residence, you may have additional rights under applicable state privacy laws (including the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and similar laws in other states). These rights may include the right to know what personal information we collect about you, the right to request deletion of your information, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising your privacy rights.

To exercise your rights, please contact us at privacy@hopco.com. Please include your name, address (including the state where you reside), and email address so we can respond in the time frame required under your state’s laws. We may request additional information to verify your identity before fulfilling your request.

Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights described in this Privacy Policy.

11. Third-Party Links and Content

The Site may contain links to third-party websites or resources, including but not limited to hotel booking platforms, travel resources, sponsor websites, the MORE Foundation event registration system, and social media platforms. We are not responsible for the privacy practices of these third parties, and the information practices of these third parties are not covered by this Privacy Policy. We encourage you to review the privacy policies of any third-party websites you visit.

12. Children

The Site is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected personal information from a child under 13 without verified parental consent, we will take reasonable steps to delete that information as soon as practicable. If you believe that we may have collected information from a child under 13, please contact us at privacy@hopco.com.

13. International Visitors

The Site is primarily intended for users located in the United States. If you access the Site from outside the United States, your information may be transferred to, stored, or processed in the United States, where our servers are located. The data protection laws of the United States may differ from those in your country of residence.

By using the Site, you understand and consent to the transfer of your information to the United States as described in this Privacy Policy.

Visitors from the European Economic Area (EEA)

If you are located in the European Economic Area, you may access the Site for informational purposes. Your personal data will be processed in the United States under U.S. law. If you are an EEA resident, you are entitled to rights under the EU General Data Protection Regulation (GDPR), including the right to request access to, rectification of, or erasure of your personal data; to restrict or object to processing; to request data portability; and to withdraw consent where consent is the basis for processing. You also have the right to lodge a complaint with your local supervisory authority.

For international transfers, we rely on the European Commission’s Standard Contractual Clauses (2021/914/EU), together with supplementary safeguards, to ensure adequate protection of your personal data.

You may contact us at privacy@hopco.com with any questions or to exercise your rights under GDPR.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” at the top of this Privacy Policy and post the updated version on the Site. We recommend that you review this Privacy Policy periodically to stay informed of our privacy practices. If we make material changes to this Privacy Policy, we will provide additional notice through the Site or by email as required by applicable law.

15. Contact Information

If you have any questions or concerns about this Privacy Policy, or if you wish to submit a data access, correction, deletion, or opt-out request, please contact us at:

Privacy Officer

The Center for Orthopedic and Research Excellence, Inc., dba HOPCo

18444 N 25th Ave, Suite 320

Phoenix, AZ 85023

Phone: 623.241.8618

Email: privacy@hopco.com

Website: https://msksummit.org