Privacy Policy

1. Introduction

This Privacy Policy describes how Asher Health, Inc. ("Asher Health," "we," "our," or "us") collects, uses, discloses, and safeguards your information when you visit our website JoinAsher.com ("Site") and utilize our services ("Services"). This includes web-based software, patient portals, mobile applications, telemedicine tools, and any other service we provide.

By accessing or using our Site and Services, you acknowledge that you have read, understood, and agree to this Privacy Policy.

2. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a new effective date. We encourage users to review this policy regularly to stay informed.

3. Confidentiality of Health Information (HIPAA Compliance)

Asher Health handles personal health information ("PHI") in accordance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and relevant state laws. We operate as a Business Associate to licensed medical providers and maintain appropriate agreements to ensure compliance. Your PHI is protected by physical, electronic, and administrative safeguards.

4. Information We Collect

4.1 Information You Provide

We collect personal information when you:

• Register for an account
• Contact us via email or form
• Submit telehealth intake forms
• Provide billing or payment details

This includes:

• Name
• Contact details (email, phone, address)
• Date of birth
• Medical history and treatment preferences
• Insurance and payment information

4.2 Automatically Collected Data

When you use the Site, we may collect:

• Device type and browser
• IP address
• Location data (with consent)
• Clickstream and usage data
• Session cookies and analytics data

We use cookies and similar technologies to improve user experience and collect statistical data. You may disable cookies in your browser settings, but some features may not function properly.

4.3 Data from Third Parties

We may collect information from third-party partners, healthcare providers, or analytics tools to enhance our Services.

4.4 Children's Privacy

Our Services are not intended for children under 18 without parental consent. If we become aware that a child has submitted personal information, we will delete it immediately.

5. How We Use Your Information

We use your information to:

• Provide medical coordination services
• Support licensed healthcare providers in offering treatment
• Process payments and fulfill pharmacy services
• Enhance the user experience
• Respond to customer service inquiries
• Monitor and improve security and performance
• Send appointment reminders or service updates (with opt-in)
• Comply with legal obligations

6. Sharing of Information

We may share your information with:

• Licensed providers for care delivery
• The pharmacy partner for prescription fulfillment
• Business Associates performing services on our behalf
• Third-party technology vendors (with security safeguards)
• Law enforcement or regulators as required by law

We do not sell your personal information. We do not share your personal information with third parties for their marketing purposes.

6.1 SMS / Mobile Messaging Disclosures

When you opt in to receive SMS text messages from ASHER Med LLC, doing business as Asher Health, a wholly owned subsidiary of Asher Health, Inc. (program: ASHER Partner Support), the following terms apply. This program covers texts to business owners who apply to partner with ASHER or are ASHER partners; it does not include messages to patients.

• No sharing of mobile data: Mobile phone numbers and SMS opt-in consent data are never shared or sold to third parties or affiliates for marketing or promotional purposes. This information is used solely to deliver the messages you have opted in to receive and to comply with applicable law.
• Separate consent for marketing: SMS consent for customer care (applications, onboarding, appointments, account, and support) is collected separately from SMS consent for marketing or promotional messages. Marketing SMS consent is fully optional and is never bundled with customer care consent or with acceptance of these policies.
• Message frequency: Message frequency varies based on your application, onboarding, appointments, support interactions, and account activity.
• Message and data rates may apply. Standard carrier message and data rates may apply to messages sent or received.
• Opt out: You can opt out at any time by replying STOP to any text message. For assistance, reply HELP or contact us at support@JoinAsher.com.
• Consent is not a condition of service: You are not required to consent to SMS messaging in order to receive any service from Asher Health.

7. Your Rights

You have the right to:

• Access and request copies of your data
• Request corrections to inaccurate information
• Opt out of marketing communications
• Request restrictions on how your PHI is used
• File a complaint regarding our privacy practices

To exercise your rights, contact us at support@JoinAsher.com.

8. Security Measures

We implement appropriate technical, physical, and administrative safeguards to protect your information. However, no system is 100% secure. You use the Site at your own risk.

8.1 Data Retention

We retain user data for as long as the account is active or as needed to provide our services. Specifically:

• Account data is retained until the user requests deletion or the account is closed.
• Health/lab order data is retained for a minimum of 7 years in compliance with HIPAA regulations.
• Usage & analytics data is retained for up to 12 months.

After the applicable retention period, data is securely deleted or anonymized.

9. State-Specific Disclosures

Certain states grant additional rights to residents, including:

California

Under the California Consumer Privacy Act (CCPA), California residents have rights to:

• Know what personal data we collect and how it's used
• Request deletion of personal information
• Opt-out of the sale of personal information (we do not sell data)

Texas

As a Texas-based entity, we comply with the Texas Medical Records Privacy Act and limit disclosures of PHI except where legally permitted or required.

Other States

We comply with applicable privacy laws in all states where services are offered, including HIPAA-equivalent rules in:

• New York
• Florida
• Illinois
• Washington
• Colorado

If state laws afford you greater rights than federal laws, we will comply with those enhanced protections.

10. Third-Party Links and Integrations

Our Site may link to third-party websites (e.g., labs, the pharmacy partner, analytics). We are not responsible for their privacy practices. Review their privacy policies before sharing information.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices:

Copyright © 2025 Asher Health, Inc. All rights reserved.