Privacy Policy

About this policy

Thank you for choosing Archie Health, LLC (“Archie Health,” “we,” “us,” or “our”). Archie Health owns and operates www.archiehealth.org and any Archie Health website, portal, or software that links to this Privacy Policy (collectively, the “Platform”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you access or use the Platform and the products, features, content, and services made available through it (collectively, the “Services”). Capitalized terms not defined in this Privacy Policy have the meanings given in our Terms of Use.

Archie Health is committed to protecting your personal information and your right to privacy. When you visit our website and use our services, you trust us with your personal information. We take your privacy very seriously. We created this Privacy Policy (the “Privacy Policy”) to inform you how Archie Health collects, uses and discloses information in order to provide you with the Service.

Read this policy alongside the Terms of Use.

By creating, registering, or logging into an account through the Services, or otherwise accessing or using the Services, you acknowledge the privacy practices described in the most recent version of this Privacy Policy.

If you are using the Service on behalf of an individual other than yourself, you represent that you are authorized by such individual to act on such individual’s behalf and that such individual acknowledges the practices and policies outlined in this Privacy Policy.

If you have any questions or concerns about this Privacy Policy or our practices with regards to your personal information, please contact us at support@archiehealth.org.

This Privacy Policy is written in the English language. We do not guarantee the accuracy of any translated versions of this Privacy Policy. To the extent that any translated versions of this Privacy Policy conflict with the English language version, the English language version of this Privacy Policy shall control.

This Privacy Policy applies to information collected through the Services, including the Platform and email, text, and other electronic communications sent through or in connection with the Services. This Privacy Policy does not apply to information that:

• We collect offline, unless this Privacy Policy expressly states otherwise;
• Is collected through websites or services that do not link to this Privacy Policy; or
• You provide directly to, or that is otherwise collected independently by, a third party.

Please read this Privacy Policy carefully to understand our policies regarding your information and how we treat it. By using our Services, this website or submitting information to us through or in connection with our Services, you acknowledge having been informed that we collect, use and disclose your personal information in accordance with this Privacy Policy. If there are any terms in this Privacy Policy that you do not agree with, please discontinue use of our website and our Services. This Privacy Policy may change from time to time. Your continued use of the Services/website after we revise this Privacy Policy means you accept those changes, so please check the Privacy Policy periodically for updates.

1. HIPAA and protected health information

For information about how we handle your medical information or protected health information, please refer to our Notice of Privacy Practices.

When you set up an account with Archie Health or use our Services, you are creating a direct customer relationship with Archie Health that enables you to access and/or utilize the various functions of the Platform and the Service as a user. As part of that relationship, you provide information to Archie Health, including but not limited to, your name, email address, shipping address, phone number and certain transactional information, that we do not consider to be “protected health information” or “medical information”.

However, when using certain components of the Services, you may provide health or medical information that is protected under applicable law. Archie Health is a technology platform and is not itself a healthcare provider. Independent healthcare providers accessible through the Services (“Providers”) may be covered entities under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations, as amended (“HIPAA”). Archie Health may act as a business associate of a Provider when performing services involving protected health information on that Provider’s behalf. HIPAA does not apply to every person, entity, transaction, or communication involving health information.

When Archie Health acts as a HIPAA business associate, it handles protected health information (“PHI”) in accordance with HIPAA, the applicable Business Associate Agreement, and the Provider’s Notice of Privacy Practices. Medical or health information may also receive protection under applicable state law (together with PHI, “Protected Information”). We use and disclose Protected Information only as permitted by applicable law. Information that does not constitute Protected Information is handled as described in this Privacy Policy. Protected Information does not include information that has been de-identified in accordance with applicable law.

Information you submit to Archie Health for purposes other than diagnosis or treatment may not be PHI under HIPAA. For example, account-registration information such as your name, username, email address, shipping address, and phone number is not necessarily PHI. We handle such information in accordance with this Privacy Policy and other applicable privacy laws.

For information about how we handle your medical information or protected health information, please refer to our Notice of Privacy Practices.

2. Information we collect

The personal information that we collect depends on the context of your interactions with us or on the website, and the products and website features you use. We collect personal information that you voluntarily provide to us when using our website, expressing an interest in obtaining information about us or our products and services, when participating in activities on the website or otherwise contacting us.

Personal Information Provided by You. We collect personal data you provide to us. Much of the personally identifiable information we receive comes directly from users who are interested in signing up to use our Services. For example:

• Name and contact information, such as your name, email address, phone number, and billing and physical addresses.
• Demographic data, such as your gender, date of birth and zip code.
• Third-party website, network, platform, server, or application information when you choose to connect or interact with those services.
• Payment information such as your credit card number, financial account information, transaction receipts, the last four digits of your payment method, and information received from payment service providers.
• Content and files, such as photographs, videos, documents and other files you upload to our Service. This includes email messages and other communications you send to us.
• Sensitive personal information.

This information includes information that you provide by filling in forms on the website and records and copies of your correspondence (including email addresses and phone numbers and messages sent via website), if you contact us.

We may also collect other types of information (non-identifiable information), such as gender, age, and personal interests, that we may associate with personally identifiable information.

Payment Data Provided by You. We collect data necessary to process your payment if you make purchases, such as your payment instrument number and the security code associated with your payment instrument. We may also receive transaction information from payment service providers, including your order number, transaction status, and the last four digits of your payment method.

Government ID. We may collect a government-issued photo ID, such as a driver’s license or passport, to verify your identity.

Photographic or Video Images. We may collect photographs or video images submitted for identification or non-diagnosis or treatment purposes, including photographs of your driver’s license or passport.

Account Access Information. We collect information such as a username or account number in combination with a password, security or access code, or other credential that allows access to an account.

Sensitive Demographic Data. We may collect information about racial or ethnic origin.

Biometric Information. We, or our service providers, may use biometric information to verify your identity prior to your use of our Service, subject to applicable biometric privacy laws and with your explicit consent where required by law.

Health Data. We collect and analyze information concerning your health.

Automatic Information Collection and Tracking. We automatically collect certain information when you visit, use, or navigate the website. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser, and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our website and other technical information. This information is primarily needed to maintain the security and operation of our website, and for our internal analytics and reporting purposes. By way of example, we automatically collect the following:

• Identifiers and device information. When you visit our Websites, our web servers automatically log your Internet Protocol (IP) address and information about your device, including device identifiers (such as a MAC address); device type; and your device’s operating system, browser, and other software including type, version, language settings, and configuration. As further described in the “Cookies, Mobile IDs, and Similar Technologies” section below, our websites and online services store and retrieve cookie identifiers, mobile IDs, and other data.
• Geolocation data. Depending on your device and browser settings, we collect geolocation data when you use our online services. This information may include precise geolocation data, meaning data derived from a device and that is used to locate you within a circle with a radius of 1,850 feet or less, which is considered a type of sensitive personal information.
• Usage data. We automatically log your activity on our website, including the URL of the website from which you came to our sites, pages you viewed, how long you spent on a page, access times, and other details about your use of and actions on our website. In some instances, such usage data may be sensitive personal information if it relates to browsing activity on health-specific sites.
• Information we create or generate. We infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics (“inferences”). For example, we infer your general geographic location (such as city, state, and country) based on your IP address.

Information We Obtain from Third-Party Sources. We also obtain the types of information described above from third parties. These third-party sources include, for example:

• Service providers. Third parties that collect or provide data in connection with work they do on our behalf, for example companies that determine your device’s location based on its IP address.
• Publicly available sources. Public sources of information such as open government databases.

When you are asked to provide personal data, you may decline. And you may use web browser or operating system controls to prevent certain types of automatic data collection. But if you choose not to provide or allow information that is necessary for certain services or features, those services or features may not be available or fully functional.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Linked Sites. The Services may contain links to third-party owned or operated websites, including, without limitation, social media websites (each a "Linked Site"), as a convenient method of accessing information that may be useful or of interest to you. This Privacy Policy and the practices that we follow under this Privacy Policy do not apply to Linked Sites. We are not responsible for the content, accuracy, or opinions expressed on any Linked Site or for the privacy practices or security standards used by third parties on such Linked Sites. These Linked Sites have separate privacy and data collection practices, and we have no responsibility or liability relating to them.

Please note that once you have clicked on a link to a Linked Site and have left our Site, our Privacy Policy no longer applies, and you must read the privacy policy of the Linked Site to see how your personal information will be handled on the Linked Site.

3. Cookies, mobile IDs, and similar technologies

We may use cookies, web beacons, mobile analytics and advertising IDs, and similar technologies to operate our websites and online services and to help collect data, including usage data, identifiers and device information.

What cookies and similar tools are

Cookies are small text files placed by a website and stored by your browser on your device. A cookie can later be read when your browser connects to a web server in the same domain that placed the cookie. The text in a cookie contains a string of numbers and letters that may uniquely identify your device and can contain other information as well. This allows the web server to recognize your browser over time, each time it connects to that web server.

Web beacons are electronic images (also called single-pixel or clear GIFs) that are contained within a website or email. When your browser opens a webpage or email that contains a web beacon, it automatically connects to the web server that hosts the image (typically operated by a third party). This allows that web server to log information about your device and to set and read its own cookies. In the same way, third-party content on our websites (such as embedded videos, plug-ins, or ads) results in your browser connecting to the third-party web server that hosts that content. We also include web beacons in our email messages or newsletters to tell us if you open and act on them.

Mobile analytics and advertising IDs are generated by mobile operating systems and can be accessed and used by apps in much the same way that websites access and use cookies. Archie Health does not offer a mobile app; our advertising service providers may access these mobile IDs when you view or interact with our ads in other apps, subject to applicable law and your device settings.

How we use cookies and similar technologies

We and our analytics and advertising service providers use these technologies on our website and online services to collect information such as the pages you visit, links you select, identifiers, device information, and general usage information. We use this information to store preferences, enable sign-in, analyze performance, prevent fraud, and, where permitted by law and consistent with your privacy choices, deliver or measure advertising. We do not permit these technologies to disclose PHI or other health information for targeted advertising. For more information, please see Section 5 below.

What controls are available

There are a range of cookie and related controls available through browsers, mobile operating systems, and elsewhere. See Section 10 below for details.

4. How we use information

We use personal information collected via our website for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

We use the information we collect or receive for the following purposes:

For each purpose below, we list the categories of personal data we use for it.

Product and Service Delivery. To provide and deliver our Service, including:

• To facilitate account creation and login;

• Troubleshooting;

• Facilitating your movement through the Service;

• Confirming your location;

• Improving and personalizing those services;

• To deliver Services to user; and

• To manage user accounts (e.g., keeping it in working order).

Contact information, demographic data, payment information, content and files, biometric information, identifiers and device information, geolocation data, usage data, inferences.

Sensitive information: government ID, account access information, sensitive demographic data, contents of communications, biometric information for identification, health data for collecting and analyzing.

Business Operations. To operate our business, such as:

• Billing and processing payments;

• Administering your account;

• Improving our internal operations;

• Securing our systems; • Detecting fraudulent or illegal activity;

• Verifying your identity;

• Meeting our legal obligations;

• To enforce our terms, conditions, and policies; and

• Protecting/enforcing Archie Health’s rights and properties.

Contact information, demographic data, payment information, content and files, biometric information, identifiers and device information, geolocation data, usage data, inferences.

Sensitive information: government ID, account access information, precise geolocation data, sensitive demographic data, contents of communications, biometric information for identification, health data for collecting and analyzing.

Product improvement, development, and research. To develop, test, or improve the Service and content, features and/or products or services offered via the Service.

Additionally, to Identify or create new products or services. This may include, without limitation, analyzing information using artificial intelligence. We may also “aggregate data”. We may use your personal information to send you the product, service, and new feature information and/or information about changes to our terms, conditions, and policies. Lastly, to analyze traffic and user behavior or activity to and through Service

Contact information, demographic data, payment information, content and files, biometric information, identifiers and device information, geolocation data, usage data, inferences.

Sensitive information: government ID, account access information, precise geolocation data, sensitive demographic data, contents of communications, biometric information for identification, health data for collecting and analyzing.

Personalization. To understand you and your preferences to enhance your experience and enjoyment using our services.

Contact information, demographic data, payment information, content and files, biometric information, identifiers and device information, geolocation data, usage data, inferences.

Sensitive information: government ID, account access information, precise geolocation data, sensitive demographic data, contents of communications, biometric information for identification, health data for collecting and analyzing

Customer Support. To provide customer support, fulfill your requests, and respond to your questions. Additionally, to place and track orders for products or services on your behalf. We may also use your information to request feedback and to contact you about your use of our website or services.

Contact information, demographic data, payment information, content and files, biometric information, identifiers and device information, geolocation data, usage data, inferences.

Sensitive information: government ID, account access information, precise geolocation data, sensitive demographic data, contents of communications, biometric information for identification, health data for collecting and analyzing

Communications. To send you information about Archie Health, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages. Additionally, to communicate with you by letter, email, text, telephone, or other forms of communication to facilitate our provision of the Services.

Contact information, demographic data, payment information, content and files, biometric information, identifiers and device information, geolocation data, usage data, inferences.

Sensitive information: government ID, account access information, precise geolocation data, sensitive demographic data, contents of communications, biometric information for identification, health data for collecting and analyzing.

Marketing. To communicate with you about Archie Health services and updates, subject to your communication preferences and applicable law.

You can opt-out of our marketing emails at any time (see Section 9, “Your privacy rights,” below).

Contact information, demographic data, payment information, content and files, biometric information, identifiers and device information geolocation data, usage data, inferences.

Sensitive information: none. We do not use health data for marketing or advertising.

Advertising. To promote and market Archie Health, the Service, and the products and/or services offered via the Service.

Contact information, demographic data, identifiers and device information, geolocation data, usage data, inferences

Sensitive information: none. We do not use health data for marketing or advertising.

Additionally, we may use your information for legitimate business purposes described in this Privacy Policy, such as data analysis, identifying usage trends, preventing or detecting fraud or abuse, measuring the effectiveness of our communications, and evaluating and improving our Platform, Services, and user experience. We may use and store information in aggregated or de-identified form so that it is not reasonably linked to an individual, and we may use or disclose such information for lawful business purposes. We use identifiable personal information only as described in this Privacy Policy, with your consent, or as otherwise permitted or required by law.

5. When information may be shared

We disclose personal data with your consent or as we determine necessary to complete your transactions or provide the services you have requested or authorized. Subject to the limitations described in the Protected Health Information section above, we may disclose your information to third parties in connection with the provision of our Service or as otherwise permitted or required by law. For example, without limitation, we may disclose your information in the following circumstances:

• Consent: We may process your information if you have given us specific consent to use your personal information for a specific purpose.
• Legitimate Interests: We may process your information when it is reasonably necessary to achieve our legitimate business interests.
• Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract.
• Financial Services and Payment Processing. When you provide payment data, for example to make a purchase, we will disclose payment and transactional data to banks and other entities as necessary for payment processing, fraud prevention, credit risk reduction, analytics, or other related financial services.
• Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
• Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of Archie Health or others and illegal activities, or as evidence in litigation in which we are involved.

More specifically, we may need to process your data or share your personal information in the following situations:

• Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include payment processing, data analysis, email delivery, hosting services, customer service, and marketing efforts. We may allow selected third parties to use tracking technology on the website, which will enable them to collect data about how you interact with the website over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content, and better understand online activity. Unless described in this Privacy Policy, we do not share, sell, rent, or trade any of your information with third parties for their promotional purposes.
• Corporate Transactions. We may share or transfer your information in connection with, or during negotiations of, any merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our users is among the assets transferred.
• Advertising and Analytics Service Providers. We may use service providers to measure website performance, understand general engagement, and deliver or measure advertising, subject to applicable law and your privacy choices. We do not disclose PHI or other health information—including symptoms, medical conditions, treatment information, or activity that directly reveals a health concern—to third parties for targeted advertising or their independent marketing purposes. We also do not use tracking technologies on authenticated areas of the Services in a manner that discloses PHI to advertising platforms. Where required by law, we obtain consent before using or disclosing personal information for targeted advertising.
• Other Users. When you share personal information (for example, by posting content to public areas of the website, if applicable) or otherwise interact with public areas of the website, such personal information may be viewed by all users and may be publicly distributed outside the website in perpetuity.
• Security, Safety and Protecting Rights. We will disclose personal data if we believe it is necessary to:
  • Protect our customers and others, for example to prevent spam or attempts to commit fraud, or to help prevent the loss of life or serious injury to anyone;
  • Operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks; or
  • Protect the rights or property of ourselves or others, including enforcing our agreements, terms and policies.
• Independent Healthcare Providers. The Services may facilitate access to independent healthcare Providers that evaluate requests for care and, when clinically appropriate, provide consultations, treatment, or prescriptions. These Providers are not owned or controlled by Archie Health and are independently responsible for their professional services and clinical decisions. When you request provider services, we may disclose information reasonably necessary for the Provider to evaluate your request, contact you, coordinate care, or provide treatment.
  • Information We May Share. To facilitate your requested healthcare services, we may share with the applicable Provider:
    • Identifying personal information, such as your name, contact details, and demographic data;
    • Service-related details, such as your stated symptoms, health concerns, or service preferences;
    • Limited health-related information, as reasonably necessary for the Provider to determine eligibility or provide telehealth or related services; and
    • Payment information, such as your order information and payment status.
  • Protected Health Information (PHI). Information we collect or transmit to a Provider may qualify as PHI under HIPAA. When we act as a business associate to a HIPAA-covered Provider, we handle PHI in accordance with HIPAA and the applicable Business Associate Agreement. Each Provider is responsible for handling PHI in accordance with its own Notice of Privacy Practices and applicable law. We do not sell, license, or use PHI for marketing or advertising.
  • Non-HIPAA Health and Personal Information. When information we collect does not qualify as PHI (for example, general account or platform information), we handle it in accordance with this Privacy Policy and applicable consumer-protection and privacy laws, including the FTC Health Breach Notification Rule where applicable. We may use non-HIPAA information to operate, maintain, secure, and improve the Platform, perform internal analytics, or understand general user engagement. We do not disclose non-HIPAA health data for targeted advertising or third parties’ independent marketing purposes. If a breach of covered non-HIPAA health data occurs, we will provide notices as required by applicable law.
  • Your Consent to Sharing. By requesting healthcare services through the Platform, you direct us to disclose the information reasonably necessary to facilitate those requested services, subject to applicable law. You may withdraw a consent where the law permits, but doing so may limit our ability to facilitate the requested services.
  • Independent Provider Practices. We do not control or direct a Provider’s professional judgment or clinical decisions. Information you provide directly to a Provider is governed by that Provider’s Notice of Privacy Practices and other applicable policies. We encourage you to review those documents before receiving healthcare services.

Analytics and Advertising Service Providers. Analytics and advertising service providers may collect identifiers, device information, general location, and usage information through cookies and similar technologies, as described in the “Cookies” section of this Privacy Policy. We limit these providers’ collection and use of information through contractual, technical, and organizational controls where required by law. We do not permit these providers to use PHI or other health information for targeted advertising or their independent marketing purposes.

Some disclosures involving cookies or similar technologies may be considered a “sale,” “sharing,” or targeted advertising under California and other U.S. state privacy laws. Please see the “California Residents” subsection under Section 9 and the controls described below.

Third-party services may maintain their own privacy policies, which govern information you provide directly to them.

6. How long we keep information

Archie Health may retain your personal information for as long as it believes is necessary for the purposes set out in this Privacy Policy as long as necessary to comply with its legal obligations (e.g. tax, accounting, or other legal requirements); and/or as long as needed to provide you with the Services. Archie Health may dispose of or delete any such information at any time except as set forth in any other agreement or document executed by Archie Health or as required by law.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Other third parties with whom we share your information have their own policies and procedures with respect to how long they may retain your information and how and when they dispose of or delete your information.

7. How we protect information

We have implemented appropriate physical, technical and organizational security measures designed to protect the security of any personal information we process. We use reasonable care to protect your personal information provided by you to our website. We will periodically review and modify, where appropriate, our information security policies and procedures.

While we have in place security policies and procedures that seek to mitigate the risk of unauthorized access of your information, we cannot guarantee that the Internet is a secure medium. You should never divulge your account username and/or password to anyone else. Although we will do our best to protect your personal information, the transmission of personal information to and from our website is at your own risk. Your information may be lost during transmission or may be accessed by unauthorized parties. We do not accept any liability for direct or indirect losses with regard to the security of your personal information or data during its transfer via the internet. Please use other means of communication if you think this is necessary or prudent for security reasons.

Lastly, while we strive to use reasonable physical, technical and administrative measures to protect information under our control, you must keep your account password secure and your account confidential, and you are responsible for any and all use of your account. If you have reason to believe that the security of your Account has been compromised, please notify us immediately in accordance with the “How to contact us” section below.

8. Information from children

Archie Health serves adults 18 and older. The Services are only for individuals 18 or older. We do not knowingly provide Services to, or collect personal information from, anyone under 18. If we learn that we have collected personal information from someone under 18, we will promptly delete it from our systems, except where we are required by law to keep it. If you believe we have collected information from someone under 18, please contact us at support@archiehealth.org.

9. Your privacy rights

Account Information: If you would at any time like to review or change the information in your account or terminate your account, you can contact us at support@archiehealth.org. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use, and/or comply with legal requirements.

Opt Out of Email Marketing: You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list. Please note, however, that we will still need to send you service-related emails that are necessary for the administration and use of your account. To otherwise opt-out, you can contact us at support@archiehealth.org.

With regard to personal information that you have provided under this Privacy Policy, you may exercise your opt-out choices available to you (if any and where applicable) by contacting us directly.

You may use the following methods to opt out of sale, sharing, or targeted advertising where applicable:

• A legally recognized opt-out preference signal, such as Global Privacy Control; or
• An email to support@archiehealth.org.

You can use the other cookie or mobile ID controls described below.

These choices are specific to the device or browser you are using. If you access our services from other devices or browsers, you will need to take these actions from those systems to set applicable controls for those systems.

Some privacy laws define “sale” broadly to include some of the disclosures described in Section 5 above. To opt-out from such data “sales” you can email support@archiehealth.org.

We will process requests to opt out of sale or sharing as soon as feasibly possible and no later than fifteen (15) business days after receipt, or within any shorter period required by applicable law.

California Residents. If you are a California resident and the processing of personal information about you is subject to the California Consumer Privacy Act (CCPA), you have certain rights with respect to that information, including:

• Notice at Collection. At or before the time of collection, you have a right to receive notice of our practices, including the categories of personal information and sensitive personal information to be collected, the purposes for which such information is collected or used, whether such information is sold or shared, and how long such information is retained. You can find those details in this Privacy Policy, in Sections 2 through 6 above.
• Right to Know. You have a right to request that we disclose to you the personal information we have collected about you. You also have a right to request additional information about our collection, use, disclosure, or sale of such personal information. Note that we have provided much of this information in this Privacy Policy. You may make such a “request to know” by emailing us at support@archiehealth.org.
• Rights to Request Correction or Deletion. You also have rights to request that we correct inaccurate personal information and that we delete personal information under certain circumstances, subject to a number of exceptions. To make a request to correct or delete, email us at support@archiehealth.org.
• Right to Opt-Out/“Do Not Sell or Share My Personal Information.” You have a right to opt-out from future “sales” or “sharing” of personal information as those terms are defined by the CCPA. The CCPA defines “sell,” “share,” and “personal information” broadly, and some disclosures involving advertising and analytics technologies may fall within those definitions. You may opt out by sending an email to support@archiehealth.org, or enabling a legally recognized opt-out preference signal such as Global Privacy Control. We will honor applicable opt-out preference signals as required by law. An opt-out does not prevent disclosures to service providers or contractors that process information on our behalf under legally compliant restrictions. We do not knowingly collect, sell, or share the personal information of anyone under 18 years of age.
• Right to Limit Use and Disclosure of Sensitive Personal Information. You have a right to limit our use of sensitive personal information for any purposes other than to provide the services or goods you request or as otherwise permitted by law.

To opt-out from such additional purposes, please contact support@archiehealth.org. You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.

Further, to provide, correct, or delete specific pieces of personal information we will need to verify your identity to the degree of certainty required by law. We will verify your request by asking you to send it from the email address associated with your account or requiring you to provide information necessary to verify your account.

Finally, you have a right to not be discriminated against for exercising these rights set out in the CCPA. Additionally, California Civil Code Section 1798.83, also known as the “Shine the Light” law, may permit California residents to request certain information about disclosures of personal information to third parties for their direct-marketing purposes. To make such a request, contact Archie Health, LLC, Attn.: California Privacy Rights, 8 The Green, Suite B, Dover, DE 19901, or email support@archiehealth.org.

Nevada Residents. Except for disclosures through advertising cookies that some laws treat as a “sale,” Archie Health does not sell, rent, or lease your personally identifiable information to third parties. However, if you are a resident of Nevada and would like to submit a request not to sell your personally identifiable information, you may do so by emailing us at support@archiehealth.org.

International Residents. The Service is only for people located in the U.S. Our Service is hosted in the United States. We may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Service. Your use of the Service is governed by U.S. law and regulation, this Policy and our Terms of Use.

10. Browser and platform controls

Cookie Controls. Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our website. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated.

Global Privacy Control. Some browsers and browser extensions support Global Privacy Control (“GPC”) or similar controls that communicate a request to opt out of certain processing, including data sales, sharing, or targeted advertising. We honor legally recognized opt-out preference signals as required by applicable law.

Do Not Track. Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

Mobile Advertising ID Controls. iOS and Android operating systems provide options to limit tracking and/or reset the advertising IDs.

Email Web Beacons. Most email clients have settings that allow you to prevent the automatic downloading of images, including web beacons, which prevents an automatic connection to the web servers that host those images.

Except for the automated controls described above, if you send us a request to exercise your rights or these choices, to the extent permitted by applicable law, we may decline requests in certain cases. For example, we may decline requests where granting the request would be prohibited by law, could adversely affect the privacy or other rights of another person, would reveal a trade secret or other confidential information, or would interfere with a legal or business obligation that requires retention or use of the data. Further, we may decline a request where we are unable to authenticate you as the person to whom the data relates, whether the request is unreasonable or excessive, or where otherwise permitted by applicable law.

Finally, please note that this Privacy Policy applies only to your “personal information,” which is separate from “medical information” or “protected health information” as defined under HIPAA and other applicable healthcare privacy laws. For information about how we handle your medical information or protected health information, please refer to our Notice of Privacy Practices.

11. Updates to this policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last Updated” date and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

12. How to contact us

If you have questions or comments about this Privacy Policy, you may contact us at:

Archie Health, LLC
Registered office: 8 The Green, Suite B, Dover, DE 19901
Email: support@archiehealth.org
Phone: (762) 862-2612

Privacy of SMS messages

Archie Health respects your privacy. No mobile information will be sold or shared with third parties for marketing or promotional purposes. Text-messaging originator opt-in data and consent will not be shared with third parties for marketing or promotional purposes. We will use your mobile number to deliver messages you requested, respond to you, support the Services, and comply with applicable law. We may disclose information as required by law, regulation, or governmental request, or to protect our rights or property. When providing information, you agree that it is accurate and not misleading. If we believe information is inaccurate or incomplete, we may restrict access to the Services.

Selecting “I Agree,” checking an acknowledgment box, or otherwise confirming through the Platform means you have received and reviewed this Privacy Policy. That acknowledgment does not replace any separate consent needed for telehealth, medical treatment, or particular uses of information.

You may print, save as a PDF, copy, or screenshot this Privacy Policy for your records.