Privacy Policy

Effective Date: August 2, 2021
Last Updated: January16, 2024

AndHealth LLC (“AndHealth”, “we” or “us”) respects and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and disclose information about you when you access and use our website located at www.andhealth.com (the “Site”), the AndHealth mobile application (the “App”), or our membership services that include administrative and technology services, coaching services, supplement information, and technology or personal services (“Membership Services”), including the platform upon which telehealth services are provided by our affiliated medical practices, including without limitation AndHealth Providers, P.C. (“AndHealth Providers”) via the virtual clinic (the “Virtual Clinic”) (collectively, the “Services”). Generally, you can browse through our Site without giving us any information about yourself. When we do need to collect your PII (defined below) to provide you with the Services, or when you choose to provide us with your PII, this Privacy Policy describes how we collect, use, and disclose your PII.

Your use of our Services is governed by this Privacy Policy and the Terms of Use. This Privacy Policy is incorporated into our Terms of Use and unless we define a term in this Privacy Policy, all capitalized terms used in this Privacy Policy have the same meanings as in our Terms of Use. Therefore, please make sure that you have read, understand, and agree to be legally bound by and comply with our Terms of Use prior to your use of our Services.

This Privacy Policy does not apply to the storage, use, and collection of protected health information (“PHI”), which is governed by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”) and therefore is covered by our Notice of Privacy Practices (the “NPP”). Any conflict between this Privacy Policy and the NPP with respect to such PHI shall be resolved in favor of the NPP.

Changes to this Privacy Policy

We may modify this Privacy Policy from time to time. If we make any substantial changes in the way we use your PII, we will notify you of those changes by posting on the Site, App, or by sending you an email or other notification, and we will update the “Last Updated” date above to indicate when those changes will become (or became) effective. By continuing to access or use the Services after changes to this Privacy Policy become effective, you accept the revised Privacy Policy. If any changes are unacceptable to you, you may stop using our Services at any time.

How We Collect Information

Personally Identifiable Information (“PII”) means any information that may be used to identify an individual, including, but not limited to, a first and last name, email address, a home, postal or other physical address, and phone number. The categories of PII that we may collect about you are:

Information You Provide to Us

We collect your PII when you create an AndHealth account via the Site or the App, interact with us on the AndHealth platform, and when you submit your PII to us through the Services for any other reason. If you create an account through the Site or the App or register to use our Membership Services, we may also collect your credit or debit card information, title, birth date, gender, occupation, industry, personal interests, and other information.

Cookies and Tracking Technology

A “cookie” is a small data file that certain websites write to your hard drive when you visit them. A cookie file can contain information such as a user ID that the website uses to track the pages you’ve visited, but the only PII a cookie can contain is information you supply yourself. A cookie can’t read data off your hard disk or read cookie files created by other websites. Some parts of the Services use cookies to understand user traffic patterns and to tell us how and when you interact with our Services. We do this in order to determine the usefulness of our Services to our users, to see how effective our navigational structure is in helping users reach that information, and to customize and improve our Services. Unlike persistent cookies, session cookies are deleted when you log off from the Services and close your browser.

If you prefer not to receive cookies while using our Services, you can set your browser to warn you before accepting cookies and refuse the cookie when your browser alerts you to its presence. You can also refuse all cookies by turning them off in your browser. You do not need to have cookies turned on to use/navigate through many parts of our Services, although if you do so, you may not be able to access all portions or features of our Services. Some third-party services providers that we engage (including third-party advertisers) may also place their own cookies on your hard drive. Note that this Privacy Policy covers only our use of cookies and does not include use of cookies by such third parties.

Web beacons (also known as Web bugs, pixel tags or clear GIFs) are tiny graphics with a unique identifier that may be included in our Services for several purposes, including to deliver or communicate with cookies, to track and measure the performance of our Services, to monitor how many visitors view our Services, and to monitor the effectiveness of our advertising. Unlike cookies, which are stored on the user’s hard drive, web beacons are typically embedded invisibly on web pages (or in an e-mail).

Information Related to Your Use of the Services

If you have not created an account, when you use our Services, you use our Services anonymously. We do automatically log your IP address (the Internet address of your computer) and other information such as your browser type, operating system, the web page that you were visiting before accessing our Services, the pages or features of our Services to which you browsed to give us an idea of which part of our Services you visit and how long you spend there (we refer to this information as “Log Data”). But we do not link your IP address to any PII unless you have logged in via your account. We use Log Data to administer the Services and we analyze (and may engage third parties to analyze) Log Data to improve, customize and enhance the Services by expanding their features and functionality and tailoring them to our users’ needs and preferences.

Information Sent by Your Mobile Device

We collect certain information that your mobile device sends when you use our Services, like a device identifier, user settings and the operating system of your device, as well as information about your use of our Services. You understand that, by logging onto the Site or App on your mobile device, some information pertaining to your medical treatment may be stored to your mobile device. We are not responsible for any unauthorized access by any third party to such information on your mobile device.

Location Information

When you use our Site or App from your mobile device, we may collect and store information about your location by converting your IP address into a rough geolocation or by accessing your mobile device’s GPS coordinates or course location if you enable location services on your device. We may use location information to improve and personalize our mobile Site or App for you. If you do not want us to collect location information, you may disable that feature on your mobile device.

Information from Our Partners

We may receive your PII from our business clients and partners, such as your employer, in connection with one or more business purposes, including to make our Services available to you.

How We Use Your Information

We may use your PII for various purposes related to our operations and your use of the Services. For example, we may use your information to:

Provide, maintain, and improve our Services.
Carry out various treatment, payment, or operational needs.
Complete any registration or other transactions or actions you request, such as payment processing and determining eligibly, use, and other benefits.
Communicate with you generally about our products, services, features, and any other information relevant to the use of our Services.
Provide you with information you have requested or to respond to inquiries.
Notify you of changes to the Services, Site, or App.
Better understand our users.
Enhance and monitor the safety and security of our products and services, including to detect, investigate, and prevent fraudulent, unauthorized, or other illegal activities.
Carry out any other purpose described to you at the time the information was collected or pursuant to your consent.
Enforce this Privacy Policy and any other terms you have agreed to by your use of the Services, Site, or App.
Comply with applicable federal, state, and other laws and regulations.

How We Share and Disclose Information

Your PII is not shared outside of AndHealth without your permission, except as described below.

Information Shared with Our Service Providers. We may engage third-party service providers to work with us to administer and provide the Services. These third-party service providers have access to your PII only for the purpose of performing services on our behalf and are expressly obligated not to disclose or use your PII for any other purpose.

Information Shared with Third Parties. We may share your aggregated information and non- identifying information with third parties to conduct on-going quality improvement activities, or for industry research and analysis, demographic profiling, and other similar purposes.

Information Disclosed in Connection with Business Transactions. Information that we collect from our users, including PII, is considered to be a business asset. Thus, if we are acquired by a third party as a result of a transaction such as a merger, acquisition or asset sale or if our assets are acquired by a third party in the event we go out of business or enter bankruptcy, some or all of our assets, including your PII, may be disclosed or transferred to a third party acquirer in connection with the transaction.

Information Disclosed for Our Protection and the Protection of Others. We cooperate with government and law enforcement officials or private parties to enforce and comply with the law. We may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate: (i) to enforce our Terms of Use, (ii) to respond to claims, legal process (including subpoenas); (iii) to protect our property, rights and safety and the property, rights and safety of a third party, our users, or the public in general; (iv) to stop any activity that we consider illegal, unethical, or legally actionable activity; and (v) as required in accordance with applicable local, state, or federal laws.

Your Ability to Review Your Account and Information

You can review your PII by logging into the App or the web version of the App.

Opt-Out

Assuming you have agreed to our Consent to Communications, we may periodically send you free newsletters and e-mails that directly promote our Services. When you receive such promotional communications from us, you will have the opportunity to “opt-out” (either through your account or by following the unsubscribe instructions provided in the e-mail you receive). We do need to send you certain communications regarding the Services and you will not be able to opt out of those communications – e.g., communications regarding updates to our Terms of Use or this Privacy Policy or information about billing.

Data Security

Your account information is password-protected for your privacy and security. AndHealth safeguards the security of the information you provide to us with physical, electronic, and managerial procedures. In certain areas of our Site and App, we use industry-standard SSL- encryption to enhance the security of data transmissions. While we strive to protect your PII, we cannot ensure the security of the information you transmit to us, and so we urge you to take every precaution to protect your PII when you are on the Internet. Change your passwords often, use a combination of letters and numbers, and make sure you use a secure browser.

Responding to Do Not Track Signals

Our Site does not have the capability to respond to “Do Not Track” signals received from various web browsers.

Children and Privacy

Our Services do not target and are not intended to attract children under the age of 13. We do not knowingly solicit PII from children under the age of 13 or send them requests for PII. If we learn that we have collected PII of a child under 13 directly from that child we will take steps to delete such information from our files as soon as possible.

Third Party Sites

The Services contain links to other sites that are owned or operated by third parties. We are not responsible for the content, privacy or security practices of any third parties. To protect your information, we encourage you to learn about the privacy policies of those third parties.

International Transfer

Your information is stored by AndHealth on controlled servers with limited access and may be stored and processed in the United States. If you’re located outside the United States and choose to provide your PII to us, we may transfer your PII to the United States and process it there. Those who choose to access and use the Service from outside the U.S. do so on their own initiative, at their own risk, and are responsible for compliance with applicable laws.

Notice for California Users and Residents

Under California Civil Code Section 1789.3, California users are entitled to the following specific consumer rights notice: If you have a question or complaint regarding the Services, please send an email to [email protected]. You may also contact us by writing to AndHealth at 2 Miranova Pl, Suite 500, Columbus, OH 43215. California residents may reach the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted in writing at 400 R Street, Suite 1080, Sacramento, California 95814, or by telephone at (916) 445-1254 or (800) 952-5210.

Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to ask for a notice identifying the categories of PII which we share with certain third parties for direct marketing purposes under certain circumstances and providing contact information for such third parties. If you are a California resident and would like a copy of this notice, please submit a written request to: AndHealth at 2 Miranova Pl, Suite 500, Columbus, OH 43215.

Questions or Suggestions

If you have questions or concerns about our collection, use, or disclosure of your PII, please contact us at:

AndHealth LLC
2 Miranova Pl, Suite 500
Columbus, OH 43215

Telephone: 614-321-9743
Email: [email protected]