Privacy Policy

Patient Care Automation, LLC

Introduction

Patient Care Automation, LLC doing business as Sherpa Health, and its subsidiaries, divisions, and affiliates (“Sherpa,” “we,” “our,” and/or “us”) understand and value the importance of your privacy and protecting your personal information. This privacy policy (the “Policy”) explains how we collect, use, and share information about you through our website (the “Site”), mobile apps (the “Apps”), and other online services on which this Policy is posted (collectively with the Site and Apps, the “Service”).

Please read this Policy carefully. By using our Service, and, as applicable, by clicking to accept on our Service, you agree to be bound by this Policy, to the collection, use, disclosure, and procedures this Policy describes. In addition to this Policy, your use of our Service is subject to Sherpa’s Terms of Service. If you do not want to agree to these Terms of Use or the Policy, you must not access or use the Service.

Collection of Personal Information

Information You Provide to Us

Much of the personally identifiable information we receive comes directly from users who are interested in using and accessing our Service. We collect information you provide to us when you access or interact with our Service, or otherwise communicate with us. We may collect personal information when you submit an e-mail or request for information to us. You are responsible for ensuring the accuracy of the personally identifiable information that you submit to us.

We may also collect other types of non-identifiable information, such as gender, age, health, and personal interests, that we may associate with personally identifiable information.

Information We Obtain Indirectly

We may receive certain information about you through our third-party affiliates or partners and from other companies that provide us with such information as a part of their relationship with us, including Google Analytics. If and when we associate any information that we obtained from third parties with personally identifiable information that we have collected under this Privacy Policy, we will treat the acquired information exactly like the information that we collected ourselves.

Information We Collect Through Technology

When you use our Service, we collect certain information about you automatically through our use of cookies and similar technologies. Our Site may use “cookies,” which are pieces of information a website sends to your computer while you are viewing the website, for a variety of purposes. For example, when you return to our Site after logging in, cookies may provide information to the Site so that the Site will remember who you are.

We may also use information collected through web beacons, which are small pieces of data that are embedded in images on the pages of websites, to analyze the traffic patterns on our Site.

Sherpa also uses Google Analytics on its website. Google Analytics is a web analytics service provided by Google, Inc. to collect certain information relating to your use of the Site. We may also use Google Analytics Advertising Features or other advertising networks to provide you with interest-based advertising based on your online activity.

Personal Information and Purpose for Collection

Sherpa only collects and processes the minimum amount of personal information from you that is necessary to the purposes of our information processing activities and retains such information only if required to fulfill such purposes. Additionally, any information sent by you is kept private and confidential. Our information processing activities include conducting our business, customer communications and support, user verification, quality management services, Site maintenance and improvements, enforcing our legal rights, and complying with legal requirements.

Protected Health Information

In using certain components of the Service, you may provide certain medical information that may be protected under applicable laws. Sherpa is not a “covered entity” under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and its related regulations and amendments from time to time (collectively, “HIPAA”). One or more of the medical groups to whom you provide medical information may or may not be a “covered entity” or “business associate” under HIPAA, and Sherpa may in some cases be a “business associate” of that medical group.

Any medical or health information that you provide that is subject to specific protections under applicable state laws (collectively, with PHI, “Protected Information”), will be used and disclosed only in accordance with such applicable laws. However, any information that does not constitute Protected Information under applicable laws may be used or disclosed in any manner permitted under our Privacy Policy. Protected Information does not include information that has been de-identified in accordance with HIPAA.

How We May Use the Information We Collect

We may use the information we collect:

Disclosure of Personal Information

Sherpa does not trade, rent, sell, disseminate, or share your personal information with nonaffiliated third parties for their direct marketing purposes, unless we have your permission.

We may share or disclose your personal information for the following limited purposes:

Healthcare Providers

We share your personal information with doctors, and relevant medical staff, to whom we are considered a business associate. In addition to this Policy, our disclosure of your personal information to these providers is subject to their Notice of Privacy Practice Policy.

Vendors and Service Providers

We may provide information to third party vendors and service providers that perform services and functions on our behalf to help us operate and manage our Site. These vendors and service providers will have access to your personal information in order to provide these services, but when this occurs we implement reasonable contractual and technical protections to limit their use of that information.

Your Consent to Have Your Personal Information Shared

In addition to the sharing described elsewhere in this Policy, we will share personal information with companies, organizations, or individuals outside of Sherpa when we have your consent to do so.

Legal Disclosure

We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; (c) protect your, our, or others’ rights, property, or safety; or (d) enforce any of our Terms of Service or other applicable policies.

Transfer in the Event of Sale or Change of Control

If the ownership of all or substantially all of our business changes, or we otherwise transfer assets relating to our business or the Site to a third party, we may transfer personal information to the new owner or third parties in connection with the transaction.

Opt-Out

With regard to personal information that you have provided under this Policy, you may exercise your opt-out choices available to you (if any and where applicable) by contacting us directly, or by using the applicable links on the Sherpa application. It may take up to ninety (90) days for your opt-out choices to be fully effective.

Security of Your Information

We use industry standard physical, technical, electronic, and administrative security measures and safeguards to protect the confidentiality and security of your personal information. For example, we limit access to personal information about you to employees who we believe reasonably need to come into contact with that information to provide products or services to you or in order to do their jobs.

Please be advised, however, that while we take reasonable security measures to protect your personal information, we can make no guarantees as to the security or privacy of your information. Accordingly, it is your responsibility to protect the security of your login information, including your username and password. Additionally, please note that emails and other communications you send to us through our Site are not encrypted, and we strongly advise you not to communicate any confidential information through these means.

Content Placement

We may manage and place promotional content on our Service on behalf of third parties. We may also use cookies and other technology to collect information when you click on or move your cursor over this content.

Currently, our Service does not recognize if your browser sends a “do not track” signal or similar mechanism to indicate you do not wish to be tracked.

Children’s Privacy

We are committed to protecting the privacy of children. The Site is not designed or intended to attract children under the age of 18. The parent or guardian is solely responsible for providing supervision of the minor’s use of the Service and the Site.

If you are under the age of 18, please do not attempt to register or utilize our Site, engage our Service, or provide any personal information about yourself to us. We do not collect personal information from any person on our Site we actually know is under the age of 18. If we learn that we have collected personal information on our Site from someone under 18, we will promptly delete that information.

If you are under the age of 18 (but over age 13), you may be permitted to use our Apps, however, we will not permit any user under 18 to opt-in or otherwise consent to receive promotional content. Instead, users under 18 will strictly receive transactional content (i.e., appointment reminders).

Special Notes to California Residents

California residents have the right to request in writing from businesses with whom they have an established business relationship (1) a list of the categories of personal information that a business has disclosed to third parties during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (2) the names and addresses of all such third parties.

If you would like to submit a Consumer Request, you can email us. We will respond to such written requests within thirty (30) days following receipt.

Request to Access

You may submit a Consumer Request to obtain a copy of or access to the personal information that we have collected on you.

Request to Know

You may submit a Consumer Request to receive information about our data collection practices, including the categories of personal information we have collected about you, the categories of data collection sources, and the specific pieces of personal information we have collected about you.

Request to Delete

You may request that we delete your personal information. Subject to certain exceptions, we will, on receipt of a verifiable Consumer Request, delete your personal information from our records and direct any service providers to do the same.

Please note that we may not delete your personal information if it is necessary to:

Special Note to Nevada Residents

We do not sell, rent, or lease your personally identifiable information to third parties. However, if you are a resident of Nevada and would like to submit a request not to sell your personally identifiable information, you may do so by emailing us.

Special Note to International Residents

Our Service is hosted in the United States and intended for visitors located within the United States. If you choose to use the Service from other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the United States for storage and processing. By providing any information on or to the Service, you consent to such transfer, storage, and processing.

Linked Sites

The Site may contain links to third-party owned or operated websites (each a “Linked Site”). This Policy and the practices that we follow under this Policy do not apply to Linked Sites. We are not responsible for the content, accuracy, or opinions expressed on any Linked Site or for the privacy practices or security standards used by third parties on such Linked Sites.

User Content

Some features of the Service may now or in the future allow you to provide content to be published or displayed on public areas of the Site (“User Content”). Be careful about giving out information in public areas of the Service. We cannot control the actions of other users of the Site with whom you may choose to share your User Content.

Changes to Our Privacy Policy

While this Policy may change from time to time, Sherpa will enforce and comply with all applicable laws with respect to this Policy. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice.

Questions and How to Contact Us

If you have any questions, concerns, complaints, or suggestions regarding this Policy, please email us at partnerships@sherpahealth.ai.