Privacy Policy

Effective date: July 23, 2026
Last updated: July 23, 2026

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through the Emerald Health website, website forms, email communications, telephone communications, text messages, webinars, downloadable resources, and other digital interactions that link to this policy.

This policy does not replace or modify any separate contract, Business Associate Agreement, confidentiality agreement, or other agreement between Emerald Health and its healthcare-provider clients.

2. Information We Collect

The information we collect depends on how you interact with us. It may include the following categories.

Information You Provide Directly

You may provide information such as:

• Your name, job title, practice name, or organization name.
• Your business or personal email address.
• Your telephone or mobile number.
• Your mailing or business address.
• Information about your medical practice, billing operations, revenue cycle, staffing needs, or service interests.
• Information included in consultation, contact, webinar, resource-download, or service-request forms.
• Messages, feedback, questions, and other communications you send to us.
• Any other information you voluntarily choose to provide.

Information Collected Automatically

When you use our website, certain information may be collected automatically through cookies, log files, pixels, analytics tools, and similar technologies. This information may include:

• Your Internet Protocol address.
• Browser type, operating system, and device type.
• Approximate geographic location based on your IP address.
• Pages viewed, links selected, and time spent on the website.
• The website or advertisement that referred you to our website.
• Date and time of access.
• Website interaction and performance data.
• Cookie identifiers and similar online identifiers.

Information From Other Sources

We may receive information from business partners, referral sources, event platforms, social media platforms, analytics providers, advertising providers, publicly available sources, or other third parties where permitted by law.

3. Protected Health Information and HIPAA

Emerald Health provides medical billing, revenue cycle management, coding, administrative, and related services to healthcare organizations. In providing these services, Emerald Health may receive or process Protected Health Information on behalf of healthcare providers or other covered entities.

When Emerald Health receives Protected Health Information while acting as a business associate, that information is handled according to applicable HIPAA requirements, the relevant Business Associate Agreement, our client agreements, and our internal privacy and security procedures.

A patient seeking access to, correction of, or information about a medical record should normally contact the healthcare provider, medical practice, health plan, or other covered entity responsible for that record. Emerald Health will assist its clients with applicable requests as required by contract and law.

This website Privacy Policy is not a healthcare provider’s Notice of Privacy Practices and does not describe every use or disclosure of Protected Health Information that may occur under HIPAA.

4. How We Use Personal Information

We may use personal information to:

• Respond to questions, consultation requests, and service inquiries.
• Provide information about our medical billing, revenue cycle management, staffing, coding, and related services.
• Evaluate your organization’s needs and prepare service recommendations or proposals.
• Schedule meetings, demonstrations, assessments, webinars, or consultations.
• Deliver requested reports, guides, webinar recordings, newsletters, and other resources.
• Provide, administer, support, and improve our services.
• Communicate with clients, prospective clients, vendors, and business partners.
• Send administrative, account-related, service-related, and security-related messages.
• Send marketing communications where permitted by law and consistent with your communication preferences.
• Analyze website traffic, visitor activity, campaign performance, and service interest.
• Personalize and improve website content and functionality.
• Maintain the security and integrity of our website, systems, and operations.
• Detect, investigate, and prevent fraudulent, harmful, unauthorized, or illegal activity.
• Enforce our agreements, policies, and legal rights.
• Meet legal, regulatory, contractual, accounting, and compliance requirements.

5. Cookies and Similar Technologies

We may use cookies, pixels, tags, scripts, local storage, analytics technologies, and similar tools to operate the website and understand how visitors use it.

These technologies may be used for purposes such as:

• Keeping the website secure and functioning properly.
• Remembering visitor settings and preferences.
• Measuring website traffic and performance.
• Understanding which pages, services, and resources visitors find useful.
• Measuring the effectiveness of marketing campaigns.
• Delivering or measuring relevant advertising where permitted.

You can control or delete cookies through your browser settings. Blocking certain cookies may affect website functionality. Where required, we may also provide a cookie-consent tool that allows you to manage nonessential cookies.

Some browsers and devices support privacy preference signals, such as Global Privacy Control. Where legally required and technically supported, we will process recognized signals as requests to opt out of applicable data sharing.

6. Analytics and Advertising Services

We may work with analytics, marketing, customer relationship management, website-hosting, and advertising providers. These providers may collect information about your device and website activity through cookies and similar technologies.

Information collected by third-party services is also subject to those providers’ own privacy policies. You may be able to manage interest-based advertising through browser settings, cookie controls, platform settings, or industry opt-out tools.

7. Email Communications

We may send emails concerning requested services, consultations, resources, webinars, account matters, or other business communications. Where permitted, we may also send newsletters, educational information, and promotional communications.

You may unsubscribe from promotional emails by selecting the unsubscribe link included in the message. Even after unsubscribing from promotional communications, we may continue sending transactional, contractual, security, or service-related messages when necessary.

8. Text Message and SMS Communications

When you provide a mobile telephone number and affirmatively consent to text messaging, Emerald Health may send text messages related to your inquiry, requested consultation, appointment, service, event registration, account, or other selected communications.

• Message frequency may vary.
• Message and data rates may apply.
• Consent to receive marketing text messages is not a condition of purchasing services.
• Reply STOP to unsubscribe from text messages.
• Reply HELP for assistance.

Mobile information, text-message consent records, and SMS opt-in information will not be sold, rented, or shared with third parties or affiliates for their independent marketing or promotional purposes.

We may disclose information to messaging platforms, telecommunications providers, and service providers only as reasonably necessary to deliver messages, maintain consent and opt-out records, prevent fraud, and support the messaging program.

9. How We Disclose Information

We may disclose personal information in the following circumstances.

Service Providers

We may provide information to vendors that support website hosting, data storage, cybersecurity, analytics, communications, customer relationship management, scheduling, payment processing, marketing, and other business functions. These providers are permitted to use information only for authorized purposes and subject to applicable contractual obligations.

Healthcare Clients and Contracted Partners

Information may be disclosed to healthcare-provider clients, contracted partners, subcontractors, or other authorized parties when necessary to provide requested services, fulfill contractual obligations, or support permitted healthcare operations.

Professional Advisers

We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisers when reasonably necessary.

Legal and Safety Requirements

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with a law, regulation, subpoena, court order, or lawful government request.
• Protect the rights, safety, security, or property of Emerald Health, our clients, website users, or others.
• Investigate or prevent fraud, security incidents, illegal conduct, or violations of our agreements.
• Establish, exercise, or defend legal claims.

Business Transactions

Information may be transferred or disclosed as part of a merger, acquisition, financing, reorganization, sale of assets, due-diligence process, bankruptcy, or similar business transaction, subject to applicable confidentiality and legal requirements.

With Your Direction or Consent

We may disclose information for another purpose when you request, direct, authorize, or consent to the disclosure.

10. Sale and Sharing of Personal Information

Emerald Health does not sell personal information in exchange for money.

Certain privacy laws may define the use of advertising cookies or disclosure of online identifiers for cross-context behavioral advertising as a “sale,” “sharing,” or targeted advertising, even when no money is exchanged. Where these laws apply, you may request to opt out through available cookie controls, a recognized browser privacy signal, or by contacting us using the details below.

Emerald Health does not knowingly sell or share the personal information of individuals under 18 years of age.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining business and communication records, managing client relationships, resolving disputes, enforcing agreements, and meeting legal, regulatory, accounting, security, and contractual obligations.

Retention periods may vary depending on the type of information, the context in which it was collected, legal requirements, client instructions, and the sensitivity of the information.

12. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental loss, unauthorized access, misuse, alteration, disclosure, or destruction.

These safeguards may include access controls, workforce training, authentication procedures, system monitoring, secure service providers, encryption where appropriate, incident-response procedures, and contractual privacy and security protections.

No website, communication method, storage system, or internet transmission can be guaranteed to be completely secure. You should use caution when transmitting sensitive information online and use only secure communication methods approved for that purpose.

13. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have the right to:

• Request access to the personal information we maintain about you.
• Request correction of inaccurate personal information.
• Request deletion of certain personal information.
• Request information about how we collect, use, and disclose personal information.
• Request a portable copy of certain personal information.
• Opt out of certain targeted advertising, sales, or sharing of personal information.
• Limit certain uses of sensitive personal information where applicable.
• Withdraw consent where processing is based on your consent.
• Appeal our response to a privacy request where applicable.
• Exercise privacy rights without unlawful discrimination or retaliation.

These rights are not absolute. A request may be denied or limited when an exception applies, including when information must be retained to comply with law, complete a requested transaction, protect security, exercise legal rights, or fulfill contractual obligations.

To submit a privacy request, contact us using the email address, telephone number, or mailing address listed at the end of this policy. Please describe the request and identify the state or country in which you reside.

We may take reasonable steps to verify your identity before processing a request. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct identity verification.

14. California Privacy Information

Where Emerald Health is subject to the California Consumer Privacy Act, California residents may have rights to know, access, correct, delete, and obtain information about certain personal information, as well as rights to opt out of applicable sales, sharing, or targeted advertising and to limit certain uses of sensitive personal information.

We will not discriminate against you for exercising an applicable privacy right. California residents may submit requests using the contact methods below.

15. Children’s Privacy

Our website and services are intended for healthcare organizations, professionals, business representatives, and adults. They are not directed to children under 13 years of age.

We do not knowingly collect personal information directly from children under 13 through the website. If you believe a child has submitted personal information to us without appropriate authorization, please contact us so that we can review and address the matter.

16. Third-Party Websites and Services

Our website may contain links to social media platforms, event platforms, partner websites, and other third-party services. We do not control the privacy, security, or content practices of these third parties.

We encourage you to review the privacy policy of each third-party website or service before submitting personal information.

17. International Visitors

Emerald Health is based in the United States. If you access our website from another country, your information may be transferred to, processed, and stored in the United States or other locations where our service providers operate.

Privacy and data-protection laws in these locations may differ from those in your country. Where required, we will use appropriate safeguards for international transfers of personal information.

18. Changes to This Privacy Policy

We may revise this Privacy Policy periodically to reflect changes in our website, services, business practices, technologies, or legal requirements.

When we update the policy, we will revise the “Last updated” date at the top of this page. Material changes may also be communicated through the website or another appropriate method.

19. Contact Emerald Health

Contact us with questions about this Privacy Policy, our privacy practices, or a request concerning your personal information.