Effective date: October 30, 2026
Cordova Health Collective, Inc. (“Cordova,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit cordovahealth.co, contact us, join a waitlist, subscribe to our communications, apply for a job, participate in our community, or use services covered by this policy.
Some health information is protected by the Health Insurance Portability and Accountability Act (“HIPAA”) and other medical privacy laws. Whether those laws apply depends on the information, the entity handling it, and the circumstances—not simply whether you have become a member.
When information is protected by HIPAA, the applicable [Notice of Privacy Practices—insert link] explains how that information may be used and disclosed and how you can exercise your medical privacy rights. That notice governs protected health information if it conflicts with this policy.
Our website, general contact forms, email, and text messages are not monitored for emergencies. If you are experiencing a medical emergency, call 911.
Information you provide
Depending on how you interact with us, we collect:
When you visit our website, we and our service providers may collect your IP address, browser and device information, pages visited, links clicked, referring website, approximate location derived from your IP address, and dates and times of visits.
The “Cookies and similar technologies” section explains these practices and your choices.
When permitted by law, we receive information from laboratories, health care providers, pharmacies, the EHR platform, payment providers, and other organizations involved in services you request or authorize.
Members begin signup on cordovahealth.co and complete payment through the EHR member portal. Members also use that portal to cancel automatic renewal. We use information associated with these steps to complete enrollment, administer the membership, process payments, document cancellation, and respond to support requests.
Our Terms & Conditions explain membership billing, renewal, cancellation, and refunds. A membership cancellation and a privacy or records request are separate actions.
Subject to applicable law and any required consent, we use personal information to:
Uses of protected health information are governed by the applicable Notice of Privacy Practices. Additional Nevada consumer health disclosures will apply where required by law. 4. How we disclose information
We disclose personal information in the circumstances described below, subject to applicable privacy laws.
We use service providers for functions such as website hosting, security, communications, scheduling, account management, telehealth technology, community hosting, payment processing, and technical support.
When a provider processes personal information on our behalf, we require contractual protections appropriate to its role and the information involved. We enter into business associate agreements where HIPAA requires them.
Health care providers and other organizations involved in your services
We disclose information to laboratories, clinicians, pharmacies, and other organizations when needed for services you request or otherwise permitted or authorized by law. Some of these organizations act independently and have their own privacy obligations and notices.
Information you post in our community may be visible to other members or other audiences identified in the platform’s settings. Avoid posting information you do not want that audience to see. Other participants may copy or redistribute content.
We disclose information when you ask us to do so or provide an authorization or consent required by law.
Legal obligations and protection of rights
We disclose information when required by law or otherwise permitted by applicable law to respond to legal process, prevent fraud, or protect rights, property, or safety.
Personal information may be disclosed or transferred in connection with a proposed or completed merger, acquisition, financing, reorganization, or sale of business assets, subject to applicable law and appropriate confidentiality protections. A business transfer does not remove protections or consent requirements that apply to health information.
Our website uses cookies and similar technologies to support website functions, security, preferences, and analytics.
You can manage cookies through your browser settings. Blocking certain cookies may affect website functionality.
Marketing communications
You can unsubscribe from marketing emails using the unsubscribe link or by contacting us. We may continue to send nonmarketing messages about appointments, payments, memberships, or requests you submit.
Unsubscribing from marketing does not automatically delete your account or other records.
You may contact us to request access to personal information, correction of inaccuracies, or deletion. We will review requests and fulfill them to the extent required by applicable law and consistent with legal recordkeeping obligations. Additional rights may apply to medical records or consumer health data as described below.
To submit a request, email [email protected] with the subject line “Privacy Request,” or write to the address below. Please describe your request without including detailed medical information.
We may ask for information reasonably necessary to verify your identity and authority. Where applicable law allows an authorized agent to act for you, we may request proof of authorization.
We respond within the deadlines required by applicable law. If an extension is permitted and necessary, we will notify you as required. If we cannot fulfill a request, we will explain our decision and any applicable appeal process.
Some information may be retained where required or permitted by law. We will not discriminate or retaliate against you for exercising rights protected by applicable law.
You may submit a request directing us not to sell covered information about you by emailing [email protected] with the subject line “Nevada Sale Opt Out.” We will verify and handle the request as required by applicable law.
If you enroll in a Cordova text-messaging program, we may send the types of messages described when you enroll, such as appointment reminders and service updates. Marketing texts require separate consent where required by law. Consent to marketing texts is not a condition of purchase.
Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for assistance. You may also contact us using the information below.
We do not sell or disclose mobile numbers or text-messaging opt-in information to third parties or affiliates for their own marketing. We may disclose information to providers that help deliver the messaging program, subject to appropriate restrictions.
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. No method of transmission or storage is completely secure.
We will provide notifications of a data breach when required by applicable law.
Please use the designated member portal for sensitive medical information when available. Contact us if you need help choosing an appropriate communication method.
We retain personal information for as long as reasonably necessary for the purposes described in this policy, considering the nature of the information, our relationship with you, legal requirements, and legitimate operational needs. Canceling automatic renewal or ending a membership does not automatically delete your account information, billing records, communications, or medical records. You may make a separate privacy request as described above.
Medical records are retained according to applicable requirements. Other records may be retained to document transactions, resolve disputes, maintain security, or demonstrate compliance.
If you unsubscribe from marketing, we may retain limited contact information on a suppression list to honor that choice.
When information is no longer needed, we delete it or de-identify it as appropriate, subject to applicable law and any requirements governing backup systems.
If you believe a minor has provided information through services intended for adults, contact us. We will review the matter and take appropriate action consistent with applicable law, including any medical-record retention obligations.
Our website may link to websites, social media pages, or services operated independently by other organizations. Their privacy practices are governed by their own notices.
When a platform processes information on Cordova’s behalf, our use and disclosure of that information remain subject to our applicable privacy obligations.
We may update this policy as our services, practices, or legal obligations change. We will post the updated version with a revised effective date and provide any additional notice required by law.
Where a change requires consent, we will obtain that consent before proceeding. Continued use of our website does not replace consent required by law.
Cordova Health Collective, Inc.
Attn: Privacy
122 Ridge Street, STE 1A
Reno, NV 89501
Email: [email protected]
