Provider Resource Hub
Find a Provider

INTERNET PRIVACY POLICY

Blue Zones Health and its affiliates (collectively, “BZH”)  respect your privacy.  This Internet Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit or use our websites, mobile applications, online account tools, digital services, emails, text-message programs, and other online or electronic channels that link to or reference this Internet Privacy Policy (collectively, the “Site”).

This Internet Privacy Policy applies to information collected through the Site.  It does not replace BZH’s Notice of Privacy Practices, which describes how BZH may use and disclose protected health information under the Health Insurance Portability and Accountability Act of 1996, as amended, and other applicable health information privacy laws.  For secure member, patient, provider, payment, claims, care management, and account tools, information may include protected health information or medical information.  Those uses and disclosures are governed by the Notice of Privacy Practices, applicable plan documents, provider agreements, consents, authorizations, and product-specific terms, as applicable.  Where information is protected health information and is subject to BZH’s Notice of Privacy Practices, the Notice of Privacy Practices governs BZH’s use and disclosure of that information.  If there is a conflict between this Internet Privacy Policy and BZH’s Notice of Privacy Practices with respect to protected health information, the Notice of Privacy Practices will control.

This Internet Privacy Policy also does not replace any privacy notice, consent, authorization, plan document, member handbook, Evidence of Coverage, provider agreement, or other agreement that applies to a specific BZH product, service, program, or relationship.

The Site is intended for individuals located in the United States.  If you access the Site from outside the United States, you do so on your own initiative and are responsible for compliance with applicable local laws.

1. Information We Collect

We may collect information directly from you, automatically through your use of the Site, and from other sources, as described below.

a. Information You Provide to Us

Depending on how you interact with BZH, we may collect information that you provide, including:

      • Contact information, such as your name, mailing address, email address, telephone number, and communication preferences;
      • Account information, such as username, password, authentication information, security questions, and other credentials;
      • Member, patient, provider, broker, employer group, or plan-related information, such as member ID, date of birth, plan selection, coverage information, provider information, claims-related information, care management information, enrollment information, or other information you choose to provide through secure features;
      • Health-related information that you submit through secure member, patient, care management, or account tools;
      • Payment, billing, or transaction information, if applicable;
      • Messages, forms, surveys, feedback, requests, complaints, appeals, grievances, or other communications you submit to us;
      • Marketing, event, newsletter, or educational program preferences;
      • Information you provide when applying for employment or contractor opportunities, if the Site includes recruiting features; and
      • Any other information you choose to provide through the Site.

Please do not submit protected health information, sensitive health information, or other confidential information through public, non-secure, or interactive areas of the Site unless BZH specifically instructs you to do so through a secure feature.

 

b. Information Collected Automatically

When you use the Site, we and our service providers may automatically collect information about your device, browser, usage, and interactions with the Site, including:

      • Internet Protocol address;
      • Device identifiers;
      • Browser type and version;
      • Operating system;
      • Mobile device type;
      • Referring and exit pages;
      • Pages or screens viewed;
      • Links clicked;
      • Dates and times of visits;
      • Search terms used on the Site;
      • Approximate location derived from IP address or device settings;
      • App usage, crash reports, and performance data, if applicable;
      • Cookie identifiers, pixel tags, software development kit identifiers, and similar online identifiers;
      • Authentication, security, and fraud-prevention logs; and
      • Other information about how you interact with the Site.

c. Information Collected Automatically

We may receive information from other sources, where permitted by law, including:

      • BZH affiliates;
      • Health care providers, facilities, pharmacies, or care partners;
      • Health plans, payers, administrators, or employer groups;
      • Brokers, agents, consultants, or authorized representatives;
      • Government programs or agencies;
      • Vendors, service providers, contractors, and business associates;
      • Analytics, security, fraud-prevention, and identity-verification providers;
      • Publicly available sources; and
      • Other sources with your consent or as permitted or required by law.

2. How We Use Information

We may use information for the following purposes, subject to applicable law and, where applicable, BZH’s Notice of Privacy Practices:

      • To operate, maintain, provide, and improve the Site;
      • To create, authenticate, manage, and secure online accounts;
      • To respond to your requests, questions, complaints, appeals, grievances, and communications;
      • To provide plan, coverage, benefit, care management, provider directory, account, payment, billing, or administrative information;
      • To communicate with you about BZH products, services, coverage, benefits, programs, events, and updates;
      • To send transactional, informational, care-related, account-related, legal, security, or administrative communications;
      • To send marketing or promotional communications where permitted by law and consistent with your choices and consents;
      • To personalize your experience with the Site;
      • To analyze Site usage, improve Site performance, and understand user needs;
      • To conduct quality assurance, auditing, training, research, reporting, and business operations;
      • To protect the privacy, safety, and security of individuals, BZH, the Site, and BZH systems;
      • To detect, prevent, investigate, or respond to fraud, misuse, security incidents, unauthorized access, or unlawful activity;
      • To comply with legal, regulatory, contractual, accreditation, audit, reporting, and recordkeeping obligations;
      • To establish, exercise, or defend legal rights or claims;
      • To administer provider, broker, employer group, vendor, or business relationships;
      • To evaluate employment or contractor applications, if applicable; and
      • For other purposes disclosed to you at the time of collection or with your consent.

3. Protected Health Information and Health Privacy

BZH may be subject to HIPAA, the Confidentiality of Medical Information Act, and other federal and state health information privacy laws.  BZH’s use and disclosure of protected health information is governed by its Notice of Privacy Practices, where applicable.  We do not use or disclose protected health information for marketing, targeted advertising, or cross-context behavioral advertising unless permitted by law and, where required, with your authorization.  We do not sell protected health information.  We also evaluate whether information collected through websites, mobile apps, cookies, pixels, SDKs, forms, appointment tools, provider searches, care-management tools, or other digital services is protected health information, medical information, consumer health data, or sensitive personal information under applicable law.  Where required, BZH will obtain a HIPAA-compliant authorization, consumer consent, or other legally required permission before using or disclosing such information for marketing, targeted advertising, sale, sharing, or other non-permitted purposes.

If you use secure member, patient, or account tools, information you submit or access through those tools may include protected health information.  Those tools may be subject to additional terms, notices, security procedures, identity-verification requirements, and access controls.

If you believe you are experiencing a medical emergency, call 911 immediately.  Do not use the Site, email, text message, or other non-emergency electronic communication channels for emergencies or urgent medical needs.

4. Cookies, Pixels, Analytics and Similar Technologies

We may use cookies, pixels, tags, web beacons, local storage, mobile identifiers, software development kits, log files, and similar technologies, collectively, “Tracking Technologies”, to operate the Site, remember your preferences, secure the Site, analyze usage, measure performance, improve services, and, where permitted by law, support communications or marketing activities.

Subject to your choices and applicable law, Advertising or measurement technologies are used only after privacy and security review and only where they are configured, contracted, and disclosed in a manner consistent with BZH’s HIPAA, health information, consumer health data, and state privacy obligations.  BZH maintains an inventory of material Tracking Technologies and makes available a cookie preference tool or privacy choices mechanism where required.  You can use that tool to manage non-essential cookies and applicable sale, sharing, targeted advertising, or measurement choices.

Where required by applicable law, BZH honors recognized opt-out preference signals, such as Global Privacy Control, for the browser or device through which the signal is sent.

Tracking Technologies may collect information such as IP address, device identifiers, browser type, operating system, pages viewed, links clicked, referring pages, time spent on pages, and other usage information.

We classify Tracking Technologies as follows:

      • Strictly necessary technologies: Used to operate the Site, maintain security, authenticate users, prevent fraud, and provide requested features.
      • Functional technologies: Used to remember choices, preferences, and settings.
      • Analytics and performance technologies: Used to understand how users interact with the Site and improve functionality and performance.
      • Advertising or measurement technologies: Used only where permitted by law and consistent with BZH’s privacy obligations, to measure campaigns, understand outreach effectiveness, or provide relevant communications.

Because BZH operates in the health care industry, we evaluate Tracking Technologies carefully.  Where Tracking Technologies may collect or disclose protected health information or other regulated health information, BZH will use them only as permitted by applicable law, which may include obtaining required consents or authorizations, limiting the information disclosed, configuring technologies to reduce privacy risk, and entering into required agreements with vendors.

a. Third-Party Tracking and Vendor Controls

Some Tracking Technologies are provided by third parties, such as analytics, security, or advertising providers.  Where this occurs, those third parties may collect personal information about your online activities over time and across different websites, applications, or online services when you use the Site, as permitted by applicable law and subject to BZH’s privacy obligations.

BZH requires third parties that process information on BZH’s behalf to use information only as authorized by contract, to protect information, to support applicable privacy rights, and to notify BZH of incidents as required.  Where a vendor receives protected health information, BZH requires a business associate agreement or other legally required agreement when required.  Where a vendor processes consumer health data or personal information under state privacy laws, BZH requires processor, service provider, contractor, or comparable terms as required.

You may be able to manage cookies through your browser settings, device settings, cookie banner, or privacy preference tools made available on the Site.  If you disable certain cookies or technologies, some Site features may not function properly.

Some browsers or devices may transmit “Do Not Track” signals.  Because there is not a uniform industry standard for responding to all “Do Not Track” signals, our response may depend on the specific signal and applicable law.  Where required by applicable law, including California law, we will honor recognized opt-out preference signals, such as Global Privacy Control, for the browser or device through which the signal is sent.

5. How We Disclose Information

We may collect information directly from you, automatically through your use of the Site, and from other sources, as described below.

a. Affiliates

We may disclose information to BZH affiliates for purposes consistent with this Internet Privacy Policy, applicable law, and any applicable privacy notices or agreements.

b. Service Providers, Contractors, and Business Associates

We may disclose information to vendors, service providers, contractors, and business associates that perform services for us, such as hosting, information technology, cybersecurity, analytics, customer support, payment processing, communications, identity verification, auditing, legal services, consulting, care management support, and other operational services.  These parties are required to use information only as permitted by their agreements with BZH and applicable law.

Where a vendor receives protected health information from BZH to perform services on BZH’s behalf, BZH will require a business associate agreement or other legally required agreement when required by HIPAA or other applicable law.

c. Health Care and Plan Operations

Where permitted by law and applicable privacy notices, we may disclose information to health care providers, facilities, pharmacies, payers, plan administrators, employer groups, brokers, agents, care partners, regulators, or other parties involved in treatment, payment, health care operations, plan administration, care coordination, quality improvement, or related activities.

d. Legal, Compliance, Security, and Safety Purposes

We may disclose information when we believe disclosure is necessary or appropriate to comply with law, regulation, legal process, subpoena, court order, government request, audit, investigation, accreditation requirement, or contractual obligation.  We may also disclose information to protect rights, privacy, safety, or security; detect or prevent fraud, abuse, or security incidents; enforce terms or agreements; or establish, exercise, or defend legal rights or claims.

e. Business Transactions

If BZH is involved in a merger, acquisition, affiliation, financing, reorganization, sale of assets, transfer of business, or similar transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law and appropriate protections

f. With Your Consent or Direction

We may disclose information with your consent, authorization, or direction, or as otherwise disclosed to you at the time of collection.

g. Retention

We may use and disclose de-identified, anonymized, or aggregated information where permitted by law.  We will not attempt to re-identify information that has been de-identified except as permitted by law.

 

6. Sale, Sharing and Targeted Advertising

BZH does not sell protected health information.  BZH does not use or disclose protected health information for targeted advertising or cross-context behavioral advertising unless permitted by applicable law and, where required, with your authorization.

BZH does not sell personal information for monetary consideration.  Some privacy laws define “sell”, “share”, or “targeted advertising” broadly to include certain disclosures of online identifiers or internet activity to third parties for advertising, analytics, or measurement purposes.  To the extent BZH uses technologies or vendors in a way that is considered a “sale”, “sharing”, or “targeted advertising” under applicable law, BZH will provide required notices and choices, including any required “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” link.

BZH does not use protected health information or consumer health data for targeted advertising, cross-context behavioral advertising, sale, or sharing unless permitted by applicable law and, where required, with your consent or authorization.

BZH does not knowingly sell or share the personal information of consumers under 16 years of age.

7. Communication Choices

You may manage your communication preferences through available account tools, unsubscribe links, text-message opt-out instructions, or by contacting BZH.

a. Email

You may opt out of marketing emails by using the unsubscribe link in the email or by contacting us.  Even if you opt out of marketing emails, we may continue to send non-marketing communications, such as account, service, coverage, benefit, security, legal, care-related, transactional, or administrative messages.

b. Text Messages

If you participate in a BZH text-message program, you may opt out as described in the applicable text-message terms and instructions, including by replying STOP to text messages where available.  Message and data rates may apply.  Text messages may not be encrypted and may be viewable by anyone with access to your mobile device.

Consent to promotional text messages is not a condition of receiving health care services or health plan benefits unless separately disclosed and permitted by law.  Message frequency varies.  Reply HELP for help where available.  Message and data rates may apply.  Text messages may not be encrypted and may be viewable by anyone with access to your mobile device.  Do not use text messages for emergencies, urgent medical needs, or highly sensitive information unless BZH has provided a secure channel for that purpose.

c. Cookies and Online Choices

You may manage certain cookie and online tracking choices through browser settings, device settings, Site preference tools, or legally required opt-out mechanisms made available on the Site.

8. Your Privacy Rights

Depending on where you live, the nature of your relationship with BZH, and the type of information involved, you may have certain privacy rights under federal or state law.

These rights may include the right to:

      • Request access to certain personal information;
      • Request correction of inaccurate personal information;
      • Request deletion of certain personal information;
      • Request information about categories of personal information collected, sources, purposes, disclosures, sales, or sharing;
      • Opt out of certain sales, sharing, targeted advertising, or marketing communications;
      • Limit certain uses or disclosures of sensitive personal information, where applicable;
      • Withdraw consent where processing is based on consent;
      • Appeal certain privacy-rights decisions, where applicable law provides an appeal right; and
      • Not be discriminated against for exercising privacy rights.

Some information, including protected health information, may be subject to HIPAA, the Confidentiality of Medical Information Act, or other health privacy laws rather than, or in addition to, general consumer privacy laws.  Rights relating to protected health information are described in BZH’s Notice of Privacy Practices.

To submit a privacy request, contact us using the information in the “Contact Us” section below or use any privacy request form made available on the Site.  We may need to verify your identity and authority before processing your request.  Authorized agents may submit requests where permitted by law, subject to verification and proof of authorization.

BZH will verify your identity and, if applicable, your authority to act on behalf of another person before processing a request.  We will respond within the time required by applicable law and will notify you if we need additional information or an extension.  Where applicable law provides an appeal right, you may appeal BZH’s decision by following the instructions in our response.   Authorized agents may submit requests where permitted by law, subject to verification and proof of authorization.  Rights relating to protected health information are described in BZH’s Notice of Privacy Practices and may need to be exercised through the HIPAA request process rather than this Internet Privacy Policy request process.

We may deny or limit a request where permitted by law, such as when information is exempt, when retaining information is necessary to comply with legal obligations, when deletion would impair security or fraud-prevention efforts, when the information is protected health information subject to a different legal process, or when we cannot verify the request.

9. California Privacy Notice

This section applies to California residents and supplements the rest of this Internet Privacy Policy.  Terms used in this section have the meanings given under applicable California privacy law.

a. Categories of Personal Information We May Collect

Depending on your interactions with BZH, we may collect the following categories of personal information:

      • Identifiers, such as name, address, email address, telephone number, IP address, online identifiers, account identifiers, and similar information;
      • Personal information described in California customer records law, such as contact information, payment information, insurance information, or other account information;
      • Protected classification information, such as age, sex, disability, language preference, or other information where collected and permitted by law;
      • Commercial information, such as products or services considered, obtained, or used;
      • Internet or other electronic network activity information, such as browsing activity, search activity, interactions with the Site, cookies, pixels, device identifiers, and log information;
      • Geolocation information, such as approximate location derived from IP address or device settings, and precise geolocation only if collected with appropriate notice and consent;
      • Audio, electronic, visual, or similar information, such as call recordings, voicemail, chat transcripts, or other communications, where applicable;
      • Professional or employment-related information, such as information submitted by providers, brokers, agents, vendors, applicants, or business contacts;
      • Education information, if submitted in an employment or credentialing context;
      • Sensitive personal information, such as health information, health insurance information, account login credentials, precise geolocation, government identifiers, racial or ethnic origin, language preference, or other sensitive information where collected and permitted by law; and
      • Inferences, such as preferences or characteristics derived from Site activity or interactions, where applicable.

b. Sources of Personal Information

We may collect personal information from you, your device or browser, BZH affiliates, health care providers, health plans, payers, employer groups, brokers, agents, authorized representatives, vendors, service providers, business associates, government programs or agencies, and publicly available sources.

c. Purposes for Collection, Use, and Disclosure

We collect, use, and disclose personal information for the purposes described in this Internet Privacy Policy, including providing and improving the Site, account management, communications, plan administration, care management, payment and billing, security, fraud prevention, analytics, legal compliance, marketing where permitted, and other operational purposes.

d. Categories of Third Parties to Whom We Disclose Personal Information

We may disclose personal information to affiliates, service providers, contractors, business associates, health care providers, facilities, pharmacies, health plans, payers, employer groups, brokers, agents, government agencies, regulators, auditors, professional advisors, business transaction parties, and other parties as permitted or required by law.

e. Sale or Sharing of Personal Information

BZH does not sell personal information for monetary consideration and does not sell protected health information.  To the extent any use of cookies, pixels, analytics, advertising, or measurement technologies is considered a “sale” or “sharing” under California law, BZH will provide required notices and opt-out choices.

f. Sensitive Personal Information

BZH uses and discloses sensitive personal information only as reasonably necessary and proportionate for purposes permitted by law, such as providing services, maintaining accounts, ensuring security and integrity, preventing fraud, complying with law, providing requested communications, and administering health care or plan-related services.  If BZH uses or discloses sensitive personal information for purposes that require a right to limit under California law, BZH will provide a method to exercise that right.

g. Categories of Personal Information We May Collect

We retain personal information for as long as reasonably necessary for the purposes described in this Internet Privacy Policy, including to provide services, maintain accounts, comply with legal and regulatory obligations, resolve disputes, enforce agreements, maintain security, and satisfy recordkeeping requirements.  Retention periods vary depending on the type of information, the purpose for which it was collected, legal requirements, contractual requirements, and operational needs.

h. California Privacy Rights

California residents may have the right to request access, correction, deletion, portability, information about collection and disclosure practices, opt-out of sale or sharing, limit certain uses and disclosures of sensitive personal information, and non-discrimination for exercising privacy rights.

To exercise California privacy rights, contact us using the information in the “Contact Us” section below or use any privacy request form made available on the Site.  If BZH provides a “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” link, you may use that link to exercise applicable opt-out rights.

i. California “Shine the Light” Notice

If applicable, California residents may request certain information regarding BZH’s disclosure of personal information to third parties for their direct marketing purposes, where applicable.  To make such a request, contact us using the information in the “Contact Us” section below and include “California Shine the Light Request” in your request.

 

10. Consumer Health Data Supplemental Notice

Some state laws regulate “consumer health data” that may not be protected health information under HIPAA.  Depending on your location and interaction with BZH, consumer health data may include information linked or reasonably linkable to you that identifies your past, present, or future physical or mental health status, health care services, conditions, treatment, medications, precise location related to health services, reproductive or sexual health information, biometric information, health-related inferences, or other health-related data covered by applicable law. 

BZH collects, uses, discloses, and retains consumer health data only for the purposes described in this Policy, to provide requested services, with your consent where required, or as otherwise permitted or required by law.  BZH does not sell consumer health data and does not use geofencing around health care facilities to identify, track, collect data from, or send notifications to consumers where prohibited by law.  To exercise consumer health data rights, contact BZH using the methods in the Contact Us section or use any dedicated request form made available on the Site.

11. Children’s Privacy

The Site is not directed to children under 13, and BZH does not knowingly collect personal information online from children under 13 without verifiable parental consent or other authorization permitted by law.  If we learn that we have collected personal information online from a child under 13 without required consent or authorization, we will take appropriate steps to delete the information or obtain required consent.

Parents, legal guardians, and authorized representatives may use certain BZH features on behalf of minors where permitted by law and BZH procedures.  Minor health information may be subject to additional privacy protections, consent requirements, proxy access rules, and legal limitations.

12. Security

BZH uses reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, disclosure, alteration, or destruction.  These safeguards may include access controls, authentication, encryption, monitoring, vendor oversight, workforce training, and other security measures appropriate to the nature of the information.

BZH’s security program is designed to support confidentiality, integrity, and availability of information and is informed by applicable legal requirements and recognized health care security frameworks, which may include HIPAA Security Rule safeguards, NIST cybersecurity and privacy guidance, and health care industry assurance practices.

No website, mobile application, system, or method of transmission is completely secure.  You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying BZH if you believe your account, password, device, or communications have been compromised.

13. Retention

BZH retains information for as long as reasonably necessary to fulfill the purposes described in this Internet Privacy Policy, comply with legal and regulatory requirements, maintain business and health care records, resolve disputes, enforce agreements, support security, and fraud-prevention efforts, and meet operational needs.

When information is no longer needed, BZH will delete, de-identify, aggregate, or retain it in accordance with applicable law, contractual requirements, and BZH retention policies.

14. Third-Party Links and Services

The Site may contain links to third-party websites, applications, tools, or services.  BZH is not responsible for the privacy, security, or content practices of third parties.  Your use of third-party websites, applications, tools, or services is subject to their terms and privacy policies.  We encourage you to review their privacy policies before providing information to them.

15. Social Media and Public Features

If you interact with BZH on social media or use public or interactive features, your information may be visible to other users or the public depending on the platform and your settings.  Do not post protected health information, sensitive health information, or confidential information in public or non-secure areas.

16. Accessibility and Language Assistance

BZH is committed to making privacy information accessible.  If you need this Internet Privacy Policy in an alternative format, need language assistance, or require another accommodation, please contact Member Services at 833-LIV-BLUE (548-2583) (TTY 711).

17. Changes to This Internet Privacy Policy

BZH may update this Internet Privacy Policy from time to time.  The updated version will be posted on the Site with a revised “Last Updated” date.  Where required by law, BZH will provide additional notice of material changes.  Your continued use of the Site after the effective date of an updated Internet Privacy Policy means that you acknowledge the updated policy, subject to applicable law.

18. Contact Us

If you have questions about this Internet Privacy Policy or BZH’s online privacy practices, or if you would like to submit a privacy request, please contact us:

Blue Zones Health
Attn: Compliance
3746 Foothill Boulevard #1183
Glendale, CA 91214

Email: compliance@bluezoneshealth.com
Member Services: 833-LIV-BLUE (548-2583) (TTY 711)

For questions about BZH’s use and disclosure of protected health information or your HIPAA rights, please review BZH’s Notice of Privacy Practices or contact BZH using the contact information provided in that notice.

This Internet Privacy Policy was last updated on February 1, 2026.