ASHCompanies.com Privacy Statement

Effective Date: July 1, 2024

If you are a CA resident, this statement includes your California Privacy Rights. If you are a CO resident, this statement includes your Colorado Privacy Rights. If you are a CT resident, this statement includes your Connecticut Privacy Rights. If you are a MT resident, this statement includes your Montana Privacy Rights. If you are an OR resident, this statement includes your Oregon Privacy Rights. If you are a TX resident, this statement includes your Texas Privacy Rights. If you are a UT resident, this statement includes your Utah Privacy Rights. If you are a VA resident, this statement includes your Virginia Privacy Rights.

Welcome to the ASHCompanies.com Website (the “ASHCompanies Website” or “Website”). This Website is designed for informational purposes to be used by clients and other interested parties (each, a “User” or “you”). This Website is owned and operated by American Specialty Health Incorporated, a Delaware corporation with a mailing address of 10221 Wateridge Circle, San Diego, CA 92121, on behalf of itself and its subsidiaries (collectively “ASH” or “we”).

This Privacy Statement also serves to inform you how we collect, use, disclose, and store information about you. Together with the Terms and Conditions, it governs your use of this Website. By using this Website, you accept and agree to be bound by this Privacy Statement and the Terms and Conditions.

We collect Personal Information (PI) to improve the user experience and to communicate information about our products and services. We do the same for persons applying for employment with us. ASH values its users and respects your privacy. We are committed to using your information responsibly. This Privacy Statement informs users about our information practices, including what categories of Personal Information including any Sensitive Personal Information (SPI) we collect; how the Personal Information is collected; the business purpose for which we collect the Personal Information; the types of third parties to whom we disclose Personal Information; how long we keep the Personal Information; and the choices you have about the collection and use of your Personal Information.

For any questions about this Privacy Statement, contact us directly through any means noted at the end of this Privacy Statement. If information practices change, we will post the revised policy on ASHCompanies.com. See the section titled Changes to Our Privacy Policy.

This chart is a reference guide on how ASHCompanies.com and ASH collect, use, and disclose your information regarding general website usage and the Contact Us feature of the website. This is only a summary. Review the full privacy statement below for more detail. If you are a California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, or Virginia resident or an international user, the full privacy statement below contains important information related to your privacy rights.

When you select the Careers feature of ASHCompanies.com, you will be linked to a website maintained by a service provider that supports ASH’s recruitment and hiring process by collecting and retaining application and recruitment data for ASH. ASHCompanies.com does not collect information about you when you use this feature.

If you choose not to provide your Personal Information to ASH, respective features of the website will not be available to you. To seek work at ASH, it is necessary for ASH to receive Personal Information about you.

California residents can learn more about ASH’s privacy policies relating to our employment recruitment practices and their rights under California privacy laws at ASH Recruitment Privacy Statement.

What kind of information do we collect about You?

Personal Information may be collected by ASH when you elect to use the Contact Us or Careers feature of the Website. These services require that you provide additional information to obtain the service involved. Personal Information identifies, relates to, describes, is reasonably capable of being associated with, or could be linked, directly or indirectly, with a particular consumer or household. How we obtain information about you:

• when you provide it to us (e.g., by contacting us through Contact Us, when you call us)

• from your use of our Website, using cookies

• occasionally, from our service providers.

The Contact Us feature collects information such as a name, e-mail address, and telephone number. If you provide your e-mail address, postal address, and/or telephone number to us, ASH will collect and store such information and may use it to communicate with you, at your request, to respond to your inquiry. Such inquiries are forwarded to the secured database used by the applicable ASH staff responsible for managing the inquiry. The information itself is not stored on ASHCompanies.com. If your inquiry relates to your participation in a product or service made available by us through a Sponsoring Organization, we may work with your Sponsoring Organization to resolve your inquiry and disclose information as required to the Sponsoring Organization to do so or otherwise required by applicable laws or regulations.

When you use the Careers feature of ASHCompanies.com, you will be linked to a website maintained by a service provider that supports ASH’s recruitment and hiring process by collecting and retaining application and recruitment data for ASH. ASHCompanies.com does not collect information about you when you use this feature. California residents can learn more about ASH’s privacy policies relating to our employment recruitment practices and their rights under California privacy laws at ASH Recruitment Privacy Statement.

Additionally, we may collect your IP addresses (which are numerical numbers that are automatically assigned to users’ computers and mobile devices when they use the Internet) and information obtained by tracking the "clickstreams" from usage of ASHCompanies.com (page requests, pages visited, content viewed, clicks and search queries made, etc.). We may also collect information about your use of the ASHCompanies.com Website, which cannot be used to identify you. For more information about how we collect this "Usage Information," see the section on Cookies and Other Similar Technologies.

How do we use information collected about you?

We do not sell your Personal Information to third parties.

We do not use your Personal Information for targeted advertising (e.g., cross-context behavioral advertising).

We do not use Sensitive Personal Information.

Contact Us Feature

If you communicate with us using one of the options provided on the Contact Us page of ASHCompanies.com, we will use your information to process and respond to your comment, inquiry, or request.

If you provide your name, e-mail address, postal address, and/or telephone number to us, ASH will use the information to communicate with you at your request. We may also, subject to compliance with applicable law and the nature of your inquiry, send you marketing/promotional communications about ASH’s and/or our partners’ products and services that you have indicated may be of interest to you. You may opt-out of receiving further such communications from us at any time by contacting us as described at the end of this Privacy Statement. To stop receiving further such communications via email, you can also use the “unsubscribe” link contained in an email you have previously received. For users who have requested to be removed from our email, postal mail, and/or telephone contact lists, we will add them to our internal do-not-contact lists to ensure the request is honored.

We do not knowingly disclose your Personal Information with any third party for such third party’s direct marketing use.

Careers Feature

When you use the Careers feature of ASHCompanies.com, you will be linked to a website maintained by a service provider that supports ASH’s recruitment and hiring process by collecting and retaining application and recruitment data for ASH. ASHCompanies.com does not collect information about you when you use this feature. California residents can learn more about ASH’s privacy policies relating to our employment recruitment practices and their rights under California privacy laws at ASH Recruitment Privacy Statement.

Usage Information

We use Usage Information to enhance and personalize your experience, such as to help us remember who you are and to understand and save your preferences for future visits. We may also use this information and identifiers related to Internet or electronic network activity for data analytic, security, and debugging purposes.

We may aggregate your information with other users’ information to understand how the ASHCompanies.com Website is being used, evaluate the efficacy of the Website, and to carry out other tasks relating to operation or improvement of the Website. This "Aggregate Information" is statistical data collected and pooled with all other users and it cannot be used to identify you.

Under what circumstances does ASH disclose user information collected on the ASHCompanies.com Website with third parties?

ASH may disclose your Personal Information with third parties in the following circumstances:

With Service Providers: to provide services featured such as Contact Us, for security purposes, and to support the operation, maintenance, and improvement of the Website.

For legal purposes, including as reasonably necessary to comply with law or legal process (including a court or government order or subpoena); to detect, prevent, or otherwise address fraud, security, or technical issues; to enforce this Privacy Statement or the Terms & Conditions for ASH recruitment-for-employment purposes and the use of this Website; and as reasonably necessary to protect the rights, property, or safety of ASH, ASH users, and/or the public.

During a corporate reorganization: If ASH is involved in a merger, acquisition, financing, or sale of business or assets, information collected from and about users may be transferred to one or more third parties involved in such transaction and, upon such transfer, the relevant third-party privacy policy or policies may govern further use of the information. In the event of such a change, ASH will endeavor to notify our users of the change as well as any choices our users may have regarding the change.

In addition, ASH may provide reputable third-party vendors and sponsoring organizations with aggregate statistics regarding user participation, Website traffic patterns and related Usage Information. The information so provided will not include individually identifiable information, meaning we will not share your Personal Information with these third parties.

If your inquiry using the Contact Us feature relates to your participation in a product or service made available by us through a Sponsoring Organization, we may work with your Sponsoring Organization to resolve your inquiry and disclose information as required to the Sponsoring Organization to do so or otherwise required by applicable laws or regulation.

How can you opt-out of the collection of your information?

California residents see your California Privacy Rights below. Colorado residents see your Colorado Privacy Rights below. Connecticut residents see your Connecticut Privacy Rights below. Montana residents see your Montana Privacy Rights below. Oregon residents see your Oregon Privacy Rights below. Texas residents see your Texas Privacy Rights below. Utah residents see your Utah Privacy Rights below. Virginia residents see your Virginia Privacy Rights below. The functionality of the Website and associated tools and features requires that we collect and receive certain Personal Information from and about you. If you do not wish to have your Personal Information collected or received by us, you should not use those features or the Website.

To opt-out of providing Personal Information while using ASHCompanies.com, contact ASH directly using the contact information provided at the end of this Privacy Statement. If you decide to opt-out of a particular feature that asks you to provide your information, you should not continue with the feature. If you do continue using the feature after you decide to opt-out, you may be asked again to provide your information within the feature.

How long does ASH retain my Personal Information?

ASH may retain your data for up to 10 years or longer if required by any legal obligations.

Can users delete, correct, or access their information collected on the ASHCompanies.com Website?

California residents see your California Privacy Rights below. Colorado residents see your Colorado Privacy Rights below. Connecticut residents see your Connecticut Privacy Rights below. Montana residents see your Montana Privacy Rights below. Oregon residents see your Oregon Privacy Rights below. Texas residents see your Texas Privacy Rights below. Utah residents see your Utah Privacy Rights below. Virginia residents see your Virginia Privacy Rights below. Except as expressly otherwise stated in this Privacy Statement, and except where applicable law provides otherwise, Personal Information collected on the ASHCompanies.com Website cannot be deleted or removed from ASH’s database and will be retained in accordance with ASH’s record retention policy and state and federal law.

How can users opt-out of receiving communications from ASH?

If you have provided your email address, postal address, and/or telephone number to ASH, you may opt-out of receiving marketing/promotional communications from ASH by contacting ASH as described at the end of this Privacy Statement. To stop receiving marketing/promotional communications via email, you can also use the “unsubscribe” link contained in a marketing/promotional email you have previously received from ASH. Please note that email unsubscribe requests may take up to 30 days to process once received.

For users who have requested to be removed from our email, postal address, and/or telephone contact lists, once the requests are processed, ASH will maintain an internal do-not-contact list to ensure the request is honored.

NOTE: If you opt-out regarding our marketing/promotional communications will not stop communications from ASH of a transactional nature or as required by law (e.g., communications regarding an inquiry you have made with ASH, notices regarding material changes to the ASHCompanies.com Website or its information practices, notices regarding an actual or suspected security breach that affects your information stored by or for ASH, etc.).

How does ASHCompanies.com protect the privacy of minors?

ASH is concerned about the safety of children when they use the Internet. This site is not intended for Users who have not reached the age of majority (e.g., under the age of 18 in California). If ASH becomes aware that a User is under the age of 18 and has used the site without parental consent and supervision, ASH may remove his or her Personally Identifiable information from our files.

What are cookies? How does ASHCompanies.com use cookies or similar technologies?

We use cookies and other similar technologies on the Website to help us remember who you are, to enhance and personalize your experience, to understand and save your preferences for future visits, to compile group information about our users, and to carry out other tasks relating to the operation or improvement of the Website.

• "Cookies" are small text files that are placed on your hard disk by a webpage server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you. Most web browsers are initially set to accept cookies, but you can change your browser settings to notify you when you are sent a cookie, giving you the ability to accept or reject it, or you can choose to routinely and manually delete cookies stored on your computer or mobile device. Each time you revisit the Website, your ability to restrict our use of cookies on that service is subject to your browser settings and limitations at the time. Please note that if you choose to disable or reject cookies from the Website, some portions and features of the Website may become inaccessible or may not function properly.

• We may also use "web beacons" – which can be included in web pages or in emails for reporting and analytic purposes, such as counting users who have visited a web page and/or tracking usage patterns. We do not gather Personal Information of any kind via this activity. Web beacons cannot be declined when delivered via a regular web page. However, web beacons can be refused when delivered via email. If you do not wish to receive web beacons via email, refuse HTML (select Text only) emails via your email.

• Data Analytics: We use Google Analytics to collect information to improve the Website, such as how often users visit the Website, what pages they visit when they do so, and what other websites they used prior to visiting the Website. Google Analytics places a cookie on your web browser so it can identify you the next time you visit the Website, and the cookie cannot be used by anyone but Google. Google’s ability to use and share information collected by Google Analytics about your visits to the Website is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. If you don’t want Google Analytics to be used in your browser, you can install the Google Analytics opt-out browser add-on which is available at https://tools.google.com/dlpage/gaoptout.

• Do Not Track: Some web browsers incorporate a "do-not-track" (“DNT”) or similar feature that signals to websites that a visitor does not want to have his/her online activity tracked. If a website receives a DNT signal, the browser can block that website from collecting certain information about the browser’s user. Not all browsers offer a DNT option and DNT signals are not yet uniform. For this reason, we (along with many other website operators) do not currently respond to DNT signals. For more information about DNT signals, visit https://allaboutdnt.com.

How do we safeguard information?

To maintain the confidentiality of and safeguard the security of users’ Personal Information, ASH enforces strict company-wide policies regarding privacy, security, and confidentiality.

ASH has an organizational commitment to protecting privacy and security. All employees who work at ASH and on the ASHCompanies.com Website are made aware of security policies and practices through employee orientation and annual refresher training. Personal Information is secured in isolated databases with tightly restricted access. Employees authorized to view this information are authenticated prior to gaining such access. ASH reviews web security on an ongoing basis. In addition to daily security administration and response activities, the ASHCompanies.com Website undergoes an overall security review on an annual basis.

What is the ASHCompanies.com Website’s policy regarding links to other websites and services?

Some of the features of the Website will link to other websites maintained by an ASH company. For example, the Website allows users to link to ASHLink.com. For details on the privacy statement related to that website, visit ASHLink.com. When you use the Careers feature of ASHCompanies.com, you will be linked to a Website maintained by a service provider that supports ASH’s recruitment and hiring process by collecting and retaining application and recruitment data for ASH. ASHCompanies.com does not collect information about you when you use this feature. California residents can learn more about ASH’s privacy policies relating to our employment recruitment practices and their rights under California privacy laws at ASH Recruitment Privacy Statement.

For your convenience, the ASHCompanies.com Website may also provide links to third-party websites and online services not owned or controlled by or affiliated with ASH (each, a “Linked Third-Party Website/Service”). Linking does not mean, and should not be deemed or construed to mean, that ASH endorses or approves or is affiliated with a Linked Third-Party Website/Service. ASH is not responsible for the information privacy and security policies or practices of a Linked Third-Party Website/Service. When you leave the ASHCompanies.com Website to visit a Linked Third-Party Website/Service, this Privacy Statement no longer applies, and any information collected from or about you by a Linked Third-Party Website/Service will be governed by that site/service’s privacy policies and practices, which may be substantially different from those of ASH. A Linked Third-Party Website/Service may set or use its own cookies, web beacons, etc. to your computer or mobile device, and may collect information from and about you and use the information in ways that ASH would not. You access a Linked Third-Party Website/Service entirely at your own risk. You should always read the privacy policy associated with a Linked Third-Party Website/Service before disclosing any Personal Information.

For more on Links, see the Terms and Conditions of this Website.

Note to international users.

The use of ASHCompanies.com is intended for U.S. residents. If you are outside of the United States and access the ASHCompanies.com Website or submit your Personal Information to us, please be advised that U.S. law may not offer the same privacy protections as the law of your jurisdiction. By using the Website or submitting your Personal Information to us, you consent to the transfer to and processing of your Personal Information in the United States.

CALIFORNIA RESIDENTS: Your California Privacy Rights

Under California Civil Code Section 1798.83 (known as the "shine the light" law), California residents have a right to request an information-sharing disclosure from a business to which they have provided Personal Information, and which has disclosed the information to any third party for third-party direct marketing uses in the prior calendar year.

ASH does not knowingly share your Personal Information with third parties for their direct marketing use without your permission. California residents may send requests for information-sharing disclosure under this law by contacting us by mail at the address located in the contact section below. Note that, under this law, we are not required to respond to your request more than once in a calendar year, nor are we required to respond to any requests that are not sent to the above-designated email address.

The California Privacy Rights Act (CPRA) amends the California Consumer Privacy Act (CCPA) effective January 1, 2023. The CCPA provides California residents with specific rights related to the collection, use, and disclosure of their Personal Information by us. This section discusses specific rights and elements applicable to persons who are California residents at the time we collected, used, or disclosed their Personal Information.

The CCPA and the details noted here do not apply to situations where your Personal Information is collected, used, or disclosed by us:

1. Where in our capacity as a business associate of a covered entity, we collect or maintain your Personal Information in the same manner as Protected Health Information (PHI) in compliance with privacy, security, and breach notification rules issued by the United States Department of Health and Human Services, Parts 160 and 164 of Title 45 of the Code of Federal Regulations, established pursuant to the Health Insurance Portability and Accountability Act (HIPAA) of 1996 (Public Law 104-191) and the Health Information Technology for Economic and Clinical Health (HITECH) Act (Public Law 111-5). This may apply when your access to our program is made available to you as part of a health benefit plan operated by a plan sponsor who is a covered entity under the laws noted immediately above.

2. Where your access to our program is made available to you through a sponsoring organization as part of the organizations’ policies or products subject to the federal Gramm-Leach-Bliley Act (Public Law 106-102), and implementing regulations, or the California Financial Information Privacy Act (Division 1.4 (commencing with Section 4050) of the Financial Code).

Additionally, should we receive CCPA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to either charge a reasonable fee for taking the action requested or refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

Furthermore, information collected, used, or shared through the Careers function of the ASHCompanies.com Website or our Human Resources program is not currently subject to the CCPA rights noted below.

If none of the above situations apply to you and you are a California resident, you may exercise your rights under the CCPA as described below:

Right to Know: You have the right to request that ASH disclose what Personal Information we have collected, used, disclosed, and sold, including specific pieces of Personal Information, for the date range indicated by you for records dated on or after January 1, 2020.

To request this information, you may fill out this CA Request to Know form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “California Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Know by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of Personal Information we process as outlined in this document. ASH may also deny requests if you submit the Request to Know form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Know form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Access and Portability: You have the right to receive a copy of your Personal Information and the specific pieces of your Personal Information we maintain in an easily readable electronic format. To request this information, you may fill out this CA Request to Access form and select options to receive a copy of the associated data.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “California Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Access by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know and Access form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of Personal Information we process as outlined in this document. ASH may also deny requests if you submit the Request to Know and Access form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Know and Access form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Correct: You have the right to have inaccurate Personal Information we maintain about you corrected. To request this information, you may fill out this CA Request to Correct form to specify which information requires correction.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “California Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Correct by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Correct form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request. We may also deny the request, in whole or in part, if we determine the contested Personal Information is more likely than not accurate based on the totality of circumstances. We may also deny a request if it involves the same alleged inaccuracy previously denied within the past 6 months should the request not provide new or additional documentation attempting to prove the inaccuracy. We may also deny a request if we have a good-faith, reasonable and documented belief the request is fraudulent or abusive.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Correct form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Delete: You have the right to request the deletion of your Personal Information collected or maintained by ASH.

To request this information, you may fill out this CA Request to Delete form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “California Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Delete by phone at (844) 646-2746.

ASH will verify your request in a two-step verification process. First, ASH will match information provided by you in the Request to Delete form to information housed in our internal systems. We will verify your first and last name plus two other identifiers. Second, ASH will contact you to verify your identity and confirm your request, such contact may be made by phone or email.

If we are unable to verify the request, we will deny the request and provide notice of such denial. ASH may also deny requests if you submit the Request to Delete form more than twice in a calendar year or if your request is not sent to the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Delete form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

In response to your request, ASH may deny or grant your request. If ASH grants your request, we will notify you as to which of the following methods ASH has used to fulfill your request. We may do one of the following: (1) permanently delete your information from our systems; (2) deidentify your information; or (3) aggregate your information in accordance with CCPA requirements.

A denial of a deletion request may occur if ASH requires the use of your Personal Information to complete a transaction or provide services on your behalf; to detect security incidents and prosecute those responsible; to debug and repair errors that impair existing functionality; to exercise free speech or allow you to exercise free speech or any other right; to comply with the California Electronic Communications Privacy Act; to engage in public or peer-reviewed research with informed consent if deletion would seriously impair the achievement of such research; to enable solely internal uses that are reasonably aligned with the business relationship between you and ASH; or to comply with a legal obligation.

No Fee for Requests for Rights to Know/Access/Portability, Correct, or Delete: ASH does not charge a fee to exercise these rights. However, should we receive CCPA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

Right to Non-Discrimination: You have the right to exercise your privacy rights to know and to delete without facing discrimination of service or product offerings. Your use of ASHCompanies.com will remain the same whether you exercise your Right to Know or Right to Delete under the CCPA.

Right to Authorize an Agent: You have the right to authorize an agent to assist with exercising California privacy rights on your behalf. To authorize an agent, you may fill out this CCPA Authorized Agent form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “California Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Authorize by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide notice of such denial.

Right to Opt-Out: ASH does not sell or knowingly share your Personal Information with third parties for non-permitted uses including direct marketing or targeted advertising (i.e., cross-context behavioral advertising). California residents may send requests for information-sharing disclosure under this law by emailing us at HIPAA@ashn.com with the subject line “California Privacy Rights,” by phone at (844) 646-2746, or by mail at the address located in the contact section below. Note that, under this law, we are not required to respond to your request more than twice in a calendar year, nor are we required to respond to any requests that are not sent to the designated email, phone number, or address.

Additionally, should we receive CCPA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to either charge a reasonable fee for taking the action requested or refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

COLORADO RESIDENTS: Your Colorado Privacy Rights

The Colorado Privacy Act (“CPA”) provides Colorado residents with specific rights related to the collection, use and disclosure of their personal information by us.

While our privacy practices have adopted many of the CPA requirements across our program, this section discusses specific rights and elements applicable to persons who are Colorado residents at the time we collected, used, or disclosed your personal information.

Your rights in relation to your information:

Right to Know: You have the right to request that ASH disclose what personal information we have collected, used, disclosed, and sold.

To request this information, you may fill out this CO Request to Know form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Colorado Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Know by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Right to Know Form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of personal information we process as outlined in this document. ASH may also deny requests if you submit the Right to Know Form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Right to Know Form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Access and Portability: You have the right to receive a copy of your personal information we maintain in an easily readable electronic format. To request this information, you may fill out this CO Request to Access form and select the option to receive a copy of the associated data.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Colorado Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Access and Portability by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Right to Know and Access Form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of personal information we process as outlined in this document. ASH may also deny requests if you submit the Right to Know and Access Form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address. If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this CO Request to Appeal form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Colorado Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 45 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Colorado Attorney General.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Right to Know and Access form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Correct: You have the right to have inaccurate personal information we maintain about you corrected. To request this information, you may fill out this CO Request to Correct form to specify which information requires correction.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Colorado Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Correct by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Right to Correct Form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request. We may also deny the request, in whole or in part, if we determine the contested PI is more likely than not accurate based on the totality of circumstances. We may also deny a request if it involves the same alleged inaccuracy previously denied within the past 6 months should the request not provide new or additional documentation attempting to prove the inaccuracy. We may also deny a request if we have a good-faith, reasonable and documented belief the request is fraudulent or abusive.

If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this CO Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Colorado Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 45 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Colorado Attorney General.

Right to Delete: You have the right to request the deletion of your personal information collected or maintained by ASH.

To request this information, you may fill out this CO Request to Delete form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Colorado Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Delete by phone at (844) 646-2746.

ASH will verify your request in a two-step verification process. First, ASH will match information provided by you in the Right to Delete Form to information housed in our internal systems. Second, ASH will contact you to verify your identity and confirm your request, such contact may be made by phone or email.

If we are unable to verify the request, we will deny the request and provide notice of such denial. ASH may also deny requests if you submit the Right to Delete Form more than twice in a calendar year or if your request is not sent to the designated email, phone number, or address. If we deny your request, you have a right to appeal that decision. Our response to you will include instructions on how you can appeal the denial.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Right to Delete Form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

In response to your request, ASH may deny or grant your request. If ASH grants your request, we will notify you as to which of the following methods ASH has used to fulfill your request. We may do one of the following: (1) permanently delete your information from our systems; (2) deidentify your information; or (3) aggregate your information in accordance with CPA requirements.

ASH may be unable to delete spouse/domestic partner account information related to account activity controlled by the Primary Account Holder.

A denial of a deletion request may occur if ASH requires the use of your personal information to complete a transaction or provide services on your behalf, to detect security incidents and prosecute those responsible, to debug and repair errors that impair existing functionality, to exercise free speech or allow you to exercise free speech or any other right, to engage in public or peer-reviewed research with informed consent if deletion would seriously impair the achievement of such research, to enable solely internal uses that are reasonably aligned with the business relationship between you and ASH, or to comply with a legal obligation.

To appeal a denial, you may fill out this CO Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Colorado Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 45 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Colorado Attorney General.

No Fee for Requests for Rights to Know/Access/Portability, Correct or Delete: ASH does not charge a fee to exercise these rights. However, should we receive CPA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

Right to Non-Discrimination: You have the right to exercise your privacy rights to know and to delete without facing discrimination of service or product offerings. Your use of Active&Fit Enterprise will remain the same whether you exercise your Right to Know or Right to Delete under the CPA.

Right to Opt-Out of Targeted Advertising: ASH does not sell or knowingly share your Personal Information with third parties for non-permitted uses including direct marketing or targeted advertising (i.e., cross-context behavioral advertising). Colorado residents may send requests for information-sharing disclosure under this law by emailing us at HIPAA@ashn.com, phone (844) 646-2746, or by mail at the address located in the contact section below. Note that, under this law, we are not required to respond to your request more than twice in a calendar year, nor are we required to respond to any requests that are not sent to the designated email, phone number, or address.

CONNECTICUT RESIDENTS: Your Connecticut Privacy Rights

The Connecticut Data Protection Act (“CTDPA”) provides Connecticut residents with specific rights related to the collection, use and disclosure of their personal information by us.

While our privacy practices have adopted many of the CTDPA requirements across our program, this section discusses specific rights and elements applicable to persons who are Connecticut residents at the time we collected, used, or disclosed your personal information.

Your rights in relation to your information:

Right to Know: You have the right to request that ASH disclose what personal information we have collected, used, disclosed, and sold.

To request this information, you may fill out this CT Request to Know form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Connecticut Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Know by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Right to Know Form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of personal information we process as outlined in this document. ASH may also deny requests if you submit the Right to Know Form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Right to Know Form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Access and Portability: You have the right to receive a copy of your personal information we maintain in an easily readable electronic format. To request this information, you may fill out this CT Request to Access form and select the option to receive a copy of the associated data.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Connecticut Data Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Access and Portability by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Right to Know and Access Form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of personal information we process as outlined in this document. ASH may also deny requests if you submit the Right to Know and Access Form more than twice in a calendar year, the request is determined to be technically infeasible or unreasonably burdensome, or if your request is not submitted online or using the designated email, phone number, or address. If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this CT Request to Appeal form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Connecticut Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Connecticut Attorney General.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Right to Know and Access Form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Correct: You have the right to have inaccurate personal information we maintain about you corrected. To request this information, you may fill out this CT Request to Correct form to specify which information requires correction.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Connecticut Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Correct by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Right to Correct Form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request. We may also deny the request, in whole or in part, if we determine the contested PI is more likely than not accurate based on the totality of circumstances. We may also deny a request if it involves the same alleged inaccuracy previously denied within the past 6 months should the request not provide new or additional documentation attempting to prove the inaccuracy. We may also deny a request if we have a good-faith, reasonable and documented belief the request is fraudulent or abusive.

If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this CT Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Connecticut Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Connecticut Attorney General.

Right to Delete: You have the right to request the deletion of your personal information collected or maintained by ASH.

To request this information, you may fill out this CT Request to Delete form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Connecticut Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Delete by phone at (844) 646-2746.

ASH will verify your request in a two-step verification process. First, ASH will match information provided by you in the Right to Delete Form to information housed in our internal systems. Second, ASH will contact you to verify your identity and confirm your request, such contact may be made by phone or email.

If we are unable to verify the request, we will deny the request and provide notice of such denial. ASH may also deny requests if you submit the Right to Delete Form more than twice in a calendar year or if your request is not sent to the designated email, phone number, or address. If we deny your request, you have a right to appeal that decision. Our response to you will include instructions on how you can appeal the denial.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Right to Delete Form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

In response to your request, ASH may deny or grant your request. If ASH grants your request, we will notify you as to which of the following methods ASH has used to fulfill your request. We may do one of the following: (1) permanently delete your information from our systems; (2) deidentify your information; or (3) aggregate your information in accordance with CTDPA requirements.

ASH may be unable to delete spouse/domestic partner account information related to account activity controlled by the Primary Account Holder.

A denial of a deletion request may occur if ASH requires the use of your personal information to complete a transaction or provide services on your behalf, to detect security incidents and prosecute those responsible, to debug and repair errors that impair existing functionality, to exercise free speech or allow you to exercise free speech or any other right, to engage in public or peer-reviewed research with informed consent if deletion would seriously impair the achievement of such research, to enable solely internal uses that are reasonably aligned with the business relationship between you and ASH, or to comply with a legal obligation.

To appeal a denial, you may fill out this CT Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Connecticut Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Connecticut Attorney General.

Right to Revoke Consent: You have the right to revoke consent for processing your personal information by ASH.

To revoke consent, you may fill out this CT Request to Revoke Consent form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Connecticut Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Revoke Consent by phone at (844) 646-2746.

ASH will verify your request in a two-step verification process. First, ASH will match information provided by you in the Right to Revoke Consent Form to information housed in our internal systems. Second, ASH will contact you to verify your identity and confirm your request, such contact may be made by phone or email.

If we are unable to verify the request, we will deny the request and provide notice of such denial. If we deny your request, you have a right to appeal that decision. Our response to you will include instructions on how you can appeal the denial.

If ASH is able to verify and grants your request, we will cease future processing of your personal information within 15 days of the request, in accordance with CTDPA requirements. Note that revocation of consent to process personal information will result in certain features of the Website no longer being available to you.

No Fee for Requests for Rights to Know/Access/Portability, Correct or Delete: ASH does not charge a fee to exercise these rights. However, should we receive CTDPA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

Right to Non-Discrimination: You have the right to exercise your privacy rights to know and to delete without facing discrimination of service or product offerings. Your use of Active&Fit Enterprise will remain the same whether you exercise your Right to Know or Right to Delete under the CTDPA.

Right to Opt-Out of Targeted Advertising: ASH does not sell or knowingly share your Personal Information with third parties for non-permitted uses including direct marketing or targeted advertising (i.e., cross-context behavioral advertising). Connecticut residents or their authorized agent may send requests for information-sharing disclosure under this law by emailing us at HIPAA@ashn.com, phone (844) 646-2746, or by mail at the address located in the contact section below. Note that, under this law, we are not required to respond to your request more than twice in a calendar year, nor are we required to respond to any requests that are not sent to the designated email, phone number, or address.

MONTANA RESIDENTS: Your Montana Privacy Rights

The Montana Consumer Data Privacy Act (“MTCDPA”) provides Montana residents with specific rights related to the collection, use, and disclosure of their Personal Information by us.

While our privacy practices have adopted many of the MTCDPA requirements across our program, this section discusses specific rights and elements applicable to persons who are Montana residents at the time we collected, used, or disclosed your Personal Information.

Your rights in relation to your information:

Right to Know: You have the right to request that ASH disclose what Personal Information we have collected, used, disclosed, and sold.

To request this information, you may fill out this MT Request to Know form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Montana Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Know by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of Personal Information we process as outlined in this document. ASH may also deny requests if you submit the Request to Know form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Know form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Access and Portability: You have the right to receive a copy of your Personal Information and the specific pieces of your Personal Information we maintain in an easily readable electronic format. To request this information, you may fill out this MT Request to Access form and select options to receive a copy of the associated data.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Montana Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Access by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know and Access form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of Personal Information we process as outlined in this document. ASH may also deny requests if you submit the Request to Know and Access form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address. If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this MT Request to Appeal form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Montana Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Montana Attorney General.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Know and Access form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Correct: You have the right to have inaccurate Personal Information we maintain about you corrected. To request this information, you may fill out this MT Request to Correct form to specify which information requires correction.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Montana Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Correct by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Correct form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request. We may also deny the request, in whole or in part, if we determine the contested PI is more likely than not accurate based on the totality of circumstances. We may also deny a request if it involves the same alleged inaccuracy previously denied within the past 6 months should the request not provide new or additional documentation attempting to prove the inaccuracy. We may also deny a request if we have a good-faith, reasonable, and documented belief the request is fraudulent or abusive.

If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this MT Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Montana Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Montana Attorney General.

Right to Delete: You have the right to request the deletion of your Personal Information collected or maintained by ASH.

To request this information, you may fill out this MT Request to Delete form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Montana Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Delete by phone at (844) 646-2746.

ASH will verify your request in a two-step verification process. First, ASH will match information provided by you in the Request to Delete form to information housed in our internal systems. Second, ASH will contact you to verify your identity and confirm your request; such contact may be made by phone or email.

If we are unable to verify the request, we will deny the request and provide notice of such denial. ASH may also deny requests if you submit the Request to Delete form more than twice in a calendar year or if your request is not sent to the designated email, phone number, or address. If we deny your request, you have a right to appeal that decision. Our response to you will include instructions on how you can appeal the denial.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Delete form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

In response to your request, ASH may deny or grant your request. If ASH grants your request, we will notify you as to which of the following methods ASH has used to fulfill your request. We may do one of the following: (1) permanently delete your information from our systems; (2) deidentify your information; or (3) aggregate your information in accordance with MTCDPA requirements.

A denial of a deletion request may occur if ASH requires the use of your Personal Information to complete a transaction or provide services on your behalf; to detect security incidents and prosecute those responsible; to debug and repair errors that impair existing functionality; to exercise free speech or allow you to exercise free speech or any other right; to engage in public or peer-reviewed research with informed consent if deletion would seriously impair the achievement of such research; to enable solely internal uses that are reasonably aligned with the business relationship between you and ASH; or to comply with a legal obligation.

To appeal a denial, you may fill out this MT Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Montana Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Montana Attorney General.

No Fee for Requests for Rights to Know/Access/Portability, Correct or Delete: ASH does not charge a fee to exercise these rights. However, should we receive MTCDPA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

Right to Non-Discrimination: You have the right to exercise your privacy rights to know and to delete without facing discrimination of service or product offerings. Your use of the Website will remain the same whether you exercise your Right to Know or Right to Delete under the MTCDPA.

Right to Authorize an Agent: You have the right to authorize an agent to assist with exercising applicable Montana privacy rights on your behalf. To authorize an agent, you may fill out this MT Authorized Agent form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Montana Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Authorize by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide notice of such denial.

Right to Opt-Out: ASH does not sell or knowingly share your Personal Information with third parties for non-permitted uses including direct marketing or targeted advertising (i.e., cross-context behavioral advertising). Montana residents may send requests for information-sharing disclosure under this law by emailing us at HIPAA@ashn.com with the subject line “Montana Privacy Rights”, by phone at (844) 646-2746, or by mail at the address located in the contact section below. Note that, under this law, we are not required to respond to your request more than twice in a calendar year, nor are we required to respond to any requests that are not sent to the designated email, phone number, or address.

Additionally, should we receive MTCDPA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to either charge a reasonable fee for taking the action requested or refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

OREGON RESIDENTS: Your Oregon Privacy Rights

The Oregon Consumer Privacy Act (“OCPA”) provides Oregon residents with specific rights related to the collection, use, and disclosure of their Personal Information by us.

While our privacy practices have adopted many of the OCPA requirements across our program, this section discusses specific rights and elements applicable to persons who are Oregon residents at the time we collected, used, or disclosed your Personal Information.

Your rights in relation to your information:

Right to Know: You have the right to request that ASH disclose what Personal Information we have collected, used, disclosed, and sold.

To request this information, you may fill out this OR Request to Know form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Oregon Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Know by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of Personal Information we process as outlined in this document. ASH may also deny requests if you submit the Request to Know form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Know form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Access and Portability: You have the right to receive a copy of your Personal Information and the specific pieces of your Personal Information we maintain in an easily readable electronic format. To request this information, you may fill out this OR Request to Access form and select options to receive a copy of the associated data.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Oregon Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Access by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know and Access form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of Personal Information we process as outlined in this document. ASH may also deny requests if you submit the Request to Know and Access form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address. If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this OR Request to Appeal form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Oregon Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 45 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Oregon Attorney General.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Know and Access form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Correct: You have the right to have inaccurate Personal Information we maintain about you corrected. To request this information, you may fill out this OR Request to Correct form to specify which information requires correction.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Oregon Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Correct by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Correct form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request. We may also deny the request, in whole or in part, if we determine the contested PI is more likely than not accurate based on the totality of circumstances. We may also deny a request if it involves the same alleged inaccuracy previously denied within the past 6 months should the request not provide new or additional documentation attempting to prove the inaccuracy. We may also deny a request if we have a good-faith, reasonable, and documented belief the request is fraudulent or abusive.

If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this OR Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Oregon Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 45 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Oregon Attorney General.

Right to Delete: You have the right to request the deletion of your Personal Information collected or maintained by ASH.

To request this information, you may fill out this OR Request to Delete form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Oregon Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Delete by phone at (844) 646-2746.

ASH will verify your request in a two-step verification process. First, ASH will match information provided by you in the Request to Delete form to information housed in our internal systems. Second, ASH will contact you to verify your identity and confirm your request; such contact may be made by phone or email.

If we are unable to verify the request, we will deny the request and provide notice of such denial. ASH may also deny requests if you submit the Request to Delete form more than twice in a calendar year or if your request is not sent to the designated email, phone number, or address. If we deny your request, you have a right to appeal that decision. Our response to you will include instructions on how you can appeal the denial.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Delete form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

In response to your request, ASH may deny or grant your request. If ASH grants your request, we will notify you as to which of the following methods ASH has used to fulfill your request. We may do one of the following: (1) permanently delete your information from our systems; (2) deidentify your information; or (3) aggregate your information in accordance with OCPA requirements.

A denial of a deletion request may occur if ASH requires the use of your Personal Information to complete a transaction or provide services on your behalf; to detect security incidents and prosecute those responsible; to debug and repair errors that impair existing functionality; to exercise free speech or allow you to exercise free speech or any other right; to engage in public or peer-reviewed research with informed consent if deletion would seriously impair the achievement of such research; to enable solely internal uses that are reasonably aligned with the business relationship between you and ASH; or to comply with a legal obligation.

To appeal a denial, you may fill out this OR Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Oregon Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 45 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Oregon Attorney General.

Right to Revoke Consent: You have the right to revoke consent for processing your personal information by ASH.

To revoke consent, you may fill out this OR Request to Revoke Consent form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Oregon Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Revoke Consent by phone at (844) 646-2746.

ASH will verify your request in a two-step verification process. First, ASH will match information provided by you in the Right to Revoke Consent Form to information housed in our internal systems. Second, ASH will contact you to verify your identity and confirm your request, such contact may be made by phone or email.

If we are unable to verify the request, we will deny the request and provide notice of such denial. If we deny your request, you have a right to appeal that decision. Our response to you will include instructions on how you can appeal the denial.

If ASH is able to verify and grants your request, we will cease future processing of your personal information within 15 days of the request, in accordance with OCPA requirements. Note that revocation of consent to process personal information will result in certain features of the Website no longer being available to you.

No Fee for Requests for Rights to Know/Access/Portability, Correct or Delete: ASH does not charge a fee to exercise these rights. However, should we receive OCPA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

Right to Non-Discrimination: You have the right to exercise your privacy rights to know and to delete without facing discrimination of service or product offerings. Your use of the Website will remain the same whether you exercise your Right to Know or Right to Delete under the OCPA.

Right to Authorize an Agent: You have the right to authorize an agent to assist with exercising applicable Oregon privacy rights on your behalf. To authorize an agent, you may fill out this OR Authorized Agent form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Oregon Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Authorize by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide notice of such denial.

TEXAS RESIDENTS: Your Texas Privacy Rights

The Texas Data Privacy and Security Act (“TDPSA”) provides Texas residents with specific rights related to the collection, use, and disclosure of their Personal Information by us.

While our privacy practices have adopted many of the TDPSA requirements across our program, this section discusses specific rights and elements applicable to persons who are Texas residents at the time we collected, used, or disclosed your Personal Information.

Your rights in relation to your information:

Right to Know: You have the right to request that ASH disclose what Personal Information we have collected, used, disclosed, and sold.

To request this information, you may fill out this TX Request to Know form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Texas Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Know by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of Personal Information we process as outlined in this document. ASH may also deny requests if you submit the Request to Know form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Know form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Access and Portability: You have the right to receive a copy of your Personal Information and the specific pieces of your Personal Information we maintain in an easily readable electronic format. To request this information, you may fill out this TX Request to Access form and select options to receive a copy of the associated data.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Texas Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Access by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know and Access form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of Personal Information we process as outlined in this document. ASH may also deny requests if you submit the Request to Know and Access form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address. If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this TX Request to Appeal form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Texas Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Texas Attorney General.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Know and Access form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Correct: You have the right to have inaccurate Personal Information we maintain about you corrected. To request this information, you may fill out this TX Request to Correct form to specify which information requires correction.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Texas Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Correct by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Correct form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request. We may also deny the request, in whole or in part, if we determine the contested PI is more likely than not accurate based on the totality of circumstances. We may also deny a request if it involves the same alleged inaccuracy previously denied within the past 6 months should the request not provide new or additional documentation attempting to prove the inaccuracy. We may also deny a request if we have a good-faith, reasonable, and documented belief the request is fraudulent or abusive.

If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this TX Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Texas Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Texas Attorney General.

Right to Delete: You have the right to request the deletion of your Personal Information collected or maintained by ASH.

To request this information, you may fill out this TX Request to Delete form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Texas Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Delete by phone at (844) 646-2746.

ASH will verify your request in a two-step verification process. First, ASH will match information provided by you in the Request to Delete form to information housed in our internal systems. Second, ASH will contact you to verify your identity and confirm your request; such contact may be made by phone or email.

If we are unable to verify the request, we will deny the request and provide notice of such denial. ASH may also deny requests if you submit the Request to Delete form more than twice in a calendar year or if your request is not sent to the designated email, phone number, or address. If we deny your request, you have a right to appeal that decision. Our response to you will include instructions on how you can appeal the denial.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Delete form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

In response to your request, ASH may deny or grant your request. If ASH grants your request, we will notify you as to which of the following methods ASH has used to fulfill your request. We may do one of the following: (1) permanently delete your information from our systems; (2) deidentify your information; or (3) aggregate your information in accordance with TDPSA requirements.

A denial of a deletion request may occur if ASH requires the use of your Personal Information to complete a transaction or provide services on your behalf; to detect security incidents and prosecute those responsible; to debug and repair errors that impair existing functionality; to exercise free speech or allow you to exercise free speech or any other right; to engage in public or peer-reviewed research with informed consent if deletion would seriously impair the achievement of such research; to enable solely internal uses that are reasonably aligned with the business relationship between you and ASH; or to comply with a legal obligation.

To appeal a denial, you may fill out this TX Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Texas Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Texas Attorney General.

No Fee for Requests for Rights to Know/Access/Portability, Correct or Delete: ASH does not charge a fee to exercise these rights. However, should we receive TDPSA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

Right to Non-Discrimination: You have the right to exercise your privacy rights to know and to delete without facing discrimination of service or product offerings. Your use of the Website will remain the same whether you exercise your Right to Know or Right to Delete under the TDPSA.

Right to Authorize an Agent: You have the right to authorize an agent to assist with exercising applicable Texas privacy rights on your behalf. To authorize an agent, you may fill out this TX Authorized Agent form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Texas Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Authorize by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide notice of such denial.

Right to Opt-Out: ASH does not sell or knowingly share your Personal Information with third parties for non-permitted uses including direct marketing or targeted advertising (i.e., cross-context behavioral advertising). Texas residents may send requests for information-sharing disclosure under this law by emailing us at HIPAA@ashn.com with the subject line “Texas Privacy Rights,” by phone at (844) 646-2746, or by mail at the address located in the contact section below. Note that, under this law, we are not required to respond to your request more than twice in a calendar year, nor are we required to respond to any requests that are not sent to the designated email, phone number, or address.

Additionally, should we receive TDPSA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to either charge a reasonable fee for taking the action requested or refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

UTAH RESIDENTS: Your Utah Privacy Rights

The Utah Consumer Privacy Act (“UCPA”) provides Utah residents with specific rights related to the collection, use and disclosure of their personal information by us.

While our privacy practices have adopted many of the UCPA requirements across our program, this section discusses specific rights and elements applicable to persons who are Utah residents at the time we collected, used, or disclosed your personal information.

Your rights in relation to your information:

Right to Know: You have the right to request that ASH disclose what personal information we have collected, used, disclosed, and sold.

To request this information, you may fill out this UT Request to Know form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Utah Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Know by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of personal information we process as outlined in this document. ASH may also deny requests if you submit the Request to Know form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Know form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Access and Portability: You have the right to receive a copy of your personal information we maintain in an easily readable electronic format. To request this information, you may fill out this UT Request to Access form and select the option to receive a copy of the associated data.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Utah Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Access and Portability by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Right to Know and Access Form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of personal information we process as outlined in this document. ASH may also deny requests if you submit the Right to Know and Access Form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Right to Know and Access Form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Delete: You have the right to request the deletion of your personal information collected or maintained by ASH.

To request this information, you may fill out this UT Request to Delete form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Utah Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Delete by phone at (844) 646-2746.

ASH will verify your request in a two-step verification process. First, ASH will match information provided by you in the Right to Delete Form to information housed in our internal systems. Second, ASH will contact you to verify your identity and confirm your request, such contact may be made by phone or email.

If we are unable to verify the request, we will deny the request and provide notice of such denial. ASH may also deny requests if you submit the Right to Delete Form more than twice in a calendar year or if your request is not sent to the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Delete Form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

In response to your request, ASH may deny or grant your request. If ASH grants your request, we will notify you as to which of the following methods ASH has used to fulfill your request. We may do one of the following: (1) permanently delete your information from our systems; (2) deidentify your information; or (3) aggregate your information in accordance with UCPA requirements.

ASH may be unable to delete spouse/domestic partner account information related to account activity controlled by the Primary Account Holder.

A denial of a deletion request may occur if ASH requires the use of your personal information to complete a transaction or provide services on your behalf, to detect security incidents and prosecute those responsible, to debug and repair errors that impair existing functionality, to exercise free speech or allow you to exercise free speech or any other right, to engage in public or peer-reviewed research with informed consent if deletion would seriously impair the achievement of such research, to enable solely internal uses that are reasonably aligned with the business relationship between you and ASH, or to comply with a legal obligation.

No Fee for Requests for Rights to Know/Access/Portability or Delete: ASH does not charge a fee to exercise these rights. However, should we receive UCPA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

Right to Non-Discrimination: You have the right to exercise your privacy rights to know and to delete without facing discrimination of service or product offerings. Your use of Active&Fit Direct will remain the same whether you exercise your Right to Know or Right to Delete under the UCPA.

VIRGINIA RESIDENTS: Your Virginia Privacy Rights

The Virginia Consumer Data Protection Act (“VCDPA”) provides Virginia residents with specific rights related to the collection, use, and disclosure of their Personal Information by us.

While our privacy practices have adopted many of the VCDPA requirements across our program, this section discusses specific rights and elements applicable to persons who are Virginia residents at the time we collected, used, or disclosed your Personal Information.

Your rights in relation to your information:

Right to Know: You have the right to request that ASH disclose what Personal Information we have collected, used, disclosed, and sold.

To request this information, you may fill out this VA Request to Know form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Virginia Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Know by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of Personal Information we process as outlined in this document. ASH may also deny requests if you submit the Request to Know form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Know form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Access and Portability: You have the right to receive a copy of your Personal Information and the specific pieces of your Personal Information we maintain in an easily readable electronic format. To request this information, you may fill out this VA Request to Access form and select options to receive a copy of the associated data.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Virginia Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Access by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Know and Access form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request and provide only general information about the type of Personal Information we process as outlined in this document. ASH may also deny requests if you submit the Request to Know and Access form more than twice in a calendar year or if your request is not submitted online or using the designated email, phone number, or address.

If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this VA Request to Appeal form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Virginia Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Virginia Attorney General.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Know and Access form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

Right to Correct: You have the right to have inaccurate Personal Information we maintain about you corrected. To request this information, you may fill out this VA Request to Correct form to specify which information requires correction.

You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Virginia Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Correct by phone at (844) 646-2746.

ASH will verify your request by matching information provided by you in the Request to Correct form to information housed in our internal systems.

If we are unable to verify the request, we will deny the request. We may also deny the request, in whole or in part, if we determine the contested PI is more likely than not accurate based on the totality of circumstances. We may also deny a request if it involves the same alleged inaccuracy previously denied within the past 6 months should the request not provide new or additional documentation attempting to prove the inaccuracy. We may also deny a request if we have a good-faith, reasonable, and documented belief the request is fraudulent or abusive.

If we deny your request, you have a right to appeal that decision. To appeal, you may fill out this VA Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Virginia Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Virginia Attorney General.

Right to Delete: You have the right to request the deletion of your Personal Information collected or maintained by ASH.

To request this information, you may fill out this VA Request to Delete form. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Virginia Privacy Rights” or by mailing said form to our address below. You may also utilize your Right to Delete by phone at (844) 646-2746.

ASH will verify your request in a two-step verification process. First, ASH will match information provided by you in the Request to Delete form to information housed in our internal systems. Second, ASH will contact you to verify your identity and confirm your request; such contact may be made by phone or email.

If we are unable to verify the request, we will deny the request and provide notice of such denial. ASH may also deny requests if you submit the Request to Delete form more than twice in a calendar year or if your request is not sent to the designated email, phone number, or address. If we deny your request, you have a right to appeal that decision. Our response to you will include instructions on how you can appeal the denial.

ASH will grant, deny, or respond to a request within 45 days of receipt of the Request to Delete form. If an extension of time (up to a maximum of 90 days) is required, we will notify you and provide additional information about the process.

In response to your request, ASH may deny or grant your request. If ASH grants your request, we will notify you as to which of the following methods ASH has used to fulfill your request. We may do one of the following: (1) permanently delete your information from our systems; (2) deidentify your information; or (3) aggregate your information in accordance with VCDPA requirements.

A denial of a deletion request may occur if ASH requires the use of your Personal Information to complete a transaction or provide services on your behalf; to detect security incidents and prosecute those responsible; to debug and repair errors that impair existing functionality; to exercise free speech or allow you to exercise free speech or any other right; to engage in public or peer-reviewed research with informed consent if deletion would seriously impair the achievement of such research; to enable solely internal uses that are reasonably aligned with the business relationship between you and ASH; or to comply with a legal obligation.

To appeal a denial, you may fill out this VA Request to Appeal form to specify which information requires correction. You may submit this form by emailing us at HIPAA@ashn.com with the subject line “Virginia Privacy Rights” or by mailing said form to our address below. You may also call (844) 646-2746. We will reply to your appeal in writing within 60 days of receipt. If we deny your appeal, we will provide instructions for how you can submit a complaint with the Virginia Attorney General.

No Fee for Requests for Rights to Know/Access/Portability, Correct or Delete: ASH does not charge a fee to exercise these rights. However, should we receive VCDPA-related requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve the ability to refuse to act on the request. If we refuse your request on this basis, we will notify you of the reason.

Right to Non-Discrimination: You have the right to exercise your privacy rights to know and to delete without facing discrimination of service or product offerings. Your use of Active&Fit Direct will remain the same whether you exercise your Right to Know or Right to Delete under the VCDPA.

Changes to Our Privacy Policy

ASH reserves the right to make changes to this Privacy Statement at any time by posting the modified policy on this Website. Modifications shall be effective when they are posted on this Website. Such posting shall constitute notice to you. Your continued use of the Website following the posting of any such modifications on this Website will mean you accept and agree to be bound by such modifications.

We encourage you to check this Website regularly to see if we have made any modifications to this Privacy Statement.

How to contact ASHCompanies.com?

Questions and requests may be submitted through the Contact Us page of the ASHCompanies.com Website, or using the following contact information:

U.S. Mail

ASHCompanies.com Customer Service

P.O. Box 509117

San Diego, CA 92150-9117

By Phone

(844) 646-2746, 8:00am to 5:00pm, Monday through Friday (except some holidays).

E-mail

HIPAA@ashn.com

If you need assistance with or require this Privacy Statement in an alternative format, please contact us at (844) 646-2746.

Privacy and Security Contact Information

ASH has a designated Privacy Officer and a Chief Information Security Officer to oversee our privacy and security programs. You may direct questions about these programs to these individuals by either calling (844) 646-2746 or emailing HIPAA@ashn.com.

Use of this Website is governed by the ASHCompanies.com Terms and Conditions.