Privacy Policy

In this policy, "Everest Health," "we," "us," and "our" refer to Everest Health Partners, LLC, a Virginia limited liability company with its principal office at 8065 Leesburg Pike, Suite 100, Vienna, Virginia 22182. "You" refers to the person visiting our website or otherwise interacting with us. This policy applies to goeverest.com and to the forms, communications, and marketing activities connected to it.

This policy and HIPAA

Everest Health is a medical practice. Protected health information that we create or receive as part of your care is governed by the Health Insurance Portability and Accountability Act (HIPAA) and by our Notice of Privacy Practices, which is provided to patients and available on request. This Privacy Policy covers information collected through our website and general communications, such as inquiries, marketing, and analytics. If anything in this policy conflicts with our Notice of Privacy Practices with respect to protected health information, the Notice of Privacy Practices controls.

Information we collect

Information you provide

• Contact details, such as your name, email address, phone number, and mailing address, when you submit a form, request information, book a call, or communicate with us.
• Responses you choose to submit through tools on our site, such as the Health Clarity Assessment or intake and contact forms.
• The contents of messages you send us by email, text message, or through our forms.
• Records of your communication preferences and consents, including consent to receive text messages.

Information collected automatically

• Usage data such as your IP address, browser type and version, device identifiers, operating system, the pages you visit, the time and date of your visit, and how long you spend on each page.
• Cookies and similar technologies used to operate the site, remember preferences, and measure how the site is used. You can control cookies through your browser settings.

Payment information

Payments and financing are processed by third parties, such as our practice management platform and, where you choose them, Cherry, CareCredit, or Affirm. We do not store full payment card numbers on our website.

How we use information

• To respond to inquiries, schedule consultations, and provide our services.
• To operate, maintain, secure, and improve our website and programs.
• To send appointment reminders, service updates, and administrative messages.
• To send marketing communications where you have consented or where otherwise permitted by law, with the ability to opt out at any time.
• To comply with legal obligations and to establish, exercise, or defend legal claims.

How we share information

We do not sell personal information, and we do not share it with third parties for their own independent marketing. We share information only in the following circumstances:

• With service providers that process information on our behalf under contractual protections. These currently include GoHighLevel, which powers our customer relationship management, forms, and communications; Elation Health, which provides our electronic health record, scheduling, and the Elation Patient Passport portal; the Methuselah Foundation, which operates MORRB, the health visualization platform in which members see their results, under contractual protections; and website analytics and advertising measurement providers such as Google (Analytics and Tag Manager), Meta, and iHeartMedia, as described under Analytics.
• With financing partners such as Cherry, CareCredit, or Affirm when you choose to apply for or use their services; their handling of your information is governed by their own privacy policies.
• With professional advisors, such as lawyers, accountants, and insurers, where reasonably necessary.
• To comply with law, regulation, legal process, or enforceable governmental requests, or to protect the rights, safety, and property of our patients, our staff, or others.
• In connection with a merger, acquisition, financing, or sale of assets, in which case we will require appropriate protections for personal information.

Text messages and marketing communications

With your consent, we send text messages such as appointment reminders, account and service updates, and occasional messages relevant to your care or membership. Message frequency varies. Message and data rates may apply. Reply HELP for help and STOP to unsubscribe at any time. Carriers are not liable for delayed or undelivered messages. Consent to receive text messages is not a condition of purchasing any goods or services. Mobile opt-in information and text messaging consent are not shared with third parties for marketing purposes. You can opt out of marketing emails using the unsubscribe link in any marketing message; we may still send you non-marketing messages related to services you have requested.

Analytics and do not track

We use Google Analytics and Google Tag Manager to understand how visitors use our site so we can improve it. Through Tag Manager we also load advertising measurement tags from Meta (the Facebook pixel) and iHeartMedia, which let us understand whether our advertising reaches people and may be used to show you Everest Health advertising on those platforms. These tags run on our public informational pages only; they are not loaded on the Health Clarity Assessment or on any page where you answer health questions, and they never receive information from your medical records. Some browsers offer a Do Not Track signal; because there is no common standard for interpreting these signals, our site does not currently respond to them. You can limit this collection through browser settings, cookie controls, the opt-out tools each provider offers (Google Analytics opt-out browser add-on; Meta ad settings at facebook.com/ads/preferences), and the state privacy rights described below.

Your state privacy rights

Depending on where you live, you may have rights under state privacy laws, including the Virginia Consumer Data Protection Act, the California Consumer Privacy Act as amended, and similar laws in states such as Colorado, Connecticut, and Utah. Subject to the exceptions in those laws, which generally do not apply to protected health information governed by HIPAA, these rights may include:

• The right to know whether we process your personal data and to access it.
• The right to correct inaccuracies in your personal data.
• The right to delete personal data you provided or that we obtained about you.
• The right to obtain a copy of your personal data in a portable format.
• The right to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data.
• The right not to be discriminated against for exercising your rights.

To exercise any of these rights, contact us at info@goeverest.com or 1-866-383-7888. We will verify your request using the information associated with your records and respond within the time required by the applicable law. If you are a Virginia resident and we decline to act on your request, you may appeal by replying to our decision with the word "appeal" in your message; if your appeal is denied, you may contact the Virginia Attorney General. California residents may designate an authorized agent to make requests on their behalf.

Data retention

We keep personal information only as long as needed for the purposes described in this policy, to comply with our legal and professional obligations, including medical record retention requirements, to resolve disputes, and to enforce agreements. When information is no longer needed, we delete it or de-identify it.

Security

We use administrative, technical, and physical safeguards designed to protect personal information, and we require our service providers to do the same. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, please contact us immediately.

Children

Our website is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the website. If you believe a child has provided us personal information online, contact us and we will delete it. Health information about minors in our care is handled under our Notice of Privacy Practices and applicable law.

Third-party links

Our site links to third-party websites and services, including scheduling, the patient portal, financing partners, published research, and social media. Those sites operate under their own privacy policies, which we encourage you to read.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above and post the updated policy on this page. Material changes may also be communicated by email or through the site.

Contact us