Privacy Policy

Effective Date / Last Revised: Jul 3, 2026

This Privacy Policy (the "Policy") applies to the following entities: Somos Healthcare Providers, Inc. d/b/a Somos Community Care, Somos Your Health IPA, Inc., Somos Innovation, LLC, Somos IPA, LLC, Somos Your Health, LLC, Corinthian Medical IPA, Inc., Balance Medical IPA, Inc., Excelsior Medical IPA, PLLC, and their related subsidiaries and affiliates (collectively, "SOMOS", "us", "our", or "we"). We are committed to protecting the privacy of website visitors ("you" or "your"). We created this Policy to inform you of our practices regarding the collection, use, and disclosure of your information when you visit our website, https://www.oranahealth.com (the "Website"). This Policy applies to all individuals with whom we interact via the Website or from whom we collect information through the use of the Website. Please read this Policy carefully to understand our policies and practices regarding your information and how we use and protect it.

Please note that we may be acting as a covered entity or a business associate, as such terms are defined under federal Health Insurance Portability and Accountability Act ("HIPAA"). Where we are acting as a covered entity, please see the applicable Notice of Privacy Practices that we have provided to you that describes how we use and disclose your protected health information. If we collect your information in our capacity as a business associate to a covered entity, how we use and disclose your protected health information will be governed by the applicable covered entity's Notice of Privacy Practices and our business associate agreement with such covered entity.

Changes to This Policy

The content of this Policy may change, so please check it from time to time. We reserve the right to amend this Policy at our discretion and at any time. When we make changes to this Policy, we will post the updates on this website and update the Policy's last revised date above. By continuing to use the Website following updates and changes to this Policy, you are accepting those updates and changes.

What Types of Information We Collect About You

We may collect certain types of information about you when accessing and using our Website, including:

Information provided by you, such as contact and demographic information; email address, phone number; information you provide when you communicate with us, such as by text messaging; and medical or health information that you provide to us in the course of using our Website.
Information collected automatically as you use our Website, such as usage details, IP address, internet browser, operating system, session ID information, and which links or buttons you click when using our Website.

How We Use Your Information

We may use information that we collect about you or that you provide to us, such as:

in accordance with and to the extent permitted by HIPAA with respect to your health information, to the extent HIPAA applies;
to provide you with our products and services, including to send you information on related community health services or programming that may be available to you;
to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, such as the Terms of Use to use the Website;
to notify you about changes to our Website;
to enable communications with you regarding our services through email, text message, and phone;
to perform data analytics and support our operations;
to fulfill any other purpose for which you provide your information and in any other way we may describe when you provide the information;
to protect and secure our Website, assets, network, and business operations, to comply with legal requirements and enforce our rights, and to detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal; and
for any other purpose with your consent.

Disclosure of Your Information

We may disclose information that we collect about you, or that you provide directly to us, such as:

in accordance with and to the extent permitted by HIPAA with respect to your health information, to the extent HIPAA applies;
to our related companies, subsidiaries, and affiliates;
to third party service providers and to vendors we engage to perform functions on our behalf, such as auditing and accounting firms, professional services consultants, providers of analytics services, security vendors, IT vendors, and communications vendors (there are limited circumstances in which the service provider collects data directly from you when their privacy policies may also apply);
to health care providers, health plans, community-based organization or non-profits, or others involved in providing care or health-related programs or services;
to another entity or its affiliates or service providers in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction;
all above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties;
to fulfill the purpose for which the information was collected and for which it was provided;
for any other purpose disclosed by us when you provide the information; and
with your consent.

We may also disclose your personal information:

to comply with any court order, law, or legal process, including to respond to any government, regulatory, or law enforcement request;
to enforce or apply our Terms of Use and other agreements; and
if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of SOMOS, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

We may disclose aggregated and/or deidentified information about our users that does not identify an individual. To the extent we deidentify your health information regulated under HIPAA, we will do so consistent with the HIPAA safe harbor method or the expert statistician method of deidentification.

Links

The Website may contain links to third party websites. We are not responsible for the content or privacy practices of such other websites. We encourage our users to read the privacy statements of any other site or platform that collects your personal information.

Children Under the Age of 18

Our Website are not intended for children under 18 years of age. No one under age 18 may provide any information to us through use of the Website. We do not knowingly collect personal information from children under 18 unless we have verification of parental or guardian consent. If you are under 18, do not use or provide any information to us through the Website. If we learn we have collected or received personal information from a child under 18 without verification of parental or guardian consent, we will delete that information. If you believe we might have any information from or about a child under 18 without parental or guardian consent, please contact us in one of the ways provided in the "Contacting Us" section, below.

How We Secure Your Personal Information

SOMOS takes reasonable steps to keep personal information secure and to protect against the loss, misuse, or alteration of personal information. We also maintain physical, electronic, and procedural safeguards that comply with federal and state regulations to protect the confidentiality, availability, and integrity of your information.

Please be aware that email and text messages or information sent through other electronic means may not be secure. There are risks associated with unsecure communications that you should consider. These risks include (without limitation) that an unauthorized person may get access to these communications. By engaging us in unsecure communications, you agree to accept these risks and consent to receive unsecure communications in response from us.

Using the Website Outside of the United States

If you are accessing the Website outside of the United States, please be aware that your personal information and other information will be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. The data protection and other laws of the United States might not be as comprehensive as those in your country. By using the Website, you understand that your personal information and other information may be transferred to our facilities in the United States and those third parties with whom we share it as described in this Policy.

Do Not Track Signals

We do not currently respond to a browser's "do not track" signal. Other parties may collect personally identifiable information about your activities over time and across different websites when an individual uses our Website.

Cookies and Other Tracking Technologies

The Website may use first-party or third-party "cookies" and other tracking technologies. These technologies are used for record-keeping purposes and sometimes to track information on the performance and use of the Website. Cookies are small files that a website places on a person's hard drive through their web browser. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you choose to refuse cookies, please note that certain aspects of the Website may not function properly as a result.

Contacting Us

If you have questions regarding this Policy you may contact us at [Orana privacy contact email].