Privacy Policy

Last updated: September 21, 2026

Key Points

We collect what you give us, what your browser shares automatically, and what our partners send us to support your request.
Agency Healthspan is not a medical provider. Your medical information is handled by the independent medical practice and other providers involved in your care, under their own privacy notices.
We do not sell your personal information or consumer health data, and we do not use health information for ads that follow you across the web.
You can ask to access, correct, or delete your information, and you can opt out of marketing at any time. See Section 9.

Agency Healthspan LLC (“Agency Healthspan,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, share, keep, and protect personal information when you visit AgencyHealthspan.com, contact us, request information, enroll in an Agency program, or use services that link to this Policy.

Please read this Policy together with any privacy notice from the clinician, medical practice, telehealth platform, laboratory, or pharmacy involved in your care. Those parties may make their own decisions about your medical information and have their own legal duties.

1. Who does what

Agency Healthspan provides health and wellness education, marketing, intake, customer support, consent documentation, communications, billing-agent services, and administrative coordination. We do not practice medicine, diagnose, prescribe, dispense medication, operate a pharmacy or laboratory, or control professional judgment.

OSI’s providers can currently serve Agency Healthspan patients in Alabama, Alaska, Arizona, Arkansas, California, Colorado, Connecticut, Delaware, Florida, Georgia, Hawaii, Idaho, Illinois, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Minnesota, Mississippi, Missouri, Montana, Nebraska, Nevada, New Hampshire, New Jersey, New Mexico, New York, North Carolina, North Dakota, Ohio, Oklahoma, Oregon, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, Washington, West Virginia, Wisconsin, & Wyoming.

Scriptful, Inc. provides technology and operational support, such as intake, e-prescribing connections, pharmacy coordination, and white-labeled communications. Laboratories and pharmacies are separate companies and may collect information under their own notices.

When we receive or maintain protected health information on behalf of OSI or another covered entity, HIPAA, any applicable business associate agreement, and that entity’s Notice of Privacy Practices govern it. This Privacy Policy is not a HIPAA Notice of Privacy Practices.

2. Information we collect

Information you give us

Identity and contact details, such as your name, date of birth, address, email, phone number, and account login information.
Eligibility and interest details, such as your state, age confirmation, wellness goals, and the program you request.
Health-related information you choose to share, such as symptoms, medical history, medications, lab information, treatment interests, and messages about your care. Please use the secure clinical portal for medical information whenever we ask you to.
Order and support details, such as items or services requested, order status, billing address, refund and cancellation requests, and messages with customer support.
Communication preferences, marketing consents, survey responses, referral or affiliate details, and testimonial or media permissions.
Job or contractor application information, if you apply to work with us.

Information collected automatically

Device and network details, such as IP address, browser, device type, operating system, language, approximate location, and identifiers.
Usage details, such as pages viewed, referring pages, dates and times, clicks, form interactions, campaign source, and error logs.
Cookie and similar-technology information, described in Section 5.

Information from other parties

We may receive information from clinicians, telehealth and scheduling providers, laboratories, pharmacies, payment processors, shipping providers, referral partners, affiliates, analytics vendors, and other service providers.

What we receive depends on how you interact with us and our agreements. It may include eligibility or status information, appointment and fulfillment updates, transaction details, referral source, and information needed to support your request.

3. How we use information

To provide, coordinate, administer, personalize, and support the services and transactions you request.
To connect you with an appropriately licensed clinician or service partner and share status updates.
To process payments, prevent fraud, verify identity, keep records, and provide customer support.
To send service messages, appointment or refill reminders, safety notices, and communications you ask for.
To send marketing messages where permitted and according to your choices. Marketing consent is never a condition of receiving care, and you can opt out as described below.
To run, secure, debug, analyze, and improve our website and business.
To comply with law, professional obligations, lawful process, audits, and safety requirements, and to protect users, clinicians, partners, and our rights.
To create aggregated or deidentified information and use it as the law permits. We will not try to reidentify information that the law requires us to keep deidentified.

4. When we share information

We share personal information only as reasonably necessary with these kinds of recipients:

Independent clinicians, professional entities, telehealth and scheduling platforms, laboratories, and pharmacies involved in evaluating or fulfilling your request.
Vendors that support hosting, security, customer relationship management, communications, payment processing, analytics, document management, shipping, and professional services, under appropriate restrictions.
Referral or affiliate partners, to attribute a referral, calculate compensation, or support a program, using the minimum information reasonably necessary.
Government agencies, regulators, law enforcement, courts, or others when required or permitted by law, including to address fraud, safety, security, legal claims, or professional reporting duties.
A successor or participant in a merger, financing, reorganization, sale, or transfer of our business, under appropriate confidentiality protections.
Others at your direction or with your consent.

We do not sell your personal information, including consumer health data, for money or for any other valuable consideration. We do not use or share health information for cross-context behavioral advertising (advertising based on your activity across other companies’ websites and apps).

On our public pages, some analytics or advertising tools may count as “sharing” or “targeted advertising” under certain state laws. Where they do, we offer the choices the law requires and honor recognized opt-out signals, such as Global Privacy Control.

5. Cookies, analytics, and tracking

We use essential cookies to operate the site and, subject to applicable law and your choices, limited analytics or advertising tools on public pages. Where we use analytics, we configure them to avoid collecting health information.

We do not place advertising pixels or session-replay tools on logged-in clinical pages, patient portals, symptom or medical-history forms, checkout fields that reveal a condition or treatment, or any page whose address or content communicates sensitive health information.

You can manage cookies with our cookie preference tool provided by CookieYes and your browser settings. Where required, we recognize qualifying universal opt-out signals. Blocking some technologies may affect how the site works.

6. Text, email, and phone communications

We may send transactional messages about your account, request, appointment, order, or safety. If you separately agree to promotional emails or texts, you can withdraw consent at any time by using the unsubscribe link, replying STOP to a text, or contacting us. Message and data rates may apply.

Opting out of marketing does not stop necessary service or clinical messages. Please do not use ordinary email or text for emergencies or highly sensitive medical information.

7. Data security

We use administrative, technical, and physical safeguards suited to the information we keep. No system is completely secure. You are responsible for keeping your login details confidential and for using a private setting and secure device when you access telehealth services.

Tell us promptly if you believe your account or a communication has been compromised.

8. How long we keep information

We keep personal information only as long as reasonably necessary for the purposes in this Policy, including providing and supporting services, keeping transaction and consent records, meeting clinical, legal, and contractual requirements, resolving disputes, and preventing fraud.

Some records may be kept for seven years or more where the law or our agreements with providers require it. Where we must keep a record for that reason, we may not be able to delete it on request, but we will limit how we use it.

OSI, laboratories, pharmacies, and other parties may follow their own retention rules.

9. Your privacy choices and rights

Depending on where you live, and subject to legal exceptions, you may have the right to access, correct, delete, or receive a portable copy of your personal information; learn about the categories we collect and share; opt out of sale, targeted advertising, or certain profiling; withdraw consent to processing of sensitive data; and appeal a denied request. We will not discriminate against you for exercising a right.

To make a request, use our Privacy Rights Request Form, email support@agencyhealthspan.com, or write to us at the address in Section 15. We may need to verify your identity.

An authorized agent may submit a request where the law allows, and we may ask for proof of authorization. If we deny a request, we will explain why and, where required, how to appeal. To appeal, reply to our decision or email support@agencyhealthspan.com with “Privacy Appeal” in the subject line.

Requests about your medical record should go to the clinician or medical practice named in its Notice of Privacy Practices. We will help route your request when we reasonably can.

10. Consumer health data

Where state consumer-health-data laws apply, consumer health data can include information that identifies or can reasonably be linked to your physical or mental health status, diagnoses, medications, reproductive or sexual health, biometric or genetic information, precise location tied to healthcare, and inferences about your health.

We collect and use this data only as reasonably necessary to provide the services you request, with your consent where required, and as described in this Policy. We share it only with the kinds of recipients listed in Section 4 and do not sell it. If we ever proposed a sale, we would first obtain your separate authorization.

You can ask to access or delete covered consumer health data, or withdraw your consent, using the methods in Section 9. Deleting data may require us to notify service providers and other recipients, subject to legal exceptions.

Withdrawing consent does not undo processing already completed and may prevent us from providing a service you requested.

11. State notices

Colorado residents

If the Colorado Privacy Act applies to our processing, Colorado residents may have the right to access, correct, delete, and receive a portable copy of personal data, and to opt out of sale, targeted advertising, and certain profiling.

We will honor these rights to the extent the law applies. Some information, including certain health information governed by HIPAA and other healthcare laws, falls outside these rights and is handled as described in Section 1. See Section 9 for how to make a request or appeal.

California and other states

Residents of California and other states may have additional rights. [STATE-SPECIFIC DISCLOSURES, CONSENTS, AND APPEAL PROCEDURES TO BE ADDED FOR THE FINAL LAUNCH STATES]

12. Children

Our website and services are for adults age 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will review it and respond appropriately.

13. Links and separate services

Our website may link to services run by clinicians, telehealth platforms, laboratories, pharmacies, payment processors, and other parties. Their privacy practices are covered by their own notices, so please review them before sharing information.

A link does not make us responsible for another party’s privacy or security practices.

14. Changes to this Policy

We may update this Policy as our services, partners, or legal obligations change. We will post the updated version and change the “last updated” date. If the law requires, we will give additional notice or get your consent before a material change applies to information we already hold.

15. Contact us

Agency Healthspan LLC
7460 Sapphire Pointe Boulevard Castle Rock, Colorado 80108
Email: support@agencyhealthspan.com
Telephone: +1 720-764-6466
Website: AgencyHealthspan.com

For questions about clinical care, a prescription, a lab result, or a medical record, contact the clinician, medical practice, laboratory, or pharmacy named in your patient materials. In an emergency, call 911 or go to the nearest emergency room.