Website Privacy Policy

Aspen Health LLC • aspen.health • info@aspen.health • Last Updated: April 1, 2026

Aspen Health LLC (“Practice,” “we,” “our,” or “us”) is committed to protecting the privacy of visitors to our website at aspen.health (the Website”). This Privacy Policy explains how we collect, use, disclose, and protect information obtained through the Website. It does not govern the collection or use of protected health information (“PHI”) in the context of your medical care, which is governed separately by our HIPAA Notice of Privacy Practices, available at https://aspen.health.

By using this Website, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Website.

1. INFORMATION WE COLLECT

Information You Provide Voluntarily: We may collect personal information you submit directly through the Website, including through our contact form, appointment request forms, or membership inquiry forms. This may include your name, email address, phone number, mailing address, and any message content you provide.

Automatically Collected Information: When you visit the Website, we may automatically collect certain information about your device and browsing activity, including IP address, browser type, operating system, referring URLs, pages visited, and time spent on pages. This information is collected through standard web server logs and, if enabled, analytics tools.

Cookies and Tracking Technologies: The Website may use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and improve our content. You may adjust your browser settings to refuse cookies; however, doing so may affect the functionality of certain Website features. We do not use tracking technologies to serve targeted advertising.

2. HOW WE USE YOUR INFORMATION

We use information collected through the Website for the following purposes:

• To respond to your inquiries, contact form submissions, or appointment requests;

• To provide information about Practice’s direct primary care services and membership plans;

• To send appointment-related communications or follow-up messages if you request them;

• To improve the content and functionality of the Website;

• To analyze website traffic and usage patterns in aggregated, non-identifiable form;

• To comply with applicable legal and regulatory obligations; and

• To protect the security and integrity of the Website.

We will not use information you submit through the Website to deliver unsolicited marketing communications, and we will not sell your personal information to third parties.

3. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

Service Providers: We may share information with third-party vendors who assist us in operating the Website or conducting our business (e.g., web hosting providers, email delivery services, website analytics providers). These vendors are contractually prohibited from using your information for purposes other than providing services to Practice.

Legal Requirements: We may disclose information if required to do so by law or in response to a valid subpoena, court order, government request, or to protect the rights, property, or safety of Practice, our patients, or the public.

Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of Practice’s assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Medical Referrals: If you are a patient of Practice and have authorized disclosure, we may share health-related information with other healthcare providers involved in your care. Any such sharing of PHI is governed by our HIPAA Notice of Privacy Practices.

4. PROTECTED HEALTH INFORMATION (PHI)

This Website is not a secure platform for the transmission of protected health information. Do not submit PHI (including medical history, diagnoses, prescriptions, or sensitive health information) through Website contact forms, email, or social media. Patients of Practice should use the secure patient portal for all clinical communications. Any PHI you transmit through this Website is done at your own risk. PHI collected in the course of your medical care is governed exclusively by our HIPAA Notice of Privacy Practices and applicable federal and state law.

5. SMS AND TEXT MESSAGE COMMUNICATIONS

If you provide your phone number and consent to receive SMS communications, we will use that number only to send appointment reminders, practice updates, and care-related messages. Your phone number will not be shared with third parties or affiliates for marketing purposes. You may opt out of SMS communications at any time by replying STOP to any text message or contacting us at info@aspen.health.

6. DATA SECURITY

Practice implements appropriate physical, technical, and administrative safeguards to protect the personal information we collect against unauthorized access, disclosure, alteration, or destruction. These measures include secure server infrastructure, encrypted data transmission (SSL/TLS), and access controls. Despite these measures, no method of transmission over the internet or electronic storage is completely

secure. We cannot guarantee absolute security of information transmitted to or through the Website. If you believe your information has been compromised, please contact us immediately at info@aspen.health.

7. DATA RETENTION

We retain personal information collected through the Website for as long as necessary to fulfill the purposes described in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Website contact form submissions are retained for a reasonable period to allow for follow-up and are then deleted or anonymized.

8. THIRD-PARTY LINKS

The Website may contain links to third-party websites. Practice is not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit. Inclusion of a link does not constitute an endorsement by Practice.

9. CHILDREN’S PRIVACY

This Website is intended for users who are eighteen (18) years of age or older. Practice does not knowingly collect personal information from children under 13 through the Website. If we learn that we have inadvertently collected personal information from a child under 13, we will delete it promptly. If you believe we have collected such information, please contact us at info@aspen.health.

10. YOUR RIGHTS (NEW JERSEY AND APPLICABLE LAW)

Depending on applicable law, you may have the following rights with respect to personal information collected through the Website:

• The right to access and receive a copy of the personal information we hold about you;

• The right to correct inaccurate personal information;

• The right to request deletion of your personal information, subject to certain legal exceptions;

• The right to opt out of the sale of personal information (note: Practice does not sell personal

information);

• The right to withdraw consent to the use of your information for non-essential purposes; and

• The right to lodge a complaint with a relevant data protection authority.

To exercise any of these rights, please contact us in writing at info@aspen.health or by mail at Aspen Health LLC, 601 Ewing Street, Suite B17, Princeton, NJ 08540. We will respond to verifiable requests within a reasonable timeframe.

11. DO NOT TRACK

Some web browsers transmit “Do Not Track” signals. At present, there is no universally accepted standard for how websites should respond to such signals. We do not currently alter our information collection practices in response to “Do Not Track” signals, but we will update this policy if industry standards change.

12. INTERNATIONAL VISITORS

This Website is operated in the United States and is intended for users located in the United States. If you access this Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

13. CHANGES TO THIS PRIVACY POLICY

Practice reserves the right to update this Privacy Policy at any time. Material changes will be noted by updating the “Last Updated” date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Website after any changes constitutes acceptance of the updated policy.

14. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Aspen Health LLC — Privacy Officer: Jay Benson, D.O.

601 Ewing Street, Suite B17, Princeton, NJ 08540

Email: info@aspen.health

For healthcare privacy questions, please also review our Notice of Privacy Practices.