Morf Health Privacy Policy

This Privacy Policy describes how Morf Health, Inc. (“Morf”, “Company”, “we”, “us” and “our”) processes information about you in connection with our business. It outlines our practices regarding the collection, use, and disclosure of personal information that is provided to us via our websites (“Sites”) or by accessing or using our services (collectively, “Services”). Please note that the terms and conditions governing patient-related information and customer-specific information collected in connection with services we provide to Customers is addressed in our Customer Terms of Service.

  1. Information Collection. We collect information to provide and improve the Services. This may include:
    1. User-Provided Information: Information you provide when you use the Services, such as contact details and billing information.
    2. Automatically Collected Information: Usage data that helps us understand how the Services are used.
  2. Use of Information. We use the information collected to:
    1. Operate, maintain, and improve the Services.
    2. Understand and analyze how you use the Services.
    3. Communicate with you, either directly or through one of our partners, for customer service, updates, and other information related to the Services.
  3. Information Sharing and Disclosure. We do not sell the information you provide to us. We may share information with third parties in the following ways:
    1. With Your Consent: We will share information with third parties when we have your consent to do so.
    2. Service Providers: We may share information with third-party service providers who perform services on our behalf.
    3. Legal Requirements: We may disclose information if required to do so by law or in response to a subpoena or court order.
  4. Data Security. We take reasonable measures to protect the information that we collect from or about you from unauthorized access, use, or disclosure.
  5. Retention of Information We retain the information we collect for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.
  6. Collection of Information from Third Parties We may receive information about you from third parties, such as your practice management software, healthcare insurance providers, or our business partners or advertisers, to support our marketing efforts and Services.
  7. Cookies and Tracking Technologies We may use cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Services.
  8. Protected Health Information (PHI) The information governed by the Business Associate Agreement (BAA) between Morf and our customers is considered Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). The handling of PHI is subject to the terms of the Business Associate Agreement and HIPAA regulations, not this Privacy Policy. We are committed to protecting the privacy and security of PHI in accordance with applicable law and our contractual obligations.
  9. Changes to This Privacy Policy We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website.
  10. Contact Us If you have any questions about this Privacy Policy, please contact us at friends@morf.health.

U.S. STATES WITH ENHANCED PRIVACY REQUIREMENTS

NOTICE FOR ALL U.S. CONSUMERS

This notice supplements the information contained in Morf’s Privacy Policy and applies solely to all visitors, users, and others who reside in states within the U.S. with enhanced privacy notice requirements, such as California, Virginia, or Connecticut ("user" or "you"), and who access Morf’s Sites or Services.

Collection, use, and sharing of information

When you interact with Morf Sites or Services, Morf collects information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, device, or household ("personal information" or “personal data”). Information about the categories of personal information we collect, the purposes for which your personal information is processed, and any sharing of your personal information can be found in the sections of the Privacy Policy titled “Information Collection” and “Use of Information.”

In the preceding twelve (12) months, Morf has not sold personal information to third parties, including data aggregators, as it is against our policies. We have collected and disclosed only the categories of personal information processed by Morf under this Policy as described in the Information Collection and Use of Information sections.

CONSUMER RIGHTS

If you are a resident of a state with enhanced rights related to the personal information Morf may process about you, you have certain rights:

Right to know about the personal information we collect and share

U.S. State laws may give you the right to request that we disclose the personal information we have collected about you over the past 12 months, which we only provide after we receive and validate your request. Once we receive and confirm your verifiable request, we will disclose to you:

  • The categories of personal information we collected about you;
  • The categories of personal information we have disclosed about you (if any);
  • The categories of sources for the personal information we collected about you;
  • Our business or commercial purposes for collecting or selling that personal information;
  • The categories of third parties with whom we share that personal information; and
  • The specific pieces of personal information we collected about you.

Right of correction

You have the right to request correction of your personal information. After we receive and validate your request, we will correct your personal information, unless an exception applies.

Right of deletion

You have the right to request erasure of your personal information, subject to certain exceptions, such as when we have a legal obligation to retain the data in question. After we receive and validate your request, we will delete your personal information, as well as direct our service providers to delete your personal information unless an exception applies.

How to make disclosure, access, correction, or deletion requests

If you reside in a state that provides for enhanced privacy rights, you can request disclosure, access to, correction, and/or deletion of your personal data as described above by submitting a verifiable consumer request to us by sending an e-mail to friends@morf.health including the following information along with your request: your full name, company name (if applicable), address, e-mail address, and a phone number. We may request that you provide additional information if necessary to confirm your identity. This is for security purposes, and is required by law in some cases.

Only you, or a person registered with the appropriate mechanism associated with your state of residency that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information.

You have the right to make a free request up to two times in any 12-month period. We will respond to all validated requests within 45 days of receiving your request, unless we request an extension. In the event that we reasonably require an extension in order to respond to your request, we will notify you of any such extension within the initial 45-day period.

Non-discrimination

Morf does not discriminate against users who request to exercise their privacy rights. Unless an exception applies, this includes our promise not to:

  • Deny you goods or services;
  • Charge you different prices or rates for goods or services, including granting discounts or other benefits, or imposing penalties;
  • Provide you a different level or quality of goods or services; or
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Personal data sharing

Morf does not sell or rent your personal information. We only share your personal data with certain trusted service providers and partners so that we can provide and improve our services and to operate our business. Whenever we share data with third-party service providers, we require that they use your information only for the purposes we have authorized, and for the limited reasons explained in this Privacy Policy. We also require these service providers to protect your personal information to at least the same standards that we do.

Like most companies, Morf uses service providers for purposes such as:

  • Providing and improving our online service platform;
  • Storing our users’ data;
  • Providing customer services;
  • Managing and organizing our marketing activities. Morf only shares website usage data with our advertising network partners for the purposes of analyzing and optimizing our marketing. Morf does not share Service data with third-party advertisers; and
  • Analyzing information regarding the use of our Sites and Services to improve our service quality.

Data transfers

We use industry standard data protection measures to safeguard all international transfers of personal data through data protection agreements with our service providers.

Last updated: 2/19/2025