Legal

Privacy Policy

Status: Draft — pending review by counsel. Effective date will be set on publication.
Questions: privacy@sherpahealth.net

This Privacy Policy describes how Sherpa, a product of X International Holdings, Inc. (dba Helix) ("Sherpa," "we," "us") collects, uses, and shares information through our website and partner-facing services. Sherpa operates in the healthcare space; where we handle protected health information ("PHI") on behalf of covered entities, those activities are governed by separate Business Associate Agreements ("BAAs") and the privacy and security rules of HIPAA.

1. Information we collect

Through this website, we collect: contact information you submit (e.g., name, email, organization) when you reach out; technical information automatically collected by your browser (e.g., IP address, device type, pages visited); and information you provide if you are granted access to partner-only material.

2. How we use information

We use the information described above to respond to inquiries, manage partner relationships, operate and improve the site, and comply with applicable law. We do not sell personal information.

3. Protected Health Information

Sherpa does not collect PHI through this website. Where Sherpa processes PHI on behalf of a covered entity, those activities are governed by a Business Associate Agreement and the HIPAA Privacy and Security Rules.

4. Sharing

We share information only as needed with service providers, with counterparties to a contemplated transaction or partnership under appropriate confidentiality terms, and as required by law.

5. Security

We maintain administrative, technical, and physical safeguards designed to protect information. No system is perfectly secure; we encourage you to share sensitive information only through channels we identify in writing.

6. Your choices

You may contact us at any time to ask about, correct, or request deletion of information you have submitted to us. Depending on your location, additional rights may apply under state or national privacy law.

7. International

Sherpa operates from the United States. If you are accessing this site from outside the U.S., information you submit may be transferred to and processed in the U.S.

8. Changes

We will update this policy as our practices evolve. The "Effective date" above will reflect the most recent material change.

9. Contact

Privacy questions: privacy@sherpahealth.net. Partnership inquiries: partnerships@sherpahealth.net.

This page is a placeholder pending counsel review and should not be relied upon as a final statement of Sherpa's privacy practices.