Privacy Policy

1. Introduction

Exodus Health Couriers LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services or visit our website. By using our services, you consent to the practices described in this policy.

2. Information We Collect

We collect information that you provide directly to us, including:

• Contact information (name, email address, phone number)
• Organization details (name, address, type of facility)
• Service request details (pickup/delivery locations, specimen information)
• Billing and payment information
• Account credentials for our client portal
• Employment application information (for workers)
• Driver and vehicle information (for courier staff)

We also automatically collect:

• Device and browser information
• IP addresses and geolocation data (for delivery tracking)
• Usage patterns and analytics data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our courier services
• Process and fulfill service requests
• Communicate with you about services, updates, and promotional offers
• Process payments and maintain billing records
• Comply with legal obligations and industry regulations (HIPAA & OSHA)
• Ensure the security and integrity of our services
• Verify identity and prevent fraud
• Analyze usage patterns to improve our platform
• Respond to legal requests and prevent harm

Submissions made through our public website forms also pass through automated plausibility and anti-fraud screening before we act on them.

4. HIPAA Compliance

As a medical courier service, we are committed to maintaining HIPAA compliance. We implement appropriate administrative, physical, and technical safeguards to protect Protected Health Information (PHI). We train our staff on HIPAA requirements and maintain Business Associate Agreements (BAAs) with covered entities as required. We do not use or disclose PHI except as permitted by law and our BAAs.

5. Information Sharing

We may share your information with:

• Service providers who assist in our operations (e.g., payment processors, cloud hosting)
• Healthcare facilities involved in the transport chain
• Law enforcement or regulatory agencies when required by law
• Professional advisors (attorneys, accountants, auditors)
• Business successors in connection with a merger, acquisition, or asset sale

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your information for the following periods:

• Account information: Duration of account plus 7 years
• Delivery records: 7 years (for compliance and audit purposes)
• Payment records: 7 years (as required by tax law)
• HIPAA-protected information: 6 years from date of creation or last effective date
• Employment records: Duration of employment plus 7 years
• Website analytics: 26 months

After the retention period, data is securely deleted or anonymized.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• 256-bit SSL/TLS encryption for data in transit
• Encryption at rest for stored data
• Access controls and role-based permissions
• Regular security audits and vulnerability assessments
• Employee training on security best practices
• Incident response procedures

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access: Request a copy of your personal information
• Correction: Request corrections to inaccurate information
• Deletion: Request deletion of your information (subject to legal retention requirements)
• Portability: Receive a copy of your data in a portable format
• Opt-out: Opt out of marketing communications at any time
• Withdraw consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@exodushealthcouriers.com. We will respond within 30 days.

9. Account Deletion

To request deletion of your account and associated data:

• Email us at privacy@exodushealthcouriers.com with subject line "Account Deletion Request"
• Include your full name and account email address
• We will verify your identity before processing the request
• Deletion will be completed within 30 days, subject to legal retention requirements

Note: Some data may be retained as required by law (e.g., tax records, HIPAA requirements).

10. Cookies and Tracking

Our website uses cookies and similar tracking technologies to improve your browsing experience. Types of cookies we use:

• Essential cookies: Required for website functionality
• Analytics cookies: Help us understand how visitors use our site
• Preference cookies: Remember your settings and preferences

You can control cookie preferences through your browser settings or our cookie preference center. Disabling certain cookies may affect website functionality.

11. Third-Party Analytics

We use third-party analytics services to help analyze how users interact with our website. These services may use cookies and similar technologies to collect information about your use of our website and other websites. We do not control these third-party technologies, and their use is governed by their respective privacy policies.

12. Electronic Signatures

When you provide electronic signatures through our platform (e.g., for proof of delivery), we collect and store signature images along with timestamp, device, and location information. This data is used to verify delivery completion and is retained according to our data retention policy.

13. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete that information.

14. Internal Confidentiality and Worker Data

Internal Communications: All information shared within Company systems, including but not limited to routes, schedules, client details, and operational data, is strictly confidential.

• Workers may not share internal communications, memos, or operational data externally
• Data access is logged and monitored for security and compliance purposes
• Screenshots, copies, or transfers of internal data to personal devices or external services are prohibited
• Confidentiality obligations survive termination of employment

Pre-Employment Data: Information collected during the application and interview process is confidential and used solely for employment decisions. Unsuccessful applicants' data is retained for 2 years for compliance purposes.

Exit Data: Upon termination, workers must return all Company data and confirm deletion of Company information from personal devices. Exit interview data is protected and used for operational improvements.

15. Employment Verification and References

We provide limited employment verification to authorized parties, confirming only dates of employment and position held. Additional information is released only with written authorization from the former worker or as required by law.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also provide notice via email or through our platform. Your continued use of our services after changes constitutes acceptance of the updated policy.

17. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: