Norava Health Privacy Policy

Effective date: August 7, 2026

This Privacy Policy explains how Norava Corp ("Norava Health," "we," "us," or "our") collects, uses, and discloses information when you visit noravahealth.com (the "Site"). It also describes the rights that may apply to you, including under U.S. state privacy laws such as the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA").

Important scope note. Norava is an umbrella brand. Clinical and membership services are provided by affiliated and independently operated organizations, including ContinuEM and New Cadence Healthcare. Those organizations have their own privacy practices, and any protected health information ("PHI") you share with them is handled under their notices, including, where applicable, the Health Insurance Portability and Accountability Act ("HIPAA"). This Site itself is informational and is not intended to collect PHI.

1. Information We Collect

Information you provide to us. We collect information you submit through the Platform, such as when you:

  • Create an account, including name, email address, phone number, date of birth, and mailing address;
  • Enroll in a membership plan, including payment and billing information;
  • Fill out a contact, inquiry, or interest form;
  • Subscribe to email updates or newsletters;
  • Communicate with us by email, chat, phone, or through the Platform;
  • Provide information in connection with scheduling, telehealth check-in, or intake forms, to the extent not PHI governed by the Provider Entities' HIPAA notices.

Information collected automatically. When you use the Platform, we and our service providers automatically collect:

  • Device and browser information, including IP address, browser type, operating system, device identifiers, and screen resolution;
  • Usage information, including pages visited, features used, links clicked, referring URLs, and session duration;
  • Approximate geolocation derived from IP address;
  • Information collected via cookies, pixels, and similar tracking technologies.

Information from other sources. We may receive information from third-party sources, including analytics and advertising platforms, payment processors, Provider Entities, and publicly available sources.

2. How We Use Information

We use the information we collect to:

  • Operate, maintain, and improve the Platform and its features;
  • Create and manage your account and process membership enrollments;
  • Process payments and manage billing;
  • Facilitate scheduling, telehealth connectivity, and communication between you and the Provider Entities' clinicians;
  • Deliver AI-powered health insights and lab result displays as a technology service on behalf of the Provider Entities;
  • Respond to your inquiries and provide customer support;
  • Send transactional communications, including appointment confirmations, billing receipts, and account alerts;
  • Send marketing communications you have opted into;
  • Conduct analytics to understand how the Platform is used and to improve our services;
  • Detect, prevent, and address fraud, abuse, and security issues;
  • Comply with applicable laws, regulations, and legal process.

3. How We Disclose Information

We may disclose personal information in the following circumstances:

3.1 Provider Entities

We share information with ContinuEM and New Cadence Healthcare as necessary to facilitate the clinical services you request through the Platform. Once shared for clinical purposes, that information is governed by the Provider Entities' HIPAA Notices of Privacy Practices.

3.2 Service Providers

We share information with vendors who perform services on our behalf, including cloud hosting, payment processing, email delivery, analytics, customer relationship management, scheduling software, telehealth infrastructure, and security providers. These providers are contractually obligated to use information only as needed to perform services for us and to maintain appropriate safeguards.

3.3 Legal and Safety

We may disclose information when we believe in good faith it is necessary to comply with applicable law, respond to lawful requests, enforce our Terms of Use, protect our rights, or protect the safety of any person.

3.4 Business Transfers

If Norava is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

3.5 With Your Consent

We may disclose information for other purposes with your consent or at your direction.

No Sale of Personal Information. We do not sell your personal information in exchange for monetary consideration. We do not knowingly share personal information for cross-context behavioral advertising. If this changes, we will update this Policy and provide an opt-out mechanism as required by law.

4. Cookies and Analytics

We use cookies and similar technologies, including pixels, web beacons, and local storage, to operate the Platform, remember your preferences, authenticate your session, measure performance, and understand usage patterns.

We may use third-party analytics services, such as Google Analytics or Amazon Web Services. These services may set their own cookies and process information about your visit. You can learn more about how Google Analytics collects and processes data at policies.google.com/technologies/partner-sites(opens in new tab).

4.1 Essential Cookies

These cookies are necessary for the Platform to function properly.

4.2 Analytics Cookies

Analytics cookies help us understand how visitors use the Platform so we can improve it. We use Google Analytics and may use other analytics services.

4.3 Marketing Cookies

Marketing cookies are used to deliver relevant advertisements and measure campaign effectiveness. We will obtain your consent before placing non-essential marketing cookies where required by law.

4.4 Your Choices

You can adjust cookie preferences through your browser settings or through any cookie consent mechanism we make available on the Platform. Blocking certain cookies may affect functionality.

5. Third-Party Services and Links

The Platform integrates with and contains links to third-party services, including laboratory providers, payment processors, telehealth infrastructure providers, and the Provider Entities' own systems. When you interact with a third-party service, that party's privacy practices apply. We are not responsible for the privacy practices of third parties.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it in accordance with our data retention schedule. Retention of PHI is governed by the Provider Entities' HIPAA practices and applicable law.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, and disclosure. These include encryption of data in transit and at rest, access controls, and regular security assessments. No method of transmission over the Internet or electronic storage is completely secure, however, and we cannot guarantee absolute security.

8. Children's Privacy

The Platform is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at info@noravahealth.com and we will take appropriate steps to delete it.

9. Your Choices

9.1 Account Information

You may update or correct your account information at any time by logging into your account or contacting us at info@noravahealth.com.

9.2 Cookies

Most browsers let you refuse or accept cookies and clear existing cookies. Refer to your browser's help documentation for instructions.

9.3 Do Not Track

Some browsers offer a "Do Not Track" signal. The Site does not currently respond to these signals.

10. Notice to California Residents

This section provides additional information required under the CCPA, as amended by the CPRA.

Categories of personal information collected. In the preceding 12 months, we may have collected the following categories of personal information:

  • Identifiers, including name, email address, phone number, mailing address, IP address, and account ID;
  • Customer records information, including billing and payment information;
  • Internet or network activity information, including browsing history, usage data, and interactions with the Platform;
  • Geolocation data, including approximate location from IP address;
  • Commercial information, including membership plan, transaction history, and inquiries;
  • Inferences drawn from the above to understand preferences and improve services.

Sources. We collect this information from you directly, from your device automatically, from service providers, and from the Provider Entities for non-PHI operational data.

Business purposes. We use this information for the purposes described in Section 2.

Sensitive personal information. We do not intentionally collect sensitive personal information through the Platform outside of clinical contexts governed by HIPAA. Do not submit Social Security numbers, financial account numbers other than for payment processing, or government identifiers through forms on the Platform.

Your California rights. Subject to applicable exceptions, California residents have the right to know what personal information we have collected, used, and disclosed; request deletion; request correction; opt out of any "sale" or "sharing" of personal information; and not receive discriminatory treatment for exercising these rights.

How to exercise your rights. Contact us at info@noravahealth.com or write to us at the address in Section 13. We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf, subject to verification.

HIPAA Exemption. To the extent any information constitutes PHI governed by HIPAA, it is exempt from the CCPA. Rights regarding your PHI are set forth in the Provider Entities' HIPAA Notices of Privacy Practices.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the effective date at the top of the page. If changes are material, we will provide additional notice through the Platform or by email. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

12. Relationship to Provider Entities' HIPAA Notices

This Privacy Policy and the Provider Entities' HIPAA Notices of Privacy Practices serve different purposes. This Policy covers personal information Norava collects through the Platform in its capacity as a technology and administrative services provider. The HIPAA Notices cover your PHI as it relates to clinical care delivered by ContinuEM and New Cadence. If you have questions about your health information rights under HIPAA, contact the Provider Entity that provides your care.

Your protected health information is maintained by your Clinical Provider (ContinuEM or New Cadence), which is a HIPAA Covered Entity. Norava is a Business Associate.

Norava will not sell your PHI or use it for marketing without your authorization.

13. Contact Us

If you have questions about this Policy or our privacy practices, contact us at:

Norava Health
6430 South Street
Lakewood, CA 90713
Email: info@noravahealth.com