Effective date: September 22, 2026
1. Who we are
Zashel LLC (“Zashel,” “we,” “us”) operates www.zashel.com and the Zashel telehealth experience. Clinical care is provided by independently licensed physicians in a third-party network; prescriptions are dispensed by a licensed U.S. compounding pharmacy. This policy explains how Zashel handles your information. Contact: care@zashel.com.
2. Information we collect
- You provide: name, contact details, date of birth, shipping address, payment information (processed by our payment processor, not stored by us), health history, medications, allergies, goals, photographs, and assessment responses.
- Automatically: device/browser data and limited analytics on our public marketing pages only. We do not place third-party advertising or session-recording trackers on intake, checkout, or patient-portal pages.
- From the provider network/pharmacy: clinical status, prescription, and shipment updates.
3. How we use information
To provide and coordinate your care; route your assessment to a licensed clinician; fulfill and ship prescriptions; manage your account, subscriptions, and payments; provide support; meet legal and recordkeeping obligations; and improve our services. We do not sell your information, and we do not use your health information for advertising.
4. How we share information
- Your clinician (our affiliated physician network) — to provide care.
- The dispensing pharmacy — to prepare and ship your prescription.
- Service providers under contract (e.g., payment processing, hosting, communications) bound by confidentiality and, where applicable, data-processing agreements.
- Legal/safety — when required by law or to protect health and safety.
- We do not otherwise disclose your information without your consent.
5. Your health information
Your care and prescriptions are provided by independently licensed clinicians and pharmacies, and the health information you provide is used and shared for your treatment — with your treating clinician and the dispensing pharmacy — and to operate your care. Zashel applies HIPAA-aligned safeguards to the health information it handles, including encryption in transit and at rest, access on a need-to-know basis, and audit logging, and it handles your information in accordance with applicable federal and state privacy laws, including the Washington My Health My Data Act and similar consumer-health-privacy laws. We share your information only as described in this policy and as permitted by law.
6. Your choices and rights
You may access, correct, delete, or request a copy of your information, and withdraw consent, by emailing care@zashel.com; we respond within a reasonable time and within any period required by applicable law. Depending on your state (e.g., California, Colorado, Connecticut, Texas, Virginia, Washington), you may have additional rights, including under the Washington My Health My Data Act for consumer health data. To exercise any of these rights, contact care@zashel.com.
7. Security
Encryption in transit and at rest, access on a need-to-know basis, audit logging of access to patient records, and vendor due diligence. No system is perfectly secure, but we work to protect your information.
8. Data retention
We retain information only as long as needed to provide care, meet legal/medical-records requirements, and resolve disputes, then delete or de-identify it.
9. Children
Zashel services are for adults 18+. We do not knowingly collect information from minors.
10. Changes & contact
We will post changes here with a new “last updated” date. Questions: care@zashel.com.