Privacy Policy

Last updated August 17, 2026 · CoreMed Healthcare, 125 E Gallatin Ave Suite 102, Manhattan, MT 59741

This policy covers coremedhealth.com, the CoreMed member portal at access.coremedhealth.com, and the CoreMed mobile app. It explains what we collect, why we collect it, who else sees it, and what you can ask us to do about it.

Who we are

CoreMed Healthcare, 125 E Gallatin Ave Suite 102, Manhattan, MT 59741, is the company responsible for the information described here. You can reach us any time at 406-730-6688 or info@coremedhealth.com.

What we collect

Information you give us

• Contact details: name, email address, phone number, mailing address.
• Household details for a quote: region, ages or age bands, whether a spouse or children are joining, and the sharing amount you select.
• Enrolment details: date of birth, the members on your account, your chosen start date, and the information the membership application asks for.
• Business enquiries: company name, employee counts, and what you currently offer your team.
• Anything you write to us: messages through the contact and support forms, email, and text.

Information we collect automatically

• Usage data: pages viewed, referring site, approximate location from your IP address, browser and device type, and how you moved through the site.
• Device identifiers and cookies: see cookies and analytics.

Information from others

• Participating clinics and facilities confirm that a member visited, so a membership can be verified and a provider paid.
• Payment processors confirm whether a payment succeeded.
• If you arrive through a partner, broker or referral, we learn that you came from them.

Why we use it

• To give you a quote and to enrol you.
• To run your membership: billing, changes, renewals, cancellations, and your membership card.
• To verify membership at the point of care and to pay participating providers.
• To answer your questions and provide support.
• To send you membership, billing and service messages.
• To send you newsletters and updates, if you asked for them. You can stop these any time.
• To understand which pages and regions people use, so we can improve the site.
• To protect against fraud, abuse and unauthorised access.
• To meet legal, tax and audit obligations.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

Health information

Some of what CoreMed handles is sensitive: which clinic you visited, that a visit happened, what a membership application discloses. We treat it that way.

Clinical records, meaning your chart, notes, test results and diagnoses, stay with the clinic or facility that treated you. Those providers are covered by HIPAA and have their own notices of privacy practices, which govern those records. CoreMed does not receive or store your clinical chart in order to run your membership.

Where CoreMed does handle protected health information on behalf of a provider or plan, it does so under a written agreement that requires it to safeguard that information and to use it only for the purpose it was given.

If you choose a membership that includes participation in the Zion HealthShare community, information you submit as part of that participation is handled by Zion HealthShare under Zion's own privacy policy. Zion is a separate organisation.

Who we share it with

We share personal information only where it is needed, and only with:

• Participating providers and facilities: enough to confirm you are a member and to arrange or pay for care.
• Zion HealthShare: for members who participate in the sharing community.
• Service providers acting for us: payment processing, hosting, email and text delivery, customer relationship management, and analytics. They may use the information only to perform that service for CoreMed.
• Your employer, if your membership comes through a business account: membership status and billing only, never your clinical information.
• Professional advisers: accountants, auditors and lawyers, under confidentiality.
• Authorities: where the law requires it, or to protect someone's safety.
• A successor, if CoreMed is ever merged with or acquired by another company. We would tell you.

Payment information

Card and bank details are collected and processed by our payment provider on their systems. CoreMed's own systems store what is needed to identify a payment method and to reconcile a payment: for example, the last four digits and the expiry, never a full card number.

Cookies and analytics

This site uses a small number of cookies and similar technologies:

• Necessary: keeping you signed in to the portal and keeping the site secure. These cannot be switched off.
• Analytics: Google Analytics 4, to count visits and see which pages are useful. Data is aggregated. You can opt out with Google's browser add-on.
• Embedded forms: our quote tool and forms are provided by a customer relationship platform and set their own cookies to remember your progress through a form.

Most browsers let you block or delete cookies in their settings. Blocking necessary cookies will break sign-in.

We honour Global Privacy Control signals sent by your browser as an opt-out of the sale or sharing of personal information, to the extent the law requires.

The CoreMed mobile app

The CoreMed app shows your digital membership card, your payment history and receipts, and helps you find care. To do that it stores your account details on your device and communicates with CoreMed's servers over an encrypted connection.

• Location: only if you allow it, and only to sort nearby providers. You can decline and still use the app.
• Camera: only for participating providers scanning a membership QR code. Images are not stored.
• Notifications: only if you allow them, for billing and membership messages.

The app does not include third-party advertising or advertising trackers.

Text messages

If you give us your mobile number, we may text you about your membership, billing and care, and, if you opted in, about news and offers. Reply STOP to any message to stop, or HELP for help. Message and data rates may apply. Mobile numbers and text-message consent are never sold, rented or shared with third parties or affiliates for their own marketing.

Your rights in Montana

Under the Montana Consumer Data Privacy Act, Montana residents can ask us to:

• Confirm whether we hold personal data about you, and give you a copy.
• Correct information that is wrong.
• Delete information we hold about you.
• Provide your data in a portable format.
• Opt out of targeted advertising, the sale of personal data, and certain profiling. We do not do any of these, but the right stands.

To make a request, email info@coremedhealth.com or call 406-730-6688. We will verify who you are before acting, and respond within 45 days. If we decline, we will say why, and you may appeal by replying to our response. If an appeal is denied you may contact the Montana Attorney General's Office.

Some information cannot be deleted while it is needed for billing, or where the law requires us to keep it. Residents of other states with comparable laws have similar rights, and we apply this process to them too.

How we protect it

Traffic to our sites and app is encrypted in transit. Account access uses multi-factor authentication. Access to member data inside CoreMed is limited to staff who need it for their role. Systems are patched and monitored, and our code is scanned for security issues before release.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information, we will notify you as the law requires.

How long we keep it

We keep membership and billing records for as long as you are a member and afterwards for the period accounting, tax and audit rules require, typically seven years. Enquiries that never become memberships are kept for up to two years. Newsletter subscriptions are kept until you unsubscribe. Aggregated analytics that cannot identify you may be kept indefinitely.

Children

This site is not directed at children, and we do not knowingly collect information from a child under 13 except as part of a parent or guardian enrolling their family in a membership. If you believe a child has given us information independently, contact us and we will delete it.

Changes to this policy

When this policy changes, the "last updated" date at the top changes with it. If a change materially affects how we handle your information, we will tell members directly.

How to reach us

CoreMed Healthcare
125 E Gallatin Ave Suite 102, Manhattan, MT 59741
406-730-6688 · info@coremedhealth.com

Write "Privacy request" in the subject line and we will route it to the right person.