Log In

Username

Password (Case Sensitive)

Log In

First Time Logging In? Login Instructions | Trouble Logging In

Your employer has chosen to assign default credentials as described below.

Default Username: First Initial/Last Name/last 4 ssn

Default Password: DOB (mmddyyyy)

These credentials are for first-time use only.

After your first log in, you will be asked to set your own unique account credentials and contact information for accessing the site in the future.

Still have questions?

(855) 444-1255 | Monday – Friday 8 a.m. – 8 p.m. EST

support@assethealth.com

Privacy Policy | Notice of Privacy Practices | ADA and GINA Notice
Medical Disclaimer | Website Requirements

Privacy Policy updated and effective August 3, 2026.

Asset Health ("Us," "We," or "Our") created this Privacy Policy ("Privacy Policy") to ensure the confidence of users ("you" or "your") of our Asset Health software program and website (collectively, the "Product"), and to demonstrate our commitment to fair information practices and the protection of privacy.

1. Types of Information Collected.

a. Traffic Data Collected. We automatically track and collect the following information when you use our Product, including your: (i) IP address; (ii) domain server; (iii) type of computer; (iv) type of web browser; and (v) information on your usage of the Product, including Courses completed or not completed and your performance on our Assessments (collectively, "Traffic Data"). Traffic Data may include information that identifies you or can reasonably be associated with you, such as IP addresses, device information, browser information, log data, and Product usage information. We treat Traffic Data as personal information where it identifies or can reasonably be linked to an identifiable individual.

b. Personal Information Collected. In order for you to access the Products, we require you to provide us with information that personally identifies you ("Personal Information"). Personal Information may include: (i) Contact Data (such as your name and email addresses); and (ii) Demographic Data (such as your ZIP code). If you communicate with us by email, post messages to any of our chat groups, or otherwise complete online forms or surveys, any information provided in such communication may be collected as Personal Information.

c. Health and Wellness Information ("Health Data") Collected and/or Accessed. Depending on your employer's wellness program requirements and the features made available to you through the Product, we may collect, store, and process health and wellness information, which may include information that is protected health information ("PHI") when applicable (Health Data). Health Data may include, as required by your wellness program: biometric screening results and measurements (for example BMI, blood pressure, glucose, or similar biometrics); responses and results from health assessments (including HRAs/health risk questionnaires); activity and fitness information (for example activity minutes, workouts, steps); sleep-related information (for example sleep duration and sleep activity summaries); and other wellness program-related health indicators required by your employer's wellness plan. Health Data is collected only as needed to provide the wellness program services and features made available to you.

d. How Health Data is Collected. Health Data may be collected from you directly (for example, when you complete an assessment or enter information), from wellness program service providers (for example, biometric screening vendors), and/or from device or platform integrations you choose to enable where offered (for example, activity/step/sleep sources). The specific categories collected depend on your employer's wellness program configuration.

e. Google Health, Fitbit, and Health Connect Data Collected and/or Accessed.

If you choose to connect a Google, Fitbit, Google Health, Google Health API, Google Fit, Health Connect, or similar Google-supported health or fitness integration to the Product, Asset Health may collect, receive, access, store, and process certain health, fitness, wellness, activity, sleep, and device-related information made available through that integration and permitted by you.

Depending on the integration you enable and the permissions you grant, this information may include: step count; activity minutes; sleep duration; weight; device source information; data source metadata; and other health, fitness, wellness, or activity data made available through the applicable Google-supported integration.

We collect this information only if you choose to connect the applicable integration and authorize the requested permissions. The specific categories of Google, Fitbit, Google Health, Google Fit, or Health Connect data we collect depend on your employer's wellness program configuration, the features made available to you, the integration you choose to enable, and the permissions you grant.

2. Uses of Information Collected.

a. General Uses. We use Contact Data to contact you if necessary, including to provide Product-related notices and support.

b. How We Use Health Data. We use Health Data to provide and administer the wellness program services and Product features made available to you, which may include: (i) generating wellness results, insights, or summaries for you; (ii) enabling coaching, courses, or program activities; (iii) confirming completion of program requirements for incentives where applicable; (iv) improving and maintaining Product functionality, security, and support; and (v) producing de-identified or aggregated reporting as permitted by law and contract (for example, summary program reporting that does not identify you individually). We do not sell your Health Data.

c. How We Use Google, Fitbit, Google Health, Google Fit, and Health Connect Data.

We use Google, Fitbit, Google Health, Google Fit, Health Connect, and similar integration data only to provide, operate, support, and administer the Product and the wellness program features made available to you. These uses may include:

(i) syncing activity, fitness, sleep, or wellness data that you authorize us to receive;

(ii) displaying your activity, wellness, or program progress to you within the Product;

(iii) supporting wellness challenges, activity goals, rewards, points, or incentive administration where applicable;

(iv) generating wellness summaries, insights, trends, or recommendations for you;

(v) enabling coaching, wellness activities, or program features that you choose to use or that are made available through your wellness program;

(vi) maintaining, troubleshooting, securing, and improving the Product; and

(vii) creating aggregate or de-identified reporting as permitted by law and contract.

We do not use Google, Fitbit, Google Health, Google Fit, or Health Connect data for advertising, personalized advertising, interest-based advertising, determining creditworthiness, lending, insurance eligibility, employment suitability, or sale to data brokers or information resellers.

Google API Limited Use Statement.

Asset Health's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.

3. Where Information is Stored.

Information collected through the Product (including Health Data and Personal Information) is stored on secure servers in a secure datacenter. We use administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of the information we maintain.

Information collected through the Product may be stored, accessed, or processed in Canada, the United States, or other jurisdictions where Asset Health or its service providers operate. Personal information processed outside Canada may be subject to lawful access by courts, law enforcement, national security authorities, or other governmental authorities in those jurisdictions.

Google, Fitbit, Google Health, Google Fit, and Health Connect data that we receive from an authorized integration may be stored on Asset Health systems and/or with service providers that support the Product, subject to contractual, technical, administrative, and physical safeguards. We use safeguards designed to protect this information, including encryption in transit and at rest where appropriate, access controls, logging, monitoring, and restrictions limiting access to authorized personnel and service providers who need the information to provide, operate, support, secure, or administer the Product.

OAuth tokens, access tokens, refresh tokens, or similar credentials used to connect to Google-supported integrations are stored securely and are used only as necessary to maintain the integration you authorize.

4. Sharing and Disclosure of Information.

Except as otherwise provided in this Privacy Policy, we will keep your Personal Information and Health Data private and will not share it with third parties, unless such disclosure is necessary to: (a) comply with a court order or other legal process; (b) protect our rights or property; or (c) enforce our Terms of Use Agreement. We may also share Health Data with service providers that support the operation of the wellness program (for example, hosting, service analytics used to operate the Product, biometric screening or coaching vendors) under contractual requirements to protect confidentiality and security, and only as needed to provide services.

Google, Fitbit, Google Health, Google Fit, and Health Connect Data Sharing.

We do not sell Google, Fitbit, Google Health, Google Fit, Health Connect, or similar integration data. We do not share this data with advertising platforms, data brokers, information resellers, or use it for advertising purposes.

We may share this data only as necessary to:

(i) provide, operate, support, secure, or administer the Product and wellness program features you use;

(ii) work with service providers that support the Product, such as hosting, cloud infrastructure, security, customer support, analytics used to operate the Product, coaching, biometric screening, or wellness program vendors, subject to confidentiality and security obligations;

(iii) administer wellness program requirements, challenges, points, rewards, or incentives, including limited reporting to your employer or wellness plan sponsor as described in this Privacy Policy;

(iv) comply with applicable law, court orders, subpoenas, or legal process;

(v) protect the rights, safety, security, or integrity of Asset Health, users, the Product, or others; or

(vi) complete a merger, acquisition, reorganization, or sale of assets, subject to applicable legal and contractual requirements.

We do not disclose your identifiable Google, Fitbit, Google Health, Google Fit, or Health Connect data to your employer for employment decision-making.

Where incentive administration requires reporting to your employer or wellness plan sponsor, we disclose only limited program administration information, such as completion status, points, reward eligibility, or incentive qualification. We do not disclose the underlying identifiable activity, sleep, heart rate, biometric, or health data from your Google-supported integration to your employer for employment decision-making.

We will never disclose the entries to your personal online "Journal" to any third parties. Only you and the Asset Health staff will have access to these entries. The Asset Health staff has access to these entries solely for the purpose of properly administering the Product.

5. Confidentiality and Security of Personal Information.

We use reasonable safeguards designed to protect Personal Information and Health Data from unauthorized access, use, disclosure, alteration, and destruction. Access is limited to authorized personnel and service providers who need the data to support the Product.

6. Lost or Stolen Information.

You must promptly notify us if your user name or password is lost, stolen or used without permission. In such an event, we will cancel that user name or password, issue you a new user name and password, and update our records accordingly.

7. Other Limits to Your Privacy.

The Product contains links to other websites. We are not responsible for the privacy practices or the content of such websites. We may also make chat rooms, news and other services available to you. Understand that any Information you disclose in these areas becomes public information. We have no control over its use, and you should exercise caution when deciding to disclose your Personal Information.

8. Data Retention.

a. Retention Period. We retain Personal Information and Health Data for as long as necessary to provide the Product and administer your employer-sponsored wellness program, and as required under the terms of the agreement with your employer (the wellness plan sponsor) and applicable law.

b. Employer Program Changes / Termination. If your employer terminates the wellness program services with Asset Health, we will handle Health Data in accordance with our contractual obligations and applicable law, which may include de-identification and secure destruction of PHI.

c. Backups. Backups are maintained on a rolling basis for business continuity and disaster recovery purposes and are overwritten on a scheduled cycle. As a result, information may persist in backups for a limited period after deletion or program termination, after which it is overwritten or securely destroyed.

d. Retention of Google, Fitbit, Google Health, Google Fit, and Health Connect Data.

We retain Google, Fitbit, Google Health, Google Fit, Health Connect, and similar integration data for as long as necessary to provide the Product, administer the wellness program, support incentive administration where applicable, comply with legal or contractual obligations, maintain security and audit records, resolve disputes, and support business continuity and disaster recovery.

When this information is no longer required, we will delete, destroy, anonymize, or de-identify it in accordance with applicable law, contractual obligations, and our data retention procedures.

9. Deletion of Data / How to Request Deletion.

Because users do not create an account in the Product, deletion requests are handled through your employer's wellness program administration process.

a. How to Request Deletion. You may request deletion of your Personal Information and/or Health Data by: (i) contacting your employer's Human Resources department or wellness program administrator; or (ii) contacting Asset Health's Privacy Officer using the contact information in this document.

b. What We Delete and When. When we receive a verified request, we will delete or de-identify your Personal Information and/or Health Data as appropriate, subject to: (i) any retention obligations under the agreement with your employer; and (ii) applicable legal requirements. If deletion cannot be completed immediately due to contractual or legal retention requirements, we will restrict the data and delete it when permissible.

c. Timing. Verified deletion requests are generally completed within 30 days, unless additional time is required due to legal, contractual, or technical constraints (for example, backup retention cycles).

d. Disconnecting Google-Supported Integrations.

You may disconnect a Google, Fitbit, Google Health, Google Fit, Health Connect, or similar integration through the Asset Health portal, through the applicable Google or Fitbit account settings, through the Google Health or Health Connect settings, or by contacting Asset Health.

Disconnecting an integration will stop future collection of data from that integration, subject to reasonable processing time. Information collected before disconnection may continue to be retained, used, or deleted/de-identified as described in this Privacy Policy, applicable wellness program materials, and applicable law.

If you request deletion of Google, Fitbit, Google Health, Google Fit, Health Connect, or similar integration data, we will delete or de-identify the information as appropriate, subject to legal, contractual, security, backup, audit, and wellness program administration requirements.

10. Updates and Changes to Privacy Policy.

We may update this Privacy Policy from time to time. Where required by applicable law, we will provide notice of material changes and obtain consent for new or materially different collections, uses, or disclosures of personal information.

Contact Information

John J. Wilson
General Counsel
Asset Health
2250 Butterfield Drive, Suite 210
Troy, MI 48084
(248) 822-7441
jwilson@assethealth.com

Canada / PIPEDA Supplement

This Canada / PIPEDA Supplement applies to individuals located in Canada and to personal information handled by Asset Health in circumstances where the Personal Information Protection and Electronic Documents Act or other applicable Canadian privacy laws apply. This Supplement should be read together with our Privacy Policy and other applicable notices.

In the event of a conflict between this Supplement and a U.S.-specific notice, this Supplement governs the handling of personal information subject to Canadian privacy law.

Personal Information

For Canadian users, "personal information" means information about an identifiable individual. Personal information may include Contact Data, Demographic Data, Traffic Data, Product usage information, Health Data, biometric screening information, health assessment responses, wellness program participation information, activity information, sleep information, coaching information, support communications, and other information that identifies or can reasonably be associated with you.

Accountability

Asset Health is responsible for personal information under its control. We have designated a Privacy Officer who is accountable for our privacy compliance program. We maintain policies and practices designed to protect personal information, respond to privacy questions and complaints, train personnel, and oversee service providers that process personal information on our behalf.

Purposes

We collect, use, and disclose personal information for the purposes identified in our Privacy Policy, this Supplement, applicable wellness program materials, consent forms, and notices provided at or before the time of collection. These purposes may include providing and administering the Product and wellness program, supporting coaching and wellness activities, confirming completion of program requirements and incentives where applicable, providing customer support, maintaining Product security and functionality, communicating with you, complying with legal obligations, and creating aggregated or de-identified reports.

Consent

We collect, use, and disclose personal information only with your knowledge and consent, except where permitted or required by law. We seek consent in a form appropriate to the sensitivity of the information and the reasonable expectations of the individual. Because Health Data, biometric screening data, health assessment responses, activity data, sleep data, and similar wellness information may be sensitive, we will obtain express consent where required or appropriate.

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. If you withdraw consent, certain Product features, wellness program services, incentive administration, coaching, integrations, or related activities may no longer be available.

Google, Fitbit, Google Health, Google Fit, and Health Connect Integrations

If you are located in Canada and choose to connect a Google, Fitbit, Google Health, Google Fit, Health Connect, or similar Google-supported health or fitness integration to the Product, the information we collect, receive, access, store, use, and disclose through that integration will be treated as personal information and, where applicable, sensitive health or wellness information.

Depending on the integration you enable and the permissions you grant, this information may include: step count; activity minutes; sleep duration; weight; device source information; data source metadata; and other health, fitness, wellness, or activity data made available through the applicable Google-supported integration.

We collect and use this information only if you choose to enable the applicable integration and authorize the requested permissions. We use the information to provide, operate, support, secure, and administer the Product and wellness program features made available to you, including syncing activity or wellness data, displaying progress, supporting wellness challenges or goals, administering points, rewards, or incentives where applicable, providing wellness insights or coaching features, troubleshooting, security, and creating aggregate or de-identified reporting as permitted by law and contract.

We do not sell Google, Fitbit, Google Health, Google Fit, Health Connect, or similar integration data. We do not use this data for advertising, personalized advertising, interest-based advertising, determining creditworthiness, lending, insurance eligibility, employment suitability, or sale to data brokers or information resellers.

We may share this information with service providers that support the Product and wellness program, subject to confidentiality, security, and contractual obligations. We do not disclose your identifiable Google, Fitbit, Google Health, Google Fit, Health Connect, or similar integration data to your employer for employment decision-making. Where necessary to administer the wellness program, we may disclose limited program administration information to your employer or wellness plan sponsor, such as completion status, points, reward eligibility, or incentive qualification.

You may disconnect a Google-supported integration through the Product where available, through the applicable Google or Fitbit account settings, through Google Health or Health Connect settings, or by contacting Asset Health's Privacy Officer. Disconnecting an integration will stop future collection from that integration, subject to reasonable processing time. Information collected before disconnection may continue to be retained, used, deleted, anonymized, or de-identified as described in the Privacy Policy, this Supplement, applicable wellness program materials, and applicable law.

Asset Health's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.

Limiting Collection, Use, Disclosure, and Retention

We limit the personal information we collect to what is reasonably necessary for the purposes identified. We use and disclose personal information only for those purposes, for purposes to which you have consented, or as otherwise permitted or required by law. We retain personal information only as long as necessary to fulfill the purposes for which it was collected, meet contractual obligations, comply with legal obligations, resolve disputes, maintain security and audit records, and support business continuity and disaster recovery.

When personal information is no longer required, we securely delete, destroy, anonymize, or de-identify it in accordance with applicable law and our retention procedures.

Employer and Wellness Plan Sponsor Reporting

We do not disclose your identifiable Health Data, health assessment responses, biometric screening results, personal journal entries, coaching notes, or similar individually identifiable wellness information to your employer for employment decision-making.

Where necessary to administer the wellness program, we may disclose limited information to your employer or wellness plan sponsor, such as whether you completed a required program activity, whether you earned an incentive, or aggregate/de-identified program reporting that does not reasonably identify you. We may also disclose information where necessary to respond to your request for a reasonable accommodation or where otherwise permitted or required by law.

Service Providers

We may transfer personal information to service providers that process information on our behalf, including hosting providers, security providers, customer support providers, analytics providers used to operate and maintain the Product, biometric screening vendors, coaching vendors, and other wellness program vendors.

We require service providers to use personal information only to provide services to us or the wellness program, protect the information using safeguards appropriate to its sensitivity, notify us of suspected or actual privacy or security incidents, and return, delete, or securely dispose of information when required by contract or law.

Storage and Processing Outside Canada

Personal information may be stored, accessed, or processed in Canada, the United States, or other jurisdictions where Asset Health or its service providers operate. When personal information is transferred to service providers for processing, we remain responsible for protecting it and use contractual, technical, administrative, and organizational measures designed to provide a comparable level of protection.

Personal information processed outside Canada may be subject to lawful access by courts, law enforcement, national security authorities, or other governmental authorities in those jurisdictions.

Safeguards

We use administrative, technical, physical, and organizational safeguards appropriate to the sensitivity of the personal information we maintain. These safeguards are designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, and destruction. Access is limited to authorized personnel and service providers who need the information to provide, administer, support, secure, or operate the Product and wellness program.

Access and Correction

Subject to applicable law, you may request access to the personal information we hold about you. Upon request, we will inform you whether we hold personal information about you, provide access to that information, explain how it has been used, and identify the third parties or categories of third parties to whom it has been disclosed.

You may also request correction of personal information that you believe is inaccurate or incomplete. Where appropriate, we will correct the information and notify third parties that have access to the information. If we do not agree with the requested correction, we will record the unresolved disagreement where required or appropriate.

We will respond to access requests as quickly as possible and no later than 30 days after receiving the request, unless an extension is permitted by applicable law. If an extension is required, we will notify you and explain the reason for the extension and your right to complain to the Office of the Privacy Commissioner of Canada.

Privacy and Security Incidents

If we become aware of a breach of security safeguards involving personal information, we will assess the incident in accordance with applicable law. Where required, including where the breach creates a real risk of significant harm to an individual under PIPEDA, we will notify affected individuals and report the breach to the Office of the Privacy Commissioner of Canada as soon as feasible. We will also maintain records of breaches as required by applicable law.

Questions and Complaints

If you have questions, concerns, or complaints about our handling of your personal information, you may contact our Privacy Officer using the contact information below. We will investigate and respond to privacy complaints in accordance with applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Contact Information

John J. Wilson
General Counsel
Asset Health
2250 Butterfield Drive, Suite 210
Troy, MI 48084
(248) 822-7441
jwilson@assethealth.com

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
www.priv.gc.ca

Please read these terms of service. If you agree please scroll all the way down and click on "I Agree" to continue. If you have any questions or concerns with these terms and do not agree for any reason, please email us at support@assethealth.com.

ASSET HEALTH TERMS OF USE

IMPORTANT: THIS ASSET HEALTH (“ASSET HEALTH”) TERMS OF USE (“AGREEMENT”) IS A LEGAL AGREEMENT BETWEEN YOU AND ASSET HEALTH THAT PROVIDES THE TERMS AND CONDITIONS FOR YOUR USE OF ASSET HEALTH’S ONLINE APPLICATION (“APPLICATION”), COURSES, THE AFFILIATED WEBSITE (“USER SITE”) AND ANY RELATED SOFTWARE, MATERIALS AND/OR DOCUMENTATION (COLLECTIVELY, THE “SERVICE”). BY ACCEPTING THIS AGREEMENT, YOU ARE CONFIRMING YOUR ACCEPTANCE OF THE AGREEMENT AND AGREE TO BECOME BOUND BY THIS AGREEMENT. IF YOU DO NOT AGREE TO BE BOUND BY THIS AGREEMENT, THEN DO NOT ACCEPT THIS AGREEMENT AND YOU WILL NOT RECEIVE ACCESS TO THE SERVICE

1. The Service.

1.1 Asset Health grants you a non-transferrable right to use the Service subject to the terms of the agreement between Asset Health and your employer. By clicking on “I Agree”, you agree to be bound by any and all license agreements that your employer has entered into with Asset Health.

1.2 To provide you with the most current version of the Service, Asset Health reserves the right to update, upgrade or otherwise change the Service and any Applications at any time. By clicking on “I Agree”, you signify that you understand and agree that such updates, upgrades or other changes may occur from time to time during your use of the Service and Applications without prior notice to you.

2. Access to the Service and Security.

2.1 Asset Health will create an account, with an associated password, through which you may access the Service based on the actual Services purchased by your employer. The date you are provided with such password shall be the Service Activation Date. You may access the Site either through a web browser or, as applicable, through certain other Applications.

2.2 Other than distribution of the initial password for access to the Service, Asset Health will have no obligation or responsibility with regard to the use, distribution or management of such passwords. You agree to notify Asset Health immediately if you suspect any unauthorized use of the Service, User Site or related passwords.

2.3 You acknowledge and agree that there is a strict limit of one user per account on any and all Asset Health Applications. In addition, you may not share or disclose your username or password.

2.4 You acknowledge that you are familiar with and understand your obligations to comply with Asset Health’s HIPAA compliance standards and protocols pertaining to security and privacy of Protected Health Information (“PHI”), which are set forth in the System and Online Application. You, as an Asset Health Client Administrator, have unique credentialed System and Application access through which you may access and perform allowed administrative functions pertaining to PHI. In the event you become aware of or cause a breach of PHI through your use of the System or Online Application, you agree that you shall and are obligated to notify Asset Health immediately of such a breach and the nature of and timeline details of such a breach.

2.5 Children under the age of 13 are not permitted to use the Service, and we do not intentionally collect or maintain Personal Information from those who are under 13 years old. Protecting the privacy of children is very important to us. Thus, if we obtain actual knowledge that a user is under 13, we will take steps to remove that user's Personal Information from our databases. We recommend that children between the ages of 13 and 18 obtain a parent's permission before submitting information over the internet. By using the Service, you are representing that you are at least 18 years old, or that you are at least 13 years old and have a parent’s permission to use the Service.

3. Restrictions and Prohibited Acts. As a condition of your use of the Service, you will not use the Service for any purpose that is unlawful or prohibited by this Agreement. You may not use the Service in any manner that could damage, disable, overburden or impair any Asset Health server, or the network(s) connected to any Asset Health server, or interfere with any other party’s use and enjoyment of the Service. You may not attempt to gain unauthorized access to services, materials, other accounts, computer systems or networks connected to any Asset Health server or to the website, through hacking, password mining or any other means. You may not obtain or attempt to obtain any materials or information through any means not intentionally made available through the Service. You may not use the Service, including any Application, on a timeshare or service bureau basis. In addition, you may not access or use the Service or distribute or display Content in any manner that:

3.1 Violates any laws or regulations or is not for a legitimate business purpose;

3.2 Introduces a virus, worm, Trojan horse or other harmful software code;

3.3 Consumes excessive CPU time, bandwidth, memory storage space, or any other system or network resources;

3.4 Engages in any systematic extraction of data or data fields, including, without limitation, email addresses;

3.5 Exposes Asset Health to adverse publicity;

3.6 Infringes or violates the copyright, patent, trademark, service mark, trade name, trade secret or other intellectual property rights of any third party or Asset Health;

3.7 Discloses or collects personally identifying information or private information about any third party without that party's consent (or parental consent in the case of a minor);

3.8 Transmits, promotes, solicits or comprises harassing, abusive, threatening, obscene, vulgar, libelous, pornographic or otherwise objectionable or unlawful content or activity;

3.9 Attempts to mislead others about your identity or the origin of a message or other communication, or impersonates or otherwise misrepresents your affiliation with any other person or entity;

3.10 Transmits junk mail, spam, chain letters, or other unsolicited email or duplicative messages;

3.11 Sells, leases, or rents access to or use of the Service;

3.12 Advocates, promotes, incites, instructs, informs, assists or otherwise encourages violence or any high-risk activity where damage or injury to persons, property, environment or business may result;

3.13 Designs, develops, or creates a competitive product or service to Asset Health's products and services;

3.14 Links to content that promotes any of the above; or

3.15 Asset Health, using commercially reasonable judgment, finds objectionable.

4. Acceptable Use Policy. Notwithstanding the covenants and restrictions set forth in Section 3, above, this Acceptable Use Policy describes actions that Asset Health Inc. ("Asset Health") prohibits when you use its website and/or services (the "Services"). The terms "you," "your" and "yours" refer to the Asset Health workforce member, customer or participant, or vendor. The Acceptable Use Policy is governed by our Terms of Service. Our Terms of Service take precedence over any conflicting Acceptable Use Policy provision. BY USING THE SERVICES OR THE Asset Health WEBSITE, YOU CONSENT TO THE TERMS AND CONDITIONS OF THIS ACCEPTABLE USE POLICY. IF YOU DO NOT AGREE TO THIS ACCEPTABLE USE POLICY, DO NOT USE THE WEBSITE AND/OR SERVICES. Asset Health may, in its sole discretion, determine whether you are in violation of this Acceptable Use Policy. The Services may be used only for lawful purposes and may not be used for any illegal activities. Using the Services in an illegal, abusive or otherwise inappropriate manner that interferes with or diminishes others' use and enjoyment of the Services is prohibited. The following list gives examples of illegal, abusive, interfering, unacceptable or otherwise inappropriate behavior while using the Services. This list is provided by way of example and shall not be considered exhaustive.

Adversely impacting the availability, reliability or stability of Asset Health's Services.
Launching or facilitating, whether intentionally or unintentionally, a denial of service attack on any of Asset Health's Services.
Attempting to bypass or break any security mechanism on any of the Services or using the Services in any other manner that poses a security or service risk to Asset Health, to any user of our Services, or to any of our respective customers or their customers.
Testing or reverse-engineering the Services in order to find limitations, vulnerabilities or evade filtering capabilities.
Using the Services in any manner that may subject Asset Health or any third party to liability, damages or danger.
Using the Services in any manner that violates any applicable third party policies or requirements that Asset Health has communicated to the customer.
Engaging in fraud with respect to your account.
Using your account to engage in fraudulent activity with respect to third parties.
Using any of the Asset Health Properties or Asset Health Marks other than as expressly permitted in the Terms of Service.
Transmitting any material that may infringe the intellectual property rights or other rights of third parties, including but not limited to trademark, copyright or rights of publicity, or otherwise violating, infringing or misappropriating the rights of any third party.
Promoting or engaging in illegal activities.
Engaging in activities or transmitting through the Services any information that may be libelous or defamatory or otherwise malicious or harmful to any person or entity, or discriminatory based on race, sex, religion, nationality, disability, sexual orientation or age.
Harvesting or otherwise collecting information about others from Asset Health's website without their express consent.
Interfering with or disrupting networks connected to the Services or violating the regulations, policies or procedures of such networks.
Using the Services, or a component of the Services, in a manner not authorized by Asset Health.

4.1 Remedies. Violation of this Acceptable Use Policy may result in the immediate suspension of your account or civil and/or criminal liability. Asset Health may, in addition to any remedy that it may have at law or in equity, terminate permission for you to use the Services. In such event, you are still liable for any and all outstanding charges accumulated through your use of the Services, including uses in violation of this Acceptable Use Policy or the laws of any jurisdiction. In addition, Asset Health may investigate incidents that are contrary to this Acceptable Use Policy and provide requested information to third parties who have provided notice to Asset Health stating that they have been harmed by your failure to abide by this Acceptable Use Policy. Asset Health's failure to enforce this policy in every instance in which it might have application does not amount to a waiver of Asset Health's rights hereunder.

4.2 Changes to Acceptable Use Policy. We reserve the right to change the Acceptable Use Policy from time to time without notice by posting changes to Asset Health's website. When we do, we will also revise the "last update" date of the Acceptable Use Policy.

5. Privacy. Asset Health's privacy policy, available on our website, is hereby incorporated into the Agreement by reference.

6. Term/Termination.

6.1 Term. This Agreement shall become effective when you electronically register your acceptance of this Agreement by either clicking “I Agree” or by registering for and using the Service. The Term of this Agreement shall commence on the Service Activation Date and will continue in effect until the Service Term expires.

6.2 Termination by Asset Health. Asset Health may at any time terminate the Service and this Agreement, or suspend or restrict your access to the Service in whole or in part, if:

6.2.1 Asset Health determines in its sole and exclusive judgment that terminating your Service is advisable for security reasons, to protect Asset Health from liability, or for the continued normal and efficient operation of the Service.

6.3 Upon termination of Service, all rights granted to you under this Agreement and any Application License Agreement will terminate immediately. Asset Health reserves the right to delete any data files associated with your use of the Service upon termination of the Service.

7. Proprietary Rights.

7.1 You acknowledge and agree that Asset Health and its licensors own all right, title and interest in: (a) the Service; (b) the Applications; (c) the User Site; and (d) any other Asset Health software. In addition, you acknowledge that the Service, the Applications, the User Site and any other Asset Health software are protected by United States and international copyrights, trademarks, patents and other proprietary rights and laws. You may not decompile, reverse-engineer, decode or otherwise examine the internal functioning of the Service, the Applications, the User Site or any Asset Health software, including the embedded Asset Health Flash Player in Application-generated converted files, and may not make, use, sell, copy, reproduce, distribute, transmit or create derivative works from the Service, the Application or any other Asset Health software without Asset Health's prior written consent.

7.2 You are welcome to send suggestions on improving the Service, but in doing so, you acknowledge and agree that such suggestions will become the property of Asset Health without obligation to compensate you.

7.3 You agree and authorize Asset Health to disclose any non-identifiable health or other information that you provide to Asset Health to third parties who may use such information only for purposes of research.

8. Websites Links. Asset Health may provide links to other websites or resources as part of the Service only as a convenience to you. Asset Health is not responsible for the contents, products or services on any third-party site, and the inclusion of any link does not imply that Asset Health endorses the content on such third-party sites. You are visiting such third-party sites solely at your own risk.

9. Warranty Disclaimers.

9.1 EXCEPT FOR THE LIMITED WARRANTY SET FORTH IN SECTION 8 (“SERVICE LEVEL AGREEMENT”), THE SERVICE AND THE APPLICATIONS ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. TO THE FULL EXTENT PERMITTED BY LAW, ASSET HEALTH, ITS AFFILIATES, CONTRACTORS, SERVICE PROVIDERS, EMPLOYEES, AGENTS, LICENSORS AND ANY OTHER PARTY INVOLVED IN CREATING, PRODUCING OR DELIVERING THE SERVICE AND THE APPLICATIONS DISCLAIM ALL WARRANTIES AND REPRESENTATIONS OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING ALL WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. WITHOUT LIMITING THE FOREGOING, ASSET HEALTH DOES NOT WARRANT OR REPRESENT THAT THE SERVICE WILL BE CONTINUOUS, ACCESSIBLE, UNINTERRUPTED OR ERROR-FREE, OR THAT OUR SERVERS AND SOFTWARE ARE FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS, OR THAT ASSET HEALTH'S SECURITY PROCEDURES AND MECHANISMS WILL PREVENT THE LOSS OR ALTERATION OF OR IMPROPER ACCESS TO USER INFORMATION BY THIRD PARTIES.

9.2 THE SECURITY MECHANISMS INCORPORATED IN THE SERVICE HAVE INHERENT LIMITATIONS AND YOU MUST DETERMINE THAT THE SERVICE ADEQUATELY MEETS YOUR REQUIREMENTS. YOU ACKNOWLEDGE AND AGREE THAT ANY MATERIAL AND/OR DATA DOWNLOADED OR OTHERWISE OBTAINED THROUGH THE USE OF THE SERVICE IS DONE AT YOUR OWN DISCRETION AND RISK AND THAT YOU WILL BE SOLELY RESPONSIBLE FOR ANY DAMAGES TO YOUR COMPUTER SYSTEM OR LOSS OF DATA THAT RESULTS FROM YOUR USE OF THE SERVICE. NO ORAL OR WRITTEN INFORMATION OR ADVICE GIVEN BY ASSET HEALTH, ITS DEALERS, DISTRIBUTORS, AGENTS OR EMPLOYEES SHALL CREATE A WARRANTY OR IN ANY WAY INCREASE THE SCOPE OF ANY WARRANTY PROVIDED HEREIN.

9.3 SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO THE ABOVE EXCLUSION MAY NOT APPLY TO YOU. THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS AND YOU MAY ALSO HAVE OTHER LEGAL RIGHTS THAT VARY FROM STATE TO STATE.

10. Limitation of Liability.

10.1 NEITHER ASSET HEALTH NOR ITS SUPPLIERS SHALL BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE, COVER OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, DAMAGES FOR THE INABILITY TO USE THE SERVICE OR ACCESS DATA, LOSS OF BUSINESS, LOSS OF PROFITS, BUSINESS INTERRUPTION OR THE LIKE), ARISING OUT OF THE USE OF, OR INABILITY TO USE, THE SERVICE OR ANY APPLICATION AND BASED ON ANY THEORY OF LIABILITY INCLUDING STATUTE, BREACH OF CONTRACT, BREACH OF WARRANTY, TORT (INCLUDING NEGLIGENCE), PRODUCT LIABILITY OR OTHERWISE, EVEN IF ASSET HEALTH OR ITS REPRESENTATIVES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES AND EVEN IF A REMEDY SET FORTH HEREIN IS FOUND TO HAVE FAILED OF ITS ESSENTIAL PURPOSE.

10.2 THE LIMITATIONS ON LIABILITY IN THIS SECTION ARE INTENDED TO APPLY TO THE WARRANTIES AND DISCLAIMERS ABOVE AND ALL OTHER ASPECTS OF THIS AGREEMENT. SOME JURISDICTIONS DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR EXCLUSION MAY NOT APPLY TO YOU, AND YOU MAY ALSO HAVE OTHER LEGAL RIGHTS THAT VARY FROM STATE TO STATE.

10.3 THE CONTENT CONTAINED IN THE SERVICE, APPLICATIONS, USER SITE AND ANY OTHER ASSET HEALTH SOFTWARE, INCLUDING BUT NOT LIMITED TO TEXT, GRAPHICS, IMAGES, AUDIO, VIDEO, ANIMATIONS, ETC. (“CONTENT”) ARE FOR INFORMATIONAL PURPOSES ONLY. THE CONTENT IS NOT INTENDED TO BE A SUBSTITUTE FOR PROFESSIONAL MEDICAL ADVICE, DIAGNOSIS OR TREATMENT; NOR IS IT A REPLACEMENT FOR FINANCIAL OR BENEFITS ADVICE THAT YOU MAY RECEIVE FROM YOUR HUMAN RESOURCES DEPARTMENT OR PERSONAL FINANCIAL ADVISER. THE INDIVIDUALS THAT APPEAR IN THE COURSE VIDEOS ARE ACTORS AND NOT MEDICAL PROFESSIONALS. YOU SHOULD ALWAYS SEEK THE ADVICE OF YOUR PHYSICIAN OR OTHER QUALIFIED HEALTH PROVIDER WITH ANY QUESTIONS YOU MAY HAVE REGARDING A MEDICAL CONDITION; YOU SHOULD ALWAYS SEEK THE ADVICE OF YOUR HUMAN RESOURCES DEPARTMENT OR PERSONAL FINANCIAL ADVISER WITH ANY QUESTION YOU MAY HAVE REGARDING HEALTH CARE BENEFITS OR FINANCIAL-RELATED HEALTH CARE ISSUES. ASSET HEALTH IS NOT IN THE BUSINESS OF PROVIDING MEDICAL, HEALTH CARE OR FINANCIAL ADVICE. RELIANCE ON ANY CONTENT IS SOLELY AT YOUR OWN RISK.

11. Miscellaneous. This Agreement is governed by and construed in accordance with the laws of the State of Michigan, excluding conflict of law provisions. You agree to submit to the exclusive jurisdiction of the courts of the State of Michigan and the United States federal district court located in Wayne County, Michigan. You are solely responsible for your familiarity and compliance with any laws that may prohibit your participation in or use of any part of the Service. This Agreement constitutes the entire agreement between you and Asset Health and supersedes all prior agreements, representations and understandings between the parties regarding the subject matter contained herein. If any provision of this Agreement is held to be invalid or unenforceable, then such provision shall be construed, as nearly as possible, to reflect the intentions of the parties, and all other provisions will remain in full force and effect. Asset Health's failure to exercise or enforce any right or provision of this Agreement shall not constitute a waiver of such right or provision unless acknowledged and agreed to by Asset Health in writing. From time to time, Asset Health may be required to update or modify this Agreement and shall provide you notice of such modifications; provided, however, your use of the Service after such notice shall constitute acceptance of the new Agreement. Your rights hereunder may not be assigned or transferred to any third party without the written consent of Asset Health. Each party will provide the other with written notice under this Agreement by sending the other party notice as follows: for you, notice will be sent to the address and contact person for your account; and for Asset Health, notice will be sent to Asset Health, 2250 Butterfield Dr., Ste. 100, Troy, MI 48084 Attention: General Counsel.

Asset Health does not warrant or represent that it complies with any privacy laws or regulations outside of the United States.

You will be logged out of the system if you decline the terms of use. Click OK to confirm that you decline the terms of use, or Click Cancel to read the terms of use again.

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW THIS NOTICE CAREFULLY.

Notice of Privacy Practices, updated and effective August 3, 2026.

This Notice has been drafted to comply with the “HIPAA Privacy Rules,” under federal law. Any terms that are not defined in this Notice have the meaning specified in the HIPAA Privacy Rules.

Please provide this Notice to your family.

ATTENTION: If you speak a language other than English, language assistance services that are free of charge are available to you. Contact your employer’s Human Resources department to request these services. Asset Health’s Customer Support also can assist in connecting you to your Wellness Plan sponsor’s translation service.

How We Protect Your Privacy

We are required by law to protect the privacy of your protected health information (PHI) and to provide you with this notice of our privacy practices. We will not disclose confidential information without your authorization unless it is necessary to provide your health benefits and administer the Plan(s), or as otherwise required or permitted by law. When we need to disclose individually identifiable information, we will follow the policies described in this Notice to protect your confidentiality.

We maintain confidential information and have procedures for accessing and storing confidential records. We restrict internal access to your confidential information to employees who need that information to provide your benefits. We train those individuals on policies and procedures designed to protect your privacy. Our Privacy Officer monitors how we follow those policies and procedures, and educates our organization on this important topic.

How We May Use and Disclose Your Protected Health Information

We will not use your confidential information or disclose it to others without your written authorization, except for the purposes, listed in this section. When required by law, we will restrict disclosures to the Limited Data Set, or otherwise as necessary, to the minimum necessary information to accomplish the intended purpose.

Treatment. We may disclose your PHI to your health care provider for the provision, coordination or management of your health care and related services. For example, we may disclose your PHI to a health care provider when the provider needs that information to provide treatment to you.

Disclosures to the Plan Sponsor. We may only disclose aggregate summary health information to the Plan Sponsor, but not personally identifiable information.

Disclosures to Business Associates. We contract with individuals and entities (“business associates”) to perform various functions on our behalf or provide certain types of services. To perform these functions or provide these services, our business associates will receive, create, maintain, use or disclose PHI. We require the business associates to agree in writing to contract terms to safeguard your information, consistent with federal law.

Disclosures to Family Members or Others. Unless you object, we may provide relevant portions of your PHI to a family member, friend or other person you indicate is involved in your health care. If you are not capable of agreeing or objecting to these disclosures because of, for example, an emergency situation, we will disclose limited PHI, only to resolve the emergency. After the emergency, we will give you the opportunity to object to future disclosures to family and friends.

Other Uses and Disclosures. The law allows us to disclose PHI without your prior authorization in the following circumstances:

Required by law. We may use and disclose your PHI to comply with the law.

Public health activities. We will disclose PHI when we report to a public health authority for purposes such as public health surveillance, public health investigations or suspected child abuse.

Reports about victims of abuse, neglect or domestic violence. We will disclose your PHI in these reports only if we are required or authorized by law to do so, or if you otherwise agree.

To health oversight agencies. We will provide PHI as requested to government agencies that have the authority to audit or investigate our operations.

Lawsuits and disputes. If you are involved in a lawsuit or dispute, we may disclose your PHI in response to a subpoena or other lawful request, but only if efforts have been made to tell you about the request or obtain a court order that protects the PHI requested.

Law enforcement. We may release PHI if asked to do so by a law enforcement official in the following circumstances: (a) to respond to a court order, subpoena, warrant, summons or similar process; (b) to identify or locate a suspect, fugitive, material witness or missing person; (c) to assist the victim of a crime if, under certain limited circumstances, we are unable to obtain the person's agreement; (d) to investigate a death we believe may be due to criminal conduct; (e) to investigate criminal conduct; and (f) to report a crime, its location, or victims, or the identity, description or location of the person who committed the crime (in emergency circumstances).

Medical research. We may disclose PHI for medical research projects, subject to strict legal restrictions.

Serious threat to health or safety. We may disclose your PHI to someone who can help prevent a serious threat to your health and safety or the health and safety of another person or the general public.

Uses and Disclosures With Your Written Authorization

We will not use or disclose your confidential information for any purpose other than the purposes described in this Notice, without your written authorization. For example, we will not 1) supply confidential information to another company for its marketing purposes, 2) sell your confidential information, or 3) provide your confidential information to a potential employer with whom you are seeking employment, without your signed authorization. You may revoke an authorization that you previously have given by sending a written request to our Privacy Officer, but not with respect to any actions we already have taken.

Your Individual Rights
You have the following rights:

Right to inspect and copy your protected health information. Except for limited circumstances, you may review and copy your PHI. Your request must be addressed to the Privacy Officer. In certain situations we may deny your request, but if we do, we will tell you in writing of the reasons for the denial and explain your rights with regard to having the denial reviewed. If the information you request is in an electronic health record, you may request that these records be transmitted electronically to yourself or a designated individual.

If you request copies of your PHI, we may charge you a reasonable fee to cover the cost. Alternately, we may provide you with a summary or explanation of your PHI, upon your request, if you agree to the rules and cost (if any) in advance.

In the event your employer, as sponsor of its wellness plan, terminates the services of Asset Health, pursuant to our contractual requirements and the governing HIPAA and HITECH regulations, Asset Health is required to proceed with deidentification of and ultimate destruction of your PHI securely stored by Asset Health.

Right to correct or update your protected health information. If you believe that the PHI we have is incomplete or incorrect, you may ask us to amend it. Your request must be made in writing and must be addressed to the Privacy Officer. To process your request, you must use the form we provide and explain why you think the amendment is appropriate. We will inform you in writing whether the amendment will be made or denied. If we agree to make the amendment, we will make reasonable efforts to notify other parties of your amendment. If we agree to make the amendment, we will also ask you to identify others you would like us to notify.

We may deny your request if you ask us to amend information that:

Was not created by us, unless the person who created the information is no longer available to make the amendment;
Is not part of the PHI we keep about you;
Is not part of the PHI that you would be allowed to see or copy; or
Is determined by us to be accurate and complete.

If we deny the requested amendment, we will notify you in writing how to submit a statement of disagreement or complaint, or request inclusion of your original amendment request as part of your PHI.

Right to obtain a list of the disclosures. You have the right to get a list of PHI disclosures, which also is referred to as an accounting. You must make a written request to the Privacy Officer to obtain this information.

The list will not include disclosures we have made as authorized by law. For example, the accounting will not include disclosures made for treatment, payment and health care operations purposes (except as noted in the following paragraph). Also, no accounting will be made for disclosures made directly to you or under an authorization that you provided or those made to your family or friends. The list will not include other disclosures, including incidental disclosures, disclosures we have made for national security purposes, disclosures to law enforcement personnel, or disclosures made before April 14, 2003. The list we provide will include disclosures made within the last six years unless you specify a shorter period.

You may also request and receive an accounting of disclosures of electronic health records made for payment, treatment or health care operations during the prior three years for disclosures made on or after 1) January 1, 2014, for electronic health records acquired before January 1, 2009, or 2) January 1, 2011, for electronic health records acquired on or after January 1, 2009.

The first list you request within a 12-month period will be free. You may be charged for any additional lists within a 12-month period.

Right to choose how we communicate with you. You have the right to ask that we send information to you at a specific address (for example, at work rather than home) or in a specific manner (for example, by email rather than regular mail). We must agree to your request if you state that disclosure of the information may put you in danger.

Right to request additional restrictions on health information. You may request restrictions on our use and disclosure of your confidential information for the treatment, payment and health care operations purposes explained in this Notice. While we will consider all requests for restrictions carefully, we are not required to agree to a requested restriction. However, we must comply with your request to restrict a disclosure of your confidential information for payment or health care operations if you paid for these services in full, out of pocket.

Questions and Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or the U.S. Department of Health and Human Services. To file a complaint with us, put your complaint in writing and address it to the Privacy Officer listed below. The Plan(s) will not retaliate against you for filing a complaint. You may also contact the Privacy Officer if you have questions or comments about our privacy practices.

Future Changes to Our Practices and This Notice

We are required to follow the terms of the privacy notice currently in effect. However, we reserve the right to change our privacy practices and make any such change applicable to the PHI we obtained about you before the change. If a change in our practices is material, we will revise this Notice to reflect the change. We will send or provide a copy of the revised Notice. You may also obtain a copy of any revised Notice by contacting the Privacy Officer.

Contact Information

John J. Wilson
General Counsel
Asset Health
2250 Butterfield Drive, Suite 210
Troy, MI 48084
(248) 822-7441
jwilson@assethealth.com

The content contained in the Asset Health System, including but not limited to text, graphics, images, audio, video, animations, etc. ("Content"), are for informational purposes only. The Content is not intended to be a substitute for professional medical advice, diagnosis or treatment; nor is it a replacement for financial or benefits advice that you may receive from your Human Resources Department or personal financial adviser. You should always seek the advice of your physician or other qualified health care provider with any questions you may have regarding a medical condition; you should always seek the advice of your Human Resources Department or personal financial adviser with any questions you may have regarding health care benefits or financial-related health care issues. Asset Health is not in the business of providing medical, health care or financial advice. Reliance on any Content is solely at your own risk. Asset Health is in compliance with the Americans with Disabilities Act. If you require an accommodation, please contact Human Resources.

Recommended Browsers

The Asset Health program runs optimally with other applications and internet sessions closed. This is particularly important if using a computer with less than 1 GB of Random Access Memory (RAM). This site has been developed and tested in accordance with W3C specifications. The following browsers meet the requirements to view the website as intended:

PC

Internet Explorer 11

Microsoft Edge (latest version)

Firefox (latest version)

Chrome (latest version)

Safari (latest version, on Mac OSX and iOS)

Opera (latest version)

Mobile Device

Microsoft Edge (latest version)

Firefox (latest version)

Chrome (latest version)

Safari (latest version, on Mac OSX and iOS)

Android Browser v5.0+

Required Plugins

Some 3rd party plugins may be required to view multimedia content:

Acrobat Reader 8.1

Required Settings

To utilize all of the features effectively throughout the website, ensure the following required settings are enabled for your web browser:

Javascript
ActiveX controls and plugins
Active Scripting

Notice Regarding Your Wellness Program

If you choose to participate in the wellness program, you may be asked to complete a voluntary Health Assessment (HA) — also referred to as a Health Risk Assessment (HRA), Health Risk Questionnaire (HRQ), Wellness Assessment (WA), Personal Health Assessment (PHA), or Health Behavior Questionnaire (HBQ) — that asks a series of questions about your health-related activities and behaviors and whether you have or had certain medical conditions (e.g., cancer, diabetes, heart disease). You may also be asked to complete a biometric screening (which will include a blood test) for various biometric measurements, e.g., BMI, blood pressure, glucose, etc. You are not required to complete the HA, biometric screening or other medical examinations.

However, eligible individuals who choose to participate in the wellness program may receive an incentive for completing the HA and/or participating in the biometric screening. Although you are not required to complete the HA or biometric screening, only eligible individuals who do so will receive any available incentives.

Additional incentives may be available for individuals who participate in certain health-related activities or achieve certain health outcomes, e.g., weight loss, smoking cessation, lower blood pressure, etc. If you are unable to participate in any of the health-related activities, or achieve any of the health outcomes required to earn an incentive, you are entitled to a reasonable accommodation or an alternative standard. You may request a reasonable accommodation or an alternative standard by contacting your wellness program administrator or Human Resources department.

The information from your HA and biometric screening will help you understand your current health and potential risks, and may also be used to offer you services through the wellness program, such as coaching, iKnowledge (online wellness) courses, etc. You also are encouraged to share your results or concerns with your personal health care provider.

Protections from Disclosure of Medical Information

We are required by law to maintain the privacy and security of your personally identifiable health information. Although the wellness program and your employer may use aggregate information they collect to design a program based on identified health risks in the workplace, the wellness program will never disclose any personal information publicly or to the employer, except as necessary to respond to a request from you for a reasonable accommodation needed to participate in the wellness program, or as expressly permitted by law. Medical information that personally identifies you, provided in connection with the wellness program, will not be provided to your supervisors or managers and may never be used to make decisions regarding your employment.

Your health information will not be sold, exchanged, transferred or otherwise disclosed except to the extent permitted by law to carry out specific activities related to the wellness program. You will not be asked or required to waive the confidentiality of your health information as a condition of participating in the wellness program or receiving an incentive. Anyone who receives your information for purposes of providing you services as part of the wellness program must abide by the same confidentiality requirements. The only individuals who will receive your personally identifiable health information are those determined to be necessary - such as a “qualified health professional,” “wellness program administrator” or “health coach" - to provide you with services under the wellness program.

Additionally, all medical information obtained through the wellness program will be maintained separate from your personnel records. Information stored electronically will be encrypted, and no information you provide as part of the wellness program will be used in making any employment decision. Appropriate precautions will be taken to avoid any data breach. In the event of a privacy or security incident involving information you provide in connection with the wellness program, we will assess the incident in accordance with applicable law and provide notices to affected individuals, regulators, and other parties where required.

You may not be discriminated against in employment because of the medical information you provide through participation in the wellness program, nor may you be subjected to retaliation if you choose not to participate.

If you have questions or concerns regarding this notice, or about protections against discrimination and retaliation, please contact your wellness program administrator or Human Resources department.