Terms and Policies

Last modified March 2, 2026

‍

Thank you for choosing Zest Health. Welcome!

Zest Health (“Zest”) is a forward-thinking company that leverages technology to provide you with personalized, supportive care for skin health and dermatological needs.

The healthcare services available through Zest are delivered by independent, licensed professionals from Citrus Dermatology Services of MD, P.C. ("Citrus MD"), Citrus Dermatology Services of NY, P.C. ("Citrus NY"), Citrus Dermatology Services of NJ, P.C. (“Citrus NJ”), independent physician-owned medical groups (collectively “Citrus”). To ensure you are matched with a licensed provider in your state, it's crucial you accurately identify your location before beginning a virtual visit. For more details on telehealth, please refer to our Informed Consent document.

Zest should not be used for medical emergencies. If you encounter a medical emergency, dial "911" immediately.

Zest and Citrus value your privacy. For more information on our privacy practices, please review the Zest Privacy Policy and Citrus Notice of Privacy Practices.

By accessing Citrus healthcare services through the Zest platform, you expressly agree and consent to receive email, push, SMS, and live, prerecorded and artificial voice calls to the phone numbers you provide related to the care you receive from Citrus and Zest, and further agree that lab results, progress updates, and other healthcare messages may be sent to the inbox within the patient portal. While you can opt-out of these communications by emailing support@zesthealth.com, doing so may mean missing out on useful information and reminders about your treatment progress.

Should you have a dispute with Zest that cannot be resolved by mutual agreement then you agree that such dispute will be addressed through binding arbitration on an individual basis, rather than in a class action. Arbitration is a quicker alternative to court proceedings, where a professional arbitrator will resolve our dispute. Additionally, to the extent permitted by law Zest’s and Citrus’ liability is limited under all circumstances as detailed in the Terms of Use.

Please note, Zest is neither a healthcare provider nor an insurance provider.

We look forward to caring for you!‍

Terms of Use

The Site is not intended for use in the event of an emergency or other urgent situations. If you believe you may have a medical emergency, call 911 immediately.

Zest Dermatology, Inc. (“Zest Health”, “we,” “our” or “us”) owns and operates the website www.joinzest.com, www.zesthealth.com, and the Zest Health web application (collectively, the “Site”). We facilitate access to online clinical telehealth services from and communications with independent licensed healthcare professionals who practice through Citrus (the “Providers”) and the Member Portal (the “Portal”) to patients (“Telehealth Services”) through the Site and Portal (collectively, the “Services”). The Site, excluding the Telehealth Service provided by Providers, is referred to Platform Service. Please read these Terms of Use (the “Terms”) carefully before using the Services. By accessing and using the Site, you are agreeing to these legally binding Terms of Use, including the mandatory arbitration provision in Section 17. If you do not agree to be bound by these terms, you may not access or use the Site or the Services.

1. Healthcare Services

Zest Health provides an online platform for communication between patients and Citrus . We facilitate these communications via our website and mobile applications (collectively, the "Services"), supporting both synchronous and asynchronous telehealth services.

Zest Health itself does not offer medical advice or care. We contract with Citrus, separate physician-owned medical groups that maintain a network of Providers offering clinical telehealth services. The Providers, not Zest Health, are responsible for the care they provide to you. Neither Zest Health, nor any third parties who promote our Site or Services, shall be liable for advice or care received from a Provider via our platform.

2. Risks of Telehealth Services

You acknowledge potential risks are associated with the receipt of telehealth services, such as insufficient transmission of information, possible delays, or privacy breaches despite robust security measures. By accepting these Terms, you acknowledge these risks and agree that you will not hold Zest Health liable for these risks. The Citrus Informed Consent document provides additional information related to the risks associated with the access and use of telehealth services. You acknowledge that your reliance on any Provider or information delivered by a Provider via the Site is solely at your own risk and you assume full responsibility for all associated risks.

The Site, including without limitation, text, copy, audio, video, photographs, illustrations, graphics and other visuals, is for general informational purposes only and does not constitute professional medical advice, diagnosis, treatment, or recommendations of any kind by Zest Health. Although Zest Health attempts to ensure the accuracy of information on the Site, we do not warrant the accuracy, completeness, or usefulness of this information. Any reliance you place on such information is strictly at your own risk and we disclaim all liability and responsibility arising from any reliance placed thereon. You should always seek the advice of your qualified health care professionals with any questions or concerns you may have regarding your individual needs and any medical conditions. While Zest Health facilitates your selection of, and communications with, Providers, Zest Health does not provide medical services, and the doctor-patient relationship is between you and your Citrus Provider.

3. Availability of Services

The Services are subject to state and federal laws and may not be available in all states. When using the Site to access a Provider, you will be asked to identify the state in which you are physically located. Provider’s ability to provide Services to you is dependent on the state in which you are physically located. You represent and warrant that you have accurately responded to questions related to your location and you expressly authorize us to utilize geolocation technology to validate the accuracy of your response. Access to and use of the Site and/or the Services is limited exclusively to users located in States within the United States where the Services are available. Services are not available to users located outside the United States.

4. Privacy Practices

Our Privacy Policy details how we handle your personal information. By accessing or using the Site, you agree that information provided by you in connection with the Site will be governed by the Privacy Policy, and further that information provided by you in connection with the Services will be governed by the Citrus Notice of Privacy Practices.

5. User Accounts; Security

You agree to fully, accurately, and truthfully create your Zest Health Account (“Account”), including but not limited to your legal name, mailing address, phone number, email address, and password.

Your Account and password are personal to you, and you are responsible for maintaining the confidentiality of your Account password, and for all activities that occur under your Account. You may not transfer or share your Account password, and agree to prohibit anyone else from using your Zest Health Account. Zest Health reserves the right to take any and all action, as it deems necessary or reasonable, regarding the security of the Site and your Account, including the right to revoke your access to the Site with or without cause. Under no circumstances shall Zest Health be held liable to you for any liabilities or damages resulting from or arising out of your use of the Site or your release of your Account or Account password to a third party.

6. Eligibility

The Site is intended for users who are at least 18 years old and reside in the United States. Individuals under 18 are not permitted to use our Site. By using our Site, you represent that you meet the age requirement and are a resident of the United States, located in a state where the Services are available.

Specifically, to be eligible to use the Site, you must at least meet the following criteria and, by agreeing to these Terms, represent and warrant that you: (a) are at least 18 years of age or older; (b) are a legal resident of the United States and located in a State where the Services are available; (c) have not been previously suspended or removed from the Site, or engaged in any activity that could result in suspension or removal from the Site; (d) will only maintain one Account at any given time; and (e) have full power and legal authority to enter into these Terms and in doing so will not violate any other agreement to which you are a party, and will comply with these Terms at all times. If you do not meet all of these requirements, you must not access or use the Site.

7. Access and Use

Upon agreeing to these Terms, Zest Health grants you a limited, non-transferable right to access the Site for your personal, non-commercial purposes

You agree not to:

(i) access the Site in any unlawful way or for any unlawful purpose;
(ii) impersonate or misrepresent your identity or falsely state or misrepresent your current location, medical history, information about your medical condition, or your affiliation with a person or entity;
(iii) promote, encourage, or engage in defamatory, abusive, libelous, obscene, threatening, or otherwise objectionable behavior;
(iv) tamper, hack, spoof, copy, modify, or otherwise corrupt the administration, security, or proper function of the Site;
(v) use robots or scripts with the Site;
(vi) distribute viruses or other harmful computer code through the Site;
(vii) attempt to reverse engine, reverse assemble, reverse compile, decompile, disassemble, translate, or otherwise alter, defraud, or create false results from any executable code, information on, or received by this Site;
(viii) have any antivirus or antispyware software running that is set to override the internet browser’s cookies setting;
(ix) harvest or collect PHI about any other individual who uses the Site;
(x) infringe or facilitate infringement on any copyright, patent, trademark, trade secret, or other proprietary, publicity, or privacy rights of any party, including such rights of third parties; or
(xi) otherwise use the Site in any manner that exceeds the scope of use granted above.

Zest Health reserves the right, in its sole discretion, to terminate your access to all or part of this Site, with or without cause, and with or without notice. Violations of security may result in civil or criminal liability. Zest Health will investigate occurrences that may involve such violations and may involve, and cooperate with, law enforcement authorities in prosecuting users who are involved in such violations. You agree not to use any device, software, or routine to interfere or attempt to interfere with the proper working of this Site or any activity being conducted on this Site.

8. Feedback and Testimonials

If you choose to give us feedback, such as suggestions to improve our Site and/or the Citrus Services, we or Citrus may act on your feedback without obligation to you. Any such feedback will be our property that we or Citrus can use, including for any commercial purposes, at our discretion without having to credit you. Zest Health will never publish your name or other identifying information in connection with any testimonial unless you have given us your prior approval. Zest Health may republish any publicly available review, comment, or testimonial about Zest Health or the Site on its websites or in other media.

9. Communication Preferences

By creating an Account, you consent to receive electronic communications from Zest Health and Citrus (e.g., via email, SMS, chat messages, voice, artificial or prerecorded voice, or by posting notices to the Site). These communications may include notices about your account (e.g., payment authorizations, password changes and other transactional information) and are part of your relationship with Zest Health and Citrus. You agree that any notices, agreements, disclosures or other communications that we send to you electronically will satisfy any legal communication requirements, including, but not limited to, that such communications be in writing. We also may send you communications via email, including, but not limited to, newsletters, surveys and other news and information we think will be of interest to you. You may opt out of receiving promotional emails at any time by following the unsubscribe instructions provided in the email or otherwise opting out in a reasonable manner.

By providing your phone number to us through the Site, you consent to be contacted by or on behalf of Zest Health, Citrus and/or your Provider at the number(s) you have provided, including calls, texts and/or artificial or prerecorded voice messages regarding the Services. Message and data rates may apply. You can opt-out of any further text messages by replying “STOP” or by emailing us at support@zesthealth.com.

ATTENTION: Email and text messages are not secure methods of communication and we cannot ensure the security or confidentiality of messages sent by email and/or text message. Information, including protected health information, transmitted by email or text message is not encrypted and could be read by a third party. If you would prefer not to exchange protected health information via email or text message, please notify us at support@zesthealth.com.

10. Proprietary Rights

Zest, Zest Health, and Zest Dermatology are trademarks of Zest Dermatology, Inc., in the United States of America. Other trademarks, names and logos on this Site are the property of their respective owners.

Unless otherwise specified in these Terms, all information and screens appearing on this Site, including documents, services, site design, text, graphics, logos, images and icons, as well as the arrangement thereof, are the sole property of Zest Health. All rights not expressly granted herein are reserved. Except as otherwise required or limited by applicable law, any reproduction, distribution, modification, retransmission, or publication of any copyrighted material is strictly prohibited without the express written consent of the copyright owner or license.

‍DMCA Notifications for intellectual property infringement.

The Site and its entire contents, features and functionality (including but not limited to all information, software, text, displays, images, video and audio, and the design, selection and arrangement thereof), are the property of Zest Health, Citrus, or its licensors or suppliers, as applicable, and are protected by United States and international copyright, trademark, patent, trade secret and other intellectual property rights laws.

You agree not to store, copy, modify, reproduce, retransmit, distribute, disseminate, create derivative works of, rent, lease, loan, sell, publish, broadcast, display, or circulate such information to anyone. Use, reproduction, copying, or redistribution of Zest Health trademarks, service marks, and logos are strictly prohibited without the prior written permission of Zest Dermatology, Inc.

We respect copyright law and expect our users to do the same. In accordance with the Digital Millennium Copyright Act (“DMCA”) of 1998, the text of which may be found on the U.S. Copyright Office website at https://www.copyright.gov/legislation/dmca.pdf, we will respond expeditiously to claims of copyright infringement committed using the Services that are reported to us, provided they meet the criteria below.

We respect the intellectual property rights of others, and we ask you to do the same. We may, in appropriate circumstances and at our discretion, terminate service and/or access to this Site for users who infringe the intellectual property rights of others.

11. Intellectual Property

If you believe that your work is the subject of copyright infringement and/or trademark infringement and appears on our Site, please provide our designated agent the following information:

A physical or electronic signature of a person authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.
Identification of the copyrighted and/or trademarked work claimed to have been infringed, or, if multiple works at a single online site are covered by a single notification, a representative list of such works at that site.
Identification of the material that is claimed to be infringing or to be the subject of infringing activity and that is to be removed or access to which is to be disabled at the Site, and information reasonably sufficient to permit us to locate the material.
Information reasonably sufficient to permit us to contact you as the complaining party, such as an address, telephone number, and, if available, an electronic mail address at which you may be contacted.
A statement that you have a good faith belief that use of the material in the manner complained of is not authorized by the copyright and/or trademark owner, its agent, or the law.
A statement that the information in the notification is accurate, and under penalty of perjury, that you are authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.

Our agent for notice of claims of copyright or trademark infringement on this Site can be reached at 1111B S. Governors Ave., STE 815554, Dover, DE 19904, United States.

Please also note that for copyright infringements under Section 512(f) of the Copyright Act, any person who knowingly materially misrepresents that material or activity is infringing may be subject to liability.

12. Disclaimer of Warranties

Your use of this Site is at your own risk. Content has not been verified or authenticated in whole or in part by us, and may include inaccuracies or typographical or other errors. We do not warrant the accuracy of timeliness of the Materials or Submissions contained on this Site. We have no liability for any errors or omissions in the Materials, whether provided by Us, our licensors or suppliers or other users.

WE, FOR OURSELF, CITRUS AND OUR LICENSORS, MAKE NO EXPRESS, IMPLIED OR STATUTORY REPRESENTATIONS, WARRANTIES, OR GUARANTEES IN CONNECTION WITH THIS SITE OR THE SERVICES, OR THE QUALITY, SUITABILITY, TRUTH, ACCURACY OR COMPLETENESS OF ANY INFORMATION OR MATERIAL CONTAINED OR PRESENTED ON THIS SITE, INCLUDING WITHOUT LIMITATION THE CONTENT. UNLESS OTHERWISE EXPLICITLY STATED, TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THIS SITE, MATERIALS AND ANY INFORMATION OR MATERIAL CONTAINED OR PRESENTED ON THIS SITE IS PROVIDED TO YOU ON AN “AS IS,” “AS AVAILABLE” AND “WHERE-IS” BASIS WITH NO WARRANTY OF IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT OF THIRD-PARTY RIGHTS. WE DO NOT PROVIDE ANY WARRANTIES AGAINST VIRUSES, SPYWARE OR MALWARE THAT MAY BE INSTALLED ON YOUR COMPUTER.

13. Links to Other Sites

This Site may be linked to other web sites that are not our sites (collectively, “Third-Party Sites”). Certain areas of the Site may allow you to interact and/or conduct transactions with such Third-Party Sites, and, if applicable, allow you to configure your privacy settings in your Third-Party Site account to permit your activities on this Site to be shared with your contacts in your Third-Party Site account and, in certain situations, you may be transferred to a Third-Party Site through a link but it may appear that you are still on this Site. In any case, you acknowledge and agree that the Third-Party Sites may have different privacy policies and terms and conditions and/or user guides and business practices than ours, and you further acknowledge and agree that your use of such Third-Party Sites is governed by the respective Third-Party Site privacy policy and terms and conditions and/or user guides. You hereby agree to comply with any and all terms and conditions, users guides and privacy policies of any of Third-Party Sites. We are providing links to the Third-Party Sites to you as a convenience, and we do not verify, make any representations or take responsibility for such Third-Party Sites, including, without limitation, the truthfulness, accuracy, quality or completeness of the content, services, links displayed and/or any other activities conducted on or through such Third-Party Sites. YOU AGREE THAT WE WILL NOT, UNDER ANY CIRCUMSTANCES, BE RESPONSIBLE OR LIABLE, DIRECTLY OR INDIRECTLY, FOR ANY GOODS, SERVICES, INFORMATION, RESOURCES AND/OR CONTENT AVAILABLE ON OR THROUGH ANY THIRD-PARTY SITES AND/OR THIRD-PARTY DEALINGS OR COMMUNICATIONS, OR FOR ANY HARM RELATED THERETO, OR FOR ANY DAMAGES OR LOSS CAUSED OR ALLEGED TO BE CAUSED BY OR IN CONNECTION WITH YOUR USE OR RELIANCE ON THE CONTENT OR BUSINESS PRACTICES OF ANY THIRD-PARTY. Any reference on the Site to any product, service, publication, institution, organization of any third-party entity or individual does not constitute or imply Our endorsement or recommendation.

14. Limitation of Liability Regarding Use of Site

ZEST HEALTH SHALL NOT BE LIABLE FOR THE ACTS OR OMISSIONS OF CITRUS OR THE PROVIDERS. ZEST HEALTH AND ANY THIRD PARTIES MENTIONED ON THIS SITE ARE NEITHER RESPONSIBLE NOR LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, PUNITIVE, OR OTHER DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, THOSE RESULTING FROM LOST PROFITS, LOST DATA, OR BUSINESS INTERRUPTION) ARISING OUT OF OR RELATING IN ANY WAY TO THE SITE, SITE-RELATED SERVICES, CONTENT OR INFORMATION CONTAINED WITHIN THE SITE, AND/OR ANY LINKED WEBSITE, WHETHER BASED ON WARRANTY, CONTRACT, TORT, OR ANY OTHER LEGAL THEORY AND WHETHER OR NOT ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR SOLE REMEDY FOR DISSATISFACTION WITH THE SITE, SERVICES, AND/OR LINKED WEBSITES IS TO STOP USING THE SITE AND/OR THOSE SERVICES. TO THE EXTENT ANY ASPECTS OF THE FOREGOING LIMITATIONS OF LIABILITY ARE NOT ENFORCEABLE, THE MAXIMUM LIABILITY OF ZEST HEALTH TO YOU WITH RESPECT TO YOUR ACCESS OR USE OF THIS SITE OR ANY CONTENT OR MATERIALS THEREIN SHALL NOT EXCEED THE GREATER OF (I) THE FEES YOU PAID TO ZEST HEALTH IN THE THREE (3) MONTHS PRECEDING THE DATE ON WHICH YOUR CLAIM AROSE, OR (II) $100 (ONE HUNDRED DOLLARS). YOU HEREBY AGREE TO WAIVE, TO THE FULLEST EXTENT PERMITTED BY LAW, ALL LAWS THAT LIMIT THE EFFICACY OF SUCH WAIVER OF CLAIMS OR RELEASES.

15. Indemnification

You agree to indemnify, defend, and hold harmless Zest Health, Citrus, their affiliates, licensors, and service providers and its and their respective officers, directors, employees, contractors, agents, licensors, suppliers, successors, and assigns from and against any claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable attorneys' fees) arising out of or relating to your violation of these Terms or your use of the Site other than as expressly authorized in these Terms, or your use of any information obtained from the Site.

16. Legal Disputes

These Terms will be subject to and construed in accordance with the laws of the State of Oregon, United States of America excluding its rules regarding conflicts of law. Foreign laws do not apply. You agree that any claim or dispute you may have against Us must be resolved exclusively by a state or federal court located in the State of Oregon, except as otherwise agreed by the parties or as described in the Arbitration subsection below. You agree to submit to the personal jurisdiction of the courts located in Portland, Oregon for the purpose of litigating all such claims or disputes.

16.1 Binding Arbitration

Except for any disputes, claims, suits, actions, causes of action, demands or proceedings (collectively, “Disputes”) in which either party seeks to bring an individual action in small claims court or seeks injunctive or other equitable relief for the alleged unlawful use of intellectual property, including, without limitation, copyrights, trademarks, trade names, logos, trade secrets or patents, you and Zest Health and Citrus agree (a) to waive your, Citrus and Zest Health’s respective rights to have any and all disputes arising from or related to these Terms, or the Site, resolved in a court, and (b) to waive your, Citrus and Zest Health’s respective rights to a jury trial. Instead, you, Citrus and Zest Health agree to arbitrate disputes through binding arbitration (which is the referral of a dispute to one or more persons charged with reviewing the dispute and making a final and binding determination to resolve it instead of having the dispute decided by a judge or jury in court).

For any claim (i) raised by a resident of a country other than the United States of America; or (ii) where the total amount of the award sought is less than ten thousand dollars ($10,000.00), you agree that we may elect to resolve the dispute in a cost effective manner through binding non-appearance-based arbitration. In the event we elect arbitration, you hereby agree to move any claims to the exclusive jurisdiction of an arbitration procedure, which shall be initiated through an established alternative dispute resolution (“ADR”) provider chosen by us. The ADR provider and the parties must comply with the following rules: (a) the arbitration shall be conducted by telephone, online and/or be solely based on written submissions, the specific manner shall be chosen by the party initiating the arbitration; (b) the arbitration shall not involve any personal appearance by the parties or witnesses unless otherwise mutually agreed by the parties; and (c) any judgment on the award rendered by the arbitrator may be entered in any court of competent jurisdiction. Arbitration expressly excludes claims for injunctive or other equitable relief.

16.2. No Class Arbitrations, Class Actions or Representative Actions

You, Citrus and Zest Health agree that any Dispute arising out of or related to these Terms or the Site is personal to you, Citrus and Zest Health and that such Dispute will be resolved solely through individual arbitration and will not be brought as a class arbitration, class action or any other type of representative proceeding. You, Citrus and Zest Health agree that there will be no class arbitration or arbitration in which an individual attempts to resolve a Dispute as a representative of another individual or group of individuals. Further, you, Citrus and Zest Health agree that a Dispute cannot be brought as a class or other type of representative action, whether within or outside of arbitration, or on behalf of any other individual or group of individuals.

16.3 Federal Arbitration Act

You and Zest Health agree that these Terms affect interstate commerce and that the enforceability of this Section 17 shall be both substantively and procedurally governed by and construed and enforced in accordance with the Federal Arbitration Act, 9 U.S.C. § 1 et seq. (the “FAA”), to the maximum extent permitted by applicable law.

17. Application Support

We want to help fix any problems you have with the telehealth system. Contact us right away if your technology is not working at (516) 388-7209 and support@zesthealth.com. Zest Health will use commercially reasonable efforts to respond to questions and provide support. Please note that we may change or remove functionality and other features of the Site at any time, without notice.

18. Assignment

You may not assign, transfer, or delegate the Terms or any part thereof without Zest Health’s prior written consent. Zest Health may freely transfer, assign, or delegate all or any part of the Terms, and any rights or duties hereunder or thereunder. The Terms will be binding upon and inure to the benefit of the heirs, successors, and permitted assignees of the parties.

19. Right to Modify Terms

Zest Health may change, add, or delete portions of these Terms at any time on a going-forward basis. If we make changes to these Terms, we will update the “Last Modified” date at the beginning of these Terms. Continued use of the Site following such notice will indicate your acknowledgement of such changes and agreement to be bound by the revised Terms. We encourage you to review the Terms frequently to ensure that you understand the terms and conditions that apply when you access or use the Site. In the event that any of the Terms are held by a court or other tribunal of competent jurisdiction to be unenforceable, such terms will be limited or eliminated to the minimum extent necessary so that these Terms otherwise remain in full force and effect. These Terms constitute the entire agreement between Zest Health and you pertaining to the subject matter hereof.

Privacy Policy

I. Introduction

This Privacy Policy describes how Zest Dermatology, Inc. (“Zest Health”, “we”, “us”, or “our”) collects and uses Personal Data about you through your use of the Site and through email, text, and other electronic communications between you and Zest Health. This Privacy Policy supplements the Citrus Dermatology Services of MD, P.C., Citrus Dermatology Services of NY, P.C., and Citrus Dermatology Services of NJ, P.C. Notice of Privacy Practices.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Site. By accessing or using our Site, you agree to this Privacy Policy. This Privacy Policy may change from time to time. Your continued use of our Site after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

The safety and security of your information also depends on you. Where you have chosen a password for the use of our Site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we work diligently to try and protect your personal data, we cannot guarantee the security of your personal data transmitted to our Site. Any transmission of personal data is at your own risk.

II. Children Under the Age of 18

Our Site is not intended for children under the age of 18 and children under the age of 18 are not permitted to use our Site or provide any information to or through the Site. We do not knowingly collect Personal Data from children under the age of 18. We will remove any information about a child under the age of 18 if we become aware of it. If you believe we might have any information from a child under 18, please contact us at support@zesthealth.com.

III. What We Collect

We collect different types of information about you, including information that may directly identify you, information that is about you but individually does not personally identify you, and information that we combine with our other users’ information. This includes information that we collect directly from you or through automated collection technologies.

We collect several types of information from and about users of our Site, specifically information:

by which you may be personally identified, such as first and last name, home address, work address, billing address, shipping address, e-mail address, home, work, and mobile telephone numbers, date of birth, credit or debit card number (for payment purposes only), driver’s license number, government, national and/or state identification, medical history, Health Information, user generated content, and information pertaining to your racial or ethnic origin (“Personal Data”);
that is about you but individually does not identify you, such as traffic data, logs, referring/exit pages, date and time of your visit to or use of our Site, error information, clickstream data, and other communication data and the resources that you access and use on or through our Site; or
about your Internet connection, the equipment you use to access or use our Site and usage details.
Health Information as detailed below in the Health Information sections of this policy

We collect this information:

directly from you when you provide it to us such as information provided by filling in forms, registering for our Site, using our Site, purchasing products, or requesting further services;
automatically as you navigate through or use our Site. Information collected automatically may include estimated or precise geo-location, usage details, IP addresses, and information collected through cookies and other tracking technologies; and
From third parties, for example, our business partners.

IV. How We Use Your Personal Data (excludes Health Information which is detailed below)

We use your Personal Data for various purposes described below, including to:

provide our Site to you;
provide products and services to you;
provide you with the information you request from us;
enforce our rights arising from contracts;
provide you with information that may be of interest to you;
process, fulfill, support, and administer transactions and orders for products and services ordered by you;
carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
notify you about changes; and
provide you with notices about your account.

V. Disclosure of Your Personal Data (excludes Health Information which is detailed below)

We may disclose Personal Data that we collect or you provide as described in this privacy policy:

to affiliates, contractors, service providers, and other third parties we use to support our business. The services provided by these organizations include providing IT and infrastructure support services, and ordering, marketing, and payment processing services (our payment processors’ privacy policies may be found at https://stripe.com/us/privacy);
to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Zest Health about our Site users are among the assets transferred;
to fulfill the purpose for which you provide it;
for any other purpose disclosed by us when you provide the information; and
with your consent.

We may also disclose your Personal Data:

to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
to enforce or apply our Terms and other agreements, including for billing and collection purposes; and
if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Zest Health, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

VI. Your Rights

Depending on where you live, you may have some or all of the rights listed below in relation to your Personal Data. For example, if you live in, among other states, California, Colorado, Connecticut, Florida, Iowa, Montana, Nevada, New Hampshire, Oregon, Tennessee, Texas, Utah, or Virginia, your state has a law in effect to provide its residents with specific rights regarding their Personal Data. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

Right to Access / Know: You may have a right to request access to Personal Data that we hold about you, including details relating to the ways in which we use and share your information.
Right to Delete: You may have a right to request that we delete Personal Data we maintain about you. We cannot delete your Personal Data except by also deleting your account with us.
Right to Correct: You may have a right to request that we correct inaccurate Personal Data we maintain about you.
Right of Portability: You may have a right to receive a copy of the Personal Data we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
Restriction of Processing: You may have the right to ask us to stop or restrict our processing of Personal Data .
Withdrawal of Consent: Where we rely on consent to process your Personal Data , you may have the right to withdraw this consent.
Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.
Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
Nondiscrimination: We will not discriminate or retaliate against you for exercising any of the rights listed above.

VII. California Privacy Rights for California Residents

Under some circumstances, California law may provide you with the right to obtain a list of third parties (if any) that we provide your Personal Data to for their own direct marketing purposes.

CALIFORNIA PRIVACY RIGHTS

California Civil Code Section 1798.83 (California’s “Shine the Light” law) permits users of our Site that are California residents and who provide Personal Data in obtaining products and services for personal, family, or household use to request certain information regarding our disclosure of Personal Data to third parties for their own direct marketing purposes. If applicable, this information would include the categories of Personal Data and the names and addresses of those businesses with which we shared your Personal Data with for the immediately prior calendar year (e.g. requests made in 2021 will receive information regarding such activities in 2020). You may request this information once per calendar year. To make such a request, please contact us using the contact Information below.

VIII. Changes to the Terms of this Notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request and on our website.

IX. Contact Information ???

You can contact us at 2730 Sand Hill Road, Suite #120, Menlo Park, CA, United States or by emailing membersupport@joinzest.com

Notice of Privacy Practices

Citrus Dermatology Services of MD, P.C. ("Citrus MD"), Citrus Dermatology Services of NY, P.C. ("Citrus NY"), and Citrus Dermatology Services of NJ, P.C. (“Citrus NJ”). Effective Date: May 21, 2025.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices (the "Notice") describes how Citrus Dermatology Services of MD, P.C. ("Citrus MD"), Citrus Dermatology Services of NY, P.C. ("Citrus NY"), and Citrus Dermatology Services of NJ, P.C. (“Citrus NJ”) (collectively, “Practice”), a “covered entity” under the Health Insurance Portability and Accountability Act ("HIPAA") will use and disclose your medical and health information subject to HIPAA (“Protected Health Information” or “PHI”) as necessary to carry out treatment, payment, or business operations and for other purposes that are permitted or required by law. This Notice does not apply to health information that is not subject to HIPAA or similar state health information privacy laws, or information used or shared in a manner that cannot identify you.

We are committed to protecting your privacy and ensuring the confidentiality of PHI. PHI is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical health or condition, treatment, or payment for healthcare services. This Notice also describes your rights to access and control your PHI.

This Notice does not apply to any Practice health plan or to Practice as an employer. Any Practice health plan is considered a separate covered entity for purposes of HIPAA and has its own notice of privacy practices. This Notice only applies PHI.

You may have additional rights under other applicable state or federal law. Applicable state or federal laws that provide greater privacy protection or broader privacy rights will continue to apply and we will comply with such laws to the extent they are applicable.

Uses And Disclosures Of Protected Health Information:

PHI may be used and disclosed by our Providers, our staff, and others that are involved in your care and treatment for the purpose of providing healthcare services to you, to support our business operations, to obtain payment for your care, and any other use authorized or required by law.

Treatment:

We will use and disclose your PHI to provide, coordinate, or manage your healthcare and any related services. For example, we may share your PHI with other providers to ensure that the medical provider has the necessary PHI to diagnose and provide treatment to you.

Payment:

PHI may be used to bill or obtain payment for your healthcare services, including activities that your health insurance plan may undertake before it approves or pays for the healthcare services. For example, we will provide your health care plan with PHI it requires prior to paying us for the services we have provided to you. This use and disclosure may also include certain activities that your health plan requires prior to approving a service, such as determining benefits eligibility and prior authorization.

Health Care Operations:

We may use or disclose PHI, as needed, to manage, operate, and support the business activities of Citrus MD, Citrus NY, and Citrus NJ. These activities include, but are not limited to, quality improvement, providing treatment alternatives, employee reviews, licensing, and conducting audits, among others. We may use or disclose PHI, as necessary, to contact you to remind you of your appointment or for important services such as annual checkups, and to inform you about treatment alternatives or other health-related benefits and services that may be of interest to you. For example, we may call, text, or e-mail you to remind you of a scheduled appointment. We may also share PHI for case management and care coordination purposes. We may share PHI with our students, trainees, and staff for review and learning purposes. We may also use and share PHI to confirm the time, place, and attendance of your appointment for treatment with third-party transportation services.

Required by Law; Judicial and Administrative Proceedings:

We will use or disclose PHI when required to do so by local, state, federal, and international law. For example, we may use and disclose PHI in conjunction with judicial or administrative proceedings or for purposes of litigation as permitted by law. We may also share PHI in response to an administrative or court order, or in response to a subpoena, a discovery request, or other legal process if we are advised that you have been made aware of the request or that efforts were made to secure a qualified protective order.

Health Oversight Activities:

We may disclose PHI to a health oversight agency for audits, investigations, inspections, licensures, and other activities as authorized by law. The relevant agencies include governmental units that oversee or monitor the health care system, government benefit and regulatory programs, and compliance with civil rights laws.

Practice Ownership Change:

If Citrus is sold, acquired, or merged with another entity, PHI may become the property of the new owner. However, you will still have the right to request copies of your records and have copies transferred to another provider.

Breach Notification Purposes:

If for any reason there is an unsecured breach of PHI, we will utilize the contact information you have provided us with to notify you of the breach, as required by law. In addition, PHI may be disclosed as a part of the breach notification and reporting process.

Research:

PHI may be used by or disclosed to researchers for the purpose of conducting research when an Institutional Review or Privacy Board has approved the research and in compliance with law governing research, or where you have provided your authorization. You may choose to participate in a research study that requires you to obtain related health care services. In this case, we may share your PHI (1) with the researchers involved in the study who ordered the hospital or other health care services; and (2) with your insurance company in order to receive payment for those services that your insurance agrees to pay for. We may use and share PHI with a researcher if parts would identify you are removed before we share it with the researcher. This will only be done if the researcher agrees in writing not to share the information, will not try to contact you, and will obey other requirements that the law provides.

Business Associates:

We may disclose PHI to our business associates who provide us with services necessary to operate and function as a medical practice. We will only provide the minimum information necessary for the associate(s) to perform their functions as it relates to our business operations. For example, we may use a separate company to process our billing or transcription services that require access to a limited amount of your PHI. Please know and understand that all of our business associates are obligated to comply with the same HIPAA privacy and security rules in which we are obligated. Additionally, all of our business associates are under contract with us and committed to protect the privacy and security of PHI. We may also share your with a business associate who will remove information that identifies you so that the remaining information can be used or disclosed for purposes outside of this Notice.

Other Uses and Disclosures:

We may further use and disclose your PHI for other purposes permitted by HIPAA and applicable law such as to an appropriate government agency as permitted or required by law, for law enforcement purposes when all applicable legal requirements have been met, for public health purposes, for military, national security, and other specialized government functions, for Worker's Compensation in compliance with Worker's Compensation laws, to a coroner, medical examiner, or funeral director as necessary for them to perform their duties, and for purposes related to organ and tissue donation.

Uses And Disclosures in Which You Have the Right to Object and Opt Out:

Communication with family and/or individuals involved in your care or payment of your care:

Unless you object, disclosure of your PHI may be made to a family member, friend, or other individual, whom you have identified that is involved in your care or payment for your care. We may share your PHI with these persons if you are present or available before we share your PHI with them and you do not object to our sharing your PHI with them, or we reasonably believe that you would not object to this. If you are not present and certain circumstances indicate to us that it would be in your best interests to do so, we will share information with a friend or family member or someone else identified by you, to the extent necessary. This could include sharing information with your family or friend so that they could pick up a prescription or a medical supply.

Fundraising:

As necessary, we may disclose your PHI to contact you regarding fundraising events and efforts. For example, you may receive a letter from Citrus asking for a donation to support enhanced patient care, treatment, education, or research at Citrus. You have the right to object or opt out of these types of communications. Please let our office know if you would NOT like to receive such communications.

Health Information Networks and Exchanges:

We may participate in certain health information networks or exchanges ("HIEs") that permit health care providers or other health care entities, such as your health plan or health insurer, to share your PHI for treatment, payment and other purposes permitted by law, including those described in this Notice. You are automatically opted in to such HIEs. Some jurisdictions allow individuals to opt out of participating in an HIE. If you wish to opt out and reside in a jurisdiction that grants you the right to opt out of the HIE, please submit a written request to us, and we will comply with such request to the extent required by law or the policies of the applicable HIE. If you opt out of participating in these HIEs and we grant your request, your PHI will no longer be provided to other health care entities through the HIE. Your decision does not affect PHI that was exchanged prior to the time you opted out of participation.

Uses And Disclosures That Require Your Authorization:

Other uses and disclosures not described in this notice will be made only with your written authorization, which you may revoke at any time, except to the extent that action has been taken in reliance on it.

Disclosures for marketing purposes which result in our receiving financial payment from a third party whose product or services is being marketed will require your written authorization. However, this does not include compensation that merely covers our cost of reminding you to take and refill your medication or otherwise communicate about a drug or biologic that is currently prescribed to you. However, we may use or disclose your PHI without your authorization to send you information about alternative medical treatments, our own programs or about health-related products and services that may be of interest to you, provided that we do not receive financial remuneration for making such communications. For example, if you suffer from a chronic illness or condition, we may use your PHI to assess your eligibility and propose newly available treatments. When we see you face-to-face, we may also use your PHI without your authorization to encourage you to maintain a healthy lifestyle and get recommended tests, suggest that you participate in a disease management program, provide you with promotional gifts of nominal value, or tell you about government sponsored health programs.

YOUR RIGHTS WITH RESPECT TO YOUR PROTECTED HEALTH INFORMATION:

The following are statements of your rights, subject to certain limitations, with respect to your PHI.

You have the right to inspect and copy your Protected Health Information: Pursuant to your written request, you have the right to inspect and copy your PHI contained in a Designated Record Set (as defined by HIPAA) in paper or electronic format for yourself or to be sent to another individual or organization. We will make every attempt to provide the records in the format you request; however, in the case that the information is not readily accessible or producible in the format you request, we will provide the record in a standard electronic format or a legible hard copy form. You have the right to request only a summary of your PHI if you do not desire to obtain a copy of your entire record. You also have the option to request an explanation of the PHI to which you were provided access when you request your entire record. We provide the Practice patient portal as one option for patients to electronically access their PHI. You may set up access to the Practice patient portal through zesthealth.com or emailing support@zesthealth.com. There is no fee for you to access information through the Practice patient portal. Under federal law, you may not inspect or copy the following types of records: psychotherapy notes, information compiled as it relates to civil, criminal, or administrative action or proceeding; information restricted by law; information related to medical research in which you have agreed to participate; information obtained under a promise of confidentiality; and information whose disclosure may result in harm or injury to yourself or others. To inspect, copy or otherwise electronically access your PHI in the designated record set, you must submit your request in writing. Where permitted by law, we may charge a reasonable fee for the costs of copying, mailing or other supplies associated with your request, including where you designate a third-party recipient. We will discuss any fees with you before processing your request. We may deny your request to inspect and copy in certain very limited circumstances. If we deny you access to your PHI for certain reasons, we will provide you with an opportunity to request that the denial be reviewed. A licensed health care professional chosen by us will perform such a review. This person will not be the same person who refused your request.
You have the right to receive a notice of breach: In the event of a breach of your unsecured PHI, you have the right to be notified of such breach. We will notify you of a breach of your unsecured PHI experienced by us or one of our Business Associates in accordance with applicable law.‍
You have the right to request amendments: At any time if you believe the PHI that we have on file for you is inaccurate or incomplete, you may request that we amend the information. Your request for an amendment must be submitted in writing and detail what PHI is inaccurate and why. Please note that submitting a request for an amendment does not necessarily mean the PHI will be amended. If we approve your request, we will include the amendment in any future disclosures of the relevant PHI. If we deny your request for an amendment, you may file a written statement of disagreement, which we may rebut in writing. The denial, statement of disagreement, and rebuttal will be included in any future disclosures of the relevant PHI. We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. In addition, we may deny your request if you ask us to amend PHI that: is not part of the PHI maintained by us; was not created by us, unless the person or entity that created the information is no longer available to make the amendment; is not part of the information which you would be permitted to inspect and copy; or is accurate and complete. All denials will be made in writing.
‍You have a right to receive an accounting of certain disclosures: You have the right to receive an accounting of certain disclosures of your PHI. An "accounting" being a list of the certain disclosures that we have made of your PHI. The request can be made for paper and/or electronic disclosures. Certain disclosures are exempt from the accounting requirement, such as (but not limited to) disclosures made for the purposes of treatment, payment, and health care operations; notification and communication with family and/or friends; and those required by law. Your request must be in writing. Your request must include the time frame that you would like us to cover, which may be no longer than 6 years prior to the date of your request. We will provide the first requested accounting in any 12-month period without charge. However, we may charge you for the cost of providing the accounting for any subsequent accounting requested in a 12-month period. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred. When regulations are effective requiring such accountings pursuant to HIPAA, we will provide a patient with an accounting of disclosures of records for treatment, payment, and health care operations only where such disclosures are made through an electronic health record and during only the 3 years prior to the date on which the accounting is requested.
‍You have the right to request restrictions of your Protected Health Information: You have a right to request to restrict and/or limit the PHI we disclose to others, such as family members, friends, and individuals involved in your care or payment for your care. You also have the right to request to limit or restrict the PHI we use or disclose for treatment, payment, and/or health care operations. Your request must be submitted in writing and include (1) what PHI you want to limit; (2) whether you want to limit our use, disclosure or both; and (3) to whom you want the limits to apply, for example, disclosure to your spouse. Please note that our practice/your provider is not required to agree to your request for restriction with the exception of a restriction requested to not disclose PHI for purposes of payment or health care operations to your health plan for care and services in which you have paid us in full out-of-pocket. If we do agree to any request, we still may provide PHI, as necessary, to give you emergency treatment.
‍You have a right to request to receive confidential communications: You have a right to request confidential communications from us by alternative means or at an alternative location. For example, you may request that we send mail only to an address specified by you which may or may not be your home address. You may request that we should only call you on your work phone or specify which telephone numbers we are allowed or not allowed to leave messages on. You do not have to disclose the reason for your request; however, you must submit a request with specific instructions in writing. We will make reasonable efforts to accommodate your request.
‍You have the right to appoint a personal representative, such as a medical power of attorney or if you have legal guardians. Your personal representative may be authorized to exercise your rights and make choices about your PHI. We will confirm the person has this authority and can act for you before we take any action based on their request.
‍You have a right to receive a paper copy of this Notice: Even if you have agreed to receive an electronic copy of this Notice, you have the right to request we provide it in paper form. You may make such a request at any time. You can also get a copy of this Notice at our website.

REVISIONS TO THIS NOTICE:

We reserve the right to change this Notice and to make the new provisions effective for all PHI that we maintain (including PHI we received or created before the change), provided the change is permitted by law. If we make changes to this Notice, we will post an updated form on our website and make written copies available upon request.

ELECTRONIC MEDICAL INFORMATION SHARING THROUGH APPLICATION PROGRAMMING INTERFACES:

You have the right to request or authorize that your electronic PHI in your designated record set be transmitted to you or another person or organization through an application programming interface (API). APIs are computer coding mechanisms that permit two or more electronic computer applications or software programs to communicate with each other and share information. You understand that PHI transmitted through an API at your request will no longer be under Practice's protection and control, will no longer be subject to the protections and rights outlined in this Notice, and may no longer be subject to the same laws, regulations, policies or procedures regarding its confidentiality, security, privacy, use, or disclosure. You understand and agree that you make any request to Practice to transmit your PHI through an API at your own risk and you assume all liability for the consequences of such action taken by Practice at your direction. Practice cautions you to confirm any confidentiality, security, or privacy protections with respect to your transmitted PHI with the recipient of the PHI prior to submitting a request to Practice to transmit your PHI through an API.

NOTICE OF REDISCLOSURE:

PHI that is disclosed pursuant to this Notice may be subject to redisclosure by the recipient and no longer protected by HIPAA. Law applicable to the recipient may limit their ability to use and disclose the PHI received, such as if they are another covered entity subject to HIPAA.

COMPLAINTS:

If at any time you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. We will not retaliate against you or change our treatment of you in any way for filing a complaint.

If you wish to file a complaint with us, please submit it in writing to our Privacy Officer at the address or email provided in the Contact section below.

If you wish to file a HIPAA complaint with the Secretary of the United States Department of Health and Human Services, please go to the website of the Office for Civil Rights (www.hhs.gov/ocr/hipaa/), call 202-619-0257 (toll free 877-696-6775), or mail to:

Secretary of the US – Department of Health and Human Services

200 Independence Ave S.W.

Washington, D.C. 20201

CONTACT

ATTN: HIPAA PRIVACY OFFICER

Paul Degnan

PHONE: 201-744-5574

EMAIL: paul.d@joinzest.com

We are required by law to provide individuals with this Notice of our legal responsibilities and privacy practices with respect to PHI. We are also required to implement safeguards to maintain the privacy of PHI and abide by the terms of the Notice currently in effect.

For more information about our privacy practices, or for additional copies of this notice, please contact us at the provided contact details, requesting to speak with our HIPAA Privacy Officer.

Zest Health Patient Code of Conduct & Discharge Policy

Effective January 1, 2025, updated June 1, 2025

Purpose: To foster a safe, respectful environment for patients and care team members. Verbal abuse, intimidation, or any form of harassment toward staff or other patients will not be tolerated.
Scope: Applies to every individual receiving care or communicating with Zest Health—via our app, phone, video, email, chat, social media, or in-person events.
Policy Statement: All patients must conduct themselves in a manner that is courteous, respectful, and compliant with this policy. Zest Health reserves the right to restrict services or terminate the patient-provider relationship when a patient’s behavior violates these standards.
Inappropriate Behavior – Definitions & Examples: Inappropriate behavior includes, but is not limited to, any verbal abuse (profanity, insults, slurs, demeaning remarks), harassment or intimidation (yelling, repeated unwanted messages, bullying, discriminatory comments), sexual harassment (unwelcome jokes, comments, or propositions of a sexual nature), disruptive conduct (refusing to end calls when asked, spamming chat channels, impersonating staff, or posting abusive content about Zest Health on public forums), and threats of violence. These examples illustrate the range of behaviors that undermine a respectful care environment; any similar conduct that creates discomfort, fear, or hostility for staff or other patients will be treated as a violation of this policy.
Actions & Consequences: Zest Health responds to misconduct along a continuum that matches the severity and frequency of the behavior. Options include:
- A verbal reminder for isolated minor incidents
- A formal written warning when issues recur or are more serious
- A temporary suspension of non-urgent services
- Immediate termination of the patient-provider relationship
- Throughout this continuum, the goal is to protect staff and patients while giving individuals a clear opportunity to correct their behavior; escalation occurs only when a patient is unwilling or unable to comply with the Code of Conduct.
Staff Support & Documentation: All incidents are logged in the patient’s chart within our EMR. Determinations are made by our Chief Medical Officer (CMO) and are final.‍
Patient Acknowledgement: Patients must review and electronically sign this policy during onboarding and again after any update. Continued use of Zest Health services constitutes acceptance.

‍Questions?

Contact our team at support@joinzest.com