KORU HEALTH ← Back to korucm.com

Legal

Privacy Policy

Effective July 2026. Last updated July 2026.

Koru Health, a Koru Capital Management Company ("Koru Health," "we," "us," or "our"), operates the website located at korucm.com (the "Site"). This Privacy Policy explains what information the Site collects, how we use it, and the choices available to you. It applies to the Site itself. It does not govern information shared with us as part of a client engagement, which is addressed separately below.

1. The Short Version

Koru Health does not sell your information, does not use advertising trackers on this Site, and does not knowingly collect Protected Health Information ("PHI") through this website. The Site is informational and does not include patient facing tools, patient portals, or clinical systems of any kind.

2. Information We Collect

We collect information in three limited ways:

2.1 Information you provide directly

If you email us, request a Bottleneck Assessment, or otherwise contact Koru Health, we receive whatever information you choose to include, typically your name, email address, organization, and the contents of your message. We use this information solely to respond to you and, if you become a client, to begin that engagement.

2.2 The Bottleneck Calculator

The Bottleneck Calculator tool on this Site runs entirely in your browser. The figures you enter, such as provider count or months of delay, are used only to perform a calculation on your device. They are not transmitted to Koru Health, stored, or logged, unless you separately choose to send that information to us by email or by requesting an assessment.

2.3 Automatically collected technical information

Like most websites, our hosting and content delivery provider may automatically log basic technical information, such as IP address, browser type, device type, and pages visited, for security, performance, and abuse prevention purposes. We do not currently use third party advertising or cross site tracking cookies on this Site.

3. How We Use Information

We do not use information collected through this Site to train third party artificial intelligence models, and we do not sell, rent, or trade personal information to third parties for their own marketing purposes.

4. Cookies and Similar Technologies

The Site may use strictly necessary cookies required for basic functionality and security, provided by our hosting infrastructure. If we add analytics tools in the future to understand aggregate Site usage, this Policy will be updated accordingly before those tools are enabled, and, where required by law, we will request your consent first.

5. Third Party Service Providers

We rely on a small number of service providers to operate this Site and our business, including web hosting and content delivery infrastructure, and email service providers. These providers process information solely on our behalf and under their own security and privacy commitments. We do not permit these providers to use your information for their own independent purposes.

6. Protected Health Information and HIPAA

This website does not collect, store, or transmit Protected Health Information. Nothing submitted through this Site, including the Bottleneck Calculator or a general inquiry, should include patient names, medical record numbers, or any other PHI.

When Koru Health is formally engaged by a healthcare organization and that engagement requires access to PHI, that access is governed by a separate, signed agreement, including a Business Associate Agreement where applicable under the Health Insurance Portability and Accountability Act ("HIPAA"), executed directly with the client. This Privacy Policy does not extend to, and should not be relied upon for, information handled under such an agreement.

7. Data Security

We take reasonable administrative, technical, and physical measures designed to protect information from unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting personal information we hold, we will take appropriate steps consistent with applicable law.

8. Data Retention

We retain information you send us for as long as reasonably necessary to respond to your inquiry, maintain our business records, and comply with legal, accounting, and tax obligations. Information related to a client engagement is retained according to the terms of that engagement and applicable professional and legal requirements.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict our use of your personal information, including rights available under the California Consumer Privacy Act and, for individuals in the European Economic Area or United Kingdom, the General Data Protection Regulation. To exercise any of these rights, contact us using the information below. We will respond within the timeframe required by applicable law.

10. Children's Privacy

This Site is intended for business and professional audiences. It is not directed to, and we do not knowingly collect personal information from, children under 16.

11. International Visitors

Koru Health is based in the United States and this Site is hosted in the United States. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your home jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be reflected on this page.

13. Contact Us

Questions about this Privacy Policy or how Koru Health handles information may be directed to:

Koru Health, Privacy
privacy@korucm.com
New York, NY