Last Updated: 08/31/2026

 

ZH Express (“ZH Express,” “Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information entrusted to us. This Privacy Policy explains how ZH Express collects, uses, maintains, protects, and discloses information when you visit http://zhexpressllc.com/, contact us, request information, use our services, or otherwise interact with us. By using our Website, you acknowledge the practices described in this Privacy Policy.

​​

1. Scope of This Privacy Policy: This Privacy Policy applies to information collected through the ZH Express website, website contact forms, service inquiry forms, email communications, telephone communications, SMS/text messaging programs, online interactions with ZH Express, business relationships with clients and prospective clients, and other channels that expressly reference this Privacy Policy. This Privacy Policy does not necessarily apply to information collected by third-party websites, applications, payer portals, government websites, or other services that we do not control.

2. About ZH Express: ZH Express provides healthcare administrative and business support services, including services that may involve medical billing, credentialing, provider enrollment, licensing support, prior authorization support, revenue cycle support, and virtual administrative assistance. Depending on the services provided and the nature of a particular engagement, ZH Express may process personal information and, in appropriate circumstances, protected health information (“PHI”) on behalf of healthcare providers or other regulated organizations.

3. Information We Collect: Depending on how you interact with us, we may collect the following categories of information. This may include contact information like name, business name, job title, email address, telephone number, mobile telephone number, business address, mailing address, and other contact information you voluntarily provide. If you contact us regarding our services, we may collect business information such as practice name, specialty, number of providers, practice location, payer information, credentialing requirements, billing requirements, licensing information, enrollment information, and other information necessary to understand your business needs. Where necessary for credentialing, enrollment, licensing, or related services, information may include professional or provider information such as provider name, NPI, professional license information, tax identification information, CAQH-related information, payer participation information, professional credentials, practice information, and other information necessary to perform contracted administrative services. If you purchase services from ZH Express, payment-related information may be processed through applicable payment providers. We may receive transaction information such as payment status, transaction identifiers, billing address, or other information provided by the payment processor. Where applicable, payment card information may be handled directly by a third-party payment processor rather than stored by ZH Express. When you visit our Website, certain information may be automatically collected, including IP address, browser type, device type, operating system, referring website, pages visited, approximate location derived from IP address, date and time of Website activity, website interaction information; and other technical information reasonably necessary to operate and secure the Website.

4. Cookies and Tracking Technologies: ZH Express may use cookies, pixels, analytics technologies, and similar technologies to operate, secure, analyze, and improve the Website. These technologies may help us understand how visitors interact with the Website, remember preferences, diagnose technical problems, measure Website performance, and improve our services. Where required by applicable law, we will provide appropriate notice and choices regarding non-essential cookies or tracking technologies. Third-party analytics or advertising providers may collect information in accordance with their own privacy policies.

5. Healthcare Privacy Consideration: ZH Express does not intentionally use Website tracking technologies to collect or disclose PHI for advertising purposes. Where tracking technologies are used in an environment involving PHI, ZH Express will evaluate the applicable HIPAA and other legal requirements and implement appropriate safeguards, restrictions, contractual arrangements, or other measures as required.

6. How We Use Information: ZH Express may use information to respond to inquiries, provide requested information, communicate with prospective and existing clients, provide contracted services, perform medical billing and administrative services, support credentialing and enrollment, support licensing processes, assist with prior authorization processes, provide virtual administrative support, process payments, manage business relationships, maintain and improve the Website, prevent fraud, abuse, and unauthorized activity, protect our systems and users, maintain business and financial records, comply with legal and regulatory obligations, enforce agreements, resolve disputes, and perform other purposes permitted by law. We may also use information for legitimate business communications, including responding to questions and providing information about services you have requested. Marketing communications will be provided in accordance with applicable law and your communication preferences.

7. SMS and Mobile Information Privacy: ZH Express does not sell, rent, or share your mobile telephone number or SMS/text messaging opt-in data with third parties or affiliates for their own marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes. We do not sell or trade SMS consent information. Mobile information and SMS consent data may be shared only as necessary to provide, operate, maintain, or support the messaging service, such as with messaging platforms, telecommunications providers, technology vendors, customer-support providers, or service providers acting on our behalf, and only for legitimate operational purposes. These service providers are not authorized to use your SMS consent information for their own independent marketing purposes.

   • SMS Consent Is Campaign-Specific: Your consent to receive SMS messages from ZH Express applies only to the messaging program or campaign for which you provided consent. Consent for one messaging purpose does not automatically enroll you in other messaging programs. SMS consent is not a condition of purchasing services from ZH Express.

   • Message Frequency: Message frequency varies depending on the messaging program and your interaction with ZH Express.

   • Message and Data Rates: Message and data rates may apply. Your carrier may charge you for messages or data according to your mobile plan.

   • Opting Out You may opt out of SMS messages at any time by replying STOP. You may also use other opt-out instructions provided in the applicable messaging program.

   • Help: For help, reply HELP or contact (628) 333-7456 / sales@zhexpressllc.com. After opting out, you may receive a final confirmation message where permitted or required.

8. How We Share Information: ZH Express may disclose information in the specific circumstances. We may share information with vendors and contractors that provide services to us, such as hosting providers, IT providers, billing and payment processors, communication platforms, messaging providers, customer support providers, security providers, analytics providers, professional advisors, and other vendors necessary to operate our business. Where appropriate, we require service providers to maintain reasonable safeguards and use information only for authorized purposes. When providing contracted healthcare administrative services, we may process information on behalf of healthcare providers and organizations according to applicable agreements and instructions. Where HIPAA applies, ZH Express may operate as a business associate of a covered entity or as a subcontractor of another business associate. Where required, appropriate Business Associate Agreements or other legally required contractual arrangements will govern the permitted use and disclosure of PHI. We may disclose information when required by applicable law, regulation, legal process, court order, subpoena, or governmental request. We may disclose information when reasonably necessary to detect, prevent, or address fraud, security issues, illegal activity, threats to safety, or violations of our agreements. Information may be disclosed in connection with a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or other corporate transaction, subject to applicable legal requirements. We may disclose information when you provide authorization or otherwise direct us to do so.

9. Protected Health Information and HIPAA: ZH Express recognizes that medical billing, claims processing, practice management, and related healthcare administrative activities may involve PHI. When ZH Express acts as a business associate under HIPAA, applicable HIPAA requirements and the applicable Business Associate Agreement govern our handling of PHI. We implement safeguards designed to protect PHI against unauthorized access, use, or disclosure. Our handling of PHI may include limiting access based on job responsibilities, using reasonable administrative safeguards, using appropriate technical safeguards, maintaining confidentiality obligations, supporting secure handling of information, managing authorized disclosures, reporting applicable incidents in accordance with contractual and legal requirements, and maintaining appropriate records. This Website Privacy Policy does not replace a client-specific Business Associate Agreement.

10. HIPAA Notice of Privacy Practices: ZH Express is an administrative services company and does not represent that it is a HIPAA-covered healthcare provider solely because it provides services to healthcare organizations. Where a healthcare provider is a covered entity, that provider may have its own HIPAA Notice of Privacy Practices. Questions regarding a patient's treatment, medical record, healthcare provider, insurance coverage, or patient privacy rights should generally be directed to the applicable healthcare provider or covered entity.

11. Information We Receive From Clients: When a healthcare provider or other client engages ZH Express, the client may provide information necessary for us to perform contracted services. Depending on the engagement, this information may include provider information, payer information, claims information, billing information, credentialing information, licensing information, and PHI. We process such information according to the applicable service agreement, Business Associate Agreement, client instructions, and applicable law.

12. Data Security: ZH Express takes reasonable measures designed to protect information against unauthorized access, alteration, disclosure, destruction, or loss. Security measures may include administrative, technical, and physical safeguards appropriate to the type of information handled. However, no method of electronic transmission, storage, website, network, or information system can be guaranteed to be completely secure. You should avoid submitting highly sensitive information through ordinary Website forms unless ZH Express specifically instructs you to do so through an appropriate secure method.

13. Data Retention: We retain information for as long as reasonably necessary to provide services, maintain business records, fulfill contractual obligations, comply with legal and regulatory requirements, resolve disputes, enforce agreements, maintain security, and fulfill legitimate business purposes. Retention periods may vary depending on the nature of the information and the applicable legal, contractual, regulatory, or operational requirements. When information is no longer required, we may securely delete, destroy, de-identify, or otherwise dispose of it in accordance with applicable requirements.

14. Your Privacy Choices: Depending on applicable law, you may have rights concerning your personal information, which may include the right to request access to certain personal information, request correction of inaccurate information, request deletion of certain information, request information regarding our processing practices, opt out of certain marketing communications, withdraw consent where processing is based on consent, opt out of certain data sales or targeted advertising where applicable, exercise applicable privacy rights without unlawful discriminationm, and submit a privacy-related complaint. The availability of these rights depends on the law applicable to you and the nature of the information.

15. Exercising Privacy Rights: To submit a privacy request, contact admin@zhexpressllc.com or (628) 333-7456. We may need to verify your identity before completing certain requests. We will respond to valid requests within the timeframe required by applicable law.

16. California Residents: If applicable to ZH Express and its activities, California residents may have additional rights under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), including rights relating to access, correction, deletion, and certain disclosures concerning personal information. ZH Express will provide California-specific disclosures and rights to the extent the CCPA/CPRA applies to the Company and the relevant processing activity. ZH Express does not sell SMS opt-in data or mobile messaging consent information.

17. Other State Privacy Laws: Certain states have enacted comprehensive consumer privacy laws that may provide residents with additional rights. Depending on applicability, these laws may include privacy laws in states such as Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Jersey, New Hampshire, Oregon, Tennessee, Texas, Utah, Virginia, and other jurisdictions. ZH Express will comply with applicable privacy requirements based on the nature of its business, the information processed, and the jurisdictions in which applicable laws apply. Where required, ZH Express may provide supplemental state-specific notices or rights.

18. Children's Privacy: The Website is intended primarily for adults and business users. ZH Express does not knowingly collect personal information from children under 13 through the Website. If you believe a child has provided personal information to us without appropriate authorization, please contact us so that we can evaluate and address the matter.

19. Do Not Track: Some browsers may provide “Do Not Track” signals or similar privacy preferences. Because there is currently no universally accepted standard for responding to every type of browser-based Do Not Track signal, the Website may not respond to every such signal. Where required by applicable law, ZH Express will honor applicable browser or platform privacy preference signals.

20. Third-Party Websites: Our Website may contain links to third-party websites. ZH Express does not control third-party privacy practices. We encourage users to review the privacy policies of third-party websites before submitting personal information.

21. Third-Party Messaging and Technology Providers: ZH Express may use third-party technology providers to deliver communications, including SMS/text messaging. These providers may process information necessary to transmit messages and operate the communication service. Such providers may include telecommunications carriers, messaging platforms, cloud service providers, customer-support systems, and other technology vendors. These providers are not authorized to use ZH Express SMS opt-in information for their own marketing or promotional purposes.

22. International Processing: ZH Express may use service providers or personnel located in jurisdictions other than the jurisdiction in which you reside. Where information is transferred across borders, we will take steps required by applicable law and contractual obligations.

23. Data Breach and Security Incidents: If ZH Express determines that an incident involving personal information or PHI requires notification under applicable law or contractual obligations, we will provide notifications in accordance with the applicable requirements. Where HIPAA applies, applicable breach-notification obligations will be handled according to HIPAA and the applicable Business Associate Agreement.

24. Changes to This Privacy Policy: We may update this Privacy Policy periodically to reflect changes in our services, technology, business practices, legal requirements, or privacy practices. When we make material changes, we may update the “Last Updated” date and provide additional notice where required by law. Your continued use of the Website after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy to the extent permitted by law.

Contact Us: Questions, requests, or concerns regarding this Privacy Policy may be directed to:

ZH Express

2120 Dover Dr, Carrollton, TX 75006

(628) 333-7456

admin@zhexpressllc.com

https://www.zhexpressllc.com

We take privacy concerns seriously and will make reasonable efforts to address privacy-related questions and requests.