Privacy Policy

This policy explains what Orchard Corp (“Orchard”, “we”, “us”) collects when you use www.orchardcorp.com, how we use it, who we share it with, and the choices you have.

Our text message programme has its own policy, which carriers require us to publish separately. Where the two overlap, the SMS policy governs mobile opt-in data and phone numbers collected for SMS consent.

Orchard is a physician-founded healthcare staffing organization. We place locum tenens and permanent clinicians with hospitals, health systems, and clinics, and handle the credentialing and logistics around those placements.

We are a staffing company, not a healthcare provider. We do not deliver clinical care and we do not hold patient records.

Information you give us. When you complete a form — a coverage request, a provider enquiry, a job application, a referral, a careers or investor enquiry — we collect what that form asks for. Depending on the form this may include:

• name, email address, and telephone number;
• for clinicians: specialty, provider type, credentials, licensure and state of licence, board status, work history, availability, and the content of anything you attach or write;
• for facilities: organization, role, and the details of the coverage you are requesting;
• the consent choices you made on the form, and a record of when you made them.

Information collected automatically. Like most sites, we and our providers collect technical data such as IP address, browser and device type, referring page, and the pages you view. This comes from analytics, security, and hosting tooling rather than from anything you type.

Live chat. If you use the chat widget, its provider processes the messages you send and basic session information.

Please do not send us patient information, medical records, or any other protected health information through this website or the chat widget. We have no need for it, and the site is not built to receive it.

As a staffing company we are not a HIPAA covered entity in respect of this website. Where we act as a business associate under a specific client agreement, that agreement governs instead.

We use what you give us to:

• respond to your enquiry and contact you about it;
• assess your suitability for assignments, and present you to facilities where you have agreed to it;
• verify credentials, licensure, and references;
• arrange credentialing, licensing, travel, and housing for an assignment;
• keep records of consent and of our dealings with you;
• operate, secure, and improve the website;
• meet our legal and contractual obligations.

If you are a clinician, the point of applying is that a facility eventually sees your details. We do not do that automatically.

We never present a provider to a hospital, health system, or clinic without that provider's explicit approval first. You decide which opportunities your profile is submitted for. Where you approve a submission, we share the information the facility needs to evaluate you and to credential you — typically your CV, licensure and certifications, work history, and references.

Facilities receiving your information handle it under their own policies and obligations, and we are not responsible for what they do with it once shared.

We use third parties to run the business. They may process your information on our behalf, and only for the purposes we set:

• Salesforce — our customer relationship system, where form submissions, applications, and candidate records are stored;
• Google Analytics — website usage measurement;
• Google reCAPTCHA — spam and abuse prevention on our forms;
• Tidio — the live chat widget;
• Cloudflare and Vercel — content delivery, security, and hosting.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We may disclose information where the law requires it — for example in response to a subpoena, court order, or lawful request from a regulator — and where we need to establish, exercise, or defend legal claims, or protect the safety of any person.

If Orchard is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction. Mobile opt-in data and phone numbers collected for SMS consent are excluded, as set out in our SMS policy.

We use cookies and similar technologies to keep the site working, to measure how it is used, and to protect our forms from abuse. Analytics cookies are set by Google Analytics; others are set by our chat, security, and hosting providers.

Most browsers let you refuse or delete cookies through their settings. Google publishes a browser add-on that opts you out of Google Analytics across every site that uses it. Blocking some cookies may affect how parts of the site behave.

Where you have separately opted in, we may contact you by SMS. Message and data rates may apply, frequency varies, and you can stop at any time by replying STOP.

Mobile opt-in data, SMS consent, and phone numbers collected for SMS purposes are not shared with any third party or affiliate for marketing purposes. Our SMS policy sets this out in full.

We keep information for as long as we need it for the purpose it was given, and afterwards for as long as required to meet legal, tax, contractual, and record-keeping obligations. Credentialing records for a placement are generally kept longer than a general enquiry, because clients and regulators may require them.

You can ask us to delete information we no longer need — see your choices below.

We use reasonable administrative and technical safeguards, including encrypted transport, access controls on our systems, and abuse protection on our forms. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You can, at any time:

• ask what personal information we hold about you and request a copy;
• ask us to correct information that is wrong or out of date;
• ask us to delete information we no longer have a reason to keep;
• withdraw your approval for us to present you to a particular facility, or to any facility;
• opt out of marketing email using the unsubscribe link, or of SMS by replying STOP.

Depending on where you live, state privacy law may give you additional rights, including the right not to be discriminated against for exercising them. To make a request, email info@orchardcorp.com from the address you gave us, or call the number below. We may need to verify your identity before acting, particularly where credentialing records are involved.

The Services are for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

Orchard operates in the United States and our services are directed to the United States. Information you provide is processed and stored in the United States, which may have data protection rules that differ from those where you live.

We may update this policy. The date at the top of the page shows when it was last revised, and material changes will be reflected there. Continuing to use the site after a change means you accept the revised policy.