2025 DesBio Authorized Reseller and Patient Direct with Business Associates Agreement for Existing User


AUTHORIZED RESELLER AND PATIENT DIRECT AGREEMENT
 
This AUTHORIZED RESELLER AND PATIENT DIRECT AGREEMENT (this “Agreement”), signed and effective on the dates set forth below (the “Effective Date”), is entered into by and between Deseret Biologicals, Inc, a Utah corporation and its affiliate DesBio PAO, LLC, DBA DBscript (“DBscript”), a Utah limited liability company (collectively, the “Company”), and (“Practitioner”).  The Company and Practitioner are referred to collectively herein as the “Parties.”  This agreement replaces any prior agreements in entirety.
In consideration of the mutual covenants and promises contained herein, and for other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, the Parties hereby agree as follows:
 
The Company is a wholesale supplier of homeopathic, nutraceutical and other natural healthcare products (“Products”), which require distribution through a licensed healthcare practitioner.
 
Practitioner wishes to purchase from the Company and the Company wishes to supply to Practitioner, Products for the benefit of the Practitioner’s heath care practice, patients or clients.
1. Representations. Practitioner represents that he/she is a qualified healthcare or wellness provider. During the time of this agreement Practitioner shall have and maintain a valid license or certification to practice medicine or wellness for each state in which Practitioner practices medicine or wellness. Practitioner agrees to administer service, care and Products in accordance with the Company’s direction and requirements, and compliant with all applicable laws and regulatory agency requirements.
2. Services.  The Company will provide ordering and fulfillment services through its DBscript patient direct website (DBscript.com) so Practitioner's patients/clients may purchase products directly from the Company under Practitioner's direction and approval.  Practitioner will invite each patient/client to the Company’s website through email, a personalized link, or a practitioner code.  Each patient will be required to certify they are purchasing the products under Practitioner's care and supervision.  
3. Internet Sales Policy/Minimum Advertised Price (MAP).  Practitioner agrees that he/she will not resell any Products purchased from the Company to anyone other than his or her own personal patients/clients. Products may be sold on the Practitioner’s website and through its direct online store, but not through third party sites such as Amazon, eBay, etc.  Practitioner may not directly or indirectly advertise any Products or use the name of the Company or any derivative of its name in any banner or pop-up advertisements or sponsored searches, e.g. Google AdWords, Yahoo Search Marketing, Bing Search Marketing, Amazon, Walmart, eBay or any others.  Products have a minimum advertised price (MAP) of 10% over the manufacturer’s suggested retail price (MSRP).  Practitioner may not advertise Products for less than MAP (10% over MSRP) but retains the right to charge above MAP.  If Practitioner chooses to offer specials or discounts on Products at a price below MAP (10% over MSRP), the discount percentage, discounted price or discount code for Products may not be openly advertised.  Practitioner may openly display their Referral Code on their website and/or online store, however, there is to be no mention of a discount for Products associated with the referral code.  Practitioner’s failure to comply with this Policy may result in, among other things, the immediate closure of Practitioner’s wholesale account and termination of this Agreement.  Practitioner understands he/she is fully responsible for any and all costs the Company incurs as a result of breach of this agreement as well as a minimum payment of $5000 per infraction.
4. Healthcare Practitioner Certification.  Practitioner understands the Products purchased from the Company are complex products whose effects could vary from patient to patient. Practitioner acknowledges that, as a prescribing healthcare or wellness professional, Practitioner will recommend the products based solely on his/her own professional judgement, as opposed to reliance on any claim or statement made about the products by the Company, its staff or representatives.
5. Product Advice Certification. Practitioner understands the Company sells many types of Products including homeopathic products that are based on homeopathic principles and require specific homeopathic knowledge to use. Practitioner certifies and acknowledges that by prescribing or recommending any Product from the Company to his/her patient/client, he/she is legally and lawfully able to provide advice to his/ her clients/patients on the use of those Products and prescribe them based on his or her own professional judgment, and is solely responsible for the determination of Product usage. Practitioner agrees to immediately notify the Company and to cease the prescribing and recommending Products to his/her patients/clients if he/she is unable to legally and lawfully comply with this statement.
6. Practitioner Responsibility.  Practitioner is responsible for all orders made under their DBscript account and Practitioner agrees to review all orders made and confirm the patient/client is under the care of the Practitioner and the Products are appropriate for the patient/client.  Practitioner agrees to immediately notify the Company in the event a person who is not under the care of the Practitioner orders Products or a Product has not been recommended by the Practitioner and is not appropriate for the patient/client.  Practitioner must sign Exhibit A.
7. Refund Policy.  Practitioner understands as an authorized distributor of the Products, they may contact the Company and receive authorization to return unopened Product in good condition for credit to their wholesale account within 30 days of receipt of Product.  The merchandise credit may be applied to future wholesale orders.  Practitioner understands and agrees the Company does not issue refunds for product returns.  Further, Practitioner understands and acknowledges that there are limited returns/refunds available for patient/client purchases on DBscript and Practitioner will inform patients of the return policy.  No returns or refunds will be given except for Product that is faulty or damaged upon receipt.  The patient/client must contact the Company within seven days of receipt and provide the product name, lot number, and the name of their Practitioner. The Company will provide either replacement Product or Company credit for the item.
8. Patient Interaction.  Patients/Clients using the Company’s website and services will be deemed customers of the Company.  The Company does not provide health advice or product/dosage recommendations.  
9. DBscript Commission and Discounts.
(a) DBscript Commission. The Practitioner’s commission for sales on the Company’s patient direct website (DBscript.com) is calculated as 40% of the MAP.  On or before the last day of the month, the Company will issue payment to the practitioner via PayPal for the prior month’s commission on DBscript sales from his/ her patients/clients.  Practitioner shall be responsible for setting up and maintaining their account with PayPal to receive their commission payments.  Practitioner shall be responsible for any and all taxes associated with any remuneration it shall receive from the Company. Practitioner payment will be reduced for any fraudulent orders, returns, refunds and charge-backs. 
(b) Discounts.  Any discounts provided by the Practitioner to his/her patients/clients will be deducted from the Practitioner’s commission.  The maximum discount offered by the Practitioner on any product is 30 percent.
10. Termination of Agreement.  Either party may terminate this Agreement at any time for any reason or no reason at all with thirty days' advanced written notice; however, should Practitioner breach the terms of this Agreement or otherwise act in a way which may negatively impact the name or reputation of the Company, no such thirty day notice shall be required.  Examples of behavior which shall give rise to immediate termination shall include, but not be limited to, theft of Company assets,  failure to perform the duties listed on Exhibit A, arrest for crimes of moral turpitude.  Notwithstanding the termination of this Agreement, the provisions of this Agreement that continue beyond such termination shall remain in full force and effect.   Any termination of this Agreement shall occur only when both parties have been so apprised of such termination.   
11. Confidentiality.  In the performance of the service contemplated by this Agreement, Practitioner agrees to hold in strict confidence all confidential or proprietary information that it receives relating to the Company’s business, and Practitioner will not divulge or otherwise communicate such information to a third party without the Company’s prior written consent.  Confidential or proprietary information shall include all information obtained by Practitioner from the Company, and which relates to the Company’s past, present, or future business activities, including client lists, technology and operational processes and manuals, except for previously obtained or publicly disclosed information.  Further, Practitioner acknowledges that the customers submitted to the Company immediately shall become the property of the Company.    
12. Representations and Warranties.  In the performance of the service contemplated by this Agreement, Practitioner agrees that Practitioner shall not make any representations or warranties about the Company’s Products without prior written consent and direction of the Company.  Specifically, Practitioner shall comply with any and all federal and state regulations regarding statements made about the Products.    
13. Miscellaneous.
(a) Practitioner acknowledges that breach of this Agreement would cause Company to suffer irreparable harm for which monetary damages would be inadequate compensation.  Practitioner agrees that Company will be entitled to an injunction restraining any actual or threatened breach of this Agreement, or specific performance, if applicable, in addition to any monetary damages.
(b) All payments made to or for the benefit of Practitioner under this Agreement shall not be subject to withholdings for federal, state and local taxes, FICA, and other withholdings required by applicable law.  Practitioner will be personally responsible for any and all employment related taxes and shall indemnify the Company for the same.
(c) This Agreement sets forth the entire agreement of the parties with respect to the subject matter hereof, and supersedes all prior agreements, whether written or oral.  
(d) This Agreement may not be assigned by Practitioner, but the Company may assign any or all of its rights under this Agreement to any affiliate or subsidiary company of the Company, so long as the Company remains liable for the performance by that affiliate or subsidiary of the payment obligations of the Company hereunder.  Except as provided in the preceding sentences of this Section, this Agreement shall be binding upon, and inure to the benefit of, the parties and their respective personal representatives, successors and assigns.
(e) No provision of this Agreement shall be altered, amended, revoked or waived except by an instrument in writing signed by the Party sought to be charged with such amendment, revocation or waiver.
(f) No waiver of any provision of this Agreement shall be valid unless it is in writing and signed by the party against whom it is charged.
(g) The invalidity or unenforceability of any provision of this Agreement shall not affect the other provisions hereof, and this Agreement shall be construed as if such invalid or unenforceable provision were omitted.
(h) This Agreement shall be governed by and construed in accordance with the laws of the State of Utah.
IN WITNESS WHEREOF, the Parties have executed and delivered this Agreement on the dates set forth below, to be effective as of the Effective Date.  
 
EXHIBIT A 
 
BUSINESS ASSOCIATE AGREEMENT
 
This Business Associate Agreement (“Agreement”), dated July 10, 2025, is entered into by and Between (“Covered Person”) and Deseret Biologicals, Inc., a Utah corporation and its affiliate DesBio PAO, LLC, DBA DBscript (collectively, the “Business Associate”) (each a “Party” and collectively the “Parties”), and is made a part of that certain Authorized Reseller and Patient Direct Agreement (the “Reseller Agreement”) pursuant to which Business Associate provides a service or services to Covered Person that may involve the use and/or disclosure of Covered Person Protected Health Information (“PHI”).
 
NOW, THEREFORE, for good and valuable consideration, the sufficiency of which we hereby acknowledge, the Parties agree as follows:
 
I. DEFINITIONS:
A. Terms used but not otherwise defined in this Agreement shall have the same meaning as the meaning ascribed to those terms in the Health Information Portability and Accountability Act of 1996, as codified at 42 U.S.C. § 1320d (“HIPAA”), the Health Information Technology Act of 2009, as codified at 42 U.S.C.A. prec. § 17901 (“HITECH Act”), and any current and future regulations promulgated under HIPAA or the HITECH Act (HIPAA, HITECH Act and any current and future regulations promulgated under either are referred to as the “Regulations”). 
B. Protected Health Information or PHI. “Protected Health Information” or “PHI” shall have the same meaning as the term “Protected Health Information” in 45 CFR 160.103, limited to the information created or received by Business Associate from or on behalf of Covered Person, including, but not limited to electronic PHI.
 
II. OBLIGATIONS OF BUSINESS ASSOCIATE
In order that Covered Person and Business Associate may achieve and maintain compliance with the requirements of HIPAA, Business Associate agrees:
A. To only use and disclose PHI as permitted by this Agreement or as required by law. Business Associate may 1) use and disclose PHI to perform its obligations as set forth in the Reseller Agreement; (2) use PHI for the proper management and administration of Business Associate or to carry out its legal responsibilities; (3) disclose PHI for the proper management and administration of Business Associate or to carry out its legal responsibilities, if such disclosure is required by law or if Business Associate obtains reasonable assurances from the recipient that the recipient will keep the PHI confidential, use or further disclose the PHI only as required by law or for the purpose for which it was disclosed to the recipient, and notify Business Associate of any instances of which it is aware in which the confidentiality of the PHI has been breached; (4) use PHI to provide data aggregation services relating to the health care operations of Covered Person; (5) use or disclose PHI to report violations of the law to law enforcement; and (6) use PHI to create de- identified information consistent with the standards set forth at 45 CFR §164.514. Business Associate will not sell PHI or use or disclose PHI for purposes of marketing, as defined and proscribed in the Regulations.
B. To limit its uses and disclosures of, and requests for, PHI (a) when practical, to the information making up a Limited Data Set; and (b) in all other cases subject to the requirements of 45 CFR 164.502(b), to the minimum amount of PHI necessary to accomplish the intended purpose of the use, disclosure or request;
C. To use appropriate administrative, physical and technical safeguards to protect the confidentiality, integrity and availability of the PHI in compliance with the Regulations.
D. To require all of its subcontractors and agents that receive, use or have access to PHI to agree, in writing, to adhere to the same restrictions and conditions on the use or disclosure of PHI that apply to the Business Associate pursuant to this Agreement;
E. Upon reasonable notice and prior written request, to make available during normal business hours at Business Associate’s offices all records, books, agreements, internal practices, policies and procedures relating to the use or disclosure of PHI to the Office of the Secretary, Department of Health and Human Services, in a time and manner designated by the Secretary, for purposes of determining the Covered Person’s compliance with the Regulations, subject to attorney-client and other applicable legal privileges;
F. To provide documentation regarding any disclosures by Business Associate that would have to be included in an accounting of disclosures to an Individual under 45 CFR 164.528 (including without limitation a disclosure permitted under 45 CFR 164.512) and the HITECH Act, within a reasonable amount of time of receipt of a request from Covered Person;
G. If, and to the extent that Business Associate possesses an applicable Designated Record Set, within a reasonable amount of time of receipt of a request from the Covered Person for the amendment of an individual's PHI contained in the Designated Record Set, Business Associate shall provide such information to the Covered Person for amendment and shall also incorporate any such amendments in the PHI maintained by Business Associate as required by 45 C.F.R. 164.526.
H. Subject to Section III.C.2. of this Agreement, return to the Covered Person or destroy, within thirty (30) days of  the termination of this Agreement, any and all PHI in its possession and retain no copies (which for purposes of this Agreement shall include without limitation destroying all backup tapes and permanently deleting all electronic PHI).
I. To mitigate, to the extent practicable, any harmful effects from any use or disclosure of PHI by Business Associate not permitted by this Agreement.
J. Business Associate agrees to notify the designated Privacy Official of the Covered Person of any use or disclosure of PHI by Business Associate not permitted by this Agreement, any Security Incident involving electronic PHI, and any Breach of Unsecured Protected Health Information within five (5) business days.
1. Business Associate shall provide the following information to Covered Person within ten (10) business days of discovery of a breach except when despite all reasonable efforts by Business Associate to obtain the information required, circumstances beyond the control of the Business Associate necessitate additional time. Under such circumstances Business Associate shall provide to Covered Person the following information as soon as possible and without unreasonable delay, but in no event later than thirty (30) calendar days from the date of discovery of a breach:
a. the date of the breach;
b. the date of the discovery of the breach;
c. a description of the types of unsecured PHI that were involved;
d. identification of each individual whose unsecured PHI has been, or is reasonably believed to have been, accessed, acquired, or disclosed; and
e. any other details necessary to complete an assessment of the risk of harm to the individual.
2. Covered Person will be responsible to provide notification to individuals whose unsecured PHI has been disclosed, as well as the Secretary and the media, as required by Sec. 13402 of the HITECH Act, 42 U.S.C.A.§ 17932;
3. Business associate agrees to pay actual costs for notification and of any associated mitigation incurred by Covered Person, such as credit monitoring, if Covered Person determines that the breach is significant enough to warrant such measures.
4. Business associate agrees to establish procedures to investigate the breach, mitigate losses, and protect against any future breaches, and to provide a description of these procedures and the specific findings of the investigation to Covered Person in the time and manner reasonably requested by Covered Person.
5. The parties agree that this section satisfies any notices necessary by Business Associate to Covered Person of the ongoing existence and occurrence of attempted but Unsuccessful Security Incidents (as defined below) for which no additional notice to Covered Person shall be required. For purposes of this Agreement, “Unsuccessful Security Incidents” include activity such as pings and other broadcast attacks on Business Associate’s firewall, port scans, unsuccessful log-on attempts, denials of service and any combination of the above, so long as no such incident results in unauthorized access, use or disclosure of electronic PHI.
 
III. RED FLAG RULES COMPLIANCE
The parties understand and agree that in connection with Business Associate’s performance under the Reseller Agreement, Business Associate may maintain Covered Person “Covered Accounts” as defined in the Identity Theft Red Flags rules published by the Federal Trade Commission at 61 CFR part 681 (the “Red Flag Rules”). Each party warrants that it is familiar with the requirements of the Red Flag Rules, and will comply with the Red Flag Rules in connection with their respective performance under the Reseller Agreement. Business Associate agrees to promptly report to Covered Person any incidents of which it becomes aware involving Covered Account of Covered Person that Business Associate reasonably believes involve identity theft. Business Associate also agrees to provide assistance to Covered Person as reasonably necessary for Covered Person to respond to any identity theft incidents related to Business Associate’s services under the Reseller Agreement.
 
IV. TERM AND TERMINATION:
A. Term. This Agreement shall become effective on the date of execution of a Service.
B. Agreement, and shall terminate upon the termination or expiration of all Reseller Agreement(s). Notwithstanding the foregoing, obligations imposed on either party pursuant to the HITECH Act must be complied with only when the particular provisions referenced become effective or compliance becomes required, whichever is later.
C. Termination for Cause. Either Party may immediately terminate this Agreement and the Reseller Agreement(s) if such Party makes the determination that the other Party has breached a material term of this Agreement. Alternatively, the terminating Party may choose to provide the other Party with thirty (30) days written notice of the existence of an alleged material breach and an opportunity to cure the breach. If termination is not feasible, the terminating Party shall report the breach to the Secretary.
D. Effect of Termination. 1. Upon termination or expiration of this Agreement, Business Associate agrees to return to Covered Person or destroy all PHI in the possession of Business Associate and/or in the possession of any subcontractor or agent of Business Associate (including without limitation destroying all backup tapes and permanently deleting all electronic PHI) and to retain no copies of the PHI. 2. In the event that returning or destroying the PHI is infeasible, Business Associate shall provide to Covered Person a written statement that it is infeasible to return or destroy the PHI and describe the conditions that make return or destruction of the PHI infeasible. Upon mutual agreement by the Parties that return or destruction of the PHI is infeasible; Business Associate shall extend the protections of this Agreement to such PHI and limit further uses and disclosures of such PHI to those purposes that make the return or destruction infeasible, for so long as Business Associate maintains the PHI.
 
V. INDEMNIFICATION:
Business Associate agrees to indemnify, defend and hold harmless Covered Person and its respective employees, directors, officers, subcontractors, agents or other members of its workforce (each of the foregoing hereinafter referred to as “Indemnified Party”) against all actual and direct losses suffered by the Indemnified Party and all liability to third parties arising from or in connection with any breach of this Agreement or from any acts or omissions related to this Agreement by Business Associate or its employees, directors, officers, subcontractors, agents or other members of its workforce. Accordingly, on demand, Business Associate shall reimburse any Indemnified Party for any and all actual and direct losses, liabilities, lost profits, fines, penalties, costs or expenses (including reasonable attorneys’ fees) which may for any reason be imposed upon any Indemnified Party by reason of any suit, claim, action, proceeding or demand by any third party which results from the Business Associate’s acts or omissions hereunder. Business Associates’ obligation to indemnify any Indemnified Party shall survive the expiration or termination of this Agreement.
 
VI. MISCELLANEOUS:
A. Amendments. This Agreement may not be modified, nor shall any provision hereof be waived or amended, except in a writing duly signed by authorized representatives of the Parties. The parties agree to take such action as is necessary to amend this Agreement from time to time as is necessary to achieve and maintain compliance with the requirements of the Regulations.
B. Survival. The respective rights and obligations of Business Associate and Covered Person set forth in Sections III and IV shall survive termination of this Agreement.
C. Regulatory References. Any reference herein to a federal regulatory section within the Code of Federal Regulations shall be a reference to such section as it may be subsequently updated, amended or modified.
D. Interpretation. Any ambiguity in this Agreement shall be resolved to permit covered entities to comply with HIPAA.
E. Notices. Any notices given hereunder shall be in writing and addressed as follows:
 
 
 
Covered Person / Customer
 		 Deseret Biologicals, Inc, a Utah corporation
DesBio PAO, LLC, DBA DBscript, a Utah limited liability company
Business Associate:
Deseret Biologicals, Inc
DBscript

Leave this empty:

Signature arrow sign here

Signed by Ashlee Taylor
Signed On: March 16, 2025


Signature Certificate
Document name: 2025 DesBio Authorized Reseller and Patient Direct with Business Associates Agreement for Existing User
lock iconUnique Document ID: b917cab1c7b503aa04e3b997b7c8d5eafb2e6966
Timestamp Audit
December 31, 2023 1:21 pm (MST) MDT2025 DesBio Authorized Reseller and Patient Direct with Business Associates Agreement for Existing User Uploaded by Ashlee Taylor - [email protected] IP 79.127.185.212
December 31, 2023 3:03 pm (MST) MDTDesBio Applications - [email protected] added by Ashlee Taylor - [email protected] as a CC'd Recipient Ip: 2a02:26f7:f6ee:4000:b000::38
January 2, 2024 11:51 am (MST) MDTDesBio Applications - [email protected] added by Ashlee Taylor - [email protected] as a CC'd Recipient Ip: 2a09:bac2:c697:dcd::160:96
Audit trial Qr code
This audit trail report provides a detailed record of the online activity and events recorded for this document.
https://desbio.com/
Audit Trail Serial# 1f453b82abcbcec888df9d4db76d40aa