Privacy Policy
Effective Date: August 22nd, 2025
We are committed to protecting your privacy and safeguarding the confidentiality of your health information. This Privacy Policy explains how we collect, use, and share personal information in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable laws.
Information We Collect
We may collect the following information when you interact with us:
- Personal identifiers such as your name, email address, and phone number.
- Information you provide when communicating with us or completing forms.
- Payment information necessary to process transactions.
- Health-related information, when provided, for purposes of coordinating your care.
How We Use Your Information
We use your information only as permitted by law, including:
- To provide and improve our services.
- To communicate with you about your care, appointments, or related services.
- To process payments and manage billing.
- To comply with federal and state legal obligations.
Sharing Your Information
We will never sell your personal or health information. We may share your information in the following ways:
- With healthcare providers involved in your care.
- With trusted service providers or contact management systems, such as HubSpot (for communications) and payment processors, who assist in our business operations.
- As required by law, such as for public health reporting or to comply with a valid legal process.
All third parties handling your health information are required by contract and law to protect its confidentiality and security.
HIPAA Notice of Privacy Practices
When applicable, our use and disclosure of your health information is also governed by our HIPAA Notice of Privacy Practices. This includes additional details about your rights and how we safeguard your protected health information (PHI). You may request a copy of this Notice at any time by contacting us.
Our Responsibilities
We are required by law to:
- Maintain the privacy and security of your protected health information (PHI).
- Give you this Notice of our legal duties and privacy practices.
- Notify you if a breach occurs that may have compromised the privacy or security of your information.
- Follow the terms of this Notice.
How We May Use and Disclose Your Health Information
We may use and share your information as follows:
- For Your Treatment: To provide, coordinate, or manage your healthcare with other providers involved in your care.
- For Payment: To bill and collect payment from you, your insurance company, or a third party.
- For Healthcare Operations: To support daily business functions such as quality improvement, staff training, and compliance activities.
Other uses and disclosures permitted or required by law include:
- Public health reporting (such as disease prevention or reporting abuse/neglect).
- Health oversight activities (such as audits or investigations).
- Legal requirements (if ordered by a court or law).
- To prevent or reduce a serious threat to health or safety.
For any uses not listed above, we will obtain your written authorization before using or sharing your information.
Your Rights
You have the right to:
- Access your records: Request to see or get a copy of your medical record.
- Request a correction: Ask us to correct information you believe is inaccurate or incomplete.
- Request confidential communications: Ask us to contact you in a specific way (for example, at a different address or phone number).
- Limit what we use/share: Request restrictions on how we use or share your information (though we may not always be able to agree).
- Get a list of disclosures: Request a record of certain times we shared your information, who we shared it with, and why.
- Receive a paper copy of this Notice: You may request a paper copy at any time.
To exercise these rights, please contact us using the details below.
Our Pledge
We will not sell or use your personal health information for marketing purposes without your explicit written permission. We will never share your information unless permitted or required by law.
Changes to This Notice
We may change the terms of this Notice at any time, and the changes will apply to all information we have about you. The new Notice will be available upon request and posted at our office or website.
Data Security
We maintain administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, or destruction.
Contact Us
If you have questions about this Privacy Policy or your rights under HIPAA, please contact:
Upwell Ventures
woundcare@upwellventures.com