Privacy Policy

We may use and disclose your PHI for the following purposes:

Treatment: to provide, coordinate, or manage your healthcare and related services, including communicating with other healthcare providers about your treatment and coordinating your care.

Payment: to obtain payment for services, including verifying coverage, billing and collection, and sharing PHI with other providers, insurers, or collection agencies.

Healthcare operations: for quality assessment and improvement, case management, accreditation, licensing, credentialing, and conducting or arranging medical reviews, audits, or legal services.

As required by law: when required by federal, state, or local law.

Public health and safety: to prevent or control disease, injury, or disability; to report child abuse or neglect; to report reactions to medications or product problems; and to notify persons who may have been exposed to a communicable disease.

Health oversight activities: to agencies for activities authorized by law, such as audits, investigations, inspections, and licensure.

Judicial and administrative proceedings: in response to a court or administrative order, subpoena, discovery request, or other lawful process.

Law enforcement: such as reporting certain wounds or injuries, or complying with a court order, warrant, or other legal process.

Research: for research approved by an institutional review board with privacy protections in place.

Organ and tissue donation: to organizations that handle organ procurement, transplantation, or donation.

Workers' compensation: for programs that provide benefits for work-related injuries or illnesses.

Military and veterans, and inmates: as required by military authorities, or to a correctional institution or law-enforcement official with custody of you.

Right to inspect and copy your PHI that we maintain, with certain exceptions (a reasonable fee may apply for copying, mailing, or supplies).

Right to amend PHI you believe is incorrect or incomplete; we may deny the request in certain cases, such as when the information is accurate and complete or we did not create it.

Right to an accounting of certain disclosures of your PHI made in the past six years (excluding disclosures for treatment, payment, or healthcare operations and certain others).

Right to request restrictions on our use or disclosure of your PHI for treatment, payment, or healthcare operations; we are not required to agree but will consider your request.

Right to request confidential communications about your PHI in a certain way or at a certain location.

Right to a paper copy of this Notice, even if you agreed to receive it electronically.

Right to be notified if we discover a breach of your PHI.

To exercise these rights, submit a written request to our Privacy Officer using the contact information below.

We are committed to protecting the privacy of your PHI and will ensure that any electronic transmission of PHI complies with the HIPAA Privacy Rule (45 CFR 164), including the use of Secure Sockets Layer (SSL) or equivalent technology and adherence to applicable security standards for online transmissions of PHI.

We reserve the right to change this Notice; a revised Notice will be effective for PHI we already have about you as well as information we receive in the future. We will post the current Notice on our website with its effective date shown.

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

To exercise any of your rights, or for questions about this Notice or our privacy practices, contact our Privacy Officer at: Womea LLC, 100 Cliff Drive, Sag Harbor, NY 11963 · womea.com · care@womea.com.

This Notice is provided in accordance with the U.S. Department of Health and Human Services' model Notice of Privacy Practices and is applicable across all US states.

Certain states provide additional privacy protections. California residents have additional rights, including:

Right to access your PHI in a readily usable electronic format, plus any additional information required by California law.

Right to restrict certain disclosures of PHI to health plans where you paid out of pocket in full for a specific item or service.

Confidentiality of Medical Information Act (CMIA): California residents are protected by CMIA, which provides additional protections; we comply with CMIA in addition to HIPAA.

Right to request that your PHI not be used for marketing or sold to third parties without your authorization.

Minor's rights: minors (under 18) may request that information about certain sensitive services (such as reproductive health, mental health, or substance use treatment) not be disclosed to a parent or guardian without consent.

We comply with applicable state-specific privacy laws related to PHI. Examples include:

New York: additional protections for HIV-related information, mental health records, and genetic testing results, with written consent obtained before disclosing such information even for treatment, payment, or healthcare operations.

Texas: the Texas Medical Privacy Act offers protections beyond HIPAA, including consent for certain disclosures, additional safeguards for electronic PHI, specific PHI-destruction requirements, and protections for mental health and substance use records.

Florida: additional protections for mental health records, HIV/AIDS-related information, and substance abuse treatment records, with written consent before disclosure and specific security measures for electronic PHI.

Illinois: protections for mental health records, HIV/AIDS-related information, and genetic testing results, with written consent before disclosure and notification of any unauthorized access to electronic PHI.

Massachusetts: protections for mental health records, HIV/AIDS-related information, and genetic testing results, with written consent and specific security measures for electronic PHI.

If you reside in another state, please consult your state's privacy laws or contact our Privacy Officer for information about additional rights you may have.

Separate from PHI, when you browse our website we collect limited technical data (such as device and browser information) and use privacy-friendly analytics. Google Analytics loads only after you accept analytics cookies via our cookie banner; you may decline, and you can manage marketing emails via the unsubscribe link. We do not sell your personal information or PHI.