HIPAA Policy

Read This First

[CRITICAL: whether HIPAA applies to your company at all depends on how your business is set up. If the licensed professionals are covered entities and you handle their protected health information, you are likely a business associate and need signed Business Associate Agreements with each of them, plus a Security Rule risk analysis. If you bill insurance, the analysis changes again. A healthcare lawyer has to settle this before you publish this page. Do not publish a HIPAA policy you have not had reviewed — claiming compliance you don't have is its own violation.]

What Protected Health Information Means

Protected health information is health information that can be tied to you. On this site that includes your screening answers, your appointment records, and the letter itself.

How We Use and Disclose It

We use your health information to provide the service: matching you with a professional, running your visit, and delivering your letter. We disclose it to that professional and to vendors under written agreements that limit what they may do with it.

We do not use or disclose your health information for marketing or advertising, and we do not sell it.

Your Rights

• See and get a copy of your records
• Ask for a correction if something is wrong
• Get a list of certain disclosures
• Ask us to limit how your information is used
• Ask us to contact you a particular way
• Get a written notice if your information is breached

Records of your clinical visit are held by the licensed professional who treated you. Requests for those go to them, and we will tell you how to reach them.

How We Protect It

• Encryption in transit and at rest
• Access limited to staff who need it
• Signed agreements with every vendor that touches health information
• Written agreements with each licensed professional in our network
• [Add your actual safeguards, and keep a documented risk analysis]

Complaints

Email support@onlineesaletter.com to complain. You can also file with the US Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing.