Privacy Policy & Notice of Privacy Practices

Your Information. Your Rights. Our Responsibilities.

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

Who We Are

Constellation Health provides telehealth services in partnership with OpenLoop Healthcare Partners, PC and its affiliated entities. For purposes of complying with HIPAA, we follow the privacy practices of the OpenLoop Affiliated Covered Entity (ACE). ACE participants may share your protected health information (PHI) with each other as needed to carry out treatment, payment, and health care operations (TPO).

Your Rights

When it comes to your health information, you have certain rights:

• Get a copy of your medical records: You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We will provide a copy or summary within 30 days of your request.
• Correct your medical record: You can ask us to correct health information about you that you think is incorrect or incomplete. We may say "no" to your request, but we'll tell you why in writing within 60 days.
• Request confidential communications: You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will say "yes" to all reasonable requests.
• Ask us to limit what we use or share: You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request.
• Get a list of those with whom we've shared information: You can ask for a list (accounting) of the times we've shared your health information for six years prior to the date you ask.
• Get a copy of this privacy notice: You can ask for a paper copy of this notice at any time.
• Choose someone to act for you: If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
• File a complaint: You can complain if you feel we have violated your rights by contacting us or the U.S. Department of Health and Human Services Office for Civil Rights.

Your Choices

For certain health information, you can tell us your choices about what we share:

• Share information with your family, close friends, or others involved in your care
• Share information in a disaster relief situation

We never share your information unless you give us written permission for:

• Marketing purposes
• Sale of your information
• Most sharing of psychotherapy notes

How We Use and Disclose Your Information

Treatment

We can use your health information and share it with other professionals who are treating you. For example, a doctor treating you for an injury asks another doctor about your overall health condition.

Running Our Organization

We can use and share your health information to run our practice, improve your care, and contact you when necessary. We may send you appointment reminders by email or text. We use artificial intelligence (AI) and machine learning tools to analyze health information to improve our services and clinical workflows.

Billing for Services

We can use and share your health information to bill and get payment from health plans or other entities.

Other Permitted Uses

We are allowed or required to share your information for:

• Public health and safety issues (preventing disease, reporting abuse)
• Research purposes
• Compliance with law
• Responding to organ and tissue donation requests
• Working with a medical examiner or funeral director
• Workers' compensation, law enforcement, and government requests
• Responding to lawsuits and legal actions

Our Responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this notice and give you a copy of it.
• We will not use or share your information other than as described here unless you tell us we can in writing.

Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, date of birth, address
• Health Information: Medical history, symptoms, medications, allergies, treatment records
• Payment Information: Credit card numbers, billing address
• Device Information: IP address, browser type, device identifiers
• Usage Information: How you interact with our Services

Data Security

We implement appropriate technical and organizational security measures to protect your personal and health information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Medical records are retained in accordance with applicable state and federal laws.

Third-Party Services

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

Changes to This Notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request and on our website.

Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

Constellation Health Privacy Office
Email: support@constellationhealth.app

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.