HIPAA Notice

About This Notice

This page explains how the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) applies to your use of the Service operated by VitalHaus LLC(“VitalHaus”).

VitalHaus Is Not a HIPAA Covered Entity

VitalHaus provides the technology platform you use to access telehealth services. VitalHaus is not a “covered entity” under HIPAA. Information you provide to VitalHaus for purposes of creating and maintaining your account — such as your name, email address, shipping address, and phone number — is not “protected health information” under HIPAA.

However, in connection with the medical services you receive through the Service, you may share information that is protected under HIPAA or under applicable state privacy laws. That information is governed by your Medical Group's Notice of Privacy Practices, not this page.

Your Medical Group's Notice of Privacy Practices

The Medical Groups and Providers who deliver medical services through the Service are separate from VitalHaus. They have adopted their own Notice of Privacy Practices (“Notice of Privacy Practices” or “NPP”) that describes how they collect, use, and disclose your protected health information.

You receive the Medical Group's Notice of Privacy Practices when you create your patient account and complete your first medical consultation through the Service. By accessing or using any part of the Service, you acknowledge receipt of the Notice of Privacy Practices from your Medical Group and Provider(s).

If you have questions about the Medical Group's Notice of Privacy Practices, or you need a copy, please contact your Medical Group through the patient portal or contact us at support@vitalhaus.com and we will help you obtain one.

VitalHaus as a Business Associate

In some cases, VitalHaus may act as a “business associate” of a Medical Group or Pharmacy under HIPAA. In that role, VitalHaus may receive, store, or transmit protected health information on behalf of the Medical Group or Pharmacy. When VitalHaus acts as a business associate, it uses and discloses that information only in accordance with the applicable Business Associate Agreement and HIPAA.

What Is Protected Information

For purposes of this notice and the VitalHaus Privacy Policy, “Protected Information” includes:

• “Protected health information” as defined by HIPAA, when applicable
• Health or medical information that is subject to specific protections under applicable state laws

Protected Information does not include information that has been de-identified in accordance with HIPAA or applicable state laws.

State Privacy Laws

In addition to HIPAA, several states have laws that protect consumer health data outside of HIPAA. These laws may give you additional rights — including rights to access, correct, delete, and withdraw consent for the use of your consumer health data. For information about how VitalHaus handles consumer health data under these state laws, please see our Consumer Health Data Privacy Policy.

How to Reach Us

If you have any questions about this HIPAA Notice or about how VitalHaus handles your information:

Email: privacy@vitalhaus.com

Mail:

If you have questions specifically about the medical care you receive or about the Medical Group's privacy practices, please contact your Medical Group through the patient portal.

Note: This page explains how HIPAA applies to VitalHaus's role as a technology platform. It is not the same as your Medical Group's Notice of Privacy Practices, which is a separate document delivered to you at the start of your patient relationship with the Medical Group.

Draft — attorney review required. This page was adapted from the Patient Acquisition HIPAA Notice template. It must be reviewed and approved by a licensed attorney before publication.