Privacy Practices

WELLNESS EXPRESS, L.L.C.

NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.  PLEASE REVIEW IT CAREFULLY. 

Wellness Express, LLC is committed to protecting the privacy of your health information. We have policies and safeguards in place to protect your privacy. Wellness Express, LLC is also required by state and federal laws to protect the confidentiality of your health information, to provide you with this Notice of Privacy Practices (“Notice”), and to notify affected individuals following a breach of unsecured protected health information     This notice is effective as of July 1, 2015 and shall remain in effect until revised. Why should I read this? This notice describes how we use the information that we collect about you during a wellness or immunization event. It tells you about your rights.

How is my information used? The confidential health information that we collect as we provide our wellness or immunization services is called “protected health information” or “PHI.” The most common reason why we may use or disclose your PHI is for treatment, payment or health care operations. For example, we may provide you with your health screening results, use your PHI to collect payment or verify your insurance. Finally we could use your PHI for our health care operations; to evaluate and improve the quality of our services, to evaluate employee performance or to store your records. We routinely use your health information for these purposes without any special permission. In addition to the use of your PHI for treatment, payment, or healthcare operations, you may give us written authorization to use or disclose your PHI for any purpose.     If you give us an authorization, you may revoke it in writing at any time. Your revocation will not affect any use or disclosures permitted by your authorization while it was in effect. We do not use or disclosure your PHI for marketing purposes and we do not sell your PHI. What can you do without my authorization? We can only share your PHI without your authorization when:

  • It is Required by Law – including, but not limited to court orders, warrants, subpoenas, discovery requests, or other lawful process;
  • Public Health Activities – we may use or disclose your PHI to a public health authority for public health activities, such as preventing the spread of communicable disease.
  • To Avert a Serious Threat to Health or Safety – We may disclose your PHI to the extent necessary to avert a serious threat to health or safety.
  • Abuse or Neglect – We may disclose your PHI to a government authority if we reasonably believe that you are a possible victim of abuse, neglect, or domestic violence, or the possible victim of other crimes.

 What are my rights? Except in the situations described above, we will not use or disclose your PHI without your written authorization. You do not have to sign the authorization and you may revoke your authorization in writing at any time unless we have already acted in reliance upon it. You also have the following rights regarding the use and disclosure of your PHI:

  • You may request that we restrict the use or disclose of your PHI by doing so in writing. Although we are not always required to grant a restriction, those granted will be upheld. You can also decide to end a restriction at any time.
  • You may ask to review your PHI by requesting to do so in writing. We may charge a fee for copying and require payment in advance.
  • You may request that we amend your records if you think they are incorrect or incomplete. If the amendment is valid under 45 C.F.R. § 164.526, we will amend the record.
  • If you have paid out of pocket, in full, for your screenings or immunizations, you may request that we restrict certain PHI from disclosure to health plans.
  • If a breach of your unsecured PHI occurs, you will receive a written notification of the details of the breach at the address we have on file for you.
  • You may receive an accounting of the disclosures we have made of your PHI, other than those for treatment, payment, or health care operations, disclosures required by law, or disclosures for which we have your authorization.
  • You have the right to request that communication containing PHI be conducted in an alternate way or at an alternate location.
  • If you received this notice by electronic means, you are entitled to request a paper copy.

 

How do I contact you in the future? If you wish to see or obtain a copy of your PHI, see an accounting of any disclosures we have made of your PHI or ask to amend your PHI or revoke your authorization, please contact Wellness Express, LLC at (337) 988-1138 for directions on how to make these requests. What if I think my privacy has not been protected? If you believe that your privacy has not been protected, you believe there has been a breach of the security of your PHI, or you wish to have additional information, please contact Wellness Express, LLC at (337) 988-1138 or you can contact the Secretary of Health and Human Services. You will not be retaliated against if you file a complaint. The privacy of your PHI is important to us. Wellness Express, LLC welcomes your questions and input for our continuous improvement process.

Wellness Express, LLC is required to abide by the terms of this notice; however, it reserves the right to change the terms of this Notice at any time. If we change the Notice, a revised Notice will be available at our service sites and on our website atwww.wellnessexpress.org. The changes will apply to all of your PHI, even if we received the PHI before the change.

THIS POLICY EXPLAINS WHAT INFORMATION WE COLLECT WHEN YOU USE WELLNESS EXPRESS’ SITES, SERVICES, MOBILE APPLICATIONS, PRODUCTS, AND CONTENT (“SERVICES”). IT ALSO HAS INFORMATION ABOUT HOW WE STORE, USE, TRANSFER, AND DELETE THAT INFORMATION.

Information We Collect & How We Use It. Wellness Express doesn’t make money from ads. So we don’t collect data in order to advertise to you. The tracking we do at Wellness Express is to make our product work as well as possible. 

To give you the best possible experience in using Wellness Express, we collect information from your interactions with our Services. Some of this information, you actively tell us (such as your email address, which we use to track your account or communicate with you). Other information, we collect based on actions you take while using Wellness Express, such as what pages you view (including how much of a given page and for how long) and your use of product features. This information includes records of those interactions, your Internet Protocol address, information about your device (such as device or browser type), and referral information (how you got to a particular page).

We use this information to:

  • provide, test, improve, promote and personalize the Services
  • fight spam and other forms of abuse
  • generate aggregate, non-identifying information about how people use the Services

We will never publish something through one of your third-party accounts without your express permission.

Information Disclosure. Wellness Express won’t transfer information about you to third parties for the purpose of providing or facilitating third-party advertising to you. We won’t sell information about you to a third-party.

We may transfer your account information with third parties in some circumstances, including: (1) with your consent; (2) to a service provider or partner who meets our data protection standards; (3) with academic or non-profit researchers, with aggregation, anonymization, or pseudonymization; (4) when we have a good faith belief it is required by law, such as pursuant to a subpoena or other legal process; (5) when we have a good faith belief that doing so will help prevent imminent harm to someone.

Data Storage. Wellness Express uses third-party vendors and hosting partners for hardware, software, networking, storage, and related technology we need to run Wellness Express. We maintain two types of logs: server logs and event logs. By using the Services, you authorize Wellness Express to transfer, store, and use your information in the United States.

Third-Party Embeds. Some of the content that you see displayed on Wellness Express is not hosted by Wellness Express. These “embeds” are hosted by a third-party and embedded in a Wellness Express page, so that it appears to be part of that page. For example: YouTube or Vimeo videos. These files send data to the hosted site just as if you were visiting that site directly (for example, when you load a Wellness Express post page with a YouTube video embedded in it, that video appears because of a pointer to files hosted by YouTube, and in turn YouTube receives data about your activity, such as your IP address and how much of the video you watch).

Wellness Express doesn’t control what data third parties collect in cases like this, or what they ultimately do with it. So, third-party embeds on Wellness Express are not covered by this Privacy Policy. They are covered by the privacy policy of the third-party service (so, when you watch a YouTube video embedded in a Wellness Express post, the use of data about your interactions with the video would be covered by YouTube’s privacy policy).

Tracking & Cookies. We use browser cookies and similar technologies to recognize you when you return to our Services. We use them in various ways, for example to evaluate email effectiveness. 

Wellness Express saves data about the URLs you visit on Wellness Express (an optional feature that you may choose to use or decline to use), but we do not otherwise track your visits or activities off Wellness Express Services. We track your interactions within the Wellness Express Services.

Some third-party services that we use to provide the Service, such as Google Analytics, may place their own cookies in your browser. This Privacy Policy covers use of cookies by Wellness Express only and not the use of cookies by third parties.

Modifying or Deleting Your Personal Information

If you have a Wellness Express account, you can access, modify or export your personal information, or delete your account by emailing us.

Data Security. We use encryption (HTTPS/TLS) to protect data transmitted to and from our site. However, no data transmission over the Internet is 100% secure, so we can’t guarantee security. You use the Service at your own risk, and you’re responsible for taking reasonable measures to secure your account.

Email from Wellness Express. Sometimes we’ll send you emails about your account, service changes or new policies. When you interact with an email sent from Wellness Express (such as opening an email or clicking on a particular link in an email), we may receive information about that interaction.

We won’t email you to ask for your password or other account information.